OpenAI Image API vs SurgePix API

OpenAI Image API 90

Closed models, clear Services Agreement that assigns output to the customer (15). The data controls page, re-read on 1 November, gives both image endpoints no training, 30-day abuse logs and no application state, and Zero Data Retention for the GPT Image models it names (gpt-image-2.5-sunburst, gpt-image-2.5-flare, gpt-image-2, gpt-image-1.5 and gpt-image-1-mini). Image inputs flagged by the CSAM scan are kept for review even under Zero Data Retention, and the guide says so. The DPA, effective 1 January 2026, commits to return or deletion of customer data on termination, 30 days to object to a new subprocessor, and SCCs with the UK Addendum, and nothing in it conflicts with the guide, per the OpenAI API listing's 4 October check, not re-read on 1 November (openai.com answered 403). The same reading as the OpenAI API listing (30 of 30, was 28 with no reason given). Deprecation policy with notice periods by model class and a dated table (20). The subprocessor list, updated 9 July 2026, names third-party subprocessors and OpenAI affiliates with processing countries for each and a form for notice of new ones, per the OpenAI API listing's 4 October check, not re-read on 1 November (openai.com answered 403), and the data-controls guide lists the image endpoints in every residency region for storage and the United States and Europe for processing (20). 15 + 30 + 20 + 20 = 85.

SurgePix API 28

The editorial half. A closed service whose terms name no company or address. They restrict any commercial use of what the service produces without SurgePix's permission, and contain clauses from an unrelated product (a "big data" query platform and "non-resume content"). The skills are MIT. Unclear terms, with a little credit for the open skills (5). The privacy policy is dated both 10 June 2026 and 1 July 2022, describes WeChat and phone registration and "domestic servers", and gives no retention periods. The API reference says uploads go to Tencent Cloud storage in Seoul as public URLs. No DPA. The statements don't agree (5). No deprecation policy or notices, and the terms let changes take effect on publication without notice (0). Tencent Cloud Object Storage in ap-seoul is named in the API reference, and Alipay and WeChat Pay in the privacy policy. No subprocessor list or stated data location (4). 5+5+0+4 = 14.

OpenAI Image API 65

Public status page at status.openai.com with incidents filed per component (20). The feed and incident pages, read on 1 November, list the Images component in two API-wide error incidents in the 90 days from 3 August, elevated error rates across API models on 17 September (impact window 20:20 to 21:20 UTC on the incident page, updates to 21:50, 11 API components) and elevated errors across ChatGPT, Codex and the API on 29 September (17:52 to 23:14 UTC on the incident page, about 5 hours 20 minutes, 30 components). Each is an hour or more of wide errors, so two majors. The 1 October check counted only image-specific incidents and scored minor only. Two majors sit between the checklist's one major (10) and several (0), so 5, as the OpenAI Moderation listing reads the same two incidents and as deepseek-api, black-forest-labs, telnyx-voice and fireworks-inference are read (5). Image-specific incidents in the window are all partial or short, so minor. Image generation errors on 8 September (Images degraded 14:32 to 21:59 UTC, the page says some requests may fail), gpt-image-2.5-flare errors for 40 minutes on 16 September, limited availability of the two GPT Image 2.5 models for 40 minutes on 14 October, file download errors that listed Images for 42 minutes on 19 October, and errors on some GPT Image 2 edit requests on 30 October (14:35 to 18:36 UTC), with the 21 October API-wide degradation (22 minutes) also listing Images. Image limits published per tier on the model page, 20 images a minute on Build, 150 on Launch and 250 on Grow for GPT Image 2.5 Flare (15). 429 handling documented with Retry-After, x-ratelimit headers, backoff and a gradual ramp, re-read on 1 November (15). The 99.9 per cent Scale Tier SLA doesn't cover image models, per the 1 October check, not re-read on 1 November (0). GA (10). 20+5+15+15+0+10 = 65.

SurgePix API 15

Read with the hosted lines. No status page was found on surgepix.ai or in the docs, and status.surgepix.ai doesn't resolve (0). With no history to read, the incident line takes the floor (5). No rate limits with numbers are documented. The terms say "non-human continuous or frequent query operations" lead to automatic account suspension, with no threshold given (0). No 429 or backoff guidance. The skill scripts poll every 2 seconds for up to 5 to 15 minutes, but that is client code, not a documented policy (0). No SLA, and the terms disclaim uninterrupted service (0). The API isn't labelled beta or preview, and API keys have been self-serve since 2 June 2026 per the changelog (10). 0+5+0+0+0+10 = 15.

