{ "data": { "a": { "slug": "dynapictures", "name": "DynaPictures", "vendor": "DynaPictures GmbH", "vendorUrl": "https://dynapictures.com", "kind": "http-api", "category": "design-assets", "summary": "DynaPictures, from DynaPictures GmbH in Freiburg, fills templates made in its no-code editor with data to produce images, multi-page PDFs, countdown timer GIFs and AI images, through a REST API, image URLs, forms and a remote MCP server.", "url": "https://www.anchorterminal.com/tools/dynapictures", "markdownUrl": "https://www.anchorterminal.com/tools/dynapictures.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/dynapictures.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/dynapictures.json", "dns": "dynapictures.grade.anchorterminal.com", "license": "Closed service under the DynaPictures terms of use (revision 2/2026)", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.dynapictures.com", "packages": [], "auth": "api-key", "authNotes": "One API key per user, copied from the account page and sent as `Authorization: Bearer`, for both the REST API and the MCP server at mcp.dynapictures.com/mcp. The key carries the user's full access, with no workspace or action limits, and a new key is requested by email. No OAuth.", "pricing": "freemium", "pricingNotes": "Free plan, and a 14-day trial with 30 API credits, neither needing a card. Lite from 250 images a month and Pro from 2,000, priced through a FastSpring checkout whose amounts are drawn by script. One credit per image or PDF page. AI credit packs from $20 for 1,000 credits (about 250 images), which never expire.", "priceSummary": "$0.02 / credit", "where": "hosted", "x402": { "level": "no", "evidence": "Subscriptions and credit packs through FastSpring. No x402, MPP or L402 in the OpenAPI, llms.txt, auth.md or the agent skill (checked 2026-11-06). A spent quota returns 403 and missing AI credits 402, with no payment requirements.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://dynapictures.com/docs/", "llmsTxt": "https://dynapictures.com/llms.txt", "openapi": "https://dynapictures.com/openapi.json", "capabilities": [ "design.templates", "design.render", "pdf.generate", "image.generate" ], "tags": [ "hosted", "openapi", "llms-txt", "mcp", "remote-mcp", "api-key", "freemium", "free-tier", "no-card", "sla", "eu" ], "graded": true, "anchor": { "graded": true, "score": 43.2, "grade": "E", "agentReady": false, "rank": 1257, "ranked": true, "rankOf": 1510, "categoryRank": 13, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 45, "maintenance": 4, "payments": 30, "reliability": 42, "schema": 82, "security": 26, "transparency": 63 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "An OpenAPI 3.1 file, an agent skill and a six-month removal notice with Sunset headers make DynaPictures' template rendering easy to plan around, with a free plan and no-card trial. The single API key opens the whole account, requests aren't idempotent, and no changelog, status page or dated release was found.", "bestFor": "Personalised images and PDFs per record, image URLs in emails and pages, and email countdown timers, for marketing teams in the EU.", "strengths": [ "OpenAPI 3.1 with 20 paths, llms.txt, auth.md and an agent skill written for agents", "Removals announced six months ahead with Deprecation and Sunset headers", "Free plan and a 14-day trial with 30 API credits, no card", "Identical image URLs return a cached image without using another credit", "Terms guarantee 94 per cent annual availability; AI sub-processors named in the privacy policy" ], "weaknesses": [ "One API key per user with full account access and no scopes; a new key needs an email to support", "Generation requests aren't idempotent, so a retry can spend a second credit", "No changelog, status page or dated release found", "The docs' Errors section is unedited template text", "Not in the official MCP registry, and plan prices are drawn by script" ], "agentNotes": [ "Use `GET /templates` to find a template UID and its layer names before generating", "Check whether an image exists before retrying a timed-out `POST /designs/{UID}`; retries can be charged", "Treat 403 as a spent quota or expired trial and stop; wait for `Retry-After` only on 503", "Poll `GET /ai/generate/{jobUid}` about every 2 seconds and download the result, since the URL may expire", "Keep the API key out of image URLs; use signed or public links for embedding" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 43.2 } ], "editorialScores": { "ergonomics": 45, "maintenance": 4, "payments": 30, "reliability": 42, "schema": 82, "security": 26, "transparency": 63 }, "provenanceScore": 63, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://api.dynapictures.com/workspaces -H \"Authorization: Bearer YOUR_API_KEY\"", "config": { "mcpServers": { "dynapictures": { "headers": { "Authorization": "Bearer YOUR_API_KEY" }, "url": "https://mcp.dynapictures.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/design.templates", "tool": "https://letme.dev/dynapictures" }, "area": "design-diagrams", "unitPrices": [ { "item": "AI credit pack", "unit": "credit", "usd": 0.02, "note": "$20 for 1,000 AI credits, about 250 AI images; packs never expire" } ], "provenance": { "legalEntity": "DynaPictures GmbH", "domain": "dynapictures.com", "domainRegistered": "2021-03-14", "endpointOnVendorDomain": true, "terms": "https://dynapictures.com/p/terms", "privacy": "https://dynapictures.com/p/privacy-policy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The terms (revision 2/2026) and privacy policy name DynaPictures GmbH, Zasiusstr. 6a, 79102 Freiburg im Breisgau, Germany. The terms apply to business customers only and guarantee 94 per cent annual availability.", "No clause on automated access to the website was found in the terms.", "dynapictures.com/robots.txt disallows only the /tools/r/ paths. api.dynapictures.com/robots.txt answers 401.", "RDAP gives dynapictures.com a registration date of 14 March 2021.", "/.well-known/security.txt returns 404. No status page or changelog found." ], "score": 63 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/dynapictures.json", "live": { "slug": "dynapictures", "probe": { "target": "https://api.dynapictures.com", "method": "get", "lastAt": "2026-11-07T22:55:55.405971291Z", "lastOk": true, "lastStatus": 200, "lastMs": 225, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 228, "p95ms24h": 343, "samples24h": 244, "samples30d": 246, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 13 }, { "date": "2026-11-07", "probes": 233, "ok": 233 } ] }, "securityTxt": { "url": "https://dynapictures.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:15.164343855Z" }, "llmsTxt": { "url": "https://dynapictures.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:20.007030228Z" }, "pages": [ { "url": "https://dynapictures.com/p/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:09:06.124953966Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "ef81a0377c7a" }, { "url": "https://dynapictures.com/p/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:09:08.231434531Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "6e15c5e4788d" } ], "mcpTools": { "url": "https://mcp.dynapictures.com/mcp", "checkedAt": "2026-11-07T01:43:58.466398541Z", "status": "error", "note": "Post \"https://mcp.dynapictures.com/mcp\": dial tcp: lookup mcp.dynapictures.com on 192.168.1.1:53: no such host", "changedAt": "2026-11-07T01:43:58.466398541Z" }, "updatedAt": "2026-11-07T22:55:55.405971291Z" } }, "answer": "Shotstack scores 67.3 (B) on agent readiness against DynaPictures's 43.2 (E), and leads in every scored category.", "b": { "slug": "shotstack", "name": "Shotstack", "vendor": "ShotStack Pty Ltd", "vendorUrl": "https://shotstack.io", "kind": "http-api", "category": "design-assets", "summary": "Shotstack is a cloud video editor driven by JSON. It renders video, images and audio from edits and templates with merge fields. Agents reach it through the Edit API, a hosted MCP server or a CLI with an agent skill.", "url": "https://www.anchorterminal.com/tools/shotstack", "markdownUrl": "https://www.anchorterminal.com/tools/shotstack.