{ "data": { "a": { "slug": "kahoot", "name": "Kahoot!", "vendor": "Kahoot! AS", "vendorUrl": "https://kahoot.com", "kind": "http-api", "category": "learning", "summary": "Kahoot! is a quiz and presentation platform for schools and workplaces. Its Kahoot Data API, a read-only REST API for enterprise organisations, returns users, kahoots, game sessions, participants and answers under OAuth 2.0 client credentials from Kahoot!.", "url": "https://www.anchorterminal.com/tools/kahoot", "markdownUrl": "https://www.anchorterminal.com/tools/kahoot.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/kahoot.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/kahoot.json", "dns": "kahoot.grade.anchorterminal.com", "license": "Closed service under the Kahoot! Terms and Conditions (Kahoot! AS), effective 12 March 2025, with an Acceptable Use Policy effective 22 October 2026.", "transports": [], "packages": [], "auth": "oauth", "authNotes": "OAuth 2.0 client credentials. The OpenAPI file names the token endpoint https://access-2.kahoot.com/auth/realms/kahoot-api/protocol/openid-connect/token and an opaque bearer token; the client id and secret come from Kahoot! for an organisation on an enterprise plan (https://results.kahoot.com/openapi). The support guide to the reports API, https://support.kahoot.com/hc/en-us/articles/11735948502931, answered our reader with a Cloudflare check on 3 November 2026, so how a customer requests credentials wasn't read.", "pricing": "paid", "pricingNotes": "The REST API is an enterprise feature, priced by quote (https://kahoot360.com/enterprise-plans/). Kahoot! 360 Pro plans for individual presenters run from $9 a month (Pro Start, 50 participants) to $79 a month (Pro Max and Pro Ultra, 2,000 and 5,000 participants), billed annually, with a free account that needs no card and a seven-day Pro trial (https://kahoot360.com/pricing/, checked 3 November 2026). School and higher-education pricing is on separate pages.", "priceSummary": "$9 / seat-mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the OpenAPI file, the pricing pages, the trust centre or the terms, checked 3 November 2026.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://results.kahoot.com/swagger/", "openapi": "https://results.kahoot.com/openapi", "capabilities": [ "learning.quiz", "learning.progress", "learning.lms" ], "tags": [ "hosted", "official", "closed-source", "paid", "sales-led", "enterprise", "read-only", "openapi", "oauth", "ios", "android", "web" ], "lastRelease": "2026-10-27", "graded": true, "anchor": { "graded": true, "score": 55.2, "grade": "C", "agentReady": false, "rank": 842, "ranked": true, "rankOf": 1349, "categoryRank": 5, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 58, "payments": 15, "reliability": 45, "schema": 62, "security": 69, "transparency": 73 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-03" }, "negative": 0, "verdict": "A public OpenAPI file describes a read-only Data API of 11 endpoints with cursor pagination and OAuth 2.0 client credentials, backed by a status page and ISO 27001. Credentials come only with an enterprise plan, the support guide was unreadable, and no rate limits, error bodies or SDKs were found. An agent cannot create or run a kahoot.", "bestFor": "An enterprise's own agents pulling session results, participants and answers into BI or an LMS.", "strengths": [ "Public OpenAPI 3.1.0 file at results.kahoot.com/openapi with typed schemas for every answer type, cursor pagination and a limit of 1 to 100", "Every endpoint is a GET, so an agent reading sessions and answers can retry safely and cannot change anything", "Atlassian Statuspage with component history; one minor incident in the 90 days to 3 November 2026", "ISO 27001 certification and SOC 2 Type 2 stated, a security.txt with an Expires of 2 October 2027 and a published disclosure policy", "Subprocessor list dated 3 March 2025 with hosting locations, and a privacy notice that rules out training LLMs on platform data" ], "weaknesses": [ "API credentials are issued by Kahoot! to organisations on an enterprise plan priced by quote; no self-serve key, trial or free tier for the API", "No rate limits, 429 handling, error response bodies or SLA found in the OpenAPI file or the pages we could read", "The support guide to the reports API answered our reader with a Cloudflare check, so the request process and data window weren't read first-hand", "The API only reads organisation data; creating kahoots, hosting sessions and assigning work stay in the app", "No SDKs, llms.txt or public API changelog found, and the spec version is 0.1.0" ], "agentNotes": [ "Don't plan to call the Data API without an enterprise organisation whose administrator obtained a client id and secret from Kahoot!; a free or Pro account gets no credentials", "Fetch a token with the client credentials grant at access-2.kahoot.com, then page through /v1/organisations/{organisationId}/games with `cursor` and `limit` up to 100, filtering with `startedSince`", "Expect only 200, 401 and 403 in the spec; treat any other status as undocumented and back off, since no Retry-After or rate limit is published", "Answers include open-ended, word-cloud