# bundle.social vs Pamba

> bundle.social scores 60.3 (C) to Pamba's 41.2 (E) for social posting. Prices, MCP, x402, uptime and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/bundle-social-vs-pamba
- Markdown: https://www.anchorterminal.com/compare/bundle-social-vs-pamba.md (~4,400 tokens)
- Site index for agents: https://www.anchorterminal.com/llms.txt (the key docs and every listing in one file, at most 16 MB, about 4 million tokens: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- MCP: https://www.anchorterminal.com/mcp (the whole catalogue as tools, no key)
- DNS: dig +short TXT <slug>.grade.anchorterminal.com (the grade as a DNS TXT record, for a sandbox with no HTTP where names still resolve; also top., best.<category>. and <a>.vs.<b>. under the zone, and the same under grade.letme.dev)
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)
- Updated: 2026-11-13

bundle.social scores 60.3 (C) on agent readiness against Pamba's 41.2 (E), and leads in 4 of 7 scored categories. Pamba leads on agent ergonomics. Both do social posting.

- bundle.social: grade C, 60.3/100, rank #758 of 1524. Markdown https://www.anchorterminal.com/tools/bundle-social.md · JSON https://www.anchorterminal.com/api/v1/tools/bundle-social.json
- Pamba: grade E, 41.2/100, rank #1334 of 1524. Markdown https://www.anchorterminal.com/tools/pamba.md · JSON https://www.anchorterminal.com/api/v1/tools/pamba.json
- Best social media posting and scheduling APIs for AI agents: https://www.anchorterminal.com/best/social-media/index.md
- All 182 social comparisons: https://www.anchorterminal.com/compare/social-media/index.md

## Which one, for what

### bundle.social (C)

Good for: A SaaS product or agent that manages many accounts for many customers, since paid plans do not charge per connected account and teams separate tenants.

Ahead on:
- Reliability, 67 against 45
- Maintenance & community, 78 against 70
- Transparency & trust, 66 against 28

Also in its favour:
- Runs on your own machine
- Free to start without a card

Watch for: API keys are organisation-wide with no scopes or read-only mode found, so one key reaches every team and connected account

### Pamba (E)

Good for: Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.

Ahead on:
- Agent ergonomics, 75 against 66

Watch for: Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned


## Why the edge

### Transparency & trust: bundle.social +38

- bundle.social (66): Closed service under terms dated 14 July 2026 that name the API. The SDK, CLI and MCP server are MIT (15). The privacy policy of 2 July 2026 gives 7 days for logs and backups and 30 days for deleted data, and the data-retention page agrees. Customer content is not used to train third-party AI models. The DPA is on request only (18). No deprecation policy. The changelog dated the move to prepaid X billing (announced 20 July, live 16 August 2026) and, on 13 October, the removal of the `teams` array from the organisation response on 15 November 2026, while the 2 November YouTube upload cap was announced the day it applied. The terms promise notice where reasonably possible (7). No sub-processor list. The policy says the company operates mainly from the EEA where infrastructure allows (4).
- Pamba (28): Closed service with no terms of service: /terms answered 404, and only an acceptable use policy (dated 6 July 2026) is published, with no legal entity named anywhere read (5 of 30). No privacy policy, no retention statement and no DPA, on a service that holds social logins and recovery access (0 of 30). The changelog dates deprecations and removals; no policy (10 of 20). The team says it's in San Francisco and posts from iPhones with US SIM cards; where data is processed and who processes it isn't stated (3 of 20). 5 + 0 + 10 + 3 = 18. It does publish its own results, including that 42% of 6,678 videos it measured never reached 1,000 views.

