Grep AI vs Mojeek Web Search API

Grep AI 74

The changelog's newest entry is v3.71 on 20 October 2026, 13 days before this check (30). 14 dated changelog entries since 4 August, from v3.1.1 on 7 August to v3.71 on 20 October (20). Closed service with a public changelog and support at support@parcha.ai. We didn't test whether support answers (8). Current SDKs in two languages per the 8 October check (@parcha/agentrun and parcha-agentrun 0.2.1, 30 September), with docs that lag them. Not found in the official MCP registry (12). The skills repository runs a test workflow and hasn't changed since 30 September. The SDK repositories named in the package metadata asked for credentials, so their CI wasn't read (4). The 8 October PyPI reading came from a path pypi.org's robots.txt disallows and is struck; npm and PyPI didn't answer on 2 November.

Mojeek Web Search API 10

Read for a closed service. No API changelog, release notes or dated API change were found, and the blog's posts since 2024 are about search in general, so the last change can't be dated (0). No dated changes in the 90 days from 8 August (0). A staff member answered API questions on the community forum within a day in December 2025 and October 2026, and support is by email; no public changelog (10 of 15). No official SDKs or MCP server (0). No public packages or CI to measure (0). 0 + 0 + 10 + 0 + 0 = 10.

Grep AI 83

Public OpenAPI document at api.grep.ai/api/v2/openapi.json, now 128 operations on 98 paths and 159 schemas (25). llms.txt and a Markdown twin of each developer page (10). Most operations carry a description, and the effort field says what each tier returns and how long it takes. 19 operations have none, and the MCP server card gives each of its 137 tools one line. The MCP input schemas need OAuth and weren't read (12). 75 enums, numeric bounds and additionalProperties: false on the run request (12). Curl examples and an 11-code error registry in the docs, but the OpenAPI document has no examples and documents only 200 and 422 responses (9). The path is versioned, v1 and 42 v2 operations are marked deprecated, and the dated changelog now runs to v3.71 on 20 October 2026, with 14 entries since 4 August (15).

Mojeek Web Search API 29

No OpenAPI or other machine-readable contract (0). No llms.txt (404) and no Markdown pages for agents (0). The parameters page states what each parameter does, with notes on when not to use reg and clufmt, but nothing on when another endpoint fits better (12 of 20). Every parameter has a type, defaults and valid ranges (tlen 0 to 127, dlen 0 to 511, rbb and lbb 1 to 100, up to 25 domains), though reg is called an enum without listing its values (11 of 15). One curl example and annotated JSON and XML response formats; errors appear only as a status string with one example (6 of 15). No API version, changelog or dated release notes, and the quickstart and the parameters page give different hosts (0). 0 + 0 + 12 + 11 + 6 + 0 = 29.

Grep AI 64

OAuth through Descope with five scopes, and API keys that can be created with a subset of scopes, listed and revoked through the API (30). Read scopes, validate_only and dry_run on agent changes, a per-run max_cost_usd and versioned restores. No confirmation step for deletes or for making a run public (14). Reports are built from untrusted web pages. The docs describe an SSRF-guarded fetch for context files, and no prompt-injection guidance for callers was found (3). Each run has a timeline of execution events, and billing transactions and usage are readable through the API (12). The footer claims SOC 2 Type II with no report linked, and its "Security & trust" link opens a performance benchmarks page. security.txt returns 404, and no disclosure policy or bug bounty was found, so this is a bare SOC 2 claim, which this run reads as 5 (5). Webhooks are signed with the API key itself.

Mojeek Web Search API 15

One key per account, documented only as the api_key query parameter, and rotation or revocation is by email to the API team (a staff reply of 22 October 2026 on the community forum asks for the key's last 8 digits). One all-powerful key (10) less 10 for the key in the URL (0). Search is read-only and there is nothing to write, but no scoped or restricted key (10 of 20). Results are third-party titles and snippets, with no prompt-injection guidance found (0). No audit log or per-call usage view was found in the docs; the FAQ mentions budget alerts on the account (0 of 15). security.txt names security@mojeek.com, with no Expires field. No bug bounty, disclosure policy, SOC 2 or ISO 27001 found; the API page claims compliance with European rules such as the EU Data Act without a certification (5 of 20). 0 + 10 + 0 + 0 + 5 = 15.

