{ "data": { "a": { "slug": "sprout-social", "name": "Sprout Social API", "vendor": "Sprout Social, Inc.", "vendorUrl": "https://sproutsocial.com", "kind": "http-api", "category": "social-media", "summary": "Sprout Social is a social media management suite. Its REST API reads profile and post analytics, inbox messages, listening topics and cases for connected profiles, and creates draft posts with media, on plans that include API access.", "url": "https://www.anchorterminal.com/tools/sprout-social", "markdownUrl": "https://www.anchorterminal.com/tools/sprout-social.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/sprout-social.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/sprout-social.json", "dns": "sprout-social.grade.anchorterminal.com", "license": "Proprietary service under the Sprout Social Developer Terms and Terms of Service", "transports": [ "http" ], "remoteUrl": "https://api.sproutsocial.com", "packages": [], "auth": "mixed", "authNotes": "Access needs a Sprout account on a plan with API access, a user holding the API Permissions permission, and acceptance of the API terms on the API page of Settings. That user then creates an OAuth client or an API token in the same page, with no review by Sprout described. OAuth 2.0 is the recommended route. A client ID and secret are exchanged at identity.sproutsocial.com for a short-lived JWT with the client credentials grant and `scope=organization_id`, or a user-based flow signs a Sprout user in. API tokens are named and can be invalidated. Either credential goes in the `Authorization: Bearer` header. No per-endpoint scopes are documented.", "pricing": "paid", "pricingNotes": "The Sprout API is listed on the Advanced plan at $399 per seat a month and on Enterprise (custom price). Standard is $199 and Professional $299 per seat a month, without the API. The page shows these prices beside an annual billing note. A 30-day trial needs no credit card. Whether the trial includes API access was not established, and there is no sandbox or per-call price (https://sproutsocial.com/pricing/, checked 2026-10-09).", "priceSummary": "$399 / seat-mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API docs, the Developer Terms or the pricing page (checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://api.sproutsocial.com/docs/", "capabilities": [ "social.analytics", "social.comments", "social.media-upload" ], "tags": [ "hosted", "enterprise", "oauth", "closed-source", "status-page", "soc2", "iso27001", "analytics", "listening", "drafts-only" ], "lastRelease": "2026-10-06", "graded": true, "anchor": { "graded": true, "score": 54.8, "grade": "C", "agentReady": false, "rank": 897, "ranked": true, "rankOf": 1510, "categoryRank": 5, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 59, "maintenance": 38, "payments": 20, "reliability": 71, "schema": 51, "security": 61, "transparency": 71 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-04" }, "negative": 0, "verdict": "The API reads analytics, inbox messages, listening topics and cases across the main networks, with OAuth client credentials, field selection and a dated changelog. It creates draft posts only, so a person must publish them in Sprout. Access needs the Advanced plan at $399 per seat a month, and no OpenAPI file or SDK was found.", "bestFor": "Reporting agents that pull profile, post, inbox, listening and case data for a company that already pays for Sprout Social, and for drafting posts a person will approve.", "strengths": [ "OAuth 2.0 client credentials issue short-lived JWT access tokens, and named API tokens can be invalidated in settings", "Rate limits are published as 60 requests a minute and 250,000 a month", "Messages and post requests take a `fields` list and return only `guid` when it is omitted, with `limit` up to 100 and cursor paging", "The status page has a separate Sprout Social API component, and no incident in the 90 days to 9 October 2026 named it", "SOC 2 Type 2, ISO 27001 and ISO 27701 are listed on the trust centre, with a vulnerability disclosure programme on Bugcrowd" ], "weaknesses": [ "Posts can be created only as drafts (`is_draft: true`), so the API cannot publish or schedule a post without a person in Sprout", "API access is listed on the Advanced plan at $399 per seat a month and on Enterprise, with no per-call price", "No OpenAPI file, SDK or MCP server was found in the reviewed documentation", "No idempotency key on post creation, and no `Retry-After` header documented for 429 responses", "The Developer Terms of 9 May 2024 forbid monitoring the API's availability or performance for benchmarking, and combining the API with software Sprout Social has not authorised. Recorded as a fact with no deduction. It matters before any probe is run" ], "agentNotes": [ "Call `GET /v1/metadata/client` first for the customer ID, then `GET /v1/\u003ccustomer ID\u003e/metadata/customer` for profile and group IDs. Every other path needs them", "Send `is_draft: true` on `POST /v1/\u003ccustomer ID\u003e/publishing/posts`. Tell the user the draft waits in the Sprout calendar for a person to publish", "Name the `fields` you want on messages and posts requests. Without the list only `guid` comes back", "Stay under 60 requests a minute and 250,000 a month, and back off on 429 on your own because no `Retry-After` is documented", "Check the response when a draft names several profiles. A profile that cannot take the attached media is