Fuse MCP vs ZeroBounce

Fuse MCP 40

Graded as a hosted service. FuseAI's terms bar automated systems or scripts from extracting content from the Services, which they define to include the website, so every fuseai.com page keeps its 8 October reading, not re-read on 4 November 2026. No status page is linked from the site, the docs or the sitemap (0). No readable incident history (5). MCP limits are published at 60 requests a minute and 5,000 a day per user (15). The server answers 429 with RATE_LIMIT_EXCEEDED and the docs say to back off and retry. No Retry-After is documented for the MCP server and there are no idempotency keys, so backoff guidance alone (10). No SLA found (0). The server carries no beta or preview label (10). 0 + 5 + 15 + 10 + 0 + 10 = 40.

ZeroBounce 75

Hosted lines. Statuspage at status.zerobounce.net with API, API-US, API-EU, Bulk API, website and Cloudflare components (20). The incident feed for 8 August to 6 November shows a 6-minute members platform disruption on 9 September, about 3 minutes of reduced EU API availability on 1 October, and a file upload issue on 26 October resolved within 6 minutes, all minor (20). Limits published per endpoint group with numbers and block lengths (15). 429 is documented with advice to throttle, but no Retry-After, and a block can last an hour or a day (10 of 15). No SLA found (0). Generally available (10). 20+20+15+10+0+10 = 75.

Fuse MCP 35

Readings are per the 8 October check, not re-read on 4 November 2026. The tool reference is dated 7 October 2026 and records the October 2026 rebuild of the tool list, within 30 days today (30); it drops to 20 after 6 November unless a newer dated change appears. No changelog or release notes found, so three dated entries in 90 days could not be shown (0). No public changelog or issue tracker. Support is by email at support@fuseai.com, not tested (5 of 15). No readable registry page names the server and no official SDK was found (0). No package to assess (0 of 10). 30 + 0 + 5 + 0 + 0 = 35.

ZeroBounce 70

Closed service. The JavaScript SDK 3.0.0 was published on 25 October 2026 (30). No API changelog; the dated changes found in 90 days are that release and status-page notices, fewer than three releases (10 of 20). Support by email and 24/7 chat per the docs, a public status page; replies not tested (10 of 15). Official SDKs in many languages and an MCP server (15). Package health not checked (5 of 10). 30+10+10+15+5 = 70.

Fuse MCP 43

Readings are per the 8 October check, not re-read on 4 November 2026. OAuth authorisation code with PKCE and dynamic client registration, one-hour access tokens and rotating refresh tokens. The only scope is mcp:tools, so every connection has the user's full permissions (22 of 30). There is no read-only mode. Destructive tool descriptions tell the model to get the user's confirmation, but the server enforces none of this and changes apply at once. Billing, API key and team-removal tools are left out (8 of 20). Tools return inbox email, LinkedIn messages and scraped web pages, and the only guidance found is to connect trusted clients and keep approval prompts on (4 of 15). Audit logging is listed for Enterprise and a credit usage ledger exists, with no per-call log for MCP documented (4 of 15). Programme 7 to 5. The home page lists SOC 2 Type I and CASA Tier 2 with no report, trust centre, security.txt, disclosure policy or bug bounty found, and a bare certification claim with no report or reporting route scores 5, as for zamp. 22 + 8 + 4 + 4 + 5 = 43.

ZeroBounce 65

Several named keys besides a Master key, regeneration, deactivation and IP whitelists (25), less 10 because the documented calls carry the key in the api_key query string (15 of 30). Validation only reads, though file and list endpoints can delete uploads (12 of 20). Results are structured status codes with little free text (10 of 15). API usage and dashboard statistics endpoints (10 of 15). SOC 2 Type 2, ISO/IEC 27001:2022, continuous testing with Intigriti and penetration testing with BitSentinel; no public disclosure policy found (18 of 20). 15+12+10+10+18 = 65.

Fuse MCP 57

Readings are per the 8 October check, not re-read on 4 November 2026. 290 tools and about half a megabyte of definitions, with no toolsets, dynamic loading or read-only subset. The docs warn that some clients pass only the first 40 tools (5 of 25). List reads return a data array with pagination, searches return a scroll token or cursor, and tools take limits and filters (18 of 20). Rejected calls set isError and return codes such as TOOL_ARGUMENT_VALIDATION_FAILED with the missing field named. Other failures are short plain text (15 of 20). The docs say every tool carries readOnlyHint or destructiveHint, which we could not read from the server. No idempotency keys, and sends are not marked destructive (14 of 20). No official SDK found, and most changes need an id looked up first (5 of 15). 5 + 18 + 15 + 14 + 5 = 57.

ZeroBounce 69

A compact JSON result per address, batch validation and a file API for lists (18 of 25). Little to paginate; file status and results by file id (10 of 20). Status and sub-status codes say why an address failed, and the error page explains 400, 404 and 429 (14 of 20). Unknown results are free and safe to retry; repeated validations are charged again (12 of 20). Many official SDK wrappers and an MCP server, with few required parameters (15). 18+10+14+12+15 = 69.

Fuse MCP 52

Readings are per the 8 October check, not re-read on 4 November 2026. Closed service with published terms of service, last updated 1 July 2026 (unchanged on 4 November), naming FuseAI, LLC (15). The privacy policy of the same date is general. Retention is as long as necessary with no periods, and no DPA or subprocessor list was found (10 of 30). No deprecation policy. The docs record the October 2026 removal of the earlier tools and that the earlier server URL keeps working (5 of 20). The docs name 39 external data providers. Hosting, data locations and subprocessors are not disclosed (6 of 20). 15 + 10 + 5 + 6 = 36.

ZeroBounce 63

Closed service under terms naming Hertza L.L.C. (ZeroBounce) of Nevada; SDKs and MCP server open source (15 of 30). The data protection page says uploaded data is never kept more than 30 days, the privacy policy of 30 June 2026 keeps account data 'as long as needed', and EU and UK DPAs are published (22 of 30). An API migration page, with no dated deprecation policy (6 of 20). A sub-processor list naming each provider and the data exchanged (16 of 20). 15+22+6+16 = 59.

Fuse MCP 30

Readings are per the 8 October check, not re-read on 4 November 2026. No x402, MPP or L402 (0). Plan prices and the credit cost of each action are public, and get_credit_prices returns them. Top-up prices are shown only in the app and the Free allowance is stated two ways (15 of 20). A Free plan exists at $0. The Solo plan card is where MCP is listed, and we could not confirm that Free includes it or that signup needs no card (15 of 20). A person signs in through a browser to approve each connection (0). 0 + 15 + 15 + 0 = 30.

ZeroBounce 35

No x402, MPP or L402 (0). Per-credit prices public, from $39 for 2,000 validations (20). Freemium of 100 validations a month for business or premium domains; a card requirement isn't stated, and free webmail addresses don't qualify (15 of 20). A person signs up in a browser (0). 0+20+15+0 = 35.