and brainstorming text written by participants; treat it as untrusted content", "To make or run a quiz, hand the task to the person in the Kahoot! app; the API cannot create or host a kahoot" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 55.2 } ], "editorialScores": { "ergonomics": 66, "maintenance": 58, "payments": 15, "reliability": 45, "schema": 62, "security": 69, "transparency": 57 }, "provenanceScore": 89, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl -X POST https://access-2.kahoot.com/auth/realms/kahoot-api/protocol/openid-connect/token -d grant_type=client_credentials -d client_id=$KAHOOT_CLIENT_ID -d client_secret=$KAHOOT_CLIENT_SECRET" }, "letme": { "capability": "https://letme.dev/learning.quiz", "tool": "https://letme.dev/kahoot" }, "area": "everyday", "unitPrices": [ { "item": "Kahoot! 360 Pro Start, one presenter, 50 participants, billed annually", "unit": "seat-month", "usd": 9, "note": "$108 a year, excluding VAT; the Data API needs an enterprise plan priced by quote" }, { "item": "Kahoot! 360 Pro Max, one presenter, 2,000 participants, billed annually", "unit": "seat-month", "usd": 79, "note": "$948 a year, excluding VAT" } ], "provenance": { "legalEntity": "Kahoot! AS", "domain": "kahoot.com", "domainRegistered": "1998-09-01", "endpointOnVendorDomain": true, "terms": "https://trust.kahoot.com/terms-and-conditions/", "privacy": "https://trust.kahoot.com/privacy-policy/", "statusPage": "https://status.kahoot.com", "changelog": "", "securityTxt": "valid", "checked": "2026-11-03", "notes": [ "The terms, effective 12 March 2025, name Kahoot! AS and choose Norwegian law and the Oslo courts. The privacy notice, effective 22 October 2026, gives organisation number 997 770 234 and the Oslo address.", "The Acceptable Use Policy of 22 October 2026 forbids access through bots, scrapers or crawlers and AI training on service materials without written consent. Recorded as a fact.", "kahoot.com, kahoot360.com and trust.kahoot.com allow all crawlers except /wp-admin/. support.kahoot.com's robots.txt allows the article paths, but the host answered with a Cloudflare check. results.kahoot.com/robots.txt returns 404.", "kahoot.com/.well-known/security.txt lists security@kahoot.com, Expires 2027-10-02 and the policy at kahoot.com/disclosure-policy.txt, which pays no rewards.", "RDAP gives kahoot.com a registration date of 1 September 1998." ], "score": 89 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/kahoot.json", "live": { "slug": "kahoot", "vendorStatus": { "page": "https://status.kahoot.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-04T19:31:40.970413354Z" }, "securityTxt": { "url": "https://kahoot.com/.well-known/security.txt", "state": "valid", "expires": "2027-10-02T16:01:01.000Z", "checkedAt": "2026-11-04T15:54:09.411218799Z" }, "updatedAt": "2026-11-04T19:31:40.970413354Z" } }, "answer": "Moodle scores 67.7 (B) on agent readiness against Kahoot!'s 55.2 (C), and leads in 5 of 7 scored categories. Kahoot! leads on agent ergonomics.", "b": { "slug": "moodle", "name": "Moodle", "vendor": "Moodle Pty Ltd", "vendorUrl": "https://moodle.com", "kind": "http-api", "category": "learning", "summary": "Moodle is an open-source learning management system that schools and companies run themselves or through MoodleCloud. Its web services expose 800 functions for courses, quizzes, assignments and grades, and Moodle 5.3 adds a scoped REST API with personal access tokens.", "url": "https://www.anchorterminal.com/tools/moodle", "markdownUrl": "https://www.anchorterminal.com/tools/moodle.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/moodle.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/moodle.json", "dns": "moodle.grade.anchorterminal.com", "repo": "https://github.com/moodle/moodle", "license": "GPL-3.0-or-later", "transports": [ "http" ], "remoteUrl": "https://\u003csite\u003e/webservice/rest/server.php", "packages": [], "auth": "mixed", "authNotes": "Classic web services use a token tied to a user and a service. An administrator enables web services and the REST protocol, creates a service with chosen functions, authorises users and makes the token under Manage tokens, with optional IP restriction and a valid-until date; users with the capability can also fetch one from login/token.php with a username and password. The token travels as the `wstoken` parameter in the query string or POST body. Moodle 5.3 (5 October 2026) adds a REST API at /api/rest/v2 with personal access tokens (scoped, expiring after 7 days to 1 year, shown once, revocable, with last-use IP) and OAuth 2 clients an administrator registers, enforced by scopes such as core_user:user:read in addition to capabilities (https://docs.moodle.org/503/en/REST_API_tokens).", "pricing": "free", "pricingNotes": "Moodle LMS is free software under GPL-3.0-or-later, installed and run by the owner. Moodle Pty Ltd's hosted MoodleCloud plans are public, billed yearly in Australian dollars, from Starter at AUD 230 (USD 160) a year for 50 users and 1GB to Standard at AUD 3,000 (USD 2,090) for 750 users and 50GB, with a 28-day trial of Starter that needs no card; MoodleCloud sites cannot install plugins, and