# SignWell vs Youtrust (slim)

> Youtrust scores 70.4 (BB) to SignWell's 63.1 (B) for e-signatures. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/signwell-vs-youtrust.md (~5,150 tokens) · this version ~3,330 tokens · JSON https://www.anchorterminal.com/compare/signwell-vs-youtrust.json · canonical https://www.anchorterminal.com/compare/signwell-vs-youtrust
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-04
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

Youtrust scores 70.4 (BB) on agent readiness against SignWell's 63.1 (B), and leads in 5 of 7 scored categories. SignWell leads on maintenance & community. Both do e-signatures.

- SignWell: B 63.1, rank #477 of 1349 · https://www.anchorterminal.com/tools/signwell.min.md
- Youtrust: BB 70.4, rank #183 of 1349 · https://www.anchorterminal.com/tools/youtrust.min.md
- SignWell, good for A small software team adding signing to its own product at a per-document price with no seat minimum, embedded signing, requesting and template editing, and bulk send to 500 recipients. Ahead on Maintenance & community, 77 against 61. Also Runs on your own machine.
- Youtrust, good for A European product team that needs eIDAS-level signatures, seals and identity checks hosted in France, with a typed API and read-only keys for agents that track status. Ahead on Schema & documentation, 90 against 75; Agent ergonomics, 63 against 52; Security & auth, 68 against 47; Payments & pricing, 40 against 35; Transparency & trust, 72 against 65. Also Agent-ready, a grade of BB or better.

| Category | SignWell | Youtrust |
| --- | --- | --- |
| Reliability (16%) | 87 | 85 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 75 | 90 |
| Agent ergonomics (13%) | 52 | 63 |
| Security & auth (14%) | 47 | 68 |
| Payments & pricing (10%) | 35 | 40 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 77 | 61 |
| Transparency & trust (7%) | 65 | 72 |

| Fact (where they differ) | SignWell | Youtrust |
| --- | --- | --- |
| Vendor | Docsketch, LLC (DBA SignWell) | Youtrust SAS |
| Hosted endpoint | `https://www.signwell.com/api/v1` | `https://api.yousign.app/v3` |
| Transports | HTTP, stdio | HTTP, Streamable HTTP |
| Auth | API key | OAuth or key |
| Pricing | Pay per use | Paid |
| Licence | Proprietary service under SignWell's terms and conditions. The MCP server, the CLI and the Ruby, Node, Python and PHP SDKs on GitHub are MIT | Proprietary hosted service under the Youtrust Terms of Use and Subscription. The OpenAPI file's licence field reads proprietary |
| Tools exposed | 16 | none |
| Read-only variant documented | no | yes |
| MCP registry | `io.github.Bidsketch/signwell-mcp` | not listed |
| Last release | 2026-10-29 | 2026-10-21 |
| Terms last updated | 2025-08-22 | no date given |
| Privacy policy last updated | 2026-05-28 | no date given |
| Terms or service can change without notice | yes | not found in the text |
| Popularity | 1 stars, 270 npm/wk | none |
| Agent reviews | 3.5/5 (4) | none |

