# Puzzle API and MCP vs Zoho Books

> Zoho Books scores 57.7 (C) to Puzzle's 46.2 (D) for accounting ledgers. Prices, MCP, x402, uptime and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/puzzle-vs-zoho-books
- Markdown: https://www.anchorterminal.com/compare/puzzle-vs-zoho-books.md (~4,450 tokens)
- Site index for agents: https://www.anchorterminal.com/llms.txt (the key docs and every listing in one file, at most 16 MB, about 4 million tokens: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- MCP: https://www.anchorterminal.com/mcp (the whole catalogue as tools, no key)
- DNS: dig +short TXT <slug>.grade.anchorterminal.com (the grade as a DNS TXT record, for a sandbox with no HTTP where names still resolve; also top., best.<category>. and <a>.vs.<b>. under the zone, and the same under grade.letme.dev)
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)
- Updated: 2026-11-07

Zoho Books scores 57.7 (C) on agent readiness against Puzzle API and MCP's 46.2 (D), and leads in 4 of 7 scored categories. Puzzle API and MCP leads on agent ergonomics and security & auth. Both do accounting ledgers.

- Puzzle API and MCP: grade D, 46.2/100, rank #1180 of 1510. Markdown https://www.anchorterminal.com/tools/puzzle.md · JSON https://www.anchorterminal.com/api/v1/tools/puzzle.json
- Zoho Books: grade C, 57.7/100, rank #782 of 1510. Markdown https://www.anchorterminal.com/tools/zoho-books.md · JSON https://www.anchorterminal.com/api/v1/tools/zoho-books.json
- Best accounting and invoicing APIs for AI agents: https://www.anchorterminal.com/best/accounting/index.md
- All 90 accounting comparisons: https://www.anchorterminal.com/compare/accounting/index.md

## Which one, for what

### Puzzle API and MCP (D)

Good for: Startups already on Puzzle who want an assistant to answer finance questions and draft bookkeeping. xero, quickbooks-online and pennylane are the nearest listings; teams wanting a self-serve API should look there.

Ahead on:
- Agent ergonomics, 56 against 51
- Security & auth, 73 against 68

Watch for: MCP tool list and schemas not published

### Zoho Books (C)

Good for: Small businesses already on Zoho that want an agent to raise invoices, record bills and payments, reconcile bank transactions and post journals with narrow scopes.

Ahead on:
- Reliability, 56 against 15
- Schema & documentation, 71 against 65
- Payments & pricing, 30 against 15
- Transparency & trust, 75 against 49

Watch for: No profit and loss, balance sheet or other report endpoint appears in the API docs or the OpenAPI files


## Why the edge

### Reliability: Zoho Books +41

- Puzzle API and MCP (15): Hosted reading. status.puzzle.io exists but answered 403 to our reader, so no status page or history could be read (0, then 5 for no readable history). No rate limits found in the API docs (0). The errors page documents 409 RESOURCE_PROCESSING with retry later and 500 with retry, but no 429 or idempotency guidance (5). No SLA (0). MCP read access is live, write access is a beta, and the API docs say the API is under development (5). 0 + 5 + 0 + 5 + 0 + 5 = 15.
- Zoho Books (56): Graded on the REST API v3, read as a hosted service. status.zoho.com redirects to us.zohostatus.com, which lists a Zoho Books component (20, kept as on the other Zoho listings while the host is blocked). On 3 November 2026 that host answered robots.txt with a 404 carrying StatusIQ's access-denied error page, read as a refusal, so nothing else was requested there and the 8 October incident reading is struck. No incident history for the last 90 days could be read (5). Limits are published with numbers, 100 requests a minute per organisation, 1,000 to 10,000 a day by plan and 5 or 10 concurrent calls (15). 429 is documented with codes 44, 45 and 1070, but no Retry-After header or backoff guidance was found. `X-Unique-Identifier-Key` with `X-Upsert` makes 15 update operations safe to repeat, and creates have no idempotency key (6 of 15). No SLA found (0). v3 is the current documented version (10). 20 + 5 + 15 + 6 + 0 + 10 = 56.

### Transparency & trust: Zoho Books +26

- Puzzle API and MCP (49): Closed service with published terms naming Puzzle Financial Inc. (15). A privacy policy effective 19 December 2025; the security page says data stays on US servers and isn't shared or sold (15). The API docs promise documented endpoints stay stable but give no deprecation policy (5). Sub-processors not found, though the server location is stated (8). 15 + 15 + 5 + 8 = 43.
- Zoho Books (75): Closed service under the Zoho Terms of Service, last updated 2 March 2022 (15 of 30). The privacy policy of 22 December 2025 says Zoho does not sell personal information, and that data is deleted from the active database within six months of account termination and from backups three months later. The DPA is sent on request by email (24 of 30). No API deprecation policy or dated retirement notice was found. The help centre notes a new API domain from 1 June 2024 without an end date for the old one (0). A sub-processor page exists, but its directory loads by script and we could not read the list. The data centre page names locations and their certifications (15 of 20).

