Codex vs Yield.xyz MCP server

Codex 85

Hosted lines. Status page at status.codex.io (incident.io) with API, Dashboard and 25 network components and a history page (20). The history from 8 August to 6 November lists an elevated-latency incident on 11 August (balances queries, 42 minutes, labelled degraded performance), a 5xx spike the same day, degraded filterTokens on 12 August, and network delays on Robinhood, BNB, Cronos, Fogo and Solana pricing in late August and September, with none in October or November. All read as partial or degraded, so minor only (20). Per-plan rate limits (5 a second free, 300 on Growth with a 500 burst) and per-request maxima are published (15). 429 TOO_MANY_REQUESTS carries retryAfterSeconds and Retry-After, OVER_CAPACITY says to wait 30 seconds, and the errors page says which codes to retry; writes are limited to webhook and token mutations (15). The pricing page shows '99.9% Uptime SLA' as a headline figure and custom SLAs on Enterprise, with no SLA document found (5 of 10). The API is generally available (10). 20+20+15+15+5+10 = 85.

Yield.xyz MCP server 65

Status page at status.yield.xyz, all services online, with a notice on protocol-level Aave pauses (20). History not read (5). Plan rate limits with headers documented, and the MCP free quotas published with numbers (15). 429 with retry-after and a retry strategy documented; transactions are built unsigned and never broadcast (15). No SLA read (0). Not labelled beta (10). 20 + 5 + 15 + 15 + 0 + 10 = 65.

Codex 80

MPP (Machine Payments Protocol) on every query endpoint, paid in USDC on Tempo; subscriptions and webhooks are not covered, and it is not x402 (35 of 40). $0.001 a query through MPP, compute-unit costs per operation, and Growth at $120 per million compute units, all public (20). The Almost free plan's 10,000 compute units need a one-time $1 activation fee by card or 1 USDC, which the terms say confirms a payment method (5 of 20). An agent can pay per query with no account or key (20). 35+20+5+20 = 80.

Yield.xyz MCP server 100

x402 on its own MCP endpoint for metered tools over quota (40). $0.001 a call published, with machine-readable pricing at /.well-known/x402 (20). 1,000 free read calls a tool a day with no sign-up (20). Keyless use and x402 let an agent start with no person (20). 40 + 20 + 20 + 20 = 100.

Codex 80

Closed service. Newest changelog entry 2 November 2026 (30). Weekly entries from 3 August to 2 November, and SDK releases 2.5.10 to 2.5.20 between 28 October and 5 November (20). Public changelog, a Discord, a support address and a status page with a report link; GitHub issue replies were not sampled (10 of 15). Current official TypeScript SDK, no other languages (12 of 15). The SDK repository runs lint and test on pull requests and a release workflow (8 of 10). 30+20+10+12+8 = 80.

Yield.xyz MCP server 60

Weekly changelog entries into November 2026 (30). More than three dated entries in 90 days (20). Docs, a trust page and support; issues not public (10 of 15). Not found in our import of the official registry (0). No package health read (0). 30 + 20 + 10 + 0 + 0 = 60. Registry presence read from Anchor Terminal's own daily import of the official MCP registry (/api/v1/registry.json, 6 November 2026), not the registry's API.

Codex 49

Secret API keys in a header, never in the URL. Short-lived tokens from createApiTokens with an expiry and a request limit, per-key compute-unit limits and key deactivation. No scopes (22 of 30). The surface is mostly reads; mutations create webhooks and short-lived tokens. No read-only key (12 of 20). Token names, symbols, social links and community notes come from token deployers and other sources, and the docs warn tokens may be scams, with no prompt-injection guidance (5 of 15). The dashboard usage page breaks compute units down by operation, apiUsage reports the period's use and usageData the cost of each request (10 of 15). security.txt returns 404, and no disclosure policy, bug bounty or certification was found on the site or docs (0 of 20). 22+12+5+10+0 = 49.

Yield.xyz MCP server 56

Keyless shared access, x402, or your own key in a header; the key can also go in a query string, a documented option (10 of 30, a plain key less 10 for the query string). Mostly reads, and wallet tools build unsigned transactions the user signs elsewhere (18 of 20). Returns protocol data, no third-party prose (10). No audit log of MCP calls (0). SOC 2 Type II, penetration tests by Spearbit/Cantina and Trail of Bits, audited contracts (18 of 20). 10 + 18 + 10 + 0 + 18 = 56.

Codex 59

Closed service under terms that name Codex Data Inc., last updated 29 October 2026; the SDK is MIT (15 of 30). The privacy policy (effective 29 September 2026) is general, keeps data 'only for as long as is necessary' with no periods, transfers data to the United States, and links no DPA or subprocessor list (10 of 30). The changelog dates deprecations, such as NFT endpoints removed on 31 March 2026 and the transactions fields deprecated on 2 November, with no written deprecation policy or notice period (12 of 20). The terms name Mixpanel, Rollbar and Sentry and the privacy policy says data is processed in the United States; no fuller subprocessor list found (8 of 20). 15+10+12+8 = 45.

Yield.xyz MCP server 53

Closed service under terms with Omni Ltd. dba Yield.xyz, a Bermuda company (15). Privacy policy read; retention not given in periods (12 of 30). Status notices with dates for protocol pauses; no deprecation policy for the API (8 of 20). Subprocessors not found (5 of 20). 15 + 12 + 8 + 5 = 40.