{ "data": { "a": { "slug": "bundle-social", "name": "bundle.social", "vendor": "BUNDLE SP. Z O.O.", "vendorUrl": "https://bundle.social", "kind": "http-api", "category": "social-media", "summary": "bundle.social is a hosted REST API from BUNDLE SP. Z O.O. in Warsaw for publishing, scheduling, commenting and reading analytics across 15 social networks. It also ships a TypeScript SDK, a CLI and a local MCP server.", "url": "https://www.anchorterminal.com/tools/bundle-social", "markdownUrl": "https://www.anchorterminal.com/tools/bundle-social.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/bundle-social.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/bundle-social.json", "repo": "https://github.com/bundleglobal/bundlesocial-node", "license": "Proprietary hosted service under bundle.social's terms of service. The TypeScript SDK, the CLI and the MCP server on GitHub are MIT", "transports": [ "http", "stdio" ], "remoteUrl": "https://api.bundle.social/api/v1", "packages": [ { "registry": "npm", "name": "bundlesocial" }, { "registry": "npm", "name": "bundlesocial-mcp" }, { "registry": "npm", "name": "bundlesocial-cli" } ], "auth": "api-key", "authNotes": "Self-serve organisation API key sent in the `x-api-key` header, created and rolled in the dashboard after a browser sign-up, up to 50 keys an organisation. Keys carry no scopes and reach every team. Connecting a social account needs a person to complete that network's OAuth consent through a hosted connect link.", "pricing": "freemium", "pricingNotes": "Free plan at $0 with 20 posts a month, three teams and API access, no payment details needed. Pro is $100 a month for 10,000 posts and Business $400 for 100,000, both with unlimited connected accounts. Enterprise is quoted. X actions are charged from prepaid credit at X's rates (https://bundle.social/pricing.md).", "priceSummary": "$100 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in llms.txt, pricing.md, the docs index or the OpenAPI description in the SDK repository (checked 2026-10-09).", "endpoints": [] }, "toolCount": 68, "popularity": { "githubStars": 2, "npmWeekly": 4095, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://info.bundle.social", "llmsTxt": "https://bundle.social/llms.txt", "openapi": "https://api.bundle.social/swagger-json", "capabilities": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload" ], "tags": [ "hosted", "freemium", "free-tier", "no-card", "api-key", "openapi", "llms-txt", "mcp", "cli", "typescript", "webhooks", "status-page" ], "lastRelease": "2026-10-06", "graded": true, "anchor": { "graded": true, "score": 60.1, "grade": "C", "agentReady": false, "rank": 530, "ranked": true, "rankOf": 950, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 78, "payments": 35, "reliability": 63, "schema": 86, "security": 34, "transparency": 65 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": 0, "verdict": "The REST API has a public OpenAPI 3.0 description of 194 operations, Markdown docs and published rate limits, and the free plan needs no card. Organisation API keys carry no scopes, there is no idempotency key, and the status page shows one API outage of 4 hours 3 minutes on 31 August 2026.", "bestFor": "A SaaS product or agent that manages many accounts for many customers, since paid plans do not charge per connected account and teams separate tenants.", "strengths": [ "OpenAPI 3.0.2 description with 194 operations, each with a description, plus llms.txt, llms-full.txt and Markdown copies of every docs page", "Paid plans are priced per organisation with no fee per connected account. The free plan covers 20 posts a month and needs no payment details", "Rate limits are published as three windows (100 a second, 500 per 10 seconds, 2,000 a minute), counted per endpoint for API keys", "Platform errors come back with a stable `code`, a `userFacingMessage` and an `isTransient` flag in `errorsVerbose`", "Valid security.txt and a disclosure policy that promises acknowledgement within 3 business days" ], "weaknesses": [ "API keys are organisation-wide with no scopes or read-only mode found, so one key reaches every team and connected account", "No idempotency key on `POST /api/v1/post`. A `referenceKey` with conflict protection is the nearest safeguard", "The status page records the API down for 4 hours 3 minutes on 31 August 2026", "The DPA is sent on request only, and no sub-processor list or certification was found", "One official SDK (TypeScript). The MCP server is local stdio only, with 68 tools and no toolsets" ], "agentNotes": [ "Send the key in the `x-api-key` header to `https://api.bundle.social/api/v1`. A missing key returns 401 and a bad key 403", "Pass `teamId` on most calls. Set `BUNDLESOCIAL_TEAM_ID` for the MCP server or CLI when the organisation