{ "data": { "a": { "slug": "pamba", "name": "Pamba", "vendor": "Pamba", "vendorUrl": "https://pamba.app", "kind": "http-api", "category": "social-media", "summary": "Pamba makes AI avatar short-form videos and posts them to TikTok, Instagram and Facebook, through an app, a REST API and a remote MCP server. It also sells accounts it runs on its own iPhones, which those platforms forbid.", "url": "https://www.anchorterminal.com/tools/pamba", "markdownUrl": "https://www.anchorterminal.com/tools/pamba.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/pamba.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/pamba.json", "dns": "pamba.grade.anchorterminal.com", "license": "Closed service. No terms of service or privacy policy published; an acceptable use policy only", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.pamba.app/mcp", "packages": [], "auth": "oauth", "authNotes": "OAuth 2.1 with PKCE and dynamic client registration on api.pamba.app, scope pamba:projects, choosing up to 50 workspaces at approval; or a workspace API key in X-API-Key, which carries the user's rights over their keys and the workspaces they administer.", "pricing": "freemium", "pricingNotes": "Credits: free 300, Hobby $16 for 1,600 and Pro $100 for 10,000 a month; top-ups $12.50 per 1,000. Managed TikTok or Instagram accounts $100 a month each. Fully managed from $7,500 a month. Per-model credit rates at GET /usage/pricing without auth. Read 11 November 2026.", "priceSummary": "$0.0125 / credit", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in Pamba's pricing, API or MCP pages, 11 November 2026. Billing is through Stripe.", "endpoints": [] }, "toolCount": 407, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-11" }, "docsUrl": "https://pamba.app/help/mcp-server", "llmsTxt": "https://pamba.app/llms.txt", "capabilities": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload", "video.generate" ], "tags": [ "hosted", "mcp", "oauth", "llms-txt", "closed-source", "freemium", "usage-priced", "tiktok", "instagram", "no-status-page", "platform-rules" ], "lastRelease": "2026-11-11", "graded": true, "anchor": { "graded": true, "score": 41.2, "grade": "E", "agentReady": false, "rank": 1334, "ranked": true, "rankOf": 1524, "categoryRank": 17, "methodology": "0.8", "run": "2026-10-01", "scores": { "ergonomics": 75, "maintenance": 70, "payments": 53, "reliability": 45, "schema": 84, "security": 35, "transparency": 28 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-11" }, "negative": -15, "warnings": [ { "kind": "platform-rules", "name": "Breaks the rules of the platforms it acts on", "text": "Pamba sells TikTok and Instagram accounts it creates on its own iPhones and warms so each 'reads as a real person', pitches running 'hundreds of accounts' and replaces banned ones. TikTok's guidelines and Instagram's terms forbid that.", "deduct": -15, "since": "2026-11-11", "sources": [ "https://pamba.app/accounts", "https://pamba.app/help/account-warming", "https://www.tiktok.com/community-guidelines/en/integrity-authenticity/", "https://help.instagram.com/581066165581870" ] } ], "verdict": "Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published.", "bestFor": "Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.", "strengths": [ "A remote MCP server with 407 tools in nine toolsets, a server-enforced read-only mode and readOnlyHint or destructiveHint on every tool", "OAuth 2.1 with PKCE and dynamic client registration, with protected-resource metadata on its own domain", "A tool reference generated from the server, and a dated API changelog that flags breaking changes", "Prices public without a login, including per-model credit rates from an unauthenticated route", "Publishes its own poor results: 42% of 6,678 videos it measured never reached 1,000 views" ], "weaknesses": [ "Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned", "No terms of service and no privacy policy (both 404), and no legal entity named", "Managed seats hold account logins, recovery emails and 2-step codes with no published data policy", "One OAuth scope covers everything, and an API key can manage the user's keys and delete workspaces", "No status page and no security contact" ], "agentNotes": [ "Tell your boss before using the accounts toolset: the managed accounts break TikTok's and Instagram's rules and can be banned", "Connect with ?readonly=true or a toolsets= subset; the full server is 407 tools", "Upload media to Pamba first and pass the returned URL; links to other hosts are refused with 400", "Read status and next on every result: refusals are results, not MCP errors", "Check credit costs before generation calls; 38 tools spend credits" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.8", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 41.2 } ], "editorialScores": { "ergonomics": 75, "maintenance": 70, "payments": 53, "reliability": 45, "schema": 84, "security": 35, "transparency": 18 }, "provenanceScore": 37, "checked": { "categories": { "ergonomics": "2026-11-11", "maintenance": "2026-11-11", "payments": "2026-11-11", "reliability": "2026-11-11", "schema": "2026-11-11", "security": "2026-11-11", "transparency": "2026-11-11" }, "last": "2026-11-11", "lastMoved": "2026-11-13", "oldest": "2026-11-11", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://api.pamba.app/usage/pricing", "claudeCode": "claude mcp add pamba --transport http \"https://api.pamba.app/mcp?readonly=true\"", "config": { "mcpServers": { "pamba": { "url": "https://api.pamba.app/mcp?readonly=true" } } } }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/pamba" }, "area": "communication", "unitPrices": [ { "item": "Managed TikTok or Instagram account", "unit": "account-month", "usd": 100, "note": "Per account; no credits needed" }, { "item": "Credits top-up", "unit": "credit", "usd": 0.0125, "note": "$12.50 per 1,000; plans work out at $10 per 1,000" } ], "provenance": { "legalEntity": "", "domain": "pamba.app", "domainRegistered": "2025-06-05", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://pamba.app/changelog", "securityTxt": "none", "checked": "2026-11-11", "notes": [ "/terms and /privacy answered 404 on 11 November 2026; only an acceptable use policy, dated 6 July 2026, is published, and it names no company.", "RDAP gives pamba.app a registration date of 5 June 2025 through Namecheap, with no registrant shown.", "robots.txt on pamba.app allows ClaudeBot on public pages and disallows app paths; api.pamba.app has no robots.txt (404).", "No entry in the official MCP registry for 'pamba' on 11 November 2026." ], "score": 37 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/pamba.json", "live": { "slug": "pamba", "probe": { "target": "https://api.pamba.app/mcp", "method": "get", "lastAt": "2026-11-13T23:58:54.025134635Z", "lastOk": true, "lastStatus": 401, "lastMs": 248, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 299, "p95ms24h": 391, "samples24h": 239, "samples30d": 319, "days": [ { "date": "2026-11-12", "probes": 81, "ok": 81 }, { "date": "2026-11-13", "probes": 238, "ok": 238 } ], "since": "2026-11-12T16:06:25.231802453Z" }, "securityTxt": { "url": "https://pamba.app/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-13T16:15:01.559101993Z" }, "llmsTxt": { "url": "https://pamba.app/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-13T15:55:36.94769184Z" }, "pages": [ { "url": "https://pamba.app/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-13T18:26:24.542486652Z", "changedAt": "2026-11-13T18:26:24.542486652Z", "fingerprint": "a0b9ef3713fa" } ], "mcpTools": { "url": "https://api.pamba.app/mcp?readonly=true", "checkedAt": "2026-11-13T03:13:09.042103119Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-13T03:13:09.042103119Z" }, "updatedAt": "2026-11-13T23:58:54.025134635Z" }, "streak": { "days": 2, "from": "2026-11-12", "sinceWatching": true, "best": 2 } }, "answer": "Post Bridge API + MCP scores 44.1 (E) on agent readiness against Pamba's 41.2 (E), and leads in 2 of 7 scored categories. Pamba leads on schema \u0026 documentation, agent ergonomics, payments \u0026 pricing and maintenance \u0026 community.", "b": { "slug": "post-bridge", "name": "Post Bridge API + MCP", "vendor": "Post Bridge", "vendorUrl": "https://www.post-bridge.com", "kind": "http-api", "category": "social-media", "summary": "Publishing-only scheduler with a REST API, a hosted MCP server and a CLI.", "url": "https://www.anchorterminal.com/tools/post-bridge", "markdownUrl": "https://www.anchorterminal.com/tools/post-bridge.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/post-bridge.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/post-bridge.json", "dns": "post-bridge.grade.anchorterminal.com", "repo": "https://github.com/post-bridge-hq/agent-mode", "license": "MIT", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.post-bridge.com/v1", "packages": [ { "registry": "npm", "name": "postbridge-cli" } ], "auth": "mixed", "authNotes": "REST API takes a pb_live_ API key as a Bearer header. The hosted MCP does OAuth 2.0 with PKCE, automatic client registration and six scopes (posts:read, posts:write, analytics:read, accounts:read, media:read, media:write), and also accepts the API key as a Bearer header or as a ?key= URL parameter for clients without header support.", "pricing": "paid", "pricingNotes": "7-day trial (the checkout reads $0.00 due today, with no statement on cards). Marketer $39 a month for 15 connected accounts. Operator $99 a month for 99 accounts, then $1 per account a month. Unlimited posts for paying users, and API, CLI and MCP on both plans. Yearly billing gives 2 months free. A Links in X posts add-on costs $10 a month for 40 link posts, per the MCP docs. The pricing FAQ says free users get 5 posts a month, but no free plan appears in the plan table (https://www.post-bridge.com/pricing).", "priceSummary": "$39 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402 or per-call payment in the API reference, llms.txt or pricing (checked 2026-09-30).", "endpoints": [] }, "toolCount": 16, "popularity": { "githubStars": 17, "npmWeekly": 51, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://api.post-bridge.com/reference", "llmsTxt": "https://www.post-bridge.com/llms.txt", "openapi": "https://api.post-bridge.com/openapi.json", "registryName": "io.github.jackfriks/post-bridge", "capabilities": [ "social.post", "social.schedule", "social.analytics", "social.media-upload" ], "tags": [ "hosted", "mcp", "openapi", "llms-txt", "closed-source", "typescript" ], "lastRelease": "2026-09-09", "graded": true, "anchor": { "graded": true, "score": 44.1, "grade": "E", "agentReady": false, "rank": 1283, "ranked": true, "rankOf": 1524, "categoryRank": 14, "methodology": "0.8", "run": "2026-10-01", "scores": { "ergonomics": 60, "maintenance": 31, "payments": 23, "reliability": 42, "schema": 72, "security": 44, "transparency": 45 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-04" }, "negative": -3, "negativeNotes": [ "2026-08-28. Commit 081c80c in post-bridge-hq/agent-mode, which bumps postbridge-cli (the listing's package) to 1.1.1, fixes `saveApiKey` writing the live API key to a world-readable config file (0644 file in a 0755 directory) on shared machines and CI runners, a flaw the commit describes. No advisory was published (osv.dev lists nothing for postbridge-cli on 4 November 2026), so a fix of the listing's own described flaw without an advisory (-3). https://github.com/post-bridge-hq/agent-mode/commit/081c80cefb4e1e65b28b0df2c6cc6b268e5897bd" ], "verdict": "Post Bridge publishes and schedules posts to ten networks through a REST API with a published OpenAPI document and a hosted MCP server with OAuth scopes, for a flat $39 a month. It has no inbox or comment tools and no readable status page, and the MCP also accepts the API key in the URL.", "bestFor": "Solo builders and small teams who want an agent to schedule and publish to 10 networks through OAuth for a flat price.", "strengths": [ "Hosted MCP with OAuth 2.0, PKCE, automatic client registration and six scopes, including read-only ones", "OpenAPI 3.0 document on the API reference page, llms.txt and llms-full.txt", "16 MCP tools, each documented with a description and its key parameters", "Flat $39 a month for 15 accounts with unlimited posts, API and MCP", "The reference says to retry 429s with backoff, and the skill says to check results before republishing" ], "weaknesses": [ "Publishing only, with no comments, DMs or inbox, and analytics for TikTok, YouTube, Instagram and Facebook only", "Terms and privacy policy name no legal entity, only Post Bridge under Canadian law", "No readable status page, no changelog and no security.txt", "No idempotency key, and the MCP also accepts the API key as a ?key= URL parameter", "postbridge-cli fixed a world-readable API key file in 1.1.1 with no advisory, and later CLI versions are untagged" ], "agentNotes": [ "Call list_social_accounts first, upload media, then create_post. Omit scheduled_at to publish at once", "Check list_post_results before republishing a failed post, since platform 500s often publish anyway", "Set is_draft true when a person should approve the post", "Put links for X in a reply unless the account has the Links in X posts add-on", "Stay under 10 requests a second per key, and trigger sync_analytics no more than once every 30 minutes per account" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.8", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 44.1 } ], "editorialScores": { "ergonomics": 60, "maintenance": 31, "payments": 23, "reliability": 42, "schema": 72, "security": 44, "transparency": 45 }, "provenanceScore": 44, "checked": { "categories": { "ergonomics": "2026-11-04", "maintenance": "2026-11-04", "payments": "2026-11-04", "reliability": "2026-11-04", "schema": "2026-11-04", "security": "2026-11-04", "transparency": "2026-11-04" }, "last": "2026-11-04", "lastMoved": "2026-11-13", "oldest": "2026-11-04", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://api.post-bridge.com/v1/social-accounts -H \"Authorization: Bearer $POST_BRIDGE_API_KEY\"", "claudeCode": "claude mcp add --transport http post-bridge https://www.post-bridge.com/api/mcp/mcp", "config": { "mcpServers": { "post-bridge": { "type": "http", "url": "https://www.post-bridge.com/api/mcp/mcp" } } } }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/post-bridge" }, "area": "communication", "unitPrices": [ { "item": "Marketer", "unit": "month", "usd": 