fal image models vs SurgePix API

fal image models 77

Graded as a hosted service on the queue API. Instatus page at status.fal.ai with components for Model API, Serverless API, Official Models and the dashboards, and monthly uptime figures (20). The notice history, re-read on 1 November 2026, has two notices in the 90 days from 3 August, a 30-minute major outage of synchronous calls to fal.run on 4 September (the queue wasn't named, so partial) and 18 minutes of degraded performance on 29 September, and none in October (20). Concurrency is published, 2 for a new account rising to 40 self-serve with paid invoices over four weeks, and queued requests are never rejected (15). A 429 carries type concurrent_requests_limit and X-Fal-needs-retry: 1, the docs give backoff of 1, 2, 4 and 8 seconds, the queue requeues with no maximum and the SDK retries up to 10 times. There is no idempotency key, so a repeated submit is a second billable job, read as on fal's video and music listings (12, was 8). No SLA document is published for self-serve (0). The queue API is generally available (10). 20+20+15+12+0+10 = 77.

SurgePix API 15

Read with the hosted lines. No status page was found on surgepix.ai or in the docs, and status.surgepix.ai doesn't resolve (0). With no history to read, the incident line takes the floor (5). No rate limits with numbers are documented. The terms say "non-human continuous or frequent query operations" lead to automatic account suspension, with no threshold given (0). No 429 or backoff guidance. The skill scripts poll every 2 seconds for up to 5 to 15 minutes, but that is client code, not a documented policy (0). No SLA, and the terms disclaim uninterrupted service (0). The API isn't labelled beta or preview, and API keys have been self-serve since 2 June 2026 per the changelog (10). 0+5+0+0+0+10 = 15.

fal image models 91

OpenAPI for the platform APIs at api.fal.ai/v1/openapi.json, and a per-endpoint OpenAPI 3.1 document from the catalogue API with expand=openapi-3.0, read for fal-ai/flux/dev and fal-ai/nano-banana-2 on 1 November 2026 (25). Any earlier per-endpoint reading from fal.ai's ?endpoint_id= query is struck, because fal.ai's robots.txt disallows it. A docs llms.txt and a machine-readable llms.txt per model with schema, defaults and price (10). Model pages state what each model does, but quality and when-not-to-use guidance vary by model (14). Typed per-model inputs with enums and defaults, prompt the only required field on FLUX.1 dev and Nano Banana 2 (13). Examples on every model page, and a model error reference with typed errors such as image_too_large, image_too_small, unsupported_image_format and content_policy_violation, each with a docs link and structured context (14, was 8). Dated changelog, versioned endpoint ids (15). 25+10+14+13+14+15 = 91.

SurgePix API 40

No OpenAPI or other machine-readable contract was found (0). surgepix.ai/llms.txt returns 404. The docs are HTML pages, but the 15 SKILL.md files in the MIT repository are Markdown written for agents, so half (5). The API reference states the purpose of each of its five operations and the async and session model. The SKILL.md files add trigger phrases and explicit do-not-use routing between skills, but 11 of the task endpoints the skills call appear only in their scripts, with no reference (10). Parameter tables give type and required for the documented operations, with no enums or limits, and the undocumented endpoints have no schema at all (7). JSON examples for every documented operation and an error table with 401, 404 and error.file.sensitive_content (10). A dated public changelog from 11 March 2026, but no version in the API path and no API-specific change notes (8). 0+5+10+7+10+8 = 40.

fal image models 61

Closed platform with published terms (8 September 2026) and API Services supplemental terms. The clients are MIT and the catalogue marks each model's license_type. The terms warrant nothing about rights in output, and output rights come from each upstream model's licence, read as on fal's video and music listings (13, was 15). Data handling is documented and mostly agrees. The API Services terms say fal will not use client content to create, train or develop its products, except on models marked Pending Enterprise Ready, request payloads are kept 30 days with an opt-out header and a delete API (per fal's video listing), and the privacy policy of 22 July 2026 deletes account data 30 days after closure. Content sent to a third-party model goes to that third party (22, was 12). fal's model pages carry 19 dated deprecation notices across the catalogue (video and audio endpoints on 22 and 25 October, 17 November and 15 December 2026), with named replacements, but no written policy; none yet names an image endpoint, and the 38 deprecated text-to-image endpoints in the catalogue carry no date. For the image endpoints this listing grades, that is deprecation marked with no dates and no written policy, read as on ElevenLabs' text-to-speech and speech-to-text listings, where its voice-cloning listing's dated entries score higher (5, was 0). The DPA of 31 July 2026 names a subprocessor list with 15 days' notice of new subprocessors, but trust.fal.ai renders only in a browser, and the privacy policy says processing is in the United States and other countries (10, was 5). 13+22+5+10 = 50.

