{ "data": { "a": { "slug": "buffer", "name": "Buffer API + MCP", "vendor": "Buffer", "vendorUrl": "https://buffer.com", "kind": "http-api", "category": "social-media", "summary": "Buffer's GraphQL API for scheduling, publishing and analysing social media posts, available on every plan including Free, with a hosted MCP server and a CLI.", "url": "https://www.anchorterminal.com/tools/buffer", "markdownUrl": "https://www.anchorterminal.com/tools/buffer.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/buffer.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/buffer.json", "dns": "buffer.grade.anchorterminal.com", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.buffer.com", "packages": [ { "registry": "npm", "name": "@bufferapp/cli" } ], "auth": "mixed", "authNotes": "Personal API key as a Bearer token for your own account (it sees every organisation you belong to, no per-organisation scoping). App Clients acting for other users use OAuth 2.0 authorisation code with PKCE. The hosted MCP takes OAuth in Claude and other clients, or the API key as a Bearer header.", "pricing": "freemium", "pricingNotes": "API included on every plan. Free $0 (3 channels, 10 scheduled posts a channel, 1 API key, 1,000 requests per channel a month up to 3,000). Essentials $5 a channel a month billed yearly ($60 a year, 3 keys, 3,000 requests per channel a month up to 30,000). Team $10 a channel a month billed yearly ($120 a year, 5 keys, 10,000 requests per channel a month up to 100,000). Channels above 10 cost less. 14-day trial on paid plans with no card; without payment details the account drops to Free (https://buffer.com/pricing).", "priceSummary": "$5 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402 in developer docs, llms-full.txt or pricing (checked 2026-09-30).", "endpoints": [] }, "toolCount": 19, "popularity": { "githubStars": null, "npmWeekly": 687, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://developers.buffer.com", "llmsTxt": "https://developers.buffer.com/llms.txt", "capabilities": [ "social.post", "social.schedule", "social.analytics" ], "tags": [ "hosted", "freemium", "free-tier", "no-card", "mcp", "llms-txt", "closed-source", "typescript" ], "lastRelease": "2026-10-22", "graded": true, "anchor": { "graded": true, "score": 67.9, "grade": "B", "agentReady": false, "rank": 408, "ranked": true, "rankOf": 1524, "categoryRank": 2, "methodology": "0.8", "run": "2026-10-01", "scores": { "ergonomics": 65, "maintenance": 73, "payments": 45, "reliability": 75, "schema": 86, "security": 56, "transparency": 75 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-02" }, "negative": 0, "verdict": "API, MCP and CLI on the free plan with no card, with typed GraphQL errors, an exact Retry-After on 429s and a schema changelog updated most weeks. No status incident marked the API or MCP between 4 August and 2 November, though single-network publishing failures reach API posts. No SDKs, idempotency keys or tool annotations.", "bestFor": "Personal and small-team posting where the free plan and OAuth MCP are enough.", "strengths": [ "API, MCP and CLI on the free plan, with 3 channels and up to 3,000 requests a month and no card", "Hosted MCP with OAuth 2.0, PKCE and 11 scopes, including read-only ones such as posts:read", "429 responses carry an exact Retry-After and RateLimit headers and don't use up quota", "Typed GraphQL schema, a schema changelog with 31 dated days from 4 August to 22 October 2026 and @deprecated removal dates", "Security reporting route with a GPG key and bug rewards" ], "weaknesses": [ "Free plan quotas of 150 requests per 15 minutes and 1,000 per channel a month, shared across keys and MCP connections", "No media upload, every file has to sit at a public URL you host", "The changelog shows types removed on 2 and 25 September 2026 despite the additive-only promise", "No official SDKs, no tool annotations and no idempotency keys", "Single-network publishing incidents (Pinterest, TikTok, Google Business Profile, Mastodon) between August and October 2026" ], "agentNotes": [ "Call `{ account { organizations { id } } }` first, then list channels for an organisation before posting", "Include `... on MutationError` in every mutation, since errors come back with HTTP 200", "On 429, wait Retry-After plus a few seconds of jitter, and read the RateLimit headers to pace requests before the limit", "Pass images and video as public direct URLs, not preview or login-gated links", "Use saveToDraft or addToQueue so nothing publishes by accident, because delete_post can't be undone" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.8", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.9 } ], "editorialScores": { "ergonomics": 65, "maintenance": 73, "payments": 45, "reliability": 75, "schema": 86, "security": 56, "transparency": 66 }, "provenanceScore": 84, "checked": { "categories": { "ergonomics": "2026-11-02", "maintenance": "2026-11-02", "payments": "2026-11-02", "reliability": "2026-11-02", "schema": "2026-11-02", "security": "2026-11-02", "transparency": "2026-11-02" }, "last": "2026-11-02", "lastMoved": "2026-11-13", "oldest": "2026-11-02", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://api.buffer.com -H \"Authorization: Bearer $BUFFER_API_KEY\" \\\n -H \"content-type: application/json\" -d '{\"query\":\"{ account { id organizations { id name } } }\"}'", "claudeCode": "claude mcp add --transport http buffer https://mcp.buffer.com/mcp" }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/buffer" }, "area": "communication", "unitPrices": [ { "item": "Essentials plan", "unit": "month", "usd": 5, "note": "per channel, billed yearly ($60)" }, { "item": "Team plan", "unit": "month", "usd": 10, "note": "per channel, billed yearly ($120)" } ], "provenance": { "legalEntity": "Buffer, Inc.", "domain": "buffer.com", "domainRegistered": "1996-10-28", "domainNote": "buffer.com was registered in 1996, long before Buffer bought it.", "endpointOnVendorDomain": true, "terms": "https://buffer.com/legal", "privacy": "https://buffer.com/legal#privacy-policy", "statusPage": "https://status.buffer.com", "changelog": "https://developers.buffer.com/changelog.html", "securityTxt": "none", "checked": "2026-09-30", "score": 84 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/buffer.json", "live": { "slug": "buffer", "probe": { "target": "https://api.buffer.com", "method": "get", "lastAt": "2026-11-13T23:58:34.997153129Z", "lastOk": true, "lastStatus": 401, "lastMs": 305, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 151, "p95ms24h": 345, "samples24h": 239, "samples30d": 7892, "days": [ { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 248, "ok": 248 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 243, "ok": 243 }, { "date": "2026-11-08", "probes": 243, "ok": 243 }, { "date": "2026-11-09", "probes": 243, "ok": 243 }, { "date": "2026-11-10", "probes": 244, "ok": 244 }, { "date": "2026-11-11", "probes": 244, "ok": 244 }, { "date": "2026-11-12", "probes": 245, "ok": 245 }, { "date": "2026-11-13", "probes": 238, "ok": 238 } ], "since": "2026-10-08T00:00:00Z" }, "vendorStatus": { "page": "https://status.buffer.