{ "data": { "a": { "slug": "pamba", "name": "Pamba", "vendor": "Pamba", "vendorUrl": "https://pamba.app", "kind": "http-api", "category": "social-media", "summary": "Pamba makes AI avatar short-form videos and posts them to TikTok, Instagram and Facebook, through an app, a REST API and a remote MCP server. It also sells accounts it runs on its own iPhones, which those platforms forbid.", "url": "https://www.anchorterminal.com/tools/pamba", "markdownUrl": "https://www.anchorterminal.com/tools/pamba.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/pamba.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/pamba.json", "dns": "pamba.grade.anchorterminal.com", "license": "Closed service. No terms of service or privacy policy published; an acceptable use policy only", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.pamba.app/mcp", "packages": [], "auth": "oauth", "authNotes": "OAuth 2.1 with PKCE and dynamic client registration on api.pamba.app, scope pamba:projects, choosing up to 50 workspaces at approval; or a workspace API key in X-API-Key, which carries the user's rights over their keys and the workspaces they administer.", "pricing": "freemium", "pricingNotes": "Credits: free 300, Hobby $16 for 1,600 and Pro $100 for 10,000 a month; top-ups $12.50 per 1,000. Managed TikTok or Instagram accounts $100 a month each. Fully managed from $7,500 a month. Per-model credit rates at GET /usage/pricing without auth. Read 11 November 2026.", "priceSummary": "$0.0125 / credit", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in Pamba's pricing, API or MCP pages, 11 November 2026. Billing is through Stripe.", "endpoints": [] }, "toolCount": 407, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-11" }, "docsUrl": "https://pamba.app/help/mcp-server", "llmsTxt": "https://pamba.app/llms.txt", "capabilities": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload", "video.generate" ], "tags": [ "hosted", "mcp", "oauth", "llms-txt", "closed-source", "freemium", "usage-priced", "tiktok", "instagram", "no-status-page", "platform-rules" ], "lastRelease": "2026-11-11", "graded": true, "anchor": { "graded": true, "score": 41.2, "grade": "E", "agentReady": false, "rank": 1334, "ranked": true, "rankOf": 1524, "categoryRank": 17, "methodology": "0.8", "run": "2026-10-01", "scores": { "ergonomics": 75, "maintenance": 70, "payments": 53, "reliability": 45, "schema": 84, "security": 35, "transparency": 28 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-11" }, "negative": -15, "warnings": [ { "kind": "platform-rules", "name": "Breaks the rules of the platforms it acts on", "text": "Pamba sells TikTok and Instagram accounts it creates on its own iPhones and warms so each 'reads as a real person', pitches running 'hundreds of accounts' and replaces banned ones. TikTok's guidelines and Instagram's terms forbid that.", "deduct": -15, "since": "2026-11-11", "sources": [ "https://pamba.app/accounts", "https://pamba.app/help/account-warming", "https://www.tiktok.com/community-guidelines/en/integrity-authenticity/", "https://help.instagram.com/581066165581870" ] } ], "verdict": "Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published.", "bestFor": "Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.", "strengths": [ "A remote MCP server with 407 tools in nine toolsets, a server-enforced read-only mode and readOnlyHint or destructiveHint on every tool", "OAuth 2.1 with PKCE and dynamic client registration, with protected-resource metadata on its own domain", "A tool reference generated from the server, and a dated API changelog that flags breaking changes", "Prices public without a login, including per-model credit rates from an unauthenticated route", "Publishes its own poor results: 42% of 6,678 videos it measured never reached 1,000 views" ], "weaknesses": [ "Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned", "No terms of service and no privacy policy (both 404), and no legal entity named", "Managed seats hold account logins, recovery emails and 2-step codes with no published data policy", "One OAuth scope covers everything, and an API key can manage the user's keys and delete workspaces", "No status page and no security contact" ], "agentNotes": [ "Tell your boss before using the accounts toolset: the managed accounts break TikTok's and Instagram's rules and can be banned", "Connect with ?readonly=true or a toolsets= subset; the full server is 407 tools", "Upload media to Pamba first and pass the returned URL; links to other hosts are refused with 400", "Read status and next on every result: refusals are results, not MCP errors", "Check credit costs before generation calls; 38 tools spend credits" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.8", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 41.2 } ], "editorialScores": { "ergonomics": 75, "maintenance": 70, "payments": 53, "reliability": 45, "schema": 84, "security": 35, "transparency": 18 }, "provenanceScore": 37, "checked": { "categories": { "ergonomics": "2026-11-11", "maintenance": "2026-11-11", "payments": "2026-11-11", "reliability": "2026-11-11", "schema": "2026-11-11", "security": "2026-11-11", "transparency": "2026-11-11" }, "last": "2026-11-11", "lastMoved": "2026-11-13", "oldest": "2026-11-11", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://api.pamba.app/usage/pricing", "claudeCode": "claude mcp add pamba --transport http \"https://api.pamba.app/mcp?readonly=true\"", "config": { "mcpServers": { "pamba": { "url": "https://api.pamba.app/mcp?readonly=true" } } } }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/pamba" }, "area": "communication", "unitPrices": [ { "item": "Managed TikTok or Instagram account", "unit": "account-month", "usd": 100, "note": "Per account; no credits needed" }, { "item": "Credits top-up", "unit": "credit", "usd": 0.0125, "note": "$12.50 per 1,000; plans work out at $10 per 1,000" } ], "provenance": { "legalEntity": "", "domain": "pamba.app", "domainRegistered": "2025-06-05", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://pamba.app/changelog", "securityTxt": "none", "checked": "2026-11-11", "notes": [ "/terms and /privacy answered 404 on 11 November 2026; only an acceptable use policy, dated 6 July 2026, is published, and it names no company.", "RDAP gives pamba.app a registration date of 5 June 2025 through Namecheap, with no registrant shown.", "robots.txt on pamba.app allows ClaudeBot on public pages and disallows app paths; api.pamba.app has no robots.txt (404).", "No entry in the official MCP registry for 'pamba' on 11 November 2026." ], "score": 37 