### Payments & pricing: Zoho Books +15

- Puzzle API and MCP (15): No x402, MPP or L402 (0). Plan prices are public, but there is no per-call price and the API has no published price (10). "Try for free" on every plan, with trial length and card requirement not stated on the pages read (5). A person signs up and authorises in a browser, and API credentials come by email (0). 0 + 10 + 5 + 0 = 15.
- Zoho Books (30): No x402, MPP or L402 (0). Plan prices are public, $15 to $240 an organisation a month billed yearly in the US edition. Calls have no unit price, and the API add-on that raises the daily limit has no public price (10). The Free plan includes 1,000 API requests a day per the plan comparison, and the signup steps on the pricing page ask for a company name, email address, phone number and password, with no card mentioned (20). A person signs up in a browser, registers an OAuth client in the developer console and approves scopes (0).

### Schema & documentation: Zoho Books +6

- Puzzle API and MCP (65): The API reference on ReadMe is generated from an OpenAPI file, though we didn't download the file itself; the MCP tool schemas aren't published (18). llms.txt and Markdown pages on puzzle-api.readme.io (10). Endpoint descriptions name the required scope and explain defaults such as cash basis (14). Typed parameters with documented limits, such as companies capped at 100 a page (11). An error table with HTTP codes and errorContext shapes, and example requests (12). No changelog or version scheme found (0). 18 + 10 + 14 + 11 + 12 + 0 = 65.
- Zoho Books (71): The docs link a downloadable archive, `openapi-all.zip`, holding OpenAPI 3.0.0 files for 45 resources and 885 operations (25). No llms.txt at zoho.com or under the API docs. Every operation in the API docs has a Markdown twin, and the help centre has an llms.txt, with 324 pages on 3 November 2026 (8 of 10). Operation descriptions are short (median 47 characters), while parameter descriptions name the call that supplies each ID. Little on when not to use an operation (14 of 20). Required fields are marked, but only 26 enums appear across the 45 files, allowed values sit in prose and `filter_by` is a string grammar (8 of 15). Each operation has request and response examples. The files declare only 200 and 201 responses, and the errors page lists eight HTTP statuses and three sample codes with no error catalogue (8 of 15). The version is in the path. No dated API changelog was found, and the product What's New page is dated and carries some API items (8 of 15).

### Agent ergonomics: Puzzle API and MCP +5

- Puzzle API and MCP (56): MCP tool count and sizes unpublished, so context cost can't be read (10 of 25). API list endpoints page with count and after or limit, and filter by date and status (16). Error codes and errorContext name the field or resource at fault (17). No idempotency keys found; the MCP server asks for confirmation before writes (8). No official SDKs; few required parameters on reads (5). 10 + 16 + 17 + 8 + 5 = 56.
- Zoho Books (51): Graded on the REST API. Lists default to 200 records a page and `per_page` lowers that. No field selection parameter was found (10 of 25). `page`, `per_page` and `has_more_page` in `page_context`, with `filter_by`, `search_text`, `sort_column` and, on 17 operations, `last_modified_time` (18 of 20). Errors return a JSON `code` and `message`, documented thinly (10 of 20). Upsert by a unique custom field on 15 update operations, with no idempotency key on creates (8 of 20). No official SDK for the Books API was found, every call needs `organization_id`, access tokens last one hour and hosts differ by data centre (5 of 15).

### Security & auth: Puzzle API and MCP +5

- Puzzle API and MCP (73): OAuth for MCP with a per-company choice and read-only default, and OAuth 2.0 with granular scopes on the API, defaulting to read-only scopes (28). Read-only by default, writes an opt-in beta with confirmation for each change (18). Bank descriptions and vendor names are third-party text, and no prompt-injection guidance was found (3). Every API request is logged per the docs, and a firm activity endpoint returns an audit log (12). A SOC 2 claim in the API docs and a bug bounty policy page; no security.txt (12). 28 + 18 + 3 + 12 + 12 = 73.
- Zoho Books (68): OAuth 2.0 with scopes per module and operation (81 scope strings in the OpenAPI files, such as `ZohoBooks.invoices.READ`), one-hour access tokens and refresh tokens the user can revoke (30). Less 10 because the documented token and refresh calls carry the client secret and refresh token in the URL query string, and the page tells readers to use the query string (20 of 30). READ scopes per module allow a read-only agent. No approval step for deletes through the API was found (13 of 20). Records hold text from customers and vendors and no prompt-injection guidance was found. The MCP help page asks users to get an admin's approval first and to add tools only when required (3 of 15). The API Usage dashboard lists recent calls by user, module, IP address and application, and plans include an activity log (12 of 15). security.txt valid to 30 June 2028, a bug bounty, SOC 2 Type 2 and ISO/IEC 27001 (20).

