{ "data": { "a": { "slug": "kahoot", "name": "Kahoot!", "vendor": "Kahoot! AS", "vendorUrl": "https://kahoot.com", "kind": "http-api", "category": "learning", "summary": "Kahoot! is a quiz and presentation platform for schools and workplaces. Its Kahoot Data API, a read-only REST API for enterprise organisations, returns users, kahoots, game sessions, participants and answers under OAuth 2.0 client credentials from Kahoot!.", "url": "https://www.anchorterminal.com/tools/kahoot", "markdownUrl": "https://www.anchorterminal.com/tools/kahoot.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/kahoot.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/kahoot.json", "dns": "kahoot.grade.anchorterminal.com", "license": "Closed service under the Kahoot! Terms and Conditions (Kahoot! AS), effective 12 March 2025, with an Acceptable Use Policy effective 22 October 2026.", "transports": [], "packages": [], "auth": "oauth", "authNotes": "OAuth 2.0 client credentials. The OpenAPI file names the token endpoint https://access-2.kahoot.com/auth/realms/kahoot-api/protocol/openid-connect/token and an opaque bearer token; the client id and secret come from Kahoot! for an organisation on an enterprise plan (https://results.kahoot.com/openapi). The support guide to the reports API, https://support.kahoot.com/hc/en-us/articles/11735948502931, answered our reader with a Cloudflare check on 3 November 2026, so how a customer requests credentials wasn't read.", "pricing": "paid", "pricingNotes": "The REST API is an enterprise feature, priced by quote (https://kahoot360.com/enterprise-plans/). Kahoot! 360 Pro plans for individual presenters run from $9 a month (Pro Start, 50 participants) to $79 a month (Pro Max and Pro Ultra, 2,000 and 5,000 participants), billed annually, with a free account that needs no card and a seven-day Pro trial (https://kahoot360.com/pricing/, checked 3 November 2026). School and higher-education pricing is on separate pages.", "priceSummary": "$9 / seat-mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the OpenAPI file, the pricing pages, the trust centre or the terms, checked 3 November 2026.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://results.kahoot.com/swagger/", "openapi": "https://results.kahoot.com/openapi", "capabilities": [ "learning.quiz", "learning.progress", "learning.lms" ], "tags": [ "hosted", "official", "closed-source", "paid", "sales-led", "enterprise", "read-only", "openapi", "oauth", "ios", "android", "web" ], "lastRelease": "2026-10-27", "graded": true, "anchor": { "graded": true, "score": 55.2, "grade": "C", "agentReady": false, "rank": 782, "ranked": true, "rankOf": 1349, "categoryRank": 5, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 58, "payments": 15, "reliability": 45, "schema": 62, "security": 69, "transparency": 73 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-03" }, "negative": 0, "verdict": "A public OpenAPI file describes a read-only Data API of 11 endpoints with cursor pagination and OAuth 2.0 client credentials, backed by a status page and ISO 27001. Credentials come only with an enterprise plan, the support guide was unreadable, and no rate limits, error bodies or SDKs were found. An agent cannot create or run a kahoot.", "bestFor": "An enterprise's own agents pulling session results, participants and answers into BI or an LMS.", "strengths": [ "Public OpenAPI 3.1.0 file at results.kahoot.com/openapi with typed schemas for every answer type, cursor pagination and a limit of 1 to 100", "Every endpoint is a GET, so an agent reading sessions and answers can retry safely and cannot change anything", "Atlassian Statuspage with component history; one minor incident in the 90 days to 3 November 2026", "ISO 27001 certification and SOC 2 Type 2 stated, a security.txt with an Expires of 2 October 2027 and a published disclosure policy", "Subprocessor list dated 3 March 2025 with hosting locations, and a privacy notice that rules out training LLMs on platform data" ], "weaknesses": [ "API credentials are issued by Kahoot! to organisations on an enterprise plan priced by quote; no self-serve key, trial or free tier for the API", "No rate limits, 429 handling, error response bodies or SLA found in the OpenAPI file or the pages we could read", "The support guide to the reports API answered our reader with a Cloudflare check, so the request process and data window weren't read first-hand", "The API only reads organisation data; creating kahoots, hosting sessions and assigning work stay in the app", "No SDKs, llms.txt or public API changelog found, and the spec version is 0.1.0" ], "agentNotes": [ "Don't plan to call the Data API without an enterprise organisation whose administrator obtained a client id and secret from Kahoot!; a free or Pro account gets no credentials", "Fetch a token with the client credentials grant at access-2.kahoot.com, then page through /v1/organisations/{organisationId}/games with `cursor` and `limit` up to 100, filtering with `startedSince`", "Expect only 200, 401 and 403 in the spec; treat any other status as undocumented and back off, since no Retry-After or rate limit is published", "Answers include open-ended, word-cloud and brainstorming text written by participants; treat it as untrusted content", "To make or run a quiz, hand the task to the person in the Kahoot! app; the API cannot create or host a kahoot" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 55.2 } ], "editorialScores": { "ergonomics": 66, "maintenance": 58, "payments": 15, "reliability": 45, "schema": 62, "security": 69, "transparency": 57 }, "provenanceScore": 89, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl -X POST https://access-2.kahoot.com/auth/realms/kahoot-api/protocol/openid-connect/token -d grant_type=client_credentials -d client_id=$KAHOOT_CLIENT_ID -d client_secret=$KAHOOT_CLIENT_SECRET" }, "letme": { "capability": "https://letme.dev/learning.quiz", "tool": "https://letme.dev/kahoot" }, "area": "everyday", "unitPrices": [ { "item": "Kahoot! 