{ "data": { "a": { "slug": "bundle-social", "name": "bundle.social", "vendor": "BUNDLE SP. Z O.O.", "vendorUrl": "https://bundle.social", "kind": "http-api", "category": "social-media", "summary": "bundle.social is a hosted REST API from BUNDLE SP. Z O.O. in Warsaw for publishing, scheduling, commenting and reading analytics across 15 social networks. It also ships a TypeScript SDK, a CLI and a local MCP server.", "url": "https://www.anchorterminal.com/tools/bundle-social", "markdownUrl": "https://www.anchorterminal.com/tools/bundle-social.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/bundle-social.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/bundle-social.json", "repo": "https://github.com/bundleglobal/bundlesocial-node", "license": "Proprietary hosted service under bundle.social's terms of service. The TypeScript SDK, the CLI and the MCP server on GitHub are MIT", "transports": [ "http", "stdio" ], "remoteUrl": "https://api.bundle.social/api/v1", "packages": [ { "registry": "npm", "name": "bundlesocial" }, { "registry": "npm", "name": "bundlesocial-mcp" }, { "registry": "npm", "name": "bundlesocial-cli" } ], "auth": "api-key", "authNotes": "Self-serve organisation API key sent in the `x-api-key` header, created and rolled in the dashboard after a browser sign-up, up to 50 keys an organisation. Keys carry no scopes and reach every team. Connecting a social account needs a person to complete that network's OAuth consent through a hosted connect link.", "pricing": "freemium", "pricingNotes": "Free plan at $0 with 20 posts a month, three teams and API access, no payment details needed. Pro is $100 a month for 10,000 posts and Business $400 for 100,000, both with unlimited connected accounts. Enterprise is quoted. X actions are charged from prepaid credit at X's rates (https://bundle.social/pricing.md).", "priceSummary": "$100 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in llms.txt, pricing.md, the docs index or the OpenAPI description in the SDK repository (checked 2026-10-09).", "endpoints": [] }, "toolCount": 68, "popularity": { "githubStars": 2, "npmWeekly": 4095, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://info.bundle.social", "llmsTxt": "https://bundle.social/llms.txt", "openapi": "https://api.bundle.social/swagger-json", "capabilities": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload" ], "tags": [ "hosted", "freemium", "free-tier", "no-card", "api-key", "openapi", "llms-txt", "mcp", "cli", "typescript", "webhooks", "status-page" ], "lastRelease": "2026-10-06", "graded": true, "anchor": { "graded": true, "score": 60.1, "grade": "C", "agentReady": false, "rank": 530, "ranked": true, "rankOf": 950, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 78, "payments": 35, "reliability": 63, "schema": 86, "security": 34, "transparency": 65 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": 0, "verdict": "The REST API has a public OpenAPI 3.0 description of 194 operations, Markdown docs and published rate limits, and the free plan needs no card. Organisation API keys carry no scopes, there is no idempotency key, and the status page shows one API outage of 4 hours 3 minutes on 31 August 2026.", "bestFor": "A SaaS product or agent that manages many accounts for many customers, since paid plans do not charge per connected account and teams separate tenants.", "strengths": [ "OpenAPI 3.0.2 description with 194 operations, each with a description, plus llms.txt, llms-full.txt and Markdown copies of every docs page", "Paid plans are priced per organisation with no fee per connected account. The free plan covers 20 posts a month and needs no payment details", "Rate limits are published as three windows (100 a second, 500 per 10 seconds, 2,000 a minute), counted per endpoint for API keys", "Platform errors come back with a stable `code`, a `userFacingMessage` and an `isTransient` flag in `errorsVerbose`", "Valid security.txt and a disclosure policy that promises acknowledgement within 3 business days" ], "weaknesses": [ "API keys are organisation-wide with no scopes or read-only mode found, so one key reaches every team and connected account", "No idempotency key on `POST /api/v1/post`. A `referenceKey` with conflict protection is the nearest safeguard", "The status page records the API down for 4 hours 3 minutes on 31 August 2026", "The DPA is sent on request only, and no sub-processor list or certification was found", "One official SDK (TypeScript). The MCP server is local stdio only, with 68 tools and no toolsets" ], "agentNotes": [ "Send the key in the `x-api-key` header to `https://api.bundle.social/api/v1`. A missing key returns 401 and a bad key 403", "Pass `teamId` on most