{ "data": { "a": { "slug": "bundle-social", "name": "bundle.social", "vendor": "BUNDLE SP. Z O.O.", "vendorUrl": "https://bundle.social", "kind": "http-api", "category": "social-media", "summary": "bundle.social is a hosted REST API from BUNDLE SP. Z O.O. in Warsaw for publishing, scheduling, commenting and reading analytics across 15 social networks. It also ships a TypeScript SDK, a CLI and a local MCP server.", "url": "https://www.anchorterminal.com/tools/bundle-social", "markdownUrl": "https://www.anchorterminal.com/tools/bundle-social.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/bundle-social.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/bundle-social.json", "dns": "bundle-social.grade.anchorterminal.com", "repo": "https://github.com/bundleglobal/bundlesocial-node", "license": "Proprietary hosted service under bundle.social's terms of service. The TypeScript SDK, the CLI and the MCP server on GitHub are MIT", "transports": [ "http", "stdio" ], "remoteUrl": "https://api.bundle.social/api/v1", "packages": [ { "registry": "npm", "name": "bundlesocial" }, { "registry": "npm", "name": "bundlesocial-mcp" }, { "registry": "npm", "name": "bundlesocial-cli" } ], "auth": "api-key", "authNotes": "Self-serve organisation API key sent in the `x-api-key` header, created and rolled in the dashboard after a browser sign-up, up to 50 keys an organisation. Keys carry no scopes and reach every team. Connecting a social account needs a person to complete that network's OAuth consent through a hosted connect link.", "pricing": "freemium", "pricingNotes": "Free plan at $0 with 20 posts a month, three teams and API access, no payment details needed. Pro is $100 a month for 10,000 posts and Business $400 for 100,000, both with unlimited connected accounts. Enterprise is quoted. X actions are charged from prepaid credit at X's rates (https://bundle.social/pricing.md).", "priceSummary": "$100 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in llms.txt, pricing.md, the docs index or the OpenAPI description in the SDK repository (checked 2026-10-09).", "endpoints": [] }, "toolCount": 68, "popularity": { "githubStars": 2, "npmWeekly": 4095, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://info.bundle.social", "llmsTxt": "https://bundle.social/llms.txt", "openapi": "https://api.bundle.social/swagger-json", "capabilities": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload" ], "tags": [ "hosted", "freemium", "free-tier", "no-card", "api-key", "openapi", "llms-txt", "mcp", "cli", "typescript", "webhooks", "status-page" ], "lastRelease": "2026-10-06", "graded": true, "anchor": { "graded": true, "score": 60.2, "grade": "C", "agentReady": false, "rank": 560, "ranked": true, "rankOf": 1272, "categoryRank": 3, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 78, "payments": 35, "reliability": 63, "schema": 86, "security": 34, "transparency": 66 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": 0, "verdict": "The REST API has a public OpenAPI 3.0 description of 194 operations, Markdown docs and published rate limits, and the free plan needs no card. Organisation API keys carry no scopes, there is no idempotency key, and the status page shows one API outage of 4 hours 3 minutes on 31 August 2026.", "bestFor": "A SaaS product or agent that manages many accounts for many customers, since paid plans do not charge per connected account and teams separate tenants.", "strengths": [ "OpenAPI 3.0.2 description with 194 operations, each with a description, plus llms.txt, llms-full.txt and Markdown copies of every docs page", "Paid plans are priced per organisation with no fee per connected account. The free plan covers 20 posts a month and needs no payment details", "Rate limits are published as three windows (100 a second, 500 per 10 seconds, 2,000 a minute), counted per endpoint for API keys", "Platform errors come back with a stable `code`, a `userFacingMessage` and an `isTransient` flag in `errorsVerbose`", "Valid security.txt and a disclosure policy that promises acknowledgement within 3 business days" ], "weaknesses": [ "API keys are organisation-wide with no scopes or read-only mode found, so one key reaches every team and connected account", "No idempotency key on `POST /api/v1/post`. A `referenceKey` with conflict protection is the nearest safeguard", "The status page records the API down for 4 hours 3 minutes on 31 August 2026", "The DPA is sent on request only, and no sub-processor list or certification was found", "One official SDK (TypeScript). The MCP server is local stdio only, with 68 tools and no toolsets" ], "agentNotes": [ "Send the key in the `x-api-key` header to `https://api.bundle.social/api/v1`. A missing key returns 401 and a bad key 403", "Pass `teamId` on most calls. Set `BUNDLESOCIAL_TEAM_ID` for the MCP server or CLI when the organisation has more than one team", "Set a `referenceKey` on each post and look it up with the reference-key endpoint before retrying a create, because there is no idempotency key", "Check `GET /api/v1/organization/usage/daily-limits` before bulk scheduling. Failed and deleted posts still count against the monthly quota", "A person must complete each network's OAuth consent in a browser. Keep prepaid credit for X, where a post costs $0.015 or $0.20 with a link" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3.3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 60.2 } ], "editorialScores": { "ergonomics": 66, "maintenance": 78, "payments": 35, "reliability": 63, "schema": 86, "security": 34, "transparency": 44 }, "provenanceScore": 87, "checked": { "categories": { "ergonomics": "2026-10-09", "maintenance": "2026-10-09", "payments": "2026-10-09", "reliability": "2026-10-09", "schema": "2026-10-09", "security": "2026-10-09", "transparency": "2026-10-09" }, "last": "2026-10-09", "lastMoved": "2026-10-27", "oldest": "2026-10-09", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install bundlesocial", "http": "curl \"https://api.bundle.social/api/v1/team\" -H \"x-api-key: $BUNDLE_SOCIAL_API_KEY\"", "claudeCode": "claude mcp add bundlesocial --env BUNDLESOCIAL_API_KEY=sk_live_... -- npx -y bundlesocial-mcp", "config": { "mcpServers": { "bundlesocial": { "args": [ "-y", "bundlesocial-mcp" ], "command": "npx", "env": { "BUNDLESOCIAL_API_KEY": "sk_live_..." } } } } }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/bundle-social" }, "area": "communication", "unitPrices": [ { "item": "Pro plan", "unit": "month", "usd": 100, "note": "10,000 posts a month, unlimited connected accounts" }, { "item": "Business plan", "unit": "month", "usd": 400, "note": "100,000 posts a month" }, { "item": "X post", "unit": "tx", "usd": 0.015, "note": "X's charge passed through, from prepaid credit" }, { "item": "X post with a link", "unit": "tx", "usd": 0.2, "note": "X's charge passed through" } ], "provenance": { "legalEntity": "BUNDLE SP. Z O.O.", "domain": "bundle.social", "domainRegistered": "2023-09-17", "endpointOnVendorDomain": true, "terms": "https://bundle.social/terms", "privacy": "https://bundle.social/privacy", "statusPage": "https://bundlesocial.betteruptime.com/", "changelog": "https://info.bundle.social/changelog", "securityTxt": "valid", "checked": "2026-10-09", "notes": [ "The terms (last updated 14 July 2026) name BUNDLE SP. Z O.O., ul. Hoża 86 / 410, 00-682 Warsaw, KRS 0001103308, and say they govern the website, dashboard and API. Polish law applies.", "The privacy policy (last updated 2 July 2026) covers the same Service and says the company is a processor for customer content and connected account data.", "security.txt at bundle.social/.well-known/security.txt expires on 7 April 2027 and gives a contact address and the contact page.", "RDAP gives a registration date of 2023-09-17 for bundle.social.", "The status page is on Better Stack's betteruptime.com domain. The API answers at api.bundle.social and the docs at info.bundle.social." ], "score": 87 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/bundle-social.json", "live": { "slug": "bundle-social", "probe": { "target": "https://api.bundle.social/api/v1", "method": "get", "lastAt": "2026-11-03T18:19:58.492652024Z", "lastOk": true, "lastStatus": 200, "lastMs": 219, "authRequired": false, "uptime24h": 100, "uptime30d": 99.98, "p50ms24h": 146, "p95ms24h": 1008, "samples24h": 250, "samples30d": 6289, "days": [ { "date": "2026-10-09", "probes": 85, "ok": 85 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 250 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 248, "ok": 248 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 191, "ok": 191 } ] }, "vendorStatus": { "page": "https://bundlesocial.betteruptime.