{ "data": { "a": { "slug": "magic-patterns", "name": "Magic Patterns", "vendor": "North Park Labs, Inc. (Magic Patterns)", "vendorUrl": "https://www.magicpatterns.com", "kind": "mcp", "category": "design", "summary": "Magic Patterns is an AI design workspace where product teams generate interactive React prototypes from prompts and their own design system. Agents reach it through a hosted MCP server and a v3 REST API that mirrors it.", "url": "https://www.anchorterminal.com/tools/magic-patterns", "markdownUrl": "https://www.anchorterminal.com/tools/magic-patterns.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/magic-patterns.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/magic-patterns.json", "dns": "magic-patterns.grade.anchorterminal.com", "license": "Closed service under the Magic Patterns terms of service (last updated 1 April 2025)", "transports": [ "streamable-http", "http" ], "remoteUrl": "https://mcp.magicpatterns.com/mcp", "packages": [], "auth": "mixed", "authNotes": "The hosted MCP server signs in with OAuth 2.1 (PKCE S256, dynamic client registration, client ID metadata documents and a device flow, at oauth.magicpatterns.com on WorkOS). Scopes are identity only (openid, email, profile, offline_access), so access follows the user's workspace role. An API key from Settings \u003e API Keys, shown once, works for MCP as `Authorization: Bearer` and for REST as `x-mp-api-key`. A read-only MCP endpoint at /mcp/readonly takes the same credentials.", "pricing": "freemium", "pricingNotes": "MCP access needs a paid plan, Starter $20 a seat a month ($17 yearly) with 1,000 credits on top of the free monthly credits, or Business $100 ($85 yearly) with 5,000. On-demand credits beyond that cost $0.02 each on paid plans. One generation typically uses about 70 credits per the docs. Free plan $0 with free monthly credits.", "priceSummary": "$20 / seat-mo", "where": "hosted", "x402": { "level": "no", "evidence": "Subscription credits billed through Stripe. No x402, MPP or L402 in the docs, the v3 OpenAPI or llms.txt (checked 2026-11-06). Out of credits returns 402 with no payment requirements.", "endpoints": [] }, "toolCount": 24, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://www.magicpatterns.com/docs", "llmsTxt": "https://www.magicpatterns.com/docs/llms.txt", "openapi": "https://www.magicpatterns.com/docs/api/create-design.md", "capabilities": [ "design.code", "design.files", "design.components", "design.canvas" ], "tags": [ "hosted", "mcp", "remote-mcp", "oauth", "api-key", "read-only-mode", "llms-txt", "openapi", "freemium", "status-page", "yc" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 63.4, "grade": "B", "agentReady": false, "rank": 517, "ranked": true, "rankOf": 1486, "categoryRank": 4, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 70, "payments": 23, "reliability": 75, "schema": 84, "security": 55, "transparency": 60 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "Agents can create, prompt, read and edit coded prototypes through 24 documented MCP tools or a matching REST API, with a read-only endpoint and 409 conflict checks on writes. MCP access needs a paid seat from $20 a month, OAuth scopes don't narrow access below the user's role, and the status page doesn't track the API or MCP server.", "bestFor": "Generating and iterating on coded React prototypes from a coding agent, and pulling a design into a codebase.", "strengths": [ "A read-only MCP endpoint that does not register the 13 tools that create, change or publish", "Workflows, polling intervals and tool order documented for agents, with llms.txt and Markdown pages", "v3 REST API with an OpenAPI 3.0.3 description that mirrors the MCP tools, so one key works for both", "Writes carry a base artifact ID and fail with 409 on a concurrent change", "Dated product changelog with entries from 2026-08-03 to 2026-11-05" ], "weaknesses": [ "MCP and API-key access need a paid seat, Starter at $20 a month", "OAuth scopes are identity only, so a token can do whatever the user's workspace role allows", "No 429 or backoff guidance and no idempotency keys; generations take 2 to 10 minutes and must be polled", "The status page tracks the web platform and Figma plugin, not the API or MCP server", "Free plan inputs and designs may be used for training and shown publicly, per the terms" ], "agentNotes": [ "Use https://mcp.magicpatterns.com/mcp/readonly when the task only reads designs", "Call `get_design_status` before any change and poll it no more than once every 60 seconds", "Pass `baseArtifactId` from `get_design_system` on writes, and on 409 re-read before retrying", "Treat a 402 as out of credits and ask the user; read tools keep working", "Send `x-mp-agent-name` so the user sees which agent made a change" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 63.4 } ], "editorialScores": { "ergonomics": 67, "maintenance": 70, "payments": 23, "reliability": 75, "schema": 84, "security": 55, "transparency": 42 }, "provenanceScore": 78, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://api.magicpatterns.com/api/v3/health -H \"x-mp-api-key: mp_live_...\"", "claudeCode": "claude mcp add --transport http magic-patterns https://mcp.magicpatterns.com/mcp", "config": { "mcpServers": { "magic-patterns": { "url": "https://mcp.magicpatterns.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/design.code", "tool": "https://letme.dev/magic-patterns" }, "area": "design-diagrams", "unitPrices": [ { "item": "Starter seat", "unit": "seat-month", "usd": 20, "note": "$17 billed yearly, 1,000 credits on top of the free monthly credits" }, { "item": "Business seat", "unit": "seat-month", "usd": 100, "note": "$85 billed yearly, 5,000 credits on top of the free monthly credits" }, { "item": "On-demand credit", "unit": "credit", "usd": 0.02, "note": "Paid plans only, after monthly credits run out. A generation typically uses about 70 credits" } ], "provenance": { "legalEntity": "North Park Labs, Inc.", "domain": "magicpatterns.com", "domainRegistered": "2023-10-23", "endpointOnVendorDomain": true, "terms": "https://www.magicpatterns.com/docs/documentation/legal/terms", "privacy": "https://www.magicpatterns.com/docs/documentation/legal/privacy", "statusPage": "https://magicpatterns.statuspage.io/", "changelog": "https://www.magicpatterns.com/docs/documentation/feature-releases/changelog", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The terms and privacy policy, both last updated 1 April 2025, name North Park Labs, Inc. d.b.a. Magic Patterns, under Delaware law.", "The terms forbid accessing or searching the Services by any means other than the provided interfaces (for example, scraping) and bots that send requests faster than a person could. Public docs pages were read as data.", "www.magicpatterns.com/robots.txt disallows /private/, /settings/, /api/ and /_next/ and allows the docs. magicpatterns.statuspage.io/robots.txt disallows /api/ and /embed/, so status history was read from the page and its Atom feed.", "/.well-known/security.txt returns 404. The security docs page links a Trust Center at trust.magicpatterns.com for SOC 2 reports and subprocessors, which is drawn by script and wasn't read.", "RDAP gives magicpatterns.com a registration date of 23 October 2023. The company was founded in 2023 per its Y Combinator page." ], "score": 78 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/magic-patterns.json", "live": { "slug": "magic-patterns", "probe": { "target": "https://mcp.magicpatterns.com/mcp", "method": "mcp-initialize", "lastAt": "2026-11-07T18:20:36.546371661Z", "lastOk": true, "lastStatus": 401, "lastMs": 191, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 200, "p95ms24h": 512, "samples24h": 200, "samples30d": 200, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 13 }, { "date": "2026-11-07", "probes": 187, "ok": 187 } ] }, "vendorStatus": { "page": "https://magicpatterns.statuspage.io", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T18:21:21.341572331Z" }, "securityTxt": { "url": "https://magicpatterns.