{ "data": { "a": { "slug": "folk", "name": "folk API + MCP", "vendor": "folk", "vendorUrl": "https://www.folk.app", "kind": "http-api", "category": "crm", "summary": "REST API and hosted MCP server for folk, a relationship CRM for small teams.", "url": "https://www.anchorterminal.com/tools/folk", "markdownUrl": "https://www.anchorterminal.com/tools/folk.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/folk.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/folk.json", "dns": "folk.grade.anchorterminal.com", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.folk.app/v1", "packages": [], "auth": "mixed", "authNotes": "REST calls take a workspace API key as a Bearer token; keys have no scopes and share one rate limit per user. The hosted MCP server at https://mcp.folk.app/mcp uses OAuth and acts with the signed-in user's permissions.", "pricing": "paid", "pricingNotes": "No free plan, a 14-day trial with no card. Standard $24 a member a month billed yearly or $30 monthly (MCP, no REST API), Premium $48 yearly or $60 monthly (adds REST API, custom objects and deals), Enterprise from $80 yearly or $100 monthly (https://www.folk.app/pricing).", "priceSummary": "$24 / seat-mo", "where": "hosted", "x402": { "level": "no", "evidence": "No payments. Access follows the folk subscription.", "endpoints": [] }, "toolCount": 60, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://developer.folk.app", "llmsTxt": "https://developer.folk.app/llms.txt", "openapi": "https://developer.folk.app/schemas/2025-06-09.json", "capabilities": [ "crm.records", "crm.pipeline", "crm.activities", "crm.search", "crm.webhooks", "crm.email" ], "tags": [ "hosted", "mcp", "llms-txt", "openapi", "webhooks", "closed-source", "no-card" ], "lastRelease": "2026-10-25", "graded": true, "anchor": { "graded": true, "score": 58.2, "grade": "C", "agentReady": false, "rank": 760, "ranked": true, "rankOf": 1510, "categoryRank": 8, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 60, "payments": 30, "reliability": 55, "schema": 91, "security": 45, "transparency": 82 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-03" }, "negative": -3, "negativeNotes": [ "-3 for a published behaviour changed for existing clients on the day it was announced. The 6 October 2026 changelog says an object is now created together with its people and companies, so a request whose links fail now fails and creates nothing, where it used to create the object with a warning. This shipped within API version 2025-06-09, whose versioning page promises a new version for each breaking change, and no earlier notice was found. The 5 and 7 October entries make `DELETE` and `PATCH` on an object of another type in the group answer 404. A path naming the wrong object type is invalid input, so those are read as validation and add nothing, as gusto's webhook-URL 422 and landingai's page-range 422 were. https://developer.folk.app/changelog" ], "verdict": "Dated API versions with a year's support and 6 months' deprecation notice, now applied to MCP tools too, plus `Idempotency-Key` and safe-retry guidance on writes. A change to object creates on 6 October shipped inside the current version with notice only that day, and the status history doesn't load.", "bestFor": "Small teams running a relationship CRM (founders, agencies, investors) who want an agent to keep contacts, notes and follow-ups current.", "strengths": [ "Dated API versions, a year's support and 6 months' deprecation notice with `Deprecation` and `Sunset` headers, extended to MCP tools on 20 October 2026", "`Idempotency-Key` on writes, a 429 body with `retryAfter`, and docs saying rate-limited requests are safe to retry", "Errors carry `code`, `message`, `documentationUrl` and `requestId`", "MCP tools badged read-only, destructive or idempotent, and none delete people, companies or objects", "Privacy policy lists processors, hosting in AWS Ireland and retention periods" ], "weaknesses": [ "Object create now fails outright when linking its people or companies fails, changed on 6 October 2026 inside API version 2025-06-09 and announced the same day", "REST API keys have no scopes and MCP gets the user's full access", "REST API only on Premium and Enterprise", "Status page history loads by script from a path robots.txt disallows, so the incident record is unknown", "SOC 2 is claimed by a footer badge with no report route, and there's no security.txt or bug bounty" ], "agentNotes": [ "Send `X-API-Version: 2025-06-09` on every REST call", "Set an `Idempotency-Key` on creates, and treat a 409 `IDEMPOTENCY_REQUEST_IN_PROGRESS` as wait and retry", "On a 429, wait for `Retry-After`, and keep under 10 requests a second, since all your keys share 600 a minute and 20 per 2 seconds", "Move off reminder endpoints and events to tasks before 2027-02-13, and off single-record MCP tools to the bulk tools before 2027-04-16", "Check each record's `status` in batch and bulk MCP results, since one failed record doesn't fail the call" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 58.2 } ], "editorialScores": { "ergonomics": 70, "maintenance": 60, "payments": 30, "reliability": 55, "schema": 91, "security": 45, "transparency": 80 }, "provenanceScore": 84, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "lastMoved": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://api.folk.app/v1/users/me -H \"Authorization: Bearer $FOLK_API_KEY\" -H \"X-API-Version: 2025-06-09\"", "claudeCode": "claude mcp add --transport http folk https://mcp.folk.app/mcp", "config": { "mcpServers": { "folk": { "url": "https://mcp.folk.app/mcp" } } } }, "letme": { "capability": "https://letme.dev/crm.records", "tool": "https://letme.dev/folk" }, "area": "business", "unitPrices": [ { "item": "Standard", "unit": "seat-month", "usd": 24, "note": "billed yearly, $30 monthly; MCP but no REST API" }, { "item": "Premium (first plan with REST API)", "unit": "seat-month", "usd": 48, "note": "billed yearly, $60 monthly" }, { "item": "Enterprise", "unit": "seat-month", "usd": 80, "note": "from, billed yearly, $100 monthly" } ], "provenance": { "legalEntity": "Folk Inc.", "domain": "folk.app", "domainRegistered": "2018-05-08", "endpointOnVendorDomain": true, "terms": "https://www.folk.app/terms-of-use", "privacy": "https://www.folk.app/privacy-policy", "statusPage": "https://status.folk.app", "changelog": "https://developer.folk.app/changelog", "securityTxt": "none", "checked": "2026-09-30", "notes": [ "The terms of use don't name the company; Folk Inc. (Delaware) is named as data controller in the privacy policy." ], "score": 84 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/folk.json", "live": { "slug": "folk", "probe": { "target": "https://api.folk.app/v1", "method": "get", "lastAt": "2026-11-07T19:22:07.694103792Z", "lastOk": true, "lastStatus": 401, "lastMs": 65, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 63, "p95ms24h": 138, "samples24h": 238, "samples30d": 7920, "days": [ { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 248, "ok": 248 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 197, "ok": 197 } ] }, "vendorStatus": { "page": "https://status.folk.app", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-07T04:47:47.999825787Z" }, "securityTxt": { "url": "https://folk.app/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:24.134377652Z" }, "llmsTxt": { "url": "https://developer.folk.app/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:32.515490301Z" }, "domain": { "domain": "folk.app", "registered": "2018-05-08", "source": "https://pubapi.registry.google/rdap/domain/folk.app", "checkedAt": "2026-11-01T14:20:41.229178258Z" }, "pages": [ { "url": "https://developer.folk.app/changelog", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:03:06.993897818Z", "changedAt": "2026-11-06T13:25:42.694494666Z", "fingerprint": "b66419620d5f" }, { "url": "https://www.folk.app/pricing", "kind": "pricing", "status": 304, "checkedAt": "2026-11-07T14:28:39.063968362Z", "changedAt": "2026-11-06T13:49:24.682711788Z", "fingerprint": "e96434dbbfa8" }, { "url": "https://www.folk.app/privacy-policy", "kind": "privacy", "status": 304, "checkedAt": "2026-11-07T14:28:41.154879389Z", "changedAt": "2026-11-06T13:49:27.147426468Z", "fingerprint": "ddfda278e5ed" }, { "url": "https://www.folk.app/terms-of-use", "kind": "terms", "status": 304, "checkedAt": "2026-11-07T14:28:43.158547136Z", "changedAt": "2026-11-06T13:49:29.159970573Z", "fingerprint": "cf1dbb7a10e7" } ], "mcpTools": { "url": "https://mcp.folk.app/mcp", "checkedAt": "2026-11-07T01:44:39.248313808Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:44:39.248313808Z" }, "updatedAt": "2026-11-07T19:22:07.694103792Z" } }, "answer": "Relaticle scores 59.6 (C) on agent readiness against folk API + MCP's 58.2 (C), and leads in 2 of 7 scored categories. folk API + MCP leads on reliability, schema \u0026 documentation, agent ergonomics and transparency \u0026 trust.", "b": { "slug": "relaticle", "name": "Relaticle", "vendor": "Relaticle, Inc.", "vendorUrl": "https://relaticle.com", "kind": "http-api", "category": "crm", "summary": "Relaticle is an open-source CRM under AGPL-3.0 for companies, people, opportunities, tasks and notes, run on Relaticle Cloud or self-hosted. Agents use its REST API and an MCP server with OAuth or scoped tokens.", "url": "https://www.anchorterminal.com/tools/relaticle", "markdownUrl": "https://www.anchorterminal.com/tools/relaticle.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/relaticle.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/relaticle.json", "dns": "relaticle.grade.anchorterminal.com", "repo": "https://github.com/relaticle/relaticle", "license": "AGPL-3.0", "transports": [ "streamable-http" ], "remoteUrl": "https://mcp.relaticle.com", "packages": [], "auth": "mixed", "authNotes": "Personal access tokens from Settings \u003e Access Tokens are tied to one workspace, take an expiry and carry chosen permissions (read, create, update, delete for REST, plus read, draft and send email for MCP). MCP clients can also use OAuth 2.1 through Laravel Passport and choose one workspace on the consent screen; the source says the OAuth scope `mcp:use` authorises the whole toolset.", "pricing": "freemium", "pricingNotes": "Self-hosting is free under AGPL-3.0. Relaticle Cloud is priced per workspace with unlimited users: Cloud Pro $19 a month billed yearly ($24 monthly) and Cloud Scale $49 ($59 monthly), Enterprise from $20,000 a year. A 14-day Cloud Pro trial needs no card. Scale has three times the API and MCP throughput.", "priceSummary": "$19 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the OpenAPI spec, the developer docs or the source (checked 2026-11-06). Over-limit Cloud calls return 402 for plan limits without payment requirements.", "endpoints": [] }, "toolCount": 50, "popularity": { "githubStars": 1811, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://relaticle.com/developers/rest-api", "llmsTxt": "https://relaticle.com/llms.txt", "openapi": "https://relaticle.com/openapi.json", "registryName": "com.relaticle/crm", "capabilities": [ "crm.records", "crm.pipeline", "crm.activities", "crm.search", "email.send", "email.threads" ], "tags": [ "official", "open-source", "agpl", "self-hosted", "hosted", "mcp", "remote-mcp", "mcp-registry", "oauth", "openapi", "llms-txt", "freemium", "trial", "no-card", "php", "eu-hosting" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 59.6, "grade": "C", "agentReady": false, "rank": 697, "ranked": true, "rankOf": 1510, "categoryRank": 7, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 59, "maintenance": 90, "payments": 30, "reliability": 40, "schema": 86, "security": 57, "transparency": 73 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "Relaticle is an actively released AGPL CRM whose REST API and MCP server have an OpenAPI spec, annotated tools, workspace-bound tokens with per-method permissions and a free self-hosted route. MCP writes apply at once with no server-side confirmation, OAuth grants the whole toolset, and Cloud has no status page, SLA or certification.", "bestFor": "Small teams who want an open-source CRM they can self-host and let an agent write to.", "strengths": [ "AGPL-3.0 source, free to self-host, with tagged releases about twice a week", "Tokens are bound to one workspace with an expiry and per-method permissions, so a read-only token is possible", "OpenAPI 3.1 spec, llms.txt and MCP tools with readOnly, destructive and idempotent hints", "Filter grammar with $and, $or and $not, cursor paging and upserts by unique field", "Cloud providers listed with what each receives, hosting at Hetzner in Germany" ], "weaknesses": [ "Writes over MCP apply immediately, and OAuth's single `mcp:use` scope authorises every tool", "No status page or SLA for Relaticle Cloud was found", "No SOC 2 or ISO 27001, which the security page says plainly", "No changelog page beyond GitHub tags, and no deprecation policy", "50 MCP tools by default, with no toolsets or read-only subset" ], "agentNotes": [ "Use a personal access token with only the read permission unless the task writes, since OAuth grants every tool", "Ask the user before create, update, delete or send tools; the server applies them at once", "Call `get-crm-schema-tool` for an entity before filtering on custom fields, which differ by workspace", "Use `POST /v1/people/upsert` or `/v1/companies/upsert` with a unique field to avoid duplicates on retry", "Keep MCP calls under 120 a minute per user and REST writes under 60 a minute per token on Cloud Pro" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59.6 } ], "editorialScores": { "ergonomics": 59, "maintenance": 90, "payments": 30, "reliability": 40, "schema": 86, "security": 57, "transparency": 72 }, "provenanceScore": 74, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://api.relaticle.com/v1/companies -H \"Authorization: Bearer YOUR_TOKEN\" -H \"Accept: application/json\"", "claudeCode": "claude mcp add --transport http relaticle https://mcp.relaticle.com", "config": { "mcpServers": { "relaticle": { "url": "https://mcp.relaticle.com" } } } }, "letme": { "capability": "https://letme.dev/crm.records", "tool": "https://letme.dev/relaticle" }, "area": "business", "unitPrices": [ { "item": "Cloud Pro workspace", "unit": "month", "usd": 19, "note": "Billed yearly at $228; $24 billed monthly" }, { "item": "Cloud Scale workspace", "unit": "month", "usd": 49, "note": "Billed yearly at $588; $59 billed monthly" } ], "provenance": { "legalEntity": "Relaticle, Inc.", "domain": "relaticle.com", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://relaticle.com/terms-of-service", "privacy": "https://relaticle.com/privacy-policy", "statusPage": "", "changelog": "https://github.com/relaticle/relaticle/releases", "securityTxt": "valid", "checked": "2026-11-06", "notes": [ "Terms of service effective 26 August 2026 and privacy policy effective 4 November 2026; the footer names Relaticle, Inc. No clause on automated access to the website was found.", "relaticle.com/robots.txt allows all crawlers and names ClaudeBot as allowed.", "security.txt names security@relaticle.com and expires 6 May 2027. The security page asks for reports by email and aims to acknowledge within 48 hours.", "status.relaticle.com did not connect and no status page is linked. relaticle.com/changelog is 404; releases are tagged on GitHub.", "The press page says Relaticle was founded in 2024 and lists 1,811 GitHub stars, verified 26 September 2026. Domain registration date not checked." ], "score": 74 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/relaticle.json", "live": { "slug": "relaticle", "probe": { "target": "https://mcp.relaticle.com", "method": "get", "lastAt": "2026-11-07T19:22:29.462221932Z", "lastOk": true, "lastStatus": 405, "lastMs": 164, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 174, "p95ms24h": 294, "samples24h": 210, "samples30d": 210, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 13 }, { "date": "2026-11-07", "probes": 197, "ok": 197 } ] }, "versions": [ { "registry": "github", "name": "relaticle/relaticle", "version": "v3.8.2", "released": "2026-11-04", "seenAt": "2026-11-07T00:00:54.651079547Z" }, { "registry": "mcp-registry", "name": "com.relaticle/crm", "version": "3.8.2", "seenAt": "2026-11-07T18:16:28.95801333Z" } ], "githubStars": 1811, "securityTxt": { "url": "https://relaticle.com/.well-known/security.txt", "state": "valid", "expires": "2027-05-07T16:01:18Z", "checkedAt": "2026-11-07T16:01:18.554359358Z" }, "llmsTxt": { "url": "https://relaticle.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:33:44.579905089Z" }, "pages": [ { "url": "https://relaticle.com/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:18:13.002922035Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "6e701d3eab86" }, { "url": "https://relaticle.com/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:18:15.26331735Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "1e5fff279d1d" } ], "mcpTools": { "url": "https://mcp.relaticle.com", "checkedAt": "2026-11-07T01:47:13.278550358Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:47:13.278550358Z" }, "updatedAt": "2026-11-07T19:22:29.462221932Z" } }, "edges": [ { "by": 30, "category": "maintenance", "leads": "relaticle", "name": "Maintenance \u0026 community", "reasons": { "a": "Newest changelog entry on 25 October 2026 (task webhook events, reminder events deprecated) (30). 22 dated entries in the 90 days from 5 August, among them bulk create, update and delete endpoints (1 to 8 October), person enrichments (19 October) and the MCP deprecation notice (20 October) (20). Public changelog and support. We didn't test support (10 of 15). Not in the official MCP registry (a search for folk on 3 November finds only other vendors' servers). No official SDK (0). No packages to judge (0). 30 + 20 + 10 + 0 + 0 = 60.", "b": "v3.8.2 tagged on 5 November 2026 and commits on 6 November (30). Thirteen tags between 9 October and 5 November alone (20). More than 2,500 commits since 1 August and merged pull requests numbered past 1,100; the GitHub API did not answer, so open issues and reply times were not counted (15 of 25). Verified com.relaticle/crm namespace in the official MCP registry with the hosted remote (15). CI, tests, security-audit and Dependabot workflows, PHP 8.5 and Laravel 13 (10). 30 + 20 + 15 + 15 + 10 = 90." }, "scores": { "a": 60, "b": 90 } }, { "by": 15, "category": "reliability", "leads": "folk", "name": "Reliability", "reasons": { "a": "Status page at status.folk.app runs on UptimeRobot. Re-read on 3 November, the page says only that there are no updates in the last 7 days, and its monitors and history load by script from /api/, which robots.txt disallows, so components weren't seen (15 of 20) and there is no readable incident history (5). Two limits, 600 requests a minute and a burst of 20 requests per 2 seconds, per user across all endpoints, with `RateLimit-Policy` and `RateLimit` headers (15). 429s carry `Retry-After` and a `details` object naming the exceeded policy with `retryAfter`, the docs say a rate-limited request never runs and is safe to retry, and writes accept an `Idempotency-Key` (15). No SLA found (0). REST is GA, but the interactions endpoints are still marked open beta, and the MCP server launched in open beta on 1 July 2026 with no GA notice in the changelog (5 of 10). 15 + 5 + 15 + 15 + 0 + 5 = 55.", "b": "Graded with the hosted lines on Relaticle Cloud's REST API and MCP server, the surface an outside agent calls; the software also self-hosts. No status page is linked and status.relaticle.com did not connect (0). With no readable history the incident line scores 5. Limits have numbers: 600 a minute per workspace and 300 reads or 60 writes a minute per token in the source, and 120 MCP calls a minute per user in the docs (15). 429 is in the OpenAPI responses and upserts by unique field give a safe retry for creates, but the backoff guidance sits on a docs section we read only as a heading (10 of 15). No SLA (0). Version 3.8, not labelled beta (10). 0 + 5 + 15 + 10 + 0 + 10 = 40." }, "scores": { "a": 55, "b": 40 } }, { "by": 12, "category": "security", "leads": "relaticle", "name": "Security \u0026 auth", "reasons": { "a": "REST keys are workspace Bearer keys with no scopes, and the authentication page, re-read on 3 November, says nothing on rotation or expiry. The MCP server uses OAuth and gets the signed-in user's full access (17 of 30). No read-only mode. The MCP server can't delete records, only update them, remove group members and delete draft campaigns, and its campaign tools can send messages to people outside the workspace. The docs urge human confirmation of each step (10 of 20). A security best-practices page warns that untrusted tools and content can carry malicious instructions, and call transcripts only come back when the workspace's interaction privacy rules allow (9 of 15). No audit log found. Errors carry a `requestId` (2 of 15). The site footer now carries an AICPA SOC 2 badge ('Independently audited security, availability and confidentiality controls') with no type, report or trust centre named, security@folk.app is the contact in the privacy policy, security.txt answered 404 on 3 November and no bug bounty was found. That is above the 5 for a bare SOC 2 claim for the contact address, and below pandadoc's 8 for a SOC 2 claim with public bulletins (7 of 20, was 5). 17 + 10 + 9 + 2 + 7 = 45.", "b": "Personal access tokens are bound to one workspace, take an expiry and per-method permissions (read, create, update, delete, plus read, draft and send email), and travel in headers. OAuth 2.1 through Passport is also offered, but the source says its single `mcp:use` scope authorises the whole toolset (25 of 30). A read-only token is possible; the docs say MCP writes apply immediately and leave confirmation to the client (10 of 20). Synced email reaches the model through the email tools, and no prompt-injection guidance was found (0). Each record has an activity log of field changes and who made them, and admins see it across the workspace (12 of 15). security.txt valid to May 2027, a disclosure address with a 48-hour acknowledgement target and security-audit workflows in CI; the security page says there is no SOC 2 or ISO 27001 (10 of 20). 