MeetGeek vs Nylas Notetaker API

MeetGeek 10

No API changelog or dated API release was found. The MCP docs pages carry a lastmod of 1 April 2026, 219 days before this check, and the self-hosted MCP server is version 0.1.0 (0). No dated releases in the 90 days from 8 August (0). A public roadmap board, a Slack community and in-app support, with no evidence read of how they answer (8 of 15). No official SDK and no entry in the official MCP registry (0). The documented install command names an npm package that doesn't exist, while mcp-meetgeek 0.1.0 was published from a personal account on 5 September 2025 (2 of 10). 0+0+8+0+2 = 10.

Nylas Notetaker API 81

The last Notetaker changelog entries are dated 26 and 29 October 2026, a 207 status for partial media and a change to the webhook time field (30). The changelog has Notetaker entries on 15, 18 and 21 September and 26 and 29 October, and platform entries through 30 October (20). Support is a public forum on every plan and email support from Pro Annual upward. We did not read the forum, so reply times are unchecked (10). Official SDKs are current, with Ruby 6.9.0 tagged on 26 October 2026 to accept the 207, Python 6.18.0 (1 October) and Node.js 8.4.0 (15). The SDK and CLI repositories are MIT and the Ruby SDK runs a test matrix in CI. The others' CI was not inspected (6). 30+20+10+15+6 = 81.

MeetGeek 38

Plain bearer API keys per region with no scopes or rotation guidance found. The cloud MCP uses an OAuth sign-in through auth.meetgeek.ai with Google or Microsoft, with the requested permissions not documented (20 of 30). No read-only key. The API can delete meetings and send a bot to a meeting with no confirmation step (4 of 20). Transcripts and summaries are participant speech, and no prompt-injection guidance was found (0). No audit log of API or MCP use found (0 of 15). Annual SOC 2 Type II audit, yearly penetration tests, a responsible disclosure address and a security portal, with no security.txt (404) or bug bounty (14 of 20). 20+4+0+0+14 = 38.

Nylas Notetaker API 78

Nylas IAM keys, launched 6 October 2026, bind a caller to one grant, workspace, application or organisation with roles and permissions, and can expire. The IAM guide (last updated 9 October) shows principals and credentials can also be created, rotated and revoked through a public /v3/iam API once a first management key is made in the Dashboard, as read for nylas-email. Application keys still reach every grant, and the IAM pages we read don't list Notetaker permissions by name. Keys travel in the Authorization header only. 1 is held back for the application key, as for nylas-email, and 1 because no Notetaker permission is named (28). IAM allows least-privilege callers, but delete is a hard delete with no confirmation step, and the MCP server's confirmation covers email sends only (12). The docs tell developers to treat email and calendar content as untrusted. No guidance names transcripts or meeting chat (8). IAM Access Activity records allowed and denied requests for 400 days, Config Changes records IAM edits, and each Notetaker has a history endpoint (13). The security page lists SOC 2 Type II, ISO 27001, ISO 27701, HIPAA and CSA STAR, a vulnerability disclosure programme, a private bug bounty and annual penetration tests. developer.nylas.com serves an RFC 9116 security.txt with security@nylas.com, valid to 1 August 2027, while www.nylas.com returns 404. That is the evidence nylas-email's 17 rests on, so the line matches it (17). 28+12+8+13+17 = 78.

MeetGeek 70

Public OpenAPI 3.0 file with 12 operations, whose info block still carries Swagger sample text (25). llms.txt and Markdown pages (10). Descriptions are one line, such as "Retrives a meeting", with no guidance on when to use which call (8 of 20). Few parameters, typed, with limit and cursor on lists (10 of 15). Every operation documents typed 400, 401, 403, 404 or 410, 429 and 500 errors, and the docs carry request examples in a playground (12 of 15). Paths under /v1, with no changelog found (5 of 15). 25+10+8+10+12+5 = 70.

