Infobip API + MCP vs Linq

Infobip API + MCP 66

The MCP servers split by channel, from 1 or 2 tools on the Message server to 27 on RCS, with SMS at 10, re-read in the repository on 4 November. API lists weren't checked for field selection (18 of 25). Message logs and delivery reports by API, filters not re-checked (15 of 20). An error code reference and a handling-errors guide that says which errors to retry (15 of 20). No idempotency key, but the handling-errors guide says a retried send may deliver twice and to look the message up in the logs or wait for a delivery report first (10 of 20, documented retry semantics without a key, as the Infobip Calls listing, scalekit-agentkit and deepl-api). The official Python client's last release was 6.0.0 in January 2026, the JavaScript SDK's in 2023, and each account has its own base URL (8 of 15). 18 + 15 + 15 + 10 + 8 = 66.

Linq 90

The MCP server has two tools, code execution against the SDK and docs search, so its definitions cost little context (25). Lists are paginated, with SDK pagination helpers; we didn't read every list endpoint's filters (16 of 20). Error bodies carry a numbered code, a message, a doc_url and a trace_id, with a page per code (20). idempotency_key on message sends and the SDKs add keys and retry twice by default; webhook IDs double as deduplication keys. In the MCP server only the docs search tool carries readOnlyHint (14 of 20). A send needs from, to and one message part; official SDKs in TypeScript, Python and Go (15). 25 + 16 + 20 + 14 + 15 = 90.

Infobip API + MCP 74

API keys with scopes, expiry dates and optional IP allowlists, plus OAuth 2.0. The hosted MCP servers accept OAuth 2.1 with discovery (30). Scopes separate reading logs from sending traffic, and splitting MCP servers by job keeps an agent to one channel. No confirmation step before sends (15 of 20). Inbound messages are untrusted text. Webhook subscriptions can carry HMAC signatures (X-Hub-Signature), Basic or OAuth credentials or mTLS so an endpoint can verify events, as the webhooks page read on 4 November for the Infobip Calls listing says, but there is no prompt-injection guidance (0 of 15). Message logs and delivery reports by API, and the Account Management MCP lists audit logs among its tools (12 of 15). security.txt, re-read on 4 November, is valid to 2030 and points to a coordinated vulnerability disclosure policy, and the security procedures page says to email Infobip to request access to its bug bounty on Bugcrowd. ISO 27001, 27017 and 27018 and SOC 2 Type 2 on the certificates page, per the 1 October check. No public advisories found (17 of 20, as the Infobip Calls listing and Perplexity's decision-model listing read a disclosure programme, a private Bugcrowd bounty and SOC 2). 30 + 15 + 0 + 12 + 17 = 74.

Linq 50

Bearer API keys in a header, never in the query string, rotated or revoked in the dashboard, scoped to the account with no per-action or read-only scopes (20 of 30). Sandbox keys reach only verified handles, and the MCP server's --code-allow-http-gets and method allow and block lists limit its code tool; no approval step for sends (10 of 20). Inbound iMessage and SMS text reaches the agent, and no prompt-injection guidance was found in the docs or the MCP instructions (0 of 15). Every response carries a trace_id; no operator request log was found in the docs (5 of 15). SOC 2 Type II reports for 2024, 2025 and 2026 and a 2026 penetration test on request, a vulnerability disclosure policy open on the trust centre and SECURITY.md in the SDK repository; no security.txt or bug bounty (15 of 20). 20 + 10 + 0 + 5 + 15 = 50.

Infobip API + MCP 25

No x402, MPP or L402 (0). Per-country SMS prices are public but shown as averages across networks, with per-network prices in the portal. The page's wording was re-read on 4 November, while its figures load by script and rest on the 30 September check (15 of 20). The free trial page, re-read on 4 November, gives self-signup accounts 60 days with free credits that cover about 100 messages a channel, sending only to the phone number and email address verified at sign-up. It doesn't say whether a card is needed (10 of 20). A person signs up in a browser (0). 0 + 15 + 10 + 0 = 25.

Linq 40

No x402, MPP or L402 (0). Public plan prices only, Hobby $0 and Pro from $260 a month, with no per-message fee (10 of 20). Hobby is free with no card, and the Pro trial needs no card (20). linq signup creates an account, an API key and a number from a terminal, but a person has to read back the emailed code, so half (10 of 20). 0 + 10 + 20 + 10 = 40.