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-13T23:53:52.769908357Z" }, "versions": [ { "registry": "npm", "name": "@bufferapp/cli", "version": "2.3.1", "seenAt": "2026-11-13T08:21:31.836616465Z" } ], "npmWeekly": 1265, "securityTxt": { "url": "https://buffer.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-13T16:16:43.471464997Z" }, "llmsTxt": { "url": "https://developers.buffer.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-13T15:53:30.58683347Z" }, "domain": { "domain": "buffer.com", "registered": "1996-10-28", "source": "https://rdap.verisign.com/com/v1/domain/buffer.com", "checkedAt": "2026-11-08T14:57:59.737480722Z" }, "pages": [ { "url": "https://developers.buffer.com/changelog.html", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-13T18:13:43.326945808Z", "changedAt": "2026-11-12T17:33:37.29043082Z", "fingerprint": "8ddaba303590" }, { "url": "https://developers.buffer.com/guides/post-metrics.md", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-13T18:13:46.251626273Z", "changedAt": "2026-11-11T16:55:00.105894562Z", "fingerprint": "d3f4a4da0058" }, { "url": "https://buffer.com/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-13T18:10:32.562819012Z", "changedAt": "2026-11-13T18:10:32.562819012Z", "fingerprint": "75b0ac0bb286" }, { "url": "https://buffer.com/legal", "kind": "terms", "status": 200, "checkedAt": "2026-11-13T18:10:29.87961762Z", "changedAt": "2026-11-12T17:30:28.058749846Z", "fingerprint": "e13bc2b28cd6" } ], "mcpTools": { "url": "https://mcp.buffer.com/mcp", "checkedAt": "2026-11-13T03:08:14.421282655Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:43:03.744387113Z" }, "updatedAt": "2026-11-13T23:58:34.997153129Z" }, "streak": { "days": 37, "from": "2026-10-08", "sinceWatching": true, "last": { "kind": "breaking", "date": "2026-09-25", "what": "The `signupMode` and `webhookState` fields and their `WhatsAppSignupMode` and `WhatsAppWebhookState` types are removed from `WhatsAppMetadata` in the GraphQL API", "source": "https://developers.buffer.com/changelog.html" }, "best": 37 } }, "answer": "Buffer API + MCP scores 67.9 (B) on agent readiness against Pamba's 41.2 (E), and leads in 5 of 7 scored categories. Pamba leads on agent ergonomics and payments \u0026 pricing.", "b": { "slug": "pamba", "name": "Pamba", "vendor": "Pamba", "vendorUrl": "https://pamba.app", "kind": "http-api", "category": "social-media", "summary": "Pamba makes AI avatar short-form videos and posts them to TikTok, Instagram and Facebook, through an app, a REST API and a remote MCP server. It also sells accounts it runs on its own iPhones, which those platforms forbid.", "url": "https://www.anchorterminal.com/tools/pamba", "markdownUrl": "https://www.anchorterminal.com/tools/pamba.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/pamba.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/pamba.json", "dns": "pamba.grade.anchorterminal.com", "license": "Closed service. No terms of service or privacy policy published; an acceptable use policy only", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.pamba.app/mcp", "packages": [], "auth": "oauth", "authNotes": "OAuth 2.1 with PKCE and dynamic client registration on api.pamba.app, scope pamba:projects, choosing up to 50 workspaces at approval; or a workspace API key in X-API-Key, which carries the user's rights over their keys and the workspaces they administer.", "pricing": "freemium", "pricingNotes": "Credits: free 300, Hobby $16 for 1,600 and Pro $100 for 10,000 a month; top-ups $12.50 per 1,000. Managed TikTok or Instagram accounts $100 a month each. Fully managed from $7,500 a month. Per-model credit rates at GET /usage/pricing without auth. Read 11 November 2026.", "priceSummary": "$0.0125 / credit", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in Pamba's pricing, API or MCP pages, 11 November 2026. Billing is through Stripe.", "endpoints": [] }, "toolCount": 407, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-11" }, "docsUrl": "https://pamba.app/help/mcp-server", "llmsTxt": "https://pamba.app/llms.txt", "capabilities": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload", "video.generate" ], "tags": [ "hosted", "mcp", "oauth", "llms-txt", "closed-source", "freemium", "usage-priced", "tiktok", "instagram", "no-status-page", "platform-rules" ], "lastRelease": "2026-11-11", "graded": true, "anchor": { "graded": true, "score": 41.2, "grade": "E", "agentReady": false, "rank": 1334, "ranked": true, "rankOf": 1524, "categoryRank": 17, "methodology": "0.8", "run": "2026-10-01", "scores": { "ergonomics": 75, "maintenance": 70, "payments": 53, "reliability": 45, "schema": 84, "security": 35, "transparency": 28 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-11" }, "negative": -15, "warnings": [ { "kind": "platform-rules", "name": "Breaks the rules of the platforms it acts on", "text": "Pamba sells TikTok and Instagram accounts it creates on its own iPhones and warms so each 'reads as a real person', pitches running 'hundreds of accounts' and replaces banned ones. TikTok's guidelines and Instagram's terms forbid that.", "deduct": -15, "since": "2026-11-11", "sources": [ "https://pamba.app/accounts", "https://pamba.app/help/account-warming", "https://www.tiktok.com/community-guidelines/en/integrity-authenticity/", "https://help.instagram.com/581066165581870" ] } ], "verdict": "Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published.", "bestFor": "Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.", "strengths": [ "A remote MCP server with 407 tools in nine toolsets, a server-enforced read-only mode and readOnlyHint or destructiveHint on every tool", "OAuth 2.1 with PKCE and dynamic client registration, with protected-resource metadata on its own domain", "A tool reference generated from the server, and a dated API changelog that flags breaking changes", "Prices public without a login, including per-model credit rates from an unauthenticated route", "Publishes its own poor