Mojeek Web Search API vs TinyFish Search

Mojeek Web Search API 10

Read for a closed service. No API changelog, release notes or dated API change were found, and the blog's posts since 2024 are about search in general, so the last change can't be dated (0). No dated changes in the 90 days from 8 August (0). A staff member answered API questions on the community forum within a day in December 2025 and October 2026, and support is by email; no public changelog (10 of 15). No official SDKs or MCP server (0). No public packages or CI to measure (0). 0 + 0 + 10 + 0 + 0 = 10.

TinyFish Search 80

The Python SDK tinyfish 0.11.0 was published on 24 October 2026 and 0.10.0 on 21 October, per the TinyFish platform listing's 1 November reading of PyPI's release feed; PyPI couldn't be read on 2 November (30). Eight Python SDK releases from 4 August (0.5.0) to 24 October, counted half as SDK tags, still more than three (20). A Discord server and a support address are listed, the public MCP proxy repository has commits to 31 October, and the Pulse changelog has no entry after the week of 22 June 2026. We could not read reply times (8 of 15, as the platform listing). Current official SDKs in two languages, and the MCP server is in the official registry as ai.tinyfish.agent/web-agent (15). The SDK packages name no source repository, so their CI is not visible. The MIT MCP proxy repository runs CI, Renovate and OSV and secrets scanners, cleared 11 OSV dependency findings on 6 October and publishes through npm trusted publishing (7, as the platform listing). 30 + 20 + 8 + 15 + 7 = 80.

Mojeek Web Search API 29

No OpenAPI or other machine-readable contract (0). No llms.txt (404) and no Markdown pages for agents (0). The parameters page states what each parameter does, with notes on when not to use reg and clufmt, but nothing on when another endpoint fits better (12 of 20). Every parameter has a type, defaults and valid ranges (tlen 0 to 127, dlen 0 to 511, rbb and lbb 1 to 100, up to 25 domains), though reg is called an enum without listing its values (11 of 15). One curl example and annotated JSON and XML response formats; errors appear only as a status string with one example (6 of 15). No API version, changelog or dated release notes, and the quickstart and the parameters page give different hosts (0). 0 + 0 + 12 + 11 + 6 + 0 = 29.

TinyFish Search 82

A public OpenAPI 3.0 document for Search at agent.tinyfish.ai/v1/openapi/search, with two operations, per the 8 October check, not re-read on 2 November because that host now redirects robots.txt to sign-in (25). llms.txt, llms-full.txt and a Markdown twin of each docs page (10). The docs say when to use Search and when to use Fetch, Agent or Browser, and the MCP search description says when to skip it. That description also tells the model to prefer it over native search tools (17). domain_type is an enum and integers have bounds, but dates, country and language are plain strings, domain lists are comma-separated strings and fetch is a JSON-encoded string (10). An examples page, and an error reference with a JSON body for each code (14). The OpenAPI document is version 1.0.0 and the Search host has no version in its path. The Pulse changelog's newest entry is the week of 22 June 2026 and docs.tinyfish.ai/changelog returns 404 (6). 25 + 10 + 17 + 10 + 14 + 6 = 82.

Mojeek Web Search API 15

One key per account, documented only as the api_key query parameter, and rotation or revocation is by email to the API team (a staff reply of 22 October 2026 on the community forum asks for the key's last 8 digits). One all-powerful key (10) less 10 for the key in the URL (0). Search is read-only and there is nothing to write, but no scoped or restricted key (10 of 20). Results are third-party titles and snippets, with no prompt-injection guidance found (0). No audit log or per-call usage view was found in the docs; the FAQ mentions budget alerts on the account (0 of 15). security.txt names security@mojeek.com, with no Expires field. No bug bounty, disclosure policy, SOC 2 or ISO 27001 found; the API page claims compliance with European rules such as the EU Data Act without a certification (5 of 20). 0 + 10 + 0 + 0 + 5 = 15.

TinyFish Search 57

Revocable API keys shown once, with several keys allowed per account, sent in the X-API-Key header. No scopes were found, and one key covers every TinyFish API including the ones that spend wallet funds. The MCP server uses OAuth 2.1 (20). Search is read-only, but a key or MCP connection cannot be limited to Search (8). Search snippets are untrusted. TinyFish's Fireworks integration guide says search snippets "can contain prompt injection" and its sample system prompt says never to follow instructions found in them, but the Search reference and overview carry no such guidance. Guidance in one guide reads 6, as the TinyFish platform listing, openai-realtime and gusto read it (6). GET /usage lists each search with its status, and responses carry X-Request-ID. Audit logs are listed under Enterprise (10). Valid security.txt (expires 1 September 2027), a disclosure policy of 15 September 2026 with safe harbour and discretionary rewards (not a bounty), and ISO 27001 cited in the terms and on the pricing page. The trust centre could not be read. Read as the TinyFish platform listing reads the same programme (13). 20 + 8 + 6 + 10 + 13 = 57.