dropped with no error" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 54.8 } ], "editorialScores": { "ergonomics": 59, "maintenance": 38, "payments": 20, "reliability": 71, "schema": 51, "security": 61, "transparency": 55 }, "provenanceScore": 86, "checked": { "categories": { "ergonomics": "2026-11-04", "maintenance": "2026-11-04", "payments": "2026-11-04", "reliability": "2026-11-04", "schema": "2026-11-04", "security": "2026-11-04", "transparency": "2026-11-04" }, "last": "2026-11-04", "lastMoved": "2026-10-27", "oldest": "2026-11-04", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://api.sproutsocial.com/v1/metadata/client -H \"Authorization: Bearer $TOKEN\" -H \"Accept: application/json\"" }, "letme": { "capability": "https://letme.dev/social.analytics", "tool": "https://letme.dev/sprout-social" }, "area": "communication", "unitPrices": [ { "item": "Advanced", "unit": "seat-month", "usd": 399, "note": "Cheapest plan that lists the Sprout API. Price shown beside an annual billing note" }, { "item": "Professional", "unit": "seat-month", "usd": 299, "note": "No API access listed" }, { "item": "Standard", "unit": "seat-month", "usd": 199, "note": "No API access listed" } ], "provenance": { "legalEntity": "Sprout Social, Inc.", "domain": "sproutsocial.com", "domainRegistered": "2009-09-22", "endpointOnVendorDomain": true, "terms": "https://sproutsocial.com/legal/api-terms-of-service/", "privacy": "https://sproutsocial.com/legal/privacy-policy/", "statusPage": "https://www.sproutsocialstatus.com/", "changelog": "https://api.sproutsocial.com/docs/changelog/", "securityTxt": "none", "checked": "2026-11-04", "notes": [ "The Sprout Social Developer Terms (last updated 9 May 2024) are the agreement the API docs link, between the developer and Sprout Social, Inc. They sit on top of the Terms of Service (effective 9 May 2025, re-read on 4 November 2026) at https://sproutsocial.com/legal/terms/.", "The website Terms of Use (effective 30 June 2023, https://sproutsocial.com/legal/website-terms-of-use/) govern www.sproutsocial.com and each page linking to them, and bar using \"any robot, spider, or other automatic device, process, or means to access the Site for any purpose\". Read on 4 November 2026 as a ban on automated access, so the other pages were not re-read that day.", "The Terms of Service give the notice address as Sprout Social, Inc., 131 S. Dearborn Suite 700, Chicago, Illinois 60603.", "The privacy policy (last updated 16 September 2026) says it applies to the websites and services, app.sproutsocial.com among them, and that Sprout Social is a data processor for customer data.", "https://sproutsocial.com/.well-known/security.txt answered 404. Reports go through the Bugcrowd programme named in the Responsible Disclosure Policy.", "The API answers at api.sproutsocial.com and tokens come from identity.sproutsocial.com.", "RDAP for sproutsocial.com gives a registration date of 2009-09-22 and GoDaddy Corporate Domains, LLC as registrar." ], "score": 86 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/sprout-social.json", "live": { "slug": "sprout-social", "probe": { "target": "https://api.sproutsocial.com", "method": "get", "lastAt": "2026-11-08T01:14:19.951795421Z", "lastOk": true, "lastStatus": 404, "lastMs": 289, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 283, "p95ms24h": 380, "samples24h": 243, "samples30d": 7274, "days": [ { "date": "2026-10-09", "probes": 85, "ok": 85 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 250, "ok": 250 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 243, "ok": 243 }, { "date": "2026-11-08", "probes": 13, "ok": 13 } ] }, "vendorStatus": { "page": "https://www.sproutsocialstatus.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-08T01:17:26.251976134Z" }, "securityTxt": { "url": "https://sproutsocial.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:00.455612509Z" }, "domain": { "domain": "sproutsocial.com", "registered": "2009-09-22", "source": "https://rdap.verisign.com/com/v1/domain/sproutsocial.com", "checkedAt": "2026-11-01T14:11:49.437570742Z" }, "pages": [ { "url": "https://api.sproutsocial.com/docs/changelog/", "kind": "changelog", "status": 304, "checkedAt": "2026-11-07T13:59:16.842260268Z", "changedAt": "2026-10-31T06:04:22.731741078Z", "fingerprint": "3a407acdff7c" }, { "url": "https://sproutsocial.com/pricing/", "kind": "pricing", "status": 304, "checkedAt": "2026-11-07T14:20:45.352616064Z", "changedAt": "2026-10-29T05:16:21.700997532Z", "fingerprint": "48222d72f8b6" }, { "url": "https://sproutsocial.com/legal/privacy-policy/", "kind": "privacy", "status": 304, "checkedAt": "2026-11-07T14:20:43.425603981Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "c3bb94f08774" }, { "url": "https://sproutsocial.com/legal/api-terms-of-service/", "kind": "terms", "status": 304, "checkedAt": "2026-11-07T14:20:41.154550626Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "51915d0f6e67" } ], "updatedAt": "2026-11-08T01:17:26.251976134Z" } }, "answer": "Sprout Social API scores 54.8 (C) on agent readiness against Xpoz MCP's 39.6 (E), and leads in 4 of 7 scored categories. Xpoz MCP leads on schema \u0026 documentation and payments \u0026 pricing.", "b": { "slug": "xpoz-mcp", "name": "Xpoz MCP", "vendor": "XPOZ", "vendorUrl": "https://xpoz.ai", "kind": "mcp", "category": "social-media", "summary": "Xpoz's hosted MCP server gives an agent 52 tools to search posts and profiles on X, Instagram, TikTok