39, "note": "15 connected accounts, unlimited posts" }, { "item": "Operator", "unit": "month", "usd": 99, "note": "99 accounts, then $1 per account a month" } ], "provenance": { "legalEntity": "", "domain": "post-bridge.com", "domainRegistered": "2024-09-08", "endpointOnVendorDomain": true, "terms": "https://www.post-bridge.com/tos", "privacy": "https://www.post-bridge.com/privacy-policy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-11-04", "notes": [ "The terms refer only to Post Bridge with no company type or registration, and set the laws of Canada as governing law. Their Last Updated line read 2026-11-04 on 4 November 2026, as it read the check date on 1 October.", "The privacy policy is dated 5 October 2026.", "status.post-bridge.com answers a robots.txt request with a redirect to a sign-in page, so it isn't read as a status page.", "www.post-bridge.com/.well-known/security.txt returns 404." ], "score": 44 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/post-bridge.json", "live": { "slug": "post-bridge", "probe": { "target": "https://api.post-bridge.com/v1", "method": "get", "lastAt": "2026-11-13T23:58:56.099776804Z", "lastOk": true, "lastStatus": 404, "lastMs": 157, "authRequired": false, "uptime24h": 100, "uptime30d": 99.97, "p50ms24h": 172, "p95ms24h": 279, "samples24h": 239, "samples30d": 7892, "days": [ { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 250, "ok": 250 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 249 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 243, "ok": 243 }, { "date": "2026-11-08", "probes": 243, "ok": 243 }, { "date": "2026-11-09", "probes": 243, "ok": 243 }, { "date": "2026-11-10", "probes": 244, "ok": 244 }, { "date": "2026-11-11", "probes": 244, "ok": 243 }, { "date": "2026-11-12", "probes": 245, "ok": 245 }, { "date": "2026-11-13", "probes": 238, "ok": 238 } ], "since": "2026-10-08T00:00:00Z" }, "versions": [ { "registry": "mcp-registry", "name": "io.github.jackfriks/post-bridge", "version": "1.1.3", "seenAt": "2026-11-13T20:30:05.021626978Z" }, { "registry": "npm", "name": "postbridge-cli", "version": "1.1.9", "seenAt": "2026-11-13T09:06:48.508432053Z" } ], "githubStars": 17, "npmWeekly": 277, "securityTxt": { "url": "https://post-bridge.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-13T16:15:58.898058561Z" }, "llmsTxt": { "url": "https://www.post-bridge.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-13T15:55:42.133560804Z" }, "domain": { "domain": "post-bridge.com", "registered": "2024-09-08", "source": "https://rdap.verisign.com/com/v1/domain/post-bridge.com", "checkedAt": "2026-11-08T15:06:32.42396475Z" }, "pages": [ { "url": "https://www.post-bridge.com/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-13T18:43:43.795077472Z", "changedAt": "2026-10-14T21:16:07.215966236Z", "fingerprint": "9100099a1bcf" }, { "url": "https://www.post-bridge.com/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-13T18:43:45.888336794Z", "changedAt": "2026-10-06T16:16:28.770271298Z", "fingerprint": "470b5ca99a47" }, { "url": "https://www.post-bridge.com/tos", "kind": "terms", "status": 200, "checkedAt": "2026-11-13T18:43:48.023562748Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "fd519f1682ff" } ], "mcpTools": { "url": "https://www.post-bridge.com/api/mcp/mcp", "checkedAt": "2026-11-13T03:13:20.122206317Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:46:53.485200288Z" }, "github": { "repo": "post-bridge-hq/agent-mode", "checkedAt": "2026-11-09T10:53:23.99295849Z", "stars": 17, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-05T12:25:46Z", "openIssues": 0, "openPRs": 2, "issuesOpened90d": 0, "issuesClosed90d": 0, "prsMerged90d": 0 }, "updatedAt": "2026-11-13T23:58:56.099776804Z" }, "streak": { "days": 37, "from": "2026-10-08", "sinceWatching": true, "best": 37 } }, "edges": [ { "by": 39, "category": "maintenance", "leads": "pamba", "name": "Maintenance \u0026 community", "reasons": { "a": "Closed service. The changelog has entries on 9, 10 and 11 November 2026 (30). Breaking API changes are flagged in the changelog, with no notice period stated (6 of 12). Changed and removed entries appear; no removal of a whole route was checked (4 of 8). Dated changelog with an Atom feed (15). Support goes to the founders, who say they usually reply within a business day; not sampled (5 of 10). No SDK; MCP and REST only (5 of 15). Runtimes not applicable; nothing to install (5 of 10). 30 + 6 + 4 + 15 + 5 + 5 + 5 = 70.", "b": "Recency from postbridge-cli 1.1.4, published to npm on 9 September 2026 per the 1 October reading of the npm registry (not re-read), 56 days before this check (20; 30 on 1 October). The repository bumps the CLI to 1.1.5 (4 October), 1.1.6 (19 October), 1.1.7 (25 October) and 1.1.8 (31 October) in commits with no tag and no changelog entry, which this run doesn't count as releases, so fewer than three confirmed releases or dated changelog entries fall in the 90 days from 6 August (0; 20 on 1 October, which also counted the MCP registry's versions). llms.txt says support is answered by the founder within a few hours. The repository has never had a pull request and there's no public changelog (8). The 1 October registry line rested on the official MCP registry's JSON API, which this run doesn't use, and the vendor publishes no official SDK (0; 15 on 1 October). The CLI has no dependencies and the repository runs no CI (3). 20 + 0 + 8 + 0 + 3 = 31." }, "scores": { "a": 70, "b": 31 } }, { "by": 30, "category": "payments", "leads": "pamba", "name": "Payments \u0026 pricing", "reasons": { "a": "No x402, MPP or L402 (0). Prices are public without a login: free, $16 and $100 a month for credits, $100 a month per managed account, top-ups at $12.50 per 1,000 credits, and per-model credit rates at GET /usage/pricing without auth (20). A free plan of 300 credits; whether it needs a card isn't stated (15 of 20). A person signs up in a browser before a key or an OAuth approval (0). 0 + 20 + 15 + 0 = 35. Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 35 is 53.", "b": "No x402 or other machine payment (0). Plan prices are public with $1 a month per account above 99, and no per-call price (10). The pricing FAQ, re-read on 4 November, still says free users get 5 posts a month, but the plan table shows only paid plans and doesn't say free users get the API. The 7-day trial reads $0.00 due today with no statement on cards, so part credit (5). A person signs up in a browser, or approves OAuth in a client (0). 0 + 10 + 5 + 0 = 15. Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 15 is 23." }, "scores": { "a": 53, "b": 23 } }, { "by": 17, "category": "transparency", "leads": "post-bridge", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed service with no terms of service: /terms answered 404, and only an acceptable use policy (dated 6 July 2026) is published, with no legal entity named anywhere read (5 of 30). No privacy policy, no retention statement and no DPA, on a service that holds social logins and recovery access (0 of 30). The changelog dates deprecations and removals; no policy (10 of 20). The team says it's in San Francisco and posts from iPhones with US SIM cards; where data is processed and who processes it isn't stated (3 of 20). 