SandBase vs Unified.to MCP Server

SandBase 48

The editorial half. The catalogue service, routing, billing, API, MCP server, Agents runtime and sandboxes are closed; the CLI, bridge, skill, catalogue, examples and SDKs are Apache-2.0. The terms (14 October 2026) name AXIOMCLOUD PTE. LTD. under Singapore law and cover agents, scraping APIs, provider licences and billing, with no registration number or address on any page read. Paid, Nevermined and Monid earned 17 for closed platforms with open SDKs (17 of 30). The privacy policy (30 October 2026) names the company, lists the customer content it handles and says the information an operation needs goes to the selected provider. It states no retention periods ('We do not claim a universal retention duration'), says only that it 'does not grant SandBase an unrestricted right' to use private content, and asserts no transfer mechanism. It agrees with the terms but leaves retention and training open. OpenRouter earned 15 where the policies settled storage, and Monid 5 where they were silent on run data (12 of 30). No deprecation policy or dated notices. The terms promise notice of material changes and say that beta parts of the service 'may change, have quotas or be discontinued', and the pricing page promises notice before sandbox pricing changes (3 of 20). The policy names Cloudflare, Google and GitHub sign-in, Stripe, Airwallex, Google Analytics 4 and PostHog (United States), but not the hosting provider, other data locations or the model and data providers. Monid earned 6 and Nevermined 14 (9 of 20). 17+12+3+9 = 41. The provenance half is computed from the provenance block.

Unified.to MCP Server 67

The editorial half. Closed service under Terms of Service that name Unified API Inc. and Ontario law. Two off because the terms carry no date and bar sending financial or medical information and birth dates through a service sold for accounting and HR data (13). The privacy policy has an MCP section, says end-customer data is not stored and no models are trained, and gives retention periods by plan. The DPA of 19 March 2026 promises breach notice within 72 hours and deletion within a reasonable period on request. The security page says no data is stored at rest, ever, while the policy lists stored credentials, configuration and logs, and the page says Unified runs on AWS while the sub-processor list also names Render (22). No deprecation policy. ?token= carries a Deprecation header with no end date, a field deprecation notice was published in November 2025, and SSE was removed on the day it was announced (8). Ten sub-processors with locations, dated 2 October 2025, and three named regions. The DPA gives 15 days' notice of new sub-processors on a best-efforts basis (18). The terms, privacy policy, DPA and sub-processor list were not re-read on 2 November 2026. 13 + 22 + 8 + 18 = 61.

SandBase 68

Read for a hosted service with an open CLI and SDKs. sandbaseai/cli tagged v0.3.9 on 7 November 2026, npm @sandbaseai/cli 0.3.8 was published on 25 October, and the catalogue repository refreshed on 8 November (30). Tags v0.1.14 to v0.1.17 on 15 and 19 August, v0.3.0 to v0.3.6 on 11 and 12 October, v0.3.8 on 24 October and v0.3.9 on 7 November (20). The platform is closed and GitHub's API refused the graders, so issue queues are unread and the 0 to 15 scale for closed services applies. No public changelog for the API or MCP server, support by GitHub Discussions, issue forms and Discord (untested), and every merged pull request came from a sandbaseai branch, with commits from two people under three account names. Paid earned 5 with a support channel and no changelog, and Monid 6 with merged outside pull requests (5 of 15). The official MCP registry couldn't be read (the fetch needed an approval that didn't come), so presence there scores absent although server.json declares io.github.sandbaseai/cli. Official SDKs in Python, TypeScript and Go exist only in the GitHub repository at 0.1.0, a week old, and the TypeScript README says to copy the file until the npm package is published (5 of 15). CI runs lint, tests, a build and a package audit that rejects lifecycle scripts, with a lockfile and three runtime dependencies, and npm publishing is configured with provenance. CI results weren't read (8 of 10). 30+20+5+5+8 = 68.

Unified.to MCP Server 84

MCP changelog entry on 30 October 2026 (30). 13 dated entries in the 90 days from 4 August, including 23 September, 7, 12, 17 and 23 October 2026 (20). A closed service with a daily site changelog, a public Discord for support and a stated response within 24 hours on the Test plan, per the 9 October check (12). to.unified/core is in the official MCP registry under the vendor's domain namespace, re-read on 2 November (15). The docs date all seven API SDKs 21 September 2026 per the 9 October check. The sample MCP client repository was last changed on 29 August 2025 and its README still documents the removed dc option (7). 30 + 20 + 12 + 15 + 7 = 84.