has more than one team", "Set a `referenceKey` on each post and look it up with the reference-key endpoint before retrying a create, because there is no idempotency key", "Check `GET /api/v1/organization/usage/daily-limits` before bulk scheduling. Failed and deleted posts still count against the monthly quota", "A person must complete each network's OAuth consent in a browser. Keep prepaid credit for X, where a post costs $0.015 or $0.20 with a link" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 60.1 } ], "editorialScores": { "ergonomics": 66, "maintenance": 78, "payments": 35, "reliability": 63, "schema": 86, "security": 34, "transparency": 44 }, "provenanceScore": 86 }, "connect": { "install": "npm install bundlesocial", "http": "curl \"https://api.bundle.social/api/v1/team\" -H \"x-api-key: $BUNDLE_SOCIAL_API_KEY\"", "claudeCode": "claude mcp add bundlesocial --env BUNDLESOCIAL_API_KEY=sk_live_... -- npx -y bundlesocial-mcp", "config": { "mcpServers": { "bundlesocial": { "args": [ "-y", "bundlesocial-mcp" ], "command": "npx", "env": { "BUNDLESOCIAL_API_KEY": "sk_live_..." } } } } }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/bundle-social" }, "area": "communication", "unitPrices": [ { "item": "Pro plan", "unit": "month", "usd": 100, "note": "10,000 posts a month, unlimited connected accounts" }, { "item": "Business plan", "unit": "month", "usd": 400, "note": "100,000 posts a month" }, { "item": "X post", "unit": "tx", "usd": 0.015, "note": "X's charge passed through, from prepaid credit" }, { "item": "X post with a link", "unit": "tx", "usd": 0.2, "note": "X's charge passed through" } ], "provenance": { "legalEntity": "BUNDLE SP. Z O.O.", "domain": "bundle.social", "domainRegistered": "2023-09-17", "endpointOnVendorDomain": true, "terms": "https://bundle.social/terms", "privacy": "https://bundle.social/privacy", "statusPage": "https://bundlesocial.betteruptime.com/", "changelog": "https://info.bundle.social/changelog", "securityTxt": "valid", "checked": "2026-10-09", "notes": [ "The terms (last updated 14 July 2026) name BUNDLE SP. Z O.O., ul. Hoża 86 / 410, 00-682 Warsaw, KRS 0001103308, and say they govern the website, dashboard and API. Polish law applies.", "The privacy policy (last updated 2 July 2026) covers the same Service and says the company is a processor for customer content and connected account data.", "security.txt at bundle.social/.well-known/security.txt expires on 7 April 2027 and gives a contact address and the contact page.", "RDAP gives a registration date of 2023-09-17 for bundle.social.", "The status page is on Better Stack's betteruptime.com domain. The API answers at api.bundle.social and the docs at info.bundle.social." ], "score": 86 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/bundle-social.json", "live": { "slug": "bundle-social", "probe": { "target": "https://api.bundle.social/api/v1", "method": "get", "lastAt": "2026-10-10T02:07:04.364399785Z", "lastOk": true, "lastStatus": 200, "lastMs": 87, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 125, "p95ms24h": 336, "samples24h": 107, "samples30d": 107, "days": [ { "date": "2026-10-09", "probes": 85, "ok": 85 }, { "date": "2026-10-10", "probes": 22, "ok": 22 } ] }, "vendorStatus": { "page": "https://bundlesocial.betteruptime.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-10T00:50:11.659944209Z" }, "versions": [ { "registry": "github", "name": "bundleglobal/bundlesocial-node", "version": "v2.66.0", "released": "2026-10-06", "seenAt": "2026-10-09T16:44:11.330353144Z" }, { "registry": "npm", "name": "bundlesocial", "version": "2.66.0", "seenAt": "2026-10-09T16:44:07.124149089Z" }, { "registry": "npm", "name": "bundlesocial-cli", "version": "1.2.0", "seenAt": "2026-10-09T16:44:09.336926914Z" }, { "registry": "npm", "name": "bundlesocial-mcp", "version": "1.2.0", "seenAt": "2026-10-09T16:44:08.016971776Z" } ], "githubStars": 2, "npmWeekly": 4095, "pages": [ { "url": "https://info.bundle.social/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:40:30.493711689Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "3cc1075e6da1" }, { "url": "https://bundle.social/pricing.md", "kind": "pricing", "status": 200, "checkedAt": "2026-10-09T18:33:26.088434635Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a06b56dc1904" }, { "url": "https://bundle.social/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:33:28.243797522Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "873c63ca40f1" }, { "url": "https://bundle.social/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:33:30.268270502Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "cfd8eeb305a0" } ], "updatedAt": "2026-10-10T02:07:04.364399785Z" } }, "answer": "bundle.social scores 60.1 (C) on agent readiness against X MCP's 