results: 42% of 6,678 videos it measured never reached 1,000 views" ], "weaknesses": [ "Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned", "No terms of service and no privacy policy (both 404), and no legal entity named", "Managed seats hold account logins, recovery emails and 2-step codes with no published data policy", "One OAuth scope covers everything, and an API key can manage the user's keys and delete workspaces", "No status page and no security contact" ], "agentNotes": [ "Tell your boss before using the accounts toolset: the managed accounts break TikTok's and Instagram's rules and can be banned", "Connect with ?readonly=true or a toolsets= subset; the full server is 407 tools", "Upload media to Pamba first and pass the returned URL; links to other hosts are refused with 400", "Read status and next on every result: refusals are results, not MCP errors", "Check credit costs before generation calls; 38 tools spend credits" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.8", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 41.2 } ], "editorialScores": { "ergonomics": 75, "maintenance": 70, "payments": 53, "reliability": 45, "schema": 84, "security": 35, "transparency": 18 }, "provenanceScore": 37, "checked": { "categories": { "ergonomics": "2026-11-11", "maintenance": "2026-11-11", "payments": "2026-11-11", "reliability": "2026-11-11", "schema": "2026-11-11", "security": "2026-11-11", "transparency": "2026-11-11" }, "last": "2026-11-11", "lastMoved": "2026-11-13", "oldest": "2026-11-11", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://api.pamba.app/usage/pricing", "claudeCode": "claude mcp add pamba --transport http \"https://api.pamba.app/mcp?readonly=true\"", "config": { "mcpServers": { "pamba": { "url": "https://api.pamba.app/mcp?readonly=true" } } } }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/pamba" }, "area": "communication", "unitPrices": [ { "item": "Managed TikTok or Instagram account", "unit": "account-month", "usd": 100, "note": "Per account; no credits needed" }, { "item": "Credits top-up", "unit": "credit", "usd": 0.0125, "note": "$12.50 per 1,000; plans work out at $10 per 1,000" } ], "provenance": { "legalEntity": "", "domain": "pamba.app", "domainRegistered": "2025-06-05", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://pamba.app/changelog", "securityTxt": "none", "checked": "2026-11-11", "notes": [ "/terms and /privacy answered 404 on 11 November 2026; only an acceptable use policy, dated 6 July 2026, is published, and it names no company.", "RDAP gives pamba.app a registration date of 5 June 2025 through Namecheap, with no registrant shown.", "robots.txt on pamba.app allows ClaudeBot on public pages and disallows app paths; api.pamba.app has no robots.txt (404).", "No entry in the official MCP registry for 'pamba' on 11 November 2026." ], "score": 37 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/pamba.json", "live": { "slug": "pamba", "probe": { "target": "https://api.pamba.app/mcp", "method": "get", "lastAt": "2026-11-13T23:58:54.025134635Z", "lastOk": true, "lastStatus": 401, "lastMs": 248, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 299, "p95ms24h": 391, "samples24h": 239, "samples30d": 319, "days": [ { "date": "2026-11-12", "probes": 81, "ok": 81 }, { "date": "2026-11-13", "probes": 238, "ok": 238 } ], "since": "2026-11-12T16:06:25.231802453Z" }, "securityTxt": { "url": "https://pamba.app/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-13T16:15:01.559101993Z" }, "llmsTxt": { "url": "https://pamba.app/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-13T15:55:36.94769184Z" }, "pages": [ { "url": "https://pamba.app/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-13T18:26:24.542486652Z", "changedAt": "2026-11-13T18:26:24.542486652Z", "fingerprint": "a0b9ef3713fa" } ], "mcpTools": { "url": "https://api.pamba.app/mcp?readonly=true", "checkedAt": "2026-11-13T03:13:09.042103119Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-13T03:13:09.042103119Z" }, "updatedAt": "2026-11-13T23:58:54.025134635Z" }, "streak": { "days": 2, "from": "2026-11-12", "sinceWatching": true, "best": 2 } }, "edges": [ { "by": 47, "category": "transparency", "leads": "buffer", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed service with published terms (15). Buffer, Inc. of San Francisco. Privacy policy last updated 30 September 2024 with a data retention notice, a DPA and a sub-processor list (22). @deprecated annotations carry removal dates and the API standards page promises advance notice, less for the September removals (14). Sub-processors listed in the GDPR section (15).", "b": "Closed service with no terms of service: /terms answered 404, and only an acceptable use policy (dated 6 July 2026) is published, with no legal entity named anywhere read (5 of 30). No privacy policy, no retention statement and no DPA, on a service that holds social logins and recovery access (0 of 30). The changelog dates deprecations and removals; no policy (10 of 20). The team says it's in San Francisco and posts from iPhones with US SIM cards; where data is processed and who processes it isn't stated (3 of 20). 5 + 0 + 10 + 3 = 18. It does publish its own results, including that 42% of 6,678 videos it measured never reached 1,000 views." }, "scores": { "a": 75, "b": 28 } }, { "by": 30, "category": "reliability", "leads": "buffer", "name": "Reliability", "reasons": { "a": "Status page at status.buffer.com, now on incident.io, with Buffer API and Buffer MCP components (20). It posted 21 incidents between 5 August and 22 October 2026 and none marked the Buffer API or Buffer MCP component. Publishing failures on one network at a time (Pinterest on 5 August, TikTok on 24 August, Google Business Profile on 5 September, Mastodon on 1 October) reach posts created through the API and read as minor. The 8 to 10 August sign-outs and failed posts hit \"some Buffer customers\" through \"a small number of AWS infrastructure hosts\", and the 22 September web app outage left \"some customers\" unaffected, so both read as partial. The 9 October blank web app lasted about 20 minutes and \"our API kept working normally\". Minor incidents only (20). Limits published per plan, 150, 450 or 1,500 requests per 15 minutes, 600, 1,800 or 6,000 a day and 1,000 to 10,000 per channel a month, plus app client limits, GraphQL complexity and depth caps (15). 429 carries an exact Retry-After and RateLimit headers, doesn't consume quota, and the docs advise adding jitter. No idempotency key for creating posts (10). No SLA found (0). The API and MCP aren't labelled beta (10). 