25 + 10 + 0 + 12 + 10 = 57." }, "scores": { "a": 45, "b": 57 } }, { "by": 11, "category": "ergonomics", "leads": "folk", "name": "Agent ergonomics", "reasons": { "a": "60 MCP tools on the tools page on 3 November (six of them deprecated), with no toolsets or read-only subset (5). REST lists take a limit (3 more, 8 of 25). Paginated lists, people and company filters, notes search with date filters, and batch endpoints for up to 100 records (18 of 20). Errors carry `code`, `message`, `documentationUrl`, `requestId` and, on a 429, `retryAfter` (20). `Idempotency-Key` on writes, the MCP docs mark each tool read-only, destructive or idempotent, and no MCP tool deletes a person, company or object (only draft campaigns can be deleted) (18 of 20). Every call needs `X-API-Version`, and there's no official SDK (6 of 15). 8 + 18 + 20 + 18 + 6 = 70.", "b": "50 MCP tools, six schema resources and a prompt, with no toolsets or read-only subset (5). Filters combine native fields, custom fields and linked records with $and, $or and $not, plus sort, include, `per_page` (MCP maximum 25) and cursors (20). Errors come back as HTTP codes and inline MCP error responses such as `Invalid ability provided.`; no error catalogue was read (12 of 20). Base tool classes set readOnlyHint, destructiveHint, idempotentHint and openWorldHint, and upserts by unique field make creates safe to retry (17 of 20). One URL with OAuth or a token; no official SDK (5 of 15). 5 + 20 + 12 + 17 + 5 = 59." }, "scores": { "a": 70, "b": 59 } }, { "by": 9, "category": "transparency", "leads": "folk", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed service. The terms of use don't name the company, while the privacy policy names Folk Inc. of Delaware, per the 1 October check (12 of 15). Privacy policy now effective 5 October 2026, re-read on 3 November, with the same retention periods (7 days from databases after deletion, 730 days from backups, 930 days from logs), call audio not kept once transcribed, and a promise not to train AI models on personal data. The 24-processor table rests on the 1 October count (28 of 30). Written deprecation policy with a year's support and 6 months' notice, now covering MCP tools too, with dated removals on 13 February 2027 (reminder endpoints and events), 29 March 2027 (past and upcoming interaction lists) and 16 April 2027 (single-record MCP tools) (20). Processors listed with regions, and hosting on AWS in Ireland (20).", "b": "AGPL-3.0 source with an integration exception, and terms for the Cloud service (30). The privacy policy (4 November 2026) gives retention for server logs (90 days), contact forms (12 months) and paused trial workspaces (deleted after 60 days with notice), and names provider categories; no DPA was found (20 of 30). No deprecation policy or dated notices found (5 of 20). The security page lists each Cloud provider and what it receives, with hosting at Hetzner in Germany, and website analytics through Fathom without CRM content (17 of 20). 30 + 20 + 5 + 17 = 72." }, "scores": { "a": 82, "b": 73 } }, { "by": 5, "category": "schema", "leads": "folk", "name": "Schema \u0026 documentation", "reasons": { "a": "OpenAPI 3.1 spec per dated API version, 2025-06-09, with 57 paths and 94 operations on 3 November (25). llms.txt with 121 links and Markdown pages (10). Each MCP tool has a purpose, when-to-call guidance and badges for read-only, destructive and idempotent. We read the docs page, not the server's own tools/list (13 of 20). Typed inputs in the spec (13 of 15). Error table with codes, examples and a `documentationUrl` on every error, per the 1 October check (15). Dated versions in `X-API-Version`, endpoints kept at least a year, 6 months' notice with `Deprecation` and `Sunset` headers, the same policy now applied to MCP tools, and a public changelog (15). 25 + 10 + 13 + 13 + 15 + 15 = 91.", "b": "OpenAPI 3.1 at /openapi.json and /openapi.yaml with 34 operations (25). llms.txt with a when-to-use and when-not section, and developer pages (10). The llms.txt and MCP docs say what the API is for and what it doesn't do (no email over REST, no meetings), while only 5 of 34 operations carry a description (14 of 20). 114 required lists and typed MCP inputs, but few enums (11 of 15). 661 examples and responses for 401, 402, 403, 404, 409, 422 and 429 (14 of 15). /v1 and frequent tagged releases, with no changelog page (relaticle.com/changelog is 404) (12 of 15). 25 + 10 + 14 + 11 + 14 + 12 = 86." }, "scores": { "a": 91, "b": 86 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "folk", "b": "Relaticle, Inc.", "name": "Vendor" }, { "a": "https://api.folk.app/v1", "b": "https://mcp.relaticle.com", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Paid", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "none", "b": "AGPL-3.0", "name": "Licence" }, { "a": "60", "b": "50", "name": "Tools exposed" }, { "a": "yes", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "com.relaticle/crm", "name": "MCP registry" }, { "a": "2026-10-25", "b": "2026-11-05", "name": "Last release" }, { "a": "no date given", "b": "2026-08-26", "name": "Terms last updated" }, { "a": "no date given", "b": "2026-11-04", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "1.8k stars", "name": "Popularity" }, { "a": "3.5/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Relaticle scores 59.6 (C) on agent readiness against folk API + MCP's 58.2 (C), and leads in 2 of 7 scored categories. folk API + MCP leads on reliability, schema \u0026 documentation, agent ergonomics and transparency \u0026 trust.", "question": "Which is better for AI agents, folk API + MCP or Relaticle?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do folk API + MCP and Relaticle need an API key?" }, { "answer": "Yes. folk API + MCP has a hosted endpoint at https://api.folk.app/v1 and Relaticle at https://mcp.relaticle.com.", "question": "Can an agent call folk API + MCP and Relaticle without installing anything?" }, { "answer": "No open-source release is listed for folk API + MCP. Relaticle is open source (AGPL-3.0).", "question": "Are folk API + MCP and Relaticle open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 55 against 40", "Schema \u0026 documentation, 91 against 86", "Agent ergonomics, 70 against 59", "Transparency \u0026 trust, 82 against 73" ], "also": null, "goodFor": "Small teams running a relationship CRM (founders, agencies, investors) who want an agent to keep contacts, notes and follow-ups current.", "slug": "folk", "watchFor": "Object create now fails outright when linking its people or companies fails, changed on 6 October 2026 inside API version 2025-06-09 and announced the same day" }, { "aheadOn": [ "Security \u0026 auth, 57 against 45", "Maintenance \u0026 community, 90 against 60" ], "also": [ "Open source", "No incidents deducted, where folk API + MCP loses 3 points for them" ], "goodFor": "Small teams who want an open-source CRM they can self-host and let an agent write to.", "slug": "relaticle", "watchFor": "Writes over MCP apply immediately, and OAuth's single `mcp:use` scope authorises every tool" } ], "history": { "folk": [ { "causes": [ "evidence", "event" ], "date": "2026-11-03", "delta": -2.7, "from": 60.9, "fromGrade": "C", "to": 58.2, "toGrade": "C" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 60.8, "fromGrade": "C", "to": 60.9, "toGrade": "C" }, { "causes": [ "method" ], "date": "2026-10-08", "delta": -0.2, "from": 61, "fromGrade": "C", "to": 60.8, "toGrade": "C" } ], "relaticle": null }, "job": { "capability": "crm.records", "name": "CRM records" }, "others": [ { "json": "https://www.anchorterminal.com/compare/affinity-vs-folk.json", "title": "Affinity vs folk API + MCP", "url": "https://www.anchorterminal.com/compare/affinity-vs-folk" }, { "json": "https://www.anchorterminal.com/compare/affinity-vs-relaticle.json", "title": "Affinity vs Relaticle", "url": "https://www.anchorterminal.com/compare/affinity-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/attio-vs-folk.json", "title": "Attio API + MCP vs folk API + MCP", "url": "https://www.anchorterminal.com/compare/attio-vs-folk" }, { "json": "https://www.anchorterminal.com/compare/attio-vs-relaticle.json", "title": "Attio API + MCP vs Relaticle", "url": "https://www.anchorterminal.com/compare/attio-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-folk.json", "title": "Breakcold vs folk API + MCP", "url": "https://www.anchorterminal.com/compare/breakcold-vs-folk" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-relaticle.json", "title": "Breakcold vs Relaticle", "url": "https://www.anchorterminal.com/compare/breakcold-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/capsule-crm-vs-folk.json", "title": "Capsule CRM vs folk API + MCP", "url": "https://www.anchorterminal.com/compare/capsule-crm-vs-folk" }, { "json": "https://www.anchorterminal.com/compare/capsule-crm-vs-relaticle.json", "title": "Capsule CRM vs Relaticle", "url": "https://www.anchorterminal.com/compare/capsule-crm-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/close-vs-folk.json", "title": "Close API + MCP vs folk API + MCP", "url": "https://www.anchorterminal.com/compare/close-vs-folk" }, { "json": "https://www.anchorterminal.com/compare/close-vs-relaticle.json", "title": "Close API + MCP vs Relaticle", "url": "https://www.anchorterminal.com/compare/close-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/copper-vs-folk.json", "title": "Copper API vs folk API + MCP", "url": "https://www.anchorterminal.com/compare/copper-vs-folk" }, { "json": "https://www.anchorterminal.com/compare/copper-vs-relaticle.json", "title": "Copper API vs Relaticle", "url": "https://www.anchorterminal.com/compare/copper-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/dynamics-365-sales-vs-folk.json", "title": "Microsoft Dynamics 365 Sales vs folk API + MCP", "url": "https://www.anchorterminal.com/compare/dynamics-365-sales-vs-folk" }, { "json": "https://www.anchorterminal.com/compare/dynamics-365-sales-vs-relaticle.json", "title": "Microsoft Dynamics 365 Sales vs Relaticle", "url": "https://www.anchorterminal.com/compare/dynamics-365-sales-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/folk-vs-freshsales.json", "title": "folk API + MCP vs Freshsales API", "url": "https://www.anchorterminal.com/compare/folk-vs-freshsales" }, { "json": "https://www.anchorterminal.com/compare/folk-vs-hubspot-mcp.json", "title": "folk API + MCP vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/folk-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/folk-vs-nutshell.json", "title": "folk API + MCP vs Nutshell", "url": "https://www.anchorterminal.com/compare/folk-vs-nutshell" }, { "json": "https://www.anchorterminal.com/compare/folk-vs-payani-ai.json", "title": "folk API + MCP vs Payani AI", "url": "https://www.anchorterminal.com/compare/folk-vs-payani-ai" }, { "json": "https://www.anchorterminal.com/compare/folk-vs-pipedrive.json", "title": "folk API + MCP vs Pipedrive API + MCP", "url": "https://www.anchorterminal.com/compare/folk-vs-pipedrive" }, { "json": "https://www.anchorterminal.com/compare/folk-vs-salesflare.json", "title": "folk API + MCP vs Salesflare", "url": "https://www.anchorterminal.com/compare/folk-vs-salesflare" }, { "json": "https://www.anchorterminal.com/compare/folk-vs-salesforce.json", "title": "folk API + MCP vs Salesforce API + MCP", "url": "https://www.anchorterminal.com/compare/folk-vs-salesforce" }, { "json": "https://www.anchorterminal.com/compare/folk-vs-streak.json", "title": "folk API + MCP vs Streak API + MCP", "url": "https://www.anchorterminal.com/compare/folk-vs-streak" }, { "json": "https://www.anchorterminal.com/compare/folk-vs-sugarcrm.json", "title": "folk API + MCP vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/folk-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/folk-vs-twenty.json", "title": "folk API + MCP vs Twenty API + MCP", "url": "https://www.anchorterminal.com/compare/folk-vs-twenty" }, { "json": "https://www.anchorterminal.com/compare/folk-vs-zoho-crm.json", "title": "folk API + MCP vs Zoho CRM", "url": "https://www.anchorterminal.com/compare/folk-vs-zoho-crm" }, { "json": "https://www.anchorterminal.com/compare/freshsales-vs-relaticle.json", "title": "Freshsales API vs Relaticle", "url": "https://www.anchorterminal.com/compare/freshsales-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-relaticle.json", "title": "HubSpot API + MCP vs Relaticle", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/nutshell-vs-relaticle.json", "title": "Nutshell vs Relaticle", "url": "https://www.anchorterminal.com/compare/nutshell-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/payani-ai-vs-relaticle.json", "title": "Payani AI vs Relaticle", "url": "https://www.anchorterminal.com/compare/payani-ai-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/pipedrive-vs-relaticle.json", "title": "Pipedrive API + MCP vs Relaticle", "url": "https://www.anchorterminal.com/compare/pipedrive-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/relaticle-vs-salesflare.json", "title": "Relaticle vs Salesflare", "url": "https://www.anchorterminal.com/compare/relaticle-vs-salesflare" }, { "json": "https://www.anchorterminal.com/compare/relaticle-vs-salesforce.json", "title": "Relaticle vs Salesforce API + MCP", "url": "https://www.anchorterminal.com/compare/relaticle-vs-salesforce" }, { "json": "https://www.anchorterminal.com/compare/relaticle-vs-streak.json", "title": "Relaticle vs Streak API + MCP", "url": "https://www.anchorterminal.com/compare/relaticle-vs-streak" }, { "json": "https://www.anchorterminal.com/compare/relaticle-vs-sugarcrm.json", "title": "Relaticle vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/relaticle-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/relaticle-vs-twenty.json", "title": "Relaticle vs Twenty API + MCP", "url": "https://www.anchorterminal.com/compare/relaticle-vs-twenty" }, { "json": "https://www.anchorterminal.com/compare/relaticle-vs-zoho-crm.json", "title": "Relaticle vs Zoho CRM", "url": "https://www.anchorterminal.com/compare/relaticle-vs-zoho-crm" } ], "panel": null, "scores": [ { "by": 15, "edge": "folk", "folk": 55, "key": "reliability", "name": "Reliability", "relaticle": 40, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 5, "edge": "folk", "folk": 91, "key": "schema", "name": "Schema \u0026 documentation", "relaticle": 86, "weight": 13 }, { "by": 