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-03T17:12:17.294348537Z" }, "versions": [ { "registry": "github", "name": "bundleglobal/bundlesocial-node", "version": "v2.69.0", "released": "2026-10-30", "seenAt": "2026-11-02T19:06:27.059808466Z" }, { "registry": "npm", "name": "bundlesocial", "version": "2.69.0", "seenAt": "2026-11-02T19:06:22.84439799Z" }, { "registry": "npm", "name": "bundlesocial-cli", "version": "1.2.2", "seenAt": "2026-11-02T19:06:25.077845764Z" }, { "registry": "npm", "name": "bundlesocial-mcp", "version": "1.2.2", "seenAt": "2026-11-02T19:06:23.813549242Z" } ], "githubStars": 2, "npmWeekly": 9105, "securityTxt": { "url": "https://bundle.social/.well-known/security.txt", "state": "valid", "expires": "2027-05-03T09:42:21.372Z", "checkedAt": "2026-11-03T15:51:01.567286635Z" }, "llmsTxt": { "url": "https://bundle.social/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-03T15:19:07.906093498Z" }, "domain": { "domain": "bundle.social", "registered": "2023-09-17", "source": "https://rdap.identitydigital.services/rdap/domain/bundle.social", "checkedAt": "2026-11-01T14:17:30.240813669Z" }, "pages": [ { "url": "https://info.bundle.social/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-03T07:51:45.668941138Z", "changedAt": "2026-10-31T06:14:02.113441582Z", "fingerprint": "7531472ff6e3" }, { "url": "https://bundle.social/pricing.md", "kind": "pricing", "status": 304, "checkedAt": "2026-11-03T07:42:34.097761393Z", "changedAt": "2026-10-29T04:59:36.450751538Z", "fingerprint": "fcf83dbe39ae" }, { "url": "https://bundle.social/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-03T07:42:36.187187342Z", "changedAt": "2026-10-29T04:59:38.574240792Z", "fingerprint": "2aa844d1bf9b" }, { "url": "https://bundle.social/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-03T07:42:38.229417953Z", "changedAt": "2026-10-29T04:59:40.864334346Z", "fingerprint": "e969a3edb7b8" } ], "github": { "repo": "bundleglobal/bundlesocial-node", "checkedAt": "2026-11-02T08:37:13.168375331Z", "stars": 2, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-30T11:33:24Z", "openIssues": 1, "openPRs": 0, "issuesOpened90d": 0, "issuesClosed90d": 0, "prsMerged90d": 16, "ci": { "branch": "main", "runs": 50, "success": 50, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-10-30T11:34:25Z" }, "replies": { "sampled": 3, "unanswered": 1, "medianDays": 2 } }, "updatedAt": "2026-11-03T18:19:58.492652024Z" } }, "answer": "bundle.social scores 60.2 (C) on agent readiness against Repostit's 32.5 (F), and leads in 6 of 7 scored categories. Repostit leads on security \u0026 auth.", "b": { "slug": "repostit", "name": "Repostit", "vendor": "Repostit LLC", "vendorUrl": "https://repostit.io", "kind": "platform", "category": "social-media", "summary": "Repostit is a hosted service that reposts short videos from one connected social account to others and schedules new posts across eight networks. Agents reach it through a remote OAuth MCP connector listed for Claude and ChatGPT.", "url": "https://www.anchorterminal.com/tools/repostit", "markdownUrl": "https://www.anchorterminal.com/tools/repostit.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/repostit.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/repostit.json", "dns": "repostit.grade.anchorterminal.com", "license": "Proprietary hosted service under Repostit's terms of service (effective 7 March 2025), which name Repostit LLC of Newark, Delaware. No source, SDK or package is published", "transports": [ "streamable-http" ], "remoteUrl": "https://repostit-mcp-cfjcykgqda-uc.a.run.app/mcp/v1.1", "packages": [], "auth": "oauth", "authNotes": "The connector at https://repostit-mcp-cfjcykgqda-uc.a.run.app/mcp/v1.1 (named on Repostit's own Claude connector page) uses OAuth with dynamic client registration and no client secret; the user signs in to Repostit and reviews the permissions (read connected accounts, create workflows and Briefs, schedule or publish, read delivery status). Approved offline access renews for up to 90 days from the first authorisation. Social-network sign-ins happen inside Repostit and provider tokens are not passed to Claude or ChatGPT. PKCE S256 is stated only in third-party metadata. No scopes, API keys or token lifetimes are published, and revocation is by disconnecting in the client or asking support@repostit.io.", "pricing": "paid", "pricingNotes": "Every reposting plan starts with a 14-day trial with no credit card, limited to 10 posts counted per destination, 3 workflows and one account per network. Basic $5 a month (10 video posts, monthly only), Starter $14 a month or $10 billed yearly, Influencer $29 or $20 (5 accounts per network), Agency $149 or $99 (30 accounts per network); paid plans above Basic have unlimited automated posts and every plan includes the Claude and ChatGPT connector. Clips is priced separately by minutes, with a free allowance of 10 videos or 100 minutes. Fees are non-refundable except where law requires (https://repostit.io/pricing/ and https://repostit.io/docs/repostit-refund-policy/, checked 2026-11-03).", "priceSummary": "$5 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on the pricing page, the help centre, the two connector pages, the terms or the privacy policy (checked 2026-11-03). Plans are paid in the app through unnamed third-party payment processors per the terms.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://repostit.io/docs/", "llmsTxt": "https://repostit.io/llms.txt", "registryName": "io.github.hax98/repostit", "capabilities": [ "social.post", "social.schedule", "social.media-upload" ], "tags": [ "hosted", "official", "closed-source", "mcp", "remote-mcp", "mcp-registry", "oauth", "llms-txt", "video", "free-trial", "no-card", "paid", "no-status-page" ], "lastRelease": "2026-10-23", "graded": true, "anchor": { "graded": true, "score": 32.5, "grade": "F", "agentReady": false, "rank": 1191, "ranked": true, "rankOf": 1272, "categoryRank": 16, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 25, "maintenance": 56, "payments": 30, "reliability": 26, "schema": 27, "security": 44, "transparency": 29 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-03" }, "negative": 0, "verdict": "An OAuth connector lets an agent list accounts, draft and schedule posts, build reposting workflows and check delivery, with drafts saved before anything publishes and a 14-day trial without a card. Tool names, schemas, scopes and error shapes are unpublished, the endpoint sits on a Cloud Run host, and there is no status page, public API or named subprocessor.", "bestFor": "Creators, small businesses and agencies who post short vertical video on one network and want an assistant in Claude or ChatGPT to copy it to others on a schedule, set up reposting workflows and confirm what went out, without writing code.", "strengths": [ "Remote MCP connector with OAuth and dynamic client registration, listed for Claude and ChatGPT and in the official MCP registry, with social-network tokens kept inside Repostit", "Briefs are saved as drafts, queued Briefs are locked against a second send and Manual workflows wait for approval, so nothing publishes on creation alone", "Delivery checks report a result per destination with public links, and assistant-made posts show each step in the dashboard's Comments \u0026 Activity", "Eight networks with published media rules (20 MB images, carousel caps per network, 9:16 video at 1080 by 1920) and per-network failure guides", "14-day trial with no card, then plans from $5 a month, with the connector included in every plan" ], "weaknesses": [ "No tool names, input schemas, annotations, scopes or error shapes are published, and no public REST API, SDK or OpenAPI file exists", "The MCP endpoint is on a run.app host, not repostit.io, and the registry