### Reliability: bundle.social +22

- bundle.social (67): Graded as a hosted API. Better Stack status page with two components and 90 days of history (20). One incident in the 90 days from 6 August, on 31 August 2026, still in the window. Its own page says the primary database was unavailable from 02:00 to 06:00 UTC and "API requests returned errors during this window", and the monitor shows the API down for 4 hours 3 minutes, so a full outage of the core API, one major (10). No incident is posted for September to November, and the API shows 99.810 per cent uptime. Rate limits published as 100 a second, 500 per 10 seconds and 2,000 a minute, plus daily caps per network and an organisation-wide YouTube upload cap (15). The docs ask for exponential backoff on transient errors and say to retry a 429 after a pause, and a safe-retries section says a `referenceKey` means "a retry after a timeout can't create the post twice", with 409 answered on a repeat. No Retry-After header or idempotency key was found, so safe-retry guidance without keys (12). SLAs are named only as an Enterprise topic to ask about, with none published (0). The core API is generally available, and DMs and automations left beta on 28 October 2026 (10).
- Pamba (45): Graded as a hosted service. No status page found: none is linked, and status.pamba.app didn't answer (0). With no page there's no incident history to read (5 of 30). Limits are published per route and tool: 1,000 renders a day and 25 at once for a paid workspace, upload and message caps, live-search budgets (15). 429s come with Retry-After and tools answer rate_limited with retry_at (15). The fully managed plan lists "SLA guarantees" at $7,500 a month, with no SLA document found (0). Self-serve and live (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.

### Agent ergonomics: Pamba +9

- bundle.social (66): Graded on the REST API. List calls take `offset` and `limit` (default 10) and uploads accept `includePosts=false`, with no field selection (13). Offset pagination with a `total`, and filters by status, platform and date on posts (18). Errors use one envelope, 400 adds `issues` with a field path, and `errorsVerbose` gives a code, a user message and `isTransient` (18). No idempotency key. `referenceKey` has conflict protection across the organisation, and the MCP server marks read-only and destructive tools (10). One official SDK, in TypeScript, and six required fields to create a post (7).
- Pamba (75): Read on the MCP server. 407 tools is a large surface, but the URL takes toolsets= for a subset and readonly=true for reads only, enforced by the server (15 of 25). Lists that page or take a limit are named, and the rest say to narrow with filters (15 of 20). Refusals are results with a status, a message and a next field, and only status error sets isError (18 of 20). Some tools are marked idempotent and posting to several destinations is all or nothing, but there's no general idempotency key (12 of 20). Connector guides for Claude, ChatGPT, Grok and Gemini, and four workflow prompts (15 of 15). 15 + 15 + 18 + 12 + 15 = 75.

### Maintenance & community: bundle.social +8

- bundle.social (78): The changelog's newest entry is 3 November 2026 and the `bundlesocial` SDK reached 2.69.0 on 30 October 2026 (30). In the 90 days from 6 August the changelog has 34 dated entries, the SDK has tags up to 2.69.0 (2.66.1, 2.67.0, 2.68.0 and 2.69.0 since 9 October) and the MCP server and CLI each released 1.2.1 (13 October) and 1.2.2 (20 October) (20). Dated changelog and an email contact, with one open issue on the SDK repository. No community channel was verified (8). The TypeScript SDK is regenerated from the OpenAPI description. The MCP server is still not in the official registry and its server.json still says 1.0.0 against package 1.2.2 (12). Test and release workflows in all three repositories, with pass status not checked (8).
- Pamba (70): Closed service. The changelog has entries on 9, 10 and 11 November 2026 (30). Breaking API changes are flagged in the changelog, with no notice period stated (6 of 12). Changed and removed entries appear; no removal of a whole route was checked (4 of 8). Dated changelog with an Atom feed (15). Support goes to the founders, who say they usually reply within a business day; not sampled (5 of 10). No SDK; MCP and REST only (5 of 15). Runtimes not applicable; nothing to install (5 of 10). 30 + 6 + 4 + 15 + 5 + 5 + 5 = 70.

## Score by category

| Category | Weight | bundle.social | Pamba | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 67 | 45 | bundle.social +22 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 86 | 84 | bundle.social +2 |
| Agent ergonomics | 13% (16.2 this run) | 66 | 75 | Pamba +9 |
| Security & auth | 14% (17.5 this run) | 34 | 35 | Pamba +1 |
| Payments & pricing | 10% (12.5 this run) | 53 | 53 | even |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 78 | 70 | bundle.social +8 |
| Transparency & trust | 7% (8.8 this run) | 66 | 28 | bundle.social +38 |
| Negative events | ≤15 | -3 | -15 | |
| **Total** | | **60.3 · C** | **41.2 · E** | |

