{ "data": { "a": { "slug": "bundle-social", "name": "bundle.social", "vendor": "BUNDLE SP. Z O.O.", "vendorUrl": "https://bundle.social", "kind": "http-api", "category": "social-media", "summary": "bundle.social is a hosted REST API from BUNDLE SP. Z O.O. in Warsaw for publishing, scheduling, commenting and reading analytics across 15 social networks. It also ships a TypeScript SDK, a CLI and a local MCP server.", "url": "https://www.anchorterminal.com/tools/bundle-social", "markdownUrl": "https://www.anchorterminal.com/tools/bundle-social.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/bundle-social.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/bundle-social.json", "dns": "bundle-social.grade.anchorterminal.com", "repo": "https://github.com/bundleglobal/bundlesocial-node", "license": "Proprietary hosted service under bundle.social's terms of service. The TypeScript SDK, the CLI and the MCP server on GitHub are MIT", "transports": [ "http", "stdio" ], "remoteUrl": "https://api.bundle.social/api/v1", "packages": [ { "registry": "npm", "name": "bundlesocial" }, { "registry": "npm", "name": "bundlesocial-mcp" }, { "registry": "npm", "name": "bundlesocial-cli" } ], "auth": "api-key", "authNotes": "Self-serve organisation API key sent in the `x-api-key` header, created and rolled in the dashboard after a browser sign-up, up to 50 keys an organisation. Keys carry no scopes and reach every team. Connecting a social account needs a person to complete that network's OAuth consent through a hosted connect link.", "pricing": "freemium", "pricingNotes": "Free plan at $0 with 20 posts a month, three teams and API access, no payment details needed. Pro is $100 a month for 10,000 posts and Business $400 for 100,000, both with unlimited connected accounts. Enterprise is quoted. X actions are charged from prepaid credit at X's rates (https://bundle.social/pricing.md).", "priceSummary": "$100 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in llms.txt, pricing.md, the docs index or the OpenAPI description in the SDK repository (checked 2026-10-09).", "endpoints": [] }, "toolCount": 68, "popularity": { "githubStars": 2, "npmWeekly": 4095, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://info.bundle.social", "llmsTxt": "https://bundle.social/llms.txt", "openapi": "https://api.bundle.social/swagger-json", "capabilities": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload" ], "tags": [ "hosted", "freemium", "free-tier", "no-card", "api-key", "openapi", "llms-txt", "mcp", "cli", "typescript", "webhooks", "status-page" ], "lastRelease": "2026-10-30", "graded": true, "anchor": { "graded": true, "score": 60.3, "grade": "C", "agentReady": false, "rank": 758, "ranked": true, "rankOf": 1524, "categoryRank": 3, "methodology": "0.8", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 78, "payments": 53, "reliability": 67, "schema": 86, "security": 34, "transparency": 66 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-04" }, "negative": -3, "negativeNotes": [ "2026-11-02. The changelog says YouTube uploads \"are now capped per organization per day\", failing with `YT:orgDailyUploadLimit` and not retried, a cap whose size isn't published. Uploads that worked under the per-account limits now fail once the organisation cap is reached, announced the day it applied. The 10 October change to what `count` means on Google review imports, announced the same day, folds into this term. -3. https://info.bundle.social/changelog.md" ], "verdict": "The REST API has a public OpenAPI 3.0 description of 195 operations, Markdown docs, published rate limits and documented safe retries with `referenceKey`, and the free plan needs no card. Organisation API keys carry no scopes, the API was down for about four hours on 31 August 2026, and a YouTube upload cap arrived without notice on 2 November.", "bestFor": "A SaaS product or agent that manages many accounts for many customers, since paid plans do not charge per connected account and teams separate tenants.", "strengths": [ "OpenAPI 3.0.2 description with 195 operations, each with a description, plus llms.txt, llms-full.txt and Markdown copies of every docs page", "Paid plans are priced per organisation with no fee per connected account. The free plan covers 20 posts a month and needs no payment details", "Rate limits are published as three windows (100 a second, 500 per 10 seconds, 2,000 a minute), counted per endpoint for API keys", "A `referenceKey` on a post is unique per organisation, and the docs say a retry after a timeout can't create the post twice", "Valid security.txt and a disclosure policy that promises acknowledgement within 3 business days" ], "weaknesses": [ "API keys are organisation-wide with no scopes or read-only mode found, so one key reaches every team and connected account", "The status page records the primary database unavailable and API requests failing from 02:00 to 06:00 UTC on 31 August 2026", "On 2 November 2026 YouTube uploads gained an organisation-wide daily cap, announced that day, whose size isn't published", "The DPA is sent on request only, and no sub-processor list or certification was found", "One official SDK (TypeScript). The MCP server is local stdio only, with 68 tools and no toolsets" ], "agentNotes": [ "Send the key in the `x-api-key` header to `https://api.bundle.social/api/v1`. A missing key returns 401 and a bad key 403", "Pass `teamId` on most calls. Set `BUNDLESOCIAL_TEAM_ID` for the MCP server or CLI when the organisation has more than one team", "Set a `referenceKey` on each post. A retry with the same key answers 409, so fetch the existing post instead of creating it again", "Check `GET /api/v1/organization/usage/daily-limits` before bulk scheduling. Failed and deleted posts still count against the monthly quota", "A person must complete each network's OAuth consent in a browser. Keep prepaid credit for X, where a post costs $0.015 or $0.20 with a link", "Expect `YT:orgDailyUploadLimit` once the organisation's daily YouTube cap is reached. It resets at midnight Pacific Time and isn't retried automatically" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3.3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.8", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 60.3 } ], "editorialScores": { "ergonomics": 66, "maintenance": 78, "payments": 53, "reliability": 67, "schema": 86, "security": 34, "transparency": 44 }, "provenanceScore": 87, "checked": { "categories": { "ergonomics": "2026-11-04", "maintenance": "2026-11-04", "payments": "2026-11-04", "reliability": "2026-11-04", "schema": "2026-11-04", "security": "2026-11-04", "transparency": "2026-11-04" }, "last": "2026-11-04", "lastMoved": "2026-11-13", "oldest": "2026-11-04", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install bundlesocial", "http": "curl \"https://api.bundle.social/api/v1/team\" -H \"x-api-key: $BUNDLE_SOCIAL_API_KEY\"", "claudeCode": "claude mcp add bundlesocial --env BUNDLESOCIAL_API_KEY=sk_live_... -- npx -y bundlesocial-mcp", "config": { "mcpServers": { "bundlesocial": { "args": [ "-y", "bundlesocial-mcp" ], "command": "npx", "env": { "BUNDLESOCIAL_API_KEY": "sk_live_..." } } } } }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/bundle-social" }, "area": "communication", "unitPrices": [ { "item": "Pro plan", "unit": "month", "usd": 100, "note": "10,000 posts a month, unlimited connected accounts" }, { "item": "Business plan", "unit": "month", "usd": 400, "note": "100,000 posts a month" }, { "item": "X post", "unit": "tx", "usd": 0.015, "note": "X's charge passed through, from prepaid credit" }, { "item": "X post with a link", "unit": "tx", "usd": 0.2, "note": "X's charge passed through" } ], "provenance": { "legalEntity": "BUNDLE SP. Z O.O.", "domain": "bundle.social", "domainRegistered": "2023-09-17", "endpointOnVendorDomain": true, "terms": "https://bundle.social/terms", "privacy": "https://bundle.social/privacy", "statusPage": "https://bundlesocial.betteruptime.com/", "changelog": "https://info.bundle.social/changelog", "securityTxt": "valid", "checked": "2026-11-04", "notes": [ "The terms (last updated 14 July 2026) name BUNDLE SP. Z O.O., ul. Hoża 86 / 410, 00-682 Warsaw, KRS 0001103308, and say they govern the website, dashboard and API. Polish law applies.", "The privacy policy (last updated 2 July 2026) covers the same Service and says the company is a processor for customer content and connected account data.", "security.txt at bundle.social/.well-known/security.txt expires on 3 May 2027 (read 4 November 2026) and gives a contact address, the contact page and https://bundle.social/trust as its policy.", "RDAP gives a registration date of 2023-09-17 for bundle.social.", "The status page is on Better Stack's betteruptime.com domain. The API answers at api.bundle.social and the docs at info.bundle.social." ], "score": 87 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/bundle-social.json", "live": { "slug": "bundle-social", "probe": { "target": "https://api.bundle.social/api/v1", "method": "get", "lastAt": "2026-11-13T23:58:35.061371555Z", "lastOk": true, "lastStatus": 200, "lastMs": 98, "authRequired": false, "uptime24h": 100, "uptime30d": 99.99, "p50ms24h": 161, "p95ms24h": 842, "samples24h": 239, "samples30d": 7892, "days": [ { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 250 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 248, "ok": 248 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 243, "ok": 243 }, { "date": "2026-11-08", "probes": 243, "ok": 243 }, { "date": "2026-11-09", "probes": 243, "ok": 243 }, { "date": "2026-11-10", "probes": 244, "ok": 244 }, { "date": "2026-11-11", "probes": 244, "ok": 244 }, { "date": "2026-11-12", "probes": 245, "ok": 245 }, { "date": "2026-11-13", "probes": 238, "ok": 238 } ], "since": "2026-10-09T00:00:00Z" }, "vendorStatus": { "page": "https://bundlesocial.betteruptime.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-13T23:53:52.770009722Z" }, "versions": [ { "registry": "github", "name": "bundleglobal/bundlesocial-node", "version": "v2.70.0", "released": "2026-11-04", "seenAt": "2026-11-13T08:21:42.664835597Z" }, { "registry": "npm", "name": "bundlesocial", "version": "2.70.0", "seenAt": "2026-11-13T08:21:38.467942288Z" }, { "registry": "npm", "name": "bundlesocial-cli", "version": "1.2.3", "seenAt": "2026-11-13T08:21:40.960242625Z" }, { "registry": "npm", "name": "bundlesocial-mcp", "version": "1.2.3", "seenAt": "2026-11-13T08:21:39.345022149Z" } ], "githubStars": 3, "npmWeekly": 6638, "securityTxt": { "url": "https://bundle.social/.well-known/security.txt", "state": "valid", "expires": "2027-05-10T18:49:34.787Z", "checkedAt": "2026-11-13T16:15:59.841139043Z" }, "llmsTxt": { "url": "https://bundle.social/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-13T15:53:30.62854724Z" }, "domain": { "domain": "bundle.social", "registered": "2023-09-17", "source": "https://rdap.identitydigital.services/rdap/domain/bundle.social", "checkedAt": "2026-11-08T15:02:15.793488348Z" }, "pages": [ { "url": "https://info.bundle.social/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-13T18:21:43.164400006Z", "changedAt": "2026-11-13T18:21:43.164400006Z", "fingerprint": "a18d6b07b3e0" }, { "url": "https://info.bundle.social/changelog.md", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-13T18:21:45.578222132Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "11c176f60d85" }, { "url": "https://bundle.social/pricing.md", "kind": "pricing", "status": 304, "checkedAt": "2026-11-13T18:10:32.648825582Z", "changedAt": "2026-10-29T04:59:36.450751538Z", "fingerprint": "fcf83dbe39ae" }, { "url": "https://bundle.social/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-13T18:10:34.810610755Z", "changedAt": "2026-11-04T08:16:04.18670759Z", "fingerprint": "068a22773304" }, { "url": "https://bundle.social/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-13T18:10:36.869310892Z", "changedAt": "2026-11-04T08:16:06.473617446Z", "fingerprint": "bb7183644f4e" } ], "github": { "repo": "bundleglobal/bundlesocial-node", "checkedAt": "2026-11-09T10:12:58.861421746Z", "stars": 2, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-04T18:10:48Z", "openIssues": 1, "openPRs": 0, "issuesOpened90d": 0, "issuesClosed90d": 0, "prsMerged90d": 17, "ci": { "branch": "main", "runs": 50, "success": 50, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-11-04T18:10:15Z" }, "replies": { "sampled": 3, "unanswered": 1, "medianDays": 2 } }, "updatedAt": "2026-11-13T23:58:35.061371555Z" }, "streak": { "days": 12, "from": "2026-11-02", "last": { "kind": "breaking", "date": "2026-11-02", "what": "New YouTube uploads are capped per organisation per day and fail with `YT:orgDailyUploadLimit` once the cap is reached, announced the day it applied", "source": "https://info.bundle.social/changelog.md" }, "best": 24 } }, "answer": "bundle.social scores 60.3 (C) on agent readiness against Pamba's 41.2 (E), and leads in 4 of 7 scored categories. Pamba leads on agent ergonomics.", "b": { "slug": "pamba", "name": "Pamba", "vendor": "Pamba", "vendorUrl": "https://pamba.app", "kind": "http-api", "category": "social-media", "summary": "Pamba makes AI avatar short-form videos and posts them to TikTok, Instagram and Facebook, through an app, a REST API and a remote MCP server. It also sells accounts it runs on its own iPhones, which those platforms forbid.", "url": "https://www.anchorterminal.com/tools/pamba", "markdownUrl": "https://www.anchorterminal.com/tools/pamba.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/pamba.