Crisp API + MCP vs Drag

Crisp API + MCP 80

No dated API release notes since 2025, so we used the official SDKs. crisp-api for Node v12.0.2 on 26 October 2026, 10 days before this check, adding attachments on text and note messages (30). Node v10.11.0 (20 August), v11.0.0 to v11.3.0 (9 to 14 September), v11.4.0 and v11.4.1 (5 and 9 October) and v12.0.0 to v12.0.2 (16 to 26 October), and Go v3.75.0, v4.0.0 and v5.0.0 (20 August, 9 September, 16 October), all since 7 August (20). Platform changelog stale since August 2025, with live chat support in the product (7). Current official SDKs in Node, Python (v1.1.23, 2 July), Go and PHP (1.8.2, 2 July) (15). Build and test workflows on the Node SDK, testing Node 20 to 26 (8).

Drag 43

@dragapp/mcp-server 0.7.0 on npm on 13 August 2026, 85 days before this check; the repository had a commit on 6 November and its package.json reads 0.12.0 with no matching release (20). Only one dated release in the 90 days from 8 August, and no changelog (0). 43 commits since 6 July 2026 by the CTO; issues were not read (8 of 25). Domain-verified com.dragapp/mcp-server namespace, but the entry stops at 0.1.5 and lists only the stdio package, not the hosted remote (10 of 15). A secret-scan workflow and a tarball check before publish; no tests in CI (5 of 10). 20 + 0 + 8 + 10 + 5 = 43.

Crisp API + MCP 77

Closed service with published terms, last updated 27 July 2026 (15). Privacy policy updated 15 July 2026 gives retention periods (inactive accounts kept at most 12 months, logs kept at most a year), puts the DPA in the terms and says customer data doesn't train Crisp's models, which the terms repeat (26). The Node SDK changelog marks breaking changes and removed methods (v12.0.0 on 16 October removed methods for user-tier routes no longer in the public reference), but there's no dated deprecation policy (10). Sub-processor list published and core infrastructure in Amsterdam (18).

Drag 49

Closed service under terms naming DragApp.com Ltd, with the MCP server under MIT (20 of 30). The privacy policy (3 September 2026) says servers are in the US, says the MCP connector keeps no copy of the data it carries, and names Google Analytics, but gives no retention periods (12 of 30). No deprecation policy or dated notices found (0). Hosting at AWS in Virginia is stated and the trust centre has a subprocessor section we could not open past its root page (10 of 20). 20 + 12 + 0 + 10 = 42.

Crisp API + MCP 46

No OpenAPI file. The REST reference (updated 25 October 2026) links a Postman collection as a visible download, which we counted as half a contract (10). docs.crisp.chat/llms.txt returns 404 on 5 November 2026 (0). Each route has a description and lists the token tier and scope it needs (12). URI parameters and bodies carry types and required flags, and per_page is bounded 20 to 50 (11). Response schemas are shown, error codes and reasons per route aren't (6). The platform changelog's newest entry is still August 2025, while the SDK changelogs record API changes up to October 2026 (7).

Drag 71

No OpenAPI or other contract for REST v2 was found. Every MCP tool carries a JSON input schema in the open-source server (20 of 25). llms.txt for the site (10). Tool descriptions say which ID to pass, which tool to call first and when WhatsApp free text fails, and the server instructions add tips (17 of 20). Inputs are typed in the schemas, with IDs as strings and few enums (10 of 15). The REST docs show request and response examples for 24 endpoints and a shared error shape with 401, 429 and 500 (9 of 15). REST is v2, but no changelog was found; versions are visible only on npm and in the repository (5 of 15). 20 + 10 + 17 + 10 + 9 + 5 = 71.

Crisp API + MCP 38

status.crisp.chat runs Vigil and on 5 November 2026 shows live state for the API service, the MCP service, hooks and the realtime sockets, but no incident history. We gave 10 of 20 for a component page without history, a partial kept under the in-between rule. No readable history (5). The rate-limit page (updated 21 September 2021) names four limiters (load balancer, global, per route, plugin quota) without numbers, and the authentication page (updated 1 April 2026) gives daily quotas of 10,000 requests for website tokens and 5,000 for plugin tokens, so the per-route limits still carry no numbers and the partial 8 of 15 is kept. 429 and 420 are documented and GET routes are cached with a Bloom-Status header, but there's no Retry-After or backoff guidance, a partial 5 kept. No SLA found (0). REST API v1 is GA (10).

Drag 28

Graded as a hosted service on the MCP server at app.dragapp.com/mcp and REST API v2. No status page is linked and status.dragapp.com failed the TLS handshake (0). No readable incident history (5). The REST docs say rate limits apply without numbers; the hosted MCP server's source defaults to 60 calls a minute per key (5 of 15). The REST docs say to retry a 429 with exponential backoff, with no idempotency guidance for sends (8 of 15). No SLA found (0). Neither surface is labelled beta (10). 0 + 5 + 5 + 8 + 0 + 10 = 28.

Crisp API + MCP 51

The MCP tool list is now published, 41 tools (26 read, 15 write) with one-line descriptions and no input schemas or annotations, so the REST lines decide this category as before. REST lists page by number with per_page 20 to 50 and no field selection (10). Filters for unread, resolved, assigned, dates and full-text search on conversations (18). Error codes per route aren't documented, 420 and 429 are (8). No idempotency key or retry guidance for sending messages, and the tools page shows no MCP annotations (0). Official SDKs for Node, Python, Go and PHP (15).

Drag 43

47 MCP tools load by default, with no toolsets (5). Search and filter tools by label, assignee or status, and bulk moves; paging controls were not documented (10 of 20). REST errors return error and message with standard codes, and MCP error shapes weren't documented (8 of 20). Every tool sets readOnlyHint and destructiveHint, with sends marked destructive and open-world; no idempotency keys (15 of 20). One URL for the hosted server; the docs say official SDKs and a CLI are coming soon (5 of 15). 5 + 10 + 8 + 15 + 5 = 43.

Crisp API + MCP 31

Website tokens are a Basic auth keypair for one workspace with no scopes. Plugin tokens from the Marketplace pick read or write per scope and can be rolled, which revokes the old one at once. Since 7 October 2026 the MCP quickstart has the agent use an MCP Server token tied to the REST keypair and holding the website tier, sent as a Bearer header or, as a documented option, a ?token= URL parameter. The partial 22 between the two key models is kept, less the fixed 10 for a credential in a URL query string (12). The REST plugin scopes allow a read-only integration and the MCP server applies the REST ACLs, but the MCP guide no longer mentions read-only tokens and sending a message needs no confirmation, so the partial 12 is kept. Conversations carry visitor-written text to the model and we found no injection guidance (0). No operator audit log or per-call log found (0). The docs' Security Practices page (updated 3 May 2026) has a vulnerability disclosure section with an encrypted report address, security@crisp.chat, and no acknowledgement time; no security.txt (404), bug bounty or certification found (7).

Drag 23

One API key per user that the docs say grants full access to the workspace, revocable in settings; the hosted server wraps it in an OAuth 2.1 flow with PKCE, but the key remains the access token (10). No read-only key or scopes; the server instructions tell the model to confirm sends when intent is unclear, and ChatGPT's plugin asks before sending (5 of 20). Tools return email and WhatsApp text from outside senders, and no prompt-injection guidance was found (0). No audit log of API or MCP actions found (0). Google CASA Tier 2, and the trust centre lists SOC 2 and GDPR, but no security.txt (404) or disclosure policy was found (8 of 20). 10 + 5 + 0 + 0 + 8 = 23.