Infobip API + MCP 70

The Jasper release notes of 14 October 2026 carry messaging items, among them RCS interactive-session traffic split in webhooks and WhatsApp country bid multipliers (30). Three dated entries in the 90 days from 6 August, the Ink release notes (9 September), Jasper (14 October) and the MCP repository's Observe server for delivery metrics and message logs (12 September) (20). Closed service with release notes and support (8 of 15). The MCP is in the official registry as com.infobip/mcp, and the official Python client 6.0.0 (22 January 2026) is current, while the JavaScript SDK's last release was in November 2023 (10 of 15). The JavaScript SDK's dependencies are stale (2 of 10). 30 + 20 + 8 + 10 + 2 = 70.

Linq 83

@linqapp/sdk and @linqapp/sdk-mcp 0.80.0 on 5 November 2026 (30). Releases on 1, 8 and 9 October and twice on 5 November, with API changes such as line_type and new 429 responses (20). Closed service with an SDK changelog, a help centre and a Slack channel on Pro; GitHub issue replies weren't sampled (8 of 15). io.github.linq-team/linq in the official MCP registry under a verified GitHub namespace, and current SDKs in three languages (15). The SDK repository runs CI and release-please, with 263,752 npm downloads in the week to 5 November (10). 30 + 20 + 8 + 15 + 10 = 83.

Infobip API + MCP 72

Statuspage at status.infobip.com with components and history (20). Its history pages, re-read on 4 November, list no incident since 6 August that stopped the messaging APIs everywhere. The largest were a Global (Europe) traffic processing degradation on 15 August (03:42 to 05:52 UTC), a Global (Europe) Customer Portal and HTTP API degradation on 26 August (11:41 to 12:56 UTC), processing issues in five regions on 25 September (12:27 to 12:57 UTC, the United States not among them), SMPP down for accounts on US infrastructure from 23:02 UTC on 19 October to 00:40 on 20 October, and a US HTTP API degradation on 28 October (17:15 to 17:42 UTC). Each names one region, a group of regions, one channel or one protocol, so this run reads them as partial and minor (20), where the 1 October check read the 10 and 15 August Europe degradations as two majors (5). The 1 October third-party incident count (IsDown) is struck, a barred status mirror. The rate-limits page gives numbers for some messaging endpoints (120 requests a minute for SMS logs, 60 for Email logs and reports), says most send endpoints have none and that each endpoint's reference lists its limits, but the references render by script and weren't read (10 of 15). The rate-limits and handling-errors pages give exponential backoff with a retry cap for 429, and say a retried send may deliver twice, Infobip has no public idempotency key, and to check message logs or delivery reports before retrying (12, safe-retry guidance without a key, as the Infobip Calls listing). No SLA found (0). The SMS and WhatsApp APIs are generally available, and the Message, Provision and Observe MCP servers are early access (10). 20 + 20 + 10 + 12 + 0 + 10 = 72.

Linq 83

Read with the hosted lines. status.linqapp.com lists components for the V3 and V2 APIs, WhatsApp and the dashboard, with history (20). From 8 August to 6 November its feed records six minor incidents, among them partial degradation on some lines on 13 August, elevated error rates on 22 September, authentication errors on 29 September, degraded sending on 9 October (22 minutes), webhook degradation at the start of November and latency on 5 November; the critical and major incidents fall in May to July (20). Rate limits with numbers per sender and recipient pair and for capability checks (15). 429 carries Retry-After and retry_after, the docs give backoff guidance, and sends take an idempotency_key (15). llms.txt states 99.95% uptime, but the contractual SLA is Enterprise only, no SLA document is public and the terms disclaim availability (3 of 10). Partner API v3 is generally available (10). 20 + 20 + 15 + 15 + 3 + 10 = 83.

Infobip API + MCP 82

Closed service with clear service terms (15). Privacy notice, a data retention notice, a data transfer agreement, information security terms and a sub-processor page, per the 1 October check (25 of 30). A deprecation policy, re-read on 4 November, says deprecated endpoints keep working until a sunset date, are flagged in the OpenAPI file and in Deprecation, Sunset and Link response headers, and trigger email to active users. Infobip sets the period per endpoint with no fixed minimum, and no dated messaging notice was found in the release notes read (10 of 20, as the Infobip Calls listing). The sub-processor page says where customer data is stored and accessed, lists the EU region-locked data centre separately, and sends change alerts by email, per the 1 October check (15 of 20). 15 + 25 + 10 + 15 = 65.

Linq 72

Closed service with clear terms from Linq App Inc. (14 April 2026); SDKs, MCP server and CLI are Apache-2.0 (15 of 30). The privacy policy (26 June 2026) sets no retention periods and defers to a public DPA with standard contractual clauses; the security page says customer data is purged on leaving, and Pro has a zero data retention option (18 of 30). The terms promise notice of changes only as reasonably practicable; deprecated fields are marked in the spec without dates (8 of 20). Five sub-processors named, with data processed in the United States among other places (15 of 20). 15 + 18 + 8 + 15 = 56.