Why the edge:
- Security & auth, Youtrust +21: SignWell 47 (One API key sent in the `X-Api-Key` header, created under Settings, API, and revocable per the 401 entry in the status table. No scopes, expiry, read-only keys or OAuth flow for API clients were found (18 of 30). The pricing page lists user roles and permissions, and `draft` and `test_mode` limit what a call does. The MCP server creates drafts only and asks for confirmation before send, recipient changes and delete, but the API itself has no approval step (8 of 20). Signer-entered values and decline messages come back through the API, and no guidance on untrusted content was found (3 of 15). Each completed document has an audit trail with IP address, timestamp and email. The security page mentions access logs. No log of API calls was found (8 of 15). The security page states SOC 2 Type II and a third-party HIPAA audit, with the report sent on request. No security.txt, disclosure policy or bug bounty was found, and the webhook hash covers only the event type and time (10 of 20). security.txt still returned 404 on 2 November 2026; the other lines rest on the 9 October check. 18 + 8 + 3 + 8 + 10 = 47.); Youtrust 68 (Bearer API keys with an Organization or Workspace scope and a Read-Only or Full-Access permission, separate per environment, created only by Admins and Owners, and OAuth for the AI connector with revocation in account settings. No expiry or rotation guidance found (26 of 30). Read-Only keys, workspace scoping, draft-then-activate, and the AI connector's examples ask before sending. The Developer MCP's execute-request runs any call with the key's full permissions, activation, cancellation and deletion included, and the API has no approval step (14 of 20). Signer names, field answers and documents return through the API, Safe String rules strip HTML, URLs and email addresses from inputs, and no injection guidance was found (4 of 15). Audit trails per signature request and signer, downloadable, plus consumption records; no log of API calls or key use was found (8 of 15). PGP-signed security.txt, a bug bounty and annual technical audits on the security page, eIDAS certification as a trust service provider, hosting in France. ISO 27001 was not named on the pages read (16 of 20). 26 + 14 + 4 + 8 + 16 = 68.)
- Maintenance & community, SignWell +16: SignWell 77 (SDK 0.2.0 tags for Node, Python and Ruby on 29 October 2026, MCP server v0.3.8 on 22 October and new account operations in the reference on 13 October (30). In the 90 days from 4 August, MCP versions 0.3.4 to 0.3.8 (24 September to 22 October), Ruby 0.1.2 (28 September) and the four 0.2.0 SDK tags (19 and 29 October) (20). No public API changelog. Support is by email, phone or video call on every plan per the vendor, and the GitHub repositories showed no open issues per the 9 October check (6 of 15). Four official SDKs, a CLI and an MCP server in the official MCP registry under `io.github.Bidsketch`, which lists 0.3.8 (15). The Node SDK and MCP server publish from tags through release workflows with lockfiles. We did not read the current CI result (6 of 10). 30 + 20 + 6 + 15 + 6 = 77.); Youtrust 61 (Read as a closed service. The changelog's newest entries are dated 21 October 2026 (30). Ten entries between 13 and 21 October 2026 (20). A help centre, contact@youtrust.com in the OpenAPI contact block, a changelog RSS feed and a feedback form for the AI connector. No public issue tracker (8 of 15). No official SDK; the GitHub organisation holds no client library and the docs point to generators and Postman (0 of 15). The OpenAPI file is current with the October changes and the MCP setup page was updated on 7 September 2026 (3 of 10). 30 + 20 + 8 + 0 + 3 = 61.)
- Schema & documentation, Youtrust +15: SignWell 75 (Public OpenAPI 3.0.1 file at developers.signwell.com with 28 operations since Get Account and Update Account were added (reference pages dated 13 October 2026), and one security scheme (25). llms.txt and a Markdown twin of every reference page (10). Each operation has a description that states its purpose and some conditions, such as which recipients can still be updated, though none says when not to use a call (12 of 20). Request bodies are typed with required fields and 27 enums, with a free-form `metadata` object (11 of 15). The file carries 79 examples and documents 400, 401, 404, 409, 422 and 429 responses, and the getting started page has a status code table and a 422 error example (12 of 15). The version is in the path as `v1` with a written promise that v1 keeps working. No public API changelog was found (5 of 15). 25 + 10 + 12 + 11 + 12 + 5 = 75.); Youtrust 90 (A public OpenAPI 3.0.0 file with 178 operations on 114 paths, a bearer scheme and 282 enums (25). developers.youtrust.com serves llms.txt, a per-section llms.txt and a Markdown twin of every page (10). Every operation has a description, 28 of them under 40 characters, and the guides explain the signature request lifecycle, when to use templates and the Tolerant Reader rule (14 of 20). Required fields, 282 enums, a Safe String type with stated rules, and a free-form metadata object (13 of 15). 1,307 examples in the file, every operation documents 400, 401, 403, 404, 405, 429 and 500, the error page gives the type, detail and invalid_params shape with retry guidance per code, and a list of error types is published (15). v3 in the path, a versioning page with compatibility rules, a Deprecated tag in the file, and a changelog with ten entries dated 13 to 21 October 2026 and an RSS feed, with no removal timeline (13 of 15). 25 + 10 + 14 + 13 + 15 + 13 = 90.)
