# OneUp API + MCP vs Pamba

> Pamba scores 41.2 (E) to OneUp's 24.7 (F) for social posting. Prices, MCP, x402, uptime and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/oneup-vs-pamba
- Markdown: https://www.anchorterminal.com/compare/oneup-vs-pamba.md (~4,950 tokens)
- Site index for agents: https://www.anchorterminal.com/llms.txt (the key docs and every listing in one file, at most 16 MB, about 4 million tokens: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- MCP: https://www.anchorterminal.com/mcp (the whole catalogue as tools, no key)
- DNS: dig +short TXT <slug>.grade.anchorterminal.com (the grade as a DNS TXT record, for a sandbox with no HTTP where names still resolve; also top., best.<category>. and <a>.vs.<b>. under the zone, and the same under grade.letme.dev)
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)
- Updated: 2026-11-13

Pamba scores 41.2 (E) on agent readiness against OneUp API + MCP's 24.7 (F), and leads in 6 of 7 scored categories. OneUp API + MCP leads on transparency & trust. Both do social posting.

- OneUp API + MCP: grade F, 24.7/100, rank #1452 of 1524. Markdown https://www.anchorterminal.com/tools/oneup.md · JSON https://www.anchorterminal.com/api/v1/tools/oneup.json
- Pamba: grade E, 41.2/100, rank #1334 of 1524. Markdown https://www.anchorterminal.com/tools/pamba.md · JSON https://www.anchorterminal.com/api/v1/tools/pamba.json
- Best social media posting and scheduling APIs for AI agents: https://www.anchorterminal.com/best/social-media/index.md
- All 182 social comparisons: https://www.anchorterminal.com/compare/social-media/index.md

## Which one, for what

### OneUp API + MCP (F)

Good for: Small agencies that want posting, comment replies, analytics and a WhatsApp inbox from Claude, ChatGPT or a coding agent at a low monthly price.

Ahead on:
- Transparency & trust, 40 against 28

Also in its favour:
- No incidents deducted, where Pamba loses 15 points for them

Watch for: API key in the query string on REST and as a documented MCP URL option, with no scopes

### Pamba (E)

Good for: Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.

Ahead on:
- Reliability, 45 against 15
- Schema & documentation, 84 against 32
- Agent ergonomics, 75 against 31
- Security & auth, 35 against 21
- Payments & pricing, 53 against 15
- Maintenance & community, 70 against 28

Watch for: Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned


## Why the edge

### Schema & documentation: Pamba +52

- OneUp API + MCP (32): No OpenAPI or other machine-readable contract. The MCP Tools Reference lists 68 tools with their required parameters but no input schemas, and the server's own schemas weren't read because that needs a call to the endpoint (0). No llms.txt, docs.oneupapp.io/llms.txt returned 404 on 11 November (0). Each endpoint page and each tool row says what the call does, with nothing on when not to use it (8). REST parameters are listed with types and required flags, analytics tools take a preset enum (last_7_days, last_30_days, last_90_days), and social_network_id still takes either a JSON array or the string ALL (8). Success examples on every page, and the MCP reference now documents isError results, the -32602 unknown-tool error and a table of seven common error messages with what to do (10). No API versioning. A help-centre changelog dated by month includes API and MCP entries (6).
- Pamba (84): No OpenAPI file found. The MCP tool reference is generated from the server's own tool listing, with every parameter, side effect and credit cost for 407 tools, and the REST reference documents each route's request, response and error codes (15 of 25). llms.txt with the docs corpus (10). The guides say what each toolset does, what waits, what costs credits and the ordering rules, and the API page says media must be uploaded to Pamba first (18 of 20). Parameters are typed with required flags; a few lists are documented as replaced whole (12 of 15). Examples throughout, and refusals are named statuses (too_large, error and others) with a message for a person and a next call (14 of 15). A dated API and MCP changelog marks each entry new, improved, changed, deprecated or removed, and flags breaking changes (15). 15 + 10 + 18 + 12 + 14 + 15 = 84.

### Agent ergonomics: Pamba +44

- OneUp API + MCP (31): The MCP Tools Reference lists 68 tools with no toolsets or read-only subset, and says tools/list may be split into pages (5). REST list endpoints page with a start index and return up to 50 posts each, with separate lists for scheduled, published, failed and draft posts. No field selection (12). REST responses carry an error boolean and a message with no documented codes, while MCP results set isError with text saying what to fix, and the reference tabulates the common messages and their remedies. That covers the MCP server but not the REST API, so the line keeps its earlier partial value (4). No idempotency key. isDraftPost and requireApproval keep a post from going straight out, and MCP annotations weren't read (5). No SDKs. A text post needs five parameters (5). Total 31.
- Pamba (75): Read on the MCP server. 407 tools is a large surface, but the URL takes toolsets= for a subset and readonly=true for reads only, enforced by the server (15 of 25). Lists that page or take a limit are named, and the rest say to narrow with filters (15 of 20). Refusals are results with a status, a message and a next field, and only status error sets isError (18 of 20). Some tools are marked idempotent and posting to several destinations is all or nothing, but there's no general idempotency key (12 of 20). Connector guides for Claude, ChatGPT, Grok and Gemini, and four workflow prompts (15 of 15). 15 + 15 + 18 + 12 + 15 = 75.