whether they allow web services was not established. Partner hosting is quoted (https://www.moodlecloud.com/standard-plans/).", "priceSummary": "Free · OSS", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the web services documentation, the routing and scopes docs or MoodleCloud's pages (checked 2026-11-03).", "endpoints": [] }, "toolCount": 0, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://moodledev.io/docs/6.0/apis/subsystems/external", "capabilities": [ "learning.lms", "learning.courses", "learning.quiz", "learning.progress" ], "tags": [ "self-hosted", "open-source", "official", "free", "oauth", "security-txt", "gpl" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 67.7, "grade": "B", "agentReady": false, "rank": 280, "ranked": true, "rankOf": 1349, "categoryRank": 1, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 49, "maintenance": 81, "payments": 60, "reliability": 80, "schema": 66, "security": 67, "transparency": 76 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-03" }, "negative": 0, "verdict": "Free GPL software with about 800 typed web service functions over courses, quizzes, assignments and grades, a six-monthly release train with dated security advisories, and in 5.3 a scoped REST API with expiring tokens. An administrator must enable the services and issue tokens, the classic token travels in the query string, and no public OpenAPI file exists without a site.", "bestFor": "An agent working inside an institution or company that runs Moodle and can get a scoped token, reading course content, quiz attempts, assignments and grades or writing grades and enrolments.", "strengths": [ "About 800 to 900 external functions with typed, described parameters and returns, generated into a reference on every site", "Moodle 5.3 adds personal access tokens with scopes and 7-day to 1-year expiry, OAuth 2 clients and a SwaggerUI for the new REST API", "Services can expose only chosen functions to authorised users, with IP restriction and expiry on tokens", "Releases every April and October, point releases every two months, 5.3 LTS supported with security fixes to October 2029", "Ten dated security advisories with CVEs between 9 September and 15 October 2026, under GPL-3.0-or-later source" ], "weaknesses": [ "A site administrator has to enable web services, build a service and issue a token before any call; nothing is self-serve", "The classic token goes in the `wstoken` query or POST parameter, is all-powerful within the user's capabilities and has no scopes", "No public OpenAPI or llms.txt; the machine-readable reference exists only inside a running site", "The 5.3 REST API reaches only a few parts of Moodle, so most work still goes through the classic functions", "No official client SDK or MCP server from Moodle HQ; sample clients and community servers only" ], "agentNotes": [ "Ask the site administrator for a token on a custom service limited to the functions you need, with an IP restriction and a valid-until date; don't use the mobile service token for broader work", "Call https://\u003csite\u003e/webservice/rest/server.php with wsfunction, wstoken and moodlewsrestformat=json, sending the token in the POST body rather than the URL", "On a 5.3 site, prefer a personal access token or OAuth 2 client for the /api/rest/v2 routes it covers, and expect an access_denied error naming the missing scope", "Read each function's parameters in the site's API Documentation page; array parameters are flattened as users[0][username] in REST", "Check the site's Moodle version and the upgrade notes before relying on a function; deprecated external functions are removed outright" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.7 } ], "editorialScores": { "ergonomics": 49, "maintenance": 81, "payments": 60, "reliability": 80, "schema": 66, "security": 67, "transparency": 76 }, "provenanceScore": 76, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl -X POST \"https://\u003csite\u003e/webservice/rest/server.php\" -d wstoken=\u003cTOKEN\u003e -d wsfunction=core_course_get_courses -d moodlewsrestformat=json" }, "letme": { "capability": "https://letme.dev/learning.lms", "tool": "https://letme.dev/moodle" }, "area": "everyday", "unitPrices": [ { "item": "MoodleCloud Starter (50 users, 1GB), yearly", "unit": "month", "usd": 13.33, "note": "USD 160 a year (AUD 230); hosted by Moodle Pty Ltd, plugins not installable" }, { "item": "MoodleCloud Standard (750 users, 50GB), yearly", "unit": "month", "usd": 174.17, "note": "USD 2,090 a year (AUD 3,000)" } ], "provenance": { "legalEntity": "Moodle Pty Ltd", "domain": "moodle.org", "domainRegistered": "2002-04-02", "endpointOnVendorDomain": false, "terms": "", "privacy": "https://moodle.com/privacy-notice/", "statusPage": "https://status.moodlecloud.com", "changelog": "https://moodledev.io/general/releases", "securityTxt": "valid", "checked": "2026-11-03", "notes": [ "Moodle Pty Ltd is named in the privacy notice (last updated October 2025, PO Box 303, West Perth) and in the trademark notice on moodle.com. The software licence is GPL-3.0-or-later, which stands in for terms; no terms of service for self-hosted use exist, and MoodleCloud's site