calls. Set `BUNDLESOCIAL_TEAM_ID` for the MCP server or CLI when the organisation has more than one team", "Set a `referenceKey` on each post and look it up with the reference-key endpoint before retrying a create, because there is no idempotency key", "Check `GET /api/v1/organization/usage/daily-limits` before bulk scheduling. Failed and deleted posts still count against the monthly quota", "A person must complete each network's OAuth consent in a browser. Keep prepaid credit for X, where a post costs $0.015 or $0.20 with a link" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 60.1 } ], "editorialScores": { "ergonomics": 66, "maintenance": 78, "payments": 35, "reliability": 63, "schema": 86, "security": 34, "transparency": 44 }, "provenanceScore": 86 }, "connect": { "install": "npm install bundlesocial", "http": "curl \"https://api.bundle.social/api/v1/team\" -H \"x-api-key: $BUNDLE_SOCIAL_API_KEY\"", "claudeCode": "claude mcp add bundlesocial --env BUNDLESOCIAL_API_KEY=sk_live_... -- npx -y bundlesocial-mcp", "config": { "mcpServers": { "bundlesocial": { "args": [ "-y", "bundlesocial-mcp" ], "command": "npx", "env": { "BUNDLESOCIAL_API_KEY": "sk_live_..." } } } } }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/bundle-social" }, "area": "communication", "unitPrices": [ { "item": "Pro plan", "unit": "month", "usd": 100, "note": "10,000 posts a month, unlimited connected accounts" }, { "item": "Business plan", "unit": "month", "usd": 400, "note": "100,000 posts a month" }, { "item": "X post", "unit": "tx", "usd": 0.015, "note": "X's charge passed through, from prepaid credit" }, { "item": "X post with a link", "unit": "tx", "usd": 0.2, "note": "X's charge passed through" } ], "provenance": { "legalEntity": "BUNDLE SP. Z O.O.", "domain": "bundle.social", "domainRegistered": "2023-09-17", "endpointOnVendorDomain": true, "terms": "https://bundle.social/terms", "privacy": "https://bundle.social/privacy", "statusPage": "https://bundlesocial.betteruptime.com/", "changelog": "https://info.bundle.social/changelog", "securityTxt": "valid", "checked": "2026-10-09", "notes": [ "The terms (last updated 14 July 2026) name BUNDLE SP. Z O.O., ul. Hoża 86 / 410, 00-682 Warsaw, KRS 0001103308, and say they govern the website, dashboard and API. Polish law applies.", "The privacy policy (last updated 2 July 2026) covers the same Service and says the company is a processor for customer content and connected account data.", "security.txt at bundle.social/.well-known/security.txt expires on 7 April 2027 and gives a contact address and the contact page.", "RDAP gives a registration date of 2023-09-17 for bundle.social.", "The status page is on Better Stack's betteruptime.com domain. The API answers at api.bundle.social and the docs at info.bundle.social." ], "score": 86 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/bundle-social.json", "live": { "slug": "bundle-social", "probe": { "target": "https://api.bundle.social/api/v1", "method": "get", "lastAt": "2026-10-10T02:07:04.364399785Z", "lastOk": true, "lastStatus": 200, "lastMs": 87, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 125, "p95ms24h": 336, "samples24h": 107, "samples30d": 107, "days": [ { "date": "2026-10-09", "probes": 85, "ok": 85 }, { "date": "2026-10-10", "probes": 22, "ok": 22 } ] }, "vendorStatus": { "page": "https://bundlesocial.betteruptime.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-10T00:50:11.659944209Z" }, "versions": [ { "registry": "github", "name": "bundleglobal/bundlesocial-node", "version": "v2.66.0", "released": "2026-10-06", "seenAt": "2026-10-09T16:44:11.330353144Z" }, { "registry": "npm", "name": "bundlesocial", "version": "2.66.0", "seenAt": "2026-10-09T16:44:07.124149089Z" }, { "registry": "npm", "name": "bundlesocial-cli", "version": "1.2.0", "seenAt": "2026-10-09T16:44:09.336926914Z" }, { "registry": "npm", "name": "bundlesocial-mcp", "version": "1.2.0", "seenAt": "2026-10-09T16:44:08.016971776Z" } ], "githubStars": 2, "npmWeekly": 4095, "pages": [ { "url": "https://info.bundle.social/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:40:30.493711689Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "3cc1075e6da1" }, { "url": "https://bundle.social/pricing.md", "kind": "pricing", "status": 200, "checkedAt": "2026-10-09T18:33:26.088434635Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a06b56dc1904" }, { "url": "https://bundle.social/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:33:28.243797522Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "873c63ca40f1" }, { "url": "https://bundle.social/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:33:30.268270502Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "cfd8eeb305a0" } ], "updatedAt": "2026-10-10T02:07:04.364399785Z" } }, "answer": "bundle.social