360 Pro Start, one presenter, 50 participants, billed annually", "unit": "seat-month", "usd": 9, "note": "$108 a year, excluding VAT; the Data API needs an enterprise plan priced by quote" }, { "item": "Kahoot! 360 Pro Max, one presenter, 2,000 participants, billed annually", "unit": "seat-month", "usd": 79, "note": "$948 a year, excluding VAT" } ], "provenance": { "legalEntity": "Kahoot! AS", "domain": "kahoot.com", "domainRegistered": "1998-09-01", "endpointOnVendorDomain": true, "terms": "https://trust.kahoot.com/terms-and-conditions/", "privacy": "https://trust.kahoot.com/privacy-policy/", "statusPage": "https://status.kahoot.com", "changelog": "", "securityTxt": "valid", "checked": "2026-11-03", "notes": [ "The terms, effective 12 March 2025, name Kahoot! AS and choose Norwegian law and the Oslo courts. The privacy notice, effective 22 October 2026, gives organisation number 997 770 234 and the Oslo address.", "The Acceptable Use Policy of 22 October 2026 forbids access through bots, scrapers or crawlers and AI training on service materials without written consent. Recorded as a fact.", "kahoot.com, kahoot360.com and trust.kahoot.com allow all crawlers except /wp-admin/. support.kahoot.com's robots.txt allows the article paths, but the host answered with a Cloudflare check. results.kahoot.com/robots.txt returns 404.", "kahoot.com/.well-known/security.txt lists security@kahoot.com, Expires 2027-10-02 and the policy at kahoot.com/disclosure-policy.txt, which pays no rewards.", "RDAP gives kahoot.com a registration date of 1 September 1998." ], "score": 89 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/kahoot.json", "live": { "slug": "kahoot", "vendorStatus": { "page": "https://status.kahoot.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-04T21:26:02.271043493Z" }, "securityTxt": { "url": "https://kahoot.com/.well-known/security.txt", "state": "valid", "expires": "2027-10-02T16:01:01.000Z", "checkedAt": "2026-11-04T15:54:09.411218799Z" }, "updatedAt": "2026-11-04T21:26:02.271043493Z" } }, "answer": "Kahoot! scores 55.2 (C) on agent readiness against Quizgecko's 33 (F), and leads in 5 of 7 scored categories. Quizgecko leads on schema \u0026 documentation.", "b": { "slug": "quizgecko", "name": "Quizgecko", "vendor": "Version Zero Limited", "vendorUrl": "https://quizgecko.com", "kind": "http-api", "category": "learning", "summary": "Quizgecko is a study app from Version Zero Limited that turns notes, documents, links and recordings into quizzes, flashcards, notes and podcasts. Its V2 API generates a course from text, a URL, uploads or a topic and edits the quizzes.", "url": "https://www.anchorterminal.com/tools/quizgecko", "markdownUrl": "https://www.anchorterminal.com/tools/quizgecko.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/quizgecko.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/quizgecko.json", "dns": "quizgecko.grade.anchorterminal.com", "transports": [ "http" ], "remoteUrl": "https://api.quizgecko.com/v2", "packages": [], "auth": "api-key", "authNotes": "Bearer API token in the Authorization header, generated on the API docs page after logging in; the docs say to contact Quizgecko for API access. The same page documents `?api_key=` as a query parameter for local testing. No scopes, expiry or rotation are described. An unauthenticated GET to api.quizgecko.com/v2/usage answered 302 to the login page rather than 401 on 3 November 2026 (https://quizgecko.com/api-docs).", "pricing": "freemium", "pricingNotes": "No API price is published. llms.txt gives the app plans as of November 2026 in US dollars, a Free plan with 3 new sets a week, Plus at $16 a month or $108 a year for 20 sets a month, and Ultra at $29 a month or $276 a year for unlimited sets and LMS export. API access is \"contact us\", and /usage reports a monthly course-creation limit per account. The plans page at quizgecko.com/plans answered a Cloudflare challenge (https://quizgecko.com/llms.txt).", "priceSummary": "$16 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API docs, the OpenAPI document, the API catalogue or llms.txt (checked 2026-11-03).", "endpoints": [] }, "toolCount": 0, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://quizgecko.com/api-docs", "llmsTxt": "https://quizgecko.com/llms.txt", "openapi": "https://quizgecko.com/.well-known/openapi-v2.json", "capabilities": [ "learning.quiz", "learning.flashcards", "learning.courses" ], "tags": [ "hosted", "official", "closed-source", "openapi", "llms-txt", "sales-led", "freemium", "ios", "android", "uk" ], "lastRelease": "2026-10-27", "graded": true, "anchor": { "graded": true, "score": 33, "grade": "F", "agentReady": false, "rank": 1261, "ranked": true, "rankOf": 1349, "categoryRank": 6, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 45, "maintenance": 55, "payments": 15, "reliability": 20, "schema": 68, "security": 5, "transparency": 35 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "low", "date": "2026-11-03" }, "negative": 0, "verdict": "A small OpenAPI 3.1 surface generates a course of quizzes, flashcards and notes from text, a URL or an upload and polls it to completion. API access is granted on request with no published price or rate limit, one bearer token that may travel in the query string, and the terms, privacy policy and security page could not be read.", "bestFor": "An agent that has to turn a person's own material into a quiz, flashcards and notes in one call and can wait for generation.", "strengths": [ "Public OpenAPI 3.1.0 document and an RFC 9727 API catalogue at /.well-known, plus llms.txt", "One POST /generate call turns text, a URL, uploads or a topic into a course with quizzes, flashcards and study notes, with language, difficulty and question-type options", "A generation-status endpoint reports progress and per-module readiness so an agent can poll instead of guessing", "App releases on 27 August, 14, 24 and 27 October 2026 on the App Store" ], "weaknesses": [ "API access is by contacting Quizgecko, with no published API price, rate limit, SLA or status page", "One bearer token with no scopes, and `?api_key=` in the query string is a documented option", "The question endpoints and file upload are documented in HTML but missing from the OpenAPI document, and the PUT /quizzes body is an untyped object", "Terms, privacy policy, plans and security pages answered a Cloudflare challenge or are disallowed by robots.txt, so data handling is unverified" ], "agentNotes": [ "Ask the owner to request API access and generate a token on quizgecko.com/api-docs; there is no self-serve key", "Send the token only in the Authorization header, never as `?api_key=`", "After POST /generate, poll GET /courses/{course}/generation-status until status is completed or failed, then read the course and its quizzes", "Check GET /usage before generating; the monthly course-creation limit returns an error with meta.monthly_limit and meta.monthly_used", "Upload files with POST https://api.quizgecko.com/v1/file/upload and pass the returned upload_id in upload_ids" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "F", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 33 } ], "editorialScores": { "ergonomics": 45, "maintenance": 55, "payments": 15, "reliability": 20, "schema": 68, "security": 5, "transparency": 13 }, "provenanceScore": 57, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl -H \"Authorization: Bearer YOUR_API_KEY_HERE\" https://api.quizgecko.com/v2/usage" }, "letme": { "capability": "https://letme.dev/learning.quiz", "tool": "https://letme.dev/quizgecko" }, "area": "everyday", "unitPrices": [ { "item": "Plus plan (app), monthly", "unit": "month", "usd": 16, "note": "$108 a year; 20 new sets a month. API access is by request and has no published price" }, { "item": "Ultra plan (app), monthly", "unit": "month", "usd": 29, "note": "$276 a year; unlimited sets, LMS export" } ], "provenance": { "legalEntity": "Version Zero Limited", "domain": "quizgecko.com", "domainRegistered": "2022-10-28", "endpointOnVendorDomain": true, "terms": "https://quizgecko.com/terms", "privacy": "https://quizgecko.com/privacy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-11-03", "notes": [ "Version Zero Limited is the seller on the App Store listing and company 13849704 at Companies House (incorporated 14 January 2022, London, one director). The terms page answered a Cloudflare challenge, so the entity named in the terms was not read.", "The terms and privacy URLs are the ones llms.txt and the API catalogue link. Neither was readable on 3 November 2026, the terms behind a Cloudflare challenge and the privacy page under a robots.txt disallow of /privacy-policy (the /privacy path redirects there per the App Store link).", "robots.txt carries Content-Signal search=yes, ai-input=yes, ai-train=no and disallows /api/, /privacy-policy, /billing, /generate and logged-in pages. /api-docs and /.well-known are allowed and were read.", "RDAP at Verisign gives quizgecko.com a registration date of 28 October 2022.", "No status page found; status.quizgecko.com has no DNS record. The API catalogue links a health endpoint at api.quizgecko.com/health, which answered {\"status\":\"ok\"}.", "/.well-known/security.txt returned 404. The security page at quizgecko.com/security answered a Cloudflare challenge." ], "score": 57 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/quizgecko.json", "live": { "slug": "quizgecko", "probe": { "target": "https://api.quizgecko.com/v2", "method": "get", "lastAt": "2026-11-04T21:28:08.44271974Z", "lastOk": true, "lastStatus": 404, "lastMs": 195, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 195, "p95ms24h": 408, "samples24h": 62, "samples30d": 62, "days": [ { "date": "2026-11-04", "probes": 62, "ok": 62 } ] }, "securityTxt": { "url": "https://quizgecko.