SandBase 63

Hosted lines, graded on the HTTP API and the remote MCP server at api.sandbase.ai/v1/mcp, the surfaces an agent calls. status.sandbase.ai is a live Better Stack page with a 90-day view of the website, the API, the docs and the blog, and no component for the MCP path or sandbox.sandbase.ai. Monid earned 15 for a live Better Stack page that didn't monitor its MCP host (15 of 20). Read on 8 November 2026, it showed all services operational, the API at 99.957 per cent over 30 days and 99.983 per cent over 90, and 'No incidents reported' for September, October and November 2026. That is under 20 minutes of API downtime in the last 30 days and no outage of an hour, so minor incidents at most (20). The rate-limits page says requests a minute are assigned per organisation over a one-minute sliding window, shared by its keys, with a video concurrency limit, and publishes no numbers. Paid and Monid earned 7 for limits described without numbers (7 of 15). A 429 carries {"error":"organization rate limit exceeded"}, Retry-After is 'not guaranteed' and honoured when present, and the docs give exponential backoff with jitter and say not to retry a state-changing request without documented idempotency. Idempotency-Key is taken on Agents writes, session events and cancel, not on POST /v1/run, which spends money. Monid earned 11 on the same pattern (11 of 15). No SLA, and the terms promise no uptime, response time or availability (0). No beta or preview label on the API or the MCP server (10). 15+20+7+11+0+10 = 63.

Unified.to MCP Server 73

Read with the hosted lines. status.unified.to on Honeybadger lists seven components, the API and the admin app in three regions and the authentication page. The MCP server has no component of its own (20). Re-read on 2 November 2026, the page lists one incident in three months, API performance issues on 13 August 2026, resolved in an hour, and none in September, October or November. Its detail page is closed by robots.txt and was not read, so it is counted as minor (20). Workspace limits are published per plan, from 500 to 10,000 requests a minute (15). The docs describe exponential backoff with jitter on 429 and say Unified does not queue or retry. No Retry-After header and no idempotency key were found (8). No uptime SLA is published. The pricing page says SLAs come with a custom Enterprise plan (0). The server launched on 1 June 2025 and carries no beta label (10). 20 + 20 + 15 + 8 + 0 + 10 = 73.

SandBase 81

Read on the MCP tools, with the HTTP API where a line covers it. Seven tools (sandbase_discover, sandbase_inspect, sandbase_run, sandbase_run_get, sandbase_runs, sandbase_account, sandbase_run_cancel) with one-line descriptions, from the bridge's built-in copy and the skill, which agree; the live tools/list wasn't read. Ten or fewer compact tools (25). sandbase_discover filters by query, type and vendor with a limit, sandbase_run_get pages a run's output by cursor and limit, sandbase_runs by limit and offset, account history by page up to 100, and Agents lists by cursor. Other output sizing depends on each provider's parameters, and the skill sends large results to the CLI's -o file. Monid took 18 with more filters and no paging of run output (18 of 20). Bridge errors are isError results naming the cause and the next step (sign in again, top up, raise the key's spending limit, wait 10 to 30 seconds), and a 402 separates a key's spending limit from an empty balance. The API's platform errors are a bare string with no code or retryable flag (16 of 20). Idempotency keys on Agents writes, session events, cancel and Agent Service runs (sandbase_run_cancel requires one, and the CLI generates one for service runs), and the bridge refuses to resend a run once it may have reached the server, but POST /v1/run and sandbase_run take no key and no tool carries readOnlyHint or destructiveHint. Smithery earned 10 with idempotent upserts and safe client retries (10 of 20). A run needs only a tool name and arguments. SDKs for Python, TypeScript and Go sit in sandbaseai/sandbase at 0.1.0, installed from GitHub and on no package registry, and the OpenAI, Anthropic and E2B SDKs work by changing the base URL. Monid took 8 with the CLI alone (12 of 15). 25+18+16+10+12 = 81.

Unified.to MCP Server 71

One HubSpot connection lists 81 tools, about 133 KB of definitions without output schemas and 403 KB with them, which scores 5. Eight back for the tools and permissions filters, which take wildcards such as list_*,get_* and which the docs tell users to set (defer_tools applies only to the REST tool list) (13). List tools take limit, offset, a fields selection, updated_gte, sort, order and query. Pages hold 100 records at most and there is no cursor or total (18). An unauthenticated call to a tool returns an error asking the client to authenticate, and the REST status table explains 401, 403, 429 and 501. Tool error results are not documented (11). All 81 previewed tools set readOnlyHint, destructiveHint, idempotentHint and openWorldHint. Creates are marked not idempotent and there is no idempotency key (15). 62 required fields across 420 properties, and API SDKs in seven languages. Every option travels as a URL parameter (14).

