# Learnosity vs Moodle

> Moodle scores 67.7 (B) to Learnosity's 60.2 (C) for learning quiz. Prices, MCP, x402, uptime and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/learnosity-vs-moodle
- Markdown: https://www.anchorterminal.com/compare/learnosity-vs-moodle.md (~3,900 tokens)
- Site index for agents: https://www.anchorterminal.com/llms.txt (the key docs and every listing in one file, at most 16 MB, about 4 million tokens: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- MCP: https://www.anchorterminal.com/mcp (the whole catalogue as tools, no key)
- DNS: dig +short TXT <slug>.grade.anchorterminal.com (the grade as a DNS TXT record, for a sandbox with no HTTP where names still resolve; also top., best.<category>. and <a>.vs.<b>. under the zone, and the same under grade.letme.dev)
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)
- Updated: 2026-11-03

Moodle scores 67.7 (B) on agent readiness against Learnosity's 60.2 (C), and leads in 4 of 7 scored categories. Learnosity leads on agent ergonomics. Both do learning quiz.

- Learnosity: grade C, 60.2/100, rank #581 of 1349. Markdown https://www.anchorterminal.com/tools/learnosity.md · JSON https://www.anchorterminal.com/api/v1/tools/learnosity.json
- Moodle: grade B, 67.7/100, rank #280 of 1349. Markdown https://www.anchorterminal.com/tools/moodle.md · JSON https://www.anchorterminal.com/api/v1/tools/moodle.json
- Best learning, tutoring and assessment tools for AI agents: https://www.anchorterminal.com/best/learning/index.md
- All 10 learning comparisons: https://www.anchorterminal.com/compare/learning/index.md

## Which one, for what

### Learnosity (C)

Good for: A product team embedding assessment at scale, where an agent imports items, reads sessions and scores, or runs reports under an existing contract.

Ahead on:
- Agent ergonomics, 61 against 49

Watch for: Access needs a commercial agreement; no price, trial or self-serve key is published

### Moodle (B)

Good for: An agent working inside an institution or company that runs Moodle and can get a scoped token, reading course content, quiz attempts, assignments and grades or writing grades and enrolments.

Ahead on:
- Reliability, 80 against 75
- Security & auth, 67 against 54
- Payments & pricing, 60 against 10
- Transparency & trust, 76 against 71

Also in its favour:
- Open source

Watch for: A site administrator has to enable web services, build a service and issue a token before any call; nothing is self-serve


## Why the edge

### Payments & pricing: Moodle +50

- Learnosity (10): No x402, MPP or L402 (0). No price published; tiers and support levels are described and a quote comes from sales (0). No free tier or trial for the platform; the demos site runs on a public demos consumer key and the MCP server is free, which is documentation rather than the product (5 of 20). A contract and credentials from Learnosity are needed; only the documentation MCP server is reachable without a person (5 of 20). 0 + 0 + 5 + 5 = 10.
- Moodle (60): Read with the self-hosted rule for free software with nothing to buy. No payment protocol (0 of 40). The licence is public and MoodleCloud's plan prices are public too (20). Free to download and run, with a 28-day MoodleCloud trial that needs no card (20). An owner installs it and issues their own tokens, so no vendor sign-up stands in the way (20). 0 + 20 + 20 + 20 = 60.

### Security & auth: Moodle +13

- Learnosity (54): A consumer key and secret per consumer, with every request signed server-side and the secret never sent; rotation and revocation are not described on public pages (22 of 30). Access is scoped per consumer and the MCP server is read-only, but no read-only Data API credential or confirmation for session deletion was found (8 of 20). The Data API returns learner responses, which are untrusted text, with no guidance (5 of 15). No per-call audit log for the operator found on public pages (3 of 15). ISO 27001 certificate, CSA STAR, a public HECVAT, EU-US DPF and a FedRAMP Moderate authorisation stated by the CTO, security@learnosity.com and a good-faith research authorisation; no security.txt or paid bounty (16 of 20). 22 + 8 + 5 + 3 + 16 = 54.
- Moodle (67): Two credential models. The classic token is one secret per user and service with no scopes, documented in the `wstoken` query parameter, and the 5.3 personal access tokens and OAuth 2 clients carry scopes, expiry from 7 days to 1 year, one-time display and revocation; read as scoped tokens on part of the surface less 10 for the query-string option (18 of 30). Services limited to chosen functions and authorised users, capability checks in every function, IP restriction and valid-until on tokens; no confirmation step for destructive functions (16 of 20). Functions return forum posts, submissions and messages written by users, with no guidance on treating them as untrusted (5 of 15). Moodle logs web service calls in the site logs and 5.3 shows each personal access token's last use and IP; per-call detail wasn't read (10 of 15). security.txt valid to 10 May 2027, a Bugcrowd-linked report form, responsible disclosure with CVEs, advisories released on a schedule across supported branches, no paid bounty (18 of 20). 18 + 16 + 5 + 10 + 18 = 67.