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/pamba.json", "dns": "pamba.grade.anchorterminal.com", "license": "Closed service. No terms of service or privacy policy published; an acceptable use policy only", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.pamba.app/mcp", "packages": [], "auth": "oauth", "authNotes": "OAuth 2.1 with PKCE and dynamic client registration on api.pamba.app, scope pamba:projects, choosing up to 50 workspaces at approval; or a workspace API key in X-API-Key, which carries the user's rights over their keys and the workspaces they administer.", "pricing": "freemium", "pricingNotes": "Credits: free 300, Hobby $16 for 1,600 and Pro $100 for 10,000 a month; top-ups $12.50 per 1,000. Managed TikTok or Instagram accounts $100 a month each. Fully managed from $7,500 a month. Per-model credit rates at GET /usage/pricing without auth. Read 11 November 2026.", "priceSummary": "$0.0125 / credit", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in Pamba's pricing, API or MCP pages, 11 November 2026. Billing is through Stripe.", "endpoints": [] }, "toolCount": 407, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-11" }, "docsUrl": "https://pamba.app/help/mcp-server", "llmsTxt": "https://pamba.app/llms.txt", "capabilities": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload", "video.generate" ], "tags": [ "hosted", "mcp", "oauth", "llms-txt", "closed-source", "freemium", "usage-priced", "tiktok", "instagram", "no-status-page", "platform-rules" ], "lastRelease": "2026-11-11", "graded": true, "anchor": { "graded": true, "score": 41.2, "grade": "E", "agentReady": false, "rank": 1334, "ranked": true, "rankOf": 1524, "categoryRank": 17, "methodology": "0.8", "run": "2026-10-01", "scores": { "ergonomics": 75, "maintenance": 70, "payments": 53, "reliability": 45, "schema": 84, "security": 35, "transparency": 28 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-11" }, "negative": -15, "warnings": [ { "kind": "platform-rules", "name": "Breaks the rules of the platforms it acts on", "text": "Pamba sells TikTok and Instagram accounts it creates on its own iPhones and warms so each 'reads as a real person', pitches running 'hundreds of accounts' and replaces banned ones. TikTok's guidelines and Instagram's terms forbid that.", "deduct": -15, "since": "2026-11-11", "sources": [ "https://pamba.app/accounts", "https://pamba.app/help/account-warming", "https://www.tiktok.com/community-guidelines/en/integrity-authenticity/", "https://help.instagram.com/581066165581870" ] } ], "verdict": "Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published.", "bestFor": "Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.", "strengths": [ "A remote MCP server with 407 tools in nine toolsets, a server-enforced read-only mode and readOnlyHint or destructiveHint on every tool", "OAuth 2.1 with PKCE and dynamic client registration, with protected-resource metadata on its own domain", "A tool reference generated from the server, and a dated API changelog that flags breaking changes", "Prices public without a login, including per-model credit rates from an unauthenticated route", "Publishes its own poor results: 42% of 6,678 videos it measured never reached 1,000 views" ], "weaknesses": [ "Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned", "No terms of service and no privacy policy (both 404), and no legal entity named", "Managed seats hold account logins, recovery emails and 2-step codes with no published data policy", "One OAuth scope covers everything, and an API key can manage the user's keys and delete workspaces", "No status page and no security contact" ], "agentNotes": [ "Tell your boss before using the accounts toolset: the managed accounts break TikTok's and Instagram's rules and can be banned", "Connect with ?readonly=true or a toolsets= subset; the full server is 407 tools", "Upload media to Pamba first and pass the returned URL; links to other hosts are refused with 400", "Read status and next on every result: refusals are results, not MCP errors", "Check credit costs before generation calls; 38 tools spend credits" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.8", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 41.2 } ], "editorialScores": { "ergonomics": 75, "maintenance": 70, "payments": 53, "reliability": 45, "schema": 84, "security": 35, "transparency": 18 }, "provenanceScore": 37, "checked": { "categories": { "ergonomics": "2026-11-11", "maintenance": "2026-11-11", "payments": "2026-11-11", "reliability": "2026-11-11", "schema": "2026-11-11", "security": "2026-11-11", "transparency": "2026-11-11" }, "last": "2026-11-11", "lastMoved": "2026-11-13", "oldest": "2026-11-11", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://api.pamba.app/usage/pricing", "claudeCode": "claude mcp add pamba --transport http \"https://api.pamba.app/mcp?readonly=true\"", "config": { "mcpServers": { "pamba": { "url": "https://api.pamba.app/mcp?readonly=true" } } } }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/pamba" }, "area": "communication", "unitPrices": [ { "item": "Managed TikTok or Instagram account", "unit": "account-month", "usd": 100, "note": "Per account; no credits needed" }, { "item": "Credits top-up", "unit": "credit", "usd": 0.0125, "note": "$12.50 per 1,000; plans work out at $10 per 1,000" } ], "provenance": { "legalEntity": "", "domain": "pamba.app", "domainRegistered": "2025-06-05", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://pamba.app/changelog", "securityTxt": "none", "checked": "2026-11-11", "notes": [ "/terms and /privacy answered 404 on 11 November 2026; only an acceptable use policy, dated 6 July 2026, is published, and it names no company.", "RDAP gives pamba.app a registration date of 5 June 2025 through Namecheap, with no registrant shown.", "robots.txt on pamba.app allows ClaudeBot on public pages and disallows app paths; api.pamba.app has no robots.txt (404).", "No entry in the official MCP registry for 'pamba' on 11 November 2026." ], "score": 37 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/pamba.json", "live": { "slug": "pamba", "probe": { "target": "https://api.pamba.app/mcp", "method": "get", "lastAt": "2026-11-13T23:58:54.025134635Z", "lastOk": true, "lastStatus": 401, "lastMs": 248, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 299, "p95ms24h": 391, "samples24h": 239, "samples30d": 319, "days": [ { "date": "2026-11-12", "probes": 81, "ok": 81 }, { "date": "2026-11-13", "probes": 238, "ok": 238 } ], "since": "2026-11-12T16:06:25.231802453Z" }, "securityTxt": { "url": "https://pamba.app/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-13T16:15:01.559101993Z" }, "llmsTxt": { "url": "https://pamba.app/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-13T15:55:36.94769184Z" }, "pages": [ { "url": "https://pamba.app/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-13T18:26:24.542486652Z", "changedAt": "2026-11-13T18:26:24.542486652Z", "fingerprint": "a0b9ef3713fa" } ], "mcpTools": { "url": "https://api.pamba.app/mcp?readonly=true", "checkedAt": "2026-11-13T03:13:09.042103119Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-13T03:13:09.042103119Z" }, "updatedAt": "2026-11-13T23:58:54.025134635Z" }, "streak": { "days": 2, "from": "2026-11-12", "sinceWatching": true, "best": 2 } }, "edges": [ { "by": 38, "category": "transparency", "leads": "bundle-social", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed service under terms dated 14 July 2026 that name the API. The SDK, CLI and MCP server are MIT (15). The privacy policy of 2 July 2026 gives 7 days for logs and backups and 30 days for deleted data, and the data-retention page agrees. Customer content is not used to train third-party AI models. The DPA is on request only (18). No deprecation policy. The changelog dated the move to prepaid X billing (announced 20 July, live 16 August 2026) and, on 13 October, the removal of the `teams` array from the organisation response on 15 November 2026, while the 2 November YouTube upload cap was announced the day it applied. The terms promise notice where reasonably possible (7). No sub-processor list. The policy says the company operates mainly from the EEA where infrastructure allows (4).", "b": "Closed service with no terms of service: /terms answered 404, and only an acceptable use policy (dated 6 July 2026) is published, with no legal entity named anywhere read (5 of 30). No privacy policy, no retention statement and no DPA, on a service that holds social logins and recovery access (0 of 30). The changelog dates deprecations and removals; no policy (10 of 20). The team says it's in San Francisco and posts from iPhones with US SIM cards; where data is processed and who processes it isn't stated (3 of 20). 5 + 0 + 10 + 3 = 18. It does publish its own results, including that 42% of 6,678 videos it measured never reached 1,000 views." }, "scores": { "a": 66, "b": 28 } }, { "by": 22, "category": "reliability", "leads": "bundle-social", "name": "Reliability", "reasons": { "a": "Graded as a hosted API. Better Stack status page with two components and 90 days of history (20). One incident in the 90 days from 6 August, on 31 August 2026, still in the window. Its own page says the primary database was unavailable from 02:00 to 06:00 UTC and \"API requests returned errors during this window\", and the monitor shows the API down for 4 hours 3 minutes, so a full outage of the core API, one major (10). No incident is posted for September to November, and the API shows 99.810 per cent uptime. Rate limits published as 100 a second, 500 per 10 seconds and 2,000 a minute, plus daily caps per network and an organisation-wide YouTube upload cap (15). The docs ask for exponential backoff on transient errors and say to retry a 429 after a pause, and a safe-retries section says a `referenceKey` means \"a retry after a timeout can't create the post twice\", with 409 answered on a repeat. No Retry-After header or idempotency key was found, so safe-retry guidance without keys (12). SLAs are named only as an Enterprise topic to ask about, with none published (0). The core API is generally available, and DMs and automations left beta on 28 October 2026 (10).", "b": "Graded as a hosted service. No status page found: none is linked, and status.pamba.app didn't answer (0). With no page there's no incident history to read (5 of 30). Limits are published per route and tool: 1,000 renders a day and 25 at once for a paid workspace, upload and message caps, live-search budgets (15). 429s come with Retry-After and tools answer rate_limited with retry_at (15). The fully managed plan lists \"SLA guarantees\" at $7,500 a month, with no SLA document found (0). Self-serve and live (10). 0 + 5 + 15 + 15 + 0 + 10 = 45." }, "scores": { "a": 67, "b": 45 } }, { "by": 9, "category": "ergonomics", "leads": "pamba", "name": "Agent ergonomics", "reasons": { "a": "Graded on the REST API. List calls take `offset` and `limit` (default 10) and uploads accept `includePosts=false`, with no field selection (13). Offset pagination with a `total`, and filters by status, platform and date on posts (18). Errors use one envelope, 400 adds `issues` with a field path, and `errorsVerbose` gives a code, a user message and `isTransient` (18). No idempotency key. `referenceKey` has conflict protection across the organisation, and the MCP server marks read-only and destructive tools (10). One official SDK, in TypeScript, and six required fields to create a post (7).", "b": "Read on the MCP server. 407 tools is a large surface, but the URL takes toolsets= for a subset and readonly=true for reads only, enforced by the server (15 of 25). Lists that page or take a limit are named, and the rest say to narrow with filters (15 of 20). Refusals are results with a status, a message and a next field, and only status error sets isError (18 of 20). Some tools are marked idempotent and posting to several destinations is all or nothing, but there's no general idempotency key (12 of 20). Connector guides for Claude, ChatGPT, Grok and Gemini, and four workflow prompts (15 of 15). 15 + 15 + 18 + 12 + 15 = 75." }, "scores": { "a": 66, "b": 75 } }, { "by": 8, "category": "maintenance", "leads": "bundle-social", "name": "Maintenance \u0026 community", "reasons": { "a": "The changelog's newest entry is 3 November 2026 and the `bundlesocial` SDK reached 2.69.0 on 30 October 2026 (30). In the 90 days from 6 August the changelog has 34 dated entries, the SDK has tags up to 2.69.0 (2.66.1, 2.67.0, 2.68.0 and 2.69.0 since 9 October) and the MCP server and CLI each released 1.2.1 (13 October) and 1.2.2 (20 October) (20). Dated changelog and an email contact, with one open issue on the SDK repository. No community channel was verified (8). The TypeScript SDK is regenerated from the OpenAPI description. The MCP server is still not in the official registry and its server.json still says 1.0.0 against package 1.2.2 (12). Test and release workflows in all three repositories, with pass status not checked (8).", "b": "Closed service. The changelog has entries on 9, 10 and 11 November 2026 (30). Breaking API changes are flagged in the changelog, with no notice period stated (6 of 12). Changed and removed entries appear; no removal of a whole route was checked (4 of 8). Dated changelog with an Atom feed (15). Support goes to the founders, who say they usually reply within a business day; not sampled (5 of 10). No SDK; MCP and REST only (5 of 15). Runtimes not applicable; nothing to install (5 of 10). 