Databar vs RocketReach API

Databar 73

Closed service. Python SDK 2.9.0 on 30 October 2026, 7 days before this check (30). SDK 2.7.0 and 2.8.0 on 6 October and changelog entries on 23, 24, 27, 28, 29 and 30 September and 1 October (20). A public changelog, roadmap and feedback portal, an email address, and a Slack channel on Scale (10 of 15). An official Python SDK and CLI, no other languages (10 of 15). Package health not checked (3 of 10). 30+20+10+10+3 = 73.

RocketReach API 11

No changelog or release notes were found (9 October; rocketreach.co hosts not re-read on 4 November 2026 because the terms bar automated data collection). The 9 October note set recency at 20 on docs page update dates (8 October and 11 September 2026). Page dates that record no API change don't set recency, and a closed service's recency is its last dated API change (wrike, buttercms, everee read it so). No dated API change is on record. The Python SDK, the vendor's other dated source, read by clone on 4 November 2026, has its last code change on 26 March 2025 (a bug fix to an exception call), version 2.1.8 with no tags, and only repository housekeeping since (21 August and 5 October 2026). Over 180 days (0, 20 before). No dated changelog entries or releases in the 90 days from 6 August (0 of 20). Support by email and a status page that posts updates, per 9 October (5 of 15). The SDK isn't current, and the official MCP registry wasn't searched, since this run doesn't use its JSON API. The partial is kept pending the founder's rule on in-between values (3 of 15). The SDK repository has a Renovate configuration and states Python 3.4 or later (3 of 10). 0 + 0 + 5 + 3 + 3 = 11.

Databar 28

Hosted lines. No status page linked from the site or docs (0). No incident history to read (5). The 20 August changelog says rate limits return 429, but no numbers were found in the docs read (5 of 15). The SDK backs off on 429 per the 28 September entry, tasks can be cancelled with a refund, and no Retry-After or idempotency key is documented (8 of 15). No SLA found (0). The MCP server left beta on 15 July 2026 and the API is generally available (10). 0+5+5+8+0+10 = 28.

RocketReach API 64

RocketReach's terms bar automated data collection on its website and services, so rocketreach.co and its subdomains were not re-read on 4 November 2026. Per the 9 October check. Hosted lines. Status page on incident.io at status.rocketreach.co with five components, among them API and MCP (20). In the last 90 days it lists eight entries. On 20 August 2026 degraded performance ran from 12:00 AM to 10:00 AM across the site, extension, API and MCP, with a second hour that afternoon, delayed webhooks and a 29-minute outage in the evening. On 27 August elevated errors lasted 61 minutes. A 71-minute maintenance window on 27 September, in which the notice said API and MCP calls would be unresponsive or throttled, was announced on 15 September. Read as one major day and a second incident of about an hour. Both remain inside the 90 days from 6 August, and the status page after 9 October couldn't be read, so the recorded award is kept, a partial pending the founder's rule on in-between values (7 of 30). Rate limits published per plan and endpoint, plus a global 10 requests a second (15). 429 carries Retry-After and the docs show a retry example. No idempotency keys, though repeat lookups are free (12 of 15). No SLA found in the terms, the subscription agreement or the docs (0). The API and MCP server are not marked beta (10). Total 64.

Databar 35

No x402, MPP or L402 (0). Plan prices and credits are public, and each connector's credit cost is shown before a run and in the enrichment's pricing field; credits aren't sold per call outside a plan (15 of 20). A 14-day premium trial with no card, per the pricing FAQ (20). A person signs up in a browser, and API access needs a paid plan (0). 0+15+20+0 = 35.

RocketReach API 10

Per the 9 October check, not re-read on 4 November 2026, because RocketReach's terms bar automated data collection on its website and services. No x402, MPP or L402 in the docs or terms (0). The docs publish credit costs per action for Universal Credits, such as 2 credits for a professional email and 6 for a phone. The pricing page is drawn by script and showed our reader only its title, so no price in dollars was read, and the docs tell users without a paid plan to email for an API plan (5 of 20). The site's description says to try for free, and the rate-limit page implies an unpaid account can call the API until throttled. What a free account gets through the API was not established (5 of 20). A person signs up in a browser, the terms say account holders warrant they are human, and MCP authorisation needs a browser login (0). Total 10. The pricing lines are scored on what could be read.

Databar 47

A workspace API key in a header, never in the URL, and OAuth on the MCP with a Connected apps page to revoke access. No scopes found (20 of 30). No read-only key; MCP balance checks and confirmation above 50 credits, a 30-day trash for workbooks and tables, but row, column and table deletes through the tools (12 of 20). Enrichment results include web-scraped and AI researcher text, with no prompt-injection guidance (3 of 15). Credit usage charts, transaction logs and per-request data logs (12 of 15). No security.txt, disclosure policy, bug bounty or certification found (0 of 20). 20+12+3+12+0 = 47.