entry sits under a personal GitHub namespace", "No status page, incident history, SLA, request rate limit or 429 guidance; no help page says failed posts are retried", "The privacy policy names no subprocessors, retention periods or data locations and does not mention the connector or its 90-day offline access", "The terms name Repostit LLC while every footer says Repostit, Inc., and the ChatGPT page and directory disagree on whether version 1.1 is out" ], "agentNotes": [ "List connected accounts first and confirm names and platforms with the user before choosing destinations; a missing account must be connected in Repostit Connections, not through the agent.", "Pass media as a downloadable HTTPS URL, never a local filename, and give every scheduled time with an explicit timezone.", "Treat Queued as accepted, not published; check delivery status and public links before reporting success, and check the existing result before any retry to avoid duplicate posts.", "Creating a future-content workflow makes it publish on its own once active; prefer existing-content workflows or Manual mode when the user wants to review first.", "On the trial, each destination counts as one of 10 posts and Basic allows 10 video posts a month; ask before fanning one Brief out to many networks." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "F", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 32.5 } ], "editorialScores": { "ergonomics": 25, "maintenance": 56, "payments": 30, "reliability": 26, "schema": 27, "security": 44, "transparency": 27 }, "provenanceScore": 31, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 } }, "connect": { "config": { "mcpServers": { "repostit": { "type": "http", "url": "https://repostit-mcp-cfjcykgqda-uc.a.run.app/mcp/v1.1" } } } }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/repostit" }, "area": "communication", "unitPrices": [ { "item": "Basic plan", "unit": "month", "usd": 5, "note": "monthly billing only; 10 video posts a month, one account per network" }, { "item": "Starter plan", "unit": "month", "usd": 14, "note": "$10 a month billed yearly; unlimited automated posts, one account per network" }, { "item": "Influencer plan", "unit": "month", "usd": 29, "note": "$20 a month billed yearly; unlimited automated posts, 5 accounts per network" }, { "item": "Agency plan", "unit": "month", "usd": 149, "note": "$99 a month billed yearly; unlimited automated posts, 30 accounts per network" } ], "provenance": { "legalEntity": "Repostit LLC", "domain": "repostit.io", "domainRegistered": "", "endpointOnVendorDomain": false, "terms": "https://repostit.io/terms-of-service/", "privacy": "https://repostit.io/privacy-policy/", "statusPage": "", "changelog": "", "securityTxt": "unknown", "checked": "2026-11-03", "notes": [ "The terms of service (effective 7 March 2025, no later revision) say the service is operated by Repostit LLC, 254 Chapman Road Ste 208, Newark, DE 19702, under Delaware law. The footer of every page read says '© 2026 Repostit, Inc.', and the privacy policy (29 July 2026) names only Repostit.io with the same address. Recorded as an inconsistency; the legal entity is taken from the terms.", "The MCP endpoint is on repostit-mcp-cfjcykgqda-uc.a.run.app, a Google Cloud Run host, not a repostit.io host. Repostit's own page https://app.repostit.io/claude-connector.html names it. Its robots.txt did not load, so nothing on that host was fetched, including the OAuth well-known documents.", "/whats-new/ lists undated items (the Claude and ChatGPT connector among them), so it is not recorded as a changelog. No status page is linked anywhere; /status/ and /.well-known/security.txt did not load through our reader, which also fails on the home page, so security.txt is recorded as unknown.", "RDAP for repostit.io and the Wayback Machine were not read (the fetch needed an approval that did not come). firstReleased is 2025-03-07, the terms' effective date, the earliest first-hand date found; the connector's earliest date is the public ChatGPT app described on a page updated 24 September 2026, and the first registry version is 17 October 2026.", "robots.txt on repostit.io allows everything except /api/, which was not fetched. app.repostit.io answers /robots.txt with the app's HTML shell and no directives; only the two connector pages and /llms.txt were read there." ], "score": 31 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/repostit.json", "live": { "slug": "repostit", "probe": { "target": "https://repostit-mcp-cfjcykgqda-uc.a.run.app/mcp/v1.1", "method": "get", "lastAt": "2026-11-03T18:20:19.53499017Z", "lastOk": true, "lastStatus": 405, "lastMs": 151, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 155, "p95ms24h": 196, "samples24h": 44, "samples30d": 44, "days": [ { "date": "2026-11-03", "probes": 44, "ok": 44 } ] }, "versions": [ { "registry": "mcp-registry", "name": "io.github.hax98/repostit", "version": "2026.10.23", "seenAt": "2026-11-03T16:51:07.971176756Z" } ], "securityTxt": { "url": "https://repostit.io/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-03T15:51:15.292804476Z" }, "llmsTxt": { "url": "https://repostit.io/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-03T15:20:58.151732377Z" }, "updatedAt": "2026-11-03T18:20:19.53499017Z" } }, "edges": [ { "by": 59, "category": "schema", "leads": "bundle-social", "name": "Schema \u0026 documentation", "reasons": { "a": "OpenAPI 3.0.2 with 145 paths and 194 operations, linked from the docs and read from the copy in the SDK repository (25). llms.txt, llms-full.txt, pricing.md and a Markdown copy of each docs page (10). Every operation has a description and many say when to call it (15). 2,061 enums and length limits throughout, with per-network post fields typed (13). Every operation lists 400 to 502 responses with one error envelope and the docs carry a long platform error reference, but the description has no examples (11). Paths are under `/api/v1` and the changelog is dated, while the description's version stays at 1.0.0 (12).", "b": "MCP reading, since the connector is the only surface an outside agent reaches; no public REST API, developer page, OpenAPI file, SDK or package was found in the help centre, /whats-new/, the sitemap, llms.txt, GitHub, npm or the MCP registry. No tool names or input schemas are published anywhere, and no session was opened to read them (0 of 25). llms.txt exists, but it is a Rank Math index of site URLs that includes theme placeholder entries, and help articles are HTML only (5 of 10). The Claude connector page says what each step is for and when not to use it, list accounts before choosing a destination, a Brief saves a draft and neither publishes nor schedules, publishing applies to every destination in a Brief, Queued is not delivery, future-content workflows publish once active while existing-content ones import for review (8 of 20). Inputs are described in prose only, formats per destination, JPEG, PNG or WebP up to 20 MB, carousel caps of 4, 10 and 20 by network, media at a downloadable HTTPS URL and a timezone with every scheduled time (4 of 15). Plain-language example requests and per-network failure reasons written for people; no example tool call, response or error shape (5 of 15). The endpoint path carries v1.1 and the registry holds 2026.10.17 and 2026.10.23; /whats-new/ is undated and no changelog was found (5 of 15). 