5 + 0 + 10 + 3 = 18. It does publish its own results, including that 42% of 6,678 videos it measured never reached 1,000 views.", "b": "The CLI, skills and plugin are MIT. The hosted service runs under terms that name only Post Bridge with Canadian governing law, no company type or registration, and a 24-hour refund window that the pricing FAQ gives as 7 days. The terms' Last Updated line showed the day of each check, 1 October and 4 November 2026 (10). The privacy policy, updated 5 October 2026, sets retention per data type, deletes personal data within 30 days of account deletion and names Supabase, Cloudflare, Stripe, Trigger.dev, Mailgun, Unkey and Vercel, with no DPA and no data locations (20). No deprecation policy. The terms promise email notice of changes (3). Subprocessors named, locations not (12). 10 + 20 + 3 + 12 = 45." }, "scores": { "a": 28, "b": 45 } }, { "by": 15, "category": "ergonomics", "leads": "pamba", "name": "Agent ergonomics", "reasons": { "a": "Read on the MCP server. 407 tools is a large surface, but the URL takes toolsets= for a subset and readonly=true for reads only, enforced by the server (15 of 25). Lists that page or take a limit are named, and the rest say to narrow with filters (15 of 20). Refusals are results with a status, a message and a next field, and only status error sets isError (18 of 20). Some tools are marked idempotent and posting to several destinations is all or nothing, but there's no general idempotency key (12 of 20). Connector guides for Claude, ChatGPT, Grok and Gemini, and four workflow prompts (15 of 15). 15 + 15 + 18 + 12 + 15 = 75.", "b": "16 compact MCP tools with no toolsets (15). Offset and limit with a next URL, and posts filter by platform and status (20). Errors are plain strings with no codes, though list_post_results gives per-platform outcomes and the skill maps common failure causes (12). No idempotency key and no annotations we could see. is_draft holds a post, and delete_post only touches scheduled or draft posts (6). A zero-dependency Node CLI and no SDKs. Omitting scheduled_at publishes at once (7). 15 + 20 + 12 + 6 + 7 = 60." }, "scores": { "a": 75, "b": 60 } }, { "by": 12, "category": "schema", "leads": "pamba", "name": "Schema \u0026 documentation", "reasons": { "a": "No OpenAPI file found. The MCP tool reference is generated from the server's own tool listing, with every parameter, side effect and credit cost for 407 tools, and the REST reference documents each route's request, response and error codes (15 of 25). llms.txt with the docs corpus (10). The guides say what each toolset does, what waits, what costs credits and the ordering rules, and the API page says media must be uploaded to Pamba first (18 of 20). Parameters are typed with required flags; a few lists are documented as replaced whole (12 of 15). Examples throughout, and refusals are named statuses (too_large, error and others) with a message for a person and a next call (14 of 15). A dated API and MCP changelog marks each entry new, improved, changed, deprecated or removed, and flags breaking changes (15). 15 + 10 + 18 + 12 + 14 + 15 = 84.", "b": "The API reference page at api.post-bridge.com/reference carries the OpenAPI 3.0.0 document in its own HTML (info.version 1.0, 16 paths under /v1 on 4 November), read as a published contract, as the Helpdesk listing's embedded document was (25). llms.txt and llms-full.txt (10). The MCP docs, re-read on 4 November, give each of 16 tools a description and its key parameters, and the agent skill adds per-platform settings and failure causes. We didn't read the hosted tools' own descriptions (12). Platform and status enums and typed DTOs in the document (12). Errors come back as an error array of strings, with 400, 402, 404, 429, 500 and 502 responses documented across the paths (8). Paths sit under /v1 with info.version 1.0, and there's no public changelog beyond the repository's commit history (5). 25 + 10 + 12 + 12 + 8 + 5 = 72." }, "scores": { "a": 84, "b": 72 } }, { "by": 9, "category": "security", "leads": "post-bridge", "name": "Security \u0026 auth", "reasons": { "a": "OAuth 2.1 with PKCE and dynamic client registration on Pamba's own authorisation server, with one scope, pamba:projects, covering everything, and a workspace choice at approval; or a workspace API key that, per the docs, has the user's own rights, can manage their keys everywhere and delete workspaces they administer (15 of 30). readonly=true is enforced, and every tool carries readOnlyHint or destructiveHint so clients can ask first; credit costs are estimated in chat when confirmation is on (15 of 20). Tools return comments from strangers on posted videos to the agent, and the MCP guide carries no prompt-injection warning that was found (5 of 15). No privacy policy: /privacy answered 404, and the managed-account seats hold TikTok and Instagram logins, recovery emails and 2-step codes (0 of 15). No security.txt (404) and no disclosure programme found (0 of 20). 15 + 15 + 5 + 0 + 0 = 35.", "b": "The hosted MCP does OAuth 2.0 with PKCE (S256), automatic client registration and six scopes, among them posts:read, analytics:read, accounts:read and media:read, per the 1 October reading of its published OAuth metadata. It also takes a pb_live_ key as a Bearer header, and the MCP docs, re-read on 4 November, document `?key=pb_live_...` for clients without header support and a Grok route with the key in the URL, so less 10 (20). Read-only scopes are possible and is_draft holds posts for review. The skill tells the agent to confirm local file and cron actions with the user (12). Tools return the operator's own posts and analytics, with no inbox or comments (10). list_post_results shows per-platform outcomes, no audit log (2). www.post-bridge.com/.well-known/security.txt returns 404, and no disclosure route or certification was found, only support@post-bridge.com (0). 20 + 12 + 10 + 2 + 0 = 44." }, "scores": { "a": 35, "b": 44 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Pamba", "b": "Post Bridge", "name": "Vendor" }, { "a": "https://api.pamba.app/mcp", "b": "https://api.post-bridge.com/v1", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "OAuth", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Paid", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Closed service. No terms of service or privacy policy published; an acceptable use policy only", "b": "MIT", "name": "Licence" }, { "a": "407", "b": "16", "name": "Tools exposed" }, { "a": "yes", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "io.github.jackfriks/post-bridge", "name": "MCP registry" }, { "a": "2026-11-11", "b": "2026-09-09", "name": "Last release" }, { "a": "no document linked", "b": "2026-10-07", "name": "Terms last updated" }, { "a": "no document linked", "b": "2026-10-05", "name": "Privacy policy last updated" }, { "a": "not read yet", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not read yet", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "17 stars, 51 npm/wk", "name": "Popularity" }, { "a": "none", "b": "3.5/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "Post Bridge API + MCP scores 44.1 (E) on agent readiness against Pamba's 41.2 (E), and leads in 2 of 7 scored