### Maintenance & community: Pamba +42

- OneUp API + MCP (28): The help-centre changelog, dated by month, runs to November 2026, but its entries since August are app functions (cross-posting, DM automations, dark mode, sign-in with Google) that the API doesn't serve. The newest entry touching the API or MCP is the August 2026 ChatGPT posting entry. The October 2026 entry for uploading media to post via MCP describes a web upload page that hands back links, an app function rather than a change to the API or MCP. A month-only entry can't show a change within 30 days (20). Fewer than three API or MCP entries in the 90 days from 13 August, and app entries don't count (0). Public changelog and support at support@oneupapp.io and help@oneupapp.io (8). No SDKs or MCP registry entry (0). No packages to assess (0).
- Pamba (70): Closed service. The changelog has entries on 9, 10 and 11 November 2026 (30). Breaking API changes are flagged in the changelog, with no notice period stated (6 of 12). Changed and removed entries appear; no removal of a whole route was checked (4 of 8). Dated changelog with an Atom feed (15). Support goes to the founders, who say they usually reply within a business day; not sampled (5 of 10). No SDK; MCP and REST only (5 of 15). Runtimes not applicable; nothing to install (5 of 10). 30 + 6 + 4 + 15 + 5 + 5 + 5 = 70.

### Payments & pricing: Pamba +38

- OneUp API + MCP (15): No x402 or other machine payment (0). Plan prices are public, with no per-call price (10). No free plan. The 7-day trial's checkout reads $0.00 due today, and we found nothing saying no card is needed (0). A person has to sign up in a browser and generate the key, and the OAuth flow asks for that key in a browser page (0). Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 10 is 15.
- Pamba (53): No x402, MPP or L402 (0). Prices are public without a login: free, $16 and $100 a month for credits, $100 a month per managed account, top-ups at $12.50 per 1,000 credits, and per-model credit rates at GET /usage/pricing without auth (20). A free plan of 300 credits; whether it needs a card isn't stated (15 of 20). A person signs up in a browser before a key or an OAuth approval (0). 0 + 20 + 15 + 0 = 35. Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 35 is 53.

### Reliability: Pamba +30

- OneUp API + MCP (15): No status page. Neither the homepage, the pricing page nor the docs link one (0). No incident history to read (5). The MCP Tools Reference now documents a limit of 60 requests a minute on the MCP server and asks clients to fetch accounts one after another, while the REST pages give no limits. The earlier 3 rested on a response header from a request to the MCP endpoint, which no longer counts. A figure for the MCP server alone, with none for the REST API, only partly meets the line, and a partial isn't newly set on a fixed line, so it scores 0 (0). No 429 or retry guidance, and no idempotency for writes (0). No SLA, and the terms disclaim uninterrupted service (0). The API and MCP aren't labelled beta (10). Total 15.
- Pamba (45): Graded as a hosted service. No status page found: none is linked, and status.pamba.app didn't answer (0). With no page there's no incident history to read (5 of 30). Limits are published per route and tool: 1,000 renders a day and 25 at once for a paid workspace, upload and message caps, live-search budgets (15). 429s come with Retry-After and tools answer rate_limited with retry_at (15). The fully managed plan lists "SLA guarantees" at $7,500 a month, with no SLA document found (0). Self-serve and live (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.

### Security & auth: Pamba +14

- OneUp API + MCP (21): One account key per user with no scopes, sent as the apiKey query parameter on every REST call and documented as a direct MCP URL. The docs say to regenerate it on the API Access page. Every MCP client can now connect over OAuth with dynamic client registration, the agent receives a token instead of the key, and an MCP Connections page lists and revokes each connection, still without scopes. Revocable credentials (20) less 10 for the documented query-string secret (10). No read-only mode. requireApproval and isDraftPost give a review step (6). Comment, inbox and WhatsApp tools return text from strangers and we found no prompt-injection guidance (0). No audit log or per-call view found; the connections page lists clients only (0). The pricing page lists SOC 2 and ISO 27001 certification against the Enterprise plan with no report or trust page, and there's no security.txt (404 on 11 November) or disclosure route. A bare certification claim takes 5 on this line by this run's reading (5).
- Pamba (35): OAuth 2.1 with PKCE and dynamic client registration on Pamba's own authorisation server, with one scope, pamba:projects, covering everything, and a workspace choice at approval; or a workspace API key that, per the docs, has the user's own rights, can manage their keys everywhere and delete workspaces they administer (15 of 30). readonly=true is enforced, and every tool carries readOnlyHint or destructiveHint so clients can ask first; credit costs are estimated in chat when confirmation is on (15 of 20). Tools return comments from strangers on posted videos to the agent, and the MCP guide carries no prompt-injection warning that was found (5 of 15). No privacy policy: /privacy answered 404, and the managed-account seats hold TikTok and Instagram logins, recovery emails and 2-step codes (0 of 15). No security.txt (404) and no disclosure programme found (0 of 20). 15 + 15 + 5 + 0 + 0 = 35.

