Intrinio vs TickerLayer

Intrinio 20

No x402, MPP or L402 (0). Plan prices are public without a login, $150, $333 rising to $999, and $1,250 and up, with no per-call price (10). Both self-serve plans say a free trial is available, and the trial length and card requirement were not found on the pricing, plan or terms pages, since the plan pages are drawn by script (10 of 20). A person signs up in a browser; no key API was found (0). Total 20.

TickerLayer 92

x402 on the vendor's own gateway, x402.tickerlayer.com, for 41 GET routes. That is six routes for each of stocks, forex, crypto, indices, ETFs and commodities, plus bond yields and four market-calendar routes. Perpetuals, Futures CFDs, the add-ons, the symbol catalogue and WebSocket need a key. Between massive's 30 for US stock routes only and financial-datasets' 35 for every documented data endpoint (32 of 40). Per-call x402 prices from 0.01 to 0.10 USDC in the catalogue and docs, and plan prices per feed on the pricing page, all without a login (20). A Free plan of 3,000 REST calls every 30 days with 'no card', per llms.txt (20). An agent with a funded Base wallet pays per call with no account or key (20). 32+20+20+20 = 92.

Intrinio 43

No OpenAPI document was found. The SDKs are generated from a spec that declares API version 2.135.4, but the spec itself isn't published, and the MCP server's tool definitions aren't in any public source (5 of 25). docs.intrinio.com/llms.txt and intrinio.com/llms.txt return 404, and there are no Markdown pages (0 of 10). Each endpoint page states what it returns with its parameters, with little on when not to use a call (12 of 20). Parameters are typed, with required ones marked and allowed values in prose (9 of 15). Code samples in six languages on every endpoint, and a response codes page that lists codes without a body format (10 of 15). The v2 path is versioned, but the version history lists 2.0.0 to 2.6.2 with no dates and is out of step with the SDK's API version (7 of 15). Total 43.

TickerLayer 88

OpenAPI 3.1 at tickerlayer.com/openapi.json (TickerLayer Market Data API 1.0.0, about 386,000 characters), read in its first 100,000 and last 96,000 characters, with summaries, descriptions, tags and examples on the operations read and shared 400, 401, 403, 404, 429 and 503 responses. The WebSocket is described in prose only and the hosted MCP tool schemas weren't read (23 of 25). llms.txt, llms-full.txt and a Markdown twin of every docs page (10). Operation descriptions state purpose and plan gating, and the vendor's skill says which MCP tool to use for each question and when not to, such as get_quote not being the tool for a price. Financial-datasets took 17 (17 of 20). Enums on interval, multiplier, timespan and sort, format: date on dates, bounded limit, required path parameters, as for massive (13 of 15). Examples on most parameters and responses, one Error schema with ten fields and documented codes, but the codes appear only as example values with no enum or table (13 of 15). A dated changelog of the last 50 changes, 8 September to 6 November 2026, but no version in the REST paths ('no /v1/') and the spec at 1.0.0. Above twelve-data's 10 for monthly updates and below massive's 15 for versioned paths (12 of 15). 23+10+17+13+13+12 = 88.

Intrinio 35

One account key with no scopes, documented first as api_key in the query string and second as a Bearer header, with no rotation or expiry found. Public keys for browsers are restricted to listed domains. The MCP server uses OAuth 2 with PKCE S256, dynamic client registration, a revocation endpoint and one scope (20 less 10 for the query string, so 10). Every endpoint is a read and the MCP page says the server cannot trade or change the account (15 of 20). News bodies and filing text are third-party content, with no guidance on treating them as untrusted (5 of 15). The account page shows limits and usage per subscription; no per-call log was found (3 of 15). security.txt returns 404, and no disclosure policy, bug bounty, SOC 2 or ISO 27001 was found. The privacy policy says the company processes data under the GDPR (2 of 20). Total 35.

TickerLayer 49

A plain account key with no scopes, shown once and replaced by regenerating it in the dashboard (20). The OpenAPI file defines an apiKey query parameter as a 'compatibility fallback', and the WebSocket takes the key only in its URL, so 10 off. The MCP server adds OAuth 2.1 with PKCE S256, dynamic registration, refresh tokens, a revocation endpoint and one scope, market.read. Twelve-data took 18 on the same pattern, one less here because the WebSocket has no header option (17 of 30). Every operation reads data, and the OAuth scope is read-only, as for twelve-data and financial-datasets (15 of 20). Responses are prices, bars, symbols, calendars and yields. There is no news feed, and SignalPoint signals are structured fields, so no untrusted text reaches the agent (10 of 15). Rate-limit headers on every response, quota 429s that state the limit and when it renews, and a dashboard list of WebSocket connections with source IP, key and how each ended (24 October 2026). No per-call REST log for the key holder was found, though the privacy policy says request logs are kept (7 of 15). security.txt answered a client error, and no disclosure policy, bug bounty, SOC 2 or ISO 27001 was found (0 of 20). 17+15+10+7+0 = 49.