### Agent ergonomics: Learnosity +12

- Learnosity (61): REST endpoints grouped by category, dataset endpoints for bulk reads, and an MCP server with eight compact tools; field selection on Data API responses was not confirmed (18 of 25). Pagination on list endpoints was not read first-hand, so partial credit (8 of 20). Errors carry meta.status, meta.code and meta.message, with a troubleshooting article per code (14 of 20). No idempotency keys; the MCP tools are read-only and say so (6 of 20). SDKs in Python, Node.js, PHP and more handle signing, with few required fields beyond the signature (15). 18 + 8 + 14 + 6 + 15 = 61.
- Moodle (49): About 800 to 900 functions, but a service can expose only the functions an agent needs and each call names one function, so the working set is small (20 of 25). Paging and filtering vary by function; course and user lookups take criteria and some take limits, read only in the catalogue (10 of 20). The REST protocol returns an exception, errorcode and message object on failure, and the 5.3 API returns OAuth2 access_denied with a hint naming the missing scope; the classic shape was not read first-hand on this pass (8 of 20). No idempotency keys; many functions are creates and updates (5 of 20). Required parameters vary by function; no official SDK, only sample clients and community libraries (6 of 15). 20 + 10 + 8 + 5 + 6 = 49.

### Reliability: Moodle +5

- Learnosity (75): Read with the hosted lines on the Data API. Statuspage at status.learnosity.com with component history (20). From 1 August to 3 November 2026 the feed lists six entries, Enhanced Math scoring delays in US-East-1 on 11 September, 2 October and 20 October (the last touching the Data API scoring endpoint for about 4 hours 40 minutes), an LTS remapping issue on 8 October, a demos-site maintenance on 21 to 22 October and Item Pools degraded in all regions for about 2 hours 20 minutes on 26 October, so one incident of an hour or more on a core endpoint and the rest regional or partial (10). Rate limits published per endpoint in 5-second windows (15). A 429 with meta.code 42000 and a stated 5-second wait, but no Retry-After header and no idempotency keys for SET and UPDATE (10 of 15). SLA uptime of 99.8 or 99.9 per cent by support tier on the licences page (10). The APIs are generally available, with LTS versions (10). 20 + 10 + 15 + 10 + 10 + 10 = 75.
- Moodle (80): Read with the local-software lines, since the owner runs Moodle and calls their own site. Official packages from moodle.org and GitHub with supported PHP and database versions stated per release, PostgreSQL 17 and MariaDB 11.4 and up for 5.3 (20). A public test suite (PHPUnit and Behat) and CI; whether the default branch was passing on 3 November was not read, since the repository's workflow pages weren't fetched (12 of 25). Bugs go to the Moodle Tracker, where security issues are triaged into dated advisories and point releases every two months carry fixes; the open bug count was not read (18 of 25). Versioned releases with release notes, upgrade notes and a written deprecation policy (15). Stable since 1.0 in 2002, now 5.3 (15). 20 + 12 + 18 + 15 + 15 = 80.

### Transparency & trust: Moodle +5

- Learnosity (71): Closed service; the website terms name Learnosity Limited and cover the website only, platform terms are in customer contracts, and the SDKs are Apache-2.0 (12 of 30). Privacy policy last updated 26 May 2026, a least-data principle on the product security policy, a DPA and data-protection protocols behind robots.txt disallows, and no retention periods (15 of 30). LTS lifecycle with dated deprecation, end-of-life and sunset for every version (20). AWS hosting in the US, EU and Australia with the customer choosing the region; the subprocessor list is disallowed to crawlers (8 of 20). 12 + 15 + 20 + 8 = 55.
- Moodle (76): GPL-3.0-or-later source (30). Privacy notice last updated October 2025 with a DPA and a GDPR register, no fixed retention periods, and for a self-hosted site the owner is the controller (18 of 30). A written deprecation policy with three stages tied to major versions and upgrade notes, plus a dated release and support calendar to 2029 (20). Sites may register with moodle.org and send statistics, and the AI subsystem names its providers; the privacy notice names no subprocessors or data locations (8 of 20). 30 + 18 + 20 + 8 = 76.

## Score by category

| Category | Weight | Learnosity | Moodle | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 75 | 80 | Moodle +5 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 67 | 66 | Learnosity +1 |
| Agent ergonomics | 13% (16.2 this run) | 61 | 49 | Learnosity +12 |
| Security & auth | 14% (17.5 this run) | 54 | 67 | Moodle +13 |
| Payments & pricing | 10% (12.5 this run) | 10 | 60 | Moodle +50 |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 85 | 81 | Learnosity +4 |
| Transparency & trust | 7% (8.8 this run) | 71 | 76 | Moodle +5 |
| Negative events | ≤15 | 0 | 0 | |
| **Total** | | **60.2 · C** | **67.7 · B** | |