links only cookie, privacy and trademark policies.", "The privacy notice links a standard data processing agreement (February 2026 PDF) and a register of GDPR information, and names dpo@moodle.com and privacy@moodle.com.", "moodle.org/.well-known/security.txt names the report form at moodle.org/security/report/ and the policy at moodledev.io/general/development/process/security, with Expires 10 May 2027.", "moodle.org/robots.txt disallows search pages and /plugins/*/*, sets Content-Signal ai-train=no, search=yes, ai-input=no and asks for a 10-second crawl delay; docs.moodle.org asks for 5 seconds. Both were followed. moodledev.io, moodle.com and www.moodlecloud.com allow all.", "The endpoint sits on each owner's own site, not on a Moodle domain, so endpointOnVendorDomain is false. status.moodlecloud.com (Uptime Kuma) covers MoodleCloud only.", "RDAP at Public Interest Registry gives moodle.org a registration date of 2 April 2002; moodle.com dates from 22 February 1999." ], "score": 76 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/moodle.json", "live": { "slug": "moodle", "probe": { "target": "https://\u003csite\u003e/webservice/rest/server.php", "method": "get", "lastAt": "2026-11-04T19:34:55.482445256Z", "lastOk": false, "lastStatus": 0, "lastMs": 0, "lastNote": "DNS lookup failed", "authRequired": false, "uptime24h": 0, "uptime30d": 0, "p50ms24h": 0, "p95ms24h": 0, "samples24h": 43, "samples30d": 43, "days": [ { "date": "2026-11-04", "probes": 43, "ok": 0 } ], "outages": [ { "start": "2026-11-04T15:25:33.426772381Z", "end": "0001-01-01T00:00:00Z", "note": "DNS lookup failed" } ] }, "vendorStatus": { "page": "https://status.moodlecloud.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-04T15:32:09.831975618Z" }, "securityTxt": { "url": "https://moodle.org/.well-known/security.txt", "state": "valid", "expires": "2027-05-10T01:00:00.000Z", "checkedAt": "2026-11-04T15:54:22.866105142Z" }, "updatedAt": "2026-11-04T19:34:55.482445256Z" } }, "edges": [ { "by": 45, "category": "payments", "leads": "moodle", "name": "Payments \u0026 pricing", "reasons": { "a": "Read with the hosted rule. No x402, MPP or L402 (0). Pro plans are public, $9 to $79 a presenter a month billed annually, but the API is enterprise-only and priced by quote (10). A free account needs no card and Pro has a seven-day trial, but neither reaches the API (5 of 20). Credentials come from Kahoot! to an enterprise organisation, so a person signs the contract and requests them (0). 0 + 10 + 5 + 0 = 15.", "b": "Read with the self-hosted rule for free software with nothing to buy. No payment protocol (0 of 40). The licence is public and MoodleCloud's plan prices are public too (20). Free to download and run, with a 28-day MoodleCloud trial that needs no card (20). An owner installs it and issues their own tokens, so no vendor sign-up stands in the way (20). 0 + 20 + 20 + 20 = 60." }, "scores": { "a": 15, "b": 60 } }, { "by": 35, "category": "reliability", "leads": "moodle", "name": "Reliability", "reasons": { "a": "Read with the hosted lines. status.kahoot.com is an Atlassian Statuspage with component history (20). One incident since 5 August 2026, YouTube video disruptions on 22 September, minor, about six hours (20). No rate limits in the OpenAPI file, and the support guide that might hold them answered our reader with a Cloudflare check (0). No 429 or retry guidance (0). No SLA found; the Master Service Agreement on the trust centre wasn't read (0). The spec is version 0.1.0 with no stability statement, though the enterprise page sells the API as a feature (5 of 10). 20 + 20 + 0 + 0 + 0 + 5 = 45.", "b": "Read with the local-software lines, since the owner runs Moodle and calls their own site. Official packages from moodle.org and GitHub with supported PHP and database versions stated per release, PostgreSQL 17 and MariaDB 11.4 and up for 5.3 (20). A public test suite (PHPUnit and Behat) and CI; whether the default branch was passing on 3 November was not read, since the repository's workflow pages weren't fetched (12 of 25). Bugs go to the Moodle Tracker, where security issues are triaged into dated advisories and point releases every two months carry fixes; the open bug count was not read (18 of 25). Versioned releases with release notes, upgrade notes and a written deprecation policy (15). Stable since 1.0 in 2002, now 5.3 (15). 20 + 12 + 18 + 15 + 15 = 80." }, "scores": { "a": 45, "b": 80 } }, { "by": 23, "category": "maintenance", "leads": "moodle", "name": "Maintenance \u0026 community", "reasons": { "a": "Read for a closed service. iOS 6.8.0 on 27 October 2026 (30). Three App Store releases in the 90 days, 12, 22 and 27 October (20). A status page, a help centre and sales contact, but no public changelog for the API and the help centre is behind a bot check for us (8 of 15). No SDK or registry entry (0). No package to judge (0). 