Monid vs SandBase

Monid 85

x402 on Monid's own run route, POST https://x402.monid.ai/v1/run, in USDC on Base or Monad through a facilitator with no account, and run retrieval by a Sign-In-With-X signature from the paying wallet, per the 'Pay with x402' guide and the OpenAPI file's error codes. Metered endpoints and those tied to workspace resources or with an unbounded price are excluded, the floor is $0.01, and discovery and inspection need a key. Exa took 30 for x402 on its main paid routes with its other products excluded, the reading taken here (30 of 40). Not probed, because robots.txt on x402.monid.ai disallows every path. Per-call and per-result prices on public pages without a login, such as $0.00015 a call for Litescrape's Google Maps search, and discover and inspect return each price before a run (20). New accounts start with $1 of free credit and no card, per Monid (20). An agent with a funded wallet can run and fetch over x402 with no account, but the documented loop needs an API key, which a person creates in the dashboard, for discovery and input schemas, and topping up a balance needs a person to pay a Stripe checkout. Firecrawl took 15 when part of its surface needed a key a person creates (15 of 20).

SandBase 40

No x402, MPP or L402 on the home page, pricing, billing, llms.txt or the OpenAPI paths; the balance is funded through Stripe or Airwallex checkout (0). Prices per million tokens, per image, per seconds of video or per call on public pages without a login, such as anthropic/claude-sonnet-5.5 at $1.70 in and $8.50 out per million tokens, and inspect returns each price before a run (20). Every organisation gets 100 free calls a day on eligible data APIs, which a zero-balance organisation can still use per the skill, and Start is $0. No card requirement was found on the pricing page or the billing guide, which asks for a saved card only for auto top-up. Nevermined earned 20 for a free plan with no card requirement found (20). A person approves a browser sign-in, through the CLI's flow or the console, before any key exists, and no keyless or programmatic route was found (0). 0+20+20+0 = 40.

Monid 62

API keys carry {resource}:{action} scopes over runs, resources, wallet, top-ups, controls and API keys, fixed at creation, from a published catalogue (GET /v1/api-keys/scopes). They can carry an expiry, are revoked in the dashboard or with POST /v1/api-keys/{label}/revoke, and a key can mint only keys within its own grants. Bearer header only, with no query-string option documented. OAuth 2.0 and OpenID Connect serve third-party apps and the MCP sign-in. That meets the line's scoped, revocable keys with rotation (30). Read-only keys are possible (runs:read, wallet:read), a person sets budgets per hour, day, week or month and a per-run cap, and keys minted from a dashboard session get no controls scope by default, so an agent holding one can't lift its own budget. There's no allowlist of providers or endpoints (the docs send builders to run their own proxy for that) and no approval step before paid runs or real-world actions such as calls and SMS. Nevermined and Composio each earned 16 (16 of 20). Runs return scraped pages, social posts and reviews from third parties, with no guidance on treating them as untrusted, and the skill tells agents to replace it from monid.ai on every update. Composio took 3 with none (3 of 15). Runs are kept with their caller, input, output, provider status, price and cost, readable through GET /v1/runs and per control, keys record who created and revoked them and when they were last used, resources have event histories, and every response carries an x-request-id. No retention period is stated (13 of 15). security.txt answers 404 on monid.ai, neither repository has a SECURITY.md, and no disclosure policy, bug bounty or certification was found. GitHub advisories couldn't be read, because GitHub's web pages and API refused our reader (0 of 20).

SandBase 45

Standard keys (sk- and 64 hex characters) act for one organisation with no user-selectable scopes, can carry an expiry and a spending limit, are shown once and are revoked permanently in the console. CLI Login keys from the browser approval (device secret plus PKCE S256) are scoped to mcp:invoke and answer 403 insufficient_scope outside it. No OAuth for the MCP server and no API for managing keys. Above plain revocable keys, below OpenRouter's 25 with OAuth PKCE and a management API (22). The OpenAPI file's generateContent operation 'also accepts x-goog-api-key and the key query parameter for Google SDK compatibility', noting headers are safer, and all four Gemini operations list a GoogleQueryApiKey scheme, read on 8 November 2026. A secret in a URL query string is a documented option, so 10 off (12 of 30). Per-key spending limits and expiry, the organisation's funding boundary and a monthly limit on auto top-up bound spend, and an agent can't lift a key's limit by topping up. No read-only key, per-period budget, per-run cap, allowlist of tools or providers or approval step before a paid run. Monid earned 16 with per-period budgets, a per-run cap and read-only scopes, which SandBase lacks (12 of 20). Runs return scraped pages and social posts from third parties, and neither the skill nor the docs read say to treat them as untrusted. Monid took 3 with none (3 of 15). Request history lists each request's status and cost, sandbase_runs and account history return runs with cost, GET /v1/tasks/{task_id}/cost gives a task's cost, and billing records export as CSV. No key-level audit (created by, last used) was found. Monid earned 13 with key usage records (12 of 15). security.txt answered a client error. SECURITY.md in sandbaseai/sandbase names the SDKs, examples, catalogue and API as in scope for GitHub private vulnerability reporting with acknowledgement within 3 business days, and the CLI repository has its own. No bug bounty or certification found. Paid earned 6 for a reporting address without security.txt (6 of 20). 12+12+3+12+6 = 45.