20 + 20 + 15 + 10 + 0 + 10 = 75.", "b": "Graded as a hosted service. No status page found: none is linked, and status.pamba.app didn't answer (0). With no page there's no incident history to read (5 of 30). Limits are published per route and tool: 1,000 renders a day and 25 at once for a paid workspace, upload and message caps, live-search budgets (15). 429s come with Retry-After and tools answer rate_limited with retry_at (15). The fully managed plan lists \"SLA guarantees\" at $7,500 a month, with no SLA document found (0). Self-serve and live (10). 0 + 5 + 15 + 15 + 0 + 10 = 45." }, "scores": { "a": 75, "b": 45 } }, { "by": 21, "category": "security", "leads": "buffer", "name": "Security \u0026 auth", "reasons": { "a": "Hosted MCP and App Clients use OAuth 2.0 with PKCE and 11 scopes, among them posts:read and insights:read. Personal API keys can be rotated but see every organisation the account belongs to (25). Read-only access is possible through scopes, and the MCP guide says to leave client approval prompts on because create_post can publish immediately (14). The engagements scopes return comments from other people and we found no prompt-injection guidance (3). No audit log or key usage view found (0). buffer.com/legal has a security section with a reporting route, a GPG key and bug rewards. No security.txt per the 30 September check (14).", "b": "OAuth 2.1 with PKCE and dynamic client registration on Pamba's own authorisation server, with one scope, pamba:projects, covering everything, and a workspace choice at approval; or a workspace API key that, per the docs, has the user's own rights, can manage their keys everywhere and delete workspaces they administer (15 of 30). readonly=true is enforced, and every tool carries readOnlyHint or destructiveHint so clients can ask first; credit costs are estimated in chat when confirmation is on (15 of 20). Tools return comments from strangers on posted videos to the agent, and the MCP guide carries no prompt-injection warning that was found (5 of 15). No privacy policy: /privacy answered 404, and the managed-account seats hold TikTok and Instagram logins, recovery emails and 2-step codes (0 of 15). No security.txt (404) and no disclosure programme found (0 of 20). 15 + 15 + 5 + 0 + 0 = 35." }, "scores": { "a": 56, "b": 35 } }, { "by": 10, "category": "ergonomics", "leads": "pamba", "name": "Agent ergonomics", "reasons": { "a": "19 MCP tools (17 named in the MCP guide, which says two generic tools reach the rest of the GraphQL API) with no toolsets (15), and GraphQL field selection lets an agent size each response (3). List tools page with first and after (20 by default, 100 at most), tag queries are filterable and posts can be listed by channel (16). Typed union errors such as InvalidInputError and LimitReachedError say what to fix, and every MCP response carries the remaining quota (18). No idempotency key and, per the docs, no readOnly or destructive annotations. saveToDraft and addToQueue modes keep posts from going out by accident (6). No official SDK in two languages, only the npm CLI (7).", "b": "Read on the MCP server. 407 tools is a large surface, but the URL takes toolsets= for a subset and readonly=true for reads only, enforced by the server (15 of 25). Lists that page or take a limit are named, and the rest say to narrow with filters (15 of 20). Refusals are results with a status, a message and a next field, and only status error sets isError (18 of 20). Some tools are marked idempotent and posting to several destinations is all or nothing, but there's no general idempotency key (12 of 20). Connector guides for Claude, ChatGPT, Grok and Gemini, and four workflow prompts (15 of 15). 15 + 15 + 18 + 12 + 15 = 75." }, "scores": { "a": 65, "b": 75 } }, { "by": 8, "category": "payments", "leads": "pamba", "name": "Payments \u0026 pricing", "reasons": { "a": "No x402 or other machine payment (0). Per-channel plan prices are public, with request quotas per plan rather than per-call prices (10). The free plan includes the API, 1 key and 3,000 requests a month with no card (20). A person has to sign up in a browser to get a key (0). Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 30 is 45.", "b": "No x402, MPP or L402 (0). Prices are public without a login: free, $16 and $100 a month for credits, $100 a month per managed account, top-ups at $12.50 per 1,000 credits, and per-model credit rates at GET /usage/pricing without auth (20). A free plan of 300 credits; whether it needs a card isn't stated (15 of 20). A person signs up in a browser before a key or an OAuth approval (0). 0 + 20 + 15 + 0 = 35. Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 35 is 53." }, "scores": { "a": 45, "b": 53 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Buffer", "b": "Pamba", "name": "Vendor" }, { "a": "https://api.buffer.com", "b": "https://api.pamba.app/mcp", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "none", "b": "Closed service. No terms of service or privacy policy published; an acceptable use policy only", "name": "Licence" }, { "a": "19", "b": "407", "name": "Tools exposed" }, { "a": "yes", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-22", "b": "2026-11-11", "name": "Last release" }, { "a": "2024-09-30", "b": "no document linked", "name": "Terms last updated" }, { "a": "2024-09-30", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not read yet", "name": "Customer content may train models" }, { "a": "yes", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "not read yet", "name": "Arbitration or class-action waiver" }, { "a": "687 npm/wk", "b": "none", "name": "Popularity" }, { "a": "3/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Buffer API + MCP scores 67.9 (B) on agent readiness against Pamba's 41.2 (E), and leads in 5 of 7 scored categories. Pamba leads on agent ergonomics and payments \u0026 pricing.", "question": "Which is better for AI agents, Buffer API + MCP or Pamba?" }, { "answer": "Buffer API + MCP takes an API key or an OAuth sign-in. Pamba uses an OAuth sign-in.", "question": "Do Buffer API + MCP and Pamba need an API key?" }, { "answer": "Yes. Buffer API + MCP has a hosted endpoint at https://api.buffer.com and Pamba at https://api.pamba.app/mcp.", "question": "Can an agent call Buffer API + MCP and Pamba without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 75 against 45", "Security \u0026 auth, 56 against 35", "Transparency \u0026 trust, 75 against 28" ], "also": [ "Free to start without a card", "No