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/shotstack.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/shotstack.json", "dns": "shotstack.grade.anchorterminal.com", "repo": "https://github.com/shotstack/shotstack-cli", "license": "Proprietary service under Shotstack's Terms and Conditions. The schemas package and SDKs are MIT and the Studio SDK is under PolyForm Shield 1.0.0. The CLI was Apache-2.0 up to its last public source (0.15.2, 22 October 2026); since 25 October 2026 its source isn't published and the shotstack-cli repository holds only the agent skill", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.shotstack.io/edit/v1", "packages": [ { "registry": "npm", "name": "@shotstack/cli" }, { "registry": "npm", "name": "@shotstack/schemas" }, { "registry": "npm", "name": "shotstack-sdk" }, { "registry": "pypi", "name": "shotstack-sdk" } ], "auth": "mixed", "authNotes": "REST calls and the CLI send an API key in the `x-api-key` header. A browser signup at app.shotstack.io gives one sandbox key and one production key, self-serve, with no scopes found in the docs. The same keys reach the Edit, Serve and Ingest APIs. The MCP server uses OAuth (authorisation code with PKCE S256, dynamic client registration, one scope, `mcp:tools`) or the API key in an `x-api-key` header for headless use.", "pricing": "usage", "pricingNotes": "10 free credits on signup, valid 30 days, with no card. Pay as you go is $10 for 50 credits, 20 cents a minute of rendered video. Monthly plans run from $39 for 250 minutes to $499 for 10,000. The `stage` sandbox renders free with a watermark, so an agent can start without a contract. AI generation is charged per model in credits (checked 2026-10-08).", "priceSummary": "$0.20 / credit", "where": "hosted", "x402": { "level": "no", "evidence": "Prepaid credits and monthly plans. No x402, MPP or L402 in the docs, llms.txt, OpenAPI definition or pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": 15, "popularity": { "githubStars": 0, "npmWeekly": 1211, "pypiWeekly": 326, "asOf": "2026-10-08" }, "docsUrl": "https://shotstack.io/docs/guide/", "llmsTxt": "https://shotstack.io/llms.txt", "openapi": "https://shotstack.io/docs/api/api.edit.json", "capabilities": [ "design.templates", "design.render", "video.edit", "video.generate", "image.generate", "speech.tts", "audio.music" ], "tags": [ "hosted", "closed-source", "mcp", "oauth", "openapi", "llms-txt", "cli", "agent-skill", "async-jobs", "webhooks", "video", "images", "sandbox", "status-page", "sla" ], "lastRelease": "2026-10-27", "graded": true, "anchor": { "graded": true, "score": 67.3, "grade": "B", "agentReady": false, "rank": 334, "ranked": true, "rankOf": 1510, "categoryRank": 2, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 63, "maintenance": 73, "payments": 45, "reliability": 95, "schema": 88, "security": 48, "transparency": 73 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-02" }, "negative": -3, "negativeNotes": [ "4 October 2026. Release 1.22.0 of the published API definition removed the `pricing` object from the `GET /models` response and replaced it with `POST /generate/quote`, in a minor release with no breaking-change mark and no notice found. We did not test whether the live response changed that day (https://github.com/shotstack/oas-api-definition/blob/main/CHANGELOG.md)" ], "verdict": "A public OpenAPI definition, Markdown docs, a hosted MCP server with OAuth and a free watermarked sandbox let an agent draft, check and render video with little setup. API keys have no scopes, webhooks are unsigned, no security contact or certification of Shotstack's own was found, and the npm Node SDK dates from July 2024.", "bestFor": "Teams that render video, images or audio from JSON or templates at volume and want an agent to draft edits that a person reviews in Studio.", "strengths": [ "OpenAPI 3.0.1 definition at `https://shotstack.io/docs/api/api.edit.json` with 122 schemas, plus llms.txt, llms-full.txt and a Markdown twin of every guide page", "Hosted MCP server at `https://mcp.shotstack.io/` with 15 tools, OAuth authorisation code with PKCE S256 and dynamic client registration, or an `x-api-key` header", "`shotstack validate` checks an edit offline and `shotstack studio` opens a preview link, both with no API key and no credits", "The `stage` environment renders free with a watermark, and `POST /generate/quote` returns the credit cost of an AI generation without charging", "Rate limits are published per API (Edit 300 requests per 60 seconds in production), no incident in the 90 days to 2 November 2026, and a 99.9 per cent SLA" ], "weaknesses": [ "API keys have no scopes. One production key and one sandbox key reach the Edit, Serve and Ingest APIs, and key rotation was not found in the docs", "Webhook callbacks are not signed, per the webhooks guide, which tells receivers to confirm a render by calling the API", "No security.txt, disclosure policy or certification of Shotstack's own was found. The DPA relies on AWS's SOC 2 and ISO 27001 reports", "The published API definition dropped the `pricing` object from `GET /models` in release 1.22.0 on 4 October 2026, a minor release with no breaking-change mark", "The npm `shotstack-sdk` package (0.2.9) was last published in July 2024, and since 25 October 2026 the CLI's source is no longer public" ], "agentNotes": [ "Fetch `https://shotstack.io/docs/api/api.edit.json` and the conventions guide before writing an edit. Track order is reversed, so the first track renders on top", "Render in `stage` first. It is free and watermarked, but AI generation there is charged from the production credit balance", "Call `POST /generate/quote` before `POST /generate`, and send an `Idempotency-Key` header on generation. `POST /render` has no idempotency key, so do not resubmit blindly", "Do not store the `url` from the render status response. It expires after 24 hours. Use the CDN address built from `owner` and the render id", "On a 429, wait for the 60-second window to reset and retry with backoff. Limits are per API key, 300 a minute on the Edit API in production" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.3 } ], "editorialScores": { "ergonomics": 63, "maintenance": 73, "payments": 45, "reliability": 95, "schema": 88, "security": 48, "transparency": 61 }, "provenanceScore": 85, "checked": { "categories": { "ergonomics": "2026-11-02", "maintenance": "2026-11-02", "payments": "2026-11-02", "reliability": "2026-11-02", "schema": "2026-11-02", "security": "2026-11-02", "transparency": "2026-11-02" }, "last": "2026-11-02", "lastMoved": "2026-11-02", "oldest": "2026-11-02", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install -g @shotstack/cli", "http": "curl -X POST https://api.shotstack.io/edit/stage/render -H \"Content-Type: application/json\" -H \"x-api-key: $SHOTSTACK_API_KEY\" -d @edit.json", "claudeCode": "claude mcp add --transport http shotstack