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/pamba.json", "live": { "slug": "pamba", "probe": { "target": "https://api.pamba.app/mcp", "method": "get", "lastAt": "2026-11-13T23:58:54.025134635Z", "lastOk": true, "lastStatus": 401, "lastMs": 248, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 299, "p95ms24h": 391, "samples24h": 239, "samples30d": 319, "days": [ { "date": "2026-11-12", "probes": 81, "ok": 81 }, { "date": "2026-11-13", "probes": 238, "ok": 238 } ], "since": "2026-11-12T16:06:25.231802453Z" }, "securityTxt": { "url": "https://pamba.app/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-13T16:15:01.559101993Z" }, "llmsTxt": { "url": "https://pamba.app/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-13T15:55:36.94769184Z" }, "pages": [ { "url": "https://pamba.app/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-13T18:26:24.542486652Z", "changedAt": "2026-11-13T18:26:24.542486652Z", "fingerprint": "a0b9ef3713fa" } ], "mcpTools": { "url": "https://api.pamba.app/mcp?readonly=true", "checkedAt": "2026-11-13T03:13:09.042103119Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-13T03:13:09.042103119Z" }, "updatedAt": "2026-11-13T23:58:54.025134635Z" }, "streak": { "days": 2, "from": "2026-11-12", "sinceWatching": true, "best": 2 } }, "answer": "Upload-Post API + MCP scores 52.5 (D) on agent readiness against Pamba's 41.2 (E), and leads in 4 of 7 scored categories. Pamba leads on payments \u0026 pricing.", "b": { "slug": "upload-post", "name": "Upload-Post API + MCP", "vendor": "Upload-Post", "vendorUrl": "https://www.upload-post.com", "kind": "http-api", "category": "social-media", "summary": "REST API for publishing video, photos, text and documents to TikTok, Instagram, YouTube and 20 or so other networks, with async uploads, scheduling and analytics.", "url": "https://www.anchorterminal.com/tools/upload-post", "markdownUrl": "https://www.anchorterminal.com/tools/upload-post.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/upload-post.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/upload-post.json", "dns": "upload-post.grade.anchorterminal.com", "repo": "https://github.com/Upload-Post/upload-post-mcp", "license": "MIT", "transports": [ "http", "streamable-http", "stdio" ], "remoteUrl": "https://api.upload-post.com/api", "packages": [ { "registry": "npm", "name": "upload-post" }, { "registry": "pypi", "name": "upload-post" }, { "registry": "npm", "name": "@upload-post/mcp" } ], "auth": "mixed", "authNotes": "API key in the header as `Authorization: Apikey \u003ckey\u003e` (the MCP also accepts Bearer). The hosted MCP supports OAuth 2.1 with discovery metadata for claude.ai and ChatGPT connectors. User profiles plus JWT connect links for white-label use.", "pricing": "freemium", "pricingNotes": "Free $0 (2 profiles, 10 uploads a month, no TikTok, no card). Basic $24 a month or $16 billed yearly (5 profiles), Professional $50 or $33 (25), Advanced $147 or $118 (75), Business $438 or $350 (225). Uploads unlimited on paid plans. Extra profile packs from $15 a month, X link posts add-on $19 a month (https://www.upload-post.com/pricing).", "priceSummary": "$24 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402 in docs, llms-full.txt or pricing (checked 2026-09-30).", "endpoints": [] }, "toolCount": 74, "popularity": { "githubStars": 8, "npmWeekly": 1884, "pypiWeekly": 6236, "asOf": "2026-09-30" }, "docsUrl": "https://docs.upload-post.com", "llmsTxt": "https://docs.upload-post.com/llms.txt", "openapi": "https://docs.upload-post.com/openapi.json", "registryName": "com.upload-post/mcp", "capabilities": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload" ], "tags": [ "hosted", "freemium", "free-tier", "no-card", "mcp", "llms-txt", "openapi", "python", "typescript", "webhooks", "async-jobs", "closed-source" ], "lastRelease": "2026-10-28", "graded": true, "anchor": { "graded": true, "score": 52.5, "grade": "D", "agentReady": false, "rank": 1057, "ranked": true, "rankOf": 1524, "categoryRank": 9, "methodology": "0.8", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 79, "payments": 45, "reliability": 57, "schema": 81, "security": 36, "transparency": 73 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-04" }, "negative": -9, "negativeNotes": [ "-3, a fix of the MCP server's own described flaws released with no advisory. Commit 0ef224b (27 October 2026, in the v0.17.1 tag of 28 October) says that on the HTTP transport \"the SDK would otherwise read paths from the server's own filesystem\" and binds each request to the credential that opened its session. OSV lists no advisory for @upload-post/mcp. https://github.com/Upload-Post/upload-post-mcp/commit/0ef224b08802ef8d5d2fb7fd90dab7704f17b5bf", "-3, a fix in no release. Commit 1715f8f (28 October 2026) says a request with only an mcp-session-id \"ran with the key that opened the session, so anyone who saw a session id could publish as its owner\". It sits after the v0.17.2 tag, in an untagged 0.17.3, and commit 8d27ca1 the same evening leaves the refusal off unless UPLOAD_POST_MCP_REQUIRE_SESSION_AUTH=true. https://github.com/Upload-Post/upload-post-mcp/commit/1715f8f", "-3, a published behaviour changed for existing clients on the day it shipped. 0.17.0 (27 October 2026, tagged v0.17.1 on 28 October) makes upload, DM, comment-write and unpublish tools return a preview and send nothing until called again with confirmed: true, and takes Reddit out of the publish enums; the README and commit came the same day, with no earlier notice found. https://github.com/Upload-Post/upload-post-mcp/commit/fff50a0" ], "verdict": "Free plan with 2 profiles and 10 uploads a month, no card, and an MIT-licensed MCP server whose publishing tools now wait for a confirmed second call. One account key with no scopes, OAuth with a single mcp.full scope, and an October session-id flaw whose fix is in no release and off by default.", "bestFor": "Video-heavy publishing to TikTok, Reels and Shorts at a low price, and for white-label products that link end users through JWT connect pages.", "strengths": [ "Free plan with 2 profiles and 10 uploads a month, no card", "MIT-licensed MCP with 74 tools, each annotated readOnlyHint or destructiveHint, in the official registry as com.upload-post/mcp", "Since 0.17.0 the server sends no post, DM or comment until a second call with confirmed: true", "Rate-limit guide with X-RateLimit headers, polling intervals, daily caps and an Idempotency-Key for uploads", "MCP tags most weeks, the newest v0.17.1 and v0.17.2 on 28 October 2026" ], "weaknesses": [ "One account key with no scopes, and the MCP's OAuth grants a single mcp.full scope", "A session id alone could act as its owner on the HTTP MCP; the 28 