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-04T15:52:38.600063854Z" }, "updatedAt": "2026-11-04T21:28:08.44271974Z" } }, "edges": [ { "by": 64, "category": "security", "leads": "kahoot", "name": "Security \u0026 auth", "reasons": { "a": "OAuth 2.0 client credentials with an opaque bearer token from a Keycloak realm; the client id and secret are issued by Kahoot! and the spec defines no scopes (24 of 30). The API is read-only by design and reaches one organisation's data (16 of 20). Open-ended, word-cloud and brainstorming answers are participant-written text with no guidance on handling it (5 of 15). Enterprise admins get user management and reports, but no per-call API log is documented (4 of 15). security.txt with Expires 2027-10-02, a published disclosure policy without rewards, ISO 27001 certification and SOC 2 Type 2 stated (20). 24 + 16 + 5 + 4 + 20 = 69.", "b": "One bearer token per account with no scopes, expiry or rotation described, and `?api_key=` is documented as a query-string option, so 10 less 10 (0 of 30). No read-only mode or confirmation for edits (0 of 20). The API fetches URLs and uploads the owner supplies and returns generated text; no guidance on treating fetched content as untrusted (3 of 15). GET /usage shows counts only, no per-call log (2 of 15). /.well-known/security.txt returned 404, the security page answered a Cloudflare challenge and no disclosure policy, bounty or certification was found elsewhere (0 of 20, with the security page unchecked). 0 + 0 + 3 + 2 + 0 = 5." }, "scores": { "a": 69, "b": 5 } }, { "by": 38, "category": "transparency", "leads": "kahoot", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed service with clear terms naming Kahoot! AS, Norwegian law and an Acceptable Use Policy dated 22 October 2026 (15 of 30). Privacy notice effective 22 October 2026 with a DPA and a subprocessor list dated 3 March 2025; retention is stated as the relationship plus limitation periods, with 24 months for candidates and six months for backups, and AI vendors may not train on platform data (24 of 30). No deprecation policy or notice period found (0 of 20). Fourteen subprocessors named with countries, AWS, Google Cloud, Aiven, OVH and Hetzner among them, and US or EU hosting on enterprise (18 of 20). 15 + 24 + 0 + 18 = 57.", "b": "Closed service. The terms page answered a Cloudflare challenge, so the entity and terms were read only from Companies House and the App Store (8 of 30). The privacy policy is disallowed by robots.txt and the security page is behind the challenge, so retention and data-handling statements are unread (0 of 30). V1 is called legacy and still served, with no date or policy (5 of 20). No subprocessors or data locations found on the readable pages (0 of 20). 8 + 0 + 5 + 0 = 13." }, "scores": { "a": 73, "b": 35 } }, { "by": 25, "category": "reliability", "leads": "kahoot", "name": "Reliability", "reasons": { "a": "Read with the hosted lines. status.kahoot.com is an Atlassian Statuspage with component history (20). One incident since 5 August 2026, YouTube video disruptions on 22 September, minor, about six hours (20). No rate limits in the OpenAPI file, and the support guide that might hold them answered our reader with a Cloudflare check (0). No 429 or retry guidance (0). No SLA found; the Master Service Agreement on the trust centre wasn't read (0). The spec is version 0.1.0 with no stability statement, though the enterprise page sells the API as a feature (5 of 10). 20 + 20 + 0 + 0 + 0 + 5 = 45.", "b": "Read with the hosted lines. No status page found, and status.quizgecko.com has no DNS record; the API catalogue links only a health endpoint that answered {\"status\":\"ok\"} (0). No readable incident history (5). No rate limit with numbers; the OpenAPI document lists a 429 and GET /usage reports a monthly course-creation limit, which is a quota, not a rate (5 of 15). No Retry-After, backoff guidance or idempotency keys, and generation is a write that creates a course each time (0). No SLA (0). V2 is the current API and is not marked beta (10). 0 + 5 + 5 + 0 + 0 + 10 = 20." }, "scores": { "a": 45, "b": 20 } }, { "by": 21, "category": "ergonomics", "leads": "kahoot", "name": "Agent ergonomics", "reasons": { "a": "Eleven compact GET endpoints returning typed JSON (20 of 25). Cursor pagination with `limit` up to 100 on users, versions and games, and `startedSince` on games; no field selection (16 of 20). Only 401 and 403 are documented, with no body schema or codes to branch on (6 of 20). Read-only, so every call is safe to retry (16 of 20). One or two path parameters per call and sensible paging defaults, but no official SDK in any language (8 of 15). 20 + 16 + 6 + 16 + 8 = 66.", "b": "Six operations with compact responses, a generation-status call that returns progress without the course body, and no field selection (15 of 25). No list endpoints, so no pagination or filtering to speak of (5 of 20). Validation errors are keyed by field and the monthly-limit error carries the limit and usage, but HTTP codes are documented only in the spec (12 of 20). No idempotency key; a retried POST /generate creates another course, and regeneration through quiz_id is the only guard (5 of 20). One source field is enough to generate, options have defaults, but there are no SDKs (8 of 15). 