Grep AI 40

No machine payment protocol on the live endpoints. The changelog of 8 May 2026 announces x402 and MPP, and the gateway answered 503 gateway_disabled on 8 October and again on 2 November 2026 (0). Plan and credit prices are public, but only the medium tier's credit cost is published and the page and its Markdown twin disagree on credits per dollar (10). 100 free trial credits on the pricing page, 500 Wallet credits for new personal accounts in the 4 October changelog entry, and 500 for an owner's first agent through AgentID. The pricing page doesn't say whether a card is needed, and its table marks the trial without API access (15). AgentID sign-in is documented as needing no human account, but it depends on an AgentMail inbox and a browser step, and we didn't run it (15).

Mojeek Web Search API 20

No x402, MPP or L402 (0). Per-request prices published without login, £2 and £3 per 1,000 requests (20). The FAQ says a free credit comes with the Startup plan, but a bank card is required to open an account (0). A person signs up in a browser and adds a card (0). 0 + 20 + 0 + 0 = 20.

Grep AI 61

Closed service with published terms, written as an order-form contract that still points to grep.parcha.ai. The SDK packages state no licence, and the skills package is MIT (12). Section 12 of the terms says AI providers retain nothing and customer data isn't used for training. Section 4.2 grants a perpetual licence to use customer data to improve the platform, and the privacy policy gives retention only as "as long as needed". No DPA found (12). v1 is marked deprecated, /research answers with a deprecation: true header and a successor link, and 31 MCP tools are labelled deprecated, all without dates or a written policy (8). The privacy policy names Google Analytics and PostHog and says data may be processed in any country. No subprocessor list found (4).

Mojeek Web Search API 68

Closed service with API terms naming Mojeek Limited under English law (15 of 30). The API page states 90-day retention, zero retention on request, no sub-processors and that Mojeek is the processor and the customer the controller, while the API terms say both parties are independent controllers under GDPR, and the privacy policy of 2 February 2022 covers only the website (12 of 30). The terms promise 30 days' notice of material changes and of price changes, but there is no deprecation policy or dated notices (5 of 20). The API page says there are no sub-processors and infrastructure is owned and run in Europe, in a UK data centre per the about page (18 of 20). 15 + 12 + 5 + 18 = 50.

Grep AI 50

Graded on the hosted API and MCP server. status.grep.ai runs on incident.io, and since 30 October 2026 it has an API component beside Website (20). Two incidents in the 90 days from 4 August, read from the page's feed and incident pages. On 4 September "Grep.ai currently unavailable" said Grep.ai was "experiencing an outage" for 24 minutes, and on 30 October the Website and API components were both in full outage from 17:17 to 17:24 UTC after an infrastructure provider's failure. Each is a full outage of the whole service, which this run reads as a major however short, so two majors (5). The 8 October check read the September outage as minor by its length. No rate limit numbers found in the docs or the OpenAPI document (0). 429 rate_limited carries Retry-After, and run creation takes an Idempotency-Key with documented replay rules (15). The FAQ mentions SLA guarantees for enterprise customers, and no SLA is published (0). API v2 and the MCP server carry no beta label. The SDKs are at 0.2.1 per the 8 October check, and PyPI classified the Python one as Alpha then (10).

Mojeek Web Search API 45

Read with the hosted lines. status.mojeek.com is a Site24x7 StatusIQ page with Search, Website, Blog and Community components. It is drawn by script, so only its RSS feed could be read, which shows each component's current state (Search operational since 7 September 2026) and no incident entries (15 of 20). No readable incident history (5). Rate limits are published per plan, 5 a second and 100,000 a day on Startup, 10 a second and 400,000 a day on Business (15). Over the daily limit the JSON status reads 'ERROR: Daily Limit Reached'; no HTTP 429, Retry-After or backoff guidance was found (0). No SLA, and the API terms say the service is provided as is and may be interrupted without notice (0). Generally available, with only the lr parameter marked beta (10). 15 + 5 + 15 + 0 + 0 + 10 = 45.