October fix is untagged and off by default", "74 MCP tools with no toolsets or read-only subset", "Comment, DM and Google Business review tools return untrusted text with no injection guidance", "OpenAPI spec covers 22 paths and there's no API changelog" ], "agentNotes": [ "Send `Authorization: Apikey \u003ckey\u003e` on REST. The MCP also takes Bearer; send the credential on every MCP request, since a session id alone isn't one", "Call upload, DM and comment tools once for a preview, show it to the user, then repeat with confirmed: true", "Use async_upload=true for video, then poll the upload status endpoint every 5 to 60 seconds, not faster", "Send an Idempotency-Key on every upload so a timed-out retry doesn't post twice", "Check each platform's success flag in results, because one network failing doesn't stop the others" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.8", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 52.5 } ], "editorialScores": { "ergonomics": 72, "maintenance": 79, "payments": 45, "reliability": 57, "schema": 81, "security": 36, "transparency": 78 }, "provenanceScore": 68, "checked": { "categories": { "ergonomics": "2026-11-04", "maintenance": "2026-11-04", "payments": "2026-11-04", "reliability": "2026-11-04", "schema": "2026-11-04", "security": "2026-11-04", "transparency": "2026-11-04" }, "last": "2026-11-04", "lastMoved": "2026-11-13", "oldest": "2026-11-04", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://api.upload-post.com/api/uploadposts/me -H \"Authorization: Apikey $UPLOAD_POST_API_KEY\"", "claudeCode": "claude mcp add --transport http upload-post https://mcp.upload-post.com/mcp --header \"Authorization: Bearer $UPLOAD_POST_API_KEY\"", "config": { "mcpServers": { "upload-post": { "args": [ "-y", "@upload-post/mcp" ], "command": "npx", "env": { "UPLOAD_POST_API_KEY": "${UPLOAD_POST_API_KEY}" } } } } }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/upload-post" }, "area": "communication", "unitPrices": [ { "item": "Basic plan", "unit": "month", "usd": 24, "note": "5 profiles. $16 a month billed yearly" }, { "item": "Professional plan", "unit": "month", "usd": 50, "note": "25 profiles. $33 a month billed yearly" }, { "item": "Advanced plan", "unit": "month", "usd": 147, "note": "75 profiles. $118 a month billed yearly" }, { "item": "Business plan", "unit": "month", "usd": 438, "note": "225 profiles. $350 a month billed yearly" } ], "provenance": { "legalEntity": "TONVI TECH SL", "domain": "upload-post.com", "domainRegistered": "2024-11-02", "endpointOnVendorDomain": true, "terms": "https://www.upload-post.com/terms-of-use/", "privacy": "https://www.upload-post.com/data-and-privacy-policy/", "statusPage": "https://www.upload-post.com/status/", "changelog": "", "securityTxt": "none", "checked": "2026-09-30", "notes": [ "docs.upload-post.com returns 200 for any path, so a missing changelog page can look present" ], "score": 68 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/upload-post.json", "live": { "slug": "upload-post", "probe": { "target": "https://api.upload-post.com/api", "method": "get", "lastAt": "2026-11-13T23:59:06.626327227Z", "lastOk": true, "lastStatus": 404, "lastMs": 104, "authRequired": false, "uptime24h": 100, "uptime30d": 99.95, "p50ms24h": 133, "p95ms24h": 197, "samples24h": 239, "samples30d": 7892, "days": [ { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 249 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 250, "ok": 250 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 243, "ok": 243 }, { "date": "2026-11-08", "probes": 243, "ok": 243 }, { "date": "2026-11-09", "probes": 243, "ok": 241 }, { "date": "2026-11-10", "probes": 244, "ok": 244 }, { "date": "2026-11-11", "probes": 244, "ok": 244 }, { "date": "2026-11-12", "probes": 245, "ok": 245 }, { "date": "2026-11-13", "probes": 238, "ok": 238 } ], "since": "2026-10-08T00:00:00Z" }, "vendorStatus": { "page": "https://www.upload-post.com/status", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-13T23:55:42.235535381Z" }, "versions": [ { "registry": "github", "name": "Upload-Post/upload-post-mcp", "version": "v0.17.2", "released": "2026-10-28", "seenAt": "2026-11-13T09:24:19.863973107Z" }, { "registry": "mcp-registry", "name": "com.upload-post/mcp", "version": "0.10.0", "seenAt": "2026-11-13T20:30:05.021626978Z" }, { "registry": "npm", "name": "@upload-post/mcp", "version": "0.17.2", "seenAt": "2026-11-13T09:24:18.401706099Z" }, { "registry": "npm", "name": "upload-post", "version": "2.18.0", "seenAt": "2026-11-13T09:24:16.352352801Z" }, { "registry": "pypi", "name": "upload-post", "version": "2.14.0", "released": "2026-10-28", "seenAt": "2026-11-13T09:24:18.21879023Z" } ], "githubStars": 20, "npmWeekly": 1808, "pypiWeekly": 10156, "securityTxt": { "url": "https://upload-post.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-13T16:16:34.956938929Z" }, "llmsTxt": { "url": "https://docs.upload-post.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-13T15:56:18.087894655Z" }, "domain": { "domain": "upload-post.com", "registered": "2024-11-02", "source": "https://rdap.verisign.com/com/v1/domain/upload-post.com", "checkedAt": "2026-11-08T15:11:08.026323218Z" }, "pages": [ { "url": "https://www.upload-post.com/pricing", "kind": "pricing", "status": 304, "checkedAt": "2026-11-13T18:46:53.354147666Z", "changedAt": "2026-11-03T08:12:36.960177015Z", "fingerprint": "c856535f7377" }, { "url": "https://www.upload-post.com/data-and-privacy-policy/", "kind": "privacy", "status": 304, "checkedAt": "2026-11-13T18:46:51.189137242Z", "changedAt": "2026-11-02T07:39:14.511870024Z", "fingerprint": "e18217af5032" }, { "url": "https://www.upload-post.com/terms-of-use/", "kind": "terms", "status": 304, "checkedAt": "2026-11-13T18:46:55.336073035Z", "changedAt": "2026-11-02T07:39:18.829542139Z", "fingerprint": "c8a3239966d8" } ], "mcpTools": { "url": "https://mcp.upload-post.com/mcp", "checkedAt": "2026-11-13T03:15:36.554784486Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:48:53.341459729Z" }, "github": { "repo": "upload-post/upload-post-mcp", "checkedAt": "2026-11-09T11:09:53.321370664Z", "stars": 16, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-07T16:19:10Z", "openIssues": 3, "openPRs": 0, "issuesOpened90d": 5, "issuesClosed90d": 2, "prsMerged90d": 9, "replies": { "sampled": 7, "unanswered": 3, "medianDays": 56.3 } }, "updatedAt": "2026-11-13T23:59:06.626327227Z" }, "streak": { "days": 37, "from": "2026-10-08", "sinceWatching": true, "best": 37 } }, "edges": [ { "by": 45, "category": "transparency", "leads": "upload-post", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed service with no terms of service: /terms answered 404, and only an acceptable use policy (dated 6 July 2026) is published, with no legal entity named anywhere read (5 of 30). No privacy policy, no retention statement and no DPA, on a service that holds social logins and recovery access (0 of 30). The changelog dates deprecations and removals; no policy (10 of 20). The team says it's in San Francisco and posts from iPhones with US SIM cards; where data is processed and who processes it isn't stated (3 of 20). 