Cronitor MCP server vs Honeycomb MCP

Cronitor MCP server 37

robots.txt disallows the terms and privacy pages, so neither was read (5 of 30, terms exist but weren't readable). Data handling only from the security page (encryption, backups) (10 of 30). No deprecation policy found; the docs version the error codes by protocol revision (5 of 20). Subprocessors not found (5 of 20). 5 + 10 + 5 + 5 = 25.

Honeycomb MCP 70

The hosted server is closed, under published Terms of Service and Honeycomb Intelligence Supplemental Terms. The companion plugin is MIT (17). The privacy notice, the DPA and an AI policy page dated 21 September 2026 are public. The AI page says MCP's model provider is whichever the client uses, and that Honeycomb uses no provider that trains foundation models on input. Telemetry is deleted after the retention window, 60 days for most customers. The terms also let Honeycomb use customer data to improve its services, and the AI page says Honeycomb may fine-tune pre-trained models (22). The self-hosted server carries a deprecation notice dated 21 August 2025. No deprecation policy was found, the AI terms allow any part of Honeycomb Intelligence to be changed or ended at any time with commercially reasonable efforts at notice, and the docs say rate limits may change (6). The subprocessor list is public with purposes and countries, the DPA promises 30 days' notice of new subprocessors, and customers choose a US or EU data location (19).

Cronitor MCP server 55

Registry entry io.cronitor/cronitor updated 3 November 2026 (30). No dated changelog found to count (0). Support page and docs; no public changelog (10 of 15). Official registry entry under its own namespace, and official SDKs (15). No package to read (0). 30 + 0 + 10 + 15 + 0 = 55. Registry presence read from Anchor Terminal's own daily import of the official MCP registry (/api/v1/registry.json, 6 November 2026), not the registry's API.

Honeycomb MCP 81

Every dated source of the vendor's own was counted. The product changelogs at changelog.honeycomb.io and api-changelog.honeycomb.io still disallow unnamed crawlers (the docs' changelog links redirect there), so they weren't read. The companion plugin in honeycombio/agent-skill carries its own version in its plugin manifests. 1.2.3 on 9 October 2026 trimmed the skill descriptions, 26 days before this check (30). In the 90 days from 6 August it moved through 1.2.0 (19 August), 1.2.1 (26 August, Rust setup skill), 1.2.2 (20 September, a GenAI instrumentation fix) and 1.2.3 (9 October), three or more releases that change skill content (20). A support site, a community Slack and a feedback tool reach the team, and the plugin repository merged an outside contributor's fix on 17 July, per the 9 October check. GitHub's issue pages weren't readable on 4 November (10). io.honeycomb/mcp 1.0.0 is in the official MCP registry under the vendor's domain namespace, published 29 April 2026 (15). The plugin repository runs structural and scenario test workflows. The server itself is closed (6).

Cronitor MCP server 80

Every tool's input schema declares additionalProperties false, and the docs call tools/list the field-level reference (25). llms.txt and .md pages for agents (10). Detailed tool guidance, including which to start with and what not to request (18 of 20). Typed inputs with enums, required combinations and no untyped data objects (15). A table of JSON-RPC error codes with their data fields, and worked calls (12 of 15). No public changelog found (404) (0). 25 + 10 + 18 + 15 + 12 + 0 = 80.

Honeycomb MCP 57

The server is closed source and tools/list needs sign-in, so we could not read the input schemas. Partial credit for a contract that exists but is not public (12). docs.honeycomb.io publishes llms.txt and a Markdown twin of every page (10). The tools reference says what each of the 36 tools returns and when an agent reaches for it, for example calling get_workspace_context first and list_memories before read_memory. These are docs, not the definitions the model sees (14). Parameters are mentioned only in passing, with no types, enums or required fields published (4). A use-cases page and a troubleshooting page document the Unauthorized, rate-limit, permission and not-found errors with causes and fixes (9). The registry entry carries version 1.0.0 and Honeycomb links a UI changelog and an API changelog, but changelog.honeycomb.io still disallows unnamed crawlers, so we could not confirm MCP entries (8).

Cronitor MCP server 73

71 tools (5), with four task-oriented tools and summary modes that cap list output (5 back). Summary mode defaults to 25 rows, allows 100 and returns next_page (20). Documented, recoverable errors (18 of 20). Safety metadata in each tool schema and documented repeat behaviour (15 of 20). setup_monitor takes few fields; SDKs and a CLI (10 of 15). 10 + 20 + 18 + 15 + 10 = 73.