https://mcp.shotstack.io", "config": { "mcpServers": { "shotstack": { "url": "https://mcp.shotstack.io/" } } } }, "letme": { "capability": "https://letme.dev/design.templates", "tool": "https://letme.dev/shotstack" }, "area": "design-diagrams", "unitPrices": [ { "item": "Pay as you go credit", "unit": "credit", "usd": 0.2, "note": "$10 for 50 credits, one credit renders one minute of video, valid 12 months" }, { "item": "Starter", "unit": "month", "usd": 39, "note": "250 minutes a month" }, { "item": "Pro", "unit": "month", "usd": 99, "note": "750 minutes a month" }, { "item": "Scale", "unit": "month", "usd": 199, "note": "2,000 minutes a month" }, { "item": "Volume", "unit": "month", "usd": 499, "note": "10,000 minutes a month" } ], "provenance": { "legalEntity": "ShotStack Pty Ltd", "domain": "shotstack.io", "domainRegistered": "2017-06-30", "endpointOnVendorDomain": true, "terms": "https://shotstack.io/terms/", "privacy": "https://shotstack.io/privacy/", "statusPage": "https://status.shotstack.io", "changelog": "https://github.com/shotstack/oas-api-definition/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-02", "notes": [ "The terms name ShotStack Pty Ltd, ACN 632 863 024, and the privacy policy gives an address in Maroubra, New South Wales.", "The terms were last updated on 6 October 2026. They cover the APIs, Studio and AI generation, and include plans and an SLA as schedules.", "The privacy policy was last updated on 21 December 2021. A DPA and a sub-processor list, both updated 6 October 2026, are at shotstack.io/dpa/ and shotstack.io/sub-processors/.", "The API answers at api.shotstack.io, the MCP server at mcp.shotstack.io and hosted files at cdn.shotstack.io.", "shotstack.io/.well-known/security.txt returns 404 (re-read 2 November 2026).", "The status page runs on Kener and links an RSS feed of incidents and maintenance.", "The changelog is the CHANGELOG.md of the API definition repository. No changelog page was found on shotstack.io.", "RDAP for shotstack.io gives a registration date of 2017-06-30 and Gandi SAS as registrar." ], "score": 85 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/shotstack.json", "live": { "slug": "shotstack", "probe": { "target": "https://api.shotstack.io/edit/v1", "method": "get", "lastAt": "2026-11-07T22:56:21.171511487Z", "lastOk": true, "lastStatus": 200, "lastMs": 844, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 873, "p95ms24h": 993, "samples24h": 244, "samples30d": 7335, "days": [ { "date": "2026-10-09", "probes": 169, "ok": 169 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 250, "ok": 250 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 233, "ok": 233 } ] }, "vendorStatus": { "page": "https://status.shotstack.io", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-07T04:48:45.114558047Z" }, "versions": [ { "registry": "npm", "name": "@shotstack/cli", "version": "0.17.0", "seenAt": "2026-11-07T00:05:41.083663572Z" }, { "registry": "npm", "name": "@shotstack/schemas", "version": "1.23.3", "seenAt": "2026-11-07T00:05:41.625150494Z" }, { "registry": "npm", "name": "shotstack-sdk", "version": "0.2.9", "seenAt": "2026-11-07T00:05:43.32367796Z" }, { "registry": "pypi", "name": "shotstack-sdk", "version": "0.2.8", "released": "2024-07-19", "seenAt": "2026-11-07T00:05:45.311644882Z" } ], "githubStars": 0, "npmWeekly": 370, "pypiWeekly": 245, "securityTxt": { "url": "https://shotstack.io/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:10.982687762Z" }, "llmsTxt": { "url": "https://shotstack.io/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:33:55.150019501Z" }, "domain": { "domain": "shotstack.io", "checkedAt": "2026-11-01T14:22:55.371274673Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/shotstack/oas-api-definition/main/CHANGELOG.md", "kind": "changelog", "status": 304, "checkedAt": "2026-11-07T14:23:31.082600398Z", "changedAt": "2026-10-27T03:55:55.627870867Z", "fingerprint": "0b2656bd7b4a" }, { "url": "https://shotstack.io/privacy/", "kind": "privacy", "status": 304, "checkedAt": "2026-11-07T14:19:46.779374273Z", "changedAt": "2026-11-04T08:32:42.350513445Z", "fingerprint": "e09c706eb4f5" }, { "url": "https://shotstack.io/terms/", "kind": "terms", "status": 304, "checkedAt": "2026-11-07T14:19:49.363330236Z", "changedAt": "2026-11-04T08:32:46.005681016Z", "fingerprint": "5e9074a6f69a" } ], "mcpTools": { "url": "https://mcp.shotstack.io", "checkedAt": "2026-11-07T01:48:01.653435881Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:48:01.653435881Z" }, "github": { "repo": "shotstack/shotstack-cli", "checkedAt": "2026-11-02T09:25:34.758841111Z", "stars": 0, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-30T12:00:41Z", "openIssues": 0, "openPRs": 0, "issuesOpened90d": 0, "issuesClosed90d": 0, "prsMerged90d": 51 }, "updatedAt": "2026-11-07T22:56:21.171511487Z" } }, "edges": [ { "by": 69, "category": "maintenance", "leads": "shotstack", "name": "Maintenance \u0026 community", "reasons": { "a": "No changelog, release notes or dated API change was found, and the MCP server card gives version 1.0.0 with no date (0). No dated changes since 8 August (0). Support by email and contact form, not tested (4 of 15). Not in the official MCP registry and no API SDKs (0). No public package or repository (0). 0 + 0 + 4 + 0 + 0 = 4.", "b": "API definition 1.23.3 (@shotstack/schemas) tagged on 27 October 2026, six days before the check, after 1.23.0 on 15 October added a source file on generation assets (30). 21 definition tags and 13 CLI tags (0.8.x to 0.15.2, the last on 22 October) since 4 August 2026, and the skill repository synced from CLI 0.16.0 to 0.17.0 between 25 and 30 October (20). Dated changelog for the definition in its repository, in-app support on every plan and a GitHub issue template for the CLI. Issue threads were not read (8). `@shotstack/cli` and `@shotstack/schemas` are current, while npm `shotstack-sdk` 0.2.9 dates from July 2024 per the 8 October check; the PyPI release date came from a path pypi.org's robots.txt disallows and is struck, and pypi.org didn't resolve on 2 November. The MCP registry entry was not checked (7). The definition repository runs build, smoke and example tests on pull requests. Since 25 October the CLI repository holds only the agent skill and says the CLI's source isn't published there, so its release tests can no longer be read (8). 30 + 20 + 8 + 7 + 8 = 73." }, "scores": { "a": 4, "b": 73 } }, { "by": 53, "category": "reliability", "leads": "shotstack", "name": "Reliability", "reasons": { "a": "Hosted lines. No status page found in the docs, llms.txt or footer (0). No readable incident history (5). The monthly image quota is reported in RateLimit headers on generation, but no per-second or per-minute limit is published (5 of 15). The agent skill gives a status table with what to do for each, GET /links sends Retry-After on 503, and the docs warn that generation isn't idempotent and to check before retrying a 504 (12 of 15). The terms guarantee 94 per cent annual availability, a low figure but a published SLA (10). Nothing is labelled beta (10). 0 + 5 + 5 + 12 + 10 + 10 = 42.", "b": "Hosted lines. Public status page at status.shotstack.io with monitors, the Edit API in production among them (20). Its feed and incident pages hold no incident in the 90 days from 4 August 2026. The newest incident, number 8 (range parameters in render payloads causing failures, 21 July 2026), left the window on 20 October, /incidents/9 answers 404, and the window holds only two completed maintenance windows (11 August, rendering stayed available; 4 and 5 September, billing, with the API fully available). A readable page that posts incidents, none in the window, is a clean record (30, was 20). Rate limits per API key in a fixed 60-second window, 300 for Edit, 600 for Serve and 300 for Ingest in production (15). A 429 returns `rate_limit_error` with advice to wait for the window and retry with exponential backoff, and `POST /generate` takes an `Idempotency-Key`, but `POST /render` has none and no `Retry-After` is documented for rate limits (10). Schedule 2 of the terms is an SLA of 99.9 per cent with a 10 per cent credit, free plans excluded (10). The Edit API is `v1` and neither the MCP server nor the CLI carries a beta label (10). 