# monday.com vs ONES

> monday.com scores 70.8 (BB) to ONES's 46.9 (D) for issues and tasks. Prices, MCP, x402, uptime and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/monday-vs-ones
- Markdown: https://www.anchorterminal.com/compare/monday-vs-ones.md (~5,600 tokens)
- Site index for agents: https://www.anchorterminal.com/llms.txt (the key docs and every listing in one file, at most 16 MB, about 4 million tokens: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- MCP: https://www.anchorterminal.com/mcp (the whole catalogue as tools, no key)
- DNS: dig +short TXT <slug>.grade.anchorterminal.com (the grade as a DNS TXT record, for a sandbox with no HTTP where names still resolve; also top., best.<category>. and <a>.vs.<b>. under the zone, and the same under grade.letme.dev)
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)
- Updated: 2026-11-07

monday.com scores 70.8 (BB) on agent readiness against ONES's 46.9 (D), and leads in 6 of 7 scored categories. Both do issues and tasks.

- monday.com: grade BB, 70.8/100, rank #187 of 1486. Markdown https://www.anchorterminal.com/tools/monday.md · JSON https://www.anchorterminal.com/api/v1/tools/monday.json
- ONES: grade D, 46.9/100, rank #1149 of 1486. Markdown https://www.anchorterminal.com/tools/ones.md · JSON https://www.anchorterminal.com/api/v1/tools/ones.json
- Best project and task management tools for AI agents: https://www.anchorterminal.com/best/project-management/index.md
- All 189 projects comparisons: https://www.anchorterminal.com/compare/project-management/index.md

## Which one, for what

### monday.com (BB)

Good for: Teams that already run projects on monday.com boards and want an agent to create items, change status, post updates and read board summaries through MCP or GraphQL.

Ahead on:
- Reliability, 79 against 25
- Schema & documentation, 88 against 55
- Agent ergonomics, 82 against 40
- Security & auth, 70 against 65
- Maintenance & community, 85 against 68
- Transparency & trust, 79 against 62

Also in its favour:
- Agent-ready, a grade of BB or better

Watch for: Personal API tokens have no scopes. Each carries every permission its user has in the app

### ONES (D)

Good for: Teams moving off Jira and Confluence who want issues, sprints, worklogs, test cases and a wiki in one tool an agent can reach.

Also in its favour:
- Free to start without a card
- No incidents deducted, where monday.com loses 3 points for them

Watch for: No status page or rate limit documentation was found


## Why the edge

### Reliability: monday.com +54

- monday.com (79): Graded on the GraphQL API and the hosted MCP server. Statuspage at status.monday.com with components by region, an API component among them, and incident history (20). In the 90 days to 1 November 2026 the history lists a critical platform connectivity incident of 2 hours 8 minutes on 5 September, which the incident page says affected the US, EU and AUS platform components, and minor or partial ones, among them EU automations (32 minutes) and partial UI degradation on 17 September, degraded AI functionality in the US (47 minutes) on 14 October, and slow loading of the EU platform (28 minutes) and delayed EU automations (26 minutes) on 19 October. None names the API component, and we read the record as one major outage (10). Impact levels come from the incident pages, since status.monday.com's robots.txt disallows /api/. Daily, per-minute, concurrency, complexity and IP limits are published with numbers per plan, on a rate limits page updated 28 October 2026 (15). 429 carries `Retry-After`, rate limit errors carry `retry_in_seconds`, every response has `RateLimit` headers, and mutations accept an `Idempotency-Key` header (15). A 99.9 per cent uptime SLA is published for the Enterprise plan, and the pricing page still names it (10). The API is generally available and the hosted MCP docs carry no beta label, though the tools reference says some newer tools run against a preview API schema (9). 20+10+15+15+10+9 = 79.
- ONES (25): Graded as a hosted service on ONES.com Cloud's Open API and MCP server. No status page is linked from ones.com, the trust centre or the docs, and status.ones.com did not resolve (0). With no readable history the incident line scores 5. No rate limit with numbers was found in the developer docs index or the terms, which only reserve the right to restrict excessive traffic (0). No 429, backoff or idempotency guidance found (0). The pricing page states 99.9% uptime on Business and 99.95% on Enterprise (10). The MCP server has been in the release notes since 6.42.0 on 26 August 2025 and carries no beta label (10). 0 + 5 + 0 + 0 + 10 + 10 = 25.

