didlogic Voice API vs Sinch Voice API + MCP

didlogic Voice API 38

Release notes dated by month, the newest September 2026 (click-to-call API and WebSocket calls), about 37 to 67 days before this check (20). Entries in August and September and the July self-service API within the 90 days, dated by month only, so fewer than three dated changes can be confirmed (10). Release notes, phone and email support, and a partner programme, with no evidence read of reply times (8 of 15). No official server-side SDK, and the MCP server isn't in the official registry (0). No package to assess (0). 20+10+8+0+0 = 38.

Sinch Voice API + MCP 79

Java SDK 2.4.0 (28 October 2026) adds Voice v2 helpers, Node 1.7.0 (15 October) and Python 2.3.0 (14 October) changed Voice v2, and the MCP server's 0.0.1-beta.7 (30 October) moved its voice tools to Voice API v2 (30). In the 90 days, Node 1.6.0 (23 September) and Python 2.2.0 (21 September) added Voice v2, Java 2.3.0 (15 October) did the same, and Java 2.2.0, .NET 1.5.1 (2 September) and the 28 October releases followed (20). v1 voice release notes stop in October 2022 and v2 has an undated what's-new page, while the SDK changelogs are dated (5 of 15). Official SDKs in four languages, with Voice v2 in Node, Python and Java (15). CI on the SDK repositories, with CodeQL and dependency review on Java and an audit job on Node (9 of 10). 30 + 20 + 5 + 15 + 9 = 79.

didlogic Voice API 26

Graded on the hosted API and MCP server with the hosted lines. The footer's network status page carries no components or incidents, and no other status page was found (0). No readable incident history (5). Rate limits are given only for recording lookups (one a second, one lookup a minute) (5 of 15). Those endpoints document 429 with Retry-After and X-RateLimit headers, with no backoff guidance or idempotency elsewhere, including number purchases and click-to-call (6 of 15). The site claims 99.999 per cent voice uptime, but no SLA was found in the Terms (0). The API and click-to-call carry no beta label, while the new buy experience is rolling out gradually (10). 0+5+5+6+0+10 = 26.

Sinch Voice API + MCP 60

Statuspage at status.sinch.com with Voice components and history (20). Read from its own history and incident pages on 2 November (the 1 October count from IsDown, a third-party copy of the page, is struck). From 4 August to 2 November the calling incidents each name one region, one channel or a subset of calls. Calling in AP-Southeast-1 degraded from 04:50 to 07:23 UTC on 22 September (labelled critical, one region), PSTN outbound calls saw failed attempts from 05:51 to 09:05 UTC on 2 October (one channel, no region named, posted with no impact level), and Elastic SIP Trunking in US East had non-completed calls for 8 minutes on 9 September. On 26 October a planned change took the customer dashboard down and blocked traffic for a subset of accounts. Partial incidents read as minor, so minor only (20). No account rate limits published for voice. Batch calls take a maxCps setting (1 to 1,000 calls a second), which is a requested pace, not a published limit (0 of 15). The v2 OpenAPI file, readable on 2 November, documents a 429 answer with a Retry-After header on 15 of 17 operations, and an Idempotency-Key header (16 to 128 characters) whose repeats within 10 minutes return the cached response (15). No SLA found (0). Voice API v1 is generally available, but the v2 overview, llms.txt ("recommended for new builds/preview") and the pricing page (Voice Relay and Streams in Public Preview) label v2, the listed surface, as preview, and tell projects that must be GA to use v1. Mixed surfaces take part of the line, as gemini-api's 5 (5 of 10). 20 + 20 + 0 + 15 + 0 + 5 = 60.

didlogic Voice API 57

Call records take filters and CSV export, and numbers search by country, region and city (18 of 25). Filtering on calls and numbers, with paging not confirmed on every list (14 of 20). One error envelope with field messages and 404 for unknown ids (14 of 20). No idempotency key on purchases or click-to-call. MCP annotations weren't readable without a sign-in (3 of 20). Few required fields, no official SDK beyond the browser Voice SDK (8 of 15). 18+14+14+3+8 = 57.

Sinch Voice API + MCP 81

v2 lists take page_size, with no field selection (15 of 25). The v2 call list pages by link and filters by from, to, call type, time range, result and reason (18 of 20). v1 error reference with codes, and v2 errors carry a type and instance per the SDKs (15 of 20). v2 call, batch and service writes take an Idempotency-Key that returns the cached response for repeats within 10 minutes, and the webhook guide says to deduplicate on ce-id and ce-source (18 of 20). Official SDKs in Node, Python, Java and .NET, but a v2 dial is a nested commands document rather than a few fields (15). 15 + 18 + 15 + 18 + 15 = 81.

didlogic Voice API 58

Closed service with long, clear terms naming DID Logic PTE. LTD. in Singapore (15 of 30). The privacy policy commits to data minimisation and says call content isn't monitored except for requested recording, but gives no retention periods (12 of 30). No deprecation policy, though the docs explain backward-compatible identifier changes (5 of 20). Twelve points of presence are claimed, with no sub-processor list or data locations found (5 of 20). 15+12+5+5 = 37.

Sinch Voice API + MCP 73

Closed service with general terms. The contracting Sinch entity is named only in the order form (15). Privacy notice, a DPA addendum, a sub-processor list and deletion on request. Sinch says it updates the sub-processor page at least 30 days before engaging a new one and emails subscribers. Recordings go to your own S3, Google Cloud Storage or Azure bucket. No retention periods found (22 of 30). No deprecation policy or dated notice for v1 found (0). The sub-processor list, re-read on 2 November, gives hosting locations by service, Voice API and In-App Calling in Australia, Brazil, Germany, Singapore and the USA, Microsoft Azure (USA, EU) for Voice API text to speech, MongoDB for Voice API v2 since 31 July 2026, and TransUnion for Elastic SIP STIR/SHAKEN, as the Sinch messaging listing's list is read (20). 15 + 22 + 0 + 20 = 57.

didlogic Voice API 46

Revocable bearer keys created in the portal, each with full account access by the vendor's own warning. MCP OAuth mints a separate key per sign-in (18 of 30). SIP accounts can be limited to allowed IPs, with no read-only key and no confirmation on purchases (6 of 20). Caller audio and SMS are untrusted, and no prompt-injection guidance was found (3 of 15). Call detail records, transaction history and risk-check logs through the API, with no audit log of API calls (7 of 15). ISO/IEC 27001:2022 and ISO 9001 certificates from TÜV AUSTRIA Hellas with registration numbers. No security.txt or bug bounty found (12 of 20). 18+6+3+7+12 = 46.

Sinch Voice API + MCP 55

Voice v2 takes a project access key over Basic auth or as an OAuth 2.0 token. v1 uses an application key and secret with signed requests recommended. We found no per-key scopes (25 of 30). No read-only mode or confirmation step. The official MCP server's tool allow-list (--tags, or MCP_TAGS since 0.0.1-beta.7, 30 October) can leave out whole groups, and its released version runs over stdio only, as the Sinch messaging listing reads it (5 of 20). Calls carry untrusted caller speech. Callbacks are signed in v1 and v2, and we found no prompt-injection guidance (5 of 15). Call lookup and call lists by API, no audit log found (10 of 15). The trust centre lists ISO 27001:2022 and SOC 2 Type 2 reports, PCI and HIPAA, and Sinch's security contact for reports. No security.txt (404 on 2 November), no bug bounty and no advisories for @sinch/sdk-core, @sinch/mcp or sinch in OSV (10 of 20, as the Sinch messaging listing). 25 + 5 + 5 + 10 + 10 = 55.