15 + 5 + 12 + 5 + 8 = 45." }, "scores": { "a": 66, "b": 45 } }, { "by": 6, "category": "schema", "leads": "quizgecko", "name": "Schema \u0026 documentation", "reasons": { "a": "Public OpenAPI 3.1.0 at results.kahoot.com/openapi (25). No llms.txt on kahoot.com, 404 on 3 November 2026 (0). Every operation has a one-line description and the schemas describe each answer type, but nothing says when to use an endpoint or what the data window is (12 of 20). Path ids are typed as UUID, `limit` has a 1 to 100 range and default, 12 enums such as game mode and answer status, and a discriminator on answer `type` (12 of 15). Twelve example values in the schemas, but responses list only 200, 401 and 403 with no error body (8 of 15). A /v1 prefix and an ApiVersion schema, with no public changelog for the API (5 of 15). 25 + 0 + 12 + 12 + 8 + 5 = 62.", "b": "Public OpenAPI 3.1.0 document at /.well-known/openapi-v2.json, linked from an RFC 9727 API catalogue (25). llms.txt on quizgecko.com describes the product, plans and API (10). Every operation has a summary and POST /generate a description; the HTML docs explain the generate, poll, read, edit flow, but there is no when-not-to-use guidance (10 of 20). The spec has no enums, PUT /quizzes takes an object with no defined properties, and the question endpoints and file upload are absent from it; the HTML docs give the difficulty and status enumerations (6 of 15). Request and response examples throughout the HTML docs, five error codes with one envelope, but the usage examples disagree with each other on the monthly limit (10 of 15). V1 and V2 are separate paths with separate docs and V1 is called legacy, but there is no changelog or dated notice (7 of 15). 25 + 10 + 10 + 6 + 10 + 7 = 68." }, "scores": { "a": 62, "b": 68 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Kahoot! AS", "b": "Version Zero Limited", "name": "Vendor" }, { "a": "no (local only)", "b": "https://api.quizgecko.com/v2", "name": "Hosted endpoint" }, { "a": "", "b": "HTTP", "name": "Transports" }, { "a": "OAuth", "b": "API key", "name": "Auth" }, { "a": "Paid", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Closed service under the Kahoot! Terms and Conditions (Kahoot! AS), effective 12 March 2025, with an Acceptable Use Policy effective 22 October 2026.", "b": "none", "name": "Licence" }, { "a": "none", "b": "0", "name": "Tools exposed" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-27", "b": "2026-10-27", "name": "Last release" }, { "a": "2025-03-12", "b": "2026-09-12", "name": "Terms last updated" }, { "a": "2026-10-22", "b": "2026-10-21", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "yes", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" } ], "faq": [ { "answer": "Kahoot! scores 55.2 (C) on agent readiness against Quizgecko's 33 (F), and leads in 5 of 7 scored categories. Quizgecko leads on schema \u0026 documentation.", "question": "Which is better for AI agents, Kahoot! or Quizgecko?" }, { "answer": "Kahoot! uses an OAuth sign-in. Quizgecko needs an API key.", "question": "Do Kahoot! and Quizgecko need an API key?" }, { "answer": "No hosted endpoint is listed for Kahoot!. Quizgecko has a hosted endpoint at https://api.quizgecko.com/v2.", "question": "Can an agent call Kahoot! and Quizgecko without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 45 against 20", "Agent ergonomics, 66 against 45", "Security \u0026 auth, 69 against 5", "Transparency \u0026 trust, 73 against 35" ], "also": null, "goodFor": "An enterprise's own agents pulling session results, participants and answers into BI or an LMS.", "slug": "kahoot", "watchFor": "API credentials are issued by Kahoot! to organisations on an enterprise plan priced by quote; no self-serve key, trial or free tier for the API" }, { "aheadOn": [ "Schema \u0026 documentation, 68 against 62" ], "also": [ "A hosted endpoint, with nothing to install" ], "goodFor": "An agent that has to turn a person's own material into a quiz, flashcards and notes in one call and can wait for generation.", "slug": "quizgecko", "watchFor": "API access is by contacting Quizgecko, with no published API price, rate limit, SLA or status page" } ], "history": null, "job": { "capability": "learning.quiz", "name": "Learning quiz" }, "others": [ { "json": "https://www.anchorterminal.com/compare/canvas-lms-vs-quizgecko.json", "title": "Instructure Canvas vs Quizgecko", "url": "https://www.anchorterminal.com/compare/canvas-lms-vs-quizgecko" }, { "json": "https://www.anchorterminal.com/compare/kahoot-vs-learnosity.json", "title": "Kahoot! vs Learnosity", "url": "https://www.anchorterminal.com/compare/kahoot-vs-learnosity" }, { "json": "https://www.anchorterminal.com/compare/kahoot-vs-moodle.json", "title": "Kahoot! vs Moodle", "url": "https://www.anchorterminal.com/compare/kahoot-vs-moodle" }, { "json": "https://www.anchorterminal.com/compare/learnosity-vs-quizgecko.json", "title": "Learnosity vs Quizgecko", "url": "https://www.anchorterminal.com/compare/learnosity-vs-quizgecko" }, { "json": "https://www.anchorterminal.com/compare/moodle-vs-quizgecko.json", "title": "Moodle vs Quizgecko", "url": "https://www.anchorterminal.com/compare/moodle-vs-quizgecko" }, { "json": "https://www.anchorterminal.com/compare/canvas-lms-vs-kahoot.json", "title": "Instructure Canvas vs Kahoot!", "url": "https://www.anchorterminal.com/compare/canvas-lms-vs-kahoot" } ], "panel": null, "scores": [ { "by": 25, "edge": "kahoot", "kahoot": 45, "key": "reliability", "name": "Reliability", "quizgecko": 20, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 6, "edge": "quizgecko", "kahoot": 62, "key": "schema", "name": "Schema \u0026 documentation", "quizgecko": 68, "weight": 13 }, { "by": 21, "edge": "kahoot", "kahoot": 