30 + 6 + 4 + 15 + 5 + 5 + 5 = 70." }, "scores": { "a": 78, "b": 70 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "BUNDLE SP. Z O.O.", "b": "Pamba", "name": "Vendor" }, { "a": "https://api.bundle.social/api/v1", "b": "https://api.pamba.app/mcp", "name": "Hosted endpoint" }, { "a": "HTTP, stdio", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "API key", "b": "OAuth", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "$0.015 per transaction", "b": "not published", "name": "Price for social posting" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary hosted service under bundle.social's terms of service. The TypeScript SDK, the CLI and the MCP server on GitHub are MIT", "b": "Closed service. No terms of service or privacy policy published; an acceptable use policy only", "name": "Licence" }, { "a": "68", "b": "407", "name": "Tools exposed" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-30", "b": "2026-11-11", "name": "Last release" }, { "a": "2026-07-14", "b": "no document linked", "name": "Terms last updated" }, { "a": "2026-07-02", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not read yet", "name": "Customer content may train models" }, { "a": "yes", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not read yet", "name": "Arbitration or class-action waiver" }, { "a": "2 stars, 4.1k npm/wk", "b": "none", "name": "Popularity" }, { "a": "3.3/5 (4)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "bundle.social scores 60.3 (C) on agent readiness against Pamba's 41.2 (E), and leads in 4 of 7 scored categories. Pamba leads on agent ergonomics.", "question": "Which is better for AI agents, bundle.social or Pamba?" }, { "answer": "bundle.social needs an API key. Pamba uses an OAuth sign-in.", "question": "Do bundle.social and Pamba need an API key?" }, { "answer": "Yes. bundle.social has a hosted endpoint at https://api.bundle.social/api/v1 and Pamba at https://api.pamba.app/mcp.", "question": "Can an agent call bundle.social and Pamba without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 67 against 45", "Maintenance \u0026 community, 78 against 70", "Transparency \u0026 trust, 66 against 28" ], "also": [ "Runs on your own machine", "Free to start without a card" ], "goodFor": "A SaaS product or agent that manages many accounts for many customers, since paid plans do not charge per connected account and teams separate tenants.", "slug": "bundle-social", "watchFor": "API keys are organisation-wide with no scopes or read-only mode found, so one key reaches every team and connected account" }, { "aheadOn": [ "Agent ergonomics, 75 against 66" ], "also": null, "goodFor": "Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.", "slug": "pamba", "watchFor": "Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned" } ], "history": { "bundle-social": [ { "causes": [ "method" ], "date": "2026-11-13", "delta": 2.3, "from": 58, "fromGrade": "C", "to": 60.3, "toGrade": "C" }, { "causes": [ "terms", "evidence" ], "date": "2026-11-04", "delta": -2.2, "from": 60.2, "fromGrade": "C", "to": 58, "toGrade": "C" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 60.1, "fromGrade": "C", "to": 60.2, "toGrade": "C" } ], "pamba": [ { "causes": [ "method" ], "date": "2026-11-13", "delta": 2.3, "from": 38.9, "fromGrade": "E", "to": 41.2, "toGrade": "E" }, { "causes": [ "method" ], "date": "2026-11-13", "delta": -5, "from": 43.9, "fromGrade": "E", "to": 38.9, "toGrade": "E" } ] }, "job": { "capability": "social.post", "name": "Social posting" }, "others": [ { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-bundle-social.json", "title": "Ayrshare API + MCP vs bundle.social", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-bundle-social" }, { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-pamba.json", "title": "Ayrshare API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-bundle-social.json", "title": "Blotato vs bundle.social", "url": "https://www.anchorterminal.com/compare/blotato-vs-bundle-social" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-pamba.json", "title": "Blotato vs Pamba", "url": "https://www.anchorterminal.com/compare/blotato-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-bundle-social.json", "title": "Buffer API + MCP vs bundle.social", "url": "https://www.anchorterminal.com/compare/buffer-vs-bundle-social" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-pamba.json", "title": "Buffer API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/buffer-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-late.json", "title": "bundle.social vs Zernio (formerly Late) API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-late" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-metricool.json", "title": "bundle.social vs Metricool API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-metricool" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-mixpost.json", "title": "bundle.social vs Mixpost API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-mixpost" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-oneup.json", "title": "bundle.social vs OneUp API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-oneup" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-post-bridge.json", "title": "bundle.social vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-postiz.json", "title": "bundle.social vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-publer.json", "title": "bundle.social vs Publer API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-publer" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-repostit.json", "title": "bundle.social vs Repostit", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-typefully.json", "title": "bundle.social vs Typefully", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-typefully" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-upload-post.json", "title": "bundle.social vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/late-vs-pamba.json", "title": "Zernio (formerly Late) API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/late-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/metricool-vs-pamba.json", "title": "Metricool API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/metricool-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/mixpost-vs-pamba.json", "title": "Mixpost API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/mixpost-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/oneup-vs-pamba.json", "title": "OneUp API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/oneup-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-post-bridge.json", "title": "Pamba vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-postiz.json", "title": "Pamba vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-publer.json", "title": "Pamba vs Publer API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-publer" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-repostit.json", "title": "Pamba vs Repostit", "url": "https://www.anchorterminal.com/compare/pamba-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-typefully.json", "title": "Pamba vs