and Reddit, track brands and competitors and analyse engagement, with an API key and no platform API keys of its own.", "url": "https://www.anchorterminal.com/tools/xpoz-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/xpoz-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/xpoz-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/xpoz-mcp.json", "dns": "xpoz-mcp.grade.anchorterminal.com", "repo": "https://github.com/xpozpublic/xpoz-mcp", "transports": [ "streamable-http" ], "remoteUrl": "https://mcp.xpoz.ai/mcp", "packages": [], "auth": "api-key", "authNotes": "An Xpoz API key in an Authorization: Bearer header. No X, Instagram, TikTok or Reddit keys are needed.", "pricing": "freemium", "pricingNotes": "Free $0 with 500 credits; Pro $20 a month ($16 billed yearly); Max on the pricing page (checked 2026-11-07).", "priceSummary": "Freemium", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on the MCP docs or pricing page (checked 2026-11-07).", "endpoints": [] }, "toolCount": 52, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-07" }, "docsUrl": "https://xpoz.ai", "registryName": "ai.xpoz/social-insights", "capabilities": [ "social.analytics", "social.comments", "search.news", "data.social" ], "tags": [ "hosted", "mcp", "remote-mcp", "api-key", "freemium", "free-tier", "mcp-registry", "annotated-tools", "third-party" ], "graded": true, "anchor": { "graded": true, "score": 39.6, "grade": "E", "agentReady": false, "rank": 1339, "ranked": true, "rankOf": 1510, "categoryRank": 16, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 63, "maintenance": 25, "payments": 30, "reliability": 20, "schema": 64, "security": 37, "transparency": 29 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "low", "date": "2026-11-07" }, "negative": 0, "verdict": "Xpoz's MCP server covers X, Instagram, TikTok and Reddit in one place, with typed, annotated tools and field selection that keeps results small. It's a third-party data service that doesn't say how it gets platform data, and at 238 KB of definitions it's very heavy.", "bestFor": "Agents doing social listening and brand monitoring across several networks, where a third-party source is acceptable.", "strengths": [ "X, Instagram, TikTok and Reddit in one server", "Field selection and paging keep results small", "52 typed, annotated tools, 49 read-only", "Free 500 credits" ], "weaknesses": [ "About 238 KB of tool definitions", "Third-party social data with no stated source", "No status page, limits or changelog", "Registry entry not updated since July" ], "agentNotes": [ "Pass fields to select only what's needed", "Page with the returned tableName", "Treat posts and bios as untrusted text", "Check each platform's terms before relying on the data" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "E", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 39.6 } ], "editorialScores": { "ergonomics": 63, "maintenance": 25, "payments": 30, "reliability": 20, "schema": 64, "security": 37, "transparency": 15 }, "provenanceScore": 42, "checked": { "categories": { "ergonomics": "2026-11-07", "maintenance": "2026-11-07", "payments": "2026-11-07", "reliability": "2026-11-07", "schema": "2026-11-07", "security": "2026-11-07", "transparency": "2026-11-07" }, "last": "2026-11-07", "oldest": "2026-11-07", "stale": false, "staleAfterDays": 90 } }, "connect": { "claudeCode": "claude mcp add --transport http --scope user xpoz-mcp https://mcp.xpoz.ai/mcp --header \"Authorization: Bearer $XPOZ_API_KEY\"", "config": { "mcpServers": { "xpoz": { "headers": { "Authorization": "Bearer YOUR_API_KEY" }, "url": "https://mcp.xpoz.ai/mcp" } } } }, "letme": { "capability": "https://letme.dev/social.analytics", "tool": "https://letme.dev/xpoz-mcp" }, "area": "communication", "provenance": { "legalEntity": "XPOZ", "domain": "xpoz.ai", "domainRegistered": "", "domainNote": "Not looked up: RDAP isn't requested under the 1 November 2026 rules.", "endpointOnVendorDomain": true, "terms": "https://xpoz.ai/terms", "privacy": "", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-11-07", "notes": [ "The terms of use don't name a legal entity in the parts read." ], "score": 42 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/xpoz-mcp.json", "live": { "slug": "xpoz-mcp", "probe": { "target": "https://mcp.xpoz.ai/mcp", "method": "mcp-initialize", "lastAt": "2026-11-08T01:14:27.805808175Z", "lastOk": true, "lastStatus": 200, "lastMs": 77, "lastNote": "initialize answered", "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 95, "p95ms24h": 152, "samples24h": 66, "samples30d": 66, "days": [ { "date": "2026-11-07", "probes": 53, "ok": 53 }, { "date": "2026-11-08", "probes": 13, "ok": 13 } ] }, "updatedAt": "2026-11-08T01:14:27.805808175Z" } }, "edges": [ { "by": 51, "category": "reliability", "leads": "sprout-social", "name": "Reliability", "reasons": { "a": "Hosted lines, per the 9 October check, not re-read on 4 November (Sprout's website Terms of Use bar robots and automatic means, so its hosts and its own-domain status page were not requested). A public status page on Atlassian Statuspage with a separate Sprout Social API component and incident history (20). The history feed read on 9 October showed six incidents in its 90 days, traced to Meta, Reddit or Threads, to Sprout's Trellis assistant (one a 22-minute outage on 6 August) and to a two-hour platform performance incident on 20 July that now falls outside the window. None named the API component, so we read the record as minor incidents only (20). The stretch from 9 October to 4 November is unread and not credited. Rate limits are published as 60 requests a minute and 250,000 a month (15). 