11, "edge": "folk", "folk": 70, "key": "ergonomics", "name": "Agent ergonomics", "relaticle": 59, "weight": 13 }, { "by": 12, "edge": "relaticle", "folk": 45, "key": "security", "name": "Security \u0026 auth", "relaticle": 57, "weight": 14 }, { "by": 0, "edge": "", "folk": 30, "key": "payments", "name": "Payments \u0026 pricing", "relaticle": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 30, "edge": "relaticle", "folk": 60, "key": "maintenance", "name": "Maintenance \u0026 community", "relaticle": 90, "weight": 7 }, { "by": 9, "edge": "folk", "folk": 82, "key": "transparency", "name": "Transparency \u0026 trust", "relaticle": 73, "weight": 7 } ], "summary": "Relaticle scores 59.6 (C) on agent readiness against folk API + MCP's 58.2 (C), and leads in 2 of 7 scored categories. folk API + MCP leads on reliability, schema \u0026 documentation, agent ergonomics and transparency \u0026 trust. Both do crm records.", "tasks": null, "tutorials": [], "verdicts": { "folk": "Dated API versions with a year's support and 6 months' deprecation notice, now applied to MCP tools too, plus `Idempotency-Key` and safe-retry guidance on writes. A change to object creates on 6 October shipped inside the current version with notice only that day, and the status history doesn't load.", "relaticle": "Relaticle is an actively released AGPL CRM whose REST API and MCP server have an OpenAPI spec, annotated tools, workspace-bound tokens with per-method permissions and a free self-hosted route. MCP writes apply at once with no server-side confirmation, OAuth grants the whole toolset, and Cloud has no status page, SLA or certification." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/folk-vs-relaticle", "json": "https://www.anchorterminal.com/compare/folk-vs-relaticle.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/folk-vs-relaticle.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/folk-vs-relaticle.min.md" }, "markdown": "Relaticle scores 59.6 (C) on agent readiness against folk API + MCP's 58.2 (C), and leads in 2 of 7 scored categories. folk API + MCP leads on reliability, schema \u0026 documentation, agent ergonomics and transparency \u0026 trust. Both do crm records.\n\n- folk API + MCP: grade C, 58.2/100, rank #760 of 1510. Markdown https://www.anchorterminal.com/tools/folk.md · JSON https://www.anchorterminal.com/api/v1/tools/folk.json\n- Relaticle: grade C, 59.6/100, rank #697 of 1510. Markdown https://www.anchorterminal.com/tools/relaticle.md · JSON https://www.anchorterminal.com/api/v1/tools/relaticle.json\n- Best CRM and customer-platform tools for AI agents: https://www.anchorterminal.com/best/crm/index.md\n- All 190 crm comparisons: https://www.anchorterminal.com/compare/crm/index.md\n\n## Which one, for what\n\n### folk API + MCP (C)\n\nGood for: Small teams running a relationship CRM (founders, agencies, investors) who want an agent to keep contacts, notes and follow-ups current.\n\nAhead on:\n- Reliability, 55 against 40\n- Schema \u0026 documentation, 91 against 86\n- Agent ergonomics, 70 against 59\n- Transparency \u0026 trust, 82 against 73\n\nWatch for: Object create now fails outright when linking its people or companies fails, changed on 6 October 2026 inside API version 2025-06-09 and announced the same day\n\n### Relaticle (C)\n\nGood for: Small teams who want an open-source CRM they can self-host and let an agent write to.\n\nAhead on:\n- Security \u0026 auth, 57 against 45\n- Maintenance \u0026 community, 90 against 60\n\nAlso in its favour:\n- Open source\n- No incidents deducted, where folk API + MCP loses 3 points for them\n\nWatch for: Writes over MCP apply immediately, and OAuth's single `mcp:use` scope authorises every tool\n\n\n## Why the edge\n\n### Maintenance \u0026 community: Relaticle +30\n\n- folk API + MCP (60): Newest changelog entry on 25 October 2026 (task webhook events, reminder events deprecated) (30). 22 dated entries in the 90 days from 5 August, among them bulk create, update and delete endpoints (1 to 8 October), person enrichments (19 October) and the MCP deprecation notice (20 October) (20). Public changelog and support. We didn't test support (10 of 15). Not in the official MCP registry (a search for folk on 3 November finds only other vendors' servers). No official SDK (0). No packages to judge (0). 30 + 20 + 10 + 0 + 0 = 60.\n- Relaticle (90): v3.8.2 tagged on 5 November 2026 and commits on 6 November (30). Thirteen tags between 9 October and 5 November alone (20). More than 2,500 commits since 1 August and merged pull requests numbered past 1,100; the GitHub API did not answer, so open issues and reply times were not counted (15 of 25). Verified com.relaticle/crm namespace in the official MCP registry with the hosted remote (15). CI, tests, security-audit and Dependabot workflows, PHP 8.5 and Laravel 13 (10). 30 + 20 + 15 + 15 + 10 = 90.\n\n### Reliability: folk API + MCP +15\n\n- folk API + MCP (55): Status page at status.folk.app runs on UptimeRobot. Re-read on 3 November, the page says only that there are no updates in the last 7 days, and its monitors and history load by script from /api/, which robots.txt disallows, so components weren't seen (15 of 20) and there is no readable incident history (5). Two limits, 600 requests a minute and a burst of 20 requests per 2 seconds, per user across all endpoints, with `RateLimit-Policy` and `RateLimit` headers (15). 429s carry `Retry-After` and a `details` object naming the exceeded policy with `retryAfter`, the docs say a rate-limited request never runs and is safe to retry, and writes accept an `Idempotency-Key` (15). No SLA found (0). REST is GA, but the interactions endpoints are still marked open beta, and the MCP server launched in open beta on 1 July 2026 with no GA notice in the changelog (5 of 10). 15 + 5 + 15 + 15 + 0 + 5 = 55.\n- Relaticle (40): Graded with the hosted lines on Relaticle Cloud's REST API and MCP server, the surface an outside agent calls; the software also self-hosts. No status page is linked and status.relaticle.com did not connect (0). With no readable history the incident line scores 5. Limits have numbers: 600 a minute per workspace and 300 reads or 60 writes a minute per token in the source, and 120 MCP calls a minute per user in the docs (15). 429 is in the OpenAPI responses and upserts by unique field give a safe retry for creates, but the backoff guidance sits on a docs section we read only as a heading (10 of 15). No SLA (0). Version 3.8, not labelled beta (10). 0 + 5 + 15 + 10 + 0 + 10 = 40.\n\n### Security \u0026 auth: Relaticle +12\n\n- folk API + MCP (45): REST keys are workspace Bearer keys with no scopes, and the authentication page, re-read on 3 November, says nothing on rotation or expiry. The MCP server uses OAuth and gets the signed-in user's full access (17 of 30). No read-only mode. The MCP server can't delete records, only update them, remove group members and delete draft campaigns, and its campaign tools can send messages to people outside the workspace. The docs urge human confirmation of each step (10 of 20). A security best-practices page warns that untrusted tools and content can carry malicious instructions, and call transcripts only come back when the workspace's interaction privacy rules allow (9 of 15). No audit log found. Errors carry a `requestId` (2 of 15). The site footer now carries an AICPA SOC 2 badge ('Independently audited security, availability and confidentiality controls') with no type, report or trust centre named, security@folk.app is the contact in the privacy policy, security.txt answered 404 on 3 November and no bug bounty was found. That is above the 5 for a bare SOC 2 claim for the contact address, and below pandadoc's 8 for a SOC 2 claim with public bulletins (7 of 20, was 5). 