Mojeek Web Search API 20

No x402, MPP or L402 (0). Per-request prices published without login, £2 and £3 per 1,000 requests (20). The FAQ says a free credit comes with the Startup plan, but a bank card is required to open an account (0). A person signs up in a browser and adds a card (0). 0 + 20 + 0 + 0 = 20.

TinyFish Search 45

The Machine Payments Protocol is documented on POST /v1/wallet/top-up only. It funds a prepaid wallet for an existing account, needs the API key and is rolling out gradually. An unauthenticated Search request returned 401, not a payment challenge (10). The pricing page states $0.00 a request without login, re-read on 2 November, but the docs say requests past 12,000 a day need a wallet balance and no rate for them is published (15). Free with no card (20). A person has to sign up in a browser to create a key (0). 10 + 15 + 20 + 0 = 45.

Mojeek Web Search API 45

Read with the hosted lines. status.mojeek.com is a Site24x7 StatusIQ page with Search, Website, Blog and Community components. It is drawn by script, so only its RSS feed could be read, which shows each component's current state (Search operational since 7 September 2026) and no incident entries (15 of 20). No readable incident history (5). Rate limits are published per plan, 5 a second and 100,000 a day on Startup, 10 a second and 400,000 a day on Business (15). Over the daily limit the JSON status reads 'ERROR: Daily Limit Reached'; no HTTP 429, Retry-After or backoff guidance was found (0). No SLA, and the API terms say the service is provided as is and may be interrupted without notice (0). Generally available, with only the lr parameter marked beta (10). 15 + 5 + 15 + 0 + 0 + 10 = 45.

TinyFish Search 65

Graded as a hosted service, on the Search REST API. TinyFish's own status page at agent.tinyfish.ai/status has five components, Search among them, with 90 daily bars each and no incident write-ups (15 of 20), read as the TinyFish platform listing reads it; the 8 October check of this listing missed it. Since 1 November agent.tinyfish.ai answers robots.txt with a redirect to its sign-in page, which we treat as a blocked host, so the page wasn't re-read. Per the 8 October reading, the Search API showed 1,500 minutes of downtime across seven days from 11 July to 8 October, 420 of them on 7 August, Only 7 August is dated inside the 90 days from 4 August, the other six days aren't dated in that reading, and the weeks from 9 October are unread, so the record in the window can't be counted. 5 of 30, the value for a history that can't be read, as the platform listing holds it. Rate limits are published with numbers, 30 requests a minute per person or per organisation contract, 500 an hour and 12,000 a day (15). 429 responses carry Retry-After and X-RateLimit-* headers, the error reference gives backoff guidance, and Search is a read-only GET (15). The pricing page names a 99.99% uptime SLA for Enterprise, but no SLA document was found (5). Search has been generally available since the week of 8 June 2026 per the Pulse page (10). 15 + 5 + 15 + 15 + 5 + 10 = 65.

Mojeek Web Search API 66

Responses can be sized with t (up to 10, 40 or 100 results by plan), tlen, dlen and opt-in date and size fields (22 of 25). s for paging, since and before, site, included and excluded domains, region and language boosting and safe search (20). Errors are a free-text status with no documented codes, which an agent can't branch on reliably (5 of 20). Searches only read, so a retry is safe, but no page says whether failed or empty requests are billed (12 of 20). Only q and api_key are required, with recommended values for the boosts. No official SDK in any language (7 of 15). 22 + 20 + 5 + 12 + 7 = 66.

TinyFish Search 78

Results are compact (position, site name, title, snippet, URL) and thumbnails are opt-in, but no parameter sets how many results come back. The hosted MCP server's docs page lists 35 tools on 2 November (the repository reference still lists 28), with no documented search-only subset (15). page from 0 to 10, domain include and exclude lists, date and recency windows, country, language and domain_type, with no result-count control (16). Stable error codes with messages, a details object on account rate limits and a request_id on every error (19). Search is a GET that is safe to repeat and the docs give retry guidance. No read-only annotations appear in the published MCP tool reference (13). Only query is required, and there are official Python and TypeScript SDKs (15). 15 + 16 + 19 + 13 + 15 = 78.