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T15:59:36.740973899Z" }, "llmsTxt": { "url": "https://www.magicpatterns.com/docs/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:55.846864963Z" }, "pages": [ { "url": "https://www.magicpatterns.com/docs/documentation/feature-releases/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:31:04.926757349Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "1d6fc782fb69" }, { "url": "https://www.magicpatterns.com/docs/documentation/legal/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:31:07.60138431Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "98e04acdbe99" }, { "url": "https://www.magicpatterns.com/docs/documentation/legal/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:31:09.211996324Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "264ce0076e25" } ], "mcpTools": { "url": "https://mcp.magicpatterns.com/mcp", "checkedAt": "2026-11-07T01:46:04.045898155Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:46:04.045898155Z" }, "updatedAt": "2026-11-07T18:21:21.341572331Z" } }, "answer": "Magic Patterns scores 63.4 (B) on agent readiness against Subframe's 39.8 (E), and leads in 6 of 7 scored categories. Subframe leads on payments \u0026 pricing.", "b": { "slug": "subframe", "name": "Subframe", "vendor": "Atomic Design Inc", "vendorUrl": "https://www.subframe.com", "kind": "mcp", "category": "design", "summary": "Design tool from Atomic Design Inc for React and Tailwind interfaces, with a cloud canvas and a macOS app. Agents read and edit pages, components and themes through a hosted MCP server, and a CLI syncs components into a codebase.", "url": "https://www.anchorterminal.com/tools/subframe", "markdownUrl": "https://www.anchorterminal.com/tools/subframe.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/subframe.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/subframe.json", "dns": "subframe.grade.anchorterminal.com", "repo": "https://github.com/SubframeApp/subframe", "license": "Proprietary service under Atomic Design's terms of service. `@subframe/cli` and `@subframe/core` are marked ISC in their package files and the Claude Code plugin MIT in its manifest, with no licence file in the repository", "transports": [ "http" ], "remoteUrl": "https://mcp.subframe.com/mcp", "packages": [ { "registry": "npm", "name": "@subframe/cli" }, { "registry": "npm", "name": "@subframe/core" } ], "auth": "mixed", "authNotes": "The MCP server takes OAuth only, with dynamic client registration and PKCE, and a person approves access in a browser. Subframe access tokens are not accepted there. What an agent can do follows the user's team role. Admins and Editors can write, and Viewers get a read-only server. The CLI takes an auth token from `SUBFRAME_AUTH_TOKEN` or `--auth-token`, created at app.subframe.com/cli/auth or by the `generate_auth_token` MCP tool. Tokens are shown once and can be deleted. No token scopes or expiry are documented. Access is self-serve.", "pricing": "freemium", "pricingNotes": "Free at $0 with one project, unlimited pages and members, and MCP and CLI access, so an agent's owner can start without a contract. Pro is $20 an editor a month for unlimited projects and six times the AI credits. Viewers are free on every plan. Custom plans are priced on request. MCP calls are not priced separately (https://www.subframe.com/, checked 2026-10-09).", "priceSummary": "$20 / seat-mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the pricing section or the CLI source (checked 2026-10-09).", "endpoints": [] }, "toolCount": 46, "popularity": { "githubStars": 435, "npmWeekly": 1006, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://docs.subframe.com", "llmsTxt": "https://docs.subframe.com/llms.txt", "capabilities": [ "design.files", "design.components", "design.code", "design.canvas", "design.comments" ], "tags": [ "hosted", "mcp", "oauth", "remote-mcp", "cli", "agent-skills", "react", "tailwind", "design-to-code", "freemium", "free-tier", "llms-txt", "closed-source", "macos" ], "lastRelease": "2026-10-08", "graded": true, "anchor": { "graded": true, "score": 39.8, "grade": "E", "agentReady": false, "rank": 1314, "ranked": true, "rankOf": 1486, "categoryRank": 15, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 47, "maintenance": 65, "payments": 33, "reliability": 19, "schema": 54, "security": 44, "transparency": 58 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": -3, "negativeNotes": [ "23 to 24 September 2026. The docs and skill files renamed three MCP tools (`list_flows`, `get_flow_info`, `delete_flow`) to `list_canvases`, `get_canvas_info` and `delete_canvas`, with no changelog entry or notice found. Whether the server still answers the old names was not tested (-2). https://github.com/SubframeApp/subframe/commit/43bfb51d749713940cf0df8e73da2ab43b7358bc", "7 May 2026. A docs commit records that the MCP server 'no longer accepts CLI/access tokens, only OAuth', removing the documented header route for clients without OAuth, with no dated notice found (-1, older and documented since). https://github.com/SubframeApp/subframe/commit/ff59743593fa2b581f32233b58660ace8a23f707" ], "verdict": "An agent can read and change pages, components, snippets and themes in a Subframe project through a hosted MCP server with OAuth, and Viewer accounts get a read-only server. The server lists 46 tools, and no status page, rate limits, changelog or security contact were found. Three tools were renamed in September 2026 with no notice found.", "bestFor": "A coding agent working beside a team that designs React and Tailwind interfaces in Subframe and wants the design as code, with a read-only route for review.", "strengths": [ "Hosted MCP server at `https://mcp.subframe.com/mcp` with OAuth, dynamic client registration and PKCE, so no key is pasted into a config file", "Viewer accounts get a read-only MCP server and read-only CLI access, and Viewer seats are free on every plan", "Write tools cover pages, components, snippets, design documents, themes, icons and fonts, and page reads return generated React and Tailwind code", "Docs publish `llms.txt`, a Markdown twin of every page and a separate docs MCP server that needs no credential", "The CLI has a non-interactive mode with `--json` output, nonzero exit status on failure and a token read from `SUBFRAME_AUTH_TOKEN`" ], "weaknesses": [ "46 tools are documented with no toolsets, and the vendor's `design` skill that explains them is about 55 KB of text", "No status page, published rate limit, SLA or changelog was found, and the terms disclaim uninterrupted service", "`list_flows`, `get_flow_info` and `delete_flow` became `list_canvases`, `get_canvas_info` and `delete_canvas` in September 2026 with no notice found", "No security.txt, disclosure policy, bug bounty, certification or audit log was found", "Delete confirmation is guidance in the skill file. The vendor's skill calls deletes irreversible from MCP, with recovery only through version history in the editor (24 hours on Free)" ], "agentNotes": [ "Connect with an MCP client that supports OAuth. The server rejects Subframe access tokens and static `Authorization` headers", "Pass `projectId` on every call. When it is omitted