RocketReach API 30

RocketReach's terms bar automated data collection on its website and services, so rocketreach.co and its subdomains were not re-read on 4 November 2026. Per the 9 October check. REST takes one key per account in the Api-Key header. Only one key is active at a time and generating a new one invalidates the old. The MCP server uses OAuth 2.1 with PKCE, open dynamic client registration, one-hour access tokens, 30-day refresh tokens that rotate, and a revocation endpoint. The access token carries the API key inside an encrypted envelope, and the account tool returns api_key in its response, so the key reaches the model's context (18). The docs say older clients may still send the key as an api_key query parameter, marked deprecated. This run settled that a query-string credential takes the checklist's fixed 10 off, where the 9 October note took 5 (8 of 30, 13 before). One scope, rocketreach:read, covers every tool, including lookups that spend credits and add contacts to My Contacts. No read-only mode, per-key limit or confirmation step was found. The account object has an api_key_domain field (4 of 20). Results are third-party profile data. No prompt-injection guidance was found (3 of 15). Usage and rate-limit counts from the account endpoint, a recent-errors panel in account settings, RR-Request-ID on webhooks, and MCP lookups tagged with the client name. No per-call log was found (8 of 15). security.txt is valid, with a contact address and an expiry of 8 June 2029, a reporting route with no stated acknowledgement time, which this run settled at 7. The DPA lists security measures in an annex and names a Trust Centre that we did not find linked. No certification or bug bounty was found. No advisory for the rocketreach PyPI package on osv.dev on 4 November 2026 (7 of 20, 6 before). 8 + 4 + 3 + 8 + 7 = 30.

Databar 84

Each API reference page embeds its OpenAPI 3.1 operation (spec version 0.1.2), with no downloadable file found (20 of 25). llms.txt with 79 API entries and Markdown twins (10). Descriptions say when to use each endpoint, such as headless runs against table runs, and what a delete leaves behind (16 of 20). Typed request bodies with required fields (12 of 15). An error envelope with stable codes and examples for 400, 406 and 422 (14 of 15). v1 paths and a dated changelog, though the API's own versioning isn't described (12 of 15). 20+10+16+12+14+12 = 84.

RocketReach API 72

Per the 9 October check, not re-read on 4 November 2026, because RocketReach's terms bar automated data collection on its website and services. Each reference page's Markdown twin carries an OpenAPI 3.1 definition for its operation, 17 operations in all. No single downloadable file was found (22 of 25). llms.txt and Markdown twins on the docs host (10). The MCP tools page states what each tool returns, what it costs and which tool to call next. REST operation descriptions are thin, and Company Lookup carries the Company Search subtitle (14 of 20). Query parameters are typed, with enums on lookup_type and order_by. No lookup parameter is marked required although one identifier is needed, and metadata is a free object (10 of 15). Error table, a worked 402 body, an MCP error catalogue and response examples. Every operation lists the same generic error set (11 of 15). The version sits in the path (/api/v2), with the Universal Credits endpoints alongside. No changelog was found (5 of 15). Total 72.

Databar 66

69 MCP tools with no toolsets found (5), and REST row reads sized by per_page with has_next_page (10 of 25 for the two together). Pagination, row filters and a search parameter on enrichments (16 of 20). Errors name the fix, such as unknown columns with the available ones, 406 for credits, 409 for a stale internal_version and 410 for expired results (18 of 20). Upserts by key, version tokens on flow edits, cancel with refund, and MCP confirmation above 50 credits; MCP tool annotations not confirmed (13 of 20). Python SDK and a CLI, one language (9 of 15). 10+16+18+13+9 = 66.

RocketReach API 72

Per the 9 October check, not re-read on 4 November 2026, because RocketReach's terms bar automated data collection on its website and services. The MCP server documents nine tools. We read the docs page and did not connect, so the size of the live definitions is unread (22 of 25). start, page_size up to 100, order_by, an exclude object and about 50 search facets, with a ceiling of 10,000 results a query (18 of 20). MCP errors carry error_code in _meta with retry_after_seconds, credit_type or field and reason. On REST only the 402 from email verification is structured, and running out of lookup credits returns a 403 with a text detail (15 of 20). Repeat lookups and polling are free and terminal errors are named. No idempotency keys, and MCP tool annotations were not read (9 of 20). Few parameters are needed for a call. One official SDK, Python 2.1.8, whose last code change is dated 26 March 2025 (8 of 15). Total 72.