SendLayer vs SMTP2GO API + MCP

SendLayer 48

Graded with the hosted lines. A Cronitor status page at status.sendlayer.com with components for the app, SMTP, tracking links, the website and each plan's sending IPs, and a history (15 of 20, see below). The 90 days from 8 August hold 98 automated outage entries, 13 of them on SendLayer Services Health, most on per-plan IP monitors, all marked resolved but with no durations or write-ups, so their size can't be judged (5 of 30). Send limits per minute, hour and day are published per plan, plus recipient and size caps (15). 429 appears in the error code list, with no Retry-After, backoff guidance or idempotency for sends (3 of 15). No SLA found (0). The API is at v1 with no beta label (10). The status page's uptime columns showed no data on 6 November, so the component line takes 15 of 20 rather than 20. Total 48.

SMTP2GO API + MCP 82

Statuspage at smtp2gostatus.com with five components (email sending, API servers, SMS, website, member dashboard) and history (20). From 6 August to 4 November the page posted 17 incidents. It labels them minor or none, except a 15 October softbounce problem with SMTP clients sending bare line feeds and two dashboard Activity reporting delays (21 and 23 September), which it labels major. Each names some customers, one region, one hostname, the dashboard or one class of traffic, so all read as partial (20, 0 on 1 October). Numbers for /activity/search (60 a minute), new paid accounts (1,000 a day until reviewed) and free accounts (200 a day, 25 an hour without a verified domain), with optional per-key send rates, but no general API limit (12). 429 with an IP timeout of at least a minute and advice to pause and lower the request rate, which is backoff guidance with no Retry-After or idempotency key (10). The terms (section 4) guarantee 100 per cent monthly availability excluding scheduled maintenance, with a 5 per cent credit per 30 minutes of downtime (10). GA (10). Total 20+20+12+10+10+10 = 82.

SendLayer 40

The Node and Python SDKs were last released as 1.1.0 on 21 August 2026, 77 days before this check (20). One SDK release in the 90 days and no dated changelog (0 of 20). A closed service with a support form and docs updated through 2026, but no public changelog (5 of 15). Not in the official MCP registry (search for sendlayer returned nothing on 6 November). Official SDKs in five languages (10 of 15). The SDK repositories exist on GitHub under sendlayer; their CI wasn't read (5 of 10). Total 40.

SMTP2GO API + MCP 73

Changelog entry on 27 October 2026 (a read-only sending_status property on /api_keys responses), 8 days before this check (30). Four dated entries in the 90 days from 6 August, on 7 September, 10 October, 13 October and 27 October (20, 0 on 1 October). Public changelog and ticket, chat and phone support (10). smtp2go-nodejs 1.0.0 (5 June 2026) and the smtp2go Python package, whose last tag is v2.3.1 from 2022 with an untagged attachment change in September 2025 (10). No CI configuration in either SDK repository (3). Total 73.

SendLayer 49

Closed service with terms naming SendLayer, LLC under Florida law (15 of 30). The privacy policy is undated, says data is kept as long as the account is active or as needed, and names no retention periods, DPA or processors; only the pricing page gives log retention per plan (8 of 30). No deprecation policy or dated notices (0). No sub-processors or data locations disclosed (0). Total 23.

SMTP2GO API + MCP 75

Closed service with published terms and an MIT Node SDK (20). The privacy policy, last updated 23 July 2023, says headers and a sample of one email in a thousand are kept 35 days and that EEA users' personal data stays in the EEA. DPA on request (18). Dated deprecation notices in the changelog (12 June 2025, spam_rejects and bounce_rejects deprecated but still returned) with no stated notice period, read at this run's 15 for dated notices without a period. The June 2026 breaking changes had no notice and are charged under negative events (15, 8 on 1 October). Data centres in the US, Europe and Australia, no subprocessor list (8). Total 20+18+15+8 = 61.

SendLayer 38

Plain revocable API keys per domain, several allowed, sent in a header; no scopes, expiry or rotation feature beyond creating and deleting keys (20 of 30). No read-only key or approval step (0 of 20). The API returns event data, not received mail (10 of 15). Email logs kept 3, 15 or 30 days by plan, and no log of API calls was found (8 of 15). No security.txt (404), disclosure policy, bug bounty or certification found (0 of 20). Total 38.

SMTP2GO API + MCP 59

API keys with per-endpoint permissions and their own send rate, IP allow lists for API and SMTP separately since 30 July, and keys masked in API responses since 22 June. The key can also travel in the JSON body, which the official Node SDK does by default (24). The MCP docs ask for a narrowly scoped key and list the three permissions a sender needs (14). No inbound mail, so the tools return only account data (10). Activity reporting for 30 days on paid plans, no per-key audit log found (6). A blog post (21 November 2023, updated 15 June 2026) says SMTP2GO achieved ISO 27001 and ISO 9001 certification, naming no certifying body; the privacy policy doesn't mention it. No security.txt (404), disclosure policy or security page (/security/ 404) found, so a bare certification claim with no disclosure route (5). Total 59.

SendLayer 20

No x402, MPP or L402 (0). Plan prices are public but only as annual plans, with no per-email overage price; accounts are upgraded automatically at the limit (10 of 20). A free trial of 200 emails is offered through checkout; whether it needs a card couldn't be read, since robots.txt disallows the add-to-cart URLs (10 of 20). A person signs up and authorises a domain in a browser (0). Total 20.

SMTP2GO API + MCP 40

No x402, MPP or L402 (0). Plan prices and overage ($1 and $0.85 per 1,000) published without login (20). Free plan of 1,000 emails a month, 200 a day, with no card (20). Browser signup and a review of new paid accounts, no autonomous route (0).

SendLayer 68

OpenAPI file at developers.sendlayer.com/api-reference/sendlayer.json (version 1.0.1) covering four paths, send, events and webhooks (25). llms.txt and Markdown copies of every developer page (10). Operation summaries say what each call does; nothing says when not to use one, and the hosted MCP server's tool definitions aren't public (10 of 20). Parameters are typed but without enums or limits, and the event filter is a free string (7 of 15). Code samples in five languages and a table of 35 error codes, but the spec documents only 200 responses (11 of 15). Version in the path and in the spec, with no public changelog (5 of 15). Total 68.

SMTP2GO API + MCP 59

No public OpenAPI file found, and the hosted MCP sends every call through one generic execute-request tool rather than a typed tool per endpoint (5). llms.txt with about 100 links and Markdown pages (10). Reference pages explain each endpoint, and the MCP's four docs tools let a model look one up before calling it (12). Request bodies through execute-request aren't typed per endpoint (5). A response-codes page and examples per endpoint (12). Dated changelog that flags breaking changes, and v3 in the path (15).