the server uses the first project the user can reach, which may be the wrong team's", "After `design_page`, `design_component` or `edit_component`, call `wait_for_jobs` with the `jobId` before reading the result. Earlier reads return stale content", "Ask the owner before any delete tool or a theme token deletion. A deleted token leaves every reference detached even after the token is restored", "For the CLI, set `SUBFRAME_AUTH_TOKEN` and `DO_NOT_TRACK=1`, and point `--dir` at a folder that holds only Subframe code, because a full sync removes other unprotected files" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 39.8 } ], "editorialScores": { "ergonomics": 47, "maintenance": 65, "payments": 33, "reliability": 19, "schema": 54, "security": 44, "transparency": 46 }, "provenanceScore": 70, "checked": { "categories": { "ergonomics": "2026-10-09", "maintenance": "2026-10-09", "payments": "2026-10-09", "reliability": "2026-10-09", "schema": "2026-10-09", "security": "2026-10-09", "transparency": "2026-10-09" }, "last": "2026-10-09", "lastMoved": "2026-10-28", "oldest": "2026-10-09", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npx @subframe/cli@latest init", "claudeCode": "claude plugin marketplace add https://github.com/SubframeApp/subframe \u0026\u0026 claude plugin install subframe@subframe", "config": { "mcpServers": { "subframe": { "url": "https://mcp.subframe.com/mcp" }, "subframe-docs": { "url": "https://docs.subframe.com/mcp" } } }, "headless": { "command": "npx @subframe/cli@latest sync --all --json", "env": { "SUBFRAME_AUTH_TOKEN": "\u003ctoken\u003e" } } }, "letme": { "capability": "https://letme.dev/design.files", "tool": "https://letme.dev/subframe" }, "area": "design-diagrams", "unitPrices": [ { "item": "Pro plan", "unit": "seat-month", "usd": 20, "note": "each Admin and Editor, unlimited projects, six times the Free AI credits, 7-day version history. Viewers are free" } ], "provenance": { "legalEntity": "Atomic Design Inc", "domain": "subframe.com", "domainRegistered": "2003-09-24", "endpointOnVendorDomain": true, "terms": "https://policies.subframe.com/tos", "privacy": "https://policies.subframe.com/privacy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The terms of service (last updated 22 January 2026) are made between Atomic Design Inc, 156 2nd Street, Ste 403, San Francisco, CA 94105, and each customer, cover the Subframe service and choose California law.", "The privacy policy (effective 22 January 2026) covers products and services at subframe.com. A DPA dated 21 January 2026 is at https://policies.subframe.com/dpa.", "The MCP server answers at mcp.subframe.com. Its protected resource metadata names an authorisation server at dbgjvucxjwkukwbojywe.supabase.co, so sign-in and tokens are issued from a Supabase host.", "www.subframe.com/.well-known/security.txt and /security.txt return 404.", "No status page or changelog is linked from the site footer, the docs or the docs index. Addresses for either were not guessed.", "RDAP gives subframe.com a registration date of 2003-09-24 with Cloudflare, Inc. as registrar. The repository was created on 4 March 2024." ], "score": 70 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/subframe.json", "live": { "slug": "subframe", "probe": { "target": "https://mcp.subframe.com/mcp", "method": "get", "lastAt": "2026-11-07T18:20:57.563762145Z", "lastOk": true, "lastStatus": 401, "lastMs": 214, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 98.74, "uptime30d": 99.93, "p50ms24h": 157, "p95ms24h": 305, "samples24h": 239, "samples30d": 7205, "days": [ { "date": "2026-10-09", "probes": 85, "ok": 85 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 247 }, { "date": "2026-10-28", "probes": 250, "ok": 250 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 187, "ok": 184 } ], "outages": [ { "start": "2026-11-07T01:55:45.616281332Z", "end": "2026-11-07T02:13:27.354895383Z", "note": "HTTP 500 server error" } ] }, "versions": [ { "registry": "npm", "name": "@subframe/cli", "version": "1.213.0", "seenAt": "2026-11-07T00:09:15.315061949Z" }, { "registry": "npm", "name": "@subframe/core", "version": "1.155.0", "seenAt": "2026-11-07T00:09:16.203413569Z" } ], "githubStars": 464, "npmWeekly": 576, "securityTxt": { "url": "https://subframe.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:36.92673736Z" }, "llmsTxt": { "url": "https://docs.subframe.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:34:03.796184292Z" }, "domain": { "domain": "subframe.com", "registered": "2003-09-24", "source": "https://rdap.verisign.com/com/v1/domain/subframe.com", "checkedAt": "2026-11-01T14:22:29.36693648Z" }, "pages": [ { "url": "https://policies.subframe.com/privacy", "kind": "privacy", "status": 304, "checkedAt": "2026-11-07T14:16:58.854272811Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "c221794f9af0" }, { "url": "https://policies.subframe.com/tos", "kind": "terms", "status": 304, "checkedAt": "2026-11-07T14:17:01.189543907Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "cf29b530a2cf" } ], "mcpTools": { "url": "https://mcp.subframe.com/mcp", "checkedAt": "2026-11-07T01:48:09.734450211Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-10-09T21:40:55.87387771Z" }, "github": { "repo": "subframeapp/subframe", "checkedAt": "2026-11-02T09:28:58.140688811Z", "stars": 460, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-29T16:58:36Z", "openIssues": 6, "openPRs": 4, "issuesOpened90d": 0, "issuesClosed90d": 0, "prsMerged90d": 66, "replies": { "sampled": 13, "unanswered": 6, "medianDays": 88.3 } }, "updatedAt": "2026-11-07T18:20:57.563762145Z" } }, "edges": [ { "by": 56, "category": "reliability", "leads": "magic-patterns", "name": "Reliability", "reasons": { "a": "Hosted lines, for the MCP server and v3 API. A Statuspage at magicpatterns.statuspage.io with incident history, but its two components are Web Platform and Figma Plugin, with nothing for the API or MCP server (15 of 20). The history page and Atom feed post no incident since 9 January 2026, so the 90 days before this check are clean as far as the page covers (30). The page's /api/ path is disallowed by its robots.txt, so the JSON feeds weren't used. Rate limit published as 1,000 generations per 10 hours per key, with polling no faster than once every 60 seconds (15). No 429, Retry-After or backoff guidance and no idempotency keys. Design-system writes take a `baseArtifactId` and return 409 on a concurrent change, with re-read-and-retry advice (5 of 15). No SLA found below Enterprise's custom contracts (0). The MCP server and v3 API carry no beta label (10). 15 + 30 + 15 + 5 + 0 + 10 = 75.", "b": "Read with the hosted lines, because the surface an agent uses is the MCP server at mcp.subframe.com. No status page was found on the site, the docs or the footer (0 of 20). With no page there is no incident history to read (5 of 30). No rate limit is published in the docs or the skill files (0 of 15). No 429 or backoff guidance was found. The docs do say a background job that stops reporting for about 10 minutes is returned as `error`, and the CLI retries a failed request once (4 of 15). No SLA is published, and the terms say the service is not warranted to be uninterrupted (0 of 10). The MCP server carries no beta label, though the CLI's `push-component` command is marked experimental (10 of 10)." }, "scores": { "a": 75, "b": 19 } }, { "by": 30, "category": "schema", "leads": "magic-patterns", "name": "Schema \u0026 documentation", "reasons": { "a": "The MCP server is closed, so its tool definitions weren't read. The v3 API has an OpenAPI 3.0.3 description, served as a block in each API reference page; the file llms.txt links at /docs/openapi-v3.yml answered with a not-found page (20 of 25). llms.txt and a Markdown copy of every docs page (10). The tools page sets out four workflows with call order, says when to poll and how often, splits read from write tools and warns that the user may edit at any time (17 of 20). Parameters are typed and marked required, the feedback `category` is an enum, and file writes take an array of name and content pairs (10 of 15). Request and response examples, an error table (400, 401, 402, 403) and 409 behaviour on writes (12 of 15). Versioned /v3 paths, a v2 deprecation notice and a dated product changelog (15). 