incidents deducted, where Pamba loses 15 points for them" ], "goodFor": "Personal and small-team posting where the free plan and OAuth MCP are enough.", "slug": "buffer", "watchFor": "Free plan quotas of 150 requests per 15 minutes and 1,000 per channel a month, shared across keys and MCP connections" }, { "aheadOn": [ "Agent ergonomics, 75 against 65", "Payments \u0026 pricing, 53 against 45" ], "also": null, "goodFor": "Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.", "slug": "pamba", "watchFor": "Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned" } ], "history": { "buffer": [ { "causes": [ "method" ], "date": "2026-11-13", "delta": 1.9, "from": 66, "fromGrade": "B", "to": 67.9, "toGrade": "B" }, { "causes": [ "correction" ], "date": "2026-11-02", "delta": 4, "from": 62, "fromGrade": "B", "to": 66, "toGrade": "B" }, { "causes": [ "method" ], "date": "2026-10-08", "delta": -0.3, "from": 62.3, "fromGrade": "B", "to": 62, "toGrade": "B" } ], "pamba": [ { "causes": [ "method" ], "date": "2026-11-13", "delta": 2.3, "from": 38.9, "fromGrade": "E", "to": 41.2, "toGrade": "E" }, { "causes": [ "method" ], "date": "2026-11-13", "delta": -5, "from": 43.9, "fromGrade": "E", "to": 38.9, "toGrade": "E" } ] }, "job": { "capability": "social.post", "name": "Social posting" }, "others": [ { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-buffer.json", "title": "Ayrshare API + MCP vs Buffer API + MCP", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-buffer" }, { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-pamba.json", "title": "Ayrshare API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-buffer.json", "title": "Blotato vs Buffer API + MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-buffer" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-pamba.json", "title": "Blotato vs Pamba", "url": "https://www.anchorterminal.com/compare/blotato-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-bundle-social.json", "title": "Buffer API + MCP vs bundle.social", "url": "https://www.anchorterminal.com/compare/buffer-vs-bundle-social" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-late.json", "title": "Buffer API + MCP vs Zernio (formerly Late) API + MCP", "url": "https://www.anchorterminal.com/compare/buffer-vs-late" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-metricool.json", "title": "Buffer API + MCP vs Metricool API + MCP", "url": "https://www.anchorterminal.com/compare/buffer-vs-metricool" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-mixpost.json", "title": "Buffer API + MCP vs Mixpost API + MCP", "url": "https://www.anchorterminal.com/compare/buffer-vs-mixpost" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-oneup.json", "title": "Buffer API + MCP vs OneUp API + MCP", "url": "https://www.anchorterminal.com/compare/buffer-vs-oneup" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-post-bridge.json", "title": "Buffer API + MCP vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/buffer-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-postiz.json", "title": "Buffer API + MCP vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/buffer-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-publer.json", "title": "Buffer API + MCP vs Publer API + MCP", "url": "https://www.anchorterminal.com/compare/buffer-vs-publer" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-repostit.json", "title": "Buffer API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/buffer-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-typefully.json", "title": "Buffer API + MCP vs Typefully", "url": "https://www.anchorterminal.com/compare/buffer-vs-typefully" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-upload-post.json", "title": "Buffer API + MCP vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/buffer-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-pamba.json", "title": "bundle.social vs Pamba", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/late-vs-pamba.json", "title": "Zernio (formerly Late) API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/late-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/metricool-vs-pamba.json", "title": "Metricool API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/metricool-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/mixpost-vs-pamba.json", "title": "Mixpost API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/mixpost-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/oneup-vs-pamba.json", "title": "OneUp API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/oneup-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-post-bridge.json", "title": "Pamba vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-postiz.json", "title": "Pamba vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-publer.json", "title": "Pamba vs Publer API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-publer" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-repostit.json", "title": "Pamba vs Repostit", "url": "https://www.anchorterminal.com/compare/pamba-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-typefully.json", "title": "Pamba vs Typefully", "url": "https://www.anchorterminal.com/compare/pamba-vs-typefully" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-upload-post.json", "title": "Pamba vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-sprout-social.json", "title": "Buffer API + MCP vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/buffer-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-twitterapi-io-mcp.json", "title": "Buffer API + MCP vs TwitterAPI.io MCP", "url": "https://www.anchorterminal.com/compare/buffer-vs-twitterapi-io-mcp" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-x-mcp.json", "title": "Buffer API + MCP vs X MCP", "url": "https://www.anchorterminal.com/compare/buffer-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-xpoz-mcp.json", "title": "Buffer API + MCP vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/buffer-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-sprout-social.json", "title": "Pamba vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/pamba-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp.json", "title": "Pamba vs TwitterAPI.io MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-x-mcp.json", "title": "Pamba vs X MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp.json", "title": "Pamba vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-socialcannon.json", "title": "Buffer API + MCP vs