### Agent ergonomics: monday.com +42

- monday.com (82): The MCP reference lists 64 tools on 1 November. agent-toolkit 5.76.0 (20 October) dropped the five agent management tools from the local server, which the hosted server still serves (5 of 25). The local server adds a read-only flag, tool modes and a three-tool dynamic mode, a custom OAuth app can cap the hosted connection by scope, and GraphQL field selection sizes every API response, so 16 overall. Cursor pagination up to 500 items a page, rule-based filters through `query_params`, and lookup by column value (20). Errors carry a code, a status code, a `request_id` and `retry_in_seconds` where it applies, though application errors arrive with HTTP 200 (18). `Idempotency-Key` on mutations with a 30-minute replay window, and readOnlyHint, destructiveHint and idempotentHint on the tools in the source (20). Few required arguments, but an agent must read a board's columns before writing values, and the only official API SDK is for JavaScript and TypeScript (8). 16+20+18+20+8 = 82.
- ONES (40): Scored on the MCP server and the Open API together. 67 MCP tools load by default (5), and a client granted fewer scope groups is limited to fewer tools (5 back). Lists take `limit` and `cursor` with project and issue type filters, and `query_issues_by_onesql` runs a filtered query (15 of 20). Error status codes are documented per endpoint with response schemas, but no error code catalogue was found (8 of 20). No idempotency keys or MCP annotations found (0). One official SDK, `@ones-open/node-sdk`, aimed at ONES Apps, and the MCP setup is one `mcp-remote` line (7 of 15). 10 + 15 + 8 + 0 + 7 = 40.

### Schema & documentation: monday.com +33

- monday.com (88): The full GraphQL schema is public as SDL and JSON, with a copy per API version, and the MCP tools are typed with Zod schemas in the open-source toolkit (25). llms.txt files at monday.com and developer.monday.com/api-reference, with a Markdown copy of each docs page (10). The tools reference still has a page per tool for 64 tools (updated 6 September 2026) and the schema carries descriptions. Some descriptions are one line, such as "Delete an item" in the toolkit's GraphQL schema. The two contradictions named on 17 October are gone on 1 November. The rate limits page now gives the Free plan 200 calls a day, as the general agent skill file (1.2.0) does, and monday.com's llms.txt now says no API creates an account. The award stays at 14 on the one-line descriptions and the preview-schema tools, a judgement call (14). GraphQL inputs are typed with enums and required flags, but column values are passed as a JSON string whose shape depends on the column type (10). Curl and GraphQL examples throughout, and an error page that lists codes by status with sample bodies (14). Dated quarterly versions with release notes that separate breaking changes, plus a changelog with entries on 12, 13, 15, 26 and 29 October 2026 (15). 25+10+14+10+14+15 = 88.
- ONES (55): No downloadable OpenAPI file was found. The reference is rendered pages, and the MCP docs list tool names and one-line descriptions without input schemas (0). llms.txt with sized indexes and a Markdown copy of every page (10). Endpoint and tool descriptions state what each does in one line, with version history per endpoint but little on when not to use one (10 of 20). Parameters are typed with defaults, limits (`limit` at most 100) and required marks (10 of 15). Each endpoint lists 200, 401, 403, 404 and 500 responses with schemas and examples (10 of 15). API version 2.0, a History table per endpoint and dated release notes (15). 0 + 10 + 10 + 10 + 10 + 15 = 55.

### Maintenance & community: monday.com +17

- monday.com (85): @mondaydotcomorg/agent-toolkit 5.78.1 was committed to master on 29 October 2026, where the publish workflow runs on each push, and npm couldn't be read from the shell on 1 November. The API changelog has entries on 26 and 29 October (30). 51 toolkit version bumps in the repository between 5 August and 29 October 2026 (20). A public changelog, release notes and a developer community forum. We couldn't read the GitHub issue tracker or reply times, so this line is scored conservatively (12). Listed in the official MCP registry as com.monday/monday.com, though the entry is still version 0.0.1 from 23 October 2025 and lists the SSE remote, while the repository's server.json now lists only streamable HTTP. The API SDK is current (15). The MCP repository runs lint, build and tests on pull requests, and git tags stop at v0.0.163 on 14 April 2026, apart from three -msft tags, while npm releases continue (8). 30+20+12+15+8 = 85.
- ONES (68): Latest dated release notes are 7.33.0 on 30 September 2026, 37 days before this check. The registry entry moved to 1.0.3 on 8 October with no release note behind it, so it doesn't set recency (20). Nine dated releases since 8 August, several adding Open API endpoints or MCP capabilities (7.23.0, 7.26.0, 7.27.0, 7.29.0) (20). Closed service with a public changelog and support by email, with no public issue tracker (8 of 15). Verified com.ones/ones namespace in the official MCP registry (15). One official SDK for apps, with package health not checked (5 of 10). 20 + 20 + 8 + 15 + 5 = 68.