20 + 10 + 17 + 10 + 12 + 15 = 84.", "b": "The MCP server is closed and answers 401 without OAuth, so the tool definitions and their input schemas were not read. The docs list 46 tools by name and the public skill files give parameters for most of them (12 of 25, on that partial evidence). docs.subframe.com publishes `llms.txt`, a Markdown twin of each page and a docs MCP server (10 of 10). The `design` skill states for each tool what it is for and when another tool fits better, for example `edit_page` against `design_page`. The docs table gives one line a tool (15 of 20). Parameters are named in the skill (`id`, `name` or `url`, `force`, `deleteChildPages`, `includeResolved`), while the design tools take a free-text description (6 of 15). Ten example prompts and a troubleshooting section, with no list of error responses (7 of 15). The plugin and the CLI carry version numbers, with no changelog (4 of 15)." }, "scores": { "a": 84, "b": 54 } }, { "by": 20, "category": "ergonomics", "leads": "magic-patterns", "name": "Agent ergonomics", "reasons": { "a": "24 documented tools (15 for 11 to 30), plus 5 back for the read-only endpoint that registers only 12 (20 of 25). Message history pages by 10 and version history by 20 with `skip`, and file reads take a list of names (14 of 20). Documented status codes, a 402 that leaves reads working and non-blocking `validationErrors` on design-system writes (15 of 20). No idempotency keys; 409 conflict checks on design-system writes, and annotations couldn't be read on the closed server (10 of 20). `create_design` needs no parameter and makes a blank scaffold, but there is no official SDK (8 of 15). 20 + 14 + 15 + 10 + 8 = 67.", "b": "46 documented tools is over 30 (5), with 3 added back because a Viewer account gets a read-only server. No toolsets or dynamic loading are documented, and the `design` skill adds about 55 KB when loaded (8 of 25). `list_comments` can be scoped to a page, a canvas or the project, screenshots can target one element or breakpoint and `read_prototype_file` returns one file. No paging is documented (10 of 20). `wait_for_jobs` reports `running`, `done`, `error` or `not_found`, delete tools refuse when the item is referenced, `edit_page` returns `appliedCode` and parser warnings, and the CLI prints a JSON error envelope (13 of 20). No idempotency keys. Tool annotations could not be read. Deletes need `force` when references exist, and version history can restore (8 of 20). `projectId` falls back to the first project and items are addressed by id, name or URL. No API SDK (8 of 15)." }, "scores": { "a": 67, "b": 47 } }, { "by": 11, "category": "security", "leads": "magic-patterns", "name": "Security \u0026 auth", "reasons": { "a": "OAuth 2.1 with PKCE S256, dynamic registration and a device flow, issued by oauth.magicpatterns.com with WorkOS keys. Scopes are openid, email, profile and offline_access only, so a token carries the user's whole workspace role. API keys are shown once, with no scopes, expiry or rotation documented (22 of 30). The read-only endpoint doesn't register the 13 tools that create, change or publish. There is no confirmation step on the write endpoint (14 of 20). Tools return design code and chat history that collaborators wrote, and no prompt-injection guidance was found (3 of 15). `x-mp-agent-name` attributes changes in the UI, and audit logs come with Enterprise only (8 of 15). The security page describes encryption, logging and the Render and MongoDB Atlas setup and points to SOC 2 reports in a Trust Center drawn by script, which wasn't read. No security.txt, disclosure policy or bug bounty found (8 of 20). 22 + 14 + 3 + 8 + 8 = 55.", "b": "The MCP server uses OAuth with dynamic client registration, PKCE and refresh tokens, and rejects static tokens. The authorisation server lists only identity scopes (openid, profile, email, phone, offline_access), so access follows the user's team role and not a scope. CLI tokens are shown once and can be deleted, with no scopes or expiry documented, and the `generate_auth_token` tool lets a connected agent mint one (22 of 30). Viewers get a read-only MCP server and read-only CLI access. Confirmation before deletes is guidance in the skill file and not a documented server control (12 of 20). `list_comments`, design documents and `search_docs` return text other people wrote, and no prompt-injection guidance was found (3 of 15). No audit log is documented. Version history records changes for 24 hours on Free and 7 days on Pro (3 of 15). No security.txt, disclosure policy, bug bounty or certification was found. The DPA's Annex 2 lists security measures and the docs cover Okta SSO (4 of 20)." }, "scores": { "a": 55, "b": 44 } }, { "by": 10, "category": "payments", "leads": "subframe", "name": "Payments \u0026 pricing", "reasons": { "a": "No x402, MPP or L402. A 402 means out of credits, with no payment requirements (0). Seat prices are public and the on-demand rate is $0.02 a credit, but a generation's credit cost isn't known before it runs (typical 70 per generation per the docs), so between plan-only and per-unit (15 of 20). The MCP overview and the plans table say MCP and API-key access need a paid plan, while the v3 API page says free-tier accounts can call v3 up to their credits. Taking the stricter reading for the MCP surface, the free tier gives an agent no MCP access (5 of 20). A person signs in through the browser; dynamic client registration and the device flow still end with a human approval (3 of 20). 0 + 15 + 5 + 3 = 23.", "b": "No machine payment protocol (0 of 40). Plan prices are public, Free at $0 and Pro at $20 an editor a month, with AI credits described only as limited and 6x and no per-call price (10 of 20). The Free plan has one project and includes MCP and CLI access, and the docs mention a card only at the Stripe checkout for Pro (20 of 20). A person has to sign in through a browser to approve OAuth. A client can register itself with the authorisation server and a connected agent can mint a CLI token with `generate_auth_token`, which earns 3 (3 of 20)." }, "scores": { "a": 23, "b": 33 } }, { "by": 5, "category": "maintenance", "leads": "magic-patterns", "name": "Maintenance \u0026 community", "reasons": { "a": "Changelog entry on 5 November 2026, the day before this check (30). Entries on twelve dates since 8 August, among them 23 September and 12 to 30 October (20). Closed service with a public changelog, email support within one to two business days, in-app chat and a Slack community. We didn't test them (12 of 15). Not in the official MCP registry (searches for magic-patterns and magicpatterns returned nothing of theirs). Official Claude connector, Cursor plugin and Codex plugin, and no SDKs (5 of 15). No public package or repository to check (3 of 10). 