20 + 30 + 15 + 10 + 10 + 10 = 95." }, "scores": { "a": 42, "b": 95 } }, { "by": 22, "category": "security", "leads": "shotstack", "name": "Security \u0026 auth", "reasons": { "a": "One API key per user with the user's full access, not limited to workspaces or actions; a new key is requested by email to support, with no rotation in the account (10 of 30). No read-only mode, and the MCP server can author and change designs (3 of 20). Tools return the account's own templates and renders; image layers accept outside URLs (10 of 15). A list of generated images, with no audit log documented (3 of 15). No security.txt, disclosure policy, bug bounty or certification found (0). 10 + 3 + 10 + 3 + 0 = 26.", "b": "The MCP server uses OAuth authorisation code with PKCE S256 and dynamic client registration, with one scope, `mcp:tools`. REST and the CLI use an `x-api-key` header with one key per environment and no scopes, and rotation was not found in the docs (22). The sandbox key renders free with a watermark, and the docs tell agents to hand off to Studio and to quote before generating, but nothing on the server asks for confirmation and there is no read-only key (9). Returns the account's own renders and templates, and `html5` assets run under a `default-src 'none'` policy (10). Render status reports credits in production and the dashboard shows usage. No audit log was found (4). No security.txt, disclosure policy, bounty or certification of Shotstack's own. The DPA lists technical measures and relies on AWS's audit reports (3)." }, "scores": { "a": 26, "b": 48 } }, { "by": 18, "category": "ergonomics", "leads": "shotstack", "name": "Agent ergonomics", "reasons": { "a": "The MCP tool definitions weren't read (listing them needs a session), and llms.txt describes groups that include layer-by-layer design authoring, so the count is unknown. REST responses are small objects with image URLs (12 of 25). Template and generated-image listings, with no field selection documented (10 of 20). Errors are JSON with a `message` and documented statuses, without codes (12 of 20). Requests aren't idempotent, by the vendor's own note, though identical image URLs are served from cache without a credit (6 of 20). An Editor SDK for embedding the editor, and no API client SDKs (5 of 15). 12 + 10 + 12 + 6 + 5 = 45.", "b": "15 MCP tools by the vendor's list, with the authoring guide loaded on demand through `get_shotstack_guide` and skill references read only when relevant (18). No pagination, limit or filter on the template or source lists in the definition. The CLI prints JSON with `--output json` (6). Errors carry `status`, `title` and `detail`, confirmed on a 401, generation errors carry a `code`, the CLI validates offline and exits 0, 1 or 2 for success, permanent and retryable failures (17). `Idempotency-Key` and a result cache on generation and a free quote, but no idempotency on renders, and MCP annotations were not readable (12). Smart clip lengths and a default `v1` environment keep requests short. Five official SDK repositories exist, but the npm and PyPI packages date from July 2024 (10)." }, "scores": { "a": 45, "b": 63 } }, { "by": 15, "category": "payments", "leads": "shotstack", "name": "Payments \u0026 pricing", "reasons": { "a": "No x402, MPP or L402 (0). Image allowances per plan and AI credit packs ($20 for 1,000 credits) are public, but plan prices are filled in by the FastSpring script and weren't readable (10 of 20). Free plan and a 14-day trial with 30 API credits, no card (20). auth.md says a person has to copy the key; there is no OAuth or programmatic key (0). 0 + 10 + 20 + 0 = 30.", "b": "No x402, MPP or L402 (0). Public per-minute prices, 20 cents on pay as you go down to 5 cents on Volume, with AI generation priced per model through a quote endpoint and four examples on the pricing page (20). 10 credits for 30 days with no card, and a free watermarked sandbox (20). Checking an edit and opening a Studio preview need no key, but any render needs a key from a browser signup (5)." }, "scores": { "a": 30, "b": 45 } }, { "by": 10, "category": "transparency", "leads": "shotstack", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed service under terms (revision 2/2026) from DynaPictures GmbH in Freiburg, for business customers (15). The privacy policy names the controller, keeps generated images as long as needed or until deleted, gives plan image retention (3 months on Lite), and says the named AI providers don't train on API inputs under their API terms; other periods follow bookkeeping law (20 of 30). The OpenAPI file commits to six months' notice before removing an endpoint or field, with Deprecation and Sunset headers (16 of 20). AI sub-processors named with addresses (OpenAI, Google, Black Forest Labs, Replicate) and FastSpring for payments, while hosting providers aren't named (12 of 20). 15 + 20 + 16 + 12 = 63.", "b": "Closed service under published terms, with the schemas and SDKs under MIT. The CLI was Apache-2.0 in its last public source (0.15.2, 22 October 2026); since 25 October its source isn't published and the repository keeps only the agent skill (15). A DPA and sub-processor list updated 6 October 2026, and terms that say customer data is not used to train AI models. The privacy policy is dated 21 December 2021 and says ingested media is deleted after rendering, while the Ingest guide says sources are stored until deleted, and the DPA gives 24 hours for outputs while the hosting guide calls CDN hosting permanent by default (18). The terms promise reasonable notice before a feature is retired and 30 days before material changes to the terms, and deprecated asset types keep working, but no dated deprecation policy was found (8). Five sub-processors named with purposes and locations, AWS in Sydney and the United States, with seven days' notice of additions (20)." }, "scores": { "a": 63, "b": 73 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "DynaPictures GmbH", "b": "ShotStack Pty Ltd", "name": "Vendor" }, { "a": "https://api.dynapictures.com", "b": "https://api.shotstack.io/edit/v1", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "API key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Pay per use", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Closed service under the DynaPictures terms of use (revision 2/2026)", "b": "Proprietary service under Shotstack's Terms and Conditions. The schemas package and SDKs are MIT and the Studio SDK is under PolyForm Shield 1.0.0. The CLI was Apache-2.0 up to its last public source (0.15.2, 22 October 2026); since 25 October 2026 its source isn't published and the shotstack-cli repository holds only the agent skill", "name": "Licence" }, { "a": "none", "b": "15", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "none", "b": "2026-10-27", "name": "Last release" }, { "a": "no date given", "b": "no date given", "name": "Terms last updated" }, { "a": "no date given", "b": "no date given", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "0 stars, 1.2k npm/wk, 