5 + 0 + 10 + 3 = 18. It does publish its own results, including that 42% of 6,678 videos it measured never reached 1,000 views.", "b": "Closed API under clear terms from TONVI TECH SL (CIF B-19780394, Málaga), version 2.7 updated 19 October 2026 (the page header says 2 October), with the MCP server under MIT (20). Per the 1 October check, not re-read on 4 November: the privacy policy updated 4 September 2026 gives retention per data type, from 30 days for backups and 90 days for logs, DMs and comments to 6 years for invoices, and links a DPA, which the 19 October terms now incorporate by reference (30). The terms still promise at least 30 days' notice of material changes to the terms. No API deprecation policy (8). Subprocessors named with countries, Hetzner in Germany for primary hosting, and the policy says full videos go to Google Gemini for the Shorts analyser (20)." }, "scores": { "a": 28, "b": 73 } }, { "by": 12, "category": "reliability", "leads": "upload-post", "name": "Reliability", "reasons": { "a": "Graded as a hosted service. No status page found: none is linked, and status.pamba.app didn't answer (0). With no page there's no incident history to read (5 of 30). Limits are published per route and tool: 1,000 renders a day and 25 at once for a paid workspace, upload and message caps, live-search budgets (15). 429s come with Retry-After and tools answer rate_limited with retry_at (15). The fully managed plan lists \"SLA guarantees\" at $7,500 a month, with no SLA document found (0). Self-serve and live (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.", "b": "Upload-Post's terms (version 2.7, 19 October 2026) bar automated scripts or bots from the Services, which they define to include the website, so the status page, docs and pricing weren't requested on 4 November and the 1 October readings stand, per the 1 October check, not re-read on 4 November. An own status page at upload-post.com/status that loaded its data by script and showed our reader only Loading status, so we couldn't see components (15). No readable incident history (5). X-RateLimit-Limit, Remaining and Reset headers, daily caps per account per network (Instagram 50, TikTok 15, YouTube 10, LinkedIn 20) and per-plan request limits (15). The rate-limits guide says to wait for X-RateLimit-Reset, back off exponentially and send an Idempotency-Key on every upload, though the error guide and spec don't mention the key and there's no Retry-After (12). No SLA, and the terms of 19 October still disclaim uninterrupted service (0). GA (10)." }, "scores": { "a": 45, "b": 57 } }, { "by": 9, "category": "maintenance", "leads": "upload-post", "name": "Maintenance \u0026 community", "reasons": { "a": "Closed service. The changelog has entries on 9, 10 and 11 November 2026 (30). Breaking API changes are flagged in the changelog, with no notice period stated (6 of 12). Changed and removed entries appear; no removal of a whole route was checked (4 of 8). Dated changelog with an Atom feed (15). Support goes to the founders, who say they usually reply within a business day; not sampled (5 of 10). No SDK; MCP and REST only (5 of 15). Runtimes not applicable; nothing to install (5 of 10). 30 + 6 + 4 + 15 + 5 + 5 + 5 = 70.", "b": "MCP tags v0.17.1 and v0.17.2 on 28 October 2026, 7 days before this check (30). In the 90 days from 6 August, MCP tags v0.8.0 and v0.10.0 (31 August), v0.11.0 (7 September), v0.11.1 (9 September), v0.11.2 (25 September), v0.11.3 and v0.11.4 (27 September), v0.17.1 and v0.17.2 (28 October) (20). Commits landed in every week of October, under five author names. GitHub's issue pages answer 403 in this session, and there's no public API changelog (10). Official registry entry com.upload-post/mcp, carried from the 1 October reading; server.json in the repository declares that name at 0.17.3 (15). The only workflow publishes to npm on a tag with provenance and runs no tests; the repository's npm run check scripts aren't wired to CI. Versions 0.11.5 to 0.17.0 and 0.17.3 were bumped in package.json without tags, and npm couldn't be read to say which were published (4)." }, "scores": { "a": 70, "b": 79 } }, { "by": 8, "category": "payments", "leads": "pamba", "name": "Payments \u0026 pricing", "reasons": { "a": "No x402, MPP or L402 (0). Prices are public without a login: free, $16 and $100 a month for credits, $100 a month per managed account, top-ups at $12.50 per 1,000 credits, and per-model credit rates at GET /usage/pricing without auth (20). A free plan of 300 credits; whether it needs a card isn't stated (15 of 20). A person signs up in a browser before a key or an OAuth approval (0). 0 + 20 + 15 + 0 = 35. Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 35 is 53.", "b": "Per the 1 October check, not re-read on 4 November (pricing page on a host paused under the terms). No x402 or other machine payment (0). Plan prices are public, with FFmpeg minutes and Shorts analyses per plan and a $19 a month X link add-on, but no per-call price (10). Free plan of 2 profiles and 10 uploads a month without TikTok, no card (20). A person has to sign up in a browser for the key, or approve OAuth in a client (0). Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 30 is 45." }, "scores": { "a": 53, "b": 45 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Pamba", "b": "Upload-Post", "name": "Vendor" }, { "a": "https://api.pamba.app/mcp", "b": "https://api.upload-post.com/api", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP, Streamable HTTP, stdio", "name": "Transports" }, { "a": "OAuth", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Closed service. No terms of service or privacy policy published; an acceptable use policy only", "b": "MIT", "name": "Licence" }, { "a": "407", "b": "74", "name": "Tools exposed" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "com.upload-post/mcp", "name": "MCP registry" }, { "a": "2026-11-11", "b": "2026-10-28", "name": "Last release" }, { "a": "no document linked", "b": "2026-10-02", "name": "Terms last updated" }, { "a": "no document linked", "b": "2026-09-04", "name": "Privacy policy last updated" }, { "a": "not read yet", "b": "yes, with an