30 + 20 + 12 + 5 + 3 = 70.", "b": "The Claude Code plugin reached 1.0.30 on 8 October 2026 and `@subframe/cli` 1.212.0 on 5 October 2026 (30 of 30). The plugin version changed ten times between 13 July and 8 October, and the CLI had three versions on 5 October after none since 24 June (20 of 20). The repository has 13 issues in all. Seven are open, among them a Codex MCP install error from 30 March 2026 and a Claude Code plugin install error from 13 February 2026 with one and two comments, and three with none. Pull requests merge most days. The Slack community was not read (10 of 25). A search of the official MCP registry for 'subframe' returned no entry (0 of 15). A commit of 12 August 2026 fixed dependency vulnerabilities. The CLI has unit and end-to-end tests in the repository, and the only public workflow publishes the package (5 of 10)." }, "scores": { "a": 70, "b": 65 } } ], "facts": [ { "a": "MCP server", "b": "MCP server", "name": "Kind" }, { "a": "North Park Labs, Inc. (Magic Patterns)", "b": "Atomic Design Inc", "name": "Vendor" }, { "a": "https://mcp.magicpatterns.com/mcp", "b": "https://mcp.subframe.com/mcp", "name": "Hosted endpoint" }, { "a": "Streamable HTTP, HTTP", "b": "HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Closed service under the Magic Patterns terms of service (last updated 1 April 2025)", "b": "Proprietary service under Atomic Design's terms of service. `@subframe/cli` and `@subframe/core` are marked ISC in their package files and the Claude Code plugin MIT in its manifest, with no licence file in the repository", "name": "Licence" }, { "a": "24", "b": "46", "name": "Tools exposed" }, { "a": "yes", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-11-05", "b": "2026-10-08", "name": "Last release" }, { "a": "2025-04-01", "b": "2026-01-22", "name": "Terms last updated" }, { "a": "2025-04-01", "b": "2026-01-22", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "435 stars, 1k npm/wk", "name": "Popularity" }, { "a": "none", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Magic Patterns scores 63.4 (B) on agent readiness against Subframe's 39.8 (E), and leads in 6 of 7 scored categories. Subframe leads on payments \u0026 pricing.", "question": "Which is better for AI agents, Magic Patterns or Subframe?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do Magic Patterns and Subframe need an API key?" }, { "answer": "Yes. Magic Patterns has a hosted endpoint at https://mcp.magicpatterns.com/mcp and Subframe at https://mcp.subframe.com/mcp.", "question": "Can an agent call Magic Patterns and Subframe without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 75 against 19", "Schema \u0026 documentation, 84 against 54", "Agent ergonomics, 67 against 47", "Security \u0026 auth, 55 against 44", "Maintenance \u0026 community, 70 against 65" ], "also": [ "No incidents deducted, where Subframe loses 3 points for them" ], "goodFor": "Generating and iterating on coded React prototypes from a coding agent, and pulling a design into a codebase.", "slug": "magic-patterns", "watchFor": "MCP and API-key access need a paid seat, Starter at $20 a month" }, { "aheadOn": [ "Payments \u0026 pricing, 33 against 23" ], "also": null, "goodFor": "A coding agent working beside a team that designs React and Tailwind interfaces in Subframe and wants the design as code, with a read-only route for review.", "slug": "subframe", "watchFor": "46 tools are documented with no toolsets, and the vendor's `design` skill that explains them is about 55 KB of text" } ], "history": { "magic-patterns": null, "subframe": [ { "causes": [ "correction" ], "date": "2026-10-28", "delta": -0.1, "from": 39.9, "fromGrade": "E", "to": 39.8, "toGrade": "E" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.2, "from": 39.7, "fromGrade": "E", "to": 39.9, "toGrade": "E" } ] }, "job": { "capability": "design.code", "name": "Design code" }, "others": [ { "json": "https://www.anchorterminal.com/compare/figma-mcp-vs-magic-patterns.json", "title": "Figma API + MCP vs Magic Patterns", "url": "https://www.anchorterminal.com/compare/figma-mcp-vs-magic-patterns" }, { "json": "https://www.anchorterminal.com/compare/figma-mcp-vs-subframe.json", "title": "Figma API + MCP vs Subframe", "url": "https://www.anchorterminal.com/compare/figma-mcp-vs-subframe" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-magic-patterns.json", "title": "Framelink MCP for Figma vs Magic Patterns", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-magic-patterns" }, { "json": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-subframe.json", "title": "Framelink MCP for Figma vs Subframe", "url": "https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-subframe" }, { "json": "https://www.anchorterminal.com/compare/framer-vs-magic-patterns.json", "title": "Framer Server API vs Magic Patterns", "url": "https://www.anchorterminal.com/compare/framer-vs-magic-patterns" }, { "json": "https://www.anchorterminal.com/compare/framer-vs-subframe.json", "title": "Framer Server API vs Subframe", "url": "https://www.anchorterminal.com/compare/framer-vs-subframe" }, { "json": "https://www.anchorterminal.com/compare/kite-new-vs-magic-patterns.json", "title": "Kite vs Magic Patterns", "url": "https://www.anchorterminal.com/compare/kite-new-vs-magic-patterns" }, { "json": "https://www.anchorterminal.com/compare/kite-new-vs-subframe.json", "title": "Kite vs Subframe", "url": "https://www.anchorterminal.com/compare/kite-new-vs-subframe" }, { "json": "https://www.anchorterminal.com/compare/magic-patterns-vs-miro.json", "title": "Magic Patterns vs Miro API + MCP", "url": "https://www.anchorterminal.com/compare/magic-patterns-vs-miro" }, { "json": "https://www.anchorterminal.com/compare/miro-vs-subframe.json", "title": "Miro API + MCP vs Subframe", "url": "https://www.anchorterminal.com/compare/miro-vs-subframe" }, { "json": "https://www.anchorterminal.com/compare/pen-dev-vs-subframe.json", "title": "pen.dev vs Subframe", "url": "https://www.anchorterminal.com/compare/pen-dev-vs-subframe" }, { "json": "https://www.anchorterminal.com/compare/penpot-vs-subframe.json", "title": "Penpot API + MCP vs Subframe", "url": "https://www.anchorterminal.com/compare/penpot-vs-subframe" }, { "json": "https://www.anchorterminal.com/compare/sketch-vs-subframe.json", "title": "Sketch vs Subframe", "url": "https://www.anchorterminal.com/compare/sketch-vs-subframe" }, { "json": "https://www.anchorterminal.com/compare/subframe-vs-zeplin.json", "title": "Subframe vs Zeplin", "url": "https://www.anchorterminal.com/compare/subframe-vs-zeplin" }, { "json": "https://www.anchorterminal.com/compare/impeccable-vs-magic-patterns.json", "title": "Impeccable vs Magic Patterns", "url": "https://www.anchorterminal.com/compare/impeccable-vs-magic-patterns" }, { "json": "https://www.anchorterminal.com/compare/impeccable-vs-subframe.json", "title": "Impeccable vs Subframe", "url": "https://www.anchorterminal.com/compare/impeccable-vs-subframe" }, { "json": "https://www.anchorterminal.com/compare/magic-patterns-vs-pen-dev.json", "title": "Magic Patterns vs pen.dev", "url": "https://www.anchorterminal.com/compare/magic-patterns-vs-pen-dev" }, { "json": "https://www.anchorterminal.com/compare/magic-patterns-vs-penpot.json", "title": "Magic Patterns vs Penpot API + MCP", "url": "https://www.anchorterminal.com/compare/magic-patterns-vs-penpot" }, { "json": "https://www.anchorterminal.com/compare/magic-patterns-vs-sketch.json", "title": "Magic Patterns vs Sketch", "url": "https://www.anchorterminal.com/compare/magic-patterns-vs-sketch" }, { "json": "https://www.anchorterminal.com/compare/magic-patterns-vs-zeplin.json", "title": "Magic Patterns vs Zeplin", "url": "https://www.anchorterminal.com/compare/magic-patterns-vs-zeplin" }, { "json": "https://www.anchorterminal.com/compare/magic-patterns-vs-uxkin-agent.json", "title": "Magic