OpenAI Image API 90

OpenAPI spec published in openai/openai-openapi (25). llms.txt at developers.openai.com (10). The guide says when to use Sunburst (precise edits) and when Flare (fast everyday generation), and when to use the Image API versus the Responses tool (15). Typed parameters with enums for size, quality, output_format, background and moderation, though several default to auto (13). Examples in every language and named error types such as moderation_blocked and image_generation_user_error, but no full error catalogue for images (12). Dated snapshots and a public changelog (15).

SurgePix API 40

No OpenAPI or other machine-readable contract was found (0). surgepix.ai/llms.txt returns 404. The docs are HTML pages, but the 15 SKILL.md files in the MIT repository are Markdown written for agents, so half (5). The API reference states the purpose of each of its five operations and the async and session model. The SKILL.md files add trigger phrases and explicit do-not-use routing between skills, but 11 of the task endpoints the skills call appear only in their scripts, with no reference (10). Parameter tables give type and required for the documented operations, with no enums or limits, and the undocumented endpoints have no schema at all (7). JSON examples for every documented operation and an error table with 401, 404 and error.file.sensitive_content (10). A dated public changelog from 11 March 2026, but no version in the API path and no API-specific change notes (8). 0+5+10+7+10+8 = 40.

OpenAI Image API 85

Project API keys with restricted per-endpoint permissions, service-account keys and revocation (30). Read-only key permissions, per-project model allow-lists and spend limits. No destructive actions on the image endpoints (15). Returns generated images only, no third-party content (10). Audit Logs API records key and project events, and usage is broken down per project and key, but there's no per-request log (10). A signed security.txt with no Expires field per the OpenAI API listing's 27 October read, a public bug bounty, SOC 2 Type 2 and a trust portal, per the 1 October check, not re-read on 1 November (20).

SurgePix API 41

Plain API keys created in the account settings, which the docs say can be revoked and reset. The key goes in the authorization header, never in a URL. No scopes found (20). No read-only key or spend cap. The plan's credit allowance bounds spend. Every uploaded file becomes a publicly accessible URL on Tencent Cloud storage, which counts against least privilege (3). The API returns image and file URLs, not untrusted text (10). The billing page's credit statement lists each request with its model and token counts, and sessions group calls in the web app, per the docs (8). No security.txt, disclosure policy, bug bounty or certification was found (0). 20+3+10+8+0 = 41.

OpenAI Image API 72

Output size is controlled with size, quality, output_format, output_compression and n, but images come back as base64 only, so a raw response is large (18). Output-size controls, nothing to paginate (15). Error types an agent can branch on, with moderation separated from server faults (16). No idempotency key on image endpoints, so a retried generation that had succeeded is billed again. Backoff guidance is in the rate-limit guide (8). Only model and prompt required, official Python and TypeScript SDKs among others (15).

SurgePix API 53

Every task returns one download URL, or one ZIP for an image set, and status responses are a few fields, so little enters context (18). Nothing to paginate. noWait chooses sync or async, and the skills pass size, aspect ratio, count and language, but none of these are in the public reference (10). Errors come back as a JSON code and msg, with 401 and 404 documented and an NSFW error on upload, but a failure can arrive as HTTP 200 with a non-zero code and failed task states carry no documented reason (12). Upload deduplicates by MD5 and returns the existing URL. Tasks have no idempotency key, and a retried task is a new task that spends credits again (5). Few required parameters (fileUrl for background removal). No official SDK, only the Node scripts inside the skills (8). 18+10+12+5+8 = 53.

OpenAI Image API 79

The last image release in the changelog is GPT Image 2.5 Sunburst and Flare on 8 September 2026 (snapshots dated 2026-09-08 on the model pages), and the deprecations page records gpt-image-1 shut down on 23 October 2026, a dated change to the image models 9 days before 1 November, read as stepfun-api and leonardo-ai read a model removal, re-read on 1 November (30). Model churn in place of release counts. Notice for GA image models meets OpenAI's six-month policy (gpt-image-1 announced 22 April and removed on 23 October, three more announced 2 June for 1 December), but six image models leave the API within seven months (12). Public changelog, developer forum and support (12). Current official SDKs, openai 3.42.0 on PyPI and 7.47.0 on npm per the OpenAI API listing's check of 1 November (15). SDK packages current with CI (10). 30+12+12+15+10 = 79.

SurgePix API 66

The last dated change is GPT-Image-2.5 on 23 October 2026, 10 days before the check (30). Changelog entries on 15, 22 and 23 October, 16, 9 and 2 September 2026, more than three in 90 days (20). For a closed service, a dated changelog, a Discord server and a contact email. We didn't open Discord or the GitHub issues, so answering isn't confirmed (8). No official SDK. The skills are maintained client scripts with tags from v1.0.0 (4 June 2026) to v1.5.0 (2 September 2026), a judgement call (5). The repository's CI checks SKILL.md front matter only, with no tests, and the skills aren't published as a package (3). 30+20+8+5+3 = 66.