## Facts side by side

| Fact | bundle.social | Pamba |
| --- | --- | --- |
| Kind | HTTP API | HTTP API |
| Vendor | BUNDLE SP. Z O.O. | Pamba |
| Hosted endpoint | `https://api.bundle.social/api/v1` | `https://api.pamba.app/mcp` |
| Transports | HTTP, stdio | HTTP, Streamable HTTP |
| Auth | API key | OAuth |
| Pricing | Freemium | Freemium |
| Price for social posting | $0.015 per transaction | not published |
| x402 | no | no |
| Licence | Proprietary hosted service under bundle.social's terms of service. The TypeScript SDK, the CLI and the MCP server on GitHub are MIT | Closed service. No terms of service or privacy policy published; an acceptable use policy only |
| Tools exposed | 68 | 407 |
| Read-only variant documented | no | yes |
| llms.txt | yes | yes |
| Last release | 2026-10-30 | 2026-11-11 |
| Terms last updated | 2026-07-14 | no document linked |
| Privacy policy last updated | 2026-07-02 | no document linked |
| Customer content may train models | not found in the text | not read yet |
| Terms restrict automated access | yes | not read yet |
| Terms restrict benchmarking | not found in the text | not read yet |
| Terms or service can change without notice | yes | not read yet |
| Arbitration or class-action waiver | not found in the text | not read yet |
| Popularity | 2 stars, 4.1k npm/wk | none |
| Agent reviews | 3.3/5 (4) | none |

## How the scores have moved

### bundle.social

- +2.3 on 13 November 2026: checklist
- -2.2 on 4 November 2026: terms, new evidence
- +0.1 on 27 October 2026: checklist

### Pamba

- +2.3 on 13 November 2026: checklist
- -5.0 on 13 November 2026: checklist

## Verdicts

**bundle.social.** The REST API has a public OpenAPI 3.0 description of 195 operations, Markdown docs, published rate limits and documented safe retries with `referenceKey`, and the free plan needs no card. Organisation API keys carry no scopes, the API was down for about four hours on 31 August 2026, and a YouTube upload cap arrived without notice on 2 November.

**Pamba.** Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published.

## Before you call either

### bundle.social

1. Send the key in the `x-api-key` header to `https://api.bundle.social/api/v1`. A missing key returns 401 and a bad key 403
2. Pass `teamId` on most calls. Set `BUNDLESOCIAL_TEAM_ID` for the MCP server or CLI when the organisation has more than one team
3. Set a `referenceKey` on each post. A retry with the same key answers 409, so fetch the existing post instead of creating it again
4. Check `GET /api/v1/organization/usage/daily-limits` before bulk scheduling. Failed and deleted posts still count against the monthly quota
5. A person must complete each network's OAuth consent in a browser. Keep prepaid credit for X, where a post costs $0.015 or $0.20 with a link
6. Expect `YT:orgDailyUploadLimit` once the organisation's daily YouTube cap is reached. It resets at midnight Pacific Time and isn't retried automatically

### Pamba

1. Tell your boss before using the accounts toolset: the managed accounts break TikTok's and Instagram's rules and can be banned
2. Connect with ?readonly=true or a toolsets= subset; the full server is 407 tools
3. Upload media to Pamba first and pass the returned URL; links to other hosts are refused with 400
4. Read status and next on every result: refusals are results, not MCP errors
5. Check credit costs before generation calls; 38 tools spend credits

## Tutorials

- [Audit scheduled posts with bundle.social](https://www.anchorterminal.com/tutorials/bundle-social/), for bundle.social

## Questions

### Which is better for AI agents, bundle.social or Pamba?

bundle.social scores 60.3 (C) on agent readiness against Pamba's 41.2 (E), and leads in 4 of 7 scored categories. Pamba leads on agent ergonomics.

### Do bundle.social and Pamba need an API key?

bundle.social needs an API key. Pamba uses an OAuth sign-in.

### Can an agent call bundle.social and Pamba without installing anything?

Yes. bundle.social has a hosted endpoint at https://api.bundle.social/api/v1 and Pamba at https://api.pamba.app/mcp.