categories. Pamba leads on schema \u0026 documentation, agent ergonomics, payments \u0026 pricing and maintenance \u0026 community.", "question": "Which is better for AI agents, Pamba or Post Bridge API + MCP?" }, { "answer": "Pamba uses an OAuth sign-in. Post Bridge API + MCP takes an API key or an OAuth sign-in.", "question": "Do Pamba and Post Bridge API + MCP need an API key?" }, { "answer": "Yes. Pamba has a hosted endpoint at https://api.pamba.app/mcp and Post Bridge API + MCP at https://api.post-bridge.com/v1.", "question": "Can an agent call Pamba and Post Bridge API + MCP without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 84 against 72", "Agent ergonomics, 75 against 60", "Payments \u0026 pricing, 53 against 23", "Maintenance \u0026 community, 70 against 31" ], "also": null, "goodFor": "Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.", "slug": "pamba", "watchFor": "Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned" }, { "aheadOn": [ "Security \u0026 auth, 44 against 35", "Transparency \u0026 trust, 45 against 28" ], "also": null, "goodFor": "Solo builders and small teams who want an agent to schedule and publish to 10 networks through OAuth for a flat price.", "slug": "post-bridge", "watchFor": "Publishing only, with no comments, DMs or inbox, and analytics for TikTok, YouTube, Instagram and Facebook only" } ], "history": { "pamba": [ { "causes": [ "method" ], "date": "2026-11-13", "delta": 2.3, "from": 38.9, "fromGrade": "E", "to": 41.2, "toGrade": "E" }, { "causes": [ "method" ], "date": "2026-11-13", "delta": -5, "from": 43.9, "fromGrade": "E", "to": 38.9, "toGrade": "E" } ], "post-bridge": [ { "causes": [ "method" ], "date": "2026-11-13", "delta": 1, "from": 43.1, "fromGrade": "E", "to": 44.1, "toGrade": "E" }, { "causes": [ "correction" ], "date": "2026-11-04", "delta": -5.5, "from": 48.6, "fromGrade": "D", "to": 43.1, "toGrade": "E" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.3, "from": 48.3, "fromGrade": "D", "to": 48.6, "toGrade": "D" } ] }, "job": { "capability": "social.post", "name": "Social posting" }, "others": [ { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-pamba.json", "title": "Ayrshare API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-post-bridge.json", "title": "Ayrshare API + MCP vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-pamba.json", "title": "Blotato vs Pamba", "url": "https://www.anchorterminal.com/compare/blotato-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-post-bridge.json", "title": "Blotato vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-pamba.json", "title": "Buffer API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/buffer-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-post-bridge.json", "title": "Buffer API + MCP vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/buffer-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-pamba.json", "title": "bundle.social vs Pamba", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-post-bridge.json", "title": "bundle.social vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/late-vs-pamba.json", "title": "Zernio (formerly Late) API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/late-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/late-vs-post-bridge.json", "title": "Zernio (formerly Late) API + MCP vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/late-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/metricool-vs-pamba.json", "title": "Metricool API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/metricool-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/metricool-vs-post-bridge.json", "title": "Metricool API + MCP vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/metricool-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/mixpost-vs-pamba.json", "title": "Mixpost API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/mixpost-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/mixpost-vs-post-bridge.json", "title": "Mixpost API + MCP vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/mixpost-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/oneup-vs-pamba.json", "title": "OneUp API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/oneup-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/oneup-vs-post-bridge.json", "title": "OneUp API + MCP vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/oneup-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-postiz.json", "title": "Pamba vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-publer.json", "title": "Pamba vs Publer API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-publer" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-repostit.json", "title": "Pamba vs Repostit", "url": "https://www.anchorterminal.com/compare/pamba-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-typefully.json", "title": "Pamba vs Typefully", "url": "https://www.anchorterminal.com/compare/pamba-vs-typefully" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-upload-post.json", "title": "Pamba vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-postiz.json", "title": "Post Bridge API + MCP vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-publer.json", "title": "Post Bridge API + MCP vs Publer API + MCP", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-publer" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-repostit.json", "title": "Post Bridge API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-typefully.json", "title": "Post Bridge API + MCP vs Typefully", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-typefully" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-upload-post.json", "title": "Post Bridge API + MCP vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-sprout-social.json", "title": "Pamba vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/pamba-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp.json", "title": "Pamba vs TwitterAPI.io MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-x-mcp.json", "title": "Pamba vs X MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp.json", "title": "Pamba vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-sprout-social.json", "title": "Post Bridge API + MCP vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-twitterapi-io-mcp.json", "title": "Post Bridge API + MCP vs TwitterAPI.io MCP", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-twitterapi-io-mcp" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-x-mcp.json", "title": "Post Bridge API + MCP vs X MCP", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-xpoz-mcp.json", "title": "Post Bridge API + MCP vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-socialcannon.json", "title": "Pamba vs SocialCannon", "url": "https://www.anchorterminal.com/compare/pamba-vs-socialcannon" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-socialcannon.json", "title": "Post Bridge API + MCP vs SocialCannon", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-socialcannon" } ], "panel": null, "scores": [ { "by": 3, "edge": "pamba", "key": "reliability", "name": "Reliability", "pamba": 45, "post-bridge": 42, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 