Typefully", "url": "https://www.anchorterminal.com/compare/pamba-vs-typefully" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-upload-post.json", "title": "Pamba vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-sprout-social.json", "title": "bundle.social vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-twitterapi-io-mcp.json", "title": "bundle.social vs TwitterAPI.io MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-twitterapi-io-mcp" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-x-mcp.json", "title": "bundle.social vs X MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-xpoz-mcp.json", "title": "bundle.social vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-sprout-social.json", "title": "Pamba vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/pamba-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp.json", "title": "Pamba vs TwitterAPI.io MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-x-mcp.json", "title": "Pamba vs X MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp.json", "title": "Pamba vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-socialcannon.json", "title": "bundle.social vs SocialCannon", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-socialcannon" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-socialcannon.json", "title": "Pamba vs SocialCannon", "url": "https://www.anchorterminal.com/compare/pamba-vs-socialcannon" } ], "panel": null, "scores": [ { "bundle-social": 67, "by": 22, "edge": "bundle-social", "key": "reliability", "name": "Reliability", "pamba": 45, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "bundle-social": 86, "by": 2, "edge": "bundle-social", "key": "schema", "name": "Schema \u0026 documentation", "pamba": 84, "weight": 13 }, { "bundle-social": 66, "by": 9, "edge": "pamba", "key": "ergonomics", "name": "Agent ergonomics", "pamba": 75, "weight": 13 }, { "bundle-social": 34, "by": 1, "edge": "pamba", "key": "security", "name": "Security \u0026 auth", "pamba": 35, "weight": 14 }, { "bundle-social": 53, "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "pamba": 53, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "bundle-social": 78, "by": 8, "edge": "bundle-social", "key": "maintenance", "name": "Maintenance \u0026 community", "pamba": 70, "weight": 7 }, { "bundle-social": 66, "by": 38, "edge": "bundle-social", "key": "transparency", "name": "Transparency \u0026 trust", "pamba": 28, "weight": 7 } ], "summary": "bundle.social scores 60.3 (C) on agent readiness against Pamba's 41.2 (E), and leads in 4 of 7 scored categories. Pamba leads on agent ergonomics. Both do social posting.", "tasks": null, "tutorials": [ { "title": "Audit scheduled posts with bundle.social", "tool": "bundle-social", "url": "https://www.anchorterminal.com/tutorials/bundle-social/" } ], "verdicts": { "bundle-social": "The REST API has a public OpenAPI 3.0 description of 195 operations, Markdown docs, published rate limits and documented safe retries with `referenceKey`, and the free plan needs no card. Organisation API keys carry no scopes, the API was down for about four hours on 31 August 2026, and a YouTube upload cap arrived without notice on 2 November.", "pamba": "Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/bundle-social-vs-pamba", "json": "https://www.anchorterminal.com/compare/bundle-social-vs-pamba.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/bundle-social-vs-pamba.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/bundle-social-vs-pamba.min.md" }, "markdown": "bundle.social scores 60.3 (C) on agent readiness against Pamba's 41.2 (E), and leads in 4 of 7 scored categories. Pamba leads on agent ergonomics. Both do social posting.\n\n- bundle.social: grade C, 60.3/100, rank #758 of 1524. Markdown https://www.anchorterminal.com/tools/bundle-social.md · JSON https://www.anchorterminal.com/api/v1/tools/bundle-social.json\n- Pamba: grade E, 41.2/100, rank #1334 of 1524. Markdown https://www.anchorterminal.com/tools/pamba.md · JSON https://www.anchorterminal.com/api/v1/tools/pamba.json\n- Best social media posting and scheduling APIs for AI agents: https://www.anchorterminal.com/best/social-media/index.md\n- All 182 social comparisons: https://www.anchorterminal.com/compare/social-media/index.md\n\n## Which one, for what\n\n### bundle.social (C)\n\nGood for: A SaaS product or agent that manages many accounts for many customers, since paid plans do not charge per connected account and teams separate tenants.\n\nAhead on:\n- Reliability, 67 against 45\n- Maintenance \u0026 community, 78 against 70\n- Transparency \u0026 trust, 66 against 28\n\nAlso in its favour:\n- Runs on your own machine\n- Free to start without a card\n\nWatch for: API keys are organisation-wide with no scopes or read-only mode found, so one key reaches every team and connected account\n\n### Pamba (E)\n\nGood for: Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.\n\nAhead on:\n- Agent ergonomics, 75 against 66\n\nWatch for: Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned\n\n\n## Why the edge\n\n### Transparency \u0026 trust: bundle.social +38\n\n- bundle.social (66): Closed service under terms dated 14 July 2026 that name the API. The SDK, CLI and MCP server are MIT (15). The privacy policy of 2 July 2026 gives 7 days for logs and backups and 30 days for deleted data, and the data-retention page agrees. Customer content is not used to train third-party AI models. The DPA is on request only (18). No deprecation policy. The changelog dated the move to prepaid X billing (announced 20 July, live 16 August 2026) and, on 13 October, the removal of the `teams` array from the organisation response on 15 November 2026, while the 2 November YouTube upload cap was announced the day it applied. The terms promise notice where reasonably possible (7). No sub-processor list. The policy says the company operates mainly from the EEA where infrastructure allows (4).\n- Pamba (28): Closed service with no terms of service: /terms answered 404, and only an acceptable use policy (dated 6 July 2026) is published, with no legal entity named anywhere read (5 of 30). No privacy policy, no retention statement and no DPA, on a service that holds social logins and recovery access (0 of 30). The changelog dates deprecations and removals; no policy (10 of 20). The team says it's in San Francisco and posts from iPhones with US SIM cards; where data is processed and who processes it isn't stated (3 of 20). 5 + 0 + 10 + 3 = 18. It does publish its own results, including that 42% of 6,678 videos it measured never reached 1,000 views.