SandBase 45

Standard keys (sk- and 64 hex characters) act for one organisation with no user-selectable scopes, can carry an expiry and a spending limit, are shown once and are revoked permanently in the console. CLI Login keys from the browser approval (device secret plus PKCE S256) are scoped to mcp:invoke and answer 403 insufficient_scope outside it. No OAuth for the MCP server and no API for managing keys. Above plain revocable keys, below OpenRouter's 25 with OAuth PKCE and a management API (22). The OpenAPI file's generateContent operation 'also accepts x-goog-api-key and the key query parameter for Google SDK compatibility', noting headers are safer, and all four Gemini operations list a GoogleQueryApiKey scheme, read on 8 November 2026. A secret in a URL query string is a documented option, so 10 off (12 of 30). Per-key spending limits and expiry, the organisation's funding boundary and a monthly limit on auto top-up bound spend, and an agent can't lift a key's limit by topping up. No read-only key, per-period budget, per-run cap, allowlist of tools or providers or approval step before a paid run. Monid earned 16 with per-period budgets, a per-run cap and read-only scopes, which SandBase lacks (12 of 20). Runs return scraped pages and social posts from third parties, and neither the skill nor the docs read say to treat them as untrusted. Monid took 3 with none (3 of 15). Request history lists each request's status and cost, sandbase_runs and account history return runs with cost, GET /v1/tasks/{task_id}/cost gives a task's cost, and billing records export as CSV. No key-level audit (created by, last used) was found. Monid earned 13 with key usage records (12 of 15). security.txt answered a client error. SECURITY.md in sandbaseai/sandbase names the SDKs, examples, catalogue and API as in scope for GitHub private vulnerability reporting with acknowledgement within 3 business days, and the CLI repository has its own. No bug bounty or certification found. Paid earned 6 for a reporting address without security.txt (6 of 20). 12+12+3+12+6 = 45.

Unified.to MCP Server 53

The workspace API key reaches all connections and the whole account, and it is still the credential for a connection's data tools. Since the 9 October check the docs describe OAuth sign-in for MCP clients, with dynamic client registration, PKCE (S256), mcp:read and mcp:write scopes that filter the tool list and 24-hour tokens, but it serves only the Core management tools. With the connection-scoped token and the scoped, one-hour enterprise tokens this gives 25, up from 22. Ten off because ?token= in the URL remains a documented option, deprecated with no end date (15). permissions and tools limit the tool list, OAuth and enterprise scopes hide tools a token may not call, and connections are isolated from one another. No approval step for writes was found (14). Tool results are third-party content. hide_sensitive removes PII, and no prompt-injection guidance was found (4). API call logs kept 30 to 365 days by plan, readable through management tools and streamable to Datadog on Pro and Scale. The docs warn that a workspace key leaves no per-person audit trail (10). SOC 2 Type II and yearly penetration tests are stated, per the 9 October check. security.txt still returns 404, no bounty or disclosure policy was found, and the trust centre was not read (10). 15 + 14 + 4 + 10 + 10 = 53.

SandBase 40

No x402, MPP or L402 on the home page, pricing, billing, llms.txt or the OpenAPI paths; the balance is funded through Stripe or Airwallex checkout (0). Prices per million tokens, per image, per seconds of video or per call on public pages without a login, such as anthropic/claude-sonnet-5.5 at $1.70 in and $8.50 out per million tokens, and inspect returns each price before a run (20). Every organisation gets 100 free calls a day on eligible data APIs, which a zero-balance organisation can still use per the skill, and Start is $0. No card requirement was found on the pricing page or the billing guide, which asks for a saved card only for auto top-up. Nevermined earned 20 for a free plan with no card requirement found (20). A person approves a browser sign-in, through the CLI's flow or the console, before any key exists, and no keyless or programmatic route was found (0). 0+20+20+0 = 40.

Unified.to MCP Server 48

No x402, MPP or L402 (0). Plan prices and overage rates per 1,000 API calls are public, and each tool call counts as one request. Two off because every plan price is shown with a plus sign and Enterprise is on contract (18). The pricing page now says the 30-day free trial needs no credit card, and an agent's own signup starts a 30-day Test plan with Sandbox integrations (20, up from 12). The agent signup page, updated 14 October 2026, lets an agent call POST /agent/signup with no credential and get a workspace API key, and since 17 October signup_unified_workspace on /mcp?signup=true does the same. The workspace reaches only Sandbox integrations with mock data, and a person must claim it to activate Production integrations or keep it past 30 days. An agent can't reach real data on its own, which sits below mem0's and sponge-wallet's unclaimed accounts that do real work (20) and pulumi-esc's and maritime's temporary accounts with real access (15). Half, as context-dev and typesense, where a person completes the step that makes access useful (10 of 20, up from 0). 0 + 18 + 20 + 10 = 48.