Patterns vs UXKIN", "url": "https://www.anchorterminal.com/compare/magic-patterns-vs-uxkin-agent" }, { "json": "https://www.anchorterminal.com/compare/subframe-vs-uxkin-agent.json", "title": "Subframe vs UXKIN", "url": "https://www.anchorterminal.com/compare/subframe-vs-uxkin-agent" }, { "json": "https://www.anchorterminal.com/compare/magic-patterns-vs-melius.json", "title": "Magic Patterns vs Melius", "url": "https://www.anchorterminal.com/compare/magic-patterns-vs-melius" }, { "json": "https://www.anchorterminal.com/compare/melius-vs-subframe.json", "title": "Melius vs Subframe", "url": "https://www.anchorterminal.com/compare/melius-vs-subframe" } ], "panel": null, "scores": [ { "by": 56, "edge": "magic-patterns", "key": "reliability", "magic-patterns": 75, "name": "Reliability", "subframe": 19, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 30, "edge": "magic-patterns", "key": "schema", "magic-patterns": 84, "name": "Schema \u0026 documentation", "subframe": 54, "weight": 13 }, { "by": 20, "edge": "magic-patterns", "key": "ergonomics", "magic-patterns": 67, "name": "Agent ergonomics", "subframe": 47, "weight": 13 }, { "by": 11, "edge": "magic-patterns", "key": "security", "magic-patterns": 55, "name": "Security \u0026 auth", "subframe": 44, "weight": 14 }, { "by": 10, "edge": "subframe", "key": "payments", "magic-patterns": 23, "name": "Payments \u0026 pricing", "subframe": 33, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 5, "edge": "magic-patterns", "key": "maintenance", "magic-patterns": 70, "name": "Maintenance \u0026 community", "subframe": 65, "weight": 7 }, { "by": 2, "edge": "magic-patterns", "key": "transparency", "magic-patterns": 60, "name": "Transparency \u0026 trust", "subframe": 58, "weight": 7 } ], "summary": "Magic Patterns scores 63.4 (B) on agent readiness against Subframe's 39.8 (E), and leads in 6 of 7 scored categories. Subframe leads on payments \u0026 pricing. Both do design code.", "tasks": null, "tutorials": [], "verdicts": { "magic-patterns": "Agents can create, prompt, read and edit coded prototypes through 24 documented MCP tools or a matching REST API, with a read-only endpoint and 409 conflict checks on writes. MCP access needs a paid seat from $20 a month, OAuth scopes don't narrow access below the user's role, and the status page doesn't track the API or MCP server.", "subframe": "An agent can read and change pages, components, snippets and themes in a Subframe project through a hosted MCP server with OAuth, and Viewer accounts get a read-only server. The server lists 46 tools, and no status page, rate limits, changelog or security contact were found. Three tools were renamed in September 2026 with no notice found." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/magic-patterns-vs-subframe", "json": "https://www.anchorterminal.com/compare/magic-patterns-vs-subframe.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/magic-patterns-vs-subframe.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/magic-patterns-vs-subframe.min.md" }, "markdown": "Magic Patterns scores 63.4 (B) on agent readiness against Subframe's 39.8 (E), and leads in 6 of 7 scored categories. Subframe leads on payments \u0026 pricing. Both do design code.\n\n- Magic Patterns: grade B, 63.4/100, rank #517 of 1486. Markdown https://www.anchorterminal.com/tools/magic-patterns.md · JSON https://www.anchorterminal.com/api/v1/tools/magic-patterns.json\n- Subframe: grade E, 39.8/100, rank #1314 of 1486. Markdown https://www.anchorterminal.com/tools/subframe.md · JSON https://www.anchorterminal.com/api/v1/tools/subframe.json\n- Best design workspace and canvas APIs for AI agents: https://www.anchorterminal.com/best/design/index.md\n- All 120 design comparisons: https://www.anchorterminal.com/compare/design/index.md\n\n## Which one, for what\n\n### Magic Patterns (B)\n\nGood for: Generating and iterating on coded React prototypes from a coding agent, and pulling a design into a codebase.\n\nAhead on:\n- Reliability, 75 against 19\n- Schema \u0026 documentation, 84 against 54\n- Agent ergonomics, 67 against 47\n- Security \u0026 auth, 55 against 44\n- Maintenance \u0026 community, 70 against 65\n\nAlso in its favour:\n- No incidents deducted, where Subframe loses 3 points for them\n\nWatch for: MCP and API-key access need a paid seat, Starter at $20 a month\n\n### Subframe (E)\n\nGood for: A coding agent working beside a team that designs React and Tailwind interfaces in Subframe and wants the design as code, with a read-only route for review.\n\nAhead on:\n- Payments \u0026 pricing, 33 against 23\n\nWatch for: 46 tools are documented with no toolsets, and the vendor's `design` skill that explains them is about 55 KB of text\n\n\n## Why the edge\n\n### Reliability: Magic Patterns +56\n\n- Magic Patterns (75): Hosted lines, for the MCP server and v3 API. A Statuspage at magicpatterns.statuspage.io with incident history, but its two components are Web Platform and Figma Plugin, with nothing for the API or MCP server (15 of 20). The history page and Atom feed post no incident since 9 January 2026, so the 90 days before this check are clean as far as the page covers (30). The page's /api/ path is disallowed by its robots.txt, so the JSON feeds weren't used. Rate limit published as 1,000 generations per 10 hours per key, with polling no faster than once every 60 seconds (15). No 429, Retry-After or backoff guidance and no idempotency keys. Design-system writes take a `baseArtifactId` and return 409 on a concurrent change, with re-read-and-retry advice (5 of 15). No SLA found below Enterprise's custom contracts (0). The MCP server and v3 API carry no beta label (10). 15 + 30 + 15 + 5 + 0 + 10 = 75.\n- Subframe (19): Read with the hosted lines, because the surface an agent uses is the MCP server at mcp.subframe.com. No status page was found on the site, the docs or the footer (0 of 20). With no page there is no incident history to read (5 of 30). No rate limit is published in the docs or the skill files (0 of 15). No 429 or backoff guidance was found. The docs do say a background job that stops reporting for about 10 minutes is returned as `error`, and the CLI retries a failed request once (4 of 15). No SLA is published, and the terms say the service is not warranted to be uninterrupted (0 of 10). The MCP server carries no beta label, though the CLI's `push-component` command is marked experimental (10 of 10).\n\n### Schema \u0026 documentation: Magic Patterns +30\n\n- Magic Patterns (84): The MCP server is closed, so its tool definitions weren't read. The v3 API has an OpenAPI 3.0.3 description, served as a block in each API reference page; the file llms.txt links at /docs/openapi-v3.yml answered with a not-found page (20 of 25). llms.txt and a Markdown copy of every docs page (10). The tools page sets out four workflows with call order, says when to poll and how often, splits read from write tools and warns that the user may edit at any time (17 of 20). Parameters are typed and marked required, the feedback `category` is an enum, and file writes take an array of name and content pairs (10 of 15). Request and response examples, an error table (400, 401, 402, 403) and 409 behaviour on writes (12 of 15). Versioned /v3 paths, a v2 deprecation notice and a dated product changelog (15). 20 + 10 + 17 + 10 + 12 + 15 = 84.