66, "key": "ergonomics", "name": "Agent ergonomics", "quizgecko": 45, "weight": 13 }, { "by": 64, "edge": "kahoot", "kahoot": 69, "key": "security", "name": "Security \u0026 auth", "quizgecko": 5, "weight": 14 }, { "by": 0, "edge": "", "kahoot": 15, "key": "payments", "name": "Payments \u0026 pricing", "quizgecko": 15, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 3, "edge": "kahoot", "kahoot": 58, "key": "maintenance", "name": "Maintenance \u0026 community", "quizgecko": 55, "weight": 7 }, { "by": 38, "edge": "kahoot", "kahoot": 73, "key": "transparency", "name": "Transparency \u0026 trust", "quizgecko": 35, "weight": 7 } ], "summary": "Kahoot! scores 55.2 (C) on agent readiness against Quizgecko's 33 (F), and leads in 5 of 7 scored categories. Quizgecko leads on schema \u0026 documentation. Both do learning quiz.", "tasks": null, "tutorials": [], "verdicts": { "kahoot": "A public OpenAPI file describes a read-only Data API of 11 endpoints with cursor pagination and OAuth 2.0 client credentials, backed by a status page and ISO 27001. Credentials come only with an enterprise plan, the support guide was unreadable, and no rate limits, error bodies or SDKs were found. An agent cannot create or run a kahoot.", "quizgecko": "A small OpenAPI 3.1 surface generates a course of quizzes, flashcards and notes from text, a URL or an upload and polls it to completion. API access is granted on request with no published price or rate limit, one bearer token that may travel in the query string, and the terms, privacy policy and security page could not be read." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/kahoot-vs-quizgecko", "json": "https://www.anchorterminal.com/compare/kahoot-vs-quizgecko.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/kahoot-vs-quizgecko.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/kahoot-vs-quizgecko.min.md" }, "markdown": "Kahoot! scores 55.2 (C) on agent readiness against Quizgecko's 33 (F), and leads in 5 of 7 scored categories. Quizgecko leads on schema \u0026 documentation. Both do learning quiz.\n\n- Kahoot!: grade C, 55.2/100, rank #782 of 1349. Markdown https://www.anchorterminal.com/tools/kahoot.md · JSON https://www.anchorterminal.com/api/v1/tools/kahoot.json\n- Quizgecko: grade F, 33/100, rank #1261 of 1349. Markdown https://www.anchorterminal.com/tools/quizgecko.md · JSON https://www.anchorterminal.com/api/v1/tools/quizgecko.json\n- Best learning, tutoring and assessment tools for AI agents: https://www.anchorterminal.com/best/learning/index.md\n- All 10 learning comparisons: https://www.anchorterminal.com/compare/learning/index.md\n\n## Which one, for what\n\n### Kahoot! (C)\n\nGood for: An enterprise's own agents pulling session results, participants and answers into BI or an LMS.\n\nAhead on:\n- Reliability, 45 against 20\n- Agent ergonomics, 66 against 45\n- Security \u0026 auth, 69 against 5\n- Transparency \u0026 trust, 73 against 35\n\nWatch for: API credentials are issued by Kahoot! to organisations on an enterprise plan priced by quote; no self-serve key, trial or free tier for the API\n\n### Quizgecko (F)\n\nGood for: An agent that has to turn a person's own material into a quiz, flashcards and notes in one call and can wait for generation.\n\nAhead on:\n- Schema \u0026 documentation, 68 against 62\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n\nWatch for: API access is by contacting Quizgecko, with no published API price, rate limit, SLA or status page\n\n\n## Why the edge\n\n### Security \u0026 auth: Kahoot! +64\n\n- Kahoot! (69): OAuth 2.0 client credentials with an opaque bearer token from a Keycloak realm; the client id and secret are issued by Kahoot! and the spec defines no scopes (24 of 30). The API is read-only by design and reaches one organisation's data (16 of 20). Open-ended, word-cloud and brainstorming answers are participant-written text with no guidance on handling it (5 of 15). Enterprise admins get user management and reports, but no per-call API log is documented (4 of 15). security.txt with Expires 2027-10-02, a published disclosure policy without rewards, ISO 27001 certification and SOC 2 Type 2 stated (20). 24 + 16 + 5 + 4 + 20 = 69.\n- Quizgecko (5): One bearer token per account with no scopes, expiry or rotation described, and `?api_key=` is documented as a query-string option, so 10 less 10 (0 of 30). No read-only mode or confirmation for edits (0 of 20). The API fetches URLs and uploads the owner supplies and returns generated text; no guidance on treating fetched content as untrusted (3 of 15). GET /usage shows counts only, no per-call log (2 of 15). /.well-known/security.txt returned 404, the security page answered a Cloudflare challenge and no disclosure policy, bounty or certification was found elsewhere (0 of 20, with the security page unchecked). 0 + 0 + 3 + 2 + 0 = 5.\n\n### Transparency \u0026 trust: Kahoot! +38\n\n- Kahoot! (73): Closed service with clear terms naming Kahoot! AS, Norwegian law and an Acceptable Use Policy dated 22 October 2026 (15 of 30). Privacy notice effective 22 October 2026 with a DPA and a subprocessor list dated 3 March 2025; retention is stated as the relationship plus limitation periods, with 24 months for candidates and six months for backups, and AI vendors may not train on platform data (24 of 30). No deprecation policy or notice period found (0 of 20). Fourteen subprocessors named with countries, AWS, Google Cloud, Aiven, OVH and Hetzner among them, and US or EU hosting on enterprise (18 of 20). 