SurgePix API 28

The editorial half. A closed service whose terms name no company or address. They restrict any commercial use of what the service produces without SurgePix's permission, and contain clauses from an unrelated product (a "big data" query platform and "non-resume content"). The skills are MIT. Unclear terms, with a little credit for the open skills (5). The privacy policy is dated both 10 June 2026 and 1 July 2022, describes WeChat and phone registration and "domestic servers", and gives no retention periods. The API reference says uploads go to Tencent Cloud storage in Seoul as public URLs. No DPA. The statements don't agree (5). No deprecation policy or notices, and the terms let changes take effect on publication without notice (0). Tencent Cloud Object Storage in ap-seoul is named in the API reference, and Alipay and WeChat Pay in the privacy policy. No subprocessor list or stated data location (4). 5+5+0+4 = 14.

fal image models 73

Keys take one of seven permission presets (API, SERVERLESS, DEPLOY, COMPUTE, BILLING, READONLY, FULL) or a custom permission list, can be limited to named models and can expire, since 9 October 2026. Legacy ADMIN and API keys still work. The MCP server also takes OAuth for ChatGPT and web clients (30, was 25). A READONLY preset grants no write access and a model limit narrows a key to the image endpoints it calls; there's no approval step before a paid generation (15, was 10). Returns generated media and fal's own catalogue text (10). Usage page filters by API key and user (10). https://fal.ai/.well-known/security.txt returned 404 on 1 November 2026 and no disclosure policy or bug bounty was found. The enterprise page mentions SOC 2 and the DPA of 31 July 2026 has a data security exhibit, but the trust centre at trust.fal.ai renders only in a browser, so the report and its scope were unread. Read as on fal's video and music listings (8, was 10). 30+15+10+10+8 = 73.

SurgePix API 41

Plain API keys created in the account settings, which the docs say can be revoked and reset. The key goes in the authorization header, never in a URL. No scopes found (20). No read-only key or spend cap. The plan's credit allowance bounds spend. Every uploaded file becomes a publicly accessible URL on Tencent Cloud storage, which counts against least privilege (3). The API returns image and file URLs, not untrusted text (10). The billing page's credit statement lists each request with its model and token counts, and sessions group calls in the web app, per the docs (8). No security.txt, disclosure policy, bug bounty or certification was found (0). 20+3+10+8+0 = 41.

fal image models 80

The hosted MCP server has 11 tools (15), and search, schema and pricing tools let an agent load one model's definition only when it needs it (5). Outputs come back as CDN URLs, with per-model size and count controls and a header for CDN retention (17). Errors carry a machine-readable type, a docs URL and structured context, with guidance on which to retry, read as on fal's video listing (18, was 12). No idempotency key. Server-side retries, a cancel endpoint and no charge for 5xx failures reduce the cost of a failed call, but a repeated submit is a second billable job, and the MCP docs don't mention readOnlyHint or destructiveHint, read as on fal's video and music listings (10, was 8). Official Python and JavaScript clients, few required parameters per model (15). 20+17+18+10+15 = 80.

SurgePix API 53

Every task returns one download URL, or one ZIP for an image set, and status responses are a few fields, so little enters context (18). Nothing to paginate. noWait chooses sync or async, and the skills pass size, aspect ratio, count and language, but none of these are in the public reference (10). Errors come back as a JSON code and msg, with 401 and 404 documented and an NSFW error on upload, but a failure can arrive as HTTP 200 with a non-zero code and failed task states carry no documented reason (12). Upload deduplicates by MD5 and returns the existing URL. Tasks have no idempotency key, and a retried task is a new task that spends credits again (5). Few required parameters (fileUrl for background removal). No official SDK, only the Node scripts inside the skills (8). 18+10+12+5+8 = 53.

fal image models 79

The changelog's newest entry is 29 October 2026 (fallback chains), and the catalogue shows image endpoints added on 1, 6, 14, 18, 19, 22 and 26 October, among them FLUX.3 and Nano Banana 2.1 (30). 11 dated changelog entries from 3 August to 29 October 2026 (20). Per the 1 October check, not re-read on 1 November (GitHub's pages refuse our reader), fal-js had 21 open issues, among them 'fal-js client out of sync with fal api' from January 2026, with reply counts unread (10). Python client at 1.0.3 (21 September on PyPI per the 1 October check), JavaScript client last released 1.10.1 on 4 May 2026 (12). Recent client releases include supply-chain and retry fixes, per the 1 October check (7). 30+20+10+12+7 = 79.

SurgePix API 66

The last dated change is GPT-Image-2.5 on 23 October 2026, 10 days before the check (30). Changelog entries on 15, 22 and 23 October, 16, 9 and 2 September 2026, more than three in 90 days (20). For a closed service, a dated changelog, a Discord server and a contact email. We didn't open Discord or the GitHub issues, so answering isn't confirmed (8). No official SDK. The skills are maintained client scripts with tags from v1.0.0 (4 June 2026) to v1.5.0 (2 September 2026), a judgement call (5). The repository's CI checks SKILL.md front matter only, with no tests, and the skills aren't published as a package (3). 30+20+8+5+3 = 66.