0+5+8+4+5+5 = 27." }, "scores": { "a": 86, "b": 27 } }, { "by": 41, "category": "ergonomics", "leads": "bundle-social", "name": "Agent ergonomics", "reasons": { "a": "Graded on the REST API. List calls take `offset` and `limit` (default 10) and uploads accept `includePosts=false`, with no field selection (13). Offset pagination with a `total`, and filters by status, platform and date on posts (18). Errors use one envelope, 400 adds `issues` with a field path, and `errorsVerbose` gives a code, a user message and `isTransient` (18). No idempotency key. `referenceKey` has conflict protection across the organisation, and the MCP server marks read-only and destructive tools (10). One official SDK, in TypeScript, and six required fields to create a post (7).", "b": "MCP reading. The tool count is not published. The connector pages describe seven actions (list accounts, create, schedule and publish a Brief, check delivery, create a workflow, send a connection link), which suggests a small set, but the definitions were not read, so a middle reading rather than full marks (10 of 25). No pagination, filtering or output-size controls are documented (0 of 20). Delivery checks report a result per destination with public links when the network gives one, and the help centre lists failure reasons per network, but no error codes or connector error messages are documented (5 of 20). No idempotency key and no readOnlyHint or destructiveHint seen; Briefs start as drafts, queued Briefs are locked against a second send, Manual workflows hold posts for approval and the guidance says to check before retrying (6 of 20). Requests are made in plain language with few stated requirements (an HTTPS media URL, a timezone); no SDK in any language (4 of 15). 10+0+5+6+4 = 25." }, "scores": { "a": 66, "b": 25 } }, { "by": 37, "category": "reliability", "leads": "bundle-social", "name": "Reliability", "reasons": { "a": "Graded as a hosted API. Better Stack status page with two components and 90 days of history (20). One incident in 90 days, on 31 August 2026, with the API down for 4 hours 3 minutes and 99.793 per cent uptime shown (10). Rate limits published as 100 a second, 500 per 10 seconds and 2,000 a minute, plus daily caps per network (15). The docs ask for exponential backoff on 429 and flag platform errors with `isTransient`, but no Retry-After header or idempotency key was found (8). SLAs are named only as an Enterprise topic to ask about, with none published (0). The core API is generally available, with DMs and automations in beta (10).", "b": "Hosted reading, for the connector and the service behind it. No status page was found. None is linked from the help centre, the contact page, the footer or the troubleshooting articles, and https://repostit.io/status/ did not load through our reader, which also fails on the home page (0). No readable incident history, so the floor (5). Repostit publishes posting quotas rather than request limits, 10 posts on the trial, 10 video posts a month on Basic, existing-content workflows up to 5 posts a day, plus per-network rules and 20 MB images through the connector; no request rate for the connector, and the terms only bar automated access faster than a human (6 of 15). No 429 or overload handling is documented. The Claude connector page says Queued means accepted, not delivered, and to check the existing result before retrying to avoid duplicate posts, and Brief locks queued posts against a second send; no idempotency key and no page says failed posts are retried (5 of 15). No SLA; the terms (7 March 2025) let Repostit modify or discontinue the service at any time and say nothing on uptime (0). The connector carries no beta label and its registry entry is active (10). 0+5+6+5+0+10 = 26." }, "scores": { "a": 63, "b": 26 } }, { "by": 37, "category": "transparency", "leads": "bundle-social", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed service under terms dated 14 July 2026 that name the API. The SDK, CLI and MCP server are MIT (15). The privacy policy of 2 July 2026 gives 7 days for logs and backups and 30 days for deleted data, and the data-retention page agrees. Customer content is not used to train third-party AI models. The DPA is on request only (18). No deprecation policy. The changelog dated the move to prepaid X billing (announced 20 July, live 16 August 2026), and the terms promise notice where reasonably possible (7). No sub-processor list. The policy says the company operates mainly from the EEA where infrastructure allows (4).", "b": "Closed service. The terms of service (effective 7 March 2025, no revision since) name Repostit LLC of Newark, Delaware, with Delaware law and arbitration, take a non-exclusive licence to content only to run the service and say fees are non-refundable; every footer says Repostit, Inc., and the terms do not mention the connector (12 of 30). The privacy policy (29 July 2026) keeps data until the account is deleted or as needed, with no periods, deletes Pinterest credentials on disconnect but says nothing of other networks' tokens, names no DPA, and does not mention the connector or its 90-day offline access; the account deletion article gives no timeline and leaves network-side access to the user (10 of 30). No deprecation policy or dated notices; the terms promise notice of significant changes and the ChatGPT page names a pending version 1.1 without a date (3 of 20). Subprocessors are 'hosting providers, analytics services', unnamed, with transfers outside the user's country and no locations; the Tawk.to chat on the contact page and the Google Cloud Run host of the connector are not named in the policy (2 of 20). 12+10+3+2 = 27." }, "scores": { "a": 66, "b": 29 } }, { "by": 22, "category": "maintenance", "leads": "bundle-social", "name": "Maintenance \u0026 community", "reasons": { "a": "The `bundlesocial` SDK reached 2.66.0 on 6 October 2026 and the changelog's newest entry is 30 September 2026 (30). 17 SDK tags and four changelog entries since 11 July 2026 (20). Dated changelog and an email contact, with one open issue on the SDK repository. No community channel was verified (8). The TypeScript SDK is regenerated from the OpenAPI description. The MCP server was not found in the official registry and its server.json still says 1.0.0 against package 1.2.0 (12). Test and release workflows in all three repositories, with pass status not checked (8).", "b": "Closed service. The latest registry version is 2026.10.23, published 23 October 2026, and the connector article was updated 22 October 2026 (30). Dated changes in the last 90 days are the two registry versions of 17 and 23 October 2026; /whats-new/ is undated and the ChatGPT app's 1.1.0 (per the 3 November listing check) carries no date, so fewer than three dated releases (10 of 20). Support is email and weekday chat, 9am to 5pm Eastern, with replies within 24 hours; no public changelog with dates, forum or issue tracker (6 of 15). In the official MCP registry as io.github.hax98/repostit, a GitHub-verified namespace of a personal account; the entry links Repostit's own pages and its address matches the vendor's connector page, but no first-hand page ties the account to the company, so partial credit (10 of 15). No packages, public code or CI to judge (0 of 10). 30+10+6+10+0 = 56." }, "scores": { "a": 78, "b": 56 } }, { "by": 10, "category": "security", "leads": "repostit", "name": "Security \u0026 auth", "reasons": { "a": "Organisation API keys in the `x-api-key` header, up to 50 an organisation, created and rolled in the dashboard, with no scopes (20). No read-only key or approval step found. The MCP server sets destructiveHint on 8 tools and posts can be created as drafts (4). Comments, reviews and DMs return text written by strangers and no prompt-injection guidance was found (0). Webhook deliveries can be inspected and API logs are kept 7 days internally, with no customer audit log found (2). security.txt is valid until 7 April 2027 and the docs publish a disclosure policy with response times and a no-action promise. No bug bounty, SOC 2 or ISO 27001 was found (8).", "b": "OAuth with dynamic client registration and no client secret, per Repostit's Claude connector page, with offline access that renews for up to 90 days from the first authorisation; social-network sign-ins stay in Repostit and provider tokens are not passed to the assistant. PKCE S256 is stated only in third-party metadata. No scopes are named; the page lists the permissions shown at sign-in (read accounts, create workflows and Briefs, schedule or publish, read delivery status). Revocation is by disconnecting in the client or asking support (18 of 30). A Brief is saved as a draft, Manual workflows wait for approval, and the help article says the assistant shows each step for confirmation before publishing (on ChatGPT 'may ask', depending on the client); no read-only mode, and an activated future-content workflow publishes on its own (8 of 20). Tools return the user's own accounts, Briefs and delivery results and read no comments or messages (10). Assistant-created posts appear under Post with a Comments \u0026 Activity log of each step, and Post History shows each network's response; no per-call log for the connector (8 of 15). security.txt did not load through our reader, and no disclosure policy, bug bounty or certification appears on any page read (0 of 20). 