326 PyPI/wk", "name": "Popularity" }, { "a": "none", "b": "3.5/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Shotstack scores 67.3 (B) on agent readiness against DynaPictures's 43.2 (E), and leads in every scored category.", "question": "Which is better for AI agents, DynaPictures or Shotstack?" }, { "answer": "DynaPictures needs an API key. Shotstack takes an API key or an OAuth sign-in.", "question": "Do DynaPictures and Shotstack need an API key?" }, { "answer": "Yes. DynaPictures has a hosted endpoint at https://api.dynapictures.com and Shotstack at https://api.shotstack.io/edit/v1.", "question": "Can an agent call DynaPictures and Shotstack without installing anything?" } ], "goodFor": [ { "aheadOn": null, "also": [ "Free to start without a card", "No incidents deducted, where Shotstack loses 3 points for them" ], "goodFor": "Personalised images and PDFs per record, image URLs in emails and pages, and email countdown timers, for marketing teams in the EU.", "slug": "dynapictures", "watchFor": "One API key per user with full account access and no scopes; a new key needs an email to support" }, { "aheadOn": [ "Reliability, 95 against 42", "Schema \u0026 documentation, 88 against 82", "Agent ergonomics, 63 against 45", "Security \u0026 auth, 48 against 26", "Payments \u0026 pricing, 45 against 30", "Maintenance \u0026 community, 73 against 4", "Transparency \u0026 trust, 73 against 63" ], "also": null, "goodFor": "Teams that render video, images or audio from JSON or templates at volume and want an agent to draft edits that a person reviews in Studio.", "slug": "shotstack", "watchFor": "API keys have no scopes. One production key and one sandbox key reach the Edit, Serve and Ingest APIs, and key rotation was not found in the docs" } ], "history": { "dynapictures": null, "shotstack": [ { "causes": [ "time" ], "date": "2026-11-02", "delta": 2, "from": 65.3, "fromGrade": "B", "to": 67.3, "toGrade": "B" } ] }, "job": { "capability": "design.templates", "name": "Design templates" }, "others": [ { "json": "https://www.anchorterminal.com/compare/adobe-photoshop-api-vs-dynapictures.json", "title": "Adobe Photoshop API vs DynaPictures", "url": "https://www.anchorterminal.com/compare/adobe-photoshop-api-vs-dynapictures" }, { "json": "https://www.anchorterminal.com/compare/adobe-photoshop-api-vs-shotstack.json", "title": "Adobe Photoshop API vs Shotstack", "url": "https://www.anchorterminal.com/compare/adobe-photoshop-api-vs-shotstack" }, { "json": "https://www.anchorterminal.com/compare/apitemplate-io-vs-dynapictures.json", "title": "APITemplate.io vs DynaPictures", "url": "https://www.anchorterminal.com/compare/apitemplate-io-vs-dynapictures" }, { "json": "https://www.anchorterminal.com/compare/apitemplate-io-vs-shotstack.json", "title": "APITemplate.io vs Shotstack", "url": "https://www.anchorterminal.com/compare/apitemplate-io-vs-shotstack" }, { "json": "https://www.anchorterminal.com/compare/bannerbear-vs-dynapictures.json", "title": "Bannerbear API + MCP vs DynaPictures", "url": "https://www.anchorterminal.com/compare/bannerbear-vs-dynapictures" }, { "json": "https://www.anchorterminal.com/compare/bannerbear-vs-shotstack.json", "title": "Bannerbear API + MCP vs Shotstack", "url": "https://www.anchorterminal.com/compare/bannerbear-vs-shotstack" }, { "json": "https://www.anchorterminal.com/compare/canva-vs-dynapictures.json", "title": "Canva REST APIs + MCP vs DynaPictures", "url": "https://www.anchorterminal.com/compare/canva-vs-dynapictures" }, { "json": "https://www.anchorterminal.com/compare/canva-vs-shotstack.json", "title": "Canva REST APIs + MCP vs Shotstack", "url": "https://www.anchorterminal.com/compare/canva-vs-shotstack" }, { "json": "https://www.anchorterminal.com/compare/contentdrips-vs-dynapictures.json", "title": "Contentdrips API and MCP vs DynaPictures", "url": "https://www.anchorterminal.com/compare/contentdrips-vs-dynapictures" }, { "json": "https://www.anchorterminal.com/compare/contentdrips-vs-shotstack.json", "title": "Contentdrips API and MCP vs Shotstack", "url": "https://www.anchorterminal.com/compare/contentdrips-vs-shotstack" }, { "json": "https://www.anchorterminal.com/compare/creatomate-vs-dynapictures.json", "title": "Creatomate vs DynaPictures", "url": "https://www.anchorterminal.com/compare/creatomate-vs-dynapictures" }, { "json": "https://www.anchorterminal.com/compare/creatomate-vs-shotstack.json", "title": "Creatomate vs Shotstack", "url": "https://www.anchorterminal.com/compare/creatomate-vs-shotstack" }, { "json": "https://www.anchorterminal.com/compare/dynapictures-vs-layerre.json", "title": "DynaPictures vs Layerre", "url": "https://www.anchorterminal.com/compare/dynapictures-vs-layerre" }, { "json": "https://www.anchorterminal.com/compare/dynapictures-vs-photoroom.json", "title": "DynaPictures vs Photoroom API", "url": "https://www.anchorterminal.com/compare/dynapictures-vs-photoroom" }, { "json": "https://www.anchorterminal.com/compare/dynapictures-vs-pictify.json", "title": "DynaPictures vs Pictify", "url": "https://www.anchorterminal.com/compare/dynapictures-vs-pictify" }, { "json": "https://www.anchorterminal.com/compare/dynapictures-vs-pixelixe.json", "title": "DynaPictures vs Pixelixe", "url": "https://www.anchorterminal.com/compare/dynapictures-vs-pixelixe" }, { "json": "https://www.anchorterminal.com/compare/dynapictures-vs-placid.json", "title": "DynaPictures vs Placid API + MCP", "url": "https://www.anchorterminal.com/compare/dynapictures-vs-placid" }, { "json": "https://www.anchorterminal.com/compare/dynapictures-vs-postnitro.json", "title": "DynaPictures vs PostNitro", "url": "https://www.anchorterminal.com/compare/dynapictures-vs-postnitro" }, { "json": "https://www.anchorterminal.com/compare/dynapictures-vs-robolly.json", "title": "DynaPictures vs Robolly", "url": "https://www.anchorterminal.com/compare/dynapictures-vs-robolly" }, { "json": "https://www.anchorterminal.com/compare/dynapictures-vs-templated.json", "title": "DynaPictures vs Templated API + MCP", "url": "https://www.anchorterminal.com/compare/dynapictures-vs-templated" }, { "json": "https://www.anchorterminal.com/compare/layerre-vs-shotstack.json", "title": "Layerre vs Shotstack", "url": "https://www.anchorterminal.com/compare/layerre-vs-shotstack" }, { "json": "https://www.anchorterminal.com/compare/photoroom-vs-shotstack.json", "title": "Photoroom API vs Shotstack", "url": "https://www.anchorterminal.com/compare/photoroom-vs-shotstack" }, { "json": "https://www.anchorterminal.com/compare/pixelixe-vs-shotstack.json", "title": "Pixelixe vs Shotstack", "url": "https://www.anchorterminal.com/compare/pixelixe-vs-shotstack" }, { "json": "https://www.anchorterminal.com/compare/placid-vs-shotstack.json", "title": "Placid API + MCP vs Shotstack", "url": "https://www.anchorterminal.com/compare/placid-vs-shotstack" }, { "json": "https://www.anchorterminal.com/compare/postnitro-vs-shotstack.json", "title": "PostNitro vs Shotstack", "url": "https://www.anchorterminal.com/compare/postnitro-vs-shotstack" }, { "json": "https://www.anchorterminal.com/compare/robolly-vs-shotstack.json", "title": "Robolly vs Shotstack", "url": "https://www.anchorterminal.com/compare/robolly-vs-shotstack" }, { "json": "https://www.anchorterminal.com/compare/shotstack-vs-templated.json", "title": "Shotstack vs Templated API + MCP", "url": "https://www.anchorterminal.com/compare/shotstack-vs-templated" }, { "json": "https://www.anchorterminal.com/compare/abyssale-vs-dynapictures.json", "title": "Abyssale vs