SocialCannon", "url": "https://www.anchorterminal.com/compare/buffer-vs-socialcannon" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-socialcannon.json", "title": "Pamba vs SocialCannon", "url": "https://www.anchorterminal.com/compare/pamba-vs-socialcannon" } ], "panel": null, "scores": [ { "buffer": 75, "by": 30, "edge": "buffer", "key": "reliability", "name": "Reliability", "pamba": 45, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "buffer": 86, "by": 2, "edge": "buffer", "key": "schema", "name": "Schema \u0026 documentation", "pamba": 84, "weight": 13 }, { "buffer": 65, "by": 10, "edge": "pamba", "key": "ergonomics", "name": "Agent ergonomics", "pamba": 75, "weight": 13 }, { "buffer": 56, "by": 21, "edge": "buffer", "key": "security", "name": "Security \u0026 auth", "pamba": 35, "weight": 14 }, { "buffer": 45, "by": 8, "edge": "pamba", "key": "payments", "name": "Payments \u0026 pricing", "pamba": 53, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "buffer": 73, "by": 3, "edge": "buffer", "key": "maintenance", "name": "Maintenance \u0026 community", "pamba": 70, "weight": 7 }, { "buffer": 75, "by": 47, "edge": "buffer", "key": "transparency", "name": "Transparency \u0026 trust", "pamba": 28, "weight": 7 } ], "summary": "Buffer API + MCP scores 67.9 (B) on agent readiness against Pamba's 41.2 (E), and leads in 5 of 7 scored categories. Pamba leads on agent ergonomics and payments \u0026 pricing. Both do social posting.", "tasks": null, "tutorials": [ { "title": "Prepare a channel draft with Buffer", "tool": "buffer", "url": "https://www.anchorterminal.com/tutorials/buffer/" } ], "verdicts": { "buffer": "API, MCP and CLI on the free plan with no card, with typed GraphQL errors, an exact Retry-After on 429s and a schema changelog updated most weeks. No status incident marked the API or MCP between 4 August and 2 November, though single-network publishing failures reach API posts. No SDKs, idempotency keys or tool annotations.", "pamba": "Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/buffer-vs-pamba", "json": "https://www.anchorterminal.com/compare/buffer-vs-pamba.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/buffer-vs-pamba.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/buffer-vs-pamba.min.md" }, "markdown": "Buffer API + MCP scores 67.9 (B) on agent readiness against Pamba's 41.2 (E), and leads in 5 of 7 scored categories. Pamba leads on agent ergonomics and payments \u0026 pricing. Both do social posting.\n\n- Buffer API + MCP: grade B, 67.9/100, rank #408 of 1524. Markdown https://www.anchorterminal.com/tools/buffer.md · JSON https://www.anchorterminal.com/api/v1/tools/buffer.json\n- Pamba: grade E, 41.2/100, rank #1334 of 1524. Markdown https://www.anchorterminal.com/tools/pamba.md · JSON https://www.anchorterminal.com/api/v1/tools/pamba.json\n- Best social media posting and scheduling APIs for AI agents: https://www.anchorterminal.com/best/social-media/index.md\n- All 182 social comparisons: https://www.anchorterminal.com/compare/social-media/index.md\n\n## Which one, for what\n\n### Buffer API + MCP (B)\n\nGood for: Personal and small-team posting where the free plan and OAuth MCP are enough.\n\nAhead on:\n- Reliability, 75 against 45\n- Security \u0026 auth, 56 against 35\n- Transparency \u0026 trust, 75 against 28\n\nAlso in its favour:\n- Free to start without a card\n- No incidents deducted, where Pamba loses 15 points for them\n\nWatch for: Free plan quotas of 150 requests per 15 minutes and 1,000 per channel a month, shared across keys and MCP connections\n\n### Pamba (E)\n\nGood for: Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.\n\nAhead on:\n- Agent ergonomics, 75 against 65\n- Payments \u0026 pricing, 53 against 45\n\nWatch for: Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned\n\n\n## Why the edge\n\n### Transparency \u0026 trust: Buffer API + MCP +47\n\n- Buffer API + MCP (75): Closed service with published terms (15). Buffer, Inc. of San Francisco. Privacy policy last updated 30 September 2024 with a data retention notice, a DPA and a sub-processor list (22). @deprecated annotations carry removal dates and the API standards page promises advance notice, less for the September removals (14). Sub-processors listed in the GDPR section (15).\n- Pamba (28): Closed service with no terms of service: /terms answered 404, and only an acceptable use policy (dated 6 July 2026) is published, with no legal entity named anywhere read (5 of 30). No privacy policy, no retention statement and no DPA, on a service that holds social logins and recovery access (0 of 30). The changelog dates deprecations and removals; no policy (10 of 20). The team says it's in San Francisco and posts from iPhones with US SIM cards; where data is processed and who processes it isn't stated (3 of 20). 5 + 0 + 10 + 3 = 18. It does publish its own results, including that 42% of 6,678 videos it measured never reached 1,000 views.\n\n### Reliability: Buffer API + MCP +30\n\n- Buffer API + MCP (75): Status page at status.buffer.com, now on incident.io, with Buffer API and Buffer MCP components (20). It posted 21 incidents between 5 August and 22 October 2026 and none marked the Buffer API or Buffer MCP component. Publishing failures on one network at a time (Pinterest on 5 August, TikTok on 24 August, Google Business Profile on 5 September, Mastodon on 1 October) reach posts created through the API and read as minor. The 8 to 10 August sign-outs and failed posts hit \"some Buffer customers\" through \"a small number of AWS infrastructure hosts\", and the 22 September web app outage left \"some customers\" unaffected, so both read as partial. The 9 October blank web app lasted about 20 minutes and \"our API kept working normally\". Minor incidents only (20). Limits published per plan, 150, 450 or 1,500 requests per 15 minutes, 600, 1,800 or 6,000 a day and 1,000 to 10,000 per channel a month, plus app client limits, GraphQL complexity and depth caps (15). 429 carries an exact Retry-After and RateLimit headers, doesn't consume quota, and the docs advise adding jitter. No idempotency key for creating posts (10). No SLA found (0). The API and MCP aren't labelled beta (10). 20 + 20 + 15 + 10 + 0 + 10 = 75.\n- Pamba (45): Graded as a hosted service. No status page found: none is linked, and status.pamba.app didn't answer (0). With no page there's no incident history to read (5 of 30). Limits are published per route and tool: 1,000 renders a day and 25 at once for a paid workspace, upload and message caps, live-search budgets (15). 