18+8+10+8+0 = 44." }, "scores": { "a": 34, "b": 44 } } ], "facts": [ { "a": "HTTP API", "b": "Platform", "name": "Kind" }, { "a": "BUNDLE SP. Z O.O.", "b": "Repostit LLC", "name": "Vendor" }, { "a": "https://api.bundle.social/api/v1", "b": "https://repostit-mcp-cfjcykgqda-uc.a.run.app/mcp/v1.1", "name": "Hosted endpoint" }, { "a": "HTTP, stdio", "b": "Streamable HTTP", "name": "Transports" }, { "a": "API key", "b": "OAuth", "name": "Auth" }, { "a": "Freemium", "b": "Paid", "name": "Pricing" }, { "a": "$0.015 per transaction", "b": "not published", "name": "Price for social posting" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary hosted service under bundle.social's terms of service. The TypeScript SDK, the CLI and the MCP server on GitHub are MIT", "b": "Proprietary hosted service under Repostit's terms of service (effective 7 March 2025), which name Repostit LLC of Newark, Delaware. No source, SDK or package is published", "name": "Licence" }, { "a": "68", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "io.github.hax98/repostit", "name": "MCP registry" }, { "a": "2026-10-06", "b": "2026-10-23", "name": "Last release" }, { "a": "2026-07-14", "b": "not read yet", "name": "Terms last updated" }, { "a": "2026-07-02", "b": "not read yet", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not read yet", "name": "Customer content may train models" }, { "a": "yes", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not read yet", "name": "Arbitration or class-action waiver" }, { "a": "2 stars, 4.1k npm/wk", "b": "none", "name": "Popularity" }, { "a": "3.3/5 (4)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "bundle.social scores 60.2 (C) on agent readiness against Repostit's 32.5 (F), and leads in 6 of 7 scored categories. Repostit leads on security \u0026 auth.", "question": "Which is better for AI agents, bundle.social or Repostit?" }, { "answer": "Yes. bundle.social has a hosted endpoint at https://api.bundle.social/api/v1 and Repostit at https://repostit-mcp-cfjcykgqda-uc.a.run.app/mcp/v1.1.", "question": "Can an agent call bundle.social and Repostit without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 63 against 26", "Schema \u0026 documentation, 86 against 27", "Agent ergonomics, 66 against 25", "Payments \u0026 pricing, 35 against 30", "Maintenance \u0026 community, 78 against 56", "Transparency \u0026 trust, 66 against 29" ], "also": [ "Runs on your own machine" ], "goodFor": "A SaaS product or agent that manages many accounts for many customers, since paid plans do not charge per connected account and teams separate tenants.", "slug": "bundle-social", "watchFor": "API keys are organisation-wide with no scopes or read-only mode found, so one key reaches every team and connected account" }, { "aheadOn": [ "Security \u0026 auth, 44 against 34" ], "also": null, "goodFor": "Creators, small businesses and agencies who post short vertical video on one network and want an assistant in Claude or ChatGPT to copy it to others on a schedule, set up reposting workflows and confirm what went out, without writing code.", "slug": "repostit", "watchFor": "No tool names, input schemas, annotations, scopes or error shapes are published, and no public REST API, SDK or OpenAPI file exists" } ], "history": { "bundle-social": [ { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 60.1, "fromGrade": "C", "to": 60.2, "toGrade": "C" } ], "repostit": null }, "job": { "capability": "social.post", "name": "Social posting" }, "others": [ { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-bundle-social.json", "title": "Ayrshare API + MCP vs bundle.social", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-bundle-social" }, { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-repostit.json", "title": "Ayrshare API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-bundle-social.json", "title": "Blotato vs bundle.social", "url": "https://www.anchorterminal.com/compare/blotato-vs-bundle-social" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-repostit.json", "title": "Blotato vs Repostit", "url": "https://www.anchorterminal.com/compare/blotato-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-bundle-social.json", "title": "Buffer API + MCP vs bundle.social", "url": "https://www.anchorterminal.com/compare/buffer-vs-bundle-social" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-repostit.json", "title": "Buffer API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/buffer-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-late.json", "title": "bundle.social vs Zernio (formerly Late) API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-late" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-metricool.json", "title": "bundle.social vs Metricool API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-metricool" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-mixpost.json", "title": "bundle.social vs Mixpost API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-mixpost" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-oneup.json", "title": "bundle.social vs OneUp API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-oneup" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-post-bridge.json", "title": "bundle.social vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-postiz.json", "title": "bundle.social vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-publer.json", "title": "bundle.social vs Publer API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-publer" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-typefully.json", "title": "bundle.social vs Typefully", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-typefully" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-upload-post.json", "title": "bundle.social vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/late-vs-repostit.json", "title": "Zernio (formerly Late) API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/late-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/metricool-vs-repostit.json", "title": "Metricool API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/metricool-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/mixpost-vs-repostit.json", "title": "Mixpost API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/mixpost-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/oneup-vs-repostit.json", "title": "OneUp API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/oneup-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-repostit.json", "title": "Post Bridge API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/postiz-vs-repostit.json", "title": "Postiz API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/postiz-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/publer-vs-repostit.json", "title": "Publer API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/publer-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/repostit-vs-typefully.json", "title": "Repostit vs Typefully", "url": "https://www.anchorterminal.com/compare/repostit-vs-typefully" }, { "json": "https://www.anchorterminal.com/compare/repostit-vs-upload-post.json", "title": "Repostit vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/repostit-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-sprout-social.json", "title": "bundle.social vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-x-mcp.json", "title": "bundle.social vs X MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-socialcannon.json", "title": "bundle.social vs SocialCannon", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-socialcannon" }, { "json": "https://www.anchorterminal.com/compare/repostit-vs-socialcannon.json", "title": "Repostit vs SocialCannon", "url": "https://www.anchorterminal.com/compare/repostit-vs-socialcannon" } ], "panel": null, "scores": [ { "bundle-social": 63, "by": 37, "edge": "bundle-social", "key": "reliability", "name": "Reliability", "repostit": 26, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "bundle-social": 86, "by": 59, "edge": "bundle-social", "key": "schema", "name": "Schema \u0026 documentation", "repostit": 27, "weight": 13 }, { "bundle-social": 66, "by": 41, "edge": "bundle-social", "key": "ergonomics", "name": "Agent ergonomics", "repostit": 25, "weight": 13 }, { "bundle-social": 34, "by": 10, "edge": "repostit", "key": "security", "name": "Security \u0026 auth", "repostit": 44, "weight": 14 }, { "bundle-social": 35, "by": 5, "edge": "bundle-social", "key": "payments", "name": "Payments \u0026 pricing", "repostit": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "bundle-social": 78, "by": 22, "edge": "bundle-social", "key": "maintenance", "name": "Maintenance \u0026 community", "repostit": 56, "weight": 7 }, { "bundle-social": 66, "by": 37, "edge": "bundle-social", "key": "transparency", "name": "Transparency \u0026 trust", "repostit": 29, "weight": 7 } ], "summary": "bundle.social scores 60.2 (C) on agent readiness against Repostit's 32.5 (F), and leads in 6 of 7 scored categories. Repostit leads on security \u0026 auth. Both do social posting.", "tasks": null, "tutorials": [ { "title": "Audit scheduled posts with bundle.social", "tool": "bundle-social", "url": "https://www.anchorterminal.com/tutorials/bundle-social/" } ], "verdicts": { "bundle-social": "The REST API has a public OpenAPI 3.0 description of 194 operations, Markdown docs and published rate limits, and the free plan needs no card. Organisation API keys carry no scopes, there is no idempotency key, and the status page shows one API outage of 4 hours 3 minutes on 31 August 2026.", "repostit": "An OAuth connector lets an agent list accounts, draft and schedule posts, build reposting workflows and check delivery, with drafts saved before anything publishes and a 14-day trial without a card. Tool names, schemas, scopes and error shapes are unpublished, the endpoint sits on a Cloud Run host, and there is no status page, public API or named subprocessor." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/bundle-social-vs-repostit", "json": "https://www.anchorterminal.com/compare/bundle-social-vs-repostit.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/bundle-social-vs-repostit.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/bundle-social-vs-repostit.min.md" }, "markdown": "bundle.social scores 60.2 (C) on agent readiness against Repostit's 32.5 (F), and leads in 6 of 7 scored categories. Repostit leads on security \u0026 auth. Both do social posting.\n\n- bundle.social: grade C, 60.2/100, rank #560 of 1272. Markdown https://www.anchorterminal.com/tools/bundle-social.md · JSON https://www.anchorterminal.com/api/v1/tools/bundle-social.json\n- Repostit: grade F, 32.5/100, rank #1191 of 1272. Markdown https://www.anchorterminal.com/tools/repostit.md · JSON https://www.anchorterminal.com/api/v1/tools/repostit.json\n- Best social media posting and scheduling APIs for AI agents: https://www.anchorterminal.com/best/social-media/index.md\n- All 132 social comparisons: https://www.anchorterminal.com/compare/social-media/index.md\n\n## Which one, for what\n\n### bundle.social (C)\n\nGood for: A SaaS product or agent that manages many accounts for many customers, since paid plans do not charge per connected account and teams separate tenants.\n\nAhead on:\n- Reliability, 63 against 26\n- Schema \u0026 documentation, 86 against 27\n- Agent ergonomics, 66 against 25\n- Payments \u0026 pricing, 35 against 30\n- Maintenance \u0026 community, 78 against 56\n- Transparency \u0026 trust, 66 against 29\n\nAlso in its favour:\n- Runs on your own machine\n\nWatch for: API keys are organisation-wide with no scopes or read-only mode found, so one key reaches every team and connected account\n\n### Repostit (F)\n\nGood for: Creators, small businesses and agencies who post short vertical video on one network and want an assistant in Claude or ChatGPT to copy it to others on a schedule, set up reposting workflows and confirm what went out, without writing code.\n\nAhead on:\n- Security \u0026 auth, 44 against 34\n\nWatch for: No tool names, input schemas, annotations, scopes or error shapes are published, and no public REST API, SDK or OpenAPI file exists\n\n\n## Why the edge\n\n### Schema \u0026 documentation: bundle.social +59\n\n- bundle.social (86): OpenAPI 3.0.2 with 145 paths and 194 operations, linked from the docs and read from the copy in the SDK repository (25). llms.txt, llms-full.txt, pricing.md and a Markdown copy of each docs page (10). Every operation has a description and many say when to call it (15). 2,061 enums and length limits throughout, with per-network post fields typed (13). Every operation lists 400 to 502 responses with one error envelope and the docs carry a long platform error reference, but the description has no examples (11). Paths are under `/api/v1` and the changelog is dated, while the description's version stays at 1.0.0 (12).\n- Repostit (27): MCP reading, since the connector is the only surface an outside agent reaches; no public REST API, developer page, OpenAPI file, SDK or package was found in the help centre, /whats-new/, the sitemap, llms.txt, GitHub, npm or the MCP registry. No tool names or input schemas are published anywhere, and no session was opened to read them (0 of 25). llms.txt exists, but it is a Rank Math index of site URLs that includes theme placeholder entries, and help articles are HTML only (5 of 10). The Claude connector page says what each step is for and when not to use it, list accounts before choosing a destination, a Brief saves a draft and neither publishes nor schedules, publishing applies to every destination in a Brief, Queued is not delivery, future-content workflows publish once active while existing-content ones import for review (8 of 20). Inputs are described in prose only, formats per destination, JPEG, PNG or WebP up to 20 MB, carousel caps of 4, 10 and 20 by network, media at a downloadable HTTPS URL and a timezone with every scheduled time (4 of 15). Plain-language example requests and per-network failure reasons written for people; no example tool call, response or error shape (5 of 15). The endpoint path carries v1.1 and the registry holds 2026.10.17 and 2026.10.23; /whats-new/ is undated and no changelog was found (5 of 15). 0+5+8+4+5+5 = 27.\n\n### Agent ergonomics: bundle.social +41\n\n- bundle.social (66): Graded on the REST API. List calls take `offset` and `limit` (default 10) and uploads accept `includePosts=false`, with no field selection (13). Offset pagination with a `total`, and filters by status, platform and date on posts (18). Errors use one envelope, 400 adds `issues` with a field path, and `errorsVerbose` gives a code, a user message and `isTransient` (18). No idempotency key. `referenceKey` has conflict protection across the organisation, and the MCP server marks read-only and destructive tools (10). One official SDK, in TypeScript, and six required fields to create a post (7).\n- Repostit (25): MCP reading. The tool count is not published. The connector pages describe seven actions (list accounts, create, schedule and publish a Brief, check delivery, create a workflow, send a connection link), which suggests a small set, but the definitions were not read, so a middle reading rather than full marks (10 of 25). No pagination, filtering or output-size controls are documented (0 of 20). Delivery checks report a result per destination with public links when the network gives one, and the help centre lists failure reasons per network, but no error codes or connector error messages are documented (5 of 20). No idempotency key and no readOnlyHint or destructiveHint seen; Briefs start as drafts, queued Briefs are locked against a second send, Manual workflows hold posts for approval and the guidance says to check before retrying (6 of 20). Requests are made in plain language with few stated requirements (an HTTPS media URL, a timezone); no SDK in any language (4 of 15). 10+0+5+6+4 = 25.