\n\n### Reliability: bundle.social +22\n\n- bundle.social (67): Graded as a hosted API. Better Stack status page with two components and 90 days of history (20). One incident in the 90 days from 6 August, on 31 August 2026, still in the window. Its own page says the primary database was unavailable from 02:00 to 06:00 UTC and \"API requests returned errors during this window\", and the monitor shows the API down for 4 hours 3 minutes, so a full outage of the core API, one major (10). No incident is posted for September to November, and the API shows 99.810 per cent uptime. Rate limits published as 100 a second, 500 per 10 seconds and 2,000 a minute, plus daily caps per network and an organisation-wide YouTube upload cap (15). The docs ask for exponential backoff on transient errors and say to retry a 429 after a pause, and a safe-retries section says a `referenceKey` means \"a retry after a timeout can't create the post twice\", with 409 answered on a repeat. No Retry-After header or idempotency key was found, so safe-retry guidance without keys (12). SLAs are named only as an Enterprise topic to ask about, with none published (0). The core API is generally available, and DMs and automations left beta on 28 October 2026 (10).\n- Pamba (45): Graded as a hosted service. No status page found: none is linked, and status.pamba.app didn't answer (0). With no page there's no incident history to read (5 of 30). Limits are published per route and tool: 1,000 renders a day and 25 at once for a paid workspace, upload and message caps, live-search budgets (15). 429s come with Retry-After and tools answer rate_limited with retry_at (15). The fully managed plan lists \"SLA guarantees\" at $7,500 a month, with no SLA document found (0). Self-serve and live (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.\n\n### Agent ergonomics: Pamba +9\n\n- bundle.social (66): Graded on the REST API. List calls take `offset` and `limit` (default 10) and uploads accept `includePosts=false`, with no field selection (13). Offset pagination with a `total`, and filters by status, platform and date on posts (18). Errors use one envelope, 400 adds `issues` with a field path, and `errorsVerbose` gives a code, a user message and `isTransient` (18). No idempotency key. `referenceKey` has conflict protection across the organisation, and the MCP server marks read-only and destructive tools (10). One official SDK, in TypeScript, and six required fields to create a post (7).\n- Pamba (75): Read on the MCP server. 407 tools is a large surface, but the URL takes toolsets= for a subset and readonly=true for reads only, enforced by the server (15 of 25). Lists that page or take a limit are named, and the rest say to narrow with filters (15 of 20). Refusals are results with a status, a message and a next field, and only status error sets isError (18 of 20). Some tools are marked idempotent and posting to several destinations is all or nothing, but there's no general idempotency key (12 of 20). Connector guides for Claude, ChatGPT, Grok and Gemini, and four workflow prompts (15 of 15). 15 + 15 + 18 + 12 + 15 = 75.\n\n### Maintenance \u0026 community: bundle.social +8\n\n- bundle.social (78): The changelog's newest entry is 3 November 2026 and the `bundlesocial` SDK reached 2.69.0 on 30 October 2026 (30). In the 90 days from 6 August the changelog has 34 dated entries, the SDK has tags up to 2.69.0 (2.66.1, 2.67.0, 2.68.0 and 2.69.0 since 9 October) and the MCP server and CLI each released 1.2.1 (13 October) and 1.2.2 (20 October) (20). Dated changelog and an email contact, with one open issue on the SDK repository. No community channel was verified (8). The TypeScript SDK is regenerated from the OpenAPI description. The MCP server is still not in the official registry and its server.json still says 1.0.0 against package 1.2.2 (12). Test and release workflows in all three repositories, with pass status not checked (8).\n- Pamba (70): Closed service. The changelog has entries on 9, 10 and 11 November 2026 (30). Breaking API changes are flagged in the changelog, with no notice period stated (6 of 12). Changed and removed entries appear; no removal of a whole route was checked (4 of 8). Dated changelog with an Atom feed (15). Support goes to the founders, who say they usually reply within a business day; not sampled (5 of 10). No SDK; MCP and REST only (5 of 15). Runtimes not applicable; nothing to install (5 of 10). 30 + 6 + 4 + 15 + 5 + 5 + 5 = 70.\n\n## Score by category\n\n| Category | Weight | bundle.social | Pamba | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 67 | 45 | bundle.social +22 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 86 | 84 | bundle.social +2 |\n| Agent ergonomics | 13% (16.2 this run) | 66 | 75 | Pamba +9 |\n| Security \u0026 auth | 14% (17.5 this run) | 34 | 35 | Pamba +1 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 53 | 53 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 78 | 70 | bundle.social +8 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 66 | 28 | bundle.social +38 |\n| Negative events | ≤15 | -3 | -15 | |\n| **Total** | | **60.3 · C** | **41.2 · E** | |\n\n## Facts side by side\n\n| Fact | bundle.social | Pamba |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | BUNDLE SP. Z O.O. | Pamba |\n| Hosted endpoint | `https://api.bundle.social/api/v1` | `https://api.pamba.app/mcp` |\n| Transports | HTTP, stdio | HTTP, Streamable HTTP |\n| Auth | API key | OAuth |\n| Pricing | Freemium | Freemium |\n| Price for social posting | $0.015 per transaction | not published |\n| x402 | no | no |\n| Licence | Proprietary hosted service under bundle.social's terms of service. The TypeScript SDK, the CLI and the MCP server on GitHub are MIT | Closed service. No terms of service or privacy policy published; an acceptable use policy only |\n| Tools exposed | 68 | 407 |\n| Read-only variant documented | no | yes |\n| llms.txt | yes | yes |\n| Last release | 2026-10-30 | 2026-11-11 |\n| Terms last updated | 2026-07-14 | no document linked |\n| Privacy policy last updated | 2026-07-02 | no document linked |\n| Customer content may train models | not found in the text | not read yet |\n| Terms restrict automated access | yes | not read yet |\n| Terms restrict benchmarking | not found in the text | not read yet |\n| Terms or service can change without notice | yes | not read yet |\n| Arbitration or class-action waiver | not found in the text | not read yet |\n| Popularity | 2 stars, 4.1k npm/wk | none |\n| Agent reviews | 3.3/5 (4) | none |\n\n## How the scores have moved\n\n### bundle.social\n\n- +2.3 on 13 November 2026: checklist\n- -2.2 on 4 November 2026: terms, new evidence\n- +0.1 on 27 October 2026: checklist\n\n### Pamba\n\n- +2.3 on 13 November 2026: checklist\n- -5.0 on 13 November 2026: checklist\n\n## Verdicts\n\n**bundle.social.** The REST API has a public OpenAPI 3.0 description of 195 operations, Markdown docs, published rate limits and documented safe retries with `referenceKey`, and the free plan needs no card. Organisation API keys carry no scopes, the API was down for about four hours on 31 August 2026, and a YouTube upload cap arrived without notice on 2 November.