ElevenLabs Music API vs Suno MCP

ElevenLabs Music API 86

Public OpenAPI document at api.elevenlabs.io/openapi.json (25). llms.txt with Markdown pages for the music quickstart, streaming, composition plans and inpainting (10). Compose, stems and inpainting are described with purpose and when to use a composition plan instead of a prompt, but the overview says tracks run to 5 minutes while the reference accepts 600,000 ms (12). Typed inputs with enums for model_id and output_format, ranges for music_length_ms (3,000 to 600,000) and seed, a 4,100-character prompt cap and prompt and plan marked mutually exclusive (14). Examples in several languages, but only a generic 422 is documented per endpoint (10). Versioned model IDs and a dated weekly changelog (15).

Suno MCP 24

Suno doesn't publish the server's tool list, and the tool definitions can be read only after signing in, which this run didn't do, so no contract is public (0 of 25). suno.com/llms.txt is Markdown written for agents but describes the app as of 29 May 2026 and says nothing about the MCP server (5 of 10). suno.com/mcp and the help article list what the server does (songs, covers, extensions, mashups, Speech, uploads, Voices, playlists, credits) without per-tool purpose or when not to call (5 of 20). Typed inputs weren't readable (0 of 15). Three example prompts on suno.com/mcp, and only the 401 with its resource metadata is documented as an error (4 of 15). Dated release notes with an entry for the launch, but no server version or MCP changelog (10 of 15). Total 24.

ElevenLabs Music API 65

Audio comes back as a file in the response body with a song-id header, not base64 in JSON (15), and the caller sets both length and format (10). A streaming endpoint for music, no webhook, and we didn't find paginated history for music generations (10). Validation errors return 422 with detail and the two 429 types carry named codes (15). No idempotency key and no statement on whether failed generations are charged (0). Only prompt is needed and everything else has a default (7), official SDKs for Python and TypeScript (8).

Suno MCP 14

Tool count and definition size couldn't be read without signing in, so context cost scores as not found (0 of 25). The library:search scope shows library search exists, with no paging or size controls documented (5 of 20). Only the 401 is documented (4 of 20). Idempotency and readOnlyHint or destructiveHint annotations couldn't be read (0 of 20). Setup needs no API key and Suno's examples are plain requests, but required parameters are unknown, and an MCP server needs no SDK (5 of 15). Total 14.

ElevenLabs Music API 63

Status page on incident.io with component history for ElevenAPI, ElevenCreative and others, though Music isn't its own component (20). One long incident in the last 90 days touched Music. On 2026-08-24 media loading failed across Studio, Music, Dubbing and other products for about ten hours, with the API degraded, plus a 9-minute US error spike on 2026-07-08 (10). Concurrency limits published per plan, 2 on Free to 15 on Scale and Business (15). The 429 page names too_many_concurrent_requests and system_busy and says to retry the second, and the API error reference asks for exponential backoff, with no Retry-After header (8). No idempotency key or safe-retry guidance for generation (0). No SLA published, only custom SLAs for enterprise (0). The Music API is generally available (10).

Suno MCP 13

Read with the hosted lines, because the surface an agent uses is the remote server at api.suno.com/mcp. No official status page was found, and status.suno.com doesn't resolve (0 of 20). No readable incident history (5 of 30). No rate limit is published for the server. The plan table gives generation concurrency, 4 at once in a shared queue on Free and 10 in a priority queue on Pro and Premier, with daily or monthly credits, which we count in part (8 of 15). No 429, Retry-After or backoff guidance (0 of 15). No SLA (0 of 10). The server is labelled beta, and the page asks for early access (0 of 10). Total 13.

ElevenLabs Music API 77

API keys can be limited to chosen endpoints, given a credit cap, an expiry from 15 minutes to 30 days and an IP allowlist, and service-account keys exist for production. Keys found in public GitHub repos are disabled automatically (30). Endpoint-scoped keys give least privilege. Music has no destructive actions to confirm (15). Returns generated audio, no untrusted content (10). Credit caps show spend per key, and workspace audit logs exist but only on Enterprise (10). security.txt valid to 2027-03-01 with a vulnerability disclosure programme (5), no paid bug bounty found (0), SOC 2 Type II announced by ElevenLabs on X, with a trust centre at compliance.elevenlabs.io that didn't render for us (7), no public advisories found (0).

Suno MCP 49

OAuth on Suno's own authorisation server, with authorisation code and PKCE S256, refresh tokens, a revocation endpoint, open client registration, client ID metadata documents and bearer tokens in the header only. The resource lists eight scopes and keeps spending credits in its own credits:spend scope (30 of 30). The scopes separate reading, searching, writing the library and spending, but no read-only connection, spending cap or confirmation step is documented, and the consent screen wasn't seen (6 of 20). Results come from the user's own library and Suno's generation, with lyrics and titles that may come from shared or remixed songs, and no injection guidance (8 of 15). Every song lands in the library and the credit balance can be checked, with no per-call log (5 of 15). No security.txt on suno.com or api.suno.com, and no disclosure policy, bug bounty or certification found (0 of 20). Total 49.

ElevenLabs Music API 78

Closed service with general terms plus Music Terms updated 2026-05-26 that spell out what output may be used for. The SDKs are MIT (15). Privacy policy, DPA and a Zero Retention Mode exist, but Zero Retention is enterprise only and the docs list Music as not yet supported, so music prompts and output are retained by default (20). Dated deprecation notices in the changelog, such as the local MCP server on 2026-08-22, but music_v1 is called legacy without a date (15). Regional servers for the US, EU, India and Singapore and a DPA, subprocessor list not read (15).

Suno MCP 55

A closed service whose terms (effective 3 September 2026) are clear on output. Pro and Premier users are assigned Suno's rights in their output, Free users may use theirs only for personal, non-commercial purposes, and the help centre says Suno owns Free-plan songs (15 of 30). The privacy notice (23 June 2026) says submissions, chat information and other content are used to train Suno's models, gives no retention periods, and says nothing specific about what an assistant sends through the MCP server (10 of 30). The terms allow any part of the service to change or stop without notice, and the v6 post says older models will be retired without dates (5 of 20). Data is stored in the United States, and service providers are described by category with no named list (8 of 20). Total 38.

ElevenLabs Music API 80

Changelog entries on 2026-09-28, with Music changes on 2026-09-07 (music_v2_5 in the API and SDKs) and 2026-09-14 (30). Ten dated changelog entries between 2026-08-17 and 2026-09-28 (20). Public weekly changelog and a help centre, but we didn't check how fast GitHub issues get answers (10). Python SDK 2.70.0 released on 2026-09-28 after eight releases since 2026-08-11, and the npm package is on 2.70.0 too (15). Packages are current, CI not checked (5).

Suno MCP 60

The server launched on 28 October 2026, four days before this check (30). The release notes have 13 dated entries since 3 August 2026, one of them about the MCP server (20). Public release notes, a help centre with an MCP category, a support email and a Discord server, with response times not checked (10 of 25). Not in the official MCP registry under a Suno namespace. The two Suno entries there are third-party wrappers (0 of 15). No package to judge (0 of 10). Total 60.