and Postiz API + MCP score within a point of each other on agent readiness, 60.1 (C) and 59.3 (C). Postiz API + MCP leads on security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust.", "b": { "slug": "postiz", "name": "Postiz API + MCP", "vendor": "Postiz (Gitroom)", "vendorUrl": "https://postiz.com", "kind": "http-api", "category": "social-media", "summary": "Open-source social scheduler (AGPL-3.0) for 34 platforms that you can self-host free or use as Postiz Cloud from $29 a month.", "url": "https://www.anchorterminal.com/tools/postiz", "markdownUrl": "https://www.anchorterminal.com/tools/postiz.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/postiz.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/postiz.json", "repo": "https://github.com/gitroomhq/postiz-app", "license": "AGPL-3.0", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.postiz.com/public/v1", "packages": [ { "registry": "npm", "name": "@postiz/node" }, { "registry": "npm", "name": "postiz" } ], "auth": "mixed", "authNotes": "API key sent raw in the Authorization header (no Bearer prefix), or an OAuth app token prefixed pos_. The MCP accepts a Bearer header at /mcp, an OAuth flow at /mcp-oauth, or the key in the URL path at /mcp/{key}. Self-hosted instances need their own developer apps for each network.", "pricing": "paid", "pricingNotes": "Self-hosting is free under AGPL-3.0, but you register your own developer app with each network. Postiz Cloud has no free plan (7-day trial, card policy not stated). Standard $29 a month or $23 billed yearly (5 channels), Team $39 or $31 (10), Pro $49 or $39 (30), Ultimate $99 or $79 (100). API, CLI, webhooks and MCP on every plan, posts unlimited. The terms make fees non-refundable (https://postiz.com/pricing).", "priceSummary": "$29 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402 in docs, llms.txt or pricing (checked 2026-09-30).", "endpoints": [] }, "toolCount": 13, "popularity": { "githubStars": 36531, "npmWeekly": 368, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://docs.postiz.com", "llmsTxt": "https://docs.postiz.com/llms.txt", "openapi": "https://docs.postiz.com/public-api/openapi.json", "capabilities": [ "social.post", "social.schedule", "social.analytics", "social.media-upload" ], "tags": [ "hosted", "self-hosted", "local", "open-source", "mcp", "llms-txt", "openapi", "typescript", "webhooks" ], "lastRelease": "2026-09-22", "graded": true, "anchor": { "graded": true, "score": 59.3, "grade": "C", "agentReady": false, "rank": 552, "ranked": true, "rankOf": 950, "categoryRank": 4, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 65, "maintenance": 85, "payments": 30, "reliability": 53, "schema": 88, "security": 49, "transparency": 81 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": -3, "negativeNotes": [ "2026-07-20 and 2026-09-22. Three security fixes in the last 12 months. A path traversal in the self-hosted upload route that could read files outside UPLOAD_DIRECTORY, fixed in commit 7936062 labelled critical, and CVE-2026-94455 (enterprise endpoints accepting other JWT types) and CVE-2026-94456 (non-cryptographic IDs for OAuth secrets and codes), fixed on 22 September. All fixed and the latter two given CVEs, so we deduct less. -3 (https://github.com/gitroomhq/postiz-app/commit/793606226f981706cc0201c8023f0f2b57ce08e4, https://github.com/gitroomhq/postiz-app/commit/9259cf2429e8cc0c88414e88d5e6c783d7ffba63)" ], "verdict": "AGPL-3.0 and self-hostable with the API and MCP included, 34 platforms. Create-post capped at 90 requests an hour on every Cloud plan.", "bestFor": "Teams that want to self-host, or want 34 platforms including Mastodon, Farcaster, Discord and Slack on a flat plan.", "strengths": [ "AGPL-3.0 and self-hostable with the API and MCP included, 34 platforms", "OpenAPI 3.1 spec with 27 paths, llms.txt and Markdown docs", "MCP tools in source carry readOnlyHint, destructiveHint and idempotentHint, with when-not-to-use guidance", "v2.24.0 on 22 September 2026, and CVEs assigned and fixed through a published disclosure process", "Flat Cloud plans from $29 a month ($23 yearly) with unlimited posts" ], "weaknesses": [ "Create-post capped at 90 requests an hour on every Cloud plan", "One organisation key with no scopes, and the MCP OAuth grant is always read and write", "The docs document the API key in the MCP URL path at /mcp/{key}", "No idempotency key and no Retry-After guidance", "Self-hosting means your own developer app and review with each network" ], "agentNotes": [ "Send the key as the `Authorization` header with no `Bearer` prefix on REST calls", "Batch