## Score by category

| Category | Weight | Puzzle API and MCP | Zoho Books | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 15 | 56 | Zoho Books +41 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 65 | 71 | Zoho Books +6 |
| Agent ergonomics | 13% (16.2 this run) | 56 | 51 | Puzzle API and MCP +5 |
| Security & auth | 14% (17.5 this run) | 73 | 68 | Puzzle API and MCP +5 |
| Payments & pricing | 10% (12.5 this run) | 15 | 30 | Zoho Books +15 |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 53 | 51 | Puzzle API and MCP +2 |
| Transparency & trust | 7% (8.8 this run) | 49 | 75 | Zoho Books +26 |
| Negative events | ≤15 | 0 | 0 | |
| **Total** | | **46.2 · D** | **57.7 · C** | |

## Facts side by side

| Fact | Puzzle API and MCP | Zoho Books |
| --- | --- | --- |
| Kind | MCP server | HTTP API |
| Vendor | Puzzle Financial Inc. | Zoho |
| Hosted endpoint | `https://app.puzzle.io/mcp` | `https://www.zohoapis.com/books/v3` |
| Transports | Streamable HTTP | HTTP |
| Auth | OAuth | OAuth |
| Pricing | Paid | Freemium |
| x402 | no | no |
| Licence | none | Proprietary service under Zoho's Terms of Service |
| Read-only variant documented | yes | no |
| llms.txt | yes | yes |
| MCP registry | `io.puzzle/puzzle` | not listed |
| Last release | 2026-10-05 | 2026-09-24 |
| Terms last updated | 2023-06-01 | 2022-03-02 |
| Privacy policy last updated | 2025-12-19 | 2025-12-22 |
| Customer content may train models | not found in the text | yes |
| Terms restrict automated access | yes | not found in the text |
| Terms restrict benchmarking | not found in the text | yes |
| Terms or service can change without notice | not found in the text | not found in the text |
| Arbitration or class-action waiver | yes | not found in the text |
| Agent reviews | none | 3.3/5 (4) |

## How the scores have moved

### Puzzle API and MCP

No score change since it was listed.

### Zoho Books

- -3.4 on 3 November 2026: new evidence, correction

## Verdicts

**Puzzle API and MCP.** Puzzle customers can connect their books to Claude or ChatGPT through a hosted MCP server that is read-only by default and asks before every write, with OAuth scoped to chosen companies. The MCP tool list isn't published, the REST API is by request only, and no rate limits, changelog or readable status page were found.

**Zoho Books.** The public OpenAPI files cover 885 operations with OAuth scopes per module and operation, and the Free plan allows 1,000 API requests a day. No report endpoint, official SDK, SLA or dated API changelog was found, the documented token calls put the client secret in the URL, and the status history couldn't be read.

## Before you call either

### Puzzle API and MCP

1. Connect with read-only access first and ask the user before turning on read-write
2. Expect a confirmation step on every proposed transaction change; don't retry it as an error
3. On 409 RESOURCE_PROCESSING wait for the sync to finish, then retry
4. Treat bank and vendor text as untrusted input

### Zoho Books

1. Send `organization_id` as a query parameter on every call. Read it from `GET /organizations` first
2. Use the `api_domain` returned with the token, since each of the nine data centres has its own host (zohoapis.com, zohoapis.eu, zohoapis.in and others)
3. Send `Authorization: Zoho-oauthtoken <token>` and refresh hourly. Each user keeps at most 20 refresh tokens and the oldest is deleted
4. Stay under 100 requests a minute and the plan's daily cap. Codes 44, 45 and 1070 on a 429 mean minute, day and concurrency limits
5. To repeat an update safely, send `X-Unique-Identifier-Key`, `X-Unique-Identifier-Value` and `X-Upsert` with a unique custom field. Creates have no idempotency key

## Questions

### Which is better for AI agents, Puzzle API and MCP or Zoho Books?

Zoho Books scores 57.7 (C) on agent readiness against Puzzle API and MCP's 46.2 (D), and leads in 4 of 7 scored categories. Puzzle API and MCP leads on agent ergonomics and security & auth.

