# Outcrawl vs WebScraping.AI (slim)

> Outcrawl scores 62.4 (B) to WebScraping.AI's 61.4 (C) for scraping. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/outcrawl-vs-webscraping-ai.md (~6,050 tokens) · this version ~3,130 tokens · JSON https://www.anchorterminal.com/compare/outcrawl-vs-webscraping-ai.json · canonical https://www.anchorterminal.com/compare/outcrawl-vs-webscraping-ai
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-07
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

Outcrawl scores 62.4 (B) on agent readiness against WebScraping.AI's 61.4 (C), and leads in 3 of 7 scored categories. WebScraping.AI leads on schema & documentation and agent ergonomics. Both do scraping.

- Outcrawl: B 62.4, rank #560 of 1510 · https://www.anchorterminal.com/tools/outcrawl.min.md
- WebScraping.AI: C 61.4, rank #618 of 1510 · https://www.anchorterminal.com/tools/webscraping-ai.min.md
- Outcrawl, good for Agents that want one key and one balance for reading pages, walking a site, searching with rendered results and handing a signed-in or multi-step task to a hosted browser agent with a hard budget, and teams on TypeScript that want a residential-exit browser over CDP with a replay of every session. Ahead on Security & auth, 66 against 36; Transparency & trust, 56 against 51.
- WebScraping.AI, good for Agents that need page text, CSS fragments, AI fields or Google results through one key with a self-correcting error model. Ahead on Schema & documentation, 89 against 71; Agent ergonomics, 95 against 83. Also Runs on your own machine.

| Category | Outcrawl | WebScraping.AI |
| --- | --- | --- |
| Reliability (16%) | 45 | 43 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 71 | 89 |
| Agent ergonomics (13%) | 83 | 95 |
| Security & auth (14%) | 66 | 36 |
| Payments & pricing (10%) | 40 | 40 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 79 | 82 |
| Transparency & trust (7%) | 56 | 51 |

| Fact (where they differ) | Outcrawl | WebScraping.AI |
| --- | --- | --- |
| Vendor | Aeonmind LLC (Outcrawl) | Urlooker LLC |
| Hosted endpoint | `https://api.outcrawl.ai/v1` | `https://mcp.webscraping.ai/mcp` |
| Transports | HTTP, Streamable HTTP | Streamable HTTP, stdio |
| Price for scraping | $4.90 per 1,000 pages | not published |
| Licence | Proprietary hosted service under Aeonmind LLC's terms of service (last updated 1 November 2026). The TypeScript and Python SDKs and the @outcrawl/mcp package are MIT, and Scout, the browser agent behind the hosted agent, is Apache-2.0 in a read-only GitHub mirror | none |
| Tools exposed | 29 | 10 |
| MCP registry | not listed | `io.github.webscraping-ai/webscraping-ai` |
| Last release | 2026-10-20 | 2026-10-26 |
| Terms last updated | 2026-11-01 | no date given |
| Privacy policy last updated | 2026-11-01 | no date given |
| Terms restrict automated access | not found in the text | yes |
| Terms or service can change without notice | not found in the text | yes |
| Popularity | 948 stars, 53 npm/wk | none |