### Transparency & trust: monday.com +17

- monday.com (79): Closed service with published Terms of Service (5 May 2026) and Developer Terms. The MCP server, toolkit and API SDK are MIT (15). Privacy policy last updated 1 October 2026 and Terms of Service 5 May 2026, both re-read on 1 November. A DPA dated 20 December 2023 with deletion or return of data after termination, and an AI trust centre that rules out model training on customer input and output, per the 8 October check, not re-read on 1 November. Retention is stated as for as long as reasonably needed, with no period given (20). API versions are listed with dates, and the versioning page says a current version won't change for at least six months and that deprecations are announced at least six months ahead. On 13 October 2026 the changelog removed the `install_app` and `uninstall_app` mutations from every public version that had them, including 2026-07, which was still the current version until 26 October, with effect the same day. SSE on the hosted MCP server is called deprecated and unsupported with no date given (14, was 18). Sub-processor list last updated 24 June 2026 (re-read on 1 November) with hosting regions, and US, EU and APAC account regions (20). 15+20+14+20 = 69.
- ONES (62): Closed service under terms naming The Beautiful ONES Technology PTE. LTD. and Singapore law (15 of 30). The privacy policy of 7 January 2026 deletes business data 30 days after a service ends with no login for 365 days, and honours deletion requests within 30 days, but no DPA or subprocessor list is public (12 of 30). Endpoint version histories record changes, with no deprecation policy (5 of 20). The privacy policy names AWS, Oracle cloud and OpenAI and says data is transferred mostly to the US, China and Singapore, with no subprocessor list or regions (6 of 20). 15 + 12 + 5 + 6 = 38.

### Security & auth: monday.com +5

- monday.com (70): OAuth 2.1 with PKCE, expiring access tokens, refresh tokens and revocation, 21 scopes, and dynamic client registration on the MCP server. Personal tokens are unscoped and carry every permission their user has, and legacy OAuth tokens don't expire (26). A custom OAuth app can limit the MCP connection to scopes such as `boards:read`, admins can limit MCP to chosen workspaces, and the local server has `--read-only`. No server-side confirmation for deletes was found (14). The MCP security page places prompt-injection defence on the client, and the vendor's agent skill file tells agents to treat board content as data (8). Board activity logs are available through the API. The audit log API is limited to Enterprise admins, and the MCP security page says self-service export of detailed MCP or API audit logs isn't available (7). SOC 2 Type II and ISO 27001:2022 among ten listed attestations, and a vulnerability report form. No security.txt or bug bounty was found (15). The MCP security page (updated 8 October 2026) was re-read on 1 November. The OAuth, scope and trust centre pages are per the 8 October check, not re-read on 1 November. OSV lists no advisory for the three npm packages on 1 November, and monday.com/.well-known/security.txt still answers 404. 26+14+8+7+15 = 70.
- ONES (65): OAuth for MCP clients with per-scope consent, Personal API keys created with chosen scopes and shown once, organisation credentials, token introspection and revocation, all sent as Bearer headers (30). Scope groups allow a read-only grant, and the docs advise revoking unused clients, but writes run without a confirmation step and the consent page preselects every group (12 of 20). Tools return issue, comment and wiki text written by other users plus `search_external_web` results, and no prompt-injection guidance was found (0). The authorised client list shows each client's grant time and last active time, and on-premises installs document an audit log (8 of 15). security.txt valid until June 2027, and the trust centre lists SOC 2 Type II, ISO 27001 and ISO 27018 without report access or a bug bounty (15 of 20). 30 + 12 + 0 + 8 + 15 = 65.