## Facts side by side

| Fact | Learnosity | Moodle |
| --- | --- | --- |
| Kind | HTTP API | HTTP API |
| Vendor | Learnosity | Moodle Pty Ltd |
| Hosted endpoint | `https://mcp.learnosity.com/build/aide` | `https://<site>/webservice/rest/server.php` |
| Transports | HTTP, Streamable HTTP | HTTP |
| Auth | API key | OAuth or key |
| Pricing | Paid | Free |
| x402 | no | no |
| Licence | Proprietary service; SDKs Apache-2.0 | GPL-3.0-or-later |
| Tools exposed | 8 | 0 |
| Read-only variant documented | yes | no |
| llms.txt | no | no |
| Last release | 2026-10-28 | 2026-10-05 |
| Terms last updated | no date given | no document linked |
| Privacy policy last updated | 2026-05-26 | 2025-10-01 |
| Customer content may train models | not found in the text | not read yet |
| Terms restrict automated access | not found in the text | not read yet |
| Terms restrict benchmarking | not found in the text | not read yet |
| Terms or service can change without notice | not found in the text | not read yet |
| Arbitration or class-action waiver | not found in the text | not read yet |

## Verdicts

**Learnosity.** A commercial assessment platform whose Data API reads and writes item banks, learner sessions and scores through signed requests, with published per-endpoint rate limits, dated LTS versions and a free hosted MCP server for its documentation. Access needs an annual per-user contract with no public price, no public OpenAPI document was found, and the subprocessor list is unreadable to crawlers.

**Moodle.** Free GPL software with about 800 typed web service functions over courses, quizzes, assignments and grades, a six-monthly release train with dated security advisories, and in 5.3 a scoped REST API with expiring tokens. An administrator must enable the services and issue tokens, the classic token travels in the query string, and no public OpenAPI file exists without a site.

## Before you call either

### Learnosity

1. Sign every Data API request with the SDK's Init helper using the consumer key, domain and secret; the secret stays on the server and never goes in a request
2. Keep writes under 50 per 5 seconds per endpoint and UPDATE /sessions/item to 1 per 5 seconds; on a 429 wait 5 seconds before retrying
3. Pin production code to the current LTS (v2026.2.LTS) and read the migration guide before moving; developer builds change every two weeks
4. Use https://mcp.learnosity.com/build/aide for documentation lookups only; it cannot call the Data API, and a -32000 error means a rate limit, so stop looping and wait
5. Ask the owner for the consumer credentials and which LTS version their consumer is pinned to before building

### Moodle

1. Ask the site administrator for a token on a custom service limited to the functions you need, with an IP restriction and a valid-until date; don't use the mobile service token for broader work
2. Call https://<site>/webservice/rest/server.php with wsfunction, wstoken and moodlewsrestformat=json, sending the token in the POST body rather than the URL
3. On a 5.3 site, prefer a personal access token or OAuth 2 client for the /api/rest/v2 routes it covers, and expect an access_denied error naming the missing scope
4. Read each function's parameters in the site's API Documentation page; array parameters are flattened as users[0][username] in REST
5. Check the site's Moodle version and the upgrade notes before relying on a function; deprecated external functions are removed outright

## Questions

### Which is better for AI agents, Learnosity or Moodle?

Moodle scores 67.7 (B) on agent readiness against Learnosity's 60.2 (C), and leads in 4 of 7 scored categories. Learnosity leads on agent ergonomics.

### Do Learnosity and Moodle need an API key?

Learnosity needs an API key. Moodle takes an API key or an OAuth sign-in.

### Can an agent call Learnosity and Moodle without installing anything?

Yes. Learnosity has a hosted endpoint at https://mcp.learnosity.com/build/aide and Moodle at https://<site>/webservice/rest/server.php.

### Are Learnosity and Moodle open source?

No open-source release is listed for Learnosity. Moodle is open source (GPL-3.0-or-later).


## For agents

- This comparison as JSON: https://www.anchorterminal.com/compare/learnosity-vs-moodle.json, and with the fewest tokens: https://www.anchorterminal.com/compare/learnosity-vs-moodle.min.md
- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {"a": "learnosity", "b": "moodle"}`. From a terminal: `anchor compare learnosity moodle`
- Each listing in full: https://www.anchorterminal.com/api/v1/tools/learnosity.json and https://www.anchorterminal.com/api/v1/tools/moodle.json

## Other comparisons with Learnosity or Moodle

- [Instructure Canvas vs Learnosity](https://www.anchorterminal.com/compare/canvas-lms-vs-learnosity.md)
- [Kahoot! vs Learnosity](https://www.anchorterminal.com/compare/kahoot-vs-learnosity.md)
- [Kahoot! vs Moodle](https://www.anchorterminal.com/compare/kahoot-vs-moodle.md)
- [Learnosity vs Quizgecko](https://www.anchorterminal.com/compare/learnosity-vs-quizgecko.md)
- [Moodle vs Quizgecko](https://www.anchorterminal.com/compare/moodle-vs-quizgecko.md)
- [Instructure Canvas vs Moodle](https://www.anchorterminal.com/compare/canvas-lms-vs-moodle.md)

---

Query this catalogue directly over MCP: https://www.anchorterminal.com/mcp (Streamable HTTP, no key). How: https://www.anchorterminal.com/agents/#mcp