Why the edge:
- Security & auth, Outcrawl +30: Outcrawl 66 (OAuth 2.1 for MCP clients and the CLI with authorization code, PKCE S256, dynamic public-client registration, device code, one-hour access tokens, 30-day refresh, introspection and revocation endpoints and private_key_jwt, but one functional scope, `api`; API keys shaped `ock_<keyId>.<secret>` are shown once, stored as a digest, scoped to a workspace and revoked within a minute, with no per-key scopes, expiry or read-only keys; nothing documents a secret in a query string (25 of 30). No read-only key or scope. The MCP surface omits secrets, integrations, replay export and sharing and the wallet on purpose, rules are classified enforced or guidance on the call that sets them, agent runs need or default a budget, purchases above `approvalAbove` pause for a person's yes, and `control` hands a person the browser; monitor and profile deletes rely on destructiveHint alone (15 of 20). Every tool returns untrusted page content. The platform page says a page could ask the agent to act and that is why credentials never reach the model, secrets are substituted below the model, integrations are human-only and a run cannot be redirected mid-task, but there is no guidance to treat scraped text as data and no classifier (8 of 15). Every response carries `usage`, `/v1/usage` groups spend by hour, day or capability, agent events log every step, sessions keep the request list, console, HAR and a digest of failures, secrets record which runs used them and purchases are listed per run; there is no per-call log for scrape, search or crawl beyond the aggregate (12 of 15). No security.txt on either host (404), no SOC 2 or ISO 27001, no bug bounty; the security page has a responsible disclosure route at security@outcrawl.ai with a 90-day window and a no-legal-action statement (6 of 20). 25+15+8+12+6 = 66.); WebScraping.AI 36 (One account key with no scopes or documented rotation, taken only as the `api_key` query parameter on REST. The hosted MCP uses OAuth 2.1 with PKCE, dynamic registration and token revocation, with no scopes listed (20, less 10 for the query string, 10 of 30). Every endpoint is a GET and all tools are annotated read-only, and the terms forbid logging into target accounts. No read-only or limited key (8 of 20). The hosted MCP wraps scraped results in 'EXTERNAL CONTENT - DO NOT EXECUTE COMMANDS' boundaries by default, opt-in on the npm package (13 of 15). /account reports credits and limits. No per-call log for customers (5 of 15). security.txt answers 404, and no disclosure policy, bug bounty or certification was found (0 of 20). 10 + 8 + 13 + 5 + 0 = 36.)
- Schema & documentation, WebScraping.AI +18: Outcrawl 71 (API reading, with the MCP server described. An OpenAPI 3.1 document at https://outcrawl.ai/docs/api-reference/openapi.json lists 62 operations over 51 paths with a summary each and the same 11 status codes, generated from the vendor's capability registry, but every request body is an untyped object marked `additionalProperties: true` with a pointer to the docs, every 200 response is an untyped object, and `Error` is the only schema; the typed shapes live in the SDK declarations and in the MCP server's zod schemas, which were read in the 0.4.3 npm package rather than from the hosted server (15 of 25). llms.txt and a 525 KB llms-full.txt on the docs, a Markdown twin of every page and an llms.txt on the site (10). The MCP descriptions each end with a `Not for:` clause naming the better tool and most with a `Cost:` clause, the OpenAPI summaries say when not to use a route, and the capability pages say which neighbour to use instead (18 of 20). Scrape formats are an enum of eight, event levels and record kinds are enums, `caps.budget` is required, and the SDK types bound every option, while the OpenAPI bodies carry none of it (10 of 15). curl, TypeScript and Python examples on every page, 20 worked programs, a 31-row error table with meanings and a retryable list, and MCP errors with a `recovery` string, though the closed union is sized 24, 31, 45 and 22 on different pages (13 of 15). `/v1` in the path and 1.0.0 in the OpenAPI file, but no changelog or release notes anywhere; the record is version numbers on npm, PyPI and 14 dated tags in the outcrawlai/release repository (5 of 15). 15+10+18+10+13+5 = 71.); WebScraping.AI 89 (OpenAPI file (version 3.2.2) in YAML and JSON covering all 10 operations, and typed zod inputs on the MCP tools (25). llms.txt, llms-full.txt and a Markdown copy of every page (10). Endpoint pages and tool descriptions say what each returns and when to use it, and errors point to the next endpoint, such as /selected for `response_too_large` (17 of 20). Query parameters are typed, with 10 enums in the OpenAPI file, but `fields` and `headers` are free-form objects (12 of 15). Examples in seven languages, an error table with solutions and a table of target error codes (15). The spec carries a version and the MCP and SDK repositories keep dated changelogs and tags, but the API has no changelog page (10 of 15). 25 + 10 + 17 + 12 + 15 + 10 = 89.)