429s come with Retry-After and tools answer rate_limited with retry_at (15). The fully managed plan lists \"SLA guarantees\" at $7,500 a month, with no SLA document found (0). Self-serve and live (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.\n\n### Security \u0026 auth: Buffer API + MCP +21\n\n- Buffer API + MCP (56): Hosted MCP and App Clients use OAuth 2.0 with PKCE and 11 scopes, among them posts:read and insights:read. Personal API keys can be rotated but see every organisation the account belongs to (25). Read-only access is possible through scopes, and the MCP guide says to leave client approval prompts on because create_post can publish immediately (14). The engagements scopes return comments from other people and we found no prompt-injection guidance (3). No audit log or key usage view found (0). buffer.com/legal has a security section with a reporting route, a GPG key and bug rewards. No security.txt per the 30 September check (14).\n- Pamba (35): OAuth 2.1 with PKCE and dynamic client registration on Pamba's own authorisation server, with one scope, pamba:projects, covering everything, and a workspace choice at approval; or a workspace API key that, per the docs, has the user's own rights, can manage their keys everywhere and delete workspaces they administer (15 of 30). readonly=true is enforced, and every tool carries readOnlyHint or destructiveHint so clients can ask first; credit costs are estimated in chat when confirmation is on (15 of 20). Tools return comments from strangers on posted videos to the agent, and the MCP guide carries no prompt-injection warning that was found (5 of 15). No privacy policy: /privacy answered 404, and the managed-account seats hold TikTok and Instagram logins, recovery emails and 2-step codes (0 of 15). No security.txt (404) and no disclosure programme found (0 of 20). 15 + 15 + 5 + 0 + 0 = 35.\n\n### Agent ergonomics: Pamba +10\n\n- Buffer API + MCP (65): 19 MCP tools (17 named in the MCP guide, which says two generic tools reach the rest of the GraphQL API) with no toolsets (15), and GraphQL field selection lets an agent size each response (3). List tools page with first and after (20 by default, 100 at most), tag queries are filterable and posts can be listed by channel (16). Typed union errors such as InvalidInputError and LimitReachedError say what to fix, and every MCP response carries the remaining quota (18). No idempotency key and, per the docs, no readOnly or destructive annotations. saveToDraft and addToQueue modes keep posts from going out by accident (6). No official SDK in two languages, only the npm CLI (7).\n- Pamba (75): Read on the MCP server. 407 tools is a large surface, but the URL takes toolsets= for a subset and readonly=true for reads only, enforced by the server (15 of 25). Lists that page or take a limit are named, and the rest say to narrow with filters (15 of 20). Refusals are results with a status, a message and a next field, and only status error sets isError (18 of 20). Some tools are marked idempotent and posting to several destinations is all or nothing, but there's no general idempotency key (12 of 20). Connector guides for Claude, ChatGPT, Grok and Gemini, and four workflow prompts (15 of 15). 15 + 15 + 18 + 12 + 15 = 75.\n\n### Payments \u0026 pricing: Pamba +8\n\n- Buffer API + MCP (45): No x402 or other machine payment (0). Per-channel plan prices are public, with request quotas per plan rather than per-call prices (10). The free plan includes the API, 1 key and 3,000 requests a month with no card (20). A person has to sign up in a browser to get a key (0). Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 30 is 45.\n- Pamba (53): No x402, MPP or L402 (0). Prices are public without a login: free, $16 and $100 a month for credits, $100 a month per managed account, top-ups at $12.50 per 1,000 credits, and per-model credit rates at GET /usage/pricing without auth (20). A free plan of 300 credits; whether it needs a card isn't stated (15 of 20). A person signs up in a browser before a key or an OAuth approval (0). 0 + 20 + 15 + 0 = 35. Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 35 is 53.\n\n## Score by category\n\n| Category | Weight | Buffer API + MCP | Pamba | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 75 | 45 | Buffer API + MCP +30 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 86 | 84 | Buffer API + MCP +2 |\n| Agent ergonomics | 13% (16.2 this run) | 65 | 75 | Pamba +10 |\n| Security \u0026 auth | 14% (17.5 this run) | 56 | 35 | Buffer API + MCP +21 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 45 | 53 | Pamba +8 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 73 | 70 | Buffer API + MCP +3 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 75 | 28 | Buffer API + MCP +47 |\n| Negative events | ≤15 | 0 | -15 | |\n| **Total** | | **67.9 · B** | **41.2 · E** | |\n\n## Facts side by side\n\n| Fact | Buffer API + MCP | Pamba |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Buffer | Pamba |\n| Hosted endpoint | `https://api.buffer.com` | `https://api.pamba.app/mcp` |\n| Transports | HTTP, Streamable HTTP | HTTP, Streamable HTTP |\n| Auth | OAuth or key | OAuth |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | none | Closed service. No terms of service or privacy policy published; an acceptable use policy only |\n| Tools exposed | 19 | 407 |\n| Read-only variant documented | yes | yes |\n| llms.txt | yes | yes |\n| Last release | 2026-10-22 | 2026-11-11 |\n| Terms last updated | 2024-09-30 | no document linked |\n| Privacy policy last updated | 2024-09-30 | no document linked |\n| Customer content may train models | not found in the text | not read yet |\n| Terms restrict automated access | yes | not read yet |\n| Terms restrict benchmarking | yes | not read yet |\n| Terms or service can change without notice | yes | not read yet |\n| Arbitration or class-action waiver | yes | not read yet |\n| Popularity | 687 npm/wk | none |\n| Agent reviews | 3/5 (2) | none |\n\n## How the scores have moved\n\n### Buffer API + MCP\n\n- +1.9 on 13 November 2026: checklist\n- +4.0 on 2 November 2026: correction\n- -0.3 on 8 October 2026: checklist\n\n### Pamba\n\n- +2.3 on 13 November 2026: checklist\n- -5.0 on 13 November 2026: checklist\n\n## Verdicts\n\n**Buffer API + MCP.** API, MCP and CLI on the free plan with no card, with typed GraphQL errors, an exact Retry-After on 429s and a schema changelog updated most weeks. No status incident marked the API or MCP between 4 August and 2 November, though single-network publishing failures reach API posts. No SDKs, idempotency keys or tool annotations.