15 + 24 + 0 + 18 = 57.\n- Quizgecko (35): Closed service. The terms page answered a Cloudflare challenge, so the entity and terms were read only from Companies House and the App Store (8 of 30). The privacy policy is disallowed by robots.txt and the security page is behind the challenge, so retention and data-handling statements are unread (0 of 30). V1 is called legacy and still served, with no date or policy (5 of 20). No subprocessors or data locations found on the readable pages (0 of 20). 8 + 0 + 5 + 0 = 13.\n\n### Reliability: Kahoot! +25\n\n- Kahoot! (45): Read with the hosted lines. status.kahoot.com is an Atlassian Statuspage with component history (20). One incident since 5 August 2026, YouTube video disruptions on 22 September, minor, about six hours (20). No rate limits in the OpenAPI file, and the support guide that might hold them answered our reader with a Cloudflare check (0). No 429 or retry guidance (0). No SLA found; the Master Service Agreement on the trust centre wasn't read (0). The spec is version 0.1.0 with no stability statement, though the enterprise page sells the API as a feature (5 of 10). 20 + 20 + 0 + 0 + 0 + 5 = 45.\n- Quizgecko (20): Read with the hosted lines. No status page found, and status.quizgecko.com has no DNS record; the API catalogue links only a health endpoint that answered {\"status\":\"ok\"} (0). No readable incident history (5). No rate limit with numbers; the OpenAPI document lists a 429 and GET /usage reports a monthly course-creation limit, which is a quota, not a rate (5 of 15). No Retry-After, backoff guidance or idempotency keys, and generation is a write that creates a course each time (0). No SLA (0). V2 is the current API and is not marked beta (10). 0 + 5 + 5 + 0 + 0 + 10 = 20.\n\n### Agent ergonomics: Kahoot! +21\n\n- Kahoot! (66): Eleven compact GET endpoints returning typed JSON (20 of 25). Cursor pagination with `limit` up to 100 on users, versions and games, and `startedSince` on games; no field selection (16 of 20). Only 401 and 403 are documented, with no body schema or codes to branch on (6 of 20). Read-only, so every call is safe to retry (16 of 20). One or two path parameters per call and sensible paging defaults, but no official SDK in any language (8 of 15). 20 + 16 + 6 + 16 + 8 = 66.\n- Quizgecko (45): Six operations with compact responses, a generation-status call that returns progress without the course body, and no field selection (15 of 25). No list endpoints, so no pagination or filtering to speak of (5 of 20). Validation errors are keyed by field and the monthly-limit error carries the limit and usage, but HTTP codes are documented only in the spec (12 of 20). No idempotency key; a retried POST /generate creates another course, and regeneration through quiz_id is the only guard (5 of 20). One source field is enough to generate, options have defaults, but there are no SDKs (8 of 15). 15 + 5 + 12 + 5 + 8 = 45.\n\n### Schema \u0026 documentation: Quizgecko +6\n\n- Kahoot! (62): Public OpenAPI 3.1.0 at results.kahoot.com/openapi (25). No llms.txt on kahoot.com, 404 on 3 November 2026 (0). Every operation has a one-line description and the schemas describe each answer type, but nothing says when to use an endpoint or what the data window is (12 of 20). Path ids are typed as UUID, `limit` has a 1 to 100 range and default, 12 enums such as game mode and answer status, and a discriminator on answer `type` (12 of 15). Twelve example values in the schemas, but responses list only 200, 401 and 403 with no error body (8 of 15). A /v1 prefix and an ApiVersion schema, with no public changelog for the API (5 of 15). 25 + 0 + 12 + 12 + 8 + 5 = 62.\n- Quizgecko (68): Public OpenAPI 3.1.0 document at /.well-known/openapi-v2.json, linked from an RFC 9727 API catalogue (25). llms.txt on quizgecko.com describes the product, plans and API (10). Every operation has a summary and POST /generate a description; the HTML docs explain the generate, poll, read, edit flow, but there is no when-not-to-use guidance (10 of 20). The spec has no enums, PUT /quizzes takes an object with no defined properties, and the question endpoints and file upload are absent from it; the HTML docs give the difficulty and status enumerations (6 of 15). Request and response examples throughout the HTML docs, five error codes with one envelope, but the usage examples disagree with each other on the monthly limit (10 of 15). V1 and V2 are separate paths with separate docs and V1 is called legacy, but there is no changelog or dated notice (7 of 15). 25 + 10 + 10 + 6 + 10 + 7 = 68.