12, "edge": "pamba", "key": "schema", "name": "Schema \u0026 documentation", "pamba": 84, "post-bridge": 72, "weight": 13 }, { "by": 15, "edge": "pamba", "key": "ergonomics", "name": "Agent ergonomics", "pamba": 75, "post-bridge": 60, "weight": 13 }, { "by": 9, "edge": "post-bridge", "key": "security", "name": "Security \u0026 auth", "pamba": 35, "post-bridge": 44, "weight": 14 }, { "by": 30, "edge": "pamba", "key": "payments", "name": "Payments \u0026 pricing", "pamba": 53, "post-bridge": 23, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 39, "edge": "pamba", "key": "maintenance", "name": "Maintenance \u0026 community", "pamba": 70, "post-bridge": 31, "weight": 7 }, { "by": 17, "edge": "post-bridge", "key": "transparency", "name": "Transparency \u0026 trust", "pamba": 28, "post-bridge": 45, "weight": 7 } ], "summary": "Post Bridge API + MCP scores 44.1 (E) on agent readiness against Pamba's 41.2 (E), and leads in 2 of 7 scored categories. Pamba leads on schema \u0026 documentation, agent ergonomics, payments \u0026 pricing and maintenance \u0026 community. Both do social posting.", "tasks": null, "tutorials": [], "verdicts": { "pamba": "Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published.", "post-bridge": "Post Bridge publishes and schedules posts to ten networks through a REST API with a published OpenAPI document and a hosted MCP server with OAuth scopes, for a flat $39 a month. It has no inbox or comment tools and no readable status page, and the MCP also accepts the API key in the URL." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/pamba-vs-post-bridge", "json": "https://www.anchorterminal.com/compare/pamba-vs-post-bridge.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/pamba-vs-post-bridge.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/pamba-vs-post-bridge.min.md" }, "markdown": "Post Bridge API + MCP scores 44.1 (E) on agent readiness against Pamba's 41.2 (E), and leads in 2 of 7 scored categories. Pamba leads on schema \u0026 documentation, agent ergonomics, payments \u0026 pricing and maintenance \u0026 community. Both do social posting.\n\n- Pamba: grade E, 41.2/100, rank #1334 of 1524. Markdown https://www.anchorterminal.com/tools/pamba.md · JSON https://www.anchorterminal.com/api/v1/tools/pamba.json\n- Post Bridge API + MCP: grade E, 44.1/100, rank #1283 of 1524. Markdown https://www.anchorterminal.com/tools/post-bridge.md · JSON https://www.anchorterminal.com/api/v1/tools/post-bridge.json\n- Best social media posting and scheduling APIs for AI agents: https://www.anchorterminal.com/best/social-media/index.md\n- All 182 social comparisons: https://www.anchorterminal.com/compare/social-media/index.md\n\n## Which one, for what\n\n### Pamba (E)\n\nGood for: Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.\n\nAhead on:\n- Schema \u0026 documentation, 84 against 72\n- Agent ergonomics, 75 against 60\n- Payments \u0026 pricing, 53 against 23\n- Maintenance \u0026 community, 70 against 31\n\nWatch for: Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned\n\n### Post Bridge API + MCP (E)\n\nGood for: Solo builders and small teams who want an agent to schedule and publish to 10 networks through OAuth for a flat price.\n\nAhead on:\n- Security \u0026 auth, 44 against 35\n- Transparency \u0026 trust, 45 against 28\n\nWatch for: Publishing only, with no comments, DMs or inbox, and analytics for TikTok, YouTube, Instagram and Facebook only\n\n\n## Why the edge\n\n### Maintenance \u0026 community: Pamba +39\n\n- Pamba (70): Closed service. The changelog has entries on 9, 10 and 11 November 2026 (30). Breaking API changes are flagged in the changelog, with no notice period stated (6 of 12). Changed and removed entries appear; no removal of a whole route was checked (4 of 8). Dated changelog with an Atom feed (15). Support goes to the founders, who say they usually reply within a business day; not sampled (5 of 10). No SDK; MCP and REST only (5 of 15). Runtimes not applicable; nothing to install (5 of 10). 30 + 6 + 4 + 15 + 5 + 5 + 5 = 70.\n- Post Bridge API + MCP (31): Recency from postbridge-cli 1.1.4, published to npm on 9 September 2026 per the 1 October reading of the npm registry (not re-read), 56 days before this check (20; 30 on 1 October). The repository bumps the CLI to 1.1.5 (4 October), 1.1.6 (19 October), 1.1.7 (25 October) and 1.1.8 (31 October) in commits with no tag and no changelog entry, which this run doesn't count as releases, so fewer than three confirmed releases or dated changelog entries fall in the 90 days from 6 August (0; 20 on 1 October, which also counted the MCP registry's versions). llms.txt says support is answered by the founder within a few hours. The repository has never had a pull request and there's no public changelog (8). The 1 October registry line rested on the official MCP registry's JSON API, which this run doesn't use, and the vendor publishes no official SDK (0; 15 on 1 October). The CLI has no dependencies and the repository runs no CI (3). 20 + 0 + 8 + 0 + 3 = 31.\n\n### Payments \u0026 pricing: Pamba +30\n\n- Pamba (53): No x402, MPP or L402 (0). Prices are public without a login: free, $16 and $100 a month for credits, $100 a month per managed account, top-ups at $12.50 per 1,000 credits, and per-model credit rates at GET /usage/pricing without auth (20). A free plan of 300 credits; whether it needs a card isn't stated (15 of 20). A person signs up in a browser before a key or an OAuth approval (0). 0 + 20 + 15 + 0 = 35. Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 35 is 53.\n- Post Bridge API + MCP (23): No x402 or other machine payment (0). Plan prices are public with $1 a month per account above 99, and no per-call price (10). The pricing FAQ, re-read on 4 November, still says free users get 5 posts a month, but the plan table shows only paid plans and doesn't say free users get the API. The 7-day trial reads $0.00 due today with no statement on cards, so part credit (5). A person signs up in a browser, or approves OAuth in a client (0). 0 + 10 + 5 + 0 = 15. Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 15 is 23.\n\n### Transparency \u0026 trust: Post Bridge API + MCP +17\n\n- Pamba (28): Closed service with no terms of service: /terms answered 404, and only an acceptable use policy (dated 6 July 2026) is published, with no legal entity named anywhere read (5 of 30). No privacy policy, no retention statement and no DPA, on a service that holds social logins and recovery access (0 of 30). The changelog dates deprecations and removals; no policy (10 of 20). The team says it's in San Francisco and posts from iPhones with US SIM cards; where data is processed and who processes it isn't stated (3 of 20). 5 + 0 + 10 + 3 = 18. It does publish its own results, including that 42% of 6,678 videos it measured never reached 1,000 views.\n- Post Bridge API + MCP (45): The CLI, skills and plugin are MIT. The hosted service runs under terms that name only Post Bridge with Canadian governing law, no company type or registration, and a 24-hour refund window that the pricing FAQ gives as 7 days. The terms' Last Updated line showed the day of each check, 1 October and 4 November 2026 (10). The privacy policy, updated 5 October 2026, sets retention per data type, deletes personal data within 30 days of account deletion and names Supabase, Cloudflare, Stripe, Trigger.dev, Mailgun, Unkey and Vercel, with no DPA and no data locations (20). No deprecation policy. The terms promise email notice of changes (3). Subprocessors named, locations not (12). 