55.4 (C), and leads in 4 of 7 scored categories. X MCP leads on reliability, security \u0026 auth and transparency \u0026 trust.", "b": { "slug": "x-mcp", "name": "X MCP", "vendor": "X Corp.", "vendorUrl": "https://docs.x.com/tools/mcp", "kind": "mcp", "category": "social-media", "summary": "X MCP is X Corp.'s hosted Model Context Protocol server for the X API at api.x.com/mcp. It lets a model search posts, look up users, manage bookmarks, read trends and news, and draft Articles.", "url": "https://www.anchorterminal.com/tools/x-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/x-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/x-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/x-mcp.json", "repo": "https://github.com/xdevplatform/xurl", "license": "Proprietary hosted server under the X Developer Agreement. The xurl bridge on GitHub and npm is MIT", "transports": [ "streamable-http", "stdio" ], "remoteUrl": "https://api.x.com/mcp", "packages": [ { "registry": "npm", "name": "@xdevplatform/xurl" } ], "auth": "mixed", "authNotes": "A person creates an app in the X Developer Portal, on the Pay-per-use package in Production. Reads work with the app-only Bearer token in an `Authorization` header sent straight to https://api.x.com/mcp. User-context tools (bookmarks, Articles, the current user) need OAuth 2.0 authorisation code with PKCE through the local `xurl mcp` bridge, which takes CLIENT_ID and CLIENT_SECRET, needs the redirect URI http://localhost:8080/callback registered, opens a browser once, then caches and refreshes tokens in ~/.xurl. No dynamic client registration. Self-serve, with no review step documented.", "pricing": "usage", "pricingNotes": "Pay-per-use credits bought in advance in the Developer Console, with no subscription and no free tier. Reads are charged per resource returned ($0.005 a post, $0.010 a user, $0.001 for the app owner's own data) and writes per request ($0.005 a bookmark, $0.010 a trends request). A one-time $20 credit needs a saved payment card. The MCP page doesn't say MCP calls are billed at these API rates, though it requires a Pay-per-use app (https://docs.x.com/x-api/getting-started/pricing.md).", "priceSummary": "$0.005 / call", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the MCP page, the pricing page, the docs index or the OpenAPI spec (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 1352, "npmWeekly": 6027, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://docs.x.com/tools/mcp", "llmsTxt": "https://docs.x.com/llms.txt", "openapi": "https://api.x.com/2/openapi.json", "capabilities": [ "social.analytics" ], "tags": [ "official", "hosted", "mcp", "oauth", "usage-priced", "prepaid", "card-required", "openapi", "llms-txt", "closed-source", "cli", "go" ], "lastRelease": "2026-09-29", "graded": true, "anchor": { "graded": true, "score": 55.4, "grade": "C", "agentReady": false, "rank": 657, "ranked": true, "rankOf": 950, "categoryRank": 7, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 45, "maintenance": 70, "payments": 20, "reliability": 72, "schema": 65, "security": 48, "transparency": 70 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": 0, "verdict": "First-party access to full-archive post search, user lookup, trends and news, with OAuth 2.0 PKCE scopes and per-resource prices published without a login. Every user must create a paid X developer app, the tool list isn't published, and the documented tools don't create posts.", "bestFor": "Research and monitoring on X by an agent whose owner already has, or will pay for, an X developer app, such as searching the archive, reading timelines and mentions, and filing bookmarks.", "strengths": [ "Hosted by X on api.x.com, with full-archive post search, user search and news search among the documented tools", "OAuth 2.0 with PKCE (S256), refresh tokens and header-only bearer tokens, per the server's published metadata", "Per-resource prices are public, such as $0.005 a post read and $0.001 for reads of the app owner's own data", "The xurl bridge is MIT, at 1.3.4 from 29 September 2026, with six releases since 16 July", "llms.txt, Markdown for every docs page and a public OpenAPI spec (version 2.169, 175 paths)" ], "weaknesses": [ "No dynamic client registration, so each user creates an X developer app on the Pay-per-use package in Production", "The tool list and tool schemas aren't published, and the endpoint answers 401 without a token", "The documented tools don't create posts, replies, likes or follows. Writes cover bookmarks and Articles", "xurl 1.3.4 asks for a fixed set of 24 scopes, including tweet.write and dm.write, with no flag to narrow them", "No guidance on prompt injection, though every post returned is text written by strangers", "Not in the official MCP