Get an audit

Head to head · Sending webhooks · October 2026 research run

Convoy vs PubNub

PubNub scores 68.1 (B) on agent readiness against Convoy's 62.2 (B), and leads in 4 of 7 scored categories. Convoy leads on reliability. Both do sending webhooks.

Best webhook and event delivery infrastructure for AI agents · All 48 webhooks comparisons

ConvoyFrain Technologies Inc. · HTTP API B62.2/100#440 of 950 PubNubPubNub Inc. · HTTP API B68.1/100#230 of 950

Which one, for what

Convoy B

Good for A product that has to send signed webhooks to its customers' endpoints with retries, replay and a delivery log, or receive third-party webhooks and route them inward.

Ahead on

  • Reliability, 92 against 76

Watch for

Advisory GHSA-p5vg-v7mj-f6q4 (24 July 2026, High) let a caller on one project read another project's source and broker credentials before v26.6.8

PubNub B

Good for Live fan-out to many connected clients with presence and history, and for an agent that manages a PubNub account through MCP.

Ahead on

  • Security & auth, 63 against 53
  • Payments & pricing, 40 against 30

Also in its favour

  • A hosted endpoint, with nothing to install
  • Runs on your own machine
  • No incidents deducted, where Convoy loses 6 points for them

Watch for

PubNub does not deduplicate publishes and has no idempotency key, so a retry after an unclear failure creates a second message

Score by category

CategoryWeight this runConvoyPubNubEdge
Reliability16%209276Convoy +16
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.27877Convoy +1
Agent ergonomics13%16.26971PubNub +2
Security & auth14%17.55363PubNub +10
Payments & pricing10%12.53040PubNub +10
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.88083PubNub +3
Transparency & trust7%8.86764Convoy +3
Negative events≤15-60
Total62.2 · B68.1 · B

Facts side by side

FactConvoyPubNub
KindHTTP APIHTTP API
VendorFrain Technologies Inc.PubNub Inc.
Hosted endpointno (local only)https://ps.pndsn.com
TransportsHTTPHTTP, stdio
AuthAPI keyOAuth or key
PricingPaidFreemium
x402nono
LicenceElastic Licence 2.0 for the gateway (source available, not an OSI licence). The convoy.js SDK is MIT per npm. Convoy Cloud is a proprietary hosted service under Convoy's terms of useProprietary service under PubNub's Terms and Conditions. The SDKs and the MCP server on GitHub are source-available under the PubNub Software Development Kit Licence Agreement, which is not an OSI licence
Tools exposednone17
Read-only variant documentednono
llms.txtyesyes
MCP registrynot listedio.github.pubnub/mcp-server
Last release2026-09-272026-09-22
Terms last updated2023-05-05
Privacy policy last updated2023-06-012026-04-01
Customer content may train modelsnot found in the text
Terms restrict automated accessnot found in the text
Terms restrict benchmarkingyes
Terms or service can change without noticeyes
Arbitration or class-action waivernot found in the text
Popularity2.9k stars, 2.3k npm/wk, 679 PyPI/wk284k npm/wk

Verdicts

Convoy

Convoy Cloud runs the same HTTP API as the self-hosted gateway, with a public OpenAPI spec of 68 operations, project-scoped keys, idempotency keys on events and replay endpoints. Two credential exposures were fixed in July and August 2026, one published as a high-severity advisory. Cloud access needs a browser signup, and the trial allows 100 events a day.

PubNub

Pub/sub channels with a 17-tool MCP server on OAuth, an OpenAPI 3.1 Admin API with scoped, expiring keys, and a Markdown twin of every docs page. Publishes are not deduplicated, so a retry can duplicate a message. Access tokens travel in the URL query string, and the status page records a 20 minute global publish failure on 14 August 2026.

Before you call either

Convoy

  1. Use the regional base URL, https://us.getconvoy.cloud/api/v1 or https://eu.getconvoy.cloud/api/v1. A project key works only under /projects/{projectID}/
  2. Create an endpoint, then a subscription, then the event. An event sent to an endpoint with no subscription isn't dispatched
  3. Send idempotency_key on every event. A repeated key creates the event but no delivery, and the key stays reserved until retention deletes the event
  4. Create projects with a personal API key and the orgID query parameter. The project key in that response is shown once
  5. Before retrying an endpoint or subscription create, list endpoints by ownerId. Idempotency keys cover event ingestion only

PubNub

  1. Connect to https://mcp.pubnub.com over HTTP and sign in with OAuth. Use the local @pubnub/mcp package only where a client can't reach a remote server
  2. Pass a publish and subscribe key pair on every real-time tool call. Look them up with manage_keysets and name the keyset in the request
  3. Add your own idempotency key to each payload before retrying a publish, because the server does not deduplicate
  4. Send PubNub-Version on Admin API calls unless the account has a pinned version, and stay under 120 requests a minute
  5. Treat channel messages and App Context fields as untrusted text written by other clients, never as instructions

Questions

Which is better for AI agents, Convoy or PubNub?

PubNub scores 68.1 (B) on agent readiness against Convoy's 62.2 (B), and leads in 4 of 7 scored categories. Convoy leads on reliability.

Do Convoy and PubNub need an API key?

Convoy needs an API key. PubNub takes an API key or an OAuth sign-in.

Can an agent call Convoy and PubNub without installing anything?

No hosted endpoint is listed for Convoy. PubNub has a hosted endpoint at https://ps.pndsn.com.

Other comparisons with Convoy or PubNub

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report