opt-out", "name": "Customer content may train models" }, { "a": "not read yet", "b": "yes", "name": "Terms restrict automated access" }, { "a": "not read yet", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not read yet", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "not read yet", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "8 stars, 1.9k npm/wk, 6.2k PyPI/wk", "name": "Popularity" }, { "a": "none", "b": "3/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "Upload-Post API + MCP scores 52.5 (D) on agent readiness against Pamba's 41.2 (E), and leads in 4 of 7 scored categories. Pamba leads on payments \u0026 pricing.", "question": "Which is better for AI agents, Pamba or Upload-Post API + MCP?" }, { "answer": "Pamba uses an OAuth sign-in. Upload-Post API + MCP takes an API key or an OAuth sign-in.", "question": "Do Pamba and Upload-Post API + MCP need an API key?" }, { "answer": "Yes. Pamba has a hosted endpoint at https://api.pamba.app/mcp and Upload-Post API + MCP at https://api.upload-post.com/api.", "question": "Can an agent call Pamba and Upload-Post API + MCP without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Payments \u0026 pricing, 53 against 45" ], "also": null, "goodFor": "Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.", "slug": "pamba", "watchFor": "Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned" }, { "aheadOn": [ "Reliability, 57 against 45", "Maintenance \u0026 community, 79 against 70", "Transparency \u0026 trust, 73 against 28" ], "also": [ "Runs on your own machine", "Free to start without a card" ], "goodFor": "Video-heavy publishing to TikTok, Reels and Shorts at a low price, and for white-label products that link end users through JWT connect pages.", "slug": "upload-post", "watchFor": "One account key with no scopes, and the MCP's OAuth grants a single mcp.full scope" } ], "history": { "pamba": [ { "causes": [ "method" ], "date": "2026-11-13", "delta": 2.3, "from": 38.9, "fromGrade": "E", "to": 41.2, "toGrade": "E" }, { "causes": [ "method" ], "date": "2026-11-13", "delta": -5, "from": 43.9, "fromGrade": "E", "to": 38.9, "toGrade": "E" } ], "upload-post": [ { "causes": [ "method" ], "date": "2026-11-13", "delta": 1.9, "from": 50.6, "fromGrade": "D", "to": 52.5, "toGrade": "D" }, { "causes": [ "security", "product" ], "date": "2026-11-04", "delta": -8.3, "from": 58.9, "fromGrade": "C", "to": 50.6, "toGrade": "D" }, { "causes": [ "time" ], "date": "2026-11-03", "delta": 0.2, "from": 58.7, "fromGrade": "C", "to": 58.9, "toGrade": "C" } ] }, "job": { "capability": "social.post", "name": "Social posting" }, "others": [ { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-pamba.json", "title": "Ayrshare API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-upload-post.json", "title": "Ayrshare API + MCP vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-pamba.json", "title": "Blotato vs Pamba", "url": "https://www.anchorterminal.com/compare/blotato-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-upload-post.json", "title": "Blotato vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-pamba.json", "title": "Buffer API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/buffer-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-upload-post.json", "title": "Buffer API + MCP vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/buffer-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-pamba.json", "title": "bundle.social vs Pamba", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-upload-post.json", "title": "bundle.social vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/late-vs-pamba.json", "title": "Zernio (formerly Late) API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/late-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/late-vs-upload-post.json", "title": "Zernio (formerly Late) API + MCP vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/late-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/metricool-vs-pamba.json", "title": "Metricool API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/metricool-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/metricool-vs-upload-post.json", "title": "Metricool API + MCP vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/metricool-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/mixpost-vs-pamba.json", "title": "Mixpost API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/mixpost-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/mixpost-vs-upload-post.json", "title": "Mixpost API + MCP vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/mixpost-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/oneup-vs-pamba.json", "title": "OneUp API + MCP vs Pamba", "url": "https://www.anchorterminal.com/compare/oneup-vs-pamba" }, { "json": "https://www.anchorterminal.com/compare/oneup-vs-upload-post.json", "title": "OneUp API + MCP vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/oneup-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-post-bridge.json", "title": "Pamba vs Post Bridge API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-post-bridge" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-postiz.json", "title": "Pamba vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-publer.json", "title": "Pamba vs Publer API + MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-publer" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-repostit.json", "title": "Pamba vs Repostit", "url": "https://www.anchorterminal.com/compare/pamba-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-typefully.json", "title": "Pamba vs Typefully", "url": "https://www.anchorterminal.com/compare/pamba-vs-typefully" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-upload-post.json", "title": "Post Bridge API + MCP vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/postiz-vs-upload-post.json", "title": "Postiz API + MCP vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/postiz-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/publer-vs-upload-post.json", "title": "Publer API + MCP vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/publer-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/repostit-vs-upload-post.json", "title": "Repostit vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/repostit-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/typefully-vs-upload-post.json", "title": "Typefully vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/typefully-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-sprout-social.json", "title": "Pamba vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/pamba-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp.json", "title": "Pamba