Hiatus vs PocketSmith MCP server

Hiatus 0

Graded on the interface an outside agent can use. Hiatus has none, so context cost, pagination, errors, retries and defaults have nothing to score (0 on each line).

PocketSmith MCP server 55

66 tools on the full server (5), with a separate 40-tool read-only server (5 back). Pagination guide for the REST API (12 of 20). Errors guide (10 of 20). Deletes always need the user's approval, and a read-only server exists; annotations not read (15 of 20). One-click directory listings in Claude and ChatGPT; SDKs not checked (8 of 15). 10 + 12 + 10 + 15 + 8 = 55.

Hiatus 0

Graded on the interface an outside agent can use. With none, the credential, least-privilege, injection and audit lines score nothing (0 of 30, 0 of 20, 0 of 15, 0 of 15). security.txt still returns 404 on 17 October, and no security contact, disclosure policy, bug bounty or certification was found. The privacy policy mentions a regularly tested data security policy without detail (0 of 20).

PocketSmith MCP server 53

OAuth, revocable, tokens encrypted and stateless; scopes not published (22 of 30). A separate read-only server and approval before any delete (18 of 20). Transaction descriptions come from banks and payees; no injection guidance (5 of 15). No audit log of agent calls found (0). A security page with an email for reports and no bug bounty; no security.txt (404) (8 of 20). 22 + 18 + 5 + 0 + 8 = 53.

Hiatus 0

Graded on the interface an outside agent can use. Hiatus has no API or MCP server (hiatusapp.com/developers and /api return 404 on 17 October), so the contract, description, typed-input and example lines score nothing (0 of 25, 0 of 20, 0 of 15, 0 of 15). hiatusapp.com/llms.txt still returns 404 (0 of 10). Nothing to version (0 of 15).

PocketSmith MCP server 46

Schemas not read without sign-in (15 of 25). llms.txt and a Markdown copy of every docs page (10). Capabilities described by task, not per tool (8 of 20). Inputs not verifiable (5 of 15). Usage examples and an errors guide for the REST API (8 of 15). The developer changelog's newest entry is almost eight years old (0). 15 + 10 + 8 + 5 + 8 + 0 = 46.

Hiatus 15

Read with the hosted lines. No status page found, and status.hiatusapp.com still has no DNS record on 17 October (0). No readable incident history (5). No limits published, and no interface for an outside agent (0). No overload or retry guidance (0). No SLA (0). On the App Store since 9 May 2015 and not labelled beta (10).

PocketSmith MCP server 40

Statuspage at status.pocketsmith.com with components for web, mobile and API, feeds and email, none for MCP (15). One 'Unexpected outage and degraded performance' on 18 August 2026 in the last 90 days (10). API rate limits not found in the docs read (0). An Errors guide in the developer docs, no retry guidance found (5 of 15). No SLA found (0). Not labelled beta (10). 15 + 10 + 0 + 5 + 0 + 10 = 40.

Hiatus 20

Read with the hosted rule. No x402, MPP or L402 (0). hiatusapp.com publishes no price, but the App Store still lists the same six Hiatus Premium in-app purchases on 17 October, scored as public plan-only pricing the way the Tomo dossier read App Store prices (10). The app is free, and the terms imply a non-Premium account, but no free tier or card rule is stated, scored as hedged (10 of 20). A person signs up in the app (0).

PocketSmith MCP server 30

No machine payment protocol (0). Plan prices public (10). Free plan (20). A person signs up and approves OAuth (0). 0 + 10 + 20 + 0 = 30.