Intrinio 83

Graded as a hosted service. Atlassian Statuspage at status.intrinio.com with APIv2 and APIv1 components (20). The incident feed's newest entry is a delayed SIP feed for CTA on 24 June 2026, so the 90 days to 3 November are clean (30). Limits are published in part. Pages above 100 records and bulk requests are 1 a minute on free feeds and 1 a second on paid ones, free feeds are throttled at 100 requests a second, and the daily and per-minute caps for a plan are shown only on the account page (8 of 15). A 429 carries an explanation of the limit and a 503 marks throttling or the 25-second timeout, with no Retry-After or backoff guidance (5 of 15). The Enterprise plan lists an SLA (10). The REST API is generally available (10). Total 83.

TickerLayer 70

Read with the hosted lines, on the REST API. status.tickerlayer.com is an UptimeRobot page linked from the site header (20). Its monitors and history load by script from /api/, which its robots.txt disallows, so no incident record was read, as for eodhd and apitemplate-io (5). Limits are published with numbers, 10 requests a second per account on Free and Individual, 100 on Business, and monthly call quotas per feed (15). The OpenAPI file's 429 carries Retry-After and a body with retryAfterMs, resetsAt and a code that separates the per-second limit from the monthly quota, and every response has carried X-RateLimit-Limit and X-RateLimit-Remaining since 14 September 2026. Every data operation is a GET, and x402 retries with the same payment identifier return the stored response (15). An SLA is named only for Enterprise under a written agreement and as 'partially available' on Business, with no published terms or figure, and the terms of use promise no uptime. Financial-datasets took 10 for SLAs listed on a self-serve plan, so this is half (5 of 10). No beta or preview label on the REST API, the MCP server or the x402 gateway (10). 20+5+15+15+5+10 = 70.

Intrinio 51

A closed service under terms effective 3 September 2026 that are clear on personal, internal and commercial use and name Intrinio, Inc. (15 of 30). The privacy policy is dated 30 June 2018, names no retention periods, subprocessors or DPA, and says only that connection details may be retained; the terms require deletion within 30 days of termination with an officer's certification (8 of 30). No deprecation policy, and the version history has no dates (3 of 20). Data is processed in the United States; no subprocessor list (5 of 20). Total 31.

TickerLayer 38

The editorial half. A closed service whose terms of use, user agreement and market data disclaimer (all effective 3 November 2026) set out internal, commercial and redistribution rights by plan and a liability cap. They name no legal entity, address or governing law, so the contracting party is unknown. The plugin and npm client are MIT. Soldfetch took 10 in the same position (10 of 30). The privacy policy keeps WebSocket connection records for 7 days but gives no period for request and tool-call logs or account data after closure, says nothing on model training, names no transfer mechanism and has no DPA (12 of 30). No deprecation policy. The terms allow MCP tools to change 'with reasonable notice where practical' and the user agreement promises notice before a plan is materially reduced, and the changelog records changes after the fact. Kite took 4 (4 of 20). Subprocessors are given only as categories (hosting, authentication, card and crypto payments, email, an AI model for support replies), with analytics vendors deferred to the cookie policy, no data locations, and no named data suppliers (4 of 20). 10+12+4+4 = 30. The provenance half is computed from the provenance block.

Intrinio 70

page_size from 100 up to 10,000 sizes a response, and the MCP server batches ticker lists, but there is no field selection (15 of 25). next_page tokens, date and symbol filters on the data endpoints (18 of 20). Response codes are documented, 403 for an unsubscribed feed and 429 with a limit explanation, with no error body format or error code reference (10 of 20). Every call is a read and the vendor says the MCP server writes nothing back, but no readOnlyHint or safe-retry guidance was found (12 of 20). Few required parameters, and official SDKs in Python, C#, Java, JavaScript, R and Ruby (15). Total 70.

TickerLayer 79

Read on the REST API, with the MCP server where a line covers it. Responses are sized by limit (bars up to 5,000, catalogue up to 1,000), sort, date ranges and batch calls for futures quotes and market status, with no field selection. The MCP server has 12 tools, 11 shown to the model. Massive and financial-datasets took 15 (15 of 25). limit, offset and next_offset, cursors on fundamentals and economic events, total_count on bars, search on symbols and updated_since on signals (18 of 20). Errors carry statusCode, message, a code, retryAfterMs, resetsAt, limitRps, plansUrl and the missing product or market, and the skill gives an action per status. Above financial-datasets' 16 (17 of 20). Every data call is a GET, and x402 settles only after a valid response with payment identifiers bound to the request, but no readOnlyHint or other annotation was found for the MCP tools. Financial-datasets took 14 without annotations (15 of 20). Data tools need only asset_class and symbol, with defaults for limit and sort, and official clients exist for JavaScript or TypeScript and Python, both at 0.1.0 from 20 October 2026. Stocks need the COUNTRY:TICKER form (14 of 15). 15+18+17+15+14 = 79.