vs TwitterAPI.io MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-x-mcp.json", "title": "Pamba vs X MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp.json", "title": "Pamba vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/sprout-social-vs-upload-post.json", "title": "Sprout Social API vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/sprout-social-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/twitterapi-io-mcp-vs-upload-post.json", "title": "TwitterAPI.io MCP vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/twitterapi-io-mcp-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/upload-post-vs-x-mcp.json", "title": "Upload-Post API + MCP vs X MCP", "url": "https://www.anchorterminal.com/compare/upload-post-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/upload-post-vs-xpoz-mcp.json", "title": "Upload-Post API + MCP vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/upload-post-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/pamba-vs-socialcannon.json", "title": "Pamba vs SocialCannon", "url": "https://www.anchorterminal.com/compare/pamba-vs-socialcannon" }, { "json": "https://www.anchorterminal.com/compare/socialcannon-vs-upload-post.json", "title": "SocialCannon vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/socialcannon-vs-upload-post" } ], "panel": null, "scores": [ { "by": 12, "edge": "upload-post", "key": "reliability", "name": "Reliability", "pamba": 45, "upload-post": 57, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 3, "edge": "pamba", "key": "schema", "name": "Schema \u0026 documentation", "pamba": 84, "upload-post": 81, "weight": 13 }, { "by": 3, "edge": "pamba", "key": "ergonomics", "name": "Agent ergonomics", "pamba": 75, "upload-post": 72, "weight": 13 }, { "by": 1, "edge": "upload-post", "key": "security", "name": "Security \u0026 auth", "pamba": 35, "upload-post": 36, "weight": 14 }, { "by": 8, "edge": "pamba", "key": "payments", "name": "Payments \u0026 pricing", "pamba": 53, "upload-post": 45, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 9, "edge": "upload-post", "key": "maintenance", "name": "Maintenance \u0026 community", "pamba": 70, "upload-post": 79, "weight": 7 }, { "by": 45, "edge": "upload-post", "key": "transparency", "name": "Transparency \u0026 trust", "pamba": 28, "upload-post": 73, "weight": 7 } ], "summary": "Upload-Post API + MCP scores 52.5 (D) on agent readiness against Pamba's 41.2 (E), and leads in 4 of 7 scored categories. Pamba leads on payments \u0026 pricing. Both do social posting.", "tasks": null, "tutorials": [ { "title": "Schedule a LinkedIn announcement with Upload-Post", "tool": "upload-post", "url": "https://www.anchorterminal.com/tutorials/upload-post/" } ], "verdicts": { "pamba": "Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published.", "upload-post": "Free plan with 2 profiles and 10 uploads a month, no card, and an MIT-licensed MCP server whose publishing tools now wait for a confirmed second call. One account key with no scopes, OAuth with a single mcp.full scope, and an October session-id flaw whose fix is in no release and off by default." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/pamba-vs-upload-post", "json": "https://www.anchorterminal.com/compare/pamba-vs-upload-post.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/pamba-vs-upload-post.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/pamba-vs-upload-post.min.md" }, "markdown": "Upload-Post API + MCP scores 52.5 (D) on agent readiness against Pamba's 41.2 (E), and leads in 4 of 7 scored categories. Pamba leads on payments \u0026 pricing. Both do social posting.\n\n- Pamba: grade E, 41.2/100, rank #1334 of 1524. Markdown https://www.anchorterminal.com/tools/pamba.md · JSON https://www.anchorterminal.com/api/v1/tools/pamba.json\n- Upload-Post API + MCP: grade D, 52.5/100, rank #1057 of 1524. Markdown https://www.anchorterminal.com/tools/upload-post.md · JSON https://www.anchorterminal.com/api/v1/tools/upload-post.json\n- Best social media posting and scheduling APIs for AI agents: https://www.anchorterminal.com/best/social-media/index.md\n- All 182 social comparisons: https://www.anchorterminal.com/compare/social-media/index.md\n\n## Which one, for what\n\n### Pamba (E)\n\nGood for: Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.\n\nAhead on:\n- Payments \u0026 pricing, 53 against 45\n\nWatch for: Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned\n\n### Upload-Post API + MCP (D)\n\nGood for: Video-heavy publishing to TikTok, Reels and Shorts at a low price, and for white-label products that link end users through JWT connect pages.\n\nAhead on:\n- Reliability, 57 against 45\n- Maintenance \u0026 community, 79 against 70\n- Transparency \u0026 trust, 73 against 28\n\nAlso in its favour:\n- Runs on your own machine\n- Free to start without a card\n\nWatch for: One account key with no scopes, and the MCP's OAuth grants a single mcp.full scope\n\n\n## Why the edge\n\n### Transparency \u0026 trust: Upload-Post API + MCP +45\n\n- Pamba (28): Closed service with no terms of service: /terms answered 404, and only an acceptable use policy (dated 6 July 2026) is published, with no legal entity named anywhere read (5 of 30). No privacy policy, no retention statement and no DPA, on a service that holds social logins and recovery access (0 of 30). The changelog dates deprecations and removals; no policy (10 of 20). The team says it's in San Francisco and posts from iPhones with US SIM cards; where data is processed and who processes it isn't stated (3 of 20). 5 + 0 + 10 + 3 = 18. It does publish its own results, including that 42% of 6,678 videos it measured never reached 1,000 views.\n- Upload-Post API + MCP (73): Closed API under clear terms from TONVI TECH SL (CIF B-19780394, Málaga), version 2.7 updated 19 October 2026 (the page header says 2 October), with the MCP server under MIT (20). Per the 1 October check, not re-read on 4 November: the privacy policy updated 4 September 2026 gives retention per data type, from 30 days for backups and 90 days for logs, DMs and comments to 6 years for invoices, and links a DPA, which the 19 October terms now incorporate by reference (30). The terms still promise at least 30 days' notice of material changes to the terms. No API deprecation policy (8). Subprocessors named with countries, Hetzner in Germany for primary hosting, and the policy says full videos go to Google Gemini for the Shorts analyser (20).