429 is documented with the advice to slow down, and the media upload section advises exponential back-off on 5xx, but no `Retry-After` header or idempotency key for post creation was found. The 6 is an in-between value, partly met, kept (6). No SLA was found in the Terms of Service or Developer Terms. The security page gives 99.9 per cent uptime as an internal target (0). The API is not labelled beta (10).", "b": "No status page found (0). No history (5). Credit allowances, no rate limits found (5 of 15). No retry guidance (0). No SLA (0). Not labelled beta (10). 0 + 5 + 5 + 0 + 0 + 10 = 20." }, "scores": { "a": 71, "b": 20 } }, { "by": 42, "category": "transparency", "leads": "sprout-social", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed service with published Developer Terms (9 May 2024), Terms of Service (9 May 2025) and website Terms of Use (30 June 2023) from Sprout Social, Inc. (15). Per the 9 October check, not re-read on 4 November. The privacy policy of 16 September 2026 covers the services and states the processor role, the Terms of Service allow account content to be removed within 30 days of termination, and the docs say uploaded media is kept for 24 hours. The policy gives no retention periods, and the DPA is a PDF we did not read (20). The changelog carries dated notices of removed metrics, most of them forced by Meta. The Developer Terms promise only reasonable efforts, when possible, to give notice that a version will stop being supported (8). Hosting is disclosed to the cloud region, all in the United States. The privacy policy lists service providers by category, and a named sub-processor list was not found on the pages read (12).", "b": "Closed service; terms of use read without a legal entity (10 of 30). Data handling not read (5 of 30). No deprecation policy (0). Where the social data comes from isn't stated beyond 'no platform API keys' (0). 10 + 5 + 0 + 0 = 15." }, "scores": { "a": 71, "b": 29 } }, { "by": 24, "category": "security", "leads": "sprout-social", "name": "Security \u0026 auth", "reasons": { "a": "Per the 9 October check, not re-read on 4 November. OAuth 2.0 client credentials issue short-lived JWT access tokens, a user-based flow is available, and API tokens are named and can be invalidated. The only scope documented is `organization_id`, so a credential is not limited to reading or to one endpoint group. Credentials travel in the Authorization header only (22). No read-only credential is documented. The API can write only draft posts and media, the app has approval workflows, and API access can be limited to IP ranges per the product security page (12). The messages and listening endpoints return text written by the public, and no guidance on untrusted content was found (2). The app has a customer-facing audit trail of over fifty events. Whether API calls appear in it was not established (8). Responsible Disclosure Policy with a Bugcrowd vulnerability disclosure programme, SOC 2 Type 2, ISO 27001, ISO 27701 and CSA STAR Level 1 on the trust centre. No security.txt and no paid bounty stated (17).", "b": "One API key (20 of 30). 49 of 52 tools read-only (15 of 20). Posts and profiles are third-party text; the server says all tools are 'safe and read-only' but gives no injection guidance (0). No audit log (0). No security programme found (2 of 20). 20 + 15 + 0 + 0 + 2 = 37." }, "scores": { "a": 61, "b": 37 } }, { "by": 13, "category": "schema", "leads": "xpoz-mcp", "name": "Schema \u0026 documentation", "reasons": { "a": "Per the 9 October check, not re-read on 4 November. No OpenAPI file or other machine-readable description was found in the docs (0). The site's llms.txt lists marketing articles and no API page, and the docs are one HTML page with no Markdown twin (2). Each endpoint group states its purpose and has a Limitations section, and the overview lists what the API does not include (14). Request keys are tabulated with example values, limits and a few enumerations such as `media_type`, but filters are strings in a small expression syntax such as `created_time.in(...)` (9). Every endpoint has an example request and response, and a status code table gives a corrective action for each code. The error body is one free-text string (11). Versioning is MAJOR.MINOR with version response headers, and the changelog is dated from November 2020 to 6 October 2026 (15).", "b": "52 tools read from tools/list with JSON Schema inputs and 42 enums (25). No llms.txt read (0). Server instructions explain paging and field selection (16 of 20). Typed inputs with enums (15). Examples on the home page (5 of 15). Registry 1.4.1 from July, server 3.0.0; no changelog (3 of 15). 25 + 0 + 16 + 15 + 5 + 3 = 64." }, "scores": { "a": 51, "b": 64 } }, { "by": 13, "category": "maintenance", "leads": "sprout-social", "name": "Maintenance \u0026 community", "reasons": { "a": "Per the 9 October check, not re-read on 4 November. The newest changelog entry read is dated 6 October 2026, 29 days before 4 November (30). It is the only dated entry read in the 90 days from 6 August. The two before it are 15 June and 10 June, and entries after 9 October could not be read (0). No SDK, CLI or package of Sprout's own was found to add dated releases. A public changelog, a help centre and a community site are linked. The Developer Terms say they entitle the developer to no support for the API (8). No official SDK was found (0). No package to assess (0).", "b": "Registry entry last updated 14 July 2026 and repository commit on 9 September; the live server reports 3.0.0 (10). No dated releases in 90 days (0). Issues not read (0). Official registry entry ai.xpoz/social-insights (15). Docker packaging only (0). 