30 + 20 + 8 + 0 + 0 = 58.", "b": "Moodle 5.3.0 on 5 October 2026 and commits on main through 30 October (30). Point releases on 10 August, 14 September and 5 October 2026 across five branches (20). The Tracker, forums on moodle.org and developer chat answer issues; security issues were fixed and published with CVEs on 9 September, 22 September and 15 October 2026 (20 of 25). No official SDK or MCP server; sample clients only (5 of 15). PHPUnit and Behat suites, GitHub Actions, and minimum PHP and database versions raised per release, read from the release notes rather than a passing run (6 of 10). 30 + 20 + 20 + 5 + 6 = 81." }, "scores": { "a": 58, "b": 81 } }, { "by": 17, "category": "ergonomics", "leads": "kahoot", "name": "Agent ergonomics", "reasons": { "a": "Eleven compact GET endpoints returning typed JSON (20 of 25). Cursor pagination with `limit` up to 100 on users, versions and games, and `startedSince` on games; no field selection (16 of 20). Only 401 and 403 are documented, with no body schema or codes to branch on (6 of 20). Read-only, so every call is safe to retry (16 of 20). One or two path parameters per call and sensible paging defaults, but no official SDK in any language (8 of 15). 20 + 16 + 6 + 16 + 8 = 66.", "b": "About 800 to 900 functions, but a service can expose only the functions an agent needs and each call names one function, so the working set is small (20 of 25). Paging and filtering vary by function; course and user lookups take criteria and some take limits, read only in the catalogue (10 of 20). The REST protocol returns an exception, errorcode and message object on failure, and the 5.3 API returns OAuth2 access_denied with a hint naming the missing scope; the classic shape was not read first-hand on this pass (8 of 20). No idempotency keys; many functions are creates and updates (5 of 20). Required parameters vary by function; no official SDK, only sample clients and community libraries (6 of 15). 20 + 10 + 8 + 5 + 6 = 49." }, "scores": { "a": 66, "b": 49 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Kahoot! AS", "b": "Moodle Pty Ltd", "name": "Vendor" }, { "a": "no (local only)", "b": "https://\u003csite\u003e/webservice/rest/server.php", "name": "Hosted endpoint" }, { "a": "", "b": "HTTP", "name": "Transports" }, { "a": "OAuth", "b": "OAuth or key", "name": "Auth" }, { "a": "Paid", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Closed service under the Kahoot! Terms and Conditions (Kahoot! AS), effective 12 March 2025, with an Acceptable Use Policy effective 22 October 2026.", "b": "GPL-3.0-or-later", "name": "Licence" }, { "a": "none", "b": "0", "name": "Tools exposed" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "no", "name": "llms.txt" }, { "a": "2026-10-27", "b": "2026-10-05", "name": "Last release" }, { "a": "2025-03-12", "b": "no document linked", "name": "Terms last updated" }, { "a": "2026-10-22", "b": "2025-10-01", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not read yet", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not read yet", "name": "Arbitration or class-action waiver" } ], "faq": [ { "answer": "Moodle scores 67.7 (B) on agent readiness against Kahoot!'s 55.2 (C), and leads in 5 of 7 scored categories. Kahoot! leads on agent ergonomics.", "question": "Which is better for AI agents, Kahoot! or Moodle?" }, { "answer": "Kahoot! uses an OAuth sign-in. Moodle takes an API key or an OAuth sign-in.", "question": "Do Kahoot! and Moodle need an API key?" }, { "answer": "No hosted endpoint is listed for Kahoot!. Moodle has a hosted endpoint at https://\u003csite\u003e/webservice/rest/server.php.", "question": "Can an agent call Kahoot! and Moodle without installing anything?" }, { "answer": "No open-source release is listed for Kahoot!. Moodle is open source (GPL-3.0-or-later).", "question": "Are Kahoot! and Moodle open source?" } ], "goodFor": [ { "aheadOn": [ "Agent ergonomics, 66 against 49" ], "also": null, "goodFor": "An enterprise's own agents pulling session results, participants and answers into BI or an LMS.", "slug": "kahoot", "watchFor": "API credentials are issued by Kahoot! to organisations on an enterprise plan priced by quote; no self-serve key, trial or free tier for the API" }, { "aheadOn": [ "Reliability, 80 against 45", "Payments \u0026 pricing, 60 against 15", "Maintenance \u0026 community, 81 against 58" ], "also": [ "A hosted endpoint, with nothing to install", "Open source" ], "goodFor": "An agent working inside an institution or company that runs Moodle and can get a scoped token, reading course content, quiz attempts, assignments and grades or writing grades and enrolments.", "slug": "moodle", "watchFor": "A site administrator has to enable web services, build a service and issue a token before any call; nothing is self-serve" } ], "history": null, "job": { "capability": "learning.quiz", "name": "Learning quiz" }, "others": [ { "json": "https://www.anchorterminal.com/compare/kahoot-vs-learnosity.json", "title": "Kahoot! vs Learnosity", "url": "https://www.anchorterminal.com/compare/kahoot-vs-learnosity" }, { "json": "https://www.anchorterminal.com/compare/kahoot-vs-quizgecko.json", "title": "Kahoot! vs Quizgecko", "url": "https://www.anchorterminal.com/compare/kahoot-vs-quizgecko" }, { "json": "https://www.anchorterminal.com/compare/learnosity-vs-moodle.json", "title": "Learnosity vs Moodle", "url": "https://www.anchorterminal.com/compare/learnosity-vs-moodle" }, { "json": "https://www.anchorterminal.com/compare/moodle-vs-quizgecko.json", "title": "Moodle