registry, and the platform changelog has no entry for the hosted server" ], "agentNotes": [ "Use the app-only Bearer header for read-only work. Bookmarks, Articles and any tool working in the user's name need the xurl bridge", "Set the client's startup timeout to 300 seconds or more, because the bridge holds the handshake until the first browser login ends", "On a headless host run `xurl auth oauth2 --headless` first, with CLIENT_ID and CLIENT_SECRET exported in that shell", "On `client-not-enrolled`, move the app to Pay-per-use and Production in the developer portal", "On 429, wait until the Unix time in `x-rate-limit-reset`. No Retry-After header is documented" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 55.4 } ], "editorialScores": { "ergonomics": 45, "maintenance": 70, "payments": 20, "reliability": 72, "schema": 65, "security": 48, "transparency": 50 }, "provenanceScore": 89 }, "connect": { "install": "npm install -g @xdevplatform/xurl", "config": { "mcpServers": { "xapi": { "args": [ "-y", "@xdevplatform/xurl", "mcp", "https://api.x.com/mcp" ], "command": "npx", "env": { "CLIENT_ID": "YOUR_X_APP_CLIENT_ID", "CLIENT_SECRET": "YOUR_X_APP_CLIENT_SECRET" } } } } }, "letme": { "capability": "https://letme.dev/social.analytics", "tool": "https://letme.dev/x-mcp" }, "sameCompany": [ "x-ads" ], "area": "communication", "unitPrices": [ { "item": "Post read", "unit": "record", "usd": 0.005, "note": "per post returned, deduplicated within a UTC day" }, { "item": "User read", "unit": "record", "usd": 0.01, "note": "per user returned" }, { "item": "Owned read (the app owner's own posts, bookmarks, followers)", "unit": "record", "usd": 0.001, "note": "when the authenticated user owns the app" }, { "item": "Bookmark write", "unit": "call", "usd": 0.005, "note": "per request" }, { "item": "Trends request", "unit": "call", "usd": 0.01, "note": "per request" } ], "provenance": { "legalEntity": "X Corp.", "domain": "x.com", "domainRegistered": "1993-04-02", "endpointOnVendorDomain": true, "terms": "https://docs.x.com/developer-terms/agreement", "privacy": "https://x.com/en/privacy", "statusPage": "https://developer.x.com/status", "changelog": "https://docs.x.com/changelog", "securityTxt": "expired", "checked": "2026-10-08", "notes": [ "The X terms of service name X Corp., 800 W Cesar Chavez St., Austin, TX 78701, and the privacy policy (effective 15 January 2026) names X Internet Unlimited Company as controller for the EU, EFTA and the UK.", "https://x.com/.well-known/security.txt is PGP-signed, points to hackerone.com/twitter and expired on 1 January 2024. api.x.com and docs.x.com return 404 for the file.", "https://developer.x.com/status needs JavaScript and showed our reader no status data. The incident history is readable at https://docs.x.com/incidents.md.", "RDAP for x.com gives a registration date of 1993-04-02." ], "score": 89 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/x-mcp.json", "live": { "slug": "x-mcp", "probe": { "target": "https://api.x.com/mcp", "method": "mcp-initialize", "lastAt": "2026-10-10T02:07:31.707557998Z", "lastOk": true, "lastStatus": 401, "lastMs": 145, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 135, "p95ms24h": 280, "samples24h": 250, "samples30d": 365, "days": [ { "date": "2026-10-08", "probes": 93, "ok": 93 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 22, "ok": 22 } ] }, "vendorStatus": { "page": "https://developer.x.com/status", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-10T00:51:26.282933153Z" }, "versions": [ { "registry": "github", "name": "xdevplatform/xurl", "version": "v1.3.4", "released": "2026-09-29", "seenAt": "2026-10-09T17:28:57.982021731Z" }, { "registry": "npm", "name": "@xdevplatform/xurl", "version": "1.3.4", "seenAt": "2026-10-09T17:28:57.101463587Z" } ], "githubStars": 1353, "npmWeekly": 4549, "securityTxt": { "url": "https://x.com/.well-known/security.txt", "state": "expired", "expires": "2024-01-01T06:00:00.000Z", "checkedAt": "2026-10-09T15:40:12.646095378Z" }, "llmsTxt": { "url": "https://docs.x.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-09T14:03:01.913174461Z" }, "pages": [ { "url": "https://docs.x.com/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:19:48.52525792Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "d1064f68558e" }, { "url": "https://docs.x.com/x-api/getting-started/pricing.md", "kind": "pricing", "status": 200, "checkedAt": "2026-10-09T18:38:51.530837683Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "1664e738aab2" }, { "url": "https://x.com/en/privacy", "kind": "privacy", "status": 0, "checkedAt": "2026-10-09T18:56:08.859886876Z", "changedAt": "0001-01-01T00:00:00Z", "blockedByRobots": true }, { "url": "https://docs.x.com/developer-terms/agreement", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:19:50.776391045Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "69ecb268f31a" } ], "mcpTools": { "url": "https://api.x.com/mcp", "checkedAt": "2026-10-09T21:40:56.260978008Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-10-08T21:34:02.68340277Z" }, "updatedAt": "2026-10-10T02:07:31.707557998Z" } }, "facts": [ { "a": "HTTP API", "b": "MCP server", "name": "Kind" }, { "a": "BUNDLE SP. Z O.O.", "b": "X Corp.", "name": "Vendor" }, { "a": "https://api.bundle.social/api/v1", "b": "https://api.x.com/mcp", "name": "Hosted endpoint" }, { "a": "HTTP, stdio", "b": "Streamable HTTP, stdio", "name": "Transports" }, { "a": "API key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Pay per use", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary hosted service under bundle.social's terms of service. The TypeScript SDK, the CLI and the MCP server on GitHub are MIT", "b": "Proprietary hosted server under the X Developer Agreement. The xurl bridge on GitHub and npm is MIT", "name": "Licence" }, { "a": "68", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-06", "b": "2026-09-29", "name": "Last release" }, { "a": "2026-07-14", "b": "2026-04-27", "name": "Terms last updated" }, { "a": "2026-07-02", "b": "couldn't be read", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "2 stars, 4.1k npm/wk", "b": "1.4k stars, 6k npm/wk", "name": "Popularity" } ], "faq": [ { "answer": "bundle.social scores 60.1 (C) on agent readiness against X MCP's 55.4 (C), and leads in 4 of 7 scored categories. X MCP leads on reliability, security \u0026 auth and transparency \u0026 trust.", "question": "Which is better for AI agents, bundle.social or X MCP?" }, { "answer": "bundle.social needs an API key. X MCP takes an API key or an OAuth sign-in.", "question": "Do bundle.social and X MCP need an API key?" }, { "answer": "Yes. bundle.social has a hosted endpoint at https://api.bundle.social/api/v1 and X MCP at https://api.x.com/mcp.", "question": "Can an agent call bundle.social and X MCP without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 86 against 65", "Agent ergonomics, 66 against 45", "Payments \u0026 pricing, 35 against 20", "Maintenance \u0026 community, 78 against 70" ], "also": [ "Free to start without a card" ], "goodFor": "A SaaS product or agent that manages many accounts for many customers, since paid plans do not charge per connected account and teams separate tenants.", "slug": "bundle-social", "watchFor": "API keys are organisation-wide with no scopes or read-only mode found, so one key reaches every team and connected account" }, { "aheadOn": [ "Reliability, 72 against 63", "Security \u0026 auth, 48 against 34", "Transparency \u0026 trust, 70 against 65" ], "also": null, "goodFor": "Research and monitoring on X by an agent whose owner already has, or will pay for, an X developer app, such as searching the archive, reading timelines and mentions, and filing bookmarks.", "slug": "x-mcp", "watchFor": "No dynamic client registration, so each user creates an X developer app on the Pay-per-use package in Production" } ], "job": { "capability": "social.analytics", "name": "Social analytics" }, "others": [ { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-bundle-social.json", "title": "Ayrshare API + MCP vs bundle.social", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-bundle-social" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-bundle-social.json", "title": "Blotato vs bundle.social", "url": "https://www.anchorterminal.com/compare/blotato-vs-bundle-social" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-bundle-social.json", "title": "Buffer API + MCP vs bundle.social", "url": "https://www.anchorterminal.com/compare/buffer-vs-bundle-social" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-late.json", "title": "bundle.social vs Zernio (formerly Late) API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-late" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-metricool.json", "title": "bundle.social vs Metricool API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-metricool" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-mixpost.json", "title": "bundle.social vs Mixpost API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-mixpost" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-oneup.json", "title": "bundle.social vs OneUp API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-oneup" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-post-bridge.json", "title": "bundle.social vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-postiz.json", "title": "bundle.social vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-publer.json", "title": "bundle.social vs Publer