- Agent ergonomics, Youtrust +11: SignWell 52 (Responses can't be trimmed by field. `url_only` on the completed PDF call returns a link in place of the file (10 of 25). `limit` (default 10, maximum 50) and `page` exist on the two bulk send lists only. List Documents is marked `x-internal` in the vendor's SDK copy of the description and is absent from the public reference (8 of 20). A status code table, 422 errors keyed by field and a 429 message give an agent enough to recover (15 of 20). No idempotency keys. `test_mode` and `draft` make trial calls safe, and the MCP server's 16 tools carry readOnlyHint and destructiveHint annotations with `confirm_send`, `confirm_update` and `confirm_delete` inputs (6 of 20). A create call needs files, recipients and at least one field. Official SDKs exist for Ruby, Node, Python and PHP, now at 0.2.0 (PHP 19 October, Node, Python and Ruby 29 October 2026) (13 of 15). 10 + 8 + 15 + 6 + 13 = 52.); Youtrust 63 (List calls take limit and filters, and a signature request's documents, signers and fields are fetched by their own calls, so responses stay moderate. No field selection (14 of 25). Cursor pagination with limit and after on 26 list operations, with status, workspace_id, created_at and date range filters (20). Errors carry a type an agent can branch on, a detail and invalid_params naming the field and reason, with guidance to retry only 500 and 503 (17 of 20). No idempotency keys. A request is a draft until activate, pause and cancel are explicit calls, and the MCP tools' annotations couldn't be read (6 of 20). A first send takes four calls (create, add document, add signer with fields, activate), identity and seal options add more, and there is no official SDK in any language (6 of 15). 14 + 20 + 17 + 6 + 6 = 63.)
- Transparency & trust, Youtrust +7: SignWell 65 (The service is closed under terms and conditions last revised on 22 August 2025 that name Docsketch, LLC and Oregon law. The CLI, MCP server and SDKs are MIT (17 of 30). The privacy policy of 28 May 2026 names AWS for hosting, says data is processed in the United States and lists 15 sub-processors. Retention is stated only as while the account is active or as needed, and no DPA was found on the pages read (18 of 30). No deprecation policy or dated notice was found beyond the promise that v1 keeps working. The terms allow the service to be changed or discontinued with or without notice (3 of 20). Sub-processors are listed with addresses and purposes, 13 in the United States, one in Malta and one in Canada (16 of 20). Not re-read on 2 November 2026. 17 + 18 + 3 + 16 = 54.); Youtrust 72 (Closed service under Terms of Use and Subscription updated 2 July 2026 that name Youtrust SAS under French law, with the previous version linked. The OpenAPI file's licence reads proprietary (15 of 30). The privacy policy names Youtrust SAS of Caen, lists retention periods by purpose (the contract term plus five years in France and ten in Germany and Italy for some records), links a list of subprocessors, and the security page says hosting is exclusively in France with evidence files archived at Arkhinéo (22 of 30). The versioning page says deprecated endpoints and properties keep working and are not planned for removal, compatible changes arrive without notice, and the terms describe an end-of-life notice for old platform versions with no period (10 of 20). A subprocessor list is linked from the privacy policy, hosting is in France at AWS EMEA's French branch per the legal notice, and no notice period for new subprocessors was found (17 of 20). 15 + 22 + 10 + 17 = 64.)
- Payments & pricing, Youtrust +5: SignWell 35 (No x402, MPP or L402 (0). A per-unit price is public, from $0.85 an API document down to $0.20 with monthly volume, with no seat or monthly minimum (20). The free account includes 3 API documents a month and unlimited test mode. The API pricing page says the 25 free documents a month need a card on file, and we did not run the signup flow to see whether the free account asks for one (15 of 20). A person has to sign up in a browser and copy the key from Settings (0). The API pricing page, re-read on 2 November 2026, is unchanged. 0 + 20 + 15 + 0 = 35.); Youtrust 40 (Read with the hosted rubric. No x402, MPP or L402 (0). API plan prices are public without login, Plus from €104 a month and Pro from €129 with €2 per extra signature (20). The sandbox trial lasts 40 days and needs no credit card per the API pricing page (20). A person signs up in a browser and an Admin creates the key there (0). 0 + 20 + 20 + 0 = 40.)