10 + 0 + 0 + 15 + 0 = 25. Registry presence read from Anchor Terminal's own daily import of the official MCP registry (/api/v1/registry.json, 6 November 2026), not the registry's API." }, "scores": { "a": 38, "b": 25 } }, { "by": 10, "category": "payments", "leads": "xpoz-mcp", "name": "Payments \u0026 pricing", "reasons": { "a": "Per the 9 October check, not re-read on 4 November. No x402 or other machine payment protocol (0). Plan prices are public and the API is listed on Advanced at $399 per seat a month, with no per-call price (10). A 30-day trial needs no credit card, but whether it includes API access was not established, so half marks (10). A person has to sign up, hold the API Permissions permission and accept the API terms in settings (0).", "b": "No machine payment protocol (0). Plan prices public (10). Free 500 credits (20). A person signs in for a key (0). 0 + 10 + 20 + 0 = 30." }, "scores": { "a": 20, "b": 30 } } ], "facts": [ { "a": "HTTP API", "b": "MCP server", "name": "Kind" }, { "a": "Sprout Social, Inc.", "b": "XPOZ", "name": "Vendor" }, { "a": "https://api.sproutsocial.com", "b": "https://mcp.xpoz.ai/mcp", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "API key", "name": "Auth" }, { "a": "Paid", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary service under the Sprout Social Developer Terms and Terms of Service", "b": "none", "name": "Licence" }, { "a": "none", "b": "52", "name": "Tools exposed" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "no", "b": "no", "name": "llms.txt" }, { "a": "not listed", "b": "ai.xpoz/social-insights", "name": "MCP registry" }, { "a": "2026-10-06", "b": "none", "name": "Last release" }, { "a": "2024-05-09", "b": "not read yet", "name": "Terms last updated" }, { "a": "2026-09-16", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not read yet", "name": "Customer content may train models" }, { "a": "yes", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not read yet", "name": "Arbitration or class-action waiver" } ], "faq": [ { "answer": "Sprout Social API scores 54.8 (C) on agent readiness against Xpoz MCP's 39.6 (E), and leads in 4 of 7 scored categories. Xpoz MCP leads on schema \u0026 documentation and payments \u0026 pricing.", "question": "Which is better for AI agents, Sprout Social API or Xpoz MCP?" }, { "answer": "Sprout Social API takes an API key or an OAuth sign-in. Xpoz MCP needs an API key.", "question": "Do Sprout Social API and Xpoz MCP need an API key?" }, { "answer": "Yes. Sprout Social API has a hosted endpoint at https://api.sproutsocial.com and Xpoz MCP at https://mcp.xpoz.ai/mcp.", "question": "Can an agent call Sprout Social API and Xpoz MCP without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 71 against 20", "Security \u0026 auth, 61 against 37", "Maintenance \u0026 community, 38 against 25", "Transparency \u0026 trust, 71 against 29" ], "also": null, "goodFor": "Reporting agents that pull profile, post, inbox, listening and case data for a company that already pays for Sprout Social, and for drafting posts a person will approve.", "slug": "sprout-social", "watchFor": "Posts can be created only as drafts (`is_draft: true`), so the API cannot publish or schedule a post without a person in Sprout" }, { "aheadOn": [ "Schema \u0026 documentation, 64 against 51", "Payments \u0026 pricing, 30 against 20" ], "also": null, "goodFor": "Agents doing social listening and brand monitoring across several networks, where a third-party source is acceptable.", "slug": "xpoz-mcp", "watchFor": "About 238 KB of tool definitions" } ], "history": { "sprout-social": [ { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 54.7, "fromGrade": "C", "to": 54.8, "toGrade": "C" } ], "xpoz-mcp": null }, "job": { "capability": "social.analytics", "name": "Social analytics" }, "others": [ { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-sprout-social.json", "title": "Ayrshare API + MCP vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-xpoz-mcp.json", "title": "Ayrshare API + MCP vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-sprout-social.json", "title": "Blotato vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/blotato-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-xpoz-mcp.json", "title": "Blotato vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-sprout-social.json", "title": "Buffer API + MCP vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/buffer-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-xpoz-mcp.json", "title": "Buffer API + MCP vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/buffer-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-sprout-social.json", "title": "bundle.social vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-xpoz-mcp.json", "title": "bundle.social vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/late-vs-sprout-social.json", "title": "Zernio (formerly Late) API + MCP vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/late-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/late-vs-xpoz-mcp.json", "title": "Zernio (formerly Late) API + MCP vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/late-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/metricool-vs-sprout-social.json", "title": "Metricool API + MCP vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/metricool-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/metricool-vs-xpoz-mcp.json", "title": "Metricool API + MCP vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/metricool-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/mixpost-vs-sprout-social.json", "title": "Mixpost API + MCP vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/mixpost-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/mixpost-vs-xpoz-mcp.json", "title": "Mixpost API + MCP vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/mixpost-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/oneup-vs-sprout-social.json", "title": "OneUp API + MCP vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/oneup-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/oneup-vs-xpoz-mcp.json", "title": "OneUp API + MCP vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/oneup-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-sprout-social.json", "title": "Post Bridge API + MCP vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-xpoz-mcp.json", "title": "Post Bridge API + MCP vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/postiz-vs-sprout-social.json", "title": "Postiz API + MCP vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/postiz-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/postiz-vs-xpoz-mcp.json", "title": "Postiz API + MCP vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/postiz-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/publer-vs-sprout-social.json", "title": "Publer API + MCP vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/publer-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/publer-vs-xpoz-mcp.json", "title": "Publer API + MCP vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/publer-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/socialcannon-vs-sprout-social.json", "title": "SocialCannon vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/socialcannon-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/socialcannon-vs-xpoz-mcp.json", "title": "SocialCannon vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/socialcannon-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/sprout-social-vs-twitterapi-io-mcp.json", "title": "Sprout Social API vs TwitterAPI.io MCP", "url": "https://www.anchorterminal.com/compare/sprout-social-vs-twitterapi-io-mcp" }, { "json": "https://www.anchorterminal.com/compare/sprout-social-vs-upload-post.json", "title": "Sprout Social API vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/sprout-social-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/sprout-social-vs-x-mcp.json", "title": "Sprout Social API vs X MCP", "url": "https://www.anchorterminal.com/compare/sprout-social-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/twitterapi-io-mcp-vs-xpoz-mcp.json", "title": "TwitterAPI.io MCP vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/twitterapi-io-mcp-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/upload-post-vs-xpoz-mcp.json", "title": "Upload-Post API + MCP vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/upload-post-vs-xpoz-mcp" }, { "json": "https://www.anchorterminal.com/compare/x-mcp-vs-xpoz-mcp.json", "title": "X MCP vs Xpoz MCP", "url": "https://www.anchorterminal.com/compare/x-mcp-vs-xpoz-mcp" } ], "panel": null, "scores": [ { "by": 51, "edge": "sprout-social", "key": "reliability", "name": "Reliability", "sprout-social": 71, "weight": 16, "xpoz-mcp": 20 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 13, "edge": "xpoz-mcp", "key": "schema", "name": "Schema \u0026 documentation", "sprout-social": 51, "weight": 13, "xpoz-mcp": 64 }, { "by": 4, "edge": "xpoz-mcp", "key": "ergonomics", "name": "Agent ergonomics", "sprout-social": 59, "weight": 13, "xpoz-mcp": 63 }, { "by": 24, "edge": "sprout-social", "key": "security", "name": "Security \u0026 auth", "sprout-social": 61, "weight": 14, "xpoz-mcp": 37 }, { "by": 10, "edge": "xpoz-mcp", "key": "payments", "name": "Payments \u0026 pricing", "sprout-social": 20, "weight": 10, "xpoz-mcp": 30 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 13, "edge": "sprout-social", "key": "maintenance", "name": "Maintenance \u0026 community", "sprout-social": 38, "weight": 7, "xpoz-mcp": 25 }, { "by": 42, "edge": "sprout-social", "key": "transparency", "name": "Transparency \u0026 trust", "sprout-social": 71, "weight": 7, "xpoz-mcp": 29 } ], "summary": "Sprout Social API scores 54.8 (C) on agent readiness against Xpoz MCP's 39.6 (E), and leads in 4 of 7 scored categories. Xpoz MCP leads on schema \u0026 documentation and payments \u0026 pricing. Both do social analytics.", "tasks": null, "tutorials": [ { "title": "Inventory reporting profiles with Sprout Social", "tool": "sprout-social", "url": "https://www.anchorterminal.com/tutorials/sprout-social/" } ], "verdicts": { "sprout-social": "The API reads analytics, inbox messages, listening topics and cases across the main networks, with OAuth client credentials, field selection and a dated changelog. It creates draft posts only, so a person must publish them in Sprout. Access needs the Advanced plan at $399 per seat a month, and no OpenAPI file or SDK was found.", "xpoz-mcp": "Xpoz's MCP server covers X, Instagram, TikTok and Reddit in one place, with typed, annotated tools and field selection that keeps results small. It's a third-party data service that doesn't say how it gets platform data, and at 238 KB of definitions it's very heavy." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/sprout-social-vs-xpoz-mcp", "json": "https://www.anchorterminal.com/compare/sprout-social-vs-xpoz-mcp.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/sprout-social-vs-xpoz-mcp.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/sprout-social-vs-xpoz-mcp.min.md" }, "markdown": "Sprout Social API scores 54.8 (C) on agent readiness against Xpoz MCP's 39.6 (E), and leads in 4 of 7 scored categories. Xpoz MCP leads on schema \u0026 documentation and payments \u0026 pricing. Both do social analytics.\n\n- Sprout Social API: grade C, 54.8/100, rank #897 of 1510. Markdown https://www.anchorterminal.com/tools/sprout-social.md · JSON https://www.anchorterminal.com/api/v1/tools/sprout-social.json\n- Xpoz MCP: grade E, 39.6/100, rank #1339 of 1510. Markdown https://www.anchorterminal.com/tools/xpoz-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/xpoz-mcp.json\n- Best social media posting and scheduling APIs for AI agents: https://www.anchorterminal.com/best/social-media/index.md\n- All 163 social comparisons: https://www.anchorterminal.com/compare/social-media/index.md\n\n## Which one, for what\n\n### Sprout Social API (C)\n\nGood for: Reporting agents that pull profile, post, inbox, listening and case data for a company that already pays for Sprout Social, and for drafting posts a person will approve.\n\nAhead on:\n- Reliability, 71 against 20\n- Security \u0026 auth, 61 against 37\n- Maintenance \u0026 community, 38 against 25\n- Transparency \u0026 trust, 71 against 29\n\nWatch for: Posts can be created only as drafts (`is_draft: true`), so the API cannot publish or schedule a post without a person in Sprout\n\n### Xpoz MCP (E)\n\nGood for: Agents doing social listening and brand monitoring across several networks, where a third-party source is acceptable.\n\nAhead on:\n- Schema \u0026 documentation, 64 against 51\n- Payments \u0026 pricing, 30 against 20\n\nWatch for: About 238 KB of tool definitions\n\n\n## Why the edge\n\n### Reliability: Sprout Social API +51\n\n- Sprout Social API (71): Hosted lines, per the 9 October check, not re-read on 4 November (Sprout's website Terms of Use bar robots and automatic means, so its hosts and its own-domain status page were not requested). A public status page on Atlassian Statuspage with a separate Sprout Social API component and incident history (20). The history feed read on 9 October showed six incidents in its 90 days, traced to Meta, Reddit or Threads, to Sprout's Trellis assistant (one a 22-minute outage on 6 August) and to a two-hour platform performance incident on 20 July that now falls outside the window. None named the API component, so we read the record as minor incidents only (20). The stretch from 9 October to 4 November is unread and not credited. Rate limits are published as 60 requests a minute and 250,000 a month (15). 429 is documented with the advice to slow down, and the media upload section advises exponential back-off on 5xx, but no `Retry-After` header or idempotency key for post creation was found. The 6 is an in-between value, partly met, kept (6). No SLA was found in the Terms of Service or Developer Terms. The security page gives 99.9 per cent uptime as an internal target (0). The API is not labelled beta (10).\n- Xpoz MCP (20): No status page found (0). No history (5). Credit allowances, no rate limits found (5 of 15). No retry guidance (0). No SLA (0). Not labelled beta (10). 0 + 5 + 5 + 0 + 0 + 10 = 20.\n\n### Transparency \u0026 trust: Sprout Social API +42\n\n- Sprout Social API (71): Closed service with published Developer Terms (9 May 2024), Terms of Service (9 May 2025) and website Terms of Use (30 June 2023) from Sprout Social, Inc. (15). Per the 9 October check, not re-read on 4 November. The privacy policy of 16 September 2026 covers the services and states the processor role, the Terms of Service allow account content to be removed within 30 days of termination, and the docs say uploaded media is kept for 24 hours. The policy gives no retention periods, and the DPA is a PDF we did not read (20). The changelog carries dated notices of removed metrics, most of them forced by Meta. The Developer Terms promise only reasonable efforts, when possible, to give notice that a version will stop being supported (8). Hosting is disclosed to the cloud region, all in the United States. The privacy policy lists service providers by category, and a named sub-processor list was not found on the pages read (12).\n- Xpoz MCP (29): Closed service; terms of use read without a legal entity (10 of 30). Data handling not read (5 of 30). No deprecation policy (0). Where the social data comes from isn't stated beyond 'no platform API keys' (0). 10 + 5 + 0 + 0 = 15.