API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-publer" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-typefully.json", "title": "bundle.social vs Typefully", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-typefully" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-upload-post.json", "title": "bundle.social vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-x-mcp.json", "title": "Ayrshare API + MCP vs X MCP", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-x-mcp.json", "title": "Blotato vs X MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-x-mcp.json", "title": "Buffer API + MCP vs X MCP", "url": "https://www.anchorterminal.com/compare/buffer-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-sprout-social.json", "title": "bundle.social vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/late-vs-x-mcp.json", "title": "Zernio (formerly Late) API + MCP vs X MCP", "url": "https://www.anchorterminal.com/compare/late-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/metricool-vs-x-mcp.json", "title": "Metricool API + MCP vs X MCP", "url": "https://www.anchorterminal.com/compare/metricool-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/mixpost-vs-x-mcp.json", "title": "Mixpost API + MCP vs X MCP", "url": "https://www.anchorterminal.com/compare/mixpost-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/oneup-vs-x-mcp.json", "title": "OneUp API + MCP vs X MCP", "url": "https://www.anchorterminal.com/compare/oneup-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-x-mcp.json", "title": "Post Bridge API + MCP vs X MCP", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/postiz-vs-x-mcp.json", "title": "Postiz API + MCP vs X MCP", "url": "https://www.anchorterminal.com/compare/postiz-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/publer-vs-x-mcp.json", "title": "Publer API + MCP vs X MCP", "url": "https://www.anchorterminal.com/compare/publer-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/sprout-social-vs-x-mcp.json", "title": "Sprout Social API vs X MCP", "url": "https://www.anchorterminal.com/compare/sprout-social-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/upload-post-vs-x-mcp.json", "title": "Upload-Post API + MCP vs X MCP", "url": "https://www.anchorterminal.com/compare/upload-post-vs-x-mcp" } ], "scores": [ { "bundle-social": 63, "by": 9, "edge": "x-mcp", "key": "reliability", "name": "Reliability", "weight": 16, "x-mcp": 72 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "bundle-social": 86, "by": 21, "edge": "bundle-social", "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "x-mcp": 65 }, { "bundle-social": 66, "by": 21, "edge": "bundle-social", "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "x-mcp": 45 }, { "bundle-social": 34, "by": 14, "edge": "x-mcp", "key": "security", "name": "Security \u0026 auth", "weight": 14, "x-mcp": 48 }, { "bundle-social": 35, "by": 15, "edge": "bundle-social", "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "x-mcp": 20 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "bundle-social": 78, "by": 8, "edge": "bundle-social", "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "x-mcp": 70 }, { "bundle-social": 65, "by": 5, "edge": "x-mcp", "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "x-mcp": 70 } ], "summary": "bundle.social scores 60.1 (C) on agent readiness against X MCP's 55.4 (C), and leads in 4 of 7 scored categories. X MCP leads on reliability, security \u0026 auth and transparency \u0026 trust. Both do social analytics.", "verdicts": { "bundle-social": "The REST API has a public OpenAPI 3.0 description of 194 operations, Markdown docs and published rate limits, and the free plan needs no card. Organisation API keys carry no scopes, there is no idempotency key, and the status page shows one API outage of 4 hours 3 minutes on 31 August 2026.", "x-mcp": "First-party access to full-archive post search, user lookup, trends and news, with OAuth 2.0 PKCE scopes and per-resource prices published without a login. Every user must create a paid X developer app, the tool list isn't published, and the documented tools don't create posts." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/bundle-social-vs-x-mcp", "json": "https://www.anchorterminal.com/compare/bundle-social-vs-x-mcp.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/bundle-social-vs-x-mcp.md", "slim": "https://www.anchorterminal.com/compare/bundle-social-vs-x-mcp.min.md" }, "markdown": "bundle.social scores 60.1 (C) on agent readiness against X MCP's 55.4 (C), and leads in 4 of 7 scored categories. X MCP leads on reliability, security \u0026 auth and transparency \u0026 trust. Both do social analytics.