several posts into one create request to stay under 90 an hour", "Call integrationSchema (Get Settings) for a channel before scheduling, since each network has its own settings", "Use the Bearer header on /mcp rather than /mcp/{key} so the key stays out of logs", "Read output.errors on a failed schedule call and retry with the corrected fields" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59.3 } ], "editorialScores": { "ergonomics": 65, "maintenance": 85, "payments": 30, "reliability": 53, "schema": 88, "security": 49, "transparency": 75 }, "provenanceScore": 87 }, "connect": { "http": "curl https://api.postiz.com/public/v1/integrations -H \"Authorization: $POSTIZ_API_KEY\"", "claudeCode": "claude mcp add --transport http postiz https://mcp.postiz.com/mcp --header \"Authorization: Bearer $POSTIZ_API_KEY\"" }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/postiz" }, "area": "communication", "unitPrices": [ { "item": "Standard plan", "unit": "month", "usd": 29, "note": "5 channels. $278 a year" }, { "item": "Team plan", "unit": "month", "usd": 39, "note": "10 channels. $374 a year" }, { "item": "Pro plan", "unit": "month", "usd": 49, "note": "30 channels. $470 a year" }, { "item": "Ultimate plan", "unit": "month", "usd": 99, "note": "100 channels. $950 a year" } ], "provenance": { "legalEntity": "Gitroom Limited", "domain": "postiz.com", "domainRegistered": "2013-06-24", "domainNote": "postiz.com was registered in 2013, well before the project started in 2023.", "endpointOnVendorDomain": true, "terms": "https://postiz.com/terms-of-service", "privacy": "https://postiz.com/privacy-policy", "statusPage": "https://status.postiz.com", "changelog": "https://github.com/gitroomhq/postiz-app/releases", "securityTxt": "none", "checked": "2026-09-30", "notes": [ "Terms name Gitroom Limited (seller of paid plans) and Gitroom LLC together as Postiz" ], "score": 87 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/postiz.json", "live": { "slug": "postiz", "probe": { "target": "https://api.postiz.com/public/v1", "method": "get", "lastAt": "2026-10-10T02:07:21.058859539Z", "lastOk": true, "lastStatus": 404, "lastMs": 181, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 185, "p95ms24h": 313, "samples24h": 250, "samples30d": 2458, "days": [ { "date": "2026-09-30", "probes": 35, "ok": 35 }, { "date": "2026-10-01", "probes": 276, "ok": 276 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 272, "ok": 272 }, { "date": "2026-10-06", "probes": 272, "ok": 272 }, { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 22, "ok": 22 } ] }, "vendorStatus": { "page": "https://status.postiz.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-10T00:51:09.94552915Z" }, "versions": [ { "registry": "github", "name": "gitroomhq/postiz-app", "version": "v2.25.0", "released": "2026-10-02", "seenAt": "2026-10-09T17:14:13.90932421Z" }, { "registry": "npm", "name": "@postiz/node", "version": "1.0.8", "seenAt": "2026-10-09T17:14:11.699514478Z" }, { "registry": "npm", "name": "postiz", "version": "2.0.16", "seenAt": "2026-10-09T17:14:12.609033739Z" } ], "githubStars": 36935, "npmWeekly": 81, "securityTxt": { "url": "https://postiz.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-09T15:40:12.376097386Z" }, "llmsTxt": { "url": "https://docs.postiz.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-09T14:02:38.172648203Z" }, "domain": { "domain": "postiz.com", "registered": "2013-06-24", "source": "https://rdap.verisign.com/com/v1/domain/postiz.com", "checkedAt": "2026-10-04T13:06:04.948008258Z" }, "pages": [ { "url": "https://postiz.com/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-09T18:43:44.037182212Z", "changedAt": "2026-10-02T15:23:11.667972444Z", "fingerprint": "b43a89c371d7" }, { "url": "https://postiz.com/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:43:46.165800597Z", "changedAt": "2026-10-02T15:23:13.868758528Z", "fingerprint": "d9718ddb538b" }, { "url": "https://postiz.com/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:43:48.273242063Z", "changedAt": "2026-10-02T15:23:15.836946156Z", "fingerprint": "0b01371bd86b" } ], "updatedAt": "2026-10-10T02:07:21.058859539Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "BUNDLE SP. Z O.O.", "b": "Postiz (Gitroom)", "name": "Vendor" }, { "a": "https://api.bundle.social/api/v1", "b": "https://api.postiz.com/public/v1", "name": "Hosted endpoint" }, { "a": "HTTP, stdio", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "API key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Paid", "name": "Pricing" }, { "a": "$0.015 per transaction", "b": "not published", "name": "Price for social posting" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary hosted service