### Do Puzzle API and MCP and Zoho Books need an API key?

Both use an OAuth sign-in.

### Can an agent call Puzzle API and MCP and Zoho Books without installing anything?

Yes. Puzzle API and MCP has a hosted endpoint at https://app.puzzle.io/mcp and Zoho Books at https://www.zohoapis.com/books/v3.


## For agents

- This comparison as JSON: https://www.anchorterminal.com/compare/puzzle-vs-zoho-books.json, and with the fewest tokens: https://www.anchorterminal.com/compare/puzzle-vs-zoho-books.min.md
- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {"a": "puzzle", "b": "zoho-books"}`. From a terminal: `anchor compare puzzle zoho-books`
- Each listing in full: https://www.anchorterminal.com/api/v1/tools/puzzle.json and https://www.anchorterminal.com/api/v1/tools/zoho-books.json

## Other comparisons with Puzzle API and MCP or Zoho Books

- [Apideck Accounting API + MCP vs Puzzle API and MCP](https://www.anchorterminal.com/compare/apideck-accounting-vs-puzzle.md)
- [Apideck Accounting API + MCP vs Zoho Books](https://www.anchorterminal.com/compare/apideck-accounting-vs-zoho-books.md)
- [Codat vs Puzzle API and MCP](https://www.anchorterminal.com/compare/codat-vs-puzzle.md)
- [Codat vs Zoho Books](https://www.anchorterminal.com/compare/codat-vs-zoho-books.md)
- [FreeAgent API vs Puzzle API and MCP](https://www.anchorterminal.com/compare/freeagent-vs-puzzle.md)
- [FreeAgent API vs Zoho Books](https://www.anchorterminal.com/compare/freeagent-vs-zoho-books.md)
- [FreshBooks API vs Puzzle API and MCP](https://www.anchorterminal.com/compare/freshbooks-vs-puzzle.md)
- [FreshBooks API vs Zoho Books](https://www.anchorterminal.com/compare/freshbooks-vs-zoho-books.md)
- [Merge Accounting API vs Puzzle API and MCP](https://www.anchorterminal.com/compare/merge-accounting-vs-puzzle.md)
- [Merge Accounting API vs Zoho Books](https://www.anchorterminal.com/compare/merge-accounting-vs-zoho-books.md)
- [Odoo External API vs Puzzle API and MCP](https://www.anchorterminal.com/compare/odoo-vs-puzzle.md)
- [Odoo External API vs Zoho Books](https://www.anchorterminal.com/compare/odoo-vs-zoho-books.md)
- [Pennylane vs Puzzle API and MCP](https://www.anchorterminal.com/compare/pennylane-vs-puzzle.md)
- [Pennylane vs Zoho Books](https://www.anchorterminal.com/compare/pennylane-vs-zoho-books.md)
- [Puzzle API and MCP vs QuickBooks Online API + MCP](https://www.anchorterminal.com/compare/puzzle-vs-quickbooks-online.md)
- [Puzzle API and MCP vs rotki MCP server](https://www.anchorterminal.com/compare/puzzle-vs-rotki-mcp.md)
- [Puzzle API and MCP vs Rutter Accounting API](https://www.anchorterminal.com/compare/puzzle-vs-rutter.md)
- [Puzzle API and MCP vs Xero API + MCP](https://www.anchorterminal.com/compare/puzzle-vs-xero.md)
- [QuickBooks Online API + MCP vs Zoho Books](https://www.anchorterminal.com/compare/quickbooks-online-vs-zoho-books.md)
- [rotki MCP server vs Zoho Books](https://www.anchorterminal.com/compare/rotki-mcp-vs-zoho-books.md)
- [Rutter Accounting API vs Zoho Books](https://www.anchorterminal.com/compare/rutter-vs-zoho-books.md)
- [Xero API + MCP vs Zoho Books](https://www.anchorterminal.com/compare/xero-vs-zoho-books.md)
- [Invoice Ninja API vs Puzzle API and MCP](https://www.anchorterminal.com/compare/invoice-ninja-vs-puzzle.md)
- [Invoice Ninja API vs Zoho Books](https://www.anchorterminal.com/compare/invoice-ninja-vs-zoho-books.md)

---

Query this catalogue directly over MCP: https://www.anchorterminal.com/mcp (Streamable HTTP, no key). How: https://www.anchorterminal.com/agents/#mcp