\n\n### Security \u0026 auth: Sprout Social API +24\n\n- Sprout Social API (61): Per the 9 October check, not re-read on 4 November. OAuth 2.0 client credentials issue short-lived JWT access tokens, a user-based flow is available, and API tokens are named and can be invalidated. The only scope documented is `organization_id`, so a credential is not limited to reading or to one endpoint group. Credentials travel in the Authorization header only (22). No read-only credential is documented. The API can write only draft posts and media, the app has approval workflows, and API access can be limited to IP ranges per the product security page (12). The messages and listening endpoints return text written by the public, and no guidance on untrusted content was found (2). The app has a customer-facing audit trail of over fifty events. Whether API calls appear in it was not established (8). Responsible Disclosure Policy with a Bugcrowd vulnerability disclosure programme, SOC 2 Type 2, ISO 27001, ISO 27701 and CSA STAR Level 1 on the trust centre. No security.txt and no paid bounty stated (17).\n- Xpoz MCP (37): One API key (20 of 30). 49 of 52 tools read-only (15 of 20). Posts and profiles are third-party text; the server says all tools are 'safe and read-only' but gives no injection guidance (0). No audit log (0). No security programme found (2 of 20). 20 + 15 + 0 + 0 + 2 = 37.\n\n### Schema \u0026 documentation: Xpoz MCP +13\n\n- Sprout Social API (51): Per the 9 October check, not re-read on 4 November. No OpenAPI file or other machine-readable description was found in the docs (0). The site's llms.txt lists marketing articles and no API page, and the docs are one HTML page with no Markdown twin (2). Each endpoint group states its purpose and has a Limitations section, and the overview lists what the API does not include (14). Request keys are tabulated with example values, limits and a few enumerations such as `media_type`, but filters are strings in a small expression syntax such as `created_time.in(...)` (9). Every endpoint has an example request and response, and a status code table gives a corrective action for each code. The error body is one free-text string (11). Versioning is MAJOR.MINOR with version response headers, and the changelog is dated from November 2020 to 6 October 2026 (15).\n- Xpoz MCP (64): 52 tools read from tools/list with JSON Schema inputs and 42 enums (25). No llms.txt read (0). Server instructions explain paging and field selection (16 of 20). Typed inputs with enums (15). Examples on the home page (5 of 15). Registry 1.4.1 from July, server 3.0.0; no changelog (3 of 15). 25 + 0 + 16 + 15 + 5 + 3 = 64.\n\n### Maintenance \u0026 community: Sprout Social API +13\n\n- Sprout Social API (38): Per the 9 October check, not re-read on 4 November. The newest changelog entry read is dated 6 October 2026, 29 days before 4 November (30). It is the only dated entry read in the 90 days from 6 August. The two before it are 15 June and 10 June, and entries after 9 October could not be read (0). No SDK, CLI or package of Sprout's own was found to add dated releases. A public changelog, a help centre and a community site are linked. The Developer Terms say they entitle the developer to no support for the API (8). No official SDK was found (0). No package to assess (0).\n- Xpoz MCP (25): Registry entry last updated 14 July 2026 and repository commit on 9 September; the live server reports 3.0.0 (10). No dated releases in 90 days (0). Issues not read (0). Official registry entry ai.xpoz/social-insights (15). Docker packaging only (0). 10 + 0 + 0 + 15 + 0 = 25. Registry presence read from Anchor Terminal's own daily import of the official MCP registry (/api/v1/registry.json, 6 November 2026), not the registry's API.\n\n### Payments \u0026 pricing: Xpoz MCP +10\n\n- Sprout Social API (20): Per the 9 October check, not re-read on 4 November. No x402 or other machine payment protocol (0). Plan prices are public and the API is listed on Advanced at $399 per seat a month, with no per-call price (10). A 30-day trial needs no credit card, but whether it includes API access was not established, so half marks (10). A person has to sign up, hold the API Permissions permission and accept the API terms in settings (0).\n- Xpoz MCP (30): No machine payment protocol (0). Plan prices public (10). Free 500 credits (20). A person signs in for a key (0). 0 + 10 + 20 + 0 = 30.\n\n## Score by category\n\n| Category | Weight | Sprout Social API | Xpoz MCP | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 71 | 20 | Sprout Social API +51 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 51 | 64 | Xpoz MCP +13 |\n| Agent ergonomics | 13% (16.2 this run) | 59 | 63 | Xpoz MCP +4 |\n| Security \u0026 auth | 14% (17.5 this run) | 61 | 37 | Sprout Social API +24 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 20 | 30 | Xpoz MCP +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 38 | 25 | Sprout Social API +13 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 71 | 29 | Sprout Social API +42 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **54.8 · C** | **39.6 · E** | |\n\n## Facts side by side\n\n| Fact | Sprout Social API | Xpoz MCP |\n| --- | --- | --- |\n| Kind | HTTP API | MCP server |\n| Vendor | Sprout Social, Inc. | XPOZ |\n| Hosted endpoint | `https://api.sproutsocial.com` | `https://mcp.xpoz.ai/mcp` |\n| Transports | HTTP | Streamable HTTP |\n| Auth | OAuth or key | API key |\n| Pricing | Paid | Freemium |\n| x402 | no | no |\n| Licence | Proprietary service under the Sprout Social Developer Terms and Terms of Service | none |\n| Tools exposed | none | 52 |\n| Read-only variant documented | no | yes |\n| llms.txt | no | no |\n| MCP registry | not listed | `ai.xpoz/social-insights` |