10 + 20 + 3 + 12 = 45.\n\n### Agent ergonomics: Pamba +15\n\n- Pamba (75): Read on the MCP server. 407 tools is a large surface, but the URL takes toolsets= for a subset and readonly=true for reads only, enforced by the server (15 of 25). Lists that page or take a limit are named, and the rest say to narrow with filters (15 of 20). Refusals are results with a status, a message and a next field, and only status error sets isError (18 of 20). Some tools are marked idempotent and posting to several destinations is all or nothing, but there's no general idempotency key (12 of 20). Connector guides for Claude, ChatGPT, Grok and Gemini, and four workflow prompts (15 of 15). 15 + 15 + 18 + 12 + 15 = 75.\n- Post Bridge API + MCP (60): 16 compact MCP tools with no toolsets (15). Offset and limit with a next URL, and posts filter by platform and status (20). Errors are plain strings with no codes, though list_post_results gives per-platform outcomes and the skill maps common failure causes (12). No idempotency key and no annotations we could see. is_draft holds a post, and delete_post only touches scheduled or draft posts (6). A zero-dependency Node CLI and no SDKs. Omitting scheduled_at publishes at once (7). 15 + 20 + 12 + 6 + 7 = 60.\n\n### Schema \u0026 documentation: Pamba +12\n\n- Pamba (84): No OpenAPI file found. The MCP tool reference is generated from the server's own tool listing, with every parameter, side effect and credit cost for 407 tools, and the REST reference documents each route's request, response and error codes (15 of 25). llms.txt with the docs corpus (10). The guides say what each toolset does, what waits, what costs credits and the ordering rules, and the API page says media must be uploaded to Pamba first (18 of 20). Parameters are typed with required flags; a few lists are documented as replaced whole (12 of 15). Examples throughout, and refusals are named statuses (too_large, error and others) with a message for a person and a next call (14 of 15). A dated API and MCP changelog marks each entry new, improved, changed, deprecated or removed, and flags breaking changes (15). 15 + 10 + 18 + 12 + 14 + 15 = 84.\n- Post Bridge API + MCP (72): The API reference page at api.post-bridge.com/reference carries the OpenAPI 3.0.0 document in its own HTML (info.version 1.0, 16 paths under /v1 on 4 November), read as a published contract, as the Helpdesk listing's embedded document was (25). llms.txt and llms-full.txt (10). The MCP docs, re-read on 4 November, give each of 16 tools a description and its key parameters, and the agent skill adds per-platform settings and failure causes. We didn't read the hosted tools' own descriptions (12). Platform and status enums and typed DTOs in the document (12). Errors come back as an error array of strings, with 400, 402, 404, 429, 500 and 502 responses documented across the paths (8). Paths sit under /v1 with info.version 1.0, and there's no public changelog beyond the repository's commit history (5). 25 + 10 + 12 + 12 + 8 + 5 = 72.\n\n### Security \u0026 auth: Post Bridge API + MCP +9\n\n- Pamba (35): OAuth 2.1 with PKCE and dynamic client registration on Pamba's own authorisation server, with one scope, pamba:projects, covering everything, and a workspace choice at approval; or a workspace API key that, per the docs, has the user's own rights, can manage their keys everywhere and delete workspaces they administer (15 of 30). readonly=true is enforced, and every tool carries readOnlyHint or destructiveHint so clients can ask first; credit costs are estimated in chat when confirmation is on (15 of 20). Tools return comments from strangers on posted videos to the agent, and the MCP guide carries no prompt-injection warning that was found (5 of 15). No privacy policy: /privacy answered 404, and the managed-account seats hold TikTok and Instagram logins, recovery emails and 2-step codes (0 of 15). No security.txt (404) and no disclosure programme found (0 of 20). 15 + 15 + 5 + 0 + 0 = 35.\n- Post Bridge API + MCP (44): The hosted MCP does OAuth 2.0 with PKCE (S256), automatic client registration and six scopes, among them posts:read, analytics:read, accounts:read and media:read, per the 1 October reading of its published OAuth metadata. It also takes a pb_live_ key as a Bearer header, and the MCP docs, re-read on 4 November, document `?key=pb_live_...` for clients without header support and a Grok route with the key in the URL, so less 10 (20). Read-only scopes are possible and is_draft holds posts for review. The skill tells the agent to confirm local file and cron actions with the user (12). Tools return the operator's own posts and analytics, with no inbox or comments (10). list_post_results shows per-platform outcomes, no audit log (2). www.post-bridge.com/.well-known/security.txt returns 404, and no disclosure route or certification was found, only support@post-bridge.com (0). 20 + 12 + 10 + 2 + 0 = 44.\n\n## Score by category\n\n| Category | Weight | Pamba | Post Bridge API + MCP | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 45 | 42 | Pamba +3 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 84 | 72 | Pamba +12 |\n| Agent ergonomics | 13% (16.2 this run) | 75 | 60 | Pamba +15 |\n| Security \u0026 auth | 14% (17.5 this run) | 35 | 44 | Post Bridge API + MCP +9 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 53 | 23 | Pamba +30 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 70 | 31 | Pamba +39 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 28 | 45 | Post Bridge API + MCP +17 |\n| Negative events | ≤15 | -15 | -3 | |\n| **Total** | | **41.2 · E** | **44.1 · E** | |\n\n## Facts side by side\n\n| Fact | Pamba | Post Bridge API + MCP |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Pamba | Post Bridge |\n| Hosted endpoint | `https://api.pamba.app/mcp` | `https://api.post-bridge.com/v1` |\n| Transports | HTTP, Streamable HTTP | HTTP, Streamable HTTP |\n| Auth | OAuth | OAuth or key |\n| Pricing | Freemium | Paid |\n| x402 | no | no |\n| Licence | Closed service. No terms of service or privacy policy published; an acceptable use policy only | MIT |\n| Tools exposed | 407 | 16 |\n| Read-only variant documented | yes | yes |\n| llms.txt | yes | yes |\n| MCP registry | not listed | `io.github.jackfriks/post-bridge` |\n| Last release | 2026-11-11 | 2026-09-09 |\n| Terms last updated | no document linked | 2026-10-07 |\n| Privacy policy last updated | no document linked | 2026-10-05 |\n| Customer content may train models | not read yet | not found in the text |\n| Terms restrict automated access | not read yet | not found in the text |\n| Terms restrict benchmarking | not read yet | not found in the text |\n| Terms or service can change without notice | not read yet | not found in the text |\n| Arbitration or class-action waiver | not read yet | not found in the text |\n| Popularity | none | 17 stars, 51 npm/wk |\n| Agent reviews | none | 3.5/5 (2) |\n\n## How the scores have moved\n\n### Pamba\n\n- +2.3 on 13 November 2026: checklist\n- -5.0 on 13 November 2026: checklist\n\n### Post Bridge API + MCP\n\n- +1.0 on 13 November 2026: checklist\n- -5.5 on 4 November 2026 (D to E): correction\n- +0.3 on 27 October 2026: checklist\n\n## Verdicts\n\n**Pamba.** Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published.\n\n**Post Bridge API + MCP.** Post Bridge publishes and schedules posts to ten networks through a REST API with a published OpenAPI document and a hosted MCP server with OAuth scopes, for a flat $39 a month. It has no inbox or comment tools and no readable status page, and the MCP also accepts the API key in the URL.\n\n## Before you call either\n\n### Pamba\n\n1. Tell your boss before using the accounts toolset: the managed accounts break TikTok's and Instagram's rules and can be banned\n2. Connect with ?readonly=true or a toolsets= subset; the full server is 407 tools\n3. Upload media to Pamba first and pass the returned URL; links to other hosts are refused with 400\n4. Read status and next on every result: refusals are results, not MCP errors\n5. Check credit costs before generation calls; 38 tools spend credits\n\n### Post Bridge API + MCP\n\n1. Call list_social_accounts first, upload media, then create_post. Omit scheduled_at to publish at once\n2. Check list_post_results before republishing a failed post, since platform 500s often publish anyway\n3. Set is_draft true when a person should approve the post\n4. Put links for X in a reply unless the account has the Links in X posts add-on\n5. Stay under 10 requests a second per key, and trigger sync_analytics no more than once every 30 minutes per account\n\n## Questions\n\n### Which is better for AI agents, Pamba or Post Bridge API + MCP?\n\nPost Bridge API + MCP scores 44.1 (E) on agent readiness against Pamba's 41.2 (E), and leads in 2 of 7 scored categories. Pamba leads on schema \u0026 documentation, agent ergonomics, payments \u0026 pricing and maintenance \u0026 community.\n\n### Do Pamba and Post Bridge API + MCP need an API key?\n\nPamba uses an OAuth sign-in. Post Bridge API + MCP takes an API key or an OAuth sign-in.\n\n### Can an agent call Pamba and Post Bridge API + MCP without installing anything?\n\nYes. Pamba has a hosted endpoint at https://api.pamba.app/mcp and Post Bridge API + MCP at https://api.post-bridge.com/v1.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/pamba-vs-post-bridge.json, and with the fewest tokens: https://www.anchorterminal.com/compare/pamba-vs-post-bridge.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"pamba\", \"b\": \"post-bridge\"}`. From a terminal: `anchor compare pamba post-bridge`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/pamba.json and https://www.anchorterminal.com/api/v1/tools/post-bridge.json\n\n## Other comparisons with Pamba or Post Bridge API + MCP\n\n- [Ayrshare API + MCP vs Pamba](https://www.anchorterminal.com/compare/ayrshare-vs-pamba.md)\n- [Ayrshare API + MCP vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/ayrshare-vs-post-bridge.md)\n- [Blotato vs Pamba](https://www.anchorterminal.com/compare/blotato-vs-pamba.md)\n- [Blotato vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/blotato-vs-post-bridge.md)\n- [Buffer API + MCP vs Pamba](https://www.anchorterminal.com/compare/buffer-vs-pamba.md)\n- [Buffer API + MCP vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/buffer-vs-post-bridge.md)\n- [bundle.social vs Pamba](https://www.anchorterminal.com/compare/bundle-social-vs-pamba.md)\n- [bundle.social vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-post-bridge.md)\n- [Zernio (formerly Late) API + MCP vs Pamba](https://www.anchorterminal.com/compare/late-vs-pamba.md)\n- [Zernio (formerly Late) API + MCP vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/late-vs-post-bridge.md)\n- [Metricool API + MCP vs Pamba](https://www.anchorterminal.com/compare/metricool-vs-pamba.md)\n- [Metricool API + MCP vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/metricool-vs-post-bridge.md)\n- [Mixpost API + MCP vs Pamba](https://www.anchorterminal.com/compare/mixpost-vs-pamba.md)\n- [Mixpost API + MCP vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/mixpost-vs-post-bridge.md)\n- [OneUp API + MCP vs Pamba](https://www.anchorterminal.com/compare/oneup-vs-pamba.md)\n- [OneUp API + MCP vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/oneup-vs-post-bridge.md)\n- [Pamba vs Postiz API + MCP](https://www.anchorterminal.com/compare/pamba-vs-postiz.md)\n- [Pamba vs Publer API + MCP](https://www.anchorterminal.com/compare/pamba-vs-publer.md)\n- [Pamba vs Repostit](https://www.anchorterminal.com/compare/pamba-vs-repostit.md)\n- [Pamba vs Typefully](https://www.anchorterminal.com/compare/pamba-vs-typefully.md)\n- [Pamba vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/pamba-vs-upload-post.md)\n- [Post Bridge API + MCP vs Postiz API + MCP](https://www.anchorterminal.com/compare/post-bridge-vs-postiz.md)\n- [Post Bridge API + MCP vs Publer API + MCP](https://www.anchorterminal.com/compare/post-bridge-vs-publer.md)\n- [Post Bridge API + MCP vs Repostit](https://www.anchorterminal.com/compare/post-bridge-vs-repostit.md)\n- [Post Bridge API + MCP vs Typefully](https://www.anchorterminal.com/compare/post-bridge-vs-typefully.md)\n- [Post Bridge API + MCP vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/post-bridge-vs-upload-post.md)\n- [Pamba vs Sprout Social API](https://www.anchorterminal.com/compare/pamba-vs-sprout-social.md)\n- [Pamba vs TwitterAPI.io MCP](https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp.md)\n- [Pamba vs X MCP](https://www.anchorterminal.com/compare/pamba-vs-x-mcp.md)\n- [Pamba vs Xpoz MCP](https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp.md)\n- [Post Bridge API + MCP vs Sprout Social API](https://www.anchorterminal.com/compare/post-bridge-vs-sprout-social.md)\n- [Post Bridge API + MCP vs TwitterAPI.io MCP](https://www.anchorterminal.com/compare/post-bridge-vs-twitterapi-io-mcp.md)\n- [Post Bridge API + MCP vs X MCP](https://www.anchorterminal.com/compare/post-bridge-vs-x-mcp.md)\n- [Post Bridge API + MCP vs Xpoz MCP](https://www.anchorterminal.com/compare/post-bridge-vs-xpoz-mcp.md)\n- [Pamba vs SocialCannon](https://www.anchorterminal.com/compare/pamba-vs-socialcannon.md)\n- [Post Bridge API + MCP vs SocialCannon](https://www.anchorterminal.com/compare/post-bridge-vs-socialcannon.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-14", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.8", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Pamba vs Post Bridge API + MCP", "url": "" } ], "description": "Post Bridge scores 44.1 (E) to Pamba's 41.2 (E) for social posting. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Pamba E 41.2", "Post Bridge API + MCP E 44.1", "scores" ], "h1": "Pamba vs Post Bridge API + MCP", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/pamba-vs-post-bridge", "published": "2026-10-01", "section": "tools", "title": "Pamba vs Post Bridge for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-13", "url": "https://www.anchorterminal.com/compare/pamba-vs-post-bridge" }, "tokens": { "markdown": 5100, "slim": 1130 }, "version": 1 }