\n\n### Reliability: bundle.social +37\n\n- bundle.social (63): Graded as a hosted API. Better Stack status page with two components and 90 days of history (20). One incident in 90 days, on 31 August 2026, with the API down for 4 hours 3 minutes and 99.793 per cent uptime shown (10). Rate limits published as 100 a second, 500 per 10 seconds and 2,000 a minute, plus daily caps per network (15). The docs ask for exponential backoff on 429 and flag platform errors with `isTransient`, but no Retry-After header or idempotency key was found (8). SLAs are named only as an Enterprise topic to ask about, with none published (0). The core API is generally available, with DMs and automations in beta (10).\n- Repostit (26): Hosted reading, for the connector and the service behind it. No status page was found. None is linked from the help centre, the contact page, the footer or the troubleshooting articles, and https://repostit.io/status/ did not load through our reader, which also fails on the home page (0). No readable incident history, so the floor (5). Repostit publishes posting quotas rather than request limits, 10 posts on the trial, 10 video posts a month on Basic, existing-content workflows up to 5 posts a day, plus per-network rules and 20 MB images through the connector; no request rate for the connector, and the terms only bar automated access faster than a human (6 of 15). No 429 or overload handling is documented. The Claude connector page says Queued means accepted, not delivered, and to check the existing result before retrying to avoid duplicate posts, and Brief locks queued posts against a second send; no idempotency key and no page says failed posts are retried (5 of 15). No SLA; the terms (7 March 2025) let Repostit modify or discontinue the service at any time and say nothing on uptime (0). The connector carries no beta label and its registry entry is active (10). 0+5+6+5+0+10 = 26.\n\n### Transparency \u0026 trust: bundle.social +37\n\n- bundle.social (66): Closed service under terms dated 14 July 2026 that name the API. The SDK, CLI and MCP server are MIT (15). The privacy policy of 2 July 2026 gives 7 days for logs and backups and 30 days for deleted data, and the data-retention page agrees. Customer content is not used to train third-party AI models. The DPA is on request only (18). No deprecation policy. The changelog dated the move to prepaid X billing (announced 20 July, live 16 August 2026), and the terms promise notice where reasonably possible (7). No sub-processor list. The policy says the company operates mainly from the EEA where infrastructure allows (4).\n- Repostit (29): Closed service. The terms of service (effective 7 March 2025, no revision since) name Repostit LLC of Newark, Delaware, with Delaware law and arbitration, take a non-exclusive licence to content only to run the service and say fees are non-refundable; every footer says Repostit, Inc., and the terms do not mention the connector (12 of 30). The privacy policy (29 July 2026) keeps data until the account is deleted or as needed, with no periods, deletes Pinterest credentials on disconnect but says nothing of other networks' tokens, names no DPA, and does not mention the connector or its 90-day offline access; the account deletion article gives no timeline and leaves network-side access to the user (10 of 30). No deprecation policy or dated notices; the terms promise notice of significant changes and the ChatGPT page names a pending version 1.1 without a date (3 of 20). Subprocessors are 'hosting providers, analytics services', unnamed, with transfers outside the user's country and no locations; the Tawk.to chat on the contact page and the Google Cloud Run host of the connector are not named in the policy (2 of 20). 12+10+3+2 = 27.\n\n### Maintenance \u0026 community: bundle.social +22\n\n- bundle.social (78): The `bundlesocial` SDK reached 2.66.0 on 6 October 2026 and the changelog's newest entry is 30 September 2026 (30). 17 SDK tags and four changelog entries since 11 July 2026 (20). Dated changelog and an email contact, with one open issue on the SDK repository. No community channel was verified (8). The TypeScript SDK is regenerated from the OpenAPI description. The MCP server was not found in the official registry and its server.json still says 1.0.0 against package 1.2.0 (12). Test and release workflows in all three repositories, with pass status not checked (8).\n- Repostit (56): Closed service. The latest registry version is 2026.10.23, published 23 October 2026, and the connector article was updated 22 October 2026 (30). Dated changes in the last 90 days are the two registry versions of 17 and 23 October 2026; /whats-new/ is undated and the ChatGPT app's 1.1.0 (per the 3 November listing check) carries no date, so fewer than three dated releases (10 of 20). Support is email and weekday chat, 9am to 5pm Eastern, with replies within 24 hours; no public changelog with dates, forum or issue tracker (6 of 15). In the official MCP registry as io.github.hax98/repostit, a GitHub-verified namespace of a personal account; the entry links Repostit's own pages and its address matches the vendor's connector page, but no first-hand page ties the account to the company, so partial credit (10 of 15). No packages, public code or CI to judge (0 of 10). 30+10+6+10+0 = 56.\n\n### Security \u0026 auth: Repostit +10\n\n- bundle.social (34): Organisation API keys in the `x-api-key` header, up to 50 an organisation, created and rolled in the dashboard, with no scopes (20). No read-only key or approval step found. The MCP server sets destructiveHint on 8 tools and posts can be created as drafts (4). Comments, reviews and DMs return text written by strangers and no prompt-injection guidance was found (0). Webhook deliveries can be inspected and API logs are kept 7 days internally, with no customer audit log found (2). security.txt is valid until 7 April 2027 and the docs publish a disclosure policy with response times and a no-action promise. No bug bounty, SOC 2 or ISO 27001 was found (8).\n- Repostit (44): OAuth with dynamic client registration and no client secret, per Repostit's Claude connector page, with offline access that renews for up to 90 days from the first authorisation; social-network sign-ins stay in Repostit and provider tokens are not passed to the assistant. PKCE S256 is stated only in third-party metadata. No scopes are named; the page lists the permissions shown at sign-in (read accounts, create workflows and Briefs, schedule or publish, read delivery status). Revocation is by disconnecting in the client or asking support (18 of 30). A Brief is saved as a draft, Manual workflows wait for approval, and the help article says the assistant shows each step for confirmation before publishing (on ChatGPT 'may ask', depending on the client); no read-only mode, and an activated future-content workflow publishes on its own (8 of 20). Tools return the user's own accounts, Briefs and delivery results and read no comments or messages (10). Assistant-created posts appear under Post with a Comments \u0026 Activity log of each step, and Post History shows each network's response; no per-call log for the connector (8 of 15). security.txt did not load through our reader, and no disclosure policy, bug bounty or certification appears on any page read (0 of 20). 18+8+10+8+0 = 44.