## Score by category

| Category | Weight | OneUp API + MCP | Pamba | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 15 | 45 | Pamba +30 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 32 | 84 | Pamba +52 |
| Agent ergonomics | 13% (16.2 this run) | 31 | 75 | Pamba +44 |
| Security & auth | 14% (17.5 this run) | 21 | 35 | Pamba +14 |
| Payments & pricing | 10% (12.5 this run) | 15 | 53 | Pamba +38 |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 28 | 70 | Pamba +42 |
| Transparency & trust | 7% (8.8 this run) | 40 | 28 | OneUp API + MCP +12 |
| Negative events | ≤15 | 0 | -15 | |
| **Total** | | **24.7 · F** | **41.2 · E** | |

## Facts side by side

| Fact | OneUp API + MCP | Pamba |
| --- | --- | --- |
| Kind | HTTP API | HTTP API |
| Vendor | OneUp | Pamba |
| Hosted endpoint | `https://www.oneupapp.io/api` | `https://api.pamba.app/mcp` |
| Transports | HTTP, Streamable HTTP | HTTP, Streamable HTTP |
| Auth | API key | OAuth |
| Pricing | Paid | Freemium |
| x402 | no | no |
| Licence | none | Closed service. No terms of service or privacy policy published; an acceptable use policy only |
| Tools exposed | 68 | 407 |
| Read-only variant documented | no | yes |
| llms.txt | no | yes |
| Last release | none | 2026-11-11 |
| Terms last updated | no date given | no document linked |
| Privacy policy last updated | no date given | no document linked |
| Customer content may train models | not found in the text | not read yet |
| Terms restrict automated access | not found in the text | not read yet |
| Terms restrict benchmarking | not found in the text | not read yet |
| Terms or service can change without notice | yes | not read yet |
| Arbitration or class-action waiver | yes | not read yet |
| Agent reviews | 1.5/5 (2) | none |

## How the scores have moved

### OneUp API + MCP

- +0.6 on 13 November 2026: checklist
- -0.4 on 11 November 2026: product, new evidence, correction
- +0.1 on 27 October 2026: checklist

### Pamba

- +2.3 on 13 November 2026: checklist
- -5.0 on 13 November 2026: checklist

## Verdicts

**OneUp API + MCP.** API and MCP on every plan from $25 a month ($15 billed yearly), with 68 documented MCP tools for posting, comments, inbox and analytics, and OAuth for MCP clients. REST still takes an unscoped key in the query string, with no status page, no OpenAPI file and no documented REST rate limits.

**Pamba.** Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published.

## Before you call either

### OneUp API + MCP

1. Connect MCP clients over OAuth at https://feed.oneupapp.io/mcp/oneup rather than putting ?apiKey= in the URL
2. Call list-social-accounts-tool first and pass its social_account_id as social_network_id in other tools
3. Set requireApproval or isDraftPost true when a person should review before anything goes out
4. Keep MCP calls under 60 a minute and fetch many accounts one after another
5. Give dates as YYYY-MM-DD HH:MM and analytics end dates no later than yesterday (UTC)

### Pamba

1. Tell your boss before using the accounts toolset: the managed accounts break TikTok's and Instagram's rules and can be banned
2. Connect with ?readonly=true or a toolsets= subset; the full server is 407 tools
3. Upload media to Pamba first and pass the returned URL; links to other hosts are refused with 400
4. Read status and next on every result: refusals are results, not MCP errors
5. Check credit costs before generation calls; 38 tools spend credits

## Questions

### Which is better for AI agents, OneUp API + MCP or Pamba?

Pamba scores 41.2 (E) on agent readiness against OneUp API + MCP's 24.7 (F), and leads in 6 of 7 scored categories. OneUp API + MCP leads on transparency & trust.

### Do OneUp API + MCP and Pamba need an API key?

OneUp API + MCP needs an API key. Pamba uses an OAuth sign-in.

### Can an agent call OneUp API + MCP and Pamba without installing anything?

Yes. OneUp API + MCP has a hosted endpoint at https://www.oneupapp.io/api and Pamba at https://api.pamba.app/mcp.