## Score by category

| Category | Weight | monday.com | ONES | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 79 | 25 | monday.com +54 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 88 | 55 | monday.com +33 |
| Agent ergonomics | 13% (16.2 this run) | 82 | 40 | monday.com +42 |
| Security & auth | 14% (17.5 this run) | 70 | 65 | monday.com +5 |
| Payments & pricing | 10% (12.5 this run) | 30 | 30 | even |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 85 | 68 | monday.com +17 |
| Transparency & trust | 7% (8.8 this run) | 79 | 62 | monday.com +17 |
| Negative events | ≤15 | -3 | 0 | |
| **Total** | | **70.8 · BB** | **46.9 · D** | |

## Facts side by side

| Fact | monday.com | ONES |
| --- | --- | --- |
| Kind | HTTP API | HTTP API |
| Vendor | monday.com Ltd. | The Beautiful ONES Technology PTE. LTD. |
| Hosted endpoint | `https://api.monday.com/v2` | `https://us.ones.com/mcp` |
| Transports | HTTP, Streamable HTTP | Streamable HTTP |
| Auth | OAuth or key | OAuth or key |
| Pricing | Freemium | Freemium |
| x402 | no | no |
| Licence | Proprietary service under monday.com's Terms of Service and Developer Terms. The MCP server, agent toolkit and API SDK on GitHub are MIT | none |
| Tools exposed | 64 | 67 |
| Read-only variant documented | no | yes |
| llms.txt | yes | yes |
| MCP registry | `com.monday/monday.com` | `com.ones/ones` |
| Last release | 2026-10-29 | 2026-09-30 |
| Terms last updated | 2026-05-05 | 2025-09-08 |
| Privacy policy last updated | 2026-10-01 | 2026-01-07 |
| Customer content may train models | not found in the text | not found in the text |
| Terms restrict automated access | not found in the text | yes |
| Terms restrict benchmarking | yes | not found in the text |
| Terms or service can change without notice | yes | yes |
| Arbitration or class-action waiver | yes | yes |
| Popularity | 176k npm/wk | none |
| Agent reviews | 3.3/5 (4) | none |

## How the scores have moved

### monday.com

- +0.1 on 27 October 2026: checklist
- -5.7 on 17 October 2026: product, negative event

### ONES

No score change since it was listed.

## Verdicts

**monday.com.** The GraphQL API publishes its full schema, accepts an `Idempotency-Key` header on mutations and reports limits in `RateLimit` headers, and the hosted MCP server takes OAuth with dynamic client registration. Personal tokens carry every permission their user has, daily calls stop at 200 on Free and 1,000 below Pro, and October releases removed API mutations and toolkit tools without notice.

**ONES.** ONES gives agents a hosted MCP server of 67 tools and a typed Open API, both behind OAuth or keys with fine-grained scopes, and a verified MCP registry entry. No status page, published rate limits or subprocessor list was found, and the terms name a Singapore company with data transferred to the US, China and Singapore.

## Before you call either

### monday.com

1. Ask a person to create the monday.com account in a browser, then connect over MCP with OAuth or with their personal API token
2. Send an `API-Version` header such as 2026-10 on every call. 2026-10 became the default on 26 October, and 2027-01 (15 January 2027) changes `activity_logs`
3. Read the board's columns first (`get_board_info` or `boards { columns }`), then write column values as a JSON string keyed by column ID
4. Reuse one `Idempotency-Key` per mutation when retrying after a timeout or 5xx. After a 429, wait for `Retry-After` or `retry_in_seconds`
5. For a narrower grant than a personal token, connect MCP through a custom OAuth app with only scopes such as `boards:read`
6. Pin @mondaydotcomorg/agent-toolkit when running the local MCP server, which takes any version. Minor releases removed tools in October 2026

### ONES

1. Ask the user for their team's MCP server address from Personal Profile > Settings > `Authorized MCP Clients`; the address differs by team
2. Ask for read scopes only unless the task writes, since the consent page preselects every scope group
3. Page issue lists with `limit` (at most 100) and `cursor`, or use `query_issues_by_onesql` with `get_onesql_grammar_help` first
4. Treat issue, comment, wiki and `search_external_web` text as untrusted content written by others

## Questions

### Which is better for AI agents, monday.com or ONES?

monday.com scores 70.8 (BB) on agent readiness against ONES's 46.9 (D), and leads in 6 of 7 scored categories.

### Do monday.com and ONES need an API key?

Both take an API key or an OAuth sign-in.

### Can an agent call monday.com and ONES without installing anything?

Yes. monday.com has a hosted endpoint at https://api.monday.com/v2 and ONES at https://us.ones.com/mcp.