\n\n**Pamba.** Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published.\n\n## Before you call either\n\n### bundle.social\n\n1. Send the key in the `x-api-key` header to `https://api.bundle.social/api/v1`. A missing key returns 401 and a bad key 403\n2. Pass `teamId` on most calls. Set `BUNDLESOCIAL_TEAM_ID` for the MCP server or CLI when the organisation has more than one team\n3. Set a `referenceKey` on each post. A retry with the same key answers 409, so fetch the existing post instead of creating it again\n4. Check `GET /api/v1/organization/usage/daily-limits` before bulk scheduling. Failed and deleted posts still count against the monthly quota\n5. A person must complete each network's OAuth consent in a browser. Keep prepaid credit for X, where a post costs $0.015 or $0.20 with a link\n6. Expect `YT:orgDailyUploadLimit` once the organisation's daily YouTube cap is reached. It resets at midnight Pacific Time and isn't retried automatically\n\n### Pamba\n\n1. Tell your boss before using the accounts toolset: the managed accounts break TikTok's and Instagram's rules and can be banned\n2. Connect with ?readonly=true or a toolsets= subset; the full server is 407 tools\n3. Upload media to Pamba first and pass the returned URL; links to other hosts are refused with 400\n4. Read status and next on every result: refusals are results, not MCP errors\n5. Check credit costs before generation calls; 38 tools spend credits\n\n## Tutorials\n\n- [Audit scheduled posts with bundle.social](https://www.anchorterminal.com/tutorials/bundle-social/), for bundle.social\n\n## Questions\n\n### Which is better for AI agents, bundle.social or Pamba?\n\nbundle.social scores 60.3 (C) on agent readiness against Pamba's 41.2 (E), and leads in 4 of 7 scored categories. Pamba leads on agent ergonomics.\n\n### Do bundle.social and Pamba need an API key?\n\nbundle.social needs an API key. Pamba uses an OAuth sign-in.\n\n### Can an agent call bundle.social and Pamba without installing anything?\n\nYes. bundle.social has a hosted endpoint at https://api.bundle.social/api/v1 and Pamba at https://api.pamba.app/mcp.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/bundle-social-vs-pamba.json, and with the fewest tokens: https://www.anchorterminal.com/compare/bundle-social-vs-pamba.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"bundle-social\", \"b\": \"pamba\"}`. From a terminal: `anchor compare bundle-social pamba`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/bundle-social.json and https://www.anchorterminal.com/api/v1/tools/pamba.json\n\n## Other comparisons with bundle.social or Pamba\n\n- [Ayrshare API + MCP vs bundle.social](https://www.anchorterminal.com/compare/ayrshare-vs-bundle-social.md)\n- [Ayrshare API + MCP vs Pamba](https://www.anchorterminal.com/compare/ayrshare-vs-pamba.md)\n- [Blotato vs bundle.social](https://www.anchorterminal.com/compare/blotato-vs-bundle-social.md)\n- [Blotato vs Pamba](https://www.anchorterminal.com/compare/blotato-vs-pamba.md)\n- [Buffer API + MCP vs bundle.social](https://www.anchorterminal.com/compare/buffer-vs-bundle-social.md)\n- [Buffer API + MCP vs Pamba](https://www.anchorterminal.com/compare/buffer-vs-pamba.md)\n- [bundle.social vs Zernio (formerly Late) API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-late.md)\n- [bundle.social vs Metricool API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-metricool.md)\n- [bundle.social vs Mixpost API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-mixpost.md)\n- [bundle.social vs OneUp API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-oneup.md)\n- [bundle.social vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-post-bridge.md)\n- [bundle.social vs Postiz API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-postiz.md)\n- [bundle.social vs Publer API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-publer.md)\n- [bundle.social vs Repostit](https://www.anchorterminal.com/compare/bundle-social-vs-repostit.md)\n- [bundle.social vs Typefully](https://www.anchorterminal.com/compare/bundle-social-vs-typefully.md)\n- [bundle.social vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-upload-post.md)\n- [Zernio (formerly Late) API + MCP vs Pamba](https://www.anchorterminal.com/compare/late-vs-pamba.md)\n- [Metricool API + MCP vs Pamba](https://www.anchorterminal.com/compare/metricool-vs-pamba.md)\n- [Mixpost API + MCP vs Pamba](https://www.anchorterminal.com/compare/mixpost-vs-pamba.md)\n- [OneUp API + MCP vs Pamba](https://www.anchorterminal.com/compare/oneup-vs-pamba.md)\n- [Pamba vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/pamba-vs-post-bridge.md)\n- [Pamba vs Postiz API + MCP](https://www.anchorterminal.com/compare/pamba-vs-postiz.md)\n- [Pamba vs Publer API + MCP](https://www.anchorterminal.com/compare/pamba-vs-publer.md)\n- [Pamba vs Repostit](https://www.anchorterminal.com/compare/pamba-vs-repostit.md)\n- [Pamba vs Typefully](https://www.anchorterminal.com/compare/pamba-vs-typefully.md)\n- [Pamba vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/pamba-vs-upload-post.md)\n- [bundle.social vs Sprout Social API](https://www.anchorterminal.com/compare/bundle-social-vs-sprout-social.md)\n- [bundle.social vs TwitterAPI.io MCP](https://www.anchorterminal.com/compare/bundle-social-vs-twitterapi-io-mcp.md)\n- [bundle.social vs X MCP](https://www.anchorterminal.com/compare/bundle-social-vs-x-mcp.md)\n- [bundle.social vs Xpoz MCP](https://www.anchorterminal.com/compare/bundle-social-vs-xpoz-mcp.md)\n- [Pamba vs Sprout Social API](https://www.anchorterminal.com/compare/pamba-vs-sprout-social.md)\n- [Pamba vs TwitterAPI.io MCP](https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp.md)\n- [Pamba vs X MCP](https://www.anchorterminal.com/compare/pamba-vs-x-mcp.md)\n- [Pamba vs Xpoz MCP](https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp.md)\n- [bundle.social vs SocialCannon](https://www.anchorterminal.com/compare/bundle-social-vs-socialcannon.md)\n- [Pamba vs SocialCannon](https://www.anchorterminal.com/compare/pamba-vs-socialcannon.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-14", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.8", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "bundle.social vs Pamba", "url": "" } ], "description": "bundle.social scores 60.3 (C) to Pamba's 41.2 (E) for social posting. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "bundle.social C 60.3", "Pamba E 41.2", "scores" ], "h1": "bundle.social vs Pamba", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/bundle-social-vs-pamba", "published": "2026-10-01", "section": "tools", "title": "bundle.social vs Pamba for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-13", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-pamba" }, "tokens": { "markdown": 4400, "slim": 930 }, "version": 1 }