\n\n- bundle.social: grade C, 60.1/100, rank #530 of 950. Markdown https://www.anchorterminal.com/tools/bundle-social.md · JSON https://www.anchorterminal.com/api/v1/tools/bundle-social.json\n- X MCP: grade C, 55.4/100, rank #657 of 950. Markdown https://www.anchorterminal.com/tools/x-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/x-mcp.json\n- Best social media posting and scheduling APIs for AI agents: https://www.anchorterminal.com/best/social-media/index.md\n- All 103 social comparisons: https://www.anchorterminal.com/compare/social-media/index.md\n\n## Which one, for what\n\n### bundle.social (C)\n\nGood for: A SaaS product or agent that manages many accounts for many customers, since paid plans do not charge per connected account and teams separate tenants.\n\nAhead on:\n- Schema \u0026 documentation, 86 against 65\n- Agent ergonomics, 66 against 45\n- Payments \u0026 pricing, 35 against 20\n- Maintenance \u0026 community, 78 against 70\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: API keys are organisation-wide with no scopes or read-only mode found, so one key reaches every team and connected account\n\n### X MCP (C)\n\nGood for: Research and monitoring on X by an agent whose owner already has, or will pay for, an X developer app, such as searching the archive, reading timelines and mentions, and filing bookmarks.\n\nAhead on:\n- Reliability, 72 against 63\n- Security \u0026 auth, 48 against 34\n- Transparency \u0026 trust, 70 against 65\n\nWatch for: No dynamic client registration, so each user creates an X developer app on the Pay-per-use package in Production\n\n\n## Score by category\n\n| Category | Weight | bundle.social | X MCP | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 63 | 72 | X MCP +9 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 86 | 65 | bundle.social +21 |\n| Agent ergonomics | 13% (16.2 this run) | 66 | 45 | bundle.social +21 |\n| Security \u0026 auth | 14% (17.5 this run) | 34 | 48 | X MCP +14 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 35 | 20 | bundle.social +15 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 78 | 70 | bundle.social +8 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 65 | 70 | X MCP +5 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **60.1 · C** | **55.4 · C** | |\n\n## Facts side by side\n\n| Fact | bundle.social | X MCP |\n| --- | --- | --- |\n| Kind | HTTP API | MCP server |\n| Vendor | BUNDLE SP. Z O.O. | X Corp. |\n| Hosted endpoint | `https://api.bundle.social/api/v1` | `https://api.x.com/mcp` |\n| Transports | HTTP, stdio | Streamable HTTP, stdio |\n| Auth | API key | OAuth or key |\n| Pricing | Freemium | Pay per use |\n| x402 | no | no |\n| Licence | Proprietary hosted service under bundle.social's terms of service. The TypeScript SDK, the CLI and the MCP server on GitHub are MIT | Proprietary hosted server under the X Developer Agreement. The xurl bridge on GitHub and npm is MIT |\n| Tools exposed | 68 | none |\n| Read-only variant documented | no | yes |\n| llms.txt | yes | yes |\n| Last release | 2026-10-06 | 2026-09-29 |\n| Terms last updated | 2026-07-14 | 2026-04-27 |\n| Privacy policy last updated | 2026-07-02 | couldn't be read |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | not found in the text | yes |\n| Terms or service can change without notice | yes | not found in the text |\n| Arbitration or class-action waiver | not found in the text | yes |\n| Popularity | 2 stars, 4.1k npm/wk | 1.4k stars, 6k npm/wk |\n\n## Verdicts\n\n**bundle.social.** The REST API has a public OpenAPI 3.0 description of 194 operations, Markdown docs and published rate limits, and the free plan needs no card. Organisation API keys carry no scopes, there is no idempotency key, and the status page shows one API outage of 4 hours 3 minutes on 31 August 2026.\n\n**X MCP.** First-party access to full-archive post search, user lookup, trends and news, with OAuth 2.0 PKCE scopes and per-resource prices published without a login. Every user must create a paid X developer app, the tool list isn't published, and the documented tools don't create posts.\n\n## Before you call either\n\n### bundle.social\n\n1. Send the key in the `x-api-key` header to `https://api.bundle.social/api/v1`. A missing key returns 401 and a bad key 403\n2. Pass `teamId` on most calls. Set `BUNDLESOCIAL_TEAM_ID` for the MCP server or CLI when the organisation has more than one team\n3. Set a `referenceKey` on each post and look it up with the reference-key endpoint before retrying a create, because there is no idempotency key\n4. Check `GET /api/v1/organization/usage/daily-limits` before bulk scheduling. Failed and deleted posts still count against the monthly quota\n5. A person must complete each network's OAuth consent in a browser. Keep prepaid credit for X, where a post costs $0.015 or $0.20 with a link\n\n### X MCP\n\n1. Use the app-only Bearer header for read-only work. Bookmarks, Articles and any tool working in the user's name need the xurl bridge\n2. Set the client's startup timeout to 300 seconds or more, because the bridge holds the handshake until the first browser login ends\n3. On a headless host run `xurl auth oauth2 --headless` first, with CLIENT_ID and CLIENT_SECRET exported in that shell\n4. On `client-not-enrolled`, move the app to Pay-per-use and Production in the developer portal\n5. On 429, wait until the Unix time in `x-rate-limit-reset`. No Retry-After header is documented\n\n## Questions\n\n### Which is better for AI agents, bundle.social or X MCP?