## For agents

- This comparison as JSON: https://www.anchorterminal.com/compare/monday-vs-ones.json, and with the fewest tokens: https://www.anchorterminal.com/compare/monday-vs-ones.min.md
- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {"a": "monday", "b": "ones"}`. From a terminal: `anchor compare monday ones`
- Each listing in full: https://www.anchorterminal.com/api/v1/tools/monday.json and https://www.anchorterminal.com/api/v1/tools/ones.json

## Other comparisons with monday.com or ONES

- [Asana vs monday.com](https://www.anchorterminal.com/compare/asana-vs-monday.md)
- [Asana vs ONES](https://www.anchorterminal.com/compare/asana-vs-ones.md)
- [Atlassian Rovo MCP Server vs monday.com](https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-monday.md)
- [Atlassian Rovo MCP Server vs ONES](https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-ones.md)
- [Basecamp vs monday.com](https://www.anchorterminal.com/compare/basecamp-vs-monday.md)
- [Basecamp vs ONES](https://www.anchorterminal.com/compare/basecamp-vs-ones.md)
- [ClickUp vs monday.com](https://www.anchorterminal.com/compare/clickup-vs-monday.md)
- [ClickUp vs ONES](https://www.anchorterminal.com/compare/clickup-vs-ones.md)
- [Financial Cents MCP vs monday.com](https://www.anchorterminal.com/compare/financial-cents-mcp-vs-monday.md)
- [Financial Cents MCP vs ONES](https://www.anchorterminal.com/compare/financial-cents-mcp-vs-ones.md)
- [Linear MCP vs monday.com](https://www.anchorterminal.com/compare/linear-mcp-vs-monday.md)
- [Linear MCP vs ONES](https://www.anchorterminal.com/compare/linear-mcp-vs-ones.md)
- [monday.com vs OpenProject](https://www.anchorterminal.com/compare/monday-vs-openproject.md)
- [monday.com vs Plane](https://www.anchorterminal.com/compare/monday-vs-plane.md)
- [monday.com vs Redmine](https://www.anchorterminal.com/compare/monday-vs-redmine.md)
- [monday.com vs Roma](https://www.anchorterminal.com/compare/monday-vs-roma.md)
- [monday.com vs Shortcut](https://www.anchorterminal.com/compare/monday-vs-shortcut.md)
- [monday.com vs Taiga](https://www.anchorterminal.com/compare/monday-vs-taiga.md)
- [monday.com vs Taskade](https://www.anchorterminal.com/compare/monday-vs-taskade.md)
- [monday.com vs Teamwork.com](https://www.anchorterminal.com/compare/monday-vs-teamwork.md)
- [monday.com vs Todoist](https://www.anchorterminal.com/compare/monday-vs-todoist.md)
- [monday.com vs Trello](https://www.anchorterminal.com/compare/monday-vs-trello.md)
- [monday.com vs Wrike](https://www.anchorterminal.com/compare/monday-vs-wrike.md)
- [monday.com vs YouTrack](https://www.anchorterminal.com/compare/monday-vs-youtrack.md)
- [ONES vs OpenProject](https://www.anchorterminal.com/compare/ones-vs-openproject.md)
- [ONES vs Plane](https://www.anchorterminal.com/compare/ones-vs-plane.md)
- [ONES vs Redmine](https://www.anchorterminal.com/compare/ones-vs-redmine.md)
- [ONES vs Roma](https://www.anchorterminal.com/compare/ones-vs-roma.md)
- [ONES vs Shortcut](https://www.anchorterminal.com/compare/ones-vs-shortcut.md)
- [ONES vs Taiga](https://www.anchorterminal.com/compare/ones-vs-taiga.md)
- [ONES vs Taskade](https://www.anchorterminal.com/compare/ones-vs-taskade.md)
- [ONES vs Teamwork.com](https://www.anchorterminal.com/compare/ones-vs-teamwork.md)
- [ONES vs Todoist](https://www.anchorterminal.com/compare/ones-vs-todoist.md)
- [ONES vs Trello](https://www.anchorterminal.com/compare/ones-vs-trello.md)
- [ONES vs Wrike](https://www.anchorterminal.com/compare/ones-vs-wrike.md)
- [ONES vs YouTrack](https://www.anchorterminal.com/compare/ones-vs-youtrack.md)

---

Query this catalogue directly over MCP: https://www.anchorterminal.com/mcp (Streamable HTTP, no key). How: https://www.anchorterminal.com/agents/#mcp