Higgsfield API vs sync. labs MCP server

Higgsfield API 80

Hosted reading. status.higgsfield.ai now shows Models API, Webhooks and Developer Console components with 90-day uptime bars (20). Its incident and maintenance feed is empty and its history pages redirect to the front page, so the page has never posted an incident, which this run reads at 20, not as a clean record (20 of 30). Concurrency limits are published with numbers, 2 for a new account and 10, 20 and 40 at $25, $100 and $1,000 of funds added in 28 days, and the queue limit is a stated multiple of concurrency (15). Since late October, requests over the concurrency limit are queued, and a full queue answers 429 with Retry-After, a retryable flag and account_queue_full. The docs give backoff with jitter, a retry table and idempotency keys for submissions (15). The API terms say self-serve customers get no uptime commitment and the docs offer SLAs only in an enterprise agreement, with none published (0). No beta or preview label on the API (10). 20 + 20 + 15 + 15 + 0 + 10 = 80.

sync. labs MCP server 43

Status page at status.sync.so with maintenance and previous incidents (20). History not read (5). No MCP limits found (0). The source has abort-signal handling and recovery guidance for long jobs (8 of 15). No SLA found (0). Version 0.2.4, not labelled beta (10). 20 + 5 + 0 + 8 + 0 + 10 = 43.

Higgsfield API 81

Submissions return a small JSON handle, results are URLs, and webhooks replace polling (20 of 25). Resolution, duration and aspect ratio set output size per model. No endpoint to list requests was found in the docs (10 of 20). The error page says which statuses to retry, and the limit now arrives as a 429 with Retry-After, code, retryable and retry_after_seconds, and expired or disabled keys as 403 with a code. Other errors are message strings the docs warn against parsing (16 of 20). Idempotency-Key on every generation endpoint, with a 422 on a reused key with different parameters, plus cancel for queued requests (20). Few required parameters, sensible defaults, and official Python and TypeScript SDKs (15). 20 + 10 + 16 + 20 + 15 = 81.

sync. labs MCP server 55

A generated catalogue filtered by client profile, curated for ChatGPT (15). Project history and estimates (12 of 20). Recovery tools; errors not documented (8 of 20). Annotations not read (5 of 20). OAuth or a key, npm package and library use (15). 15 + 12 + 8 + 5 + 15 = 55.

Higgsfield API 64

Closed service with API terms dated 2 September 2026 that are specific on licence, resale and outputs. SDKs are MIT and Apache-2.0 (15). The API terms state training on inputs and outputs by default with a workspace opt-out, request records kept while the account is active, media kept at least seven days and zero retention only by enterprise addendum, and the privacy policy of 31 October 2026 agrees on training. The docs now let a request set its own retention down to one hour and delete a finished request, but the docs' opt-out page says it covers outputs only, against the terms' inputs and outputs. The DPA the terms incorporate was not found (20 of 30). The status page carries a dated notice that platform.higgsfield.ai stops serving the API by 31 October 2026, the terms promise efforts to announce model removals, and legacy endpoints are labelled, but there is no changelog (10 of 20). Partner models are named by vendor in the catalogue. The subprocessor list is said to sit in the trust centre, which was unread, and no data locations were found (5 of 20). 15 + 20 + 10 + 5 = 50.

sync. labs MCP server 44

MIT open source (30). Data handling not read (5 of 30). No deprecation policy; earlier tool names documented as superseded (5 of 20). Subprocessors not found (0). 30 + 5 + 5 + 0 = 40.

Higgsfield API 70

/docs/openapi.json is public OpenAPI 3.1 but covers 9 paths, and llms.txt calls it supplementary. Each model page carries its own full JSON Schema (15 of 25). llms.txt, llms-full.txt and Markdown twins of every page (10). Model pages state the endpoint, usage notes and limits, with little on when to pick one model over another (14 of 20). Schemas have enums, length and item limits, required fields and additionalProperties: false (14 of 15). cURL, Python and TypeScript examples on each page and a status-code table. Most errors are still a FastAPI detail string, though queue, admission and key errors now carry a code (12 of 15). Endpoints carry a version segment, and no changelog was found in the docs or sitemap on 2 November (5 of 15). 15 + 10 + 14 + 14 + 12 + 5 = 70.

sync. labs MCP server 81

Tools generated from the public API specification plus workflow tools, with typed schemas in the source (25). llms.txt and .md pages (10). Tool table with descriptions (14 of 20). Typed from the API spec (12 of 15). Examples and an estimates tool; errors not documented (8 of 15). Tags v0.2.2 to v0.2.4 and dated commits (12 of 15). 25 + 10 + 14 + 12 + 8 + 12 = 81.

Higgsfield API 48

Hosted reading. A key ID and secret pair created in the console and owned by a personal or organisation account, with an optional expiry, last-used date, tags, disable and delete, and rotation advised, but no permission scopes. Secrets travel in a header, not the URL (20). No read-only or restricted keys and no confirmation step. Organisations have admin and member roles, only admins manage keys, and an estimate call shows cost before spending (3 of 20). The API returns generated media and no third-party text (10). Request history and usage analytics by key in the console and an X-Correlation-ID on every response, no audit log found (8 of 15). A valid security.txt with a PGP key, expiring 12 September 2027, and a disclosure clause in the terms. No bug bounty found. The trust centre at trust.higgsfield.ai is drawn by script and was unread, so certifications are unchecked (7 of 20). Webhook deliveries are now signed with the Standard Webhooks scheme, with secret rotation. 20 + 3 + 10 + 8 + 7 = 48.

sync. labs MCP server 38

OAuth per organisation, or an API key in the environment (22 of 30). No read-only mode (3 of 20). Media in and out, no third-party text (10). No audit log found (0). No security programme found (3 of 20). 22 + 3 + 10 + 0 + 3 = 38.

Higgsfield API 20

No x402, MPP or L402 (0). Per-second and per-image list prices for each model are public at open.higgsfield.ai/pricing without a login (20). No free credits or card-free trial were found. A new account gets sign-up discounts and 2 concurrent generations, and usage draws on a prepaid balance (0). A person signs up in a browser and creates the key in the console (0). 0 + 20 + 0 + 0 = 20.

sync. labs MCP server 30

No machine payment protocol (0). Per-second prices published (20). A free try for short videos (10 of 20). A person signs up (0). 0 + 20 + 10 + 0 = 30.