\n\nbundle.social scores 60.1 (C) on agent readiness against X MCP's 55.4 (C), and leads in 4 of 7 scored categories. X MCP leads on reliability, security \u0026 auth and transparency \u0026 trust.\n\n### Do bundle.social and X MCP need an API key?\n\nbundle.social needs an API key. X MCP takes an API key or an OAuth sign-in.\n\n### Can an agent call bundle.social and X MCP without installing anything?\n\nYes. bundle.social has a hosted endpoint at https://api.bundle.social/api/v1 and X MCP at https://api.x.com/mcp.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/bundle-social-vs-x-mcp.json, and with the fewest tokens: https://www.anchorterminal.com/compare/bundle-social-vs-x-mcp.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"bundle-social\", \"b\": \"x-mcp\"}`. From a terminal: `anchor compare bundle-social x-mcp`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/bundle-social.json and https://www.anchorterminal.com/api/v1/tools/x-mcp.json\n\n## Other comparisons with bundle.social or X MCP\n\n- [Ayrshare API + MCP vs bundle.social](https://www.anchorterminal.com/compare/ayrshare-vs-bundle-social.md)\n- [Blotato vs bundle.social](https://www.anchorterminal.com/compare/blotato-vs-bundle-social.md)\n- [Buffer API + MCP vs bundle.social](https://www.anchorterminal.com/compare/buffer-vs-bundle-social.md)\n- [bundle.social vs Zernio (formerly Late) API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-late.md)\n- [bundle.social vs Metricool API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-metricool.md)\n- [bundle.social vs Mixpost API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-mixpost.md)\n- [bundle.social vs OneUp API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-oneup.md)\n- [bundle.social vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-post-bridge.md)\n- [bundle.social vs Postiz API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-postiz.md)\n- [bundle.social vs Publer API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-publer.md)\n- [bundle.social vs Typefully](https://www.anchorterminal.com/compare/bundle-social-vs-typefully.md)\n- [bundle.social vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-upload-post.md)\n- [Ayrshare API + MCP vs X MCP](https://www.anchorterminal.com/compare/ayrshare-vs-x-mcp.md)\n- [Blotato vs X MCP](https://www.anchorterminal.com/compare/blotato-vs-x-mcp.md)\n- [Buffer API + MCP vs X MCP](https://www.anchorterminal.com/compare/buffer-vs-x-mcp.md)\n- [bundle.social vs Sprout Social API](https://www.anchorterminal.com/compare/bundle-social-vs-sprout-social.md)\n- [Zernio (formerly Late) API + MCP vs X MCP](https://www.anchorterminal.com/compare/late-vs-x-mcp.md)\n- [Metricool API + MCP vs X MCP](https://www.anchorterminal.com/compare/metricool-vs-x-mcp.md)\n- [Mixpost API + MCP vs X MCP](https://www.anchorterminal.com/compare/mixpost-vs-x-mcp.md)\n- [OneUp API + MCP vs X MCP](https://www.anchorterminal.com/compare/oneup-vs-x-mcp.md)\n- [Post Bridge API + MCP vs X MCP](https://www.anchorterminal.com/compare/post-bridge-vs-x-mcp.md)\n- [Postiz API + MCP vs X MCP](https://www.anchorterminal.com/compare/postiz-vs-x-mcp.md)\n- [Publer API + MCP vs X MCP](https://www.anchorterminal.com/compare/publer-vs-x-mcp.md)\n- [Sprout Social API vs X MCP](https://www.anchorterminal.com/compare/sprout-social-vs-x-mcp.md)\n- [Upload-Post API + MCP vs X MCP](https://www.anchorterminal.com/compare/upload-post-vs-x-mcp.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-10", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "bundle.social vs X MCP", "url": "" } ], "description": "bundle.social scores 60.1 (C) to X MCP's 55.4 (C) for social analytics. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "bundle.social C 60.1", "X MCP C 55.4", "scores" ], "h1": "bundle.social vs X MCP", "image": "https://www.anchorterminal.com/assets/og/compare-bundle-social-vs-x-mcp.png", "path": "/compare/bundle-social-vs-x-mcp", "published": "2026-10-01", "section": "tools", "title": "bundle.social vs X MCP for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-x-mcp" }, "tokens": { "markdown": 2550, "slim": 780 }, "version": 1 }