DynaPictures", "url": "https://www.anchorterminal.com/compare/abyssale-vs-dynapictures" }, { "json": "https://www.anchorterminal.com/compare/abyssale-vs-shotstack.json", "title": "Abyssale vs Shotstack", "url": "https://www.anchorterminal.com/compare/abyssale-vs-shotstack" }, { "json": "https://www.anchorterminal.com/compare/dynapictures-vs-osmo-cli.json", "title": "DynaPictures vs Osmo CLI", "url": "https://www.anchorterminal.com/compare/dynapictures-vs-osmo-cli" }, { "json": "https://www.anchorterminal.com/compare/osmo-cli-vs-shotstack.json", "title": "Osmo CLI vs Shotstack", "url": "https://www.anchorterminal.com/compare/osmo-cli-vs-shotstack" }, { "json": "https://www.anchorterminal.com/compare/pictify-vs-shotstack.json", "title": "Pictify vs Shotstack", "url": "https://www.anchorterminal.com/compare/pictify-vs-shotstack" } ], "panel": null, "scores": [ { "by": 53, "dynapictures": 42, "edge": "shotstack", "key": "reliability", "name": "Reliability", "shotstack": 95, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 6, "dynapictures": 82, "edge": "shotstack", "key": "schema", "name": "Schema \u0026 documentation", "shotstack": 88, "weight": 13 }, { "by": 18, "dynapictures": 45, "edge": "shotstack", "key": "ergonomics", "name": "Agent ergonomics", "shotstack": 63, "weight": 13 }, { "by": 22, "dynapictures": 26, "edge": "shotstack", "key": "security", "name": "Security \u0026 auth", "shotstack": 48, "weight": 14 }, { "by": 15, "dynapictures": 30, "edge": "shotstack", "key": "payments", "name": "Payments \u0026 pricing", "shotstack": 45, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 69, "dynapictures": 4, "edge": "shotstack", "key": "maintenance", "name": "Maintenance \u0026 community", "shotstack": 73, "weight": 7 }, { "by": 10, "dynapictures": 63, "edge": "shotstack", "key": "transparency", "name": "Transparency \u0026 trust", "shotstack": 73, "weight": 7 } ], "summary": "Shotstack scores 67.3 (B) on agent readiness against DynaPictures's 43.2 (E), and leads in every scored category. Both do design templates.", "tasks": null, "tutorials": [], "verdicts": { "dynapictures": "An OpenAPI 3.1 file, an agent skill and a six-month removal notice with Sunset headers make DynaPictures' template rendering easy to plan around, with a free plan and no-card trial. The single API key opens the whole account, requests aren't idempotent, and no changelog, status page or dated release was found.", "shotstack": "A public OpenAPI definition, Markdown docs, a hosted MCP server with OAuth and a free watermarked sandbox let an agent draft, check and render video with little setup. API keys have no scopes, webhooks are unsigned, no security contact or certification of Shotstack's own was found, and the npm Node SDK dates from July 2024." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/dynapictures-vs-shotstack", "json": "https://www.anchorterminal.com/compare/dynapictures-vs-shotstack.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/dynapictures-vs-shotstack.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/dynapictures-vs-shotstack.min.md" }, "markdown": "Shotstack scores 67.3 (B) on agent readiness against DynaPictures's 43.2 (E), and leads in every scored category. Both do design templates.\n\n- DynaPictures: grade E, 43.2/100, rank #1257 of 1510. Markdown https://www.anchorterminal.com/tools/dynapictures.md · JSON https://www.anchorterminal.com/api/v1/tools/dynapictures.json\n- Shotstack: grade B, 67.3/100, rank #334 of 1510. Markdown https://www.anchorterminal.com/tools/shotstack.md · JSON https://www.anchorterminal.com/api/v1/tools/shotstack.json\n- Best programmatic image and design asset APIs for AI agents: https://www.anchorterminal.com/best/design-assets/index.md\n- All 153 assets comparisons: https://www.anchorterminal.com/compare/design-assets/index.md\n\n## Which one, for what\n\n### DynaPictures (E)\n\nGood for: Personalised images and PDFs per record, image URLs in emails and pages, and email countdown timers, for marketing teams in the EU.\n\nAlso in its favour:\n- Free to start without a card\n- No incidents deducted, where Shotstack loses 3 points for them\n\nWatch for: One API key per user with full account access and no scopes; a new key needs an email to support\n\n### Shotstack (B)\n\nGood for: Teams that render video, images or audio from JSON or templates at volume and want an agent to draft edits that a person reviews in Studio.\n\nAhead on:\n- Reliability, 95 against 42\n- Schema \u0026 documentation, 88 against 82\n- Agent ergonomics, 63 against 45\n- Security \u0026 auth, 48 against 26\n- Payments \u0026 pricing, 45 against 30\n- Maintenance \u0026 community, 73 against 4\n- Transparency \u0026 trust, 73 against 63\n\nWatch for: API keys have no scopes. One production key and one sandbox key reach the Edit, Serve and Ingest APIs, and key rotation was not found in the docs\n\n\n## Why the edge\n\n### Maintenance \u0026 community: Shotstack +69\n\n- DynaPictures (4): No changelog, release notes or dated API change was found, and the MCP server card gives version 1.0.0 with no date (0). No dated changes since 8 August (0). Support by email and contact form, not tested (4 of 15). Not in the official MCP registry and no API SDKs (0). No public package or repository (0). 0 + 0 + 4 + 0 + 0 = 4.\n- Shotstack (73): API definition 1.23.3 (@shotstack/schemas) tagged on 27 October 2026, six days before the check, after 1.23.0 on 15 October added a source file on generation assets (30). 21 definition tags and 13 CLI tags (0.8.x to 0.15.2, the last on 22 October) since 4 August 2026, and the skill repository synced from CLI 0.16.0 to 0.17.0 between 25 and 30 October (20). Dated changelog for the definition in its repository, in-app support on every plan and a GitHub issue template for the CLI. Issue threads were not read (8). `@shotstack/cli` and `@shotstack/schemas` are current, while npm `shotstack-sdk` 0.2.9 dates from July 2024 per the 8 October check; the PyPI release date came from a path pypi.org's robots.txt disallows and is struck, and pypi.org didn't resolve on 2 November. The MCP registry entry was not checked (7). The definition repository runs build, smoke and example tests on pull requests. Since 25 October the CLI repository holds only the agent skill and says the CLI's source isn't published there, so its release tests can no longer be read (8). 30 + 20 + 8 + 7 + 8 = 73.\n\n### Reliability: Shotstack +53\n\n- DynaPictures (42): Hosted lines. No status page found in the docs, llms.txt or footer (0). No readable incident history (5). The monthly image quota is reported in RateLimit headers on generation, but no per-second or per-minute limit is published (5 of 15). The agent skill gives a status table with what to do for each, GET /links sends Retry-After on 503, and the docs warn that generation isn't idempotent and to check before retrying a 504 (12 of 15). The terms guarantee 94 per cent annual availability, a low figure but a published SLA (10). Nothing is labelled beta (10). 0 + 5 + 5 + 12 + 10 + 10 = 42.\n- Shotstack (95): Hosted lines. Public status page at status.shotstack.io with monitors, the Edit API in production among them (20). Its feed and incident pages hold no incident in the 90 days from 4 August 2026. The newest incident, number 8 (range parameters in render payloads causing failures, 21 July 2026), left the window on 20 October, /incidents/9 answers 404, and the window holds only two completed maintenance windows (11 August, rendering stayed available; 4 and 5 September, billing, with the API fully available). A readable page that posts incidents, none in the window, is a clean record (30, was 20). Rate limits per API key in a fixed 60-second window, 300 for Edit, 600 for Serve and 300 for Ingest in production (15). A 429 returns `rate_limit_error` with advice to wait for the window and retry with exponential backoff, and `POST /generate` takes an `Idempotency-Key`, but `POST /render` has none and no `Retry-After` is documented for rate limits (10). Schedule 2 of the terms is an SLA of 99.9 per cent with a 10 per cent credit, free plans excluded (10). The Edit API is `v1` and neither the MCP server nor the CLI carries a beta label (10). 