Honeycomb MCP 53

36 tools is above the 30 line (5). The X-MCP-Toolset header loads query or canvas subsets, and the docs don't say how many tools each holds (add 8, so 13). Size controls are described per tool, such as up to 100 datasets or 100 columns a call, subtree zoom on get_trace and query limits. Pagination parameters aren't documented (10). Errors are documented with causes and fixes, and the rate-limit message names the retry time. No error code list was found (12). The reference labels each tool read or write and update_slo keeps omitted fields. No idempotency keys were found, and we couldn't confirm readOnlyHint or destructiveHint annotations (8). get_workspace_context takes no parameters, relative time is the default, and setup is one command or link in nine documented clients. SDKs don't apply (10).

Cronitor MCP server 55

Status page at status.cronitor.io with components for the APIs and telemetry regions (20). No history was readable (history.rss 404, uptime 'No data available') (5). Rate limits are returned with limit and window in the error data, but no numbers are published (5 of 15). Rate-limit errors carry retry_after_seconds, bulk deletes validate every key first, and the docs say which repeated calls are safe (15). No SLA found (0). Not labelled beta (10). 20 + 5 + 5 + 15 + 0 + 10 = 55.

Honeycomb MCP 70

Scored as a hosted MCP server. status.honeycomb.io is an Atlassian Statuspage with components for US1, EU1, the website and the sandbox. It has no MCP component, though MCP incidents are posted there, which takes 15 as sentry-mcp and slack-mcp take for a vendor page with no MCP component (15). history.atom lists five incidents from 6 August to 4 November 2026, each limited to one region, one product or a subset of requests. US1 queries over older data erroring for 67 minutes on 10 August, Canvas not loading for 38 minutes on 21 August, degraded US event ingest for 12 minutes on 20 October, slower query execution and SLO processing in the US from 07:04 to 09:26 PDT on 20 October, and SLO, Trigger and anomaly emails failing for 15 minutes on 22 October. None took the query path down for everyone, so minor only (20). Per-tool limits are published with numbers (15). Rate-limit errors carry the time to retry after, which counts as Retry-After alone. No backoff guidance or idempotency keys for the nine write tools were found (10). No SLA found in the terms, and honeycomb.io/sla returned 404 on 9 October (0). The docs still list MCP among betas graduated to general availability (10). 15+20+15+10+0+10 = 70.

Cronitor MCP server 58

OAuth bounded by role with no scope choice, or scoped API keys (22 of 30). Read-only users get only read tools; write tools follow the role (14 of 20). The docs warn that event messages, command output and request bodies can hold customer data or secrets, and tell the agent to ask before expanding them; secrets are redacted (12 of 15). No audit log of MCP calls found (0). The security page covers encryption and relies on AWS's certifications; no security.txt (404) and no disclosure policy found (10 of 20). 22 + 14 + 12 + 0 + 10 = 58.

Honeycomb MCP 68

OAuth authorisation code with PKCE S256, dynamic client registration, client ID metadata documents and refresh tokens. Since the 9 October check the consent screen lets the owner choose read all, read and write all, or a custom choice per resource, with scopes such as boards:read, triggers:write and investigations:write beside environments:read and queries:read. Connections made earlier keep mcp:read or mcp:write. The alternative is a Management API key whose scopes are fixed at creation and which can be disabled or deleted (28). Tools are read-only unless a write scope is granted, members with a read-only role can choose only read scopes, API keys are limited to chosen environments, and there is no delete tool. No confirmation step for writes was found (15). Trace, log and span content is untrusted text, and no injection guidance was found in the MCP docs (2). The Activity Log records OAuth sessions with requested and granted scopes and one event per query run with its source, MCP included. The compliance page describes activity logging as for enterprise customers (11). SOC 2 Type II each year with penetration tests by an independent firm, HIPAA BAAs and an email disclosure route under a bug bounty page whose rewards are all at Honeycomb's discretion, so the bounty isn't counted. No security.txt, no stated acknowledgement time, and the scope names ui.honeycomb.io and api.honeycomb.io, not the MCP hosts. ISO 27001 is claimed only for the cloud hosts. One certification and a disclosure route, set between mailersend's 8 (disclosure route, discretionary bounty, no certification) and daytona's 15 (disclosure route, SOC 2 and ISO 27001, discretionary reward not counted) (12).