under bundle.social's terms of service. The TypeScript SDK, the CLI and the MCP server on GitHub are MIT", "b": "AGPL-3.0", "name": "Licence" }, { "a": "68", "b": "13", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-06", "b": "2026-09-22", "name": "Last release" }, { "a": "2026-07-14", "b": "2026-05-03", "name": "Terms last updated" }, { "a": "2026-07-02", "b": "2026-05-03", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "yes", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "2 stars, 4.1k npm/wk", "b": "37k stars, 368 npm/wk", "name": "Popularity" }, { "a": "none", "b": "3/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "bundle.social and Postiz API + MCP score within a point of each other on agent readiness, 60.1 (C) and 59.3 (C). Postiz API + MCP leads on security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust.", "question": "Which is better for AI agents, bundle.social or Postiz API + MCP?" }, { "answer": "bundle.social needs an API key. Postiz API + MCP takes an API key or an OAuth sign-in.", "question": "Do bundle.social and Postiz API + MCP need an API key?" }, { "answer": "Yes. bundle.social has a hosted endpoint at https://api.bundle.social/api/v1 and Postiz API + MCP at https://api.postiz.com/public/v1.", "question": "Can an agent call bundle.social and Postiz API + MCP without installing anything?" }, { "answer": "No open-source release is listed for bundle.social. Postiz API + MCP is open source (AGPL-3.0).", "question": "Are bundle.social and Postiz API + MCP open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 63 against 53", "Payments \u0026 pricing, 35 against 30" ], "also": [ "Runs on your own machine", "Free to start without a card", "No incidents deducted, where Postiz API + MCP loses 3 points for them" ], "goodFor": "A SaaS product or agent that manages many accounts for many customers, since paid plans do not charge per connected account and teams separate tenants.", "slug": "bundle-social", "watchFor": "API keys are organisation-wide with no scopes or read-only mode found, so one key reaches every team and connected account" }, { "aheadOn": [ "Security \u0026 auth, 49 against 34", "Maintenance \u0026 community, 85 against 78", "Transparency \u0026 trust, 81 against 65" ], "also": [ "Open source" ], "goodFor": "Teams that want to self-host, or want 34 platforms including Mastodon, Farcaster, Discord and Slack on a flat plan.", "slug": "postiz", "watchFor": "Create-post capped at 90 requests an hour on every Cloud plan" } ], "job": { "capability": "social.post", "name": "Social posting" }, "others": [ { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-bundle-social.json", "title": "Ayrshare API + MCP vs bundle.social", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-bundle-social" }, { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-postiz.json", "title": "Ayrshare API + MCP vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-bundle-social.json", "title": "Blotato vs bundle.social", "url": "https://www.anchorterminal.com/compare/blotato-vs-bundle-social" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-postiz.json", "title": "Blotato vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-bundle-social.json", "title": "Buffer API + MCP vs bundle.social", "url": "https://www.anchorterminal.com/compare/buffer-vs-bundle-social" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-postiz.json", "title": "Buffer API + MCP vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/buffer-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-late.json", "title": "bundle.social vs Zernio (formerly Late) API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-late" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-metricool.json", "title": "bundle.social vs Metricool API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-metricool" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-mixpost.json", "title": "bundle.social vs Mixpost API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-mixpost" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-oneup.json", "title": "bundle.social vs OneUp API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-oneup" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-post-bridge.json", "title": "bundle.social vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-publer.json", "title": "bundle.social vs Publer API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-publer" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-typefully.json", "title": "bundle.social vs Typefully", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-typefully" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-upload-post.json", "title": "bundle.social vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/late-vs-postiz.json", "title": "Zernio (formerly Late) API + MCP vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/late-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/metricool-vs-postiz.json", "title": "Metricool API + MCP vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/metricool-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/mixpost-vs-postiz.json", "title": "Mixpost API + MCP vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/mixpost-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/oneup-vs-postiz.json", "title": "OneUp API + MCP vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/oneup-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-postiz.json", "title": "Post Bridge API + MCP vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/postiz-vs-publer.json", "title": "Postiz API + MCP vs Publer API + MCP", "url": "https://www.anchorterminal.com/compare/postiz-vs-publer" }, { "json": "https://www.anchorterminal.com/compare/postiz-vs-typefully.json", "title": "Postiz API + MCP vs Typefully", "url": "https://www.anchorterminal.com/compare/postiz-vs-typefully" }, { "json": "https://www.anchorterminal.com/compare/postiz-vs-upload-post.json", "title": "Postiz API + MCP vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/postiz-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-sprout-social.json", "title": "bundle.social vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-x-mcp.json", "title": "bundle.social vs X MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/postiz-vs-sprout-social.json", "title": "Postiz API + MCP vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/postiz-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/postiz-vs-x-mcp.json", "title": "Postiz API + MCP vs X MCP", "url": "https://www.anchorterminal.com/compare/postiz-vs-x-mcp" } ], "scores": [ { "bundle-social": 63, "by": 10, "edge": "bundle-social", "key": "reliability", "name": "Reliability", "postiz": 53, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "bundle-social": 86, "by": 2, "edge": "postiz", "key": "schema", "name": "Schema \u0026 documentation", "postiz": 88, "weight": 13 }, { "bundle-social": 66, "by": 1, "edge": "bundle-social", "key": "ergonomics", "name": "Agent ergonomics", "postiz": 65, "weight": 13 }, { "bundle-social": 34, "by": 15, "edge": "postiz", "key": "security", "name": "Security \u0026 auth", "postiz": 49, "weight": 14 }, { "bundle-social": 35, "by": 5, "edge": "bundle-social", "key": "payments", "name": "Payments \u0026 pricing", "postiz": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "bundle-social": 78, "by": 7, "edge": "postiz", "key": "maintenance", "name": "Maintenance \u0026 community", "postiz": 85, "weight": 7 }, { "bundle-social": 65, "by": 16, "edge": "postiz", "key": "transparency", "name": "Transparency \u0026 trust", "postiz": 81, "weight": 7 } ], "summary": "bundle.social and Postiz API + MCP score within a point of each other on agent readiness, 60.1 (C) and 59.3 (C). Postiz API + MCP leads on security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust. Both do social posting.", "verdicts": { "bundle-social": "The REST API has a public OpenAPI 3.0 description of 194 operations, Markdown docs and published rate limits, and the free plan needs no card. Organisation API keys carry no scopes, there is no idempotency key, and the status page shows one API outage of 4 hours 3 minutes on 31 August 2026.", "postiz": "AGPL-3.0 and self-hostable with the API and MCP included, 34 platforms. Create-post capped at 90 requests an hour on every Cloud plan." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/bundle-social-vs-postiz", "json": "https://www.anchorterminal.com/compare/bundle-social-vs-postiz.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/bundle-social-vs-postiz.md", "slim": "https://www.anchorterminal.com/compare/bundle-social-vs-postiz.min.md" }, "markdown": "bundle.social and Postiz API + MCP score within a point of each other on agent readiness, 60.1 (C) and 59.3 (C). Postiz API + MCP leads on security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust. Both do social posting.\n\n- bundle.social: grade C, 60.1/100, rank #530 of 950. Markdown https://www.anchorterminal.com/tools/bundle-social.md · JSON https://www.anchorterminal.com/api/v1/tools/bundle-social.json\n- Postiz API + MCP: grade C, 59.3/100, rank #552 of 950. Markdown https://www.anchorterminal.com/tools/postiz.md · JSON https://www.anchorterminal.com/api/v1/tools/postiz.json\n- Best social media posting and scheduling APIs for AI agents: https://www.anchorterminal.com/best/social-media/index.md\n- All 103 social comparisons: https://www.anchorterminal.com/compare/social-media/index.md\n\n## Which one, for what\n\n### bundle.social (C)\n\nGood for: A SaaS product or agent that manages many accounts for many customers, since paid plans do not charge per connected account and teams separate tenants.