20 + 30 + 15 + 10 + 10 + 10 = 95.\n\n### Security \u0026 auth: Shotstack +22\n\n- DynaPictures (26): One API key per user with the user's full access, not limited to workspaces or actions; a new key is requested by email to support, with no rotation in the account (10 of 30). No read-only mode, and the MCP server can author and change designs (3 of 20). Tools return the account's own templates and renders; image layers accept outside URLs (10 of 15). A list of generated images, with no audit log documented (3 of 15). No security.txt, disclosure policy, bug bounty or certification found (0). 10 + 3 + 10 + 3 + 0 = 26.\n- Shotstack (48): The MCP server uses OAuth authorisation code with PKCE S256 and dynamic client registration, with one scope, `mcp:tools`. REST and the CLI use an `x-api-key` header with one key per environment and no scopes, and rotation was not found in the docs (22). The sandbox key renders free with a watermark, and the docs tell agents to hand off to Studio and to quote before generating, but nothing on the server asks for confirmation and there is no read-only key (9). Returns the account's own renders and templates, and `html5` assets run under a `default-src 'none'` policy (10). Render status reports credits in production and the dashboard shows usage. No audit log was found (4). No security.txt, disclosure policy, bounty or certification of Shotstack's own. The DPA lists technical measures and relies on AWS's audit reports (3).\n\n### Agent ergonomics: Shotstack +18\n\n- DynaPictures (45): The MCP tool definitions weren't read (listing them needs a session), and llms.txt describes groups that include layer-by-layer design authoring, so the count is unknown. REST responses are small objects with image URLs (12 of 25). Template and generated-image listings, with no field selection documented (10 of 20). Errors are JSON with a `message` and documented statuses, without codes (12 of 20). Requests aren't idempotent, by the vendor's own note, though identical image URLs are served from cache without a credit (6 of 20). An Editor SDK for embedding the editor, and no API client SDKs (5 of 15). 12 + 10 + 12 + 6 + 5 = 45.\n- Shotstack (63): 15 MCP tools by the vendor's list, with the authoring guide loaded on demand through `get_shotstack_guide` and skill references read only when relevant (18). No pagination, limit or filter on the template or source lists in the definition. The CLI prints JSON with `--output json` (6). Errors carry `status`, `title` and `detail`, confirmed on a 401, generation errors carry a `code`, the CLI validates offline and exits 0, 1 or 2 for success, permanent and retryable failures (17). `Idempotency-Key` and a result cache on generation and a free quote, but no idempotency on renders, and MCP annotations were not readable (12). Smart clip lengths and a default `v1` environment keep requests short. Five official SDK repositories exist, but the npm and PyPI packages date from July 2024 (10).\n\n### Payments \u0026 pricing: Shotstack +15\n\n- DynaPictures (30): No x402, MPP or L402 (0). Image allowances per plan and AI credit packs ($20 for 1,000 credits) are public, but plan prices are filled in by the FastSpring script and weren't readable (10 of 20). Free plan and a 14-day trial with 30 API credits, no card (20). auth.md says a person has to copy the key; there is no OAuth or programmatic key (0). 0 + 10 + 20 + 0 = 30.\n- Shotstack (45): No x402, MPP or L402 (0). Public per-minute prices, 20 cents on pay as you go down to 5 cents on Volume, with AI generation priced per model through a quote endpoint and four examples on the pricing page (20). 10 credits for 30 days with no card, and a free watermarked sandbox (20). Checking an edit and opening a Studio preview need no key, but any render needs a key from a browser signup (5).\n\n### Transparency \u0026 trust: Shotstack +10\n\n- DynaPictures (63): Closed service under terms (revision 2/2026) from DynaPictures GmbH in Freiburg, for business customers (15). The privacy policy names the controller, keeps generated images as long as needed or until deleted, gives plan image retention (3 months on Lite), and says the named AI providers don't train on API inputs under their API terms; other periods follow bookkeeping law (20 of 30). The OpenAPI file commits to six months' notice before removing an endpoint or field, with Deprecation and Sunset headers (16 of 20). AI sub-processors named with addresses (OpenAI, Google, Black Forest Labs, Replicate) and FastSpring for payments, while hosting providers aren't named (12 of 20). 15 + 20 + 16 + 12 = 63.\n- Shotstack (73): Closed service under published terms, with the schemas and SDKs under MIT. The CLI was Apache-2.0 in its last public source (0.15.2, 22 October 2026); since 25 October its source isn't published and the repository keeps only the agent skill (15). A DPA and sub-processor list updated 6 October 2026, and terms that say customer data is not used to train AI models. The privacy policy is dated 21 December 2021 and says ingested media is deleted after rendering, while the Ingest guide says sources are stored until deleted, and the DPA gives 24 hours for outputs while the hosting guide calls CDN hosting permanent by default (18). The terms promise reasonable notice before a feature is retired and 30 days before material changes to the terms, and deprecated asset types keep working, but no dated deprecation policy was found (8). Five sub-processors named with purposes and locations, AWS in Sydney and the United States, with seven days' notice of additions (20).\n\n## Score by category\n\n| Category | Weight | DynaPictures | Shotstack | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 42 | 95 | Shotstack +53 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 82 | 88 | Shotstack +6 |\n| Agent ergonomics | 13% (16.2 this run) | 45 | 63 | Shotstack +18 |\n| Security \u0026 auth | 14% (17.5 this run) | 26 | 48 | Shotstack +22 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 45 | Shotstack +15 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 4 | 73 | Shotstack +69 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 63 | 73 | Shotstack +10 |\n| Negative events | ≤15 | 0 | -3 | |\n| **Total** | | **43.2 · E** | **67.3 · B** | |\n\n## Facts side by side\n\n| Fact | DynaPictures | Shotstack |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | DynaPictures GmbH | ShotStack Pty Ltd |\n| Hosted endpoint | `https://api.dynapictures.com` | `https://api.shotstack.io/edit/v1` |\n| Transports | HTTP, Streamable HTTP | HTTP, Streamable HTTP |\n| Auth | API key | OAuth or key |\n| Pricing | Freemium | Pay per use |\n| x402 | no | no |\n| Licence | Closed service under the DynaPictures terms of use (revision 2/2026) | Proprietary service under Shotstack's Terms and Conditions. The schemas package and SDKs are MIT and the Studio SDK is under PolyForm Shield 1.0.0. The CLI was Apache-2.0 up to its last public source (0.15.2, 22 October 2026); since 25 October 2026 its source isn't published and the shotstack-cli repository holds only the agent skill |\n| Tools exposed | none | 15 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | none | 2026-10-27 |\n| Terms last updated | no date given | no date given |\n| Privacy policy last updated | no date given | no date given |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | not found in the text | not found in the text |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | none | 0 stars, 1.2k npm/wk, 326 PyPI/wk |\n| Agent reviews | none | 3.5/5 (4) |\n\n## How the scores have moved\n\n### DynaPictures\n\nNo score change since it was listed.