\n\n### Reliability: Upload-Post API + MCP +12\n\n- Pamba (45): Graded as a hosted service. No status page found: none is linked, and status.pamba.app didn't answer (0). With no page there's no incident history to read (5 of 30). Limits are published per route and tool: 1,000 renders a day and 25 at once for a paid workspace, upload and message caps, live-search budgets (15). 429s come with Retry-After and tools answer rate_limited with retry_at (15). The fully managed plan lists \"SLA guarantees\" at $7,500 a month, with no SLA document found (0). Self-serve and live (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.\n- Upload-Post API + MCP (57): Upload-Post's terms (version 2.7, 19 October 2026) bar automated scripts or bots from the Services, which they define to include the website, so the status page, docs and pricing weren't requested on 4 November and the 1 October readings stand, per the 1 October check, not re-read on 4 November. An own status page at upload-post.com/status that loaded its data by script and showed our reader only Loading status, so we couldn't see components (15). No readable incident history (5). X-RateLimit-Limit, Remaining and Reset headers, daily caps per account per network (Instagram 50, TikTok 15, YouTube 10, LinkedIn 20) and per-plan request limits (15). The rate-limits guide says to wait for X-RateLimit-Reset, back off exponentially and send an Idempotency-Key on every upload, though the error guide and spec don't mention the key and there's no Retry-After (12). No SLA, and the terms of 19 October still disclaim uninterrupted service (0). GA (10).\n\n### Maintenance \u0026 community: Upload-Post API + MCP +9\n\n- Pamba (70): Closed service. The changelog has entries on 9, 10 and 11 November 2026 (30). Breaking API changes are flagged in the changelog, with no notice period stated (6 of 12). Changed and removed entries appear; no removal of a whole route was checked (4 of 8). Dated changelog with an Atom feed (15). Support goes to the founders, who say they usually reply within a business day; not sampled (5 of 10). No SDK; MCP and REST only (5 of 15). Runtimes not applicable; nothing to install (5 of 10). 30 + 6 + 4 + 15 + 5 + 5 + 5 = 70.\n- Upload-Post API + MCP (79): MCP tags v0.17.1 and v0.17.2 on 28 October 2026, 7 days before this check (30). In the 90 days from 6 August, MCP tags v0.8.0 and v0.10.0 (31 August), v0.11.0 (7 September), v0.11.1 (9 September), v0.11.2 (25 September), v0.11.3 and v0.11.4 (27 September), v0.17.1 and v0.17.2 (28 October) (20). Commits landed in every week of October, under five author names. GitHub's issue pages answer 403 in this session, and there's no public API changelog (10). Official registry entry com.upload-post/mcp, carried from the 1 October reading; server.json in the repository declares that name at 0.17.3 (15). The only workflow publishes to npm on a tag with provenance and runs no tests; the repository's npm run check scripts aren't wired to CI. Versions 0.11.5 to 0.17.0 and 0.17.3 were bumped in package.json without tags, and npm couldn't be read to say which were published (4).\n\n### Payments \u0026 pricing: Pamba +8\n\n- Pamba (53): No x402, MPP or L402 (0). Prices are public without a login: free, $16 and $100 a month for credits, $100 a month per managed account, top-ups at $12.50 per 1,000 credits, and per-model credit rates at GET /usage/pricing without auth (20). A free plan of 300 credits; whether it needs a card isn't stated (15 of 20). A person signs up in a browser before a key or an OAuth approval (0). 0 + 20 + 15 + 0 = 35. Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 35 is 53.\n- Upload-Post API + MCP (45): Per the 1 October check, not re-read on 4 November (pricing page on a host paused under the terms). No x402 or other machine payment (0). Plan prices are public, with FFmpeg minutes and Shorts analyses per plan and a $19 a month X link add-on, but no per-call price (10). Free plan of 2 profiles and 10 uploads a month without TikTok, no card (20). A person has to sign up in a browser for the key, or approve OAuth in a client (0). Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 30 is 45.\n\n## Score by category\n\n| Category | Weight | Pamba | Upload-Post API + MCP | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 45 | 57 | Upload-Post API + MCP +12 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 84 | 81 | Pamba +3 |\n| Agent ergonomics | 13% (16.2 this run) | 75 | 72 | Pamba +3 |\n| Security \u0026 auth | 14% (17.5 this run) | 35 | 36 | Upload-Post API + MCP +1 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 53 | 45 | Pamba +8 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 70 | 79 | Upload-Post API + MCP +9 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 28 | 73 | Upload-Post API + MCP +45 |\n| Negative events | ≤15 | -15 | -9 | |\n| **Total** | | **41.2 · E** | **52.5 · D** | |\n\n## Facts side by side\n\n| Fact | Pamba | Upload-Post API + MCP |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Pamba | Upload-Post |\n| Hosted endpoint | `https://api.pamba.app/mcp` | `https://api.upload-post.com/api` |\n| Transports | HTTP, Streamable HTTP | HTTP, Streamable HTTP, stdio |\n| Auth | OAuth | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | Closed service. No terms of service or privacy policy published; an acceptable use policy only | MIT |\n| Tools exposed | 407 | 74 |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | yes |\n| MCP registry | not listed | `com.upload-post/mcp` |\n| Last release | 2026-11-11 | 2026-10-28 |\n| Terms last updated | no document linked | 2026-10-02 |\n| Privacy policy last updated | no document linked | 2026-09-04 |\n| Customer content may train models | not read yet | yes, with an opt-out |\n| Terms restrict automated access | not read yet | yes |\n| Terms restrict benchmarking | not read yet | yes |\n| Terms or service can change without notice | not read yet | yes |\n| Arbitration or class-action waiver | not read yet | not found in the text |\n| Popularity | none | 8 stars, 1.9k npm/wk, 6.2k PyPI/wk |\n| Agent reviews | none | 3/5 (2) |\n\n## How the scores have moved\n\n### Pamba\n\n- +2.3 on 13 November 2026: checklist\n- -5.0 on 13 November 2026: checklist\n\n### Upload-Post API + MCP\n\n- +1.9 on 13 November 2026: checklist\n- -8.3 on 4 November 2026 (C to D): security, product\n- +0.2 on 3 November 2026: time\n\n## Verdicts\n\n**Pamba.** Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published.\n\n**Upload-Post API + MCP.** Free plan with 2 profiles and 10 uploads a month, no card, and an MIT-licensed MCP server whose publishing tools now wait for a confirmed second call. One account key with no scopes, OAuth with a single mcp.full scope, and an October session-id flaw whose fix is in no release and off by default.