Pendo vs Userpilot

Pendo 28

No machine-readable contract can be read. The Engage API's Postman collection is fetched by the documentation page's script with only a Run in Postman button, so it isn't a published contract under this run's reading, and the MCP input schemas need a paid subscription (0 of 25). www.pendo.io/llms.txt exists but is marketing copy with a section telling AI assistants when to recommend Pendo, and no Markdown docs were found (3 of 10). The MCP tools reference (updated 3 November 2026) gives each of 96 tools a purpose, example prompts and limits, and some entries say when to use another tool. Per-request API descriptions are no longer counted (12 of 20). No typed input schema or attribute table can be read. The tools reference states required IDs and some valid values in prose only (0 of 15). Example prompts for every tool and help articles for the 400 and timeout errors, with the collection's saved responses and status table no longer counted (5 of 15). The API path is v1 and the MCP path v0, with monthly release notes but no API changelog (8 of 15). 0+3+12+0+5+8 = 28.

Userpilot 71

Every API reference page embeds an OpenAPI 3.0 definition, though no standalone spec file was found (20 of 25). llms.txt and Markdown versions of every page (10). Endpoint pages state their purpose and the MCP docs say what each permission allows; the MCP tool definitions weren't read because that needs a session (12 of 20). Request bodies are typed, mostly as strings and string arrays with few enums (9 of 15). An error reference covers 400, 401, 422 and 429 with causes, and pages carry examples (12 of 15). /v1 paths and dated SDK release notes; no API changelog was found (8 of 15). 20+10+12+9+12+8 = 71.

Pendo 50

Graded as a hosted service on the MCP server and the Engage API. Statuspage site with API and MCP components in each of five regional environments, read from the page on 4 November (20). The incident feed lists six incidents from 6 August to 4 November 2026, each scoped to a subset of users, one region or one function. They are intermittent sign-outs for some US users (2 September), latency in the US region affecting login, guide delivery and event processing (14 September), guide targeting for a subset of US visitors (21 September), mobile pairing (1 October), authentication errors on new MCP connections for some customers from 16:49 on 1 October to 05:19 on 2 October, with existing connections unaffected, and Account and Visitor reports failing to load (4 November). All partial, so minor only (20). No request rate limits found for the API or the MCP server (0). The earlier 429 reading came from the Engage API's Postman collection, which the documentation page loads by script and this run doesn't read, and no 429 or retry guidance was found on the readable pages (0). No SLA found on the public legal pages, and the contract centre wasn't read (0). The MCP server has been generally available since April 2026 (10). 20+20+0+0+0+10 = 50.

Userpilot 82

Graded on the hosted service with the hosted lines. Better Stack status page at status.userpilot.io with components for ingestion in three regions, the SDKs, the web application APIs and the website (20). From August to November 2026 the page shows only scheduled maintenance windows of two to four hours, with no incidents; the MCP server isn't a component (30). 600 requests a minute per token for the real-time APIs, but no numbers for MCP or export (12 of 15). 429 documented with exponential backoff guidance; no Retry-After or idempotency guidance (10 of 15). The SLA is a custom Enterprise contract term, not published (0). The MCP server is 1.0.0 in the registry with no beta label (10). 20+30+12+10+0+10 = 82.

Pendo 5

No x402, MPP or L402 (0). Paid plans are priced on request, and the only published plan is Free (0). Pendo Free needs no card but excludes the API and integrations, and the MCP server is for paid customers, so the free plan doesn't reach the graded surface. The 30-day trial goes through sales (5 of 20). An admin must sign in and enable access in a browser (0). Total 5.

Userpilot 30

No x402, MPP or L402 (0). Plan prices are public ($299 and from $849 a month), with no per-unit prices (10). 14-day free trial with no card required (20). Signup and OAuth approval happen in a browser (0). 0+10+20+0 = 30.

Pendo 41

96 tools named in the reference earns 5, plus 5 back for the separate read-only and write switches and Command Centre tools being off by default (10 of 25). Documented date range and row limits, saved segments as filters, and offset paging with a hasMore flag on usage tools (10 rows by default, up to 200, offset up to 10,000) (14 of 20). Help articles explain the 400 "missing jzb" and timeout errors. The collection's status table is no longer counted (8 of 20). No idempotency keys, and tool annotations couldn't be read without a subscription. Orchestrate journeys are created as drafts (3 of 20). No official API client libraries found. The SDKs Pendo publishes are for data capture (6 of 15). 10+14+8+3+6 = 41.

Userpilot 60

The tool count isn't published; the docs say the assistant can search hundreds of extra read-only operations on demand, which reads as dynamic loading. Without the list we give the middle band (15 of 25). Export jobs filter by date range, users, events and segments, and job lists paginate (14 of 20). A documented error reference (13 of 20). No deletes or admin through MCP by design; annotations weren't readable and no idempotency keys were found (10 of 20). The HTTP APIs have no official server-side SDK; client SDKs for web and six mobile frameworks (8 of 15). 15+14+13+10+8 = 60.

Pendo 60

The AI release notes (updated 3 November 2026) carry October 2026 entries for the MCP server, among them promoteDiscoveryApp, labels and assignees on Listen tools, resolveObjectInstance, and the rename of listCountables to listPagesFeaturesAndEvents. Entries are dated by month, counted from their month as settled in this run (30). Several MCP entries in September and October 2026 (20). Dated release notes, a community site and technical support, with no public issue tracker (10 of 25). Not checked in the official MCP registry, and no API client libraries, though the Claude Code plugin repository had its last commit on 30 October 2026 (6 of 15). The plugin repository is active, with 28 commits since 6 August, no tags and no CI workflow (4 of 10). 20+20+10+6+4 = 60.

Userpilot 79

io.userpilot/mcp 1.0.0 was published to the registry on 11 October 2026 (30). The iOS SDK alone has dated releases on 6 August, 2 September, 27 September and 2 October 2026 (20). A closed service with no public API changelog, support by email and chat (8 of 25). Verified io.userpilot namespace in the official MCP registry (15). Client SDKs are current; there is nothing else public to inspect (6 of 10). 30+20+8+15+6 = 79.

Pendo 77

Closed service with a published Software Services Agreement, dated August 2022 on the page, which points to the contract centre for current terms (15 of 30). Privacy policy effective 4 November 2024, a DPA updated 24 February 2025, raw event retention of 7 years adjustable from 1 to 84 months, and an AI article stating that providers keep data for essentially zero days. These agree with each other, per the 7 October check (22 of 30). The October 2026 release notes announce listCountables renamed to listPagesFeaturesAndEvents, with the old name kept as a deprecated alias. A dated notice with no stated period takes 15, as settled in this run (15 of 20). Five data regions and the AI providers are named (Azure OpenAI, OpenAI, Amazon Bedrock, Google Gemini), but the sub-processor list sits on a Trust Centre page that we couldn't read (12 of 20). 15+22+15+12 = 64.

Userpilot 59

A closed service with terms dated 23 April 2024 (15 of 30). The privacy policy of 11 March 2025 names a DPO and two sub-processors (AWS and Cloudflare), while the security page names AWS, Google Cloud and Stripe. The DPA is on request and no customer-data retention period is stated (14 of 30). No deprecation policy or dated API notices found (3 of 20). Sub-processors are named with addresses but not data locations, though an EU ingestion endpoint exists (10 of 20). 15+14+3+10 = 42.