vs Quizgecko", "url": "https://www.anchorterminal.com/compare/moodle-vs-quizgecko" }, { "json": "https://www.anchorterminal.com/compare/canvas-lms-vs-kahoot.json", "title": "Instructure Canvas vs Kahoot!", "url": "https://www.anchorterminal.com/compare/canvas-lms-vs-kahoot" }, { "json": "https://www.anchorterminal.com/compare/canvas-lms-vs-moodle.json", "title": "Instructure Canvas vs Moodle", "url": "https://www.anchorterminal.com/compare/canvas-lms-vs-moodle" } ], "panel": null, "scores": [ { "by": 35, "edge": "moodle", "kahoot": 45, "key": "reliability", "moodle": 80, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 4, "edge": "moodle", "kahoot": 62, "key": "schema", "moodle": 66, "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 17, "edge": "kahoot", "kahoot": 66, "key": "ergonomics", "moodle": 49, "name": "Agent ergonomics", "weight": 13 }, { "by": 2, "edge": "kahoot", "kahoot": 69, "key": "security", "moodle": 67, "name": "Security \u0026 auth", "weight": 14 }, { "by": 45, "edge": "moodle", "kahoot": 15, "key": "payments", "moodle": 60, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 23, "edge": "moodle", "kahoot": 58, "key": "maintenance", "moodle": 81, "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 3, "edge": "moodle", "kahoot": 73, "key": "transparency", "moodle": 76, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Moodle scores 67.7 (B) on agent readiness against Kahoot!'s 55.2 (C), and leads in 5 of 7 scored categories. Kahoot! leads on agent ergonomics. Both do learning quiz.", "tasks": null, "tutorials": [], "verdicts": { "kahoot": "A public OpenAPI file describes a read-only Data API of 11 endpoints with cursor pagination and OAuth 2.0 client credentials, backed by a status page and ISO 27001. Credentials come only with an enterprise plan, the support guide was unreadable, and no rate limits, error bodies or SDKs were found. An agent cannot create or run a kahoot.", "moodle": "Free GPL software with about 800 typed web service functions over courses, quizzes, assignments and grades, a six-monthly release train with dated security advisories, and in 5.3 a scoped REST API with expiring tokens. An administrator must enable the services and issue tokens, the classic token travels in the query string, and no public OpenAPI file exists without a site." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/kahoot-vs-moodle", "json": "https://www.anchorterminal.com/compare/kahoot-vs-moodle.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/kahoot-vs-moodle.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/kahoot-vs-moodle.min.md" }, "markdown": "Moodle scores 67.7 (B) on agent readiness against Kahoot!'s 55.2 (C), and leads in 5 of 7 scored categories. Kahoot! leads on agent ergonomics. Both do learning quiz.\n\n- Kahoot!: grade C, 55.2/100, rank #842 of 1349. Markdown https://www.anchorterminal.com/tools/kahoot.md · JSON https://www.anchorterminal.com/api/v1/tools/kahoot.json\n- Moodle: grade B, 67.7/100, rank #280 of 1349. Markdown https://www.anchorterminal.com/tools/moodle.md · JSON https://www.anchorterminal.com/api/v1/tools/moodle.json\n- Best learning, tutoring and assessment tools for AI agents: https://www.anchorterminal.com/best/learning/index.md\n- All 10 learning comparisons: https://www.anchorterminal.com/compare/learning/index.md\n\n## Which one, for what\n\n### Kahoot! (C)\n\nGood for: An enterprise's own agents pulling session results, participants and answers into BI or an LMS.\n\nAhead on:\n- Agent ergonomics, 66 against 49\n\nWatch for: API credentials are issued by Kahoot! to organisations on an enterprise plan priced by quote; no self-serve key, trial or free tier for the API\n\n### Moodle (B)\n\nGood for: An agent working inside an institution or company that runs Moodle and can get a scoped token, reading course content, quiz attempts, assignments and grades or writing grades and enrolments.\n\nAhead on:\n- Reliability, 80 against 45\n- Payments \u0026 pricing, 60 against 15\n- Maintenance \u0026 community, 81 against 58\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- Open source\n\nWatch for: A site administrator has to enable web services, build a service and issue a token before any call; nothing is self-serve\n\n\n## Why the edge\n\n### Payments \u0026 pricing: Moodle +45\n\n- Kahoot! (15): Read with the hosted rule. No x402, MPP or L402 (0). Pro plans are public, $9 to $79 a presenter a month billed annually, but the API is enterprise-only and priced by quote (10). A free account needs no card and Pro has a seven-day trial, but neither reaches the API (5 of 20). Credentials come from Kahoot! to an enterprise organisation, so a person signs the contract and requests them (0). 0 + 10 + 5 + 0 = 15.\n- Moodle (60): Read with the self-hosted rule for free software with nothing to buy. No payment protocol (0 of 40). The licence is public and MoodleCloud's plan prices are public too (20). Free to download and run, with a 28-day MoodleCloud trial that needs no card (20). An owner installs it and issues their own tokens, so no vendor sign-up stands in the way (20). 