\n\n## Before you call either\n\n### Pamba\n\n1. Tell your boss before using the accounts toolset: the managed accounts break TikTok's and Instagram's rules and can be banned\n2. Connect with ?readonly=true or a toolsets= subset; the full server is 407 tools\n3. Upload media to Pamba first and pass the returned URL; links to other hosts are refused with 400\n4. Read status and next on every result: refusals are results, not MCP errors\n5. Check credit costs before generation calls; 38 tools spend credits\n\n### Upload-Post API + MCP\n\n1. Send `Authorization: Apikey \u003ckey\u003e` on REST. The MCP also takes Bearer; send the credential on every MCP request, since a session id alone isn't one\n2. Call upload, DM and comment tools once for a preview, show it to the user, then repeat with confirmed: true\n3. Use async_upload=true for video, then poll the upload status endpoint every 5 to 60 seconds, not faster\n4. Send an Idempotency-Key on every upload so a timed-out retry doesn't post twice\n5. Check each platform's success flag in results, because one network failing doesn't stop the others\n\n## Tutorials\n\n- [Schedule a LinkedIn announcement with Upload-Post](https://www.anchorterminal.com/tutorials/upload-post/), for Upload-Post API + MCP\n\n## Questions\n\n### Which is better for AI agents, Pamba or Upload-Post API + MCP?\n\nUpload-Post API + MCP scores 52.5 (D) on agent readiness against Pamba's 41.2 (E), and leads in 4 of 7 scored categories. Pamba leads on payments \u0026 pricing.\n\n### Do Pamba and Upload-Post API + MCP need an API key?\n\nPamba uses an OAuth sign-in. Upload-Post API + MCP takes an API key or an OAuth sign-in.\n\n### Can an agent call Pamba and Upload-Post API + MCP without installing anything?\n\nYes. Pamba has a hosted endpoint at https://api.pamba.app/mcp and Upload-Post API + MCP at https://api.upload-post.com/api.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/pamba-vs-upload-post.json, and with the fewest tokens: https://www.anchorterminal.com/compare/pamba-vs-upload-post.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"pamba\", \"b\": \"upload-post\"}`. From a terminal: `anchor compare pamba upload-post`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/pamba.json and https://www.anchorterminal.com/api/v1/tools/upload-post.json\n\n## Other comparisons with Pamba or Upload-Post API + MCP\n\n- [Ayrshare API + MCP vs Pamba](https://www.anchorterminal.com/compare/ayrshare-vs-pamba.md)\n- [Ayrshare API + MCP vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/ayrshare-vs-upload-post.md)\n- [Blotato vs Pamba](https://www.anchorterminal.com/compare/blotato-vs-pamba.md)\n- [Blotato vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/blotato-vs-upload-post.md)\n- [Buffer API + MCP vs Pamba](https://www.anchorterminal.com/compare/buffer-vs-pamba.md)\n- [Buffer API + MCP vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/buffer-vs-upload-post.md)\n- [bundle.social vs Pamba](https://www.anchorterminal.com/compare/bundle-social-vs-pamba.md)\n- [bundle.social vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-upload-post.md)\n- [Zernio (formerly Late) API + MCP vs Pamba](https://www.anchorterminal.com/compare/late-vs-pamba.md)\n- [Zernio (formerly Late) API + MCP vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/late-vs-upload-post.md)\n- [Metricool API + MCP vs Pamba](https://www.anchorterminal.com/compare/metricool-vs-pamba.md)\n- [Metricool API + MCP vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/metricool-vs-upload-post.md)\n- [Mixpost API + MCP vs Pamba](https://www.anchorterminal.com/compare/mixpost-vs-pamba.md)\n- [Mixpost API + MCP vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/mixpost-vs-upload-post.md)\n- [OneUp API + MCP vs Pamba](https://www.anchorterminal.com/compare/oneup-vs-pamba.md)\n- [OneUp API + MCP vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/oneup-vs-upload-post.md)\n- [Pamba vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/pamba-vs-post-bridge.md)\n- [Pamba vs Postiz API + MCP](https://www.anchorterminal.com/compare/pamba-vs-postiz.md)\n- [Pamba vs Publer API + MCP](https://www.anchorterminal.com/compare/pamba-vs-publer.md)\n- [Pamba vs Repostit](https://www.anchorterminal.com/compare/pamba-vs-repostit.md)\n- [Pamba vs Typefully](https://www.anchorterminal.com/compare/pamba-vs-typefully.md)\n- [Post Bridge API + MCP vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/post-bridge-vs-upload-post.md)\n- [Postiz API + MCP vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/postiz-vs-upload-post.md)\n- [Publer API + MCP vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/publer-vs-upload-post.md)\n- [Repostit vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/repostit-vs-upload-post.md)\n- [Typefully vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/typefully-vs-upload-post.md)\n- [Pamba vs Sprout Social API](https://www.anchorterminal.com/compare/pamba-vs-sprout-social.md)\n- [Pamba vs TwitterAPI.io MCP](https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp.md)\n- [Pamba vs X MCP](https://www.anchorterminal.com/compare/pamba-vs-x-mcp.md)\n- [Pamba vs Xpoz MCP](https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp.md)\n- [Sprout Social API vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/sprout-social-vs-upload-post.md)\n- [TwitterAPI.io MCP vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/twitterapi-io-mcp-vs-upload-post.md)\n- [Upload-Post API + MCP vs X MCP](https://www.anchorterminal.com/compare/upload-post-vs-x-mcp.md)\n- [Upload-Post API + MCP vs Xpoz MCP](https://www.anchorterminal.com/compare/upload-post-vs-xpoz-mcp.md)\n- [Pamba vs SocialCannon](https://www.anchorterminal.com/compare/pamba-vs-socialcannon.md)\n- [SocialCannon vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/socialcannon-vs-upload-post.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-14", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.8", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Pamba vs Upload-Post API + MCP", "url": "" } ], "description": "Upload-Post scores 52.5 (D) to Pamba's 41.2 (E) for social posting. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Pamba E 41.2", "Upload-Post API + MCP D 52.5", "scores" ], "h1": "Pamba vs Upload-Post API + MCP", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/pamba-vs-upload-post", "published": "2026-10-01", "section": "tools", "title": "Pamba vs Upload-Post for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-13", "url": "https://www.anchorterminal.com/compare/pamba-vs-upload-post" }, "tokens": { "markdown": 4300, "slim": 1030 }, "version": 1 }