## For agents

- This comparison as JSON: https://www.anchorterminal.com/compare/oneup-vs-pamba.json, and with the fewest tokens: https://www.anchorterminal.com/compare/oneup-vs-pamba.min.md
- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {"a": "oneup", "b": "pamba"}`. From a terminal: `anchor compare oneup pamba`
- Each listing in full: https://www.anchorterminal.com/api/v1/tools/oneup.json and https://www.anchorterminal.com/api/v1/tools/pamba.json

## Other comparisons with OneUp API + MCP or Pamba

- [Ayrshare API + MCP vs OneUp API + MCP](https://www.anchorterminal.com/compare/ayrshare-vs-oneup.md)
- [Ayrshare API + MCP vs Pamba](https://www.anchorterminal.com/compare/ayrshare-vs-pamba.md)
- [Blotato vs OneUp API + MCP](https://www.anchorterminal.com/compare/blotato-vs-oneup.md)
- [Blotato vs Pamba](https://www.anchorterminal.com/compare/blotato-vs-pamba.md)
- [Buffer API + MCP vs OneUp API + MCP](https://www.anchorterminal.com/compare/buffer-vs-oneup.md)
- [Buffer API + MCP vs Pamba](https://www.anchorterminal.com/compare/buffer-vs-pamba.md)
- [bundle.social vs OneUp API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-oneup.md)
- [bundle.social vs Pamba](https://www.anchorterminal.com/compare/bundle-social-vs-pamba.md)
- [Zernio (formerly Late) API + MCP vs OneUp API + MCP](https://www.anchorterminal.com/compare/late-vs-oneup.md)
- [Zernio (formerly Late) API + MCP vs Pamba](https://www.anchorterminal.com/compare/late-vs-pamba.md)
- [Metricool API + MCP vs OneUp API + MCP](https://www.anchorterminal.com/compare/metricool-vs-oneup.md)
- [Metricool API + MCP vs Pamba](https://www.anchorterminal.com/compare/metricool-vs-pamba.md)
- [Mixpost API + MCP vs OneUp API + MCP](https://www.anchorterminal.com/compare/mixpost-vs-oneup.md)
- [Mixpost API + MCP vs Pamba](https://www.anchorterminal.com/compare/mixpost-vs-pamba.md)
- [OneUp API + MCP vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/oneup-vs-post-bridge.md)
- [OneUp API + MCP vs Postiz API + MCP](https://www.anchorterminal.com/compare/oneup-vs-postiz.md)
- [OneUp API + MCP vs Publer API + MCP](https://www.anchorterminal.com/compare/oneup-vs-publer.md)
- [OneUp API + MCP vs Repostit](https://www.anchorterminal.com/compare/oneup-vs-repostit.md)
- [OneUp API + MCP vs Typefully](https://www.anchorterminal.com/compare/oneup-vs-typefully.md)
- [OneUp API + MCP vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/oneup-vs-upload-post.md)
- [Pamba vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/pamba-vs-post-bridge.md)
- [Pamba vs Postiz API + MCP](https://www.anchorterminal.com/compare/pamba-vs-postiz.md)
- [Pamba vs Publer API + MCP](https://www.anchorterminal.com/compare/pamba-vs-publer.md)
- [Pamba vs Repostit](https://www.anchorterminal.com/compare/pamba-vs-repostit.md)
- [Pamba vs Typefully](https://www.anchorterminal.com/compare/pamba-vs-typefully.md)
- [Pamba vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/pamba-vs-upload-post.md)
- [OneUp API + MCP vs Sprout Social API](https://www.anchorterminal.com/compare/oneup-vs-sprout-social.md)
- [OneUp API + MCP vs TwitterAPI.io MCP](https://www.anchorterminal.com/compare/oneup-vs-twitterapi-io-mcp.md)
- [OneUp API + MCP vs X MCP](https://www.anchorterminal.com/compare/oneup-vs-x-mcp.md)
- [OneUp API + MCP vs Xpoz MCP](https://www.anchorterminal.com/compare/oneup-vs-xpoz-mcp.md)
- [Pamba vs Sprout Social API](https://www.anchorterminal.com/compare/pamba-vs-sprout-social.md)
- [Pamba vs TwitterAPI.io MCP](https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp.md)
- [Pamba vs X MCP](https://www.anchorterminal.com/compare/pamba-vs-x-mcp.md)
- [Pamba vs Xpoz MCP](https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp.md)
- [OneUp API + MCP vs SocialCannon](https://www.anchorterminal.com/compare/oneup-vs-socialcannon.md)
- [Pamba vs SocialCannon](https://www.anchorterminal.com/compare/pamba-vs-socialcannon.md)

---

Query this catalogue directly over MCP: https://www.anchorterminal.com/mcp (Streamable HTTP, no key). How: https://www.anchorterminal.com/agents/#mcp