\n\n## Score by category\n\n| Category | Weight | Kahoot! | Quizgecko | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 45 | 20 | Kahoot! +25 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 62 | 68 | Quizgecko +6 |\n| Agent ergonomics | 13% (16.2 this run) | 66 | 45 | Kahoot! +21 |\n| Security \u0026 auth | 14% (17.5 this run) | 69 | 5 | Kahoot! +64 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 15 | 15 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 58 | 55 | Kahoot! +3 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 73 | 35 | Kahoot! +38 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **55.2 · C** | **33 · F** | |\n\n## Facts side by side\n\n| Fact | Kahoot! | Quizgecko |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Kahoot! AS | Version Zero Limited |\n| Hosted endpoint | no (local only) | `https://api.quizgecko.com/v2` |\n| Transports | | HTTP |\n| Auth | OAuth | API key |\n| Pricing | Paid | Freemium |\n| x402 | no | no |\n| Licence | Closed service under the Kahoot! Terms and Conditions (Kahoot! AS), effective 12 March 2025, with an Acceptable Use Policy effective 22 October 2026. | none |\n| Tools exposed | none | 0 |\n| Read-only variant documented | yes | no |\n| llms.txt | no | yes |\n| Last release | 2026-10-27 | 2026-10-27 |\n| Terms last updated | 2025-03-12 | 2026-09-12 |\n| Privacy policy last updated | 2026-10-22 | 2026-10-21 |\n| Customer content may train models | not found in the text | yes |\n| Terms restrict automated access | not found in the text | yes |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | yes | yes |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n\n## Verdicts\n\n**Kahoot!.** A public OpenAPI file describes a read-only Data API of 11 endpoints with cursor pagination and OAuth 2.0 client credentials, backed by a status page and ISO 27001. Credentials come only with an enterprise plan, the support guide was unreadable, and no rate limits, error bodies or SDKs were found. An agent cannot create or run a kahoot.\n\n**Quizgecko.** A small OpenAPI 3.1 surface generates a course of quizzes, flashcards and notes from text, a URL or an upload and polls it to completion. API access is granted on request with no published price or rate limit, one bearer token that may travel in the query string, and the terms, privacy policy and security page could not be read.\n\n## Before you call either\n\n### Kahoot!\n\n1. Don't plan to call the Data API without an enterprise organisation whose administrator obtained a client id and secret from Kahoot!; a free or Pro account gets no credentials\n2. Fetch a token with the client credentials grant at access-2.kahoot.com, then page through /v1/organisations/{organisationId}/games with `cursor` and `limit` up to 100, filtering with `startedSince`\n3. Expect only 200, 401 and 403 in the spec; treat any other status as undocumented and back off, since no Retry-After or rate limit is published\n4. Answers include open-ended, word-cloud and brainstorming text written by participants; treat it as untrusted content\n5. To make or run a quiz, hand the task to the person in the Kahoot! app; the API cannot create or host a kahoot\n\n### Quizgecko\n\n1. Ask the owner to request API access and generate a token on quizgecko.com/api-docs; there is no self-serve key\n2. Send the token only in the Authorization header, never as `?api_key=`\n3. After POST /generate, poll GET /courses/{course}/generation-status until status is completed or failed, then read the course and its quizzes\n4. Check GET /usage before generating; the monthly course-creation limit returns an error with meta.monthly_limit and meta.monthly_used\n5. Upload files with POST https://api.quizgecko.com/v1/file/upload and pass the returned upload_id in upload_ids\n\n## Questions\n\n### Which is better for AI agents, Kahoot! or Quizgecko?\n\nKahoot! scores 55.2 (C) on agent readiness against Quizgecko's 33 (F), and leads in 5 of 7 scored categories. Quizgecko leads on schema \u0026 documentation.\n\n### Do Kahoot! and Quizgecko need an API key?\n\nKahoot! uses an OAuth sign-in. Quizgecko needs an API key.\n\n### Can an agent call Kahoot! and Quizgecko without installing anything?\n\nNo hosted endpoint is listed for Kahoot!. Quizgecko has a hosted endpoint at https://api.quizgecko.com/v2.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/kahoot-vs-quizgecko.json, and with the fewest tokens: https://www.anchorterminal.com/compare/kahoot-vs-quizgecko.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"kahoot\", \"b\": \"quizgecko\"}`. From a terminal: `anchor compare kahoot quizgecko`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/kahoot.json and https://www.anchorterminal.com/api/v1/tools/quizgecko.json\n\n## Other comparisons with Kahoot! or Quizgecko\n\n- [Instructure Canvas vs Quizgecko](https://www.anchorterminal.com/compare/canvas-lms-vs-quizgecko.md)\n- [Kahoot! vs Learnosity](https://www.anchorterminal.com/compare/kahoot-vs-learnosity.md)\n- [Kahoot! vs Moodle](https://www.anchorterminal.com/compare/kahoot-vs-moodle.md)\n- [Learnosity vs Quizgecko](https://www.anchorterminal.com/compare/learnosity-vs-quizgecko.md)\n- [Moodle vs Quizgecko](https://www.anchorterminal.com/compare/moodle-vs-quizgecko.md)\n- [Instructure Canvas vs Kahoot!](https://www.anchorterminal.com/compare/canvas-lms-vs-kahoot.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-04", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Kahoot! vs Quizgecko", "url": "" } ], "description": "Kahoot! scores 55.2 (C) to Quizgecko's 33 (F) for learning quiz. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Kahoot! C 55.2", "Quizgecko F 33", "scores" ], "h1": "Kahoot! vs Quizgecko", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/kahoot-vs-quizgecko", "published": "2026-10-01", "section": "tools", "title": "Kahoot! vs Quizgecko for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-04", "url": "https://www.anchorterminal.com/compare/kahoot-vs-quizgecko" }, "tokens": { "markdown": 3600, "slim": 2230 }, "version": 1 }