Plum vs PocketSmith MCP server

Plum 0

Graded on the interface an outside agent can use. Plum has none, so context cost, pagination, errors, retries and defaults have nothing to score (0 on each line). This says nothing about the app for people.

PocketSmith MCP server 55

66 tools on the full server (5), with a separate 40-tool read-only server (5 back). Pagination guide for the REST API (12 of 20). Errors guide (10 of 20). Deletes always need the user's approval, and a read-only server exists; annotations not read (15 of 20). One-click directory listings in Claude and ChatGPT; SDKs not checked (8 of 15). 10 + 12 + 10 + 15 + 8 = 55.

Plum 0

Graded on the interface an outside agent can use. With none for Plum, the credential, least-privilege, injection and audit lines score nothing (0 of 30, 0 of 20, 0 of 15, 0 of 15), whatever the app does for its owner. The security programme line doesn't need an interface and is scored. For the record, bank access is read-only through TrueLayer and identity checks use Onfido. withplum.com/.well-known/security.txt returns 404, and no disclosure policy, bug bounty or certification was found (0 of 20).

PocketSmith MCP server 53

OAuth, revocable, tokens encrypted and stateless; scopes not published (22 of 30). A separate read-only server and approval before any delete (18 of 20). Transaction descriptions come from banks and payees; no injection guidance (5 of 15). No audit log of agent calls found (0). A security page with an email for reports and no bug bounty; no security.txt (404) (8 of 20). 22 + 18 + 5 + 0 + 8 = 53.

Plum 10

Graded on the interface an outside agent can use. Plum has no API, MCP server or A2A endpoint for an outside agent, so the contract, description, typed-input and example lines score nothing (0 of 25, 0 of 20, 0 of 15, 0 of 15). That is a statement about agent access, not about the app for people. withplum.com/llms.txt lists products and legal pages (10). With no agent interface there is nothing to version (0 of 15).

PocketSmith MCP server 46

Schemas not read without sign-in (15 of 25). llms.txt and a Markdown copy of every docs page (10). Capabilities described by task, not per tool (8 of 20). Inputs not verifiable (5 of 15). Usage examples and an errors guide for the REST API (8 of 15). The developer changelog's newest entry is almost eight years old (0). 15 + 10 + 8 + 5 + 8 + 0 = 46.

Plum 60

Read with the hosted lines. Statuspage at status.withplum.com with components for bank connections, deposits, withdrawals, investments and the app, and history (20). From 16 July to 14 October 2026 one incident, support chat degraded on 3 and 4 August, marked no impact (30). No limits published and no interface for an outside agent (0). No overload or retry guidance (0). No SLA (0). On the App Store since 2019 and not labelled beta (10).

PocketSmith MCP server 40

Statuspage at status.pocketsmith.com with components for web, mobile and API, feeds and email, none for MCP (15). One 'Unexpected outage and degraded performance' on 18 August 2026 in the last 90 days (10). API rate limits not found in the docs read (0). An Errors guide in the developer docs, no retry guidance found (5 of 15). No SLA found (0). Not labelled beta (10). 15 + 10 + 0 + 5 + 0 + 10 = 40.

Plum 59

Closed service under terms with Plum Fintech Limited and Saveable Limited, undated (15). The privacy policy, also undated, names a DPO, keeps AML records for five years after the relationship ends, and says anonymised transaction data may be shared commercially (18 of 30). No deprecation policy or dated notices found (2 of 20). TrueLayer, GoCardless, Onfido, ComplyAdvantage and the e-money providers are named; transfers outside the EEA are described without locations (8 of 20).

PocketSmith MCP server 52

Closed service; the privacy policy names PocketSmith Limited (15). Data handling is described by purpose and names Plaid and Salt Edge as feed providers, with no retention periods (15 of 30). No deprecation policy found (2 of 20). Bank-feed processors named, no full subprocessor list (10 of 20). 15 + 15 + 2 + 10 = 42.