Monid 53

Hosted lines, graded on the REST API and the remote MCP server it fronts, the surfaces an agent calls. status.monid.ai is a live Better Stack page, created 15 June 2026, with 90 days of daily history for the API (api.monid.ai), the dashboard and the landing page. It doesn't monitor mcp.monid.ai or x402.monid.ai. Snipcart earned 15 for a live page checking root URLs and Nevermined 10 for one that had stopped recording (15 of 20). From 26 July to 23 October 2026 (read at 12:15 UTC) the API was down 6,135 seconds, 1 hour 42 minutes, on 17 August, with no incident post, and the dashboard and site were clean. An hour or more of the core API down is one major outage (10). The OpenAPI file at monid.ai/openapi.json says limits apply per API key, user or workspace on every authenticated route and per provider and endpoint on runs, with numbers only in response headers. Paid earned 7 for limits described without numbers (7 of 15). 429s carry Retry-After in whole seconds and RateLimit-Limit, -Remaining and -Reset headers, and BLOCKED runs are documented as terminal. POST /v1/run spends money and takes no idempotency key, and nothing covers resending after a lost response. Paid earned 13 with an idempotency key on part of its writes and Nevermined 15 with one on payments (11 of 15). No SLA, and the terms promise no availability (0). No beta or preview label on the API or the MCP server (10).

SandBase 63

Hosted lines, graded on the HTTP API and the remote MCP server at api.sandbase.ai/v1/mcp, the surfaces an agent calls. status.sandbase.ai is a live Better Stack page with a 90-day view of the website, the API, the docs and the blog, and no component for the MCP path or sandbox.sandbase.ai. Monid earned 15 for a live Better Stack page that didn't monitor its MCP host (15 of 20). Read on 8 November 2026, it showed all services operational, the API at 99.957 per cent over 30 days and 99.983 per cent over 90, and 'No incidents reported' for September, October and November 2026. That is under 20 minutes of API downtime in the last 30 days and no outage of an hour, so minor incidents at most (20). The rate-limits page says requests a minute are assigned per organisation over a one-minute sliding window, shared by its keys, with a video concurrency limit, and publishes no numbers. Paid and Monid earned 7 for limits described without numbers (7 of 15). A 429 carries {"error":"organization rate limit exceeded"}, Retry-After is 'not guaranteed' and honoured when present, and the docs give exponential backoff with jitter and say not to retry a state-changing request without documented idempotency. Idempotency-Key is taken on Agents writes, session events and cancel, not on POST /v1/run, which spends money. Monid earned 11 on the same pattern (11 of 15). No SLA, and the terms promise no uptime, response time or availability (0). No beta or preview label on the API or the MCP server (10). 15+20+7+11+0+10 = 63.

Monid 71

Read on the REST API, since the MCP tool list is unread. Discover returns 5 results by default, up to 200, above a score floor and narrows by category, so the catalogue stays out of context. Run outputs come back whole, sized only through each provider's own parameters, so 5 off (20 of 25). List routes page by cursor and filter by status, category, provider, x402 eligibility and resource effects, while run output size depends on each provider's limits, which the skill warns often apply per query rather than per call (18 of 20). Errors carry code, message and an optional errorCode. A 402 from Monid is always the caller's wallet, with a provider's own 402 shown as 502, run statuses separate Monid failures, control blocks and provider statuses, and responses carry hints naming the next command. No retryable flag, which Nevermined's 20 rested on (17 of 20). No idempotency key on runs, and the MCP annotations are unread. Endpoints carry readonly and effects metadata on resource changes, and resource release is documented as idempotent. Smithery earned 10 with idempotent upserts and safe client retries, and Monid's endpoint metadata covers less than annotations (8 of 20). A run needs only provider, endpoint and input, with sensible defaults, but there's no official SDK in any language, only the CLI and raw HTTP examples (8 of 15).

SandBase 81

Read on the MCP tools, with the HTTP API where a line covers it. Seven tools (sandbase_discover, sandbase_inspect, sandbase_run, sandbase_run_get, sandbase_runs, sandbase_account, sandbase_run_cancel) with one-line descriptions, from the bridge's built-in copy and the skill, which agree; the live tools/list wasn't read. Ten or fewer compact tools (25). sandbase_discover filters by query, type and vendor with a limit, sandbase_run_get pages a run's output by cursor and limit, sandbase_runs by limit and offset, account history by page up to 100, and Agents lists by cursor. Other output sizing depends on each provider's parameters, and the skill sends large results to the CLI's -o file. Monid took 18 with more filters and no paging of run output (18 of 20). Bridge errors are isError results naming the cause and the next step (sign in again, top up, raise the key's spending limit, wait 10 to 30 seconds), and a 402 separates a key's spending limit from an empty balance. The API's platform errors are a bare string with no code or retryable flag (16 of 20). Idempotency keys on Agents writes, session events, cancel and Agent Service runs (sandbase_run_cancel requires one, and the CLI generates one for service runs), and the bridge refuses to resend a run once it may have reached the server, but POST /v1/run and sandbase_run take no key and no tool carries readOnlyHint or destructiveHint. Smithery earned 10 with idempotent upserts and safe client retries (10 of 20). A run needs only a tool name and arguments. SDKs for Python, TypeScript and Go sit in sandbaseai/sandbase at 0.1.0, installed from GitHub and on no package registry, and the OpenAI, Anthropic and E2B SDKs work by changing the base URL. Monid took 8 with the CLI alone (12 of 15). 25+18+16+10+12 = 81.