17 + 10 + 9 + 2 + 7 = 45.\n- Relaticle (57): Personal access tokens are bound to one workspace, take an expiry and per-method permissions (read, create, update, delete, plus read, draft and send email), and travel in headers. OAuth 2.1 through Passport is also offered, but the source says its single `mcp:use` scope authorises the whole toolset (25 of 30). A read-only token is possible; the docs say MCP writes apply immediately and leave confirmation to the client (10 of 20). Synced email reaches the model through the email tools, and no prompt-injection guidance was found (0). Each record has an activity log of field changes and who made them, and admins see it across the workspace (12 of 15). security.txt valid to May 2027, a disclosure address with a 48-hour acknowledgement target and security-audit workflows in CI; the security page says there is no SOC 2 or ISO 27001 (10 of 20). 25 + 10 + 0 + 12 + 10 = 57.\n\n### Agent ergonomics: folk API + MCP +11\n\n- folk API + MCP (70): 60 MCP tools on the tools page on 3 November (six of them deprecated), with no toolsets or read-only subset (5). REST lists take a limit (3 more, 8 of 25). Paginated lists, people and company filters, notes search with date filters, and batch endpoints for up to 100 records (18 of 20). Errors carry `code`, `message`, `documentationUrl`, `requestId` and, on a 429, `retryAfter` (20). `Idempotency-Key` on writes, the MCP docs mark each tool read-only, destructive or idempotent, and no MCP tool deletes a person, company or object (only draft campaigns can be deleted) (18 of 20). Every call needs `X-API-Version`, and there's no official SDK (6 of 15). 8 + 18 + 20 + 18 + 6 = 70.\n- Relaticle (59): 50 MCP tools, six schema resources and a prompt, with no toolsets or read-only subset (5). Filters combine native fields, custom fields and linked records with $and, $or and $not, plus sort, include, `per_page` (MCP maximum 25) and cursors (20). Errors come back as HTTP codes and inline MCP error responses such as `Invalid ability provided.`; no error catalogue was read (12 of 20). Base tool classes set readOnlyHint, destructiveHint, idempotentHint and openWorldHint, and upserts by unique field make creates safe to retry (17 of 20). One URL with OAuth or a token; no official SDK (5 of 15). 5 + 20 + 12 + 17 + 5 = 59.\n\n### Transparency \u0026 trust: folk API + MCP +9\n\n- folk API + MCP (82): Closed service. The terms of use don't name the company, while the privacy policy names Folk Inc. of Delaware, per the 1 October check (12 of 15). Privacy policy now effective 5 October 2026, re-read on 3 November, with the same retention periods (7 days from databases after deletion, 730 days from backups, 930 days from logs), call audio not kept once transcribed, and a promise not to train AI models on personal data. The 24-processor table rests on the 1 October count (28 of 30). Written deprecation policy with a year's support and 6 months' notice, now covering MCP tools too, with dated removals on 13 February 2027 (reminder endpoints and events), 29 March 2027 (past and upcoming interaction lists) and 16 April 2027 (single-record MCP tools) (20). Processors listed with regions, and hosting on AWS in Ireland (20).\n- Relaticle (73): AGPL-3.0 source with an integration exception, and terms for the Cloud service (30). The privacy policy (4 November 2026) gives retention for server logs (90 days), contact forms (12 months) and paused trial workspaces (deleted after 60 days with notice), and names provider categories; no DPA was found (20 of 30). No deprecation policy or dated notices found (5 of 20). The security page lists each Cloud provider and what it receives, with hosting at Hetzner in Germany, and website analytics through Fathom without CRM content (17 of 20). 30 + 20 + 5 + 17 = 72.\n\n### Schema \u0026 documentation: folk API + MCP +5\n\n- folk API + MCP (91): OpenAPI 3.1 spec per dated API version, 2025-06-09, with 57 paths and 94 operations on 3 November (25). llms.txt with 121 links and Markdown pages (10). Each MCP tool has a purpose, when-to-call guidance and badges for read-only, destructive and idempotent. We read the docs page, not the server's own tools/list (13 of 20). Typed inputs in the spec (13 of 15). Error table with codes, examples and a `documentationUrl` on every error, per the 1 October check (15). Dated versions in `X-API-Version`, endpoints kept at least a year, 6 months' notice with `Deprecation` and `Sunset` headers, the same policy now applied to MCP tools, and a public changelog (15). 25 + 10 + 13 + 13 + 15 + 15 = 91.\n- Relaticle (86): OpenAPI 3.1 at /openapi.json and /openapi.yaml with 34 operations (25). llms.txt with a when-to-use and when-not section, and developer pages (10). The llms.txt and MCP docs say what the API is for and what it doesn't do (no email over REST, no meetings), while only 5 of 34 operations carry a description (14 of 20). 114 required lists and typed MCP inputs, but few enums (11 of 15). 661 examples and responses for 401, 402, 403, 404, 409, 422 and 429 (14 of 15). /v1 and frequent tagged releases, with no changelog page (relaticle.com/changelog is 404) (12 of 15). 25 + 10 + 14 + 11 + 14 + 12 = 86.\n\n## Score by category\n\n| Category | Weight | folk API + MCP | Relaticle | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 55 | 40 | folk API + MCP +15 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 91 | 86 | folk API + MCP +5 |\n| Agent ergonomics | 13% (16.2 this run) | 70 | 59 | folk API + MCP +11 |\n| Security \u0026 auth | 14% (17.5 this run) | 45 | 57 | Relaticle +12 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 30 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 60 | 90 | Relaticle +30 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 82 | 73 | folk API + MCP +9 |\n| Negative events | ≤15 | -3 | 0 | |\n| **Total** | | **58.2 · C** | **59.6 · C** | |\n\n## Facts side by side\n\n| Fact | folk API + MCP | Relaticle |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | folk | Relaticle, Inc. |\n| Hosted endpoint | `https://api.folk.app/v1` | `https://mcp.relaticle.com` |\n| Transports | HTTP, Streamable HTTP | Streamable HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Paid | Freemium |\n| x402 | no | no |\n| Licence | none | AGPL-3.0 |\n| Tools exposed | 60 | 50 |\n| Read-only variant documented | yes | yes |\n| llms.txt | yes | yes |\n| MCP registry | not listed | `com.relaticle/crm` |\n| Last release | 2026-10-25 | 2026-11-05 |\n| Terms last updated | no date given | 2026-08-26 |\n| Privacy policy last updated | no date given | 2026-11-04 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | not found in the text | not found in the text |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | none | 1.8k stars |\n| Agent reviews | 3.5/5 (2) | none |\n\n## How the scores have moved\n\n### folk API + MCP\n\n- -2.7 on 3 November 2026: new evidence, negative event\n- +0.1 on 27 October 2026: checklist\n- -0.2 on 8 October 2026: checklist\n\n### Relaticle\n\nNo score change since it was listed.