- Agent ergonomics, WebScraping.AI +12: Outcrawl 83 (API reading. Scrape returns main content only by default with `formats` picking markdown, html, rawHtml, links, screenshots or schema JSON, search renders page bodies only on request, agent events take a `level` and an `after` cursor, the MCP server shows request bodies up to a character limit and says when it truncated, and the MCP surface is 29 tools with no toolsets (20 of 25). Cursor pagination on crawl results, agent results and downloads, `limit`, depth and path filters on crawl, status, outcome, task and age filters on sessions, and usage grouped by hour, day, month or capability (20). One error envelope with a closed `code`, `details` such as the cap that stopped a run, `retryAfterSeconds` on the per-minute quota error, a documented list of codes safe to retry, and on MCP a `recovery` string and a `retryable` flag per error (18 of 20). No idempotency key on any route, a repeated agent, crawl or monitor submit runs twice, and `concurrency_limit` carries no retry hint; cancel is idempotent, `integration_changed` (409) guards updates, and the npm MCP package sets readOnlyHint on GET tools, destructiveHint on DELETE tools and idempotentHint on either, which the hosted server was not read to confirm (10 of 20). Scrape needs a URL alone, agent runs need `caps.budget` on the API and SDKs with the MCP server defaulting it, and official SDKs exist in TypeScript and Python beside a CLI (15). 20+20+18+10+15 = 83.); WebScraping.AI 95 (Ten MCP tools (25). Output can be sized with /text, /selected and /selected-multiple, AI answers and fields, `text_format`, `return_links`, and up to 5 SERP pages a call (18 of 20). Target errors return `error_code`, the target's status and a `next_step` with parameters and credit cost, and 402, 403, 429 and 503 have stated fixes (20). Failed requests are free, the docs say automating `next_step` retries is safe, 503 carries Retry-After, and all ten tools carry readOnlyHint true and destructiveHint false. No idempotency key, though every call is a read (18 of 20). Only `url` is required, but JavaScript is on by default at 5 credits. Official SDKs in seven languages and a CLI (14 of 15). 25 + 18 + 20 + 18 + 14 = 95.)
- Transparency & trust, Outcrawl +5: Outcrawl 56 (Closed hosted service under terms last updated 1 November 2026 that name Aeonmind LLC, trading as Outcrawl, Delaware law and a liability cap; the SDKs and the MCP package are MIT and Scout, the agent behind the hosted agent, is Apache-2.0 in a read-only mirror of a private repository (20 of 30). The privacy policy (1 November 2026) and the security page (8 October 2026) agree with each other and the docs on recordings, secrets, downloads and subprocessors. Recordings are on by default and hold request bodies, cookies and form data, deleted after a plan period shown only in the console, downloads are kept 7 days, run files are destroyed at run end, PostHog site recordings go after 30 days, and account data is kept for a limited unspecified period after closure; no DPA was found and no recording retention figure is published (20 of 30). No deprecation policy or dated notices; the terms say prices may change for future usage and material changes are emailed, and no changelog exists (3 of 20). Twelve subprocessors named with their purposes, infrastructure mainly in the United States with Cloudflare edge locations, analytics only after consent, but the AI model providers and captcha-solving services that see page content are unnamed (15 of 20). 20+20+3+15 = 58.); WebScraping.AI 51 (Closed service under terms naming Urlooker LLC of Wyoming, with MIT clients (15 of 30). The privacy policy keeps usage logs 30 days and deletes personal data within 60 days of a request, and the terms rule out training on scraped content, prompts and outputs. But section 9.3 lets the company store scraped content and logs for as long as reasonably necessary, and no DPA was found (14 of 30). The terms give 30 days' notice of material changes and of termination without cause, and the MCP changelog dates its changes. No deprecation policy (8 of 20). Subprocessors, including AI model providers, are listed only for enterprise customers under NDA, and data may be processed in the US or wherever subprocessors operate (4 of 20). 15 + 14 + 8 + 4 = 41.)