0 + 20 + 20 + 20 = 60.\n\n### Reliability: Moodle +35\n\n- Kahoot! (45): Read with the hosted lines. status.kahoot.com is an Atlassian Statuspage with component history (20). One incident since 5 August 2026, YouTube video disruptions on 22 September, minor, about six hours (20). No rate limits in the OpenAPI file, and the support guide that might hold them answered our reader with a Cloudflare check (0). No 429 or retry guidance (0). No SLA found; the Master Service Agreement on the trust centre wasn't read (0). The spec is version 0.1.0 with no stability statement, though the enterprise page sells the API as a feature (5 of 10). 20 + 20 + 0 + 0 + 0 + 5 = 45.\n- Moodle (80): Read with the local-software lines, since the owner runs Moodle and calls their own site. Official packages from moodle.org and GitHub with supported PHP and database versions stated per release, PostgreSQL 17 and MariaDB 11.4 and up for 5.3 (20). A public test suite (PHPUnit and Behat) and CI; whether the default branch was passing on 3 November was not read, since the repository's workflow pages weren't fetched (12 of 25). Bugs go to the Moodle Tracker, where security issues are triaged into dated advisories and point releases every two months carry fixes; the open bug count was not read (18 of 25). Versioned releases with release notes, upgrade notes and a written deprecation policy (15). Stable since 1.0 in 2002, now 5.3 (15). 20 + 12 + 18 + 15 + 15 = 80.\n\n### Maintenance \u0026 community: Moodle +23\n\n- Kahoot! (58): Read for a closed service. iOS 6.8.0 on 27 October 2026 (30). Three App Store releases in the 90 days, 12, 22 and 27 October (20). A status page, a help centre and sales contact, but no public changelog for the API and the help centre is behind a bot check for us (8 of 15). No SDK or registry entry (0). No package to judge (0). 30 + 20 + 8 + 0 + 0 = 58.\n- Moodle (81): Moodle 5.3.0 on 5 October 2026 and commits on main through 30 October (30). Point releases on 10 August, 14 September and 5 October 2026 across five branches (20). The Tracker, forums on moodle.org and developer chat answer issues; security issues were fixed and published with CVEs on 9 September, 22 September and 15 October 2026 (20 of 25). No official SDK or MCP server; sample clients only (5 of 15). PHPUnit and Behat suites, GitHub Actions, and minimum PHP and database versions raised per release, read from the release notes rather than a passing run (6 of 10). 30 + 20 + 20 + 5 + 6 = 81.\n\n### Agent ergonomics: Kahoot! +17\n\n- Kahoot! (66): Eleven compact GET endpoints returning typed JSON (20 of 25). Cursor pagination with `limit` up to 100 on users, versions and games, and `startedSince` on games; no field selection (16 of 20). Only 401 and 403 are documented, with no body schema or codes to branch on (6 of 20). Read-only, so every call is safe to retry (16 of 20). One or two path parameters per call and sensible paging defaults, but no official SDK in any language (8 of 15). 20 + 16 + 6 + 16 + 8 = 66.\n- Moodle (49): About 800 to 900 functions, but a service can expose only the functions an agent needs and each call names one function, so the working set is small (20 of 25). Paging and filtering vary by function; course and user lookups take criteria and some take limits, read only in the catalogue (10 of 20). The REST protocol returns an exception, errorcode and message object on failure, and the 5.3 API returns OAuth2 access_denied with a hint naming the missing scope; the classic shape was not read first-hand on this pass (8 of 20). No idempotency keys; many functions are creates and updates (5 of 20). Required parameters vary by function; no official SDK, only sample clients and community libraries (6 of 15). 20 + 10 + 8 + 5 + 6 = 49.\n\n## Score by category\n\n| Category | Weight | Kahoot! | Moodle | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 45 | 80 | Moodle +35 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 62 | 66 | Moodle +4 |\n| Agent ergonomics | 13% (16.2 this run) | 66 | 49 | Kahoot! +17 |\n| Security \u0026 auth | 14% (17.5 this run) | 69 | 67 | Kahoot! +2 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 15 | 60 | Moodle +45 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 58 | 81 | Moodle +23 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 73 | 76 | Moodle +3 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **55.2 · C** | **67.7 · B** | |\n\n## Facts side by side\n\n| Fact | Kahoot! | Moodle |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Kahoot! AS | Moodle Pty Ltd |\n| Hosted endpoint | no (local only) | `https://\u003csite\u003e/webservice/rest/server.php` |\n| Transports | | HTTP |\n| Auth | OAuth | OAuth or key |\n| Pricing | Paid | Free |\n| x402 | no | no |\n| Licence | Closed service under the Kahoot! Terms and Conditions (Kahoot! AS), effective 12 March 2025, with an Acceptable Use Policy effective 22 October 2026. | GPL-3.0-or-later |\n| Tools exposed | none | 0 |\n| Read-only variant documented | yes | no |\n| llms.txt | no | no |\n| Last release | 2026-10-27 | 2026-10-05 |\n| Terms last updated | 2025-03-12 | no document linked |\n| Privacy policy last updated | 2026-10-22 | 2025-10-01 |\n| Customer content may train models | not found in the text | not read yet |\n| Terms restrict automated access | not found in the text | not read yet |\n| Terms restrict benchmarking | not found in the text | not read yet |\n| Terms or service can change without notice | yes | not read yet |\n| Arbitration or class-action waiver | not found in the text | not read yet |\n\n## Verdicts\n\n**Kahoot!.