bundle.social vs Pamba

bundle.social 66

Closed service under terms dated 14 July 2026 that name the API. The SDK, CLI and MCP server are MIT (15). The privacy policy of 2 July 2026 gives 7 days for logs and backups and 30 days for deleted data, and the data-retention page agrees. Customer content is not used to train third-party AI models. The DPA is on request only (18). No deprecation policy. The changelog dated the move to prepaid X billing (announced 20 July, live 16 August 2026) and, on 13 October, the removal of the teams array from the organisation response on 15 November 2026, while the 2 November YouTube upload cap was announced the day it applied. The terms promise notice where reasonably possible (7). No sub-processor list. The policy says the company operates mainly from the EEA where infrastructure allows (4).

Pamba 28

Closed service with no terms of service: /terms answered 404, and only an acceptable use policy (dated 6 July 2026) is published, with no legal entity named anywhere read (5 of 30). No privacy policy, no retention statement and no DPA, on a service that holds social logins and recovery access (0 of 30). The changelog dates deprecations and removals; no policy (10 of 20). The team says it's in San Francisco and posts from iPhones with US SIM cards; where data is processed and who processes it isn't stated (3 of 20). 5 + 0 + 10 + 3 = 18. It does publish its own results, including that 42% of 6,678 videos it measured never reached 1,000 views.

bundle.social 67

Graded as a hosted API. Better Stack status page with two components and 90 days of history (20). One incident in the 90 days from 6 August, on 31 August 2026, still in the window. Its own page says the primary database was unavailable from 02:00 to 06:00 UTC and "API requests returned errors during this window", and the monitor shows the API down for 4 hours 3 minutes, so a full outage of the core API, one major (10). No incident is posted for September to November, and the API shows 99.810 per cent uptime. Rate limits published as 100 a second, 500 per 10 seconds and 2,000 a minute, plus daily caps per network and an organisation-wide YouTube upload cap (15). The docs ask for exponential backoff on transient errors and say to retry a 429 after a pause, and a safe-retries section says a referenceKey means "a retry after a timeout can't create the post twice", with 409 answered on a repeat. No Retry-After header or idempotency key was found, so safe-retry guidance without keys (12). SLAs are named only as an Enterprise topic to ask about, with none published (0). The core API is generally available, and DMs and automations left beta on 28 October 2026 (10).

Pamba 45

Graded as a hosted service. No status page found: none is linked, and status.pamba.app didn't answer (0). With no page there's no incident history to read (5 of 30). Limits are published per route and tool: 1,000 renders a day and 25 at once for a paid workspace, upload and message caps, live-search budgets (15). 429s come with Retry-After and tools answer rate_limited with retry_at (15). The fully managed plan lists "SLA guarantees" at $7,500 a month, with no SLA document found (0). Self-serve and live (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.

bundle.social 66

Graded on the REST API. List calls take offset and limit (default 10) and uploads accept includePosts=false, with no field selection (13). Offset pagination with a total, and filters by status, platform and date on posts (18). Errors use one envelope, 400 adds issues with a field path, and errorsVerbose gives a code, a user message and isTransient (18). No idempotency key. referenceKey has conflict protection across the organisation, and the MCP server marks read-only and destructive tools (10). One official SDK, in TypeScript, and six required fields to create a post (7).

Pamba 75

Read on the MCP server. 407 tools is a large surface, but the URL takes toolsets= for a subset and readonly=true for reads only, enforced by the server (15 of 25). Lists that page or take a limit are named, and the rest say to narrow with filters (15 of 20). Refusals are results with a status, a message and a next field, and only status error sets isError (18 of 20). Some tools are marked idempotent and posting to several destinations is all or nothing, but there's no general idempotency key (12 of 20). Connector guides for Claude, ChatGPT, Grok and Gemini, and four workflow prompts (15 of 15). 15 + 15 + 18 + 12 + 15 = 75.

bundle.social 78

The changelog's newest entry is 3 November 2026 and the bundlesocial SDK reached 2.69.0 on 30 October 2026 (30). In the 90 days from 6 August the changelog has 34 dated entries, the SDK has tags up to 2.69.0 (2.66.1, 2.67.0, 2.68.0 and 2.69.0 since 9 October) and the MCP server and CLI each released 1.2.1 (13 October) and 1.2.2 (20 October) (20). Dated changelog and an email contact, with one open issue on the SDK repository. No community channel was verified (8). The TypeScript SDK is regenerated from the OpenAPI description. The MCP server is still not in the official registry and its server.json still says 1.0.0 against package 1.2.2 (12). Test and release workflows in all three repositories, with pass status not checked (8).

Pamba 70

Closed service. The changelog has entries on 9, 10 and 11 November 2026 (30). Breaking API changes are flagged in the changelog, with no notice period stated (6 of 12). Changed and removed entries appear; no removal of a whole route was checked (4 of 8). Dated changelog with an Atom feed (15). Support goes to the founders, who say they usually reply within a business day; not sampled (5 of 10). No SDK; MCP and REST only (5 of 15). Runtimes not applicable; nothing to install (5 of 10). 30 + 6 + 4 + 15 + 5 + 5 + 5 = 70.