\n\n### Shotstack\n\n- +2.0 on 2 November 2026: time\n\n## Verdicts\n\n**DynaPictures.** An OpenAPI 3.1 file, an agent skill and a six-month removal notice with Sunset headers make DynaPictures' template rendering easy to plan around, with a free plan and no-card trial. The single API key opens the whole account, requests aren't idempotent, and no changelog, status page or dated release was found.\n\n**Shotstack.** A public OpenAPI definition, Markdown docs, a hosted MCP server with OAuth and a free watermarked sandbox let an agent draft, check and render video with little setup. API keys have no scopes, webhooks are unsigned, no security contact or certification of Shotstack's own was found, and the npm Node SDK dates from July 2024.\n\n## Before you call either\n\n### DynaPictures\n\n1. Use `GET /templates` to find a template UID and its layer names before generating\n2. Check whether an image exists before retrying a timed-out `POST /designs/{UID}`; retries can be charged\n3. Treat 403 as a spent quota or expired trial and stop; wait for `Retry-After` only on 503\n4. Poll `GET /ai/generate/{jobUid}` about every 2 seconds and download the result, since the URL may expire\n5. Keep the API key out of image URLs; use signed or public links for embedding\n\n### Shotstack\n\n1. Fetch `https://shotstack.io/docs/api/api.edit.json` and the conventions guide before writing an edit. Track order is reversed, so the first track renders on top\n2. Render in `stage` first. It is free and watermarked, but AI generation there is charged from the production credit balance\n3. Call `POST /generate/quote` before `POST /generate`, and send an `Idempotency-Key` header on generation. `POST /render` has no idempotency key, so do not resubmit blindly\n4. Do not store the `url` from the render status response. It expires after 24 hours. Use the CDN address built from `owner` and the render id\n5. On a 429, wait for the 60-second window to reset and retry with backoff. Limits are per API key, 300 a minute on the Edit API in production\n\n## Questions\n\n### Which is better for AI agents, DynaPictures or Shotstack?\n\nShotstack scores 67.3 (B) on agent readiness against DynaPictures's 43.2 (E), and leads in every scored category.\n\n### Do DynaPictures and Shotstack need an API key?\n\nDynaPictures needs an API key. Shotstack takes an API key or an OAuth sign-in.\n\n### Can an agent call DynaPictures and Shotstack without installing anything?\n\nYes. DynaPictures has a hosted endpoint at https://api.dynapictures.com and Shotstack at https://api.shotstack.io/edit/v1.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/dynapictures-vs-shotstack.json, and with the fewest tokens: https://www.anchorterminal.com/compare/dynapictures-vs-shotstack.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"dynapictures\", \"b\": \"shotstack\"}`. From a terminal: `anchor compare dynapictures shotstack`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/dynapictures.json and https://www.anchorterminal.com/api/v1/tools/shotstack.json\n\n## Other comparisons with DynaPictures or Shotstack\n\n- [Adobe Photoshop API vs DynaPictures](https://www.anchorterminal.com/compare/adobe-photoshop-api-vs-dynapictures.md)\n- [Adobe Photoshop API vs Shotstack](https://www.anchorterminal.com/compare/adobe-photoshop-api-vs-shotstack.md)\n- [APITemplate.io vs DynaPictures](https://www.anchorterminal.com/compare/apitemplate-io-vs-dynapictures.md)\n- [APITemplate.io vs Shotstack](https://www.anchorterminal.com/compare/apitemplate-io-vs-shotstack.md)\n- [Bannerbear API + MCP vs DynaPictures](https://www.anchorterminal.com/compare/bannerbear-vs-dynapictures.md)\n- [Bannerbear API + MCP vs Shotstack](https://www.anchorterminal.com/compare/bannerbear-vs-shotstack.md)\n- [Canva REST APIs + MCP vs DynaPictures](https://www.anchorterminal.com/compare/canva-vs-dynapictures.md)\n- [Canva REST APIs + MCP vs Shotstack](https://www.anchorterminal.com/compare/canva-vs-shotstack.md)\n- [Contentdrips API and MCP vs DynaPictures](https://www.anchorterminal.com/compare/contentdrips-vs-dynapictures.md)\n- [Contentdrips API and MCP vs Shotstack](https://www.anchorterminal.com/compare/contentdrips-vs-shotstack.md)\n- [Creatomate vs DynaPictures](https://www.anchorterminal.com/compare/creatomate-vs-dynapictures.md)\n- [Creatomate vs Shotstack](https://www.anchorterminal.com/compare/creatomate-vs-shotstack.md)\n- [DynaPictures vs Layerre](https://www.anchorterminal.com/compare/dynapictures-vs-layerre.md)\n- [DynaPictures vs Photoroom API](https://www.anchorterminal.com/compare/dynapictures-vs-photoroom.md)\n- [DynaPictures vs Pictify](https://www.anchorterminal.com/compare/dynapictures-vs-pictify.md)\n- [DynaPictures vs Pixelixe](https://www.anchorterminal.com/compare/dynapictures-vs-pixelixe.md)\n- [DynaPictures vs Placid API + MCP](https://www.anchorterminal.com/compare/dynapictures-vs-placid.md)\n- [DynaPictures vs PostNitro](https://www.anchorterminal.com/compare/dynapictures-vs-postnitro.md)\n- [DynaPictures vs Robolly](https://www.anchorterminal.com/compare/dynapictures-vs-robolly.md)\n- [DynaPictures vs Templated API + MCP](https://www.anchorterminal.com/compare/dynapictures-vs-templated.md)\n- [Layerre vs Shotstack](https://www.anchorterminal.com/compare/layerre-vs-shotstack.md)\n- [Photoroom API vs Shotstack](https://www.anchorterminal.com/compare/photoroom-vs-shotstack.md)\n- [Pixelixe vs Shotstack](https://www.anchorterminal.com/compare/pixelixe-vs-shotstack.md)\n- [Placid API + MCP vs Shotstack](https://www.anchorterminal.com/compare/placid-vs-shotstack.md)\n- [PostNitro vs Shotstack](https://www.anchorterminal.com/compare/postnitro-vs-shotstack.md)\n- [Robolly vs Shotstack](https://www.anchorterminal.com/compare/robolly-vs-shotstack.md)\n- [Shotstack vs Templated API + MCP](https://www.anchorterminal.com/compare/shotstack-vs-templated.md)\n- [Abyssale vs DynaPictures](https://www.anchorterminal.com/compare/abyssale-vs-dynapictures.md)\n- [Abyssale vs Shotstack](https://www.anchorterminal.com/compare/abyssale-vs-shotstack.md)\n- [DynaPictures vs Osmo CLI](https://www.anchorterminal.com/compare/dynapictures-vs-osmo-cli.md)\n- [Osmo CLI vs Shotstack](https://www.anchorterminal.com/compare/osmo-cli-vs-shotstack.md)\n- [Pictify vs Shotstack](https://www.anchorterminal.com/compare/pictify-vs-shotstack.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "DynaPictures vs Shotstack", "url": "" } ], "description": "Shotstack scores 67.3 (B) to DynaPictures's 43.2 (E) for design templates. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "DynaPictures E 43.2", "Shotstack B 67.3", "scores" ], "h1": "DynaPictures vs Shotstack", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/dynapictures-vs-shotstack", "published": "2026-10-01", "section": "tools", "title": "DynaPictures vs Shotstack for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/dynapictures-vs-shotstack" }, "tokens": { "markdown": 5050, "slim": 2880 }, "version": 1 }