\n- Subframe (54): The MCP server is closed and answers 401 without OAuth, so the tool definitions and their input schemas were not read. The docs list 46 tools by name and the public skill files give parameters for most of them (12 of 25, on that partial evidence). docs.subframe.com publishes `llms.txt`, a Markdown twin of each page and a docs MCP server (10 of 10). The `design` skill states for each tool what it is for and when another tool fits better, for example `edit_page` against `design_page`. The docs table gives one line a tool (15 of 20). Parameters are named in the skill (`id`, `name` or `url`, `force`, `deleteChildPages`, `includeResolved`), while the design tools take a free-text description (6 of 15). Ten example prompts and a troubleshooting section, with no list of error responses (7 of 15). The plugin and the CLI carry version numbers, with no changelog (4 of 15).\n\n### Agent ergonomics: Magic Patterns +20\n\n- Magic Patterns (67): 24 documented tools (15 for 11 to 30), plus 5 back for the read-only endpoint that registers only 12 (20 of 25). Message history pages by 10 and version history by 20 with `skip`, and file reads take a list of names (14 of 20). Documented status codes, a 402 that leaves reads working and non-blocking `validationErrors` on design-system writes (15 of 20). No idempotency keys; 409 conflict checks on design-system writes, and annotations couldn't be read on the closed server (10 of 20). `create_design` needs no parameter and makes a blank scaffold, but there is no official SDK (8 of 15). 20 + 14 + 15 + 10 + 8 = 67.\n- Subframe (47): 46 documented tools is over 30 (5), with 3 added back because a Viewer account gets a read-only server. No toolsets or dynamic loading are documented, and the `design` skill adds about 55 KB when loaded (8 of 25). `list_comments` can be scoped to a page, a canvas or the project, screenshots can target one element or breakpoint and `read_prototype_file` returns one file. No paging is documented (10 of 20). `wait_for_jobs` reports `running`, `done`, `error` or `not_found`, delete tools refuse when the item is referenced, `edit_page` returns `appliedCode` and parser warnings, and the CLI prints a JSON error envelope (13 of 20). No idempotency keys. Tool annotations could not be read. Deletes need `force` when references exist, and version history can restore (8 of 20). `projectId` falls back to the first project and items are addressed by id, name or URL. No API SDK (8 of 15).\n\n### Security \u0026 auth: Magic Patterns +11\n\n- Magic Patterns (55): OAuth 2.1 with PKCE S256, dynamic registration and a device flow, issued by oauth.magicpatterns.com with WorkOS keys. Scopes are openid, email, profile and offline_access only, so a token carries the user's whole workspace role. API keys are shown once, with no scopes, expiry or rotation documented (22 of 30). The read-only endpoint doesn't register the 13 tools that create, change or publish. There is no confirmation step on the write endpoint (14 of 20). Tools return design code and chat history that collaborators wrote, and no prompt-injection guidance was found (3 of 15). `x-mp-agent-name` attributes changes in the UI, and audit logs come with Enterprise only (8 of 15). The security page describes encryption, logging and the Render and MongoDB Atlas setup and points to SOC 2 reports in a Trust Center drawn by script, which wasn't read. No security.txt, disclosure policy or bug bounty found (8 of 20). 22 + 14 + 3 + 8 + 8 = 55.\n- Subframe (44): The MCP server uses OAuth with dynamic client registration, PKCE and refresh tokens, and rejects static tokens. The authorisation server lists only identity scopes (openid, profile, email, phone, offline_access), so access follows the user's team role and not a scope. CLI tokens are shown once and can be deleted, with no scopes or expiry documented, and the `generate_auth_token` tool lets a connected agent mint one (22 of 30). Viewers get a read-only MCP server and read-only CLI access. Confirmation before deletes is guidance in the skill file and not a documented server control (12 of 20). `list_comments`, design documents and `search_docs` return text other people wrote, and no prompt-injection guidance was found (3 of 15). No audit log is documented. Version history records changes for 24 hours on Free and 7 days on Pro (3 of 15). No security.txt, disclosure policy, bug bounty or certification was found. The DPA's Annex 2 lists security measures and the docs cover Okta SSO (4 of 20).\n\n### Payments \u0026 pricing: Subframe +10\n\n- Magic Patterns (23): No x402, MPP or L402. A 402 means out of credits, with no payment requirements (0). Seat prices are public and the on-demand rate is $0.02 a credit, but a generation's credit cost isn't known before it runs (typical 70 per generation per the docs), so between plan-only and per-unit (15 of 20). The MCP overview and the plans table say MCP and API-key access need a paid plan, while the v3 API page says free-tier accounts can call v3 up to their credits. Taking the stricter reading for the MCP surface, the free tier gives an agent no MCP access (5 of 20). A person signs in through the browser; dynamic client registration and the device flow still end with a human approval (3 of 20). 0 + 15 + 5 + 3 = 23.\n- Subframe (33): No machine payment protocol (0 of 40). Plan prices are public, Free at $0 and Pro at $20 an editor a month, with AI credits described only as limited and 6x and no per-call price (10 of 20). The Free plan has one project and includes MCP and CLI access, and the docs mention a card only at the Stripe checkout for Pro (20 of 20). A person has to sign in through a browser to approve OAuth. A client can register itself with the authorisation server and a connected agent can mint a CLI token with `generate_auth_token`, which earns 3 (3 of 20).\n\n### Maintenance \u0026 community: Magic Patterns +5\n\n- Magic Patterns (70): Changelog entry on 5 November 2026, the day before this check (30). Entries on twelve dates since 8 August, among them 23 September and 12 to 30 October (20). Closed service with a public changelog, email support within one to two business days, in-app chat and a Slack community. We didn't test them (12 of 15). Not in the official MCP registry (searches for magic-patterns and magicpatterns returned nothing of theirs). Official Claude connector, Cursor plugin and Codex plugin, and no SDKs (5 of 15). No public package or repository to check (3 of 10). 30 + 20 + 12 + 5 + 3 = 70.\n- Subframe (65): The Claude Code plugin reached 1.0.30 on 8 October 2026 and `@subframe/cli` 1.212.0 on 5 October 2026 (30 of 30). The plugin version changed ten times between 13 July and 8 October, and the CLI had three versions on 5 October after none since 24 June (20 of 20). The repository has 13 issues in all. Seven are open, among them a Codex MCP install error from 30 March 2026 and a Claude Code plugin install error from 13 February 2026 with one and two comments, and three with none. Pull requests merge most days. The Slack community was not read (10 of 25). A search of the official MCP registry for 'subframe' returned no entry (0 of 15). A commit of 12 August 2026 fixed dependency vulnerabilities. The CLI has unit and end-to-end tests in the repository, and the only public workflow publishes the package (5 of 10).