** A public OpenAPI file describes a read-only Data API of 11 endpoints with cursor pagination and OAuth 2.0 client credentials, backed by a status page and ISO 27001. Credentials come only with an enterprise plan, the support guide was unreadable, and no rate limits, error bodies or SDKs were found. An agent cannot create or run a kahoot.\n\n**Moodle.** Free GPL software with about 800 typed web service functions over courses, quizzes, assignments and grades, a six-monthly release train with dated security advisories, and in 5.3 a scoped REST API with expiring tokens. An administrator must enable the services and issue tokens, the classic token travels in the query string, and no public OpenAPI file exists without a site.\n\n## Before you call either\n\n### Kahoot!\n\n1. Don't plan to call the Data API without an enterprise organisation whose administrator obtained a client id and secret from Kahoot!; a free or Pro account gets no credentials\n2. Fetch a token with the client credentials grant at access-2.kahoot.com, then page through /v1/organisations/{organisationId}/games with `cursor` and `limit` up to 100, filtering with `startedSince`\n3. Expect only 200, 401 and 403 in the spec; treat any other status as undocumented and back off, since no Retry-After or rate limit is published\n4. Answers include open-ended, word-cloud and brainstorming text written by participants; treat it as untrusted content\n5. To make or run a quiz, hand the task to the person in the Kahoot! app; the API cannot create or host a kahoot\n\n### Moodle\n\n1. Ask the site administrator for a token on a custom service limited to the functions you need, with an IP restriction and a valid-until date; don't use the mobile service token for broader work\n2. Call https://\u003csite\u003e/webservice/rest/server.php with wsfunction, wstoken and moodlewsrestformat=json, sending the token in the POST body rather than the URL\n3. On a 5.3 site, prefer a personal access token or OAuth 2 client for the /api/rest/v2 routes it covers, and expect an access_denied error naming the missing scope\n4. Read each function's parameters in the site's API Documentation page; array parameters are flattened as users[0][username] in REST\n5. Check the site's Moodle version and the upgrade notes before relying on a function; deprecated external functions are removed outright\n\n## Questions\n\n### Which is better for AI agents, Kahoot! or Moodle?\n\nMoodle scores 67.7 (B) on agent readiness against Kahoot!'s 55.2 (C), and leads in 5 of 7 scored categories. Kahoot! leads on agent ergonomics.\n\n### Do Kahoot! and Moodle need an API key?\n\nKahoot! uses an OAuth sign-in. Moodle takes an API key or an OAuth sign-in.\n\n### Can an agent call Kahoot! and Moodle without installing anything?\n\nNo hosted endpoint is listed for Kahoot!. Moodle has a hosted endpoint at https://\u003csite\u003e/webservice/rest/server.php.\n\n### Are Kahoot! and Moodle open source?\n\nNo open-source release is listed for Kahoot!. Moodle is open source (GPL-3.0-or-later).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/kahoot-vs-moodle.json, and with the fewest tokens: https://www.anchorterminal.com/compare/kahoot-vs-moodle.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"kahoot\", \"b\": \"moodle\"}`. From a terminal: `anchor compare kahoot moodle`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/kahoot.json and https://www.anchorterminal.com/api/v1/tools/moodle.json\n\n## Other comparisons with Kahoot! or Moodle\n\n- [Kahoot! vs Learnosity](https://www.anchorterminal.com/compare/kahoot-vs-learnosity.md)\n- [Kahoot! vs Quizgecko](https://www.anchorterminal.com/compare/kahoot-vs-quizgecko.md)\n- [Learnosity vs Moodle](https://www.anchorterminal.com/compare/learnosity-vs-moodle.md)\n- [Moodle vs Quizgecko](https://www.anchorterminal.com/compare/moodle-vs-quizgecko.md)\n- [Instructure Canvas vs Kahoot!](https://www.anchorterminal.com/compare/canvas-lms-vs-kahoot.md)\n- [Instructure Canvas vs Moodle](https://www.anchorterminal.com/compare/canvas-lms-vs-moodle.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-04", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Kahoot! vs Moodle", "url": "" } ], "description": "Moodle scores 67.7 (B) to Kahoot!'s 55.2 (C) for learning quiz. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Kahoot! C 55.2", "Moodle B 67.7", "scores" ], "h1": "Kahoot! vs Moodle", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/kahoot-vs-moodle", "published": "2026-10-01", "section": "tools", "title": "Kahoot! vs Moodle for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-03", "url": "https://www.anchorterminal.com/compare/kahoot-vs-moodle" }, "tokens": { "markdown": 3250, "slim": 1830 }, "version": 1 }