Fish Audio Voice Cloning API vs Gradium Voice Cloning and Voice Design

Fish Audio Voice Cloning API 35

Graded for voice cloning, with consent and misuse controls in place of the read-only line and training and retention of voice data in place of the prompt-injection line, since the API returns audio and IDs rather than third-party text. Plain revocable API keys with no scopes found. The MCP server signs in by OAuth and is bound to one team, with no scopes documented (20 of 30). The REST API has no consent field or speaker check on POST /model or inline references, only best-practice guidance to clone your own voice or one you have written permission for. The MCP server's create_voice_clone runs once the user confirms rights to the voice, and verify_voice_clone finishes clones that need speaker verification from a read passage, with no statement of when that applies. MCP clones are unlisted by default, so anyone with the ID can use them. Professional Voice Clone verification is in the web app only. No watermark or detection tool found (5 of 20). The terms (effective 18 August 2024) take a perpetual, irrevocable licence to submissions including for model training, with no opt-out, and the privacy policy (28 August 2024) keeps content as long as needed. Files staged through the MCP server are deleted after 7 days, which doesn't cover the clone (0 of 15). Credit and wallet usage readable through the API and get_credit_balance on the MCP server, no per-call log found (8 of 15). security.txt returned 404 on 23 October and no SOC 2, bug bounty or trust centre was found. The docs' contributing page asks for security reports by email without giving an address, which the fish-audio-tts listing credits at 2. This listing gave 0 on the same evidence, now aligned. No advisories for either SDK in OSV on 4 November (2 of 20). The pages are per the 23 October check, not re-read on 4 November. 20+5+0+8+2 = 35.

Gradium Voice Cloning and Voice Design 48

Graded for voice cloning as the other listings in this category, with consent and misuse controls in place of the read-only line and training and retention of voice data in place of the prompt-injection line. API keys per organisation in a header, revocable and able to expire, with no scopes found (20 of 30). No consent or verification field and no watermark. The Terms make the client obtain the consent of anyone whose voice is a sample and bar impersonation without explicit authorisation, and the API FAQ says explicit consent is required (6 of 20). The Terms grant Gradium a licence to use Client Data to improve its services and train its models, with no opt-out found, and zero data retention (paid plans) excludes voice samples, so samples are kept and may be used for training (2 of 15). Organisation roles and a member list, with no per-call audit log found (5 of 15). SOC 2 Type II and ISO 27001:2022 audited by A-LIGN, a trust centre and security@gradium.ai. No security.txt (404) and no bug bounty found (15 of 20). 20+6+2+5+15 = 48.

Fish Audio Voice Cloning API 75

Status page at status.fish.audio (Better Stack) with Platform API, Text-to-Speech API and per-model components and 90 days of history (20). fish.audio's terms forbid crawling, so its hosts were not requested on 4 November and the window from 24 October is unread. Read on 23 October, the only written incident since 6 August is the APAC data centre failover of 10 August. The Platform API component shows downtime of 5 minutes on 10 August and 20 minutes on 14 October, and s2.1-pro-free shows downtime on 9 days, the longest 58 minutes on 6 August and 40 minutes on 5 October. s2.1-pro, s2-pro, s1 and drama-3 show 100%. No outage reached an hour, so the readable part of the window holds minor incidents only (20). Concurrency limits published as 5, 15 and 50 by prepaid amount (15). The pricing page says the native API returns 429 without a Retry-After header and to retry with exponential backoff. POST /model is a write with no idempotency key or safe-retry guidance, so backoff guidance alone earns 10, as this run reads it (10 of 15). The models page mentions TTFA and DPA guarantees for s2.1-pro, but no SLA document was found (0). Cloning, s2.1-pro and voice design are generally available (10). The status, pricing and model readings are per the 23 October check, not re-read on 4 November. 20+20+15+10+0+10 = 75.

Gradium Voice Cloning and Voice Design 63

Graded on the hosted voice API with the hosted lines. Atlassian Statuspage at gradium.statuspage.io with five components, one of them Voice Cloning (20). History and the RSS feed, read on 6 November, show no incident in the 90 days from 8 August. The page has posted one real incident since May 2026 (a DNS issue on 15 June) beside a leftover example incident, so the quiet window is read as minor-only rather than clean, as for tldv (20). Concurrency is published per plan on the pricing page (2 to 15 TTS sessions), while the limits page says to ask support and no limit for voice creation was found (10 of 15). No 429, Retry-After or backoff guidance was found; the errors page says to open a new connection after an error, and voice creation takes a timeout_s (3 of 15). No SLA in the Terms or on the pricing page (0). Instant cloning carries no beta label (10). 20+20+10+3+0+10 = 63.

Fish Audio Voice Cloning API 73

Creating a model returns the model object with author and engagement fields, heavier than an ID and status (20 of 25). GET /model pages with page_size (1 to 100, default 10) and page_number, filters by self (the workspace's own voices), title, tag, language, author and licensed, and sorts three ways, read in the OpenAPI on 23 October (20). Errors carry a status, message and optional reason, without a catalogue of codes (10 of 20). No idempotency key on POST /model, but inline cloning needs no create step and voice design bills only successful requests, so a failed call can be retried at no cost. The 429 backoff guidance doesn't change this line (10 of 20). Official Python and JavaScript SDKs and a short required field list. Python fish-audio-sdk 1.4.0 (30 October 2026) accepts s2.1-pro-free and drama-3, while npm fish-audio stays at 0.1.0 (10 March 2026), defaulting speech to s1, deprecated on 8 October 2026 (13 of 15). The API readings are per the 23 October check, not re-read on 4 November. 20+20+10+10+13 = 73.

Gradium Voice Cloning and Voice Design 67

Voice objects are compact metadata (20 of 25). GET /voices/ takes skip and limit (default 100) and since 23 October filters by locale, gender and use_case (20). Validation errors are structured 422 bodies, while synthesis errors arrive as plain-text HTTP 500 with a numeric code to parse (12 of 20). No idempotency key. Saving a design candidate twice answers 409, and the clone call has none (5 of 20). Three required fields with sensible defaults, and one official SDK, in Python (10 of 15). 20+20+12+5+10 = 67.