\n\n## Score by category\n\n| Category | Weight | bundle.social | Repostit | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 63 | 26 | bundle.social +37 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 86 | 27 | bundle.social +59 |\n| Agent ergonomics | 13% (16.2 this run) | 66 | 25 | bundle.social +41 |\n| Security \u0026 auth | 14% (17.5 this run) | 34 | 44 | Repostit +10 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 35 | 30 | bundle.social +5 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 78 | 56 | bundle.social +22 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 66 | 29 | bundle.social +37 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **60.2 · C** | **32.5 · F** | |\n\n## Facts side by side\n\n| Fact | bundle.social | Repostit |\n| --- | --- | --- |\n| Kind | HTTP API | Platform |\n| Vendor | BUNDLE SP. Z O.O. | Repostit LLC |\n| Hosted endpoint | `https://api.bundle.social/api/v1` | `https://repostit-mcp-cfjcykgqda-uc.a.run.app/mcp/v1.1` |\n| Transports | HTTP, stdio | Streamable HTTP |\n| Auth | API key | OAuth |\n| Pricing | Freemium | Paid |\n| Price for social posting | $0.015 per transaction | not published |\n| x402 | no | no |\n| Licence | Proprietary hosted service under bundle.social's terms of service. The TypeScript SDK, the CLI and the MCP server on GitHub are MIT | Proprietary hosted service under Repostit's terms of service (effective 7 March 2025), which name Repostit LLC of Newark, Delaware. No source, SDK or package is published |\n| Tools exposed | 68 | none |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| MCP registry | not listed | `io.github.hax98/repostit` |\n| Last release | 2026-10-06 | 2026-10-23 |\n| Terms last updated | 2026-07-14 | not read yet |\n| Privacy policy last updated | 2026-07-02 | not read yet |\n| Customer content may train models | not found in the text | not read yet |\n| Terms restrict automated access | yes | not read yet |\n| Terms restrict benchmarking | not found in the text | not read yet |\n| Terms or service can change without notice | yes | not read yet |\n| Arbitration or class-action waiver | not found in the text | not read yet |\n| Popularity | 2 stars, 4.1k npm/wk | none |\n| Agent reviews | 3.3/5 (4) | none |\n\n## How the scores have moved\n\n### bundle.social\n\n- +0.1 on 27 October 2026: checklist\n\n### Repostit\n\nNo score change since it was listed.\n\n## Verdicts\n\n**bundle.social.** The REST API has a public OpenAPI 3.0 description of 194 operations, Markdown docs and published rate limits, and the free plan needs no card. Organisation API keys carry no scopes, there is no idempotency key, and the status page shows one API outage of 4 hours 3 minutes on 31 August 2026.\n\n**Repostit.** An OAuth connector lets an agent list accounts, draft and schedule posts, build reposting workflows and check delivery, with drafts saved before anything publishes and a 14-day trial without a card. Tool names, schemas, scopes and error shapes are unpublished, the endpoint sits on a Cloud Run host, and there is no status page, public API or named subprocessor.\n\n## Before you call either\n\n### bundle.social\n\n1. Send the key in the `x-api-key` header to `https://api.bundle.social/api/v1`. A missing key returns 401 and a bad key 403\n2. Pass `teamId` on most calls. Set `BUNDLESOCIAL_TEAM_ID` for the MCP server or CLI when the organisation has more than one team\n3. Set a `referenceKey` on each post and look it up with the reference-key endpoint before retrying a create, because there is no idempotency key\n4. Check `GET /api/v1/organization/usage/daily-limits` before bulk scheduling. Failed and deleted posts still count against the monthly quota\n5. A person must complete each network's OAuth consent in a browser. Keep prepaid credit for X, where a post costs $0.015 or $0.20 with a link\n\n### Repostit\n\n1. List connected accounts first and confirm names and platforms with the user before choosing destinations; a missing account must be connected in Repostit Connections, not through the agent.\n2. Pass media as a downloadable HTTPS URL, never a local filename, and give every scheduled time with an explicit timezone.\n3. Treat Queued as accepted, not published; check delivery status and public links before reporting success, and check the existing result before any retry to avoid duplicate posts.\n4. Creating a future-content workflow makes it publish on its own once active; prefer existing-content workflows or Manual mode when the user wants to review first.\n5. On the trial, each destination counts as one of 10 posts and Basic allows 10 video posts a month; ask before fanning one Brief out to many networks.\n\n## Tutorials\n\n- [Audit scheduled posts with bundle.social](https://www.anchorterminal.com/tutorials/bundle-social/), for bundle.social\n\n## Questions\n\n### Which is better for AI agents, bundle.social or Repostit?\n\nbundle.social scores 60.2 (C) on agent readiness against Repostit's 32.5 (F), and leads in 6 of 7 scored categories. Repostit leads on security \u0026 auth.\n\n### Can an agent call bundle.social and Repostit without installing anything?\n\nYes. bundle.social has a hosted endpoint at https://api.bundle.social/api/v1 and Repostit at https://repostit-mcp-cfjcykgqda-uc.a.run.app/mcp/v1.1.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/bundle-social-vs-repostit.json, and with the fewest tokens: https://www.anchorterminal.com/compare/bundle-social-vs-repostit.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"bundle-social\", \"b\": \"repostit\"}`. From a terminal: `anchor compare bundle-social repostit`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/bundle-social.json and https://www.anchorterminal.com/api/v1/tools/repostit.json\n\n## Other comparisons with bundle.social or Repostit\n\n- [Ayrshare API + MCP vs bundle.social](https://www.anchorterminal.com/compare/ayrshare-vs-bundle-social.md)\n- [Ayrshare API + MCP vs Repostit](https://www.anchorterminal.com/compare/ayrshare-vs-repostit.md)\n- [Blotato vs bundle.social](https://www.anchorterminal.com/compare/blotato-vs-bundle-social.md)\n- [Blotato vs Repostit](https://www.anchorterminal.com/compare/blotato-vs-repostit.md)\n- [Buffer API + MCP vs bundle.social](https://www.anchorterminal.com/compare/buffer-vs-bundle-social.md)\n- [Buffer API + MCP vs Repostit](https://www.anchorterminal.com/compare/buffer-vs-repostit.md)\n- [bundle.social vs Zernio (formerly Late) API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-late.md)\n- [bundle.social vs Metricool API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-metricool.md)\n- [bundle.social vs Mixpost API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-mixpost.md)\n- [bundle.social vs OneUp API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-oneup.md)\n- [bundle.social vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-post-bridge.md)\n- [bundle.social vs Postiz API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-postiz.md)\n- [bundle.social vs Publer API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-publer.md)\n- [bundle.social vs Typefully](https://www.anchorterminal.com/compare/bundle-social-vs-typefully.md)\n- [bundle.social vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-upload-post.md)\n- [Zernio (formerly Late) API + MCP vs Repostit](https://www.anchorterminal.com/compare/late-vs-repostit.md)\n- [Metricool API + MCP vs Repostit](https://www.anchorterminal.com/compare/metricool-vs-repostit.md)\n- [Mixpost API + MCP vs Repostit](https://www.anchorterminal.com/compare/mixpost-vs-repostit.md)\n- [OneUp API + MCP vs Repostit](https://www.anchorterminal.com/compare/oneup-vs-repostit.md)\n- [Post Bridge API + MCP vs Repostit](https://www.anchorterminal.com/compare/post-bridge-vs-repostit.md)\n- [Postiz API + MCP vs Repostit](https://www.anchorterminal.com/compare/postiz-vs-repostit.md)\n- [Publer API + MCP vs Repostit](https://www.anchorterminal.com/compare/publer-vs-repostit.md)\n- [Repostit vs Typefully](https://www.anchorterminal.com/compare/repostit-vs-typefully.md)\n- [Repostit vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/repostit-vs-upload-post.md)\n- [bundle.social vs Sprout Social API](https://www.anchorterminal.com/compare/bundle-social-vs-sprout-social.md)\n- [bundle.social vs X MCP](https://www.anchorterminal.com/compare/bundle-social-vs-x-mcp.md)\n- [bundle.social vs SocialCannon](https://www.anchorterminal.com/compare/bundle-social-vs-socialcannon.md)\n- [Repostit vs SocialCannon](https://www.anchorterminal.com/compare/repostit-vs-socialcannon.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-03", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "bundle.social vs Repostit", "url": "" } ], "description": "bundle.social scores 60.2 (C) to Repostit's 32.5 (F) for social posting. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "bundle.social C 60.2", "Repostit F 32.5", "scores" ], "h1": "bundle.social vs Repostit", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/bundle-social-vs-repostit", "published": "2026-10-01", "section": "tools", "title": "bundle.social vs Repostit for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-03", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-repostit" }, "tokens": { "markdown": 5650, "slim": 3630 }, "version": 1 }