\n\n**Pamba.** Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published.\n\n## Before you call either\n\n### Buffer API + MCP\n\n1. Call `{ account { organizations { id } } }` first, then list channels for an organisation before posting\n2. Include `... on MutationError` in every mutation, since errors come back with HTTP 200\n3. On 429, wait Retry-After plus a few seconds of jitter, and read the RateLimit headers to pace requests before the limit\n4. Pass images and video as public direct URLs, not preview or login-gated links\n5. Use saveToDraft or addToQueue so nothing publishes by accident, because delete_post can't be undone\n\n### Pamba\n\n1. Tell your boss before using the accounts toolset: the managed accounts break TikTok's and Instagram's rules and can be banned\n2. Connect with ?readonly=true or a toolsets= subset; the full server is 407 tools\n3. Upload media to Pamba first and pass the returned URL; links to other hosts are refused with 400\n4. Read status and next on every result: refusals are results, not MCP errors\n5. Check credit costs before generation calls; 38 tools spend credits\n\n## Tutorials\n\n- [Prepare a channel draft with Buffer](https://www.anchorterminal.com/tutorials/buffer/), for Buffer API + MCP\n\n## Questions\n\n### Which is better for AI agents, Buffer API + MCP or Pamba?\n\nBuffer API + MCP scores 67.9 (B) on agent readiness against Pamba's 41.2 (E), and leads in 5 of 7 scored categories. Pamba leads on agent ergonomics and payments \u0026 pricing.\n\n### Do Buffer API + MCP and Pamba need an API key?\n\nBuffer API + MCP takes an API key or an OAuth sign-in. Pamba uses an OAuth sign-in.\n\n### Can an agent call Buffer API + MCP and Pamba without installing anything?\n\nYes. Buffer API + MCP has a hosted endpoint at https://api.buffer.com and Pamba at https://api.pamba.app/mcp.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/buffer-vs-pamba.json, and with the fewest tokens: https://www.anchorterminal.com/compare/buffer-vs-pamba.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"buffer\", \"b\": \"pamba\"}`. From a terminal: `anchor compare buffer pamba`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/buffer.json and https://www.anchorterminal.com/api/v1/tools/pamba.json\n\n## Other comparisons with Buffer API + MCP or Pamba\n\n- [Ayrshare API + MCP vs Buffer API + MCP](https://www.anchorterminal.com/compare/ayrshare-vs-buffer.md)\n- [Ayrshare API + MCP vs Pamba](https://www.anchorterminal.com/compare/ayrshare-vs-pamba.md)\n- [Blotato vs Buffer API + MCP](https://www.anchorterminal.com/compare/blotato-vs-buffer.md)\n- [Blotato vs Pamba](https://www.anchorterminal.com/compare/blotato-vs-pamba.md)\n- [Buffer API + MCP vs bundle.social](https://www.anchorterminal.com/compare/buffer-vs-bundle-social.md)\n- [Buffer API + MCP vs Zernio (formerly Late) API + MCP](https://www.anchorterminal.com/compare/buffer-vs-late.md)\n- [Buffer API + MCP vs Metricool API + MCP](https://www.anchorterminal.com/compare/buffer-vs-metricool.md)\n- [Buffer API + MCP vs Mixpost API + MCP](https://www.anchorterminal.com/compare/buffer-vs-mixpost.md)\n- [Buffer API + MCP vs OneUp API + MCP](https://www.anchorterminal.com/compare/buffer-vs-oneup.md)\n- [Buffer API + MCP vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/buffer-vs-post-bridge.md)\n- [Buffer API + MCP vs Postiz API + MCP](https://www.anchorterminal.com/compare/buffer-vs-postiz.md)\n- [Buffer API + MCP vs Publer API + MCP](https://www.anchorterminal.com/compare/buffer-vs-publer.md)\n- [Buffer API + MCP vs Repostit](https://www.anchorterminal.com/compare/buffer-vs-repostit.md)\n- [Buffer API + MCP vs Typefully](https://www.anchorterminal.com/compare/buffer-vs-typefully.md)\n- [Buffer API + MCP vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/buffer-vs-upload-post.md)\n- [bundle.social vs Pamba](https://www.anchorterminal.com/compare/bundle-social-vs-pamba.md)\n- [Zernio (formerly Late) API + MCP vs Pamba](https://www.anchorterminal.com/compare/late-vs-pamba.md)\n- [Metricool API + MCP vs Pamba](https://www.anchorterminal.com/compare/metricool-vs-pamba.md)\n- [Mixpost API + MCP vs Pamba](https://www.anchorterminal.com/compare/mixpost-vs-pamba.md)\n- [OneUp API + MCP vs Pamba](https://www.anchorterminal.com/compare/oneup-vs-pamba.md)\n- [Pamba vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/pamba-vs-post-bridge.md)\n- [Pamba vs Postiz API + MCP](https://www.anchorterminal.com/compare/pamba-vs-postiz.md)\n- [Pamba vs Publer API + MCP](https://www.anchorterminal.com/compare/pamba-vs-publer.md)\n- [Pamba vs Repostit](https://www.anchorterminal.com/compare/pamba-vs-repostit.md)\n- [Pamba vs Typefully](https://www.anchorterminal.com/compare/pamba-vs-typefully.md)\n- [Pamba vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/pamba-vs-upload-post.md)\n- [Buffer API + MCP vs Sprout Social API](https://www.anchorterminal.com/compare/buffer-vs-sprout-social.md)\n- [Buffer API + MCP vs TwitterAPI.io MCP](https://www.anchorterminal.com/compare/buffer-vs-twitterapi-io-mcp.md)\n- [Buffer API + MCP vs X MCP](https://www.anchorterminal.com/compare/buffer-vs-x-mcp.md)\n- [Buffer API + MCP vs Xpoz MCP](https://www.anchorterminal.com/compare/buffer-vs-xpoz-mcp.md)\n- [Pamba vs Sprout Social API](https://www.anchorterminal.com/compare/pamba-vs-sprout-social.md)\n- [Pamba vs TwitterAPI.io MCP](https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp.md)\n- [Pamba vs X MCP](https://www.anchorterminal.com/compare/pamba-vs-x-mcp.md)\n- [Pamba vs Xpoz MCP](https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp.md)\n- [Buffer API + MCP vs SocialCannon](https://www.anchorterminal.com/compare/buffer-vs-socialcannon.md)\n- [Pamba vs SocialCannon](https://www.anchorterminal.com/compare/pamba-vs-socialcannon.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-14", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.8", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Buffer API + MCP vs Pamba", "url": "" } ], "description": "Buffer scores 67.9 (B) to Pamba's 41.2 (E) for social posting. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Buffer API + MCP B 67.9", "Pamba E 41.2", "scores" ], "h1": "Buffer API + MCP vs Pamba", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/buffer-vs-pamba", "published": "2026-10-01", "section": "tools", "title": "Buffer vs Pamba for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-13", "url": "https://www.anchorterminal.com/compare/buffer-vs-pamba" }, "tokens": { "markdown": 4500, "slim": 980 }, "version": 1 }