Nylas Notetaker API 89

A public OpenAPI 3.1 file covers 244 operations on 140 paths, 23 of them for Notetaker (25). llms.txt, llms-full.txt and a Markdown twin of every page are served (10). Operation descriptions say what each call does and when it applies, such as cancel before joining, leave while attending and delete in any state (16). Notetaker schemas use enums for state, recording type and ordering, ranges for retention and silence timeout, and one required field, with no untyped objects found (13). Each operation documents its 400, 401, 404, 409, 410 and 429 responses, and the media endpoints now a 207 for partial results, with examples and code samples in five languages. The error type is a plain string and the error table lists no Notetaker-specific types (12). The path is versioned as v3 and a dated changelog with an Atom feed tags Notetaker entries. No dated versions within v3 were found (13).

MeetGeek 59

The cloud MCP server has 8 compact tools, and the transcript is paged with limit up to 500 segments (23 of 25). Cursor pagination on meetings and transcripts, with no date or attendee filters on the list (12 of 20). Typed error bodies per status code (14 of 20). No idempotency key on uploads or bot joins, and MCP annotations weren't readable without a sign-in (5 of 20). Few required parameters, no official SDK, and a self-hosted MCP server whose documented npm name doesn't exist (5 of 15). 23+12+14+5+5 = 59.

Nylas Notetaker API 77

Media comes back as download links, select trims responses to named top-level fields, and limit caps list size (20). List calls page by cursor with next_cursor and page_token, 50 by default and 200 at most, with filters by state and join time and three sort fields (20). Errors carry type, message and request_id, join failures name a reason such as bad_meeting_link or entry_denied, and the media endpoint separates 404 for processing from 410 for deleted (17). Invites accept no idempotency key and every request schedules a new bot. Deduplication covers only Notetakers with a future join_time, and the media endpoint is documented as idempotent (6). An invite needs only meeting_link, and SDKs exist for Node.js, Python, Ruby and Kotlin/Java. The quickstart's SDK samples still use the deprecated name and meeting_settings fields (14).

MeetGeek 30

No x402, MPP or L402 (0). Plan prices are public but inconsistent, $15.99 and $27 a user a month on the plan cards and $9.99 and $17 in the page's calculator, with nothing priced per call (10). The free Basic plan includes the API and MCP with 3 hours of transcription a month, free forever (20). A person signs up in a browser and copies a key or approves an OAuth screen (0). 0+10+20+0 = 30.

Nylas Notetaker API 40

No x402, MPP or L402 was found in llms.txt, the OpenAPI file or the pricing page (0). Prices per additional bot hour are public, at $0.80 on Essentials, $0.70 on Pro monthly and $0.65 on Pro annual (20). The Free plan includes 5 bot hours a month and the pricing page says no credit card is required (20). A person creates the account in the Dashboard or through the CLI wizard, which signs in with Google, Microsoft or GitHub (0).

MeetGeek 67

Closed service with clear terms of 12 August 2026 naming the contracting entity for each instance (15 of 30). The Terms and the Privacy Policy (9 September 2026) agree that customer content isn't used to train models without a written opt-in, give retention per data type with deletion windows (30 days, then 35 days from backups), and refer to a DPA (26 of 30). No deprecation policy, though the Terms promise notice by email or in the app before changes take effect (5 of 20). EU and US instances with data in the chosen region, and a sub-processor list linked from the security page, not read (15 of 20). 15+26+5+15 = 61.

Nylas Notetaker API 77

Closed service with Terms of Use naming Nylas, Inc., and MIT SDKs and CLI. The terms describe email, calendar and contacts and do not mention Notetaker (15). The docs state a 14-day default media retention, a 5-minute to 30-day range and permanent deletion, and the Privacy Policy defers to the API docs for end-user data. The policy does not mention meeting recordings, the DPA is available only through sales, and the security page says Nylas does not sell personal information while the policy says website activity data was sold and shared for advertising in the prior 12 months (19). Legacy Notetaker fields are marked deprecated with a migration page and no removal date. No written deprecation policy was found, and the terms allow Nylas to change or end any part of the Services without notice (6). The sub-processor list gives data, purpose and locations and is dated 28 August 2026, with changes announced on the status page. Oxylabs appears as a status-page dependency but not on that list (18).