\n\n## Score by category\n\n| Category | Weight | Magic Patterns | Subframe | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 75 | 19 | Magic Patterns +56 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 84 | 54 | Magic Patterns +30 |\n| Agent ergonomics | 13% (16.2 this run) | 67 | 47 | Magic Patterns +20 |\n| Security \u0026 auth | 14% (17.5 this run) | 55 | 44 | Magic Patterns +11 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 23 | 33 | Subframe +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 70 | 65 | Magic Patterns +5 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 60 | 58 | Magic Patterns +2 |\n| Negative events | ≤15 | 0 | -3 | |\n| **Total** | | **63.4 · B** | **39.8 · E** | |\n\n## Facts side by side\n\n| Fact | Magic Patterns | Subframe |\n| --- | --- | --- |\n| Kind | MCP server | MCP server |\n| Vendor | North Park Labs, Inc. (Magic Patterns) | Atomic Design Inc |\n| Hosted endpoint | `https://mcp.magicpatterns.com/mcp` | `https://mcp.subframe.com/mcp` |\n| Transports | Streamable HTTP, HTTP | HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | Closed service under the Magic Patterns terms of service (last updated 1 April 2025) | Proprietary service under Atomic Design's terms of service. `@subframe/cli` and `@subframe/core` are marked ISC in their package files and the Claude Code plugin MIT in its manifest, with no licence file in the repository |\n| Tools exposed | 24 | 46 |\n| Read-only variant documented | yes | yes |\n| llms.txt | yes | yes |\n| Last release | 2026-11-05 | 2026-10-08 |\n| Terms last updated | 2025-04-01 | 2026-01-22 |\n| Privacy policy last updated | 2025-04-01 | 2026-01-22 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | yes | not found in the text |\n| Terms or service can change without notice | yes | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | none | 435 stars, 1k npm/wk |\n| Agent reviews | none | 3/5 (4) |\n\n## How the scores have moved\n\n### Magic Patterns\n\nNo score change since it was listed.\n\n### Subframe\n\n- -0.1 on 28 October 2026: correction\n- +0.2 on 27 October 2026: checklist\n\n## Verdicts\n\n**Magic Patterns.** Agents can create, prompt, read and edit coded prototypes through 24 documented MCP tools or a matching REST API, with a read-only endpoint and 409 conflict checks on writes. MCP access needs a paid seat from $20 a month, OAuth scopes don't narrow access below the user's role, and the status page doesn't track the API or MCP server.\n\n**Subframe.** An agent can read and change pages, components, snippets and themes in a Subframe project through a hosted MCP server with OAuth, and Viewer accounts get a read-only server. The server lists 46 tools, and no status page, rate limits, changelog or security contact were found. Three tools were renamed in September 2026 with no notice found.\n\n## Before you call either\n\n### Magic Patterns\n\n1. Use https://mcp.magicpatterns.com/mcp/readonly when the task only reads designs\n2. Call `get_design_status` before any change and poll it no more than once every 60 seconds\n3. Pass `baseArtifactId` from `get_design_system` on writes, and on 409 re-read before retrying\n4. Treat a 402 as out of credits and ask the user; read tools keep working\n5. Send `x-mp-agent-name` so the user sees which agent made a change\n\n### Subframe\n\n1. Connect with an MCP client that supports OAuth. The server rejects Subframe access tokens and static `Authorization` headers\n2. Pass `projectId` on every call. When it is omitted the server uses the first project the user can reach, which may be the wrong team's\n3. After `design_page`, `design_component` or `edit_component`, call `wait_for_jobs` with the `jobId` before reading the result. Earlier reads return stale content\n4. Ask the owner before any delete tool or a theme token deletion. A deleted token leaves every reference detached even after the token is restored\n5. For the CLI, set `SUBFRAME_AUTH_TOKEN` and `DO_NOT_TRACK=1`, and point `--dir` at a folder that holds only Subframe code, because a full sync removes other unprotected files\n\n## Questions\n\n### Which is better for AI agents, Magic Patterns or Subframe?\n\nMagic Patterns scores 63.4 (B) on agent readiness against Subframe's 39.8 (E), and leads in 6 of 7 scored categories. Subframe leads on payments \u0026 pricing.\n\n### Do Magic Patterns and Subframe need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call Magic Patterns and Subframe without installing anything?\n\nYes. Magic Patterns has a hosted endpoint at https://mcp.magicpatterns.com/mcp and Subframe at https://mcp.subframe.com/mcp.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/magic-patterns-vs-subframe.json, and with the fewest tokens: https://www.anchorterminal.com/compare/magic-patterns-vs-subframe.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"magic-patterns\", \"b\": \"subframe\"}`. From a terminal: `anchor compare magic-patterns subframe`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/magic-patterns.json and https://www.anchorterminal.com/api/v1/tools/subframe.json\n\n## Other comparisons with Magic Patterns or Subframe\n\n- [Figma API + MCP vs Magic Patterns](https://www.anchorterminal.com/compare/figma-mcp-vs-magic-patterns.md)\n- [Figma API + MCP vs Subframe](https://www.anchorterminal.com/compare/figma-mcp-vs-subframe.md)\n- [Framelink MCP for Figma vs Magic Patterns](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-magic-patterns.md)\n- [Framelink MCP for Figma vs Subframe](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-subframe.md)\n- [Framer Server API vs Magic Patterns](https://www.anchorterminal.com/compare/framer-vs-magic-patterns.md)\n- [Framer Server API vs Subframe](https://www.anchorterminal.com/compare/framer-vs-subframe.md)\n- [Kite vs Magic Patterns](https://www.anchorterminal.com/compare/kite-new-vs-magic-patterns.md)\n- [Kite vs Subframe](https://www.anchorterminal.com/compare/kite-new-vs-subframe.md)\n- [Magic Patterns vs Miro API + MCP](https://www.anchorterminal.com/compare/magic-patterns-vs-miro.md)\n- [Miro API + MCP vs Subframe](https://www.anchorterminal.com/compare/miro-vs-subframe.md)\n- [pen.dev vs Subframe](https://www.anchorterminal.com/compare/pen-dev-vs-subframe.md)\n- [Penpot API + MCP vs Subframe](https://www.anchorterminal.com/compare/penpot-vs-subframe.md)\n- [Sketch vs Subframe](https://www.anchorterminal.com/compare/sketch-vs-subframe.md)\n- [Subframe vs Zeplin](https://www.anchorterminal.com/compare/subframe-vs-zeplin.md)\n- [Impeccable vs Magic Patterns](https://www.anchorterminal.com/compare/impeccable-vs-magic-patterns.md)\n- [Impeccable vs Subframe](https://www.anchorterminal.com/compare/impeccable-vs-subframe.md)\n- [Magic Patterns vs pen.dev](https://www.anchorterminal.com/compare/magic-patterns-vs-pen-dev.md)\n- [Magic Patterns vs Penpot API + MCP](https://www.anchorterminal.com/compare/magic-patterns-vs-penpot.md)\n- [Magic Patterns vs Sketch](https://www.anchorterminal.com/compare/magic-patterns-vs-sketch.md)\n- [Magic Patterns vs Zeplin](https://www.anchorterminal.com/compare/magic-patterns-vs-zeplin.md)\n- [Magic Patterns vs UXKIN](https://www.anchorterminal.com/compare/magic-patterns-vs-uxkin-agent.md)\n- [Subframe vs UXKIN](https://www.anchorterminal.com/compare/subframe-vs-uxkin-agent.md)\n- [Magic Patterns vs Melius](https://www.anchorterminal.com/compare/magic-patterns-vs-melius.md)\n- [Melius vs Subframe](https://www.anchorterminal.com/compare/melius-vs-subframe.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Magic Patterns vs Subframe", "url": "" } ], "description": "Magic Patterns scores 63.4 (B) to Subframe's 39.8 (E) for design code. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Magic Patterns B 63.4", "Subframe E 39.8", "scores" ], "h1": "Magic Patterns vs Subframe", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/magic-patterns-vs-subframe", "published": "2026-10-01", "section": "tools", "title": "Magic Patterns vs Subframe for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/magic-patterns-vs-subframe" }, "tokens": { "markdown": 5050, "slim": 3180 }, "version": 1 }