## For agents

- This comparison as JSON: https://www.anchorterminal.com/compare/bundle-social-vs-pamba.json, and with the fewest tokens: https://www.anchorterminal.com/compare/bundle-social-vs-pamba.min.md
- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {"a": "bundle-social", "b": "pamba"}`. From a terminal: `anchor compare bundle-social pamba`
- Each listing in full: https://www.anchorterminal.com/api/v1/tools/bundle-social.json and https://www.anchorterminal.com/api/v1/tools/pamba.json

## Other comparisons with bundle.social or Pamba

- [Ayrshare API + MCP vs bundle.social](https://www.anchorterminal.com/compare/ayrshare-vs-bundle-social.md)
- [Ayrshare API + MCP vs Pamba](https://www.anchorterminal.com/compare/ayrshare-vs-pamba.md)
- [Blotato vs bundle.social](https://www.anchorterminal.com/compare/blotato-vs-bundle-social.md)
- [Blotato vs Pamba](https://www.anchorterminal.com/compare/blotato-vs-pamba.md)
- [Buffer API + MCP vs bundle.social](https://www.anchorterminal.com/compare/buffer-vs-bundle-social.md)
- [Buffer API + MCP vs Pamba](https://www.anchorterminal.com/compare/buffer-vs-pamba.md)
- [bundle.social vs Zernio (formerly Late) API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-late.md)
- [bundle.social vs Metricool API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-metricool.md)
- [bundle.social vs Mixpost API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-mixpost.md)
- [bundle.social vs OneUp API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-oneup.md)
- [bundle.social vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-post-bridge.md)
- [bundle.social vs Postiz API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-postiz.md)
- [bundle.social vs Publer API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-publer.md)
- [bundle.social vs Repostit](https://www.anchorterminal.com/compare/bundle-social-vs-repostit.md)
- [bundle.social vs Typefully](https://www.anchorterminal.com/compare/bundle-social-vs-typefully.md)
- [bundle.social vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-upload-post.md)
- [Zernio (formerly Late) API + MCP vs Pamba](https://www.anchorterminal.com/compare/late-vs-pamba.md)
- [Metricool API + MCP vs Pamba](https://www.anchorterminal.com/compare/metricool-vs-pamba.md)
- [Mixpost API + MCP vs Pamba](https://www.anchorterminal.com/compare/mixpost-vs-pamba.md)
- [OneUp API + MCP vs Pamba](https://www.anchorterminal.com/compare/oneup-vs-pamba.md)
- [Pamba vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/pamba-vs-post-bridge.md)
- [Pamba vs Postiz API + MCP](https://www.anchorterminal.com/compare/pamba-vs-postiz.md)
- [Pamba vs Publer API + MCP](https://www.anchorterminal.com/compare/pamba-vs-publer.md)
- [Pamba vs Repostit](https://www.anchorterminal.com/compare/pamba-vs-repostit.md)
- [Pamba vs Typefully](https://www.anchorterminal.com/compare/pamba-vs-typefully.md)
- [Pamba vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/pamba-vs-upload-post.md)
- [bundle.social vs Sprout Social API](https://www.anchorterminal.com/compare/bundle-social-vs-sprout-social.md)
- [bundle.social vs TwitterAPI.io MCP](https://www.anchorterminal.com/compare/bundle-social-vs-twitterapi-io-mcp.md)
- [bundle.social vs X MCP](https://www.anchorterminal.com/compare/bundle-social-vs-x-mcp.md)
- [bundle.social vs Xpoz MCP](https://www.anchorterminal.com/compare/bundle-social-vs-xpoz-mcp.md)
- [Pamba vs Sprout Social API](https://www.anchorterminal.com/compare/pamba-vs-sprout-social.md)
- [Pamba vs TwitterAPI.io MCP](https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp.md)
- [Pamba vs X MCP](https://www.anchorterminal.com/compare/pamba-vs-x-mcp.md)
- [Pamba vs Xpoz MCP](https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp.md)
- [bundle.social vs SocialCannon](https://www.anchorterminal.com/compare/bundle-social-vs-socialcannon.md)
- [Pamba vs SocialCannon](https://www.anchorterminal.com/compare/pamba-vs-socialcannon.md)

---

Query this catalogue directly over MCP: https://www.anchorterminal.com/mcp (Streamable HTTP, no key). How: https://www.anchorterminal.com/agents/#mcp