\n\n## Verdicts\n\n**folk API + MCP.** Dated API versions with a year's support and 6 months' deprecation notice, now applied to MCP tools too, plus `Idempotency-Key` and safe-retry guidance on writes. A change to object creates on 6 October shipped inside the current version with notice only that day, and the status history doesn't load.\n\n**Relaticle.** Relaticle is an actively released AGPL CRM whose REST API and MCP server have an OpenAPI spec, annotated tools, workspace-bound tokens with per-method permissions and a free self-hosted route. MCP writes apply at once with no server-side confirmation, OAuth grants the whole toolset, and Cloud has no status page, SLA or certification.\n\n## Before you call either\n\n### folk API + MCP\n\n1. Send `X-API-Version: 2025-06-09` on every REST call\n2. Set an `Idempotency-Key` on creates, and treat a 409 `IDEMPOTENCY_REQUEST_IN_PROGRESS` as wait and retry\n3. On a 429, wait for `Retry-After`, and keep under 10 requests a second, since all your keys share 600 a minute and 20 per 2 seconds\n4. Move off reminder endpoints and events to tasks before 2027-02-13, and off single-record MCP tools to the bulk tools before 2027-04-16\n5. Check each record's `status` in batch and bulk MCP results, since one failed record doesn't fail the call\n\n### Relaticle\n\n1. Use a personal access token with only the read permission unless the task writes, since OAuth grants every tool\n2. Ask the user before create, update, delete or send tools; the server applies them at once\n3. Call `get-crm-schema-tool` for an entity before filtering on custom fields, which differ by workspace\n4. Use `POST /v1/people/upsert` or `/v1/companies/upsert` with a unique field to avoid duplicates on retry\n5. Keep MCP calls under 120 a minute per user and REST writes under 60 a minute per token on Cloud Pro\n\n## Questions\n\n### Which is better for AI agents, folk API + MCP or Relaticle?\n\nRelaticle scores 59.6 (C) on agent readiness against folk API + MCP's 58.2 (C), and leads in 2 of 7 scored categories. folk API + MCP leads on reliability, schema \u0026 documentation, agent ergonomics and transparency \u0026 trust.\n\n### Do folk API + MCP and Relaticle need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call folk API + MCP and Relaticle without installing anything?\n\nYes. folk API + MCP has a hosted endpoint at https://api.folk.app/v1 and Relaticle at https://mcp.relaticle.com.\n\n### Are folk API + MCP and Relaticle open source?\n\nNo open-source release is listed for folk API + MCP. Relaticle is open source (AGPL-3.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/folk-vs-relaticle.json, and with the fewest tokens: https://www.anchorterminal.com/compare/folk-vs-relaticle.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"folk\", \"b\": \"relaticle\"}`. From a terminal: `anchor compare folk relaticle`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/folk.json and https://www.anchorterminal.com/api/v1/tools/relaticle.json\n\n## Other comparisons with folk API + MCP or Relaticle\n\n- [Affinity vs folk API + MCP](https://www.anchorterminal.com/compare/affinity-vs-folk.md)\n- [Affinity vs Relaticle](https://www.anchorterminal.com/compare/affinity-vs-relaticle.md)\n- [Attio API + MCP vs folk API + MCP](https://www.anchorterminal.com/compare/attio-vs-folk.md)\n- [Attio API + MCP vs Relaticle](https://www.anchorterminal.com/compare/attio-vs-relaticle.md)\n- [Breakcold vs folk API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-folk.md)\n- [Breakcold vs Relaticle](https://www.anchorterminal.com/compare/breakcold-vs-relaticle.md)\n- [Capsule CRM vs folk API + MCP](https://www.anchorterminal.com/compare/capsule-crm-vs-folk.md)\n- [Capsule CRM vs Relaticle](https://www.anchorterminal.com/compare/capsule-crm-vs-relaticle.md)\n- [Close API + MCP vs folk API + MCP](https://www.anchorterminal.com/compare/close-vs-folk.md)\n- [Close API + MCP vs Relaticle](https://www.anchorterminal.com/compare/close-vs-relaticle.md)\n- [Copper API vs folk API + MCP](https://www.anchorterminal.com/compare/copper-vs-folk.md)\n- [Copper API vs Relaticle](https://www.anchorterminal.com/compare/copper-vs-relaticle.md)\n- [Microsoft Dynamics 365 Sales vs folk API + MCP](https://www.anchorterminal.com/compare/dynamics-365-sales-vs-folk.md)\n- [Microsoft Dynamics 365 Sales vs Relaticle](https://www.anchorterminal.com/compare/dynamics-365-sales-vs-relaticle.md)\n- [folk API + MCP vs Freshsales API](https://www.anchorterminal.com/compare/folk-vs-freshsales.md)\n- [folk API + MCP vs HubSpot API + MCP](https://www.anchorterminal.com/compare/folk-vs-hubspot-mcp.md)\n- [folk API + MCP vs Nutshell](https://www.anchorterminal.com/compare/folk-vs-nutshell.md)\n- [folk API + MCP vs Payani AI](https://www.anchorterminal.com/compare/folk-vs-payani-ai.md)\n- [folk API + MCP vs Pipedrive API + MCP](https://www.anchorterminal.com/compare/folk-vs-pipedrive.md)\n- [folk API + MCP vs Salesflare](https://www.anchorterminal.com/compare/folk-vs-salesflare.md)\n- [folk API + MCP vs Salesforce API + MCP](https://www.anchorterminal.com/compare/folk-vs-salesforce.md)\n- [folk API + MCP vs Streak API + MCP](https://www.anchorterminal.com/compare/folk-vs-streak.md)\n- [folk API + MCP vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/folk-vs-sugarcrm.md)\n- [folk API + MCP vs Twenty API + MCP](https://www.anchorterminal.com/compare/folk-vs-twenty.md)\n- [folk API + MCP vs Zoho CRM](https://www.anchorterminal.com/compare/folk-vs-zoho-crm.md)\n- [Freshsales API vs Relaticle](https://www.anchorterminal.com/compare/freshsales-vs-relaticle.md)\n- [HubSpot API + MCP vs Relaticle](https://www.anchorterminal.com/compare/hubspot-mcp-vs-relaticle.md)\n- [Nutshell vs Relaticle](https://www.anchorterminal.com/compare/nutshell-vs-relaticle.md)\n- [Payani AI vs Relaticle](https://www.anchorterminal.com/compare/payani-ai-vs-relaticle.md)\n- [Pipedrive API + MCP vs Relaticle](https://www.anchorterminal.com/compare/pipedrive-vs-relaticle.md)\n- [Relaticle vs Salesflare](https://www.anchorterminal.com/compare/relaticle-vs-salesflare.md)\n- [Relaticle vs Salesforce API + MCP](https://www.anchorterminal.com/compare/relaticle-vs-salesforce.md)\n- [Relaticle vs Streak API + MCP](https://www.anchorterminal.com/compare/relaticle-vs-streak.md)\n- [Relaticle vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/relaticle-vs-sugarcrm.md)\n- [Relaticle vs Twenty API + MCP](https://www.anchorterminal.com/compare/relaticle-vs-twenty.md)\n- [Relaticle vs Zoho CRM](https://www.anchorterminal.com/compare/relaticle-vs-zoho-crm.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "folk API + MCP vs Relaticle", "url": "" } ], "description": "Relaticle scores 59.6 (C) to folk API + MCP's 58.2 (C) for crm records. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "folk API + MCP C 58.2", "Relaticle C 59.6", "scores" ], "h1": "folk API + MCP vs Relaticle", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/folk-vs-relaticle", "published": "2026-10-01", "section": "tools", "title": "folk API + MCP vs Relaticle for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/folk-vs-relaticle" }, "tokens": { "markdown": 5150, "slim": 2930 }, "version": 1 }