\n\nAhead on:\n- Reliability, 63 against 53\n- Payments \u0026 pricing, 35 against 30\n\nAlso in its favour:\n- Runs on your own machine\n- Free to start without a card\n- No incidents deducted, where Postiz API + MCP loses 3 points for them\n\nWatch for: API keys are organisation-wide with no scopes or read-only mode found, so one key reaches every team and connected account\n\n### Postiz API + MCP (C)\n\nGood for: Teams that want to self-host, or want 34 platforms including Mastodon, Farcaster, Discord and Slack on a flat plan.\n\nAhead on:\n- Security \u0026 auth, 49 against 34\n- Maintenance \u0026 community, 85 against 78\n- Transparency \u0026 trust, 81 against 65\n\nAlso in its favour:\n- Open source\n\nWatch for: Create-post capped at 90 requests an hour on every Cloud plan\n\n\n## Score by category\n\n| Category | Weight | bundle.social | Postiz API + MCP | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 63 | 53 | bundle.social +10 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 86 | 88 | Postiz API + MCP +2 |\n| Agent ergonomics | 13% (16.2 this run) | 66 | 65 | bundle.social +1 |\n| Security \u0026 auth | 14% (17.5 this run) | 34 | 49 | Postiz API + MCP +15 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 35 | 30 | bundle.social +5 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 78 | 85 | Postiz API + MCP +7 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 65 | 81 | Postiz API + MCP +16 |\n| Negative events | ≤15 | 0 | -3 | |\n| **Total** | | **60.1 · C** | **59.3 · C** | |\n\n## Facts side by side\n\n| Fact | bundle.social | Postiz API + MCP |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | BUNDLE SP. Z O.O. | Postiz (Gitroom) |\n| Hosted endpoint | `https://api.bundle.social/api/v1` | `https://api.postiz.com/public/v1` |\n| Transports | HTTP, stdio | HTTP, Streamable HTTP |\n| Auth | API key | OAuth or key |\n| Pricing | Freemium | Paid |\n| Price for social posting | $0.015 per transaction | not published |\n| x402 | no | no |\n| Licence | Proprietary hosted service under bundle.social's terms of service. The TypeScript SDK, the CLI and the MCP server on GitHub are MIT | AGPL-3.0 |\n| Tools exposed | 68 | 13 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-06 | 2026-09-22 |\n| Terms last updated | 2026-07-14 | 2026-05-03 |\n| Privacy policy last updated | 2026-07-02 | 2026-05-03 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | yes |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | yes | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 2 stars, 4.1k npm/wk | 37k stars, 368 npm/wk |\n| Agent reviews | none | 3/5 (2) |\n\n## Verdicts\n\n**bundle.social.** The REST API has a public OpenAPI 3.0 description of 194 operations, Markdown docs and published rate limits, and the free plan needs no card. Organisation API keys carry no scopes, there is no idempotency key, and the status page shows one API outage of 4 hours 3 minutes on 31 August 2026.\n\n**Postiz API + MCP.** AGPL-3.0 and self-hostable with the API and MCP included, 34 platforms. Create-post capped at 90 requests an hour on every Cloud plan.\n\n## Before you call either\n\n### bundle.social\n\n1. Send the key in the `x-api-key` header to `https://api.bundle.social/api/v1`. A missing key returns 401 and a bad key 403\n2. Pass `teamId` on most calls. Set `BUNDLESOCIAL_TEAM_ID` for the MCP server or CLI when the organisation has more than one team\n3. Set a `referenceKey` on each post and look it up with the reference-key endpoint before retrying a create, because there is no idempotency key\n4. Check `GET /api/v1/organization/usage/daily-limits` before bulk scheduling. Failed and deleted posts still count against the monthly quota\n5. A person must complete each network's OAuth consent in a browser. Keep prepaid credit for X, where a post costs $0.015 or $0.20 with a link\n\n### Postiz API + MCP\n\n1. Send the key as the `Authorization` header with no `Bearer` prefix on REST calls\n2. Batch several posts into one create request to stay under 90 an hour\n3. Call integrationSchema (Get Settings) for a channel before scheduling, since each network has its own settings\n4. Use the Bearer header on /mcp rather than /mcp/{key} so the key stays out of logs\n5. Read output.errors on a failed schedule call and retry with the corrected fields\n\n## Questions\n\n### Which is better for AI agents, bundle.social or Postiz API + MCP?\n\nbundle.social and Postiz API + MCP score within a point of each other on agent readiness, 60.1 (C) and 59.3 (C). Postiz API + MCP leads on security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust.\n\n### Do bundle.social and Postiz API + MCP need an API key?\n\nbundle.social needs an API key. Postiz API + MCP takes an API key or an OAuth sign-in.\n\n### Can an agent call bundle.social and Postiz API + MCP without installing anything?\n\nYes. bundle.social has a hosted endpoint at https://api.bundle.social/api/v1 and Postiz API + MCP at https://api.postiz.com/public/v1.\n\n### Are bundle.social and Postiz API + MCP open source?\n\nNo open-source release is listed for bundle.social. Postiz API + MCP is open source (AGPL-3.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/bundle-social-vs-postiz.json, and with the fewest tokens: https://www.anchorterminal.com/compare/bundle-social-vs-postiz.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"bundle-social\", \"b\": \"postiz\"}`. From a terminal: `anchor compare bundle-social postiz`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/bundle-social.json and https://www.anchorterminal.com/api/v1/tools/postiz.json\n\n## Other comparisons with bundle.social or Postiz API + MCP\n\n- [Ayrshare API + MCP vs bundle.social](https://www.anchorterminal.com/compare/ayrshare-vs-bundle-social.md)\n- [Ayrshare API + MCP vs Postiz API + MCP](https://www.anchorterminal.com/compare/ayrshare-vs-postiz.md)\n- [Blotato vs bundle.social](https://www.anchorterminal.com/compare/blotato-vs-bundle-social.md)\n- [Blotato vs Postiz API + MCP](https://www.anchorterminal.com/compare/blotato-vs-postiz.md)\n- [Buffer API + MCP vs bundle.social](https://www.anchorterminal.com/compare/buffer-vs-bundle-social.md)\n- [Buffer API + MCP vs Postiz API + MCP](https://www.anchorterminal.com/compare/buffer-vs-postiz.md)\n- [bundle.social vs Zernio (formerly Late) API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-late.md)\n- [bundle.social vs Metricool API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-metricool.md)\n- [bundle.social vs Mixpost API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-mixpost.md)\n- [bundle.social vs OneUp API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-oneup.md)\n- [bundle.social vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-post-bridge.md)\n- [bundle.social vs Publer API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-publer.md)\n- [bundle.social vs Typefully](https://www.anchorterminal.com/compare/bundle-social-vs-typefully.md)\n- [bundle.social vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-upload-post.md)\n- [Zernio (formerly Late) API + MCP vs Postiz API + MCP](https://www.anchorterminal.com/compare/late-vs-postiz.md)\n- [Metricool API + MCP vs Postiz API + MCP](https://www.anchorterminal.com/compare/metricool-vs-postiz.md)\n- [Mixpost API + MCP vs Postiz API + MCP](https://www.anchorterminal.com/compare/mixpost-vs-postiz.md)\n- [OneUp API + MCP vs Postiz API + MCP](https://www.anchorterminal.com/compare/oneup-vs-postiz.md)\n- [Post Bridge API + MCP vs Postiz API + MCP](https://www.anchorterminal.com/compare/post-bridge-vs-postiz.md)\n- [Postiz API + MCP vs Publer API + MCP](https://www.anchorterminal.com/compare/postiz-vs-publer.md)\n- [Postiz API + MCP vs Typefully](https://www.anchorterminal.com/compare/postiz-vs-typefully.md)\n- [Postiz API + MCP vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/postiz-vs-upload-post.md)\n- [bundle.social vs Sprout Social API](https://www.anchorterminal.com/compare/bundle-social-vs-sprout-social.md)\n- [bundle.social vs X MCP](https://www.anchorterminal.com/compare/bundle-social-vs-x-mcp.md)\n- [Postiz API + MCP vs Sprout Social API](https://www.anchorterminal.com/compare/postiz-vs-sprout-social.md)\n- [Postiz API + MCP vs X MCP](https://www.anchorterminal.com/compare/postiz-vs-x-mcp.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-10", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "bundle.social vs Postiz API + MCP", "url": "" } ], "description": "bundle.social and Postiz score within a point of each other for social posting, 60.1 and 59.3 out of 100. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "bundle.social C 60.1", "Postiz API + MCP C 59.3", "scores" ], "h1": "bundle.social vs Postiz API + MCP", "image": "https://www.anchorterminal.com/assets/og/compare-bundle-social-vs-postiz.png", "path": "/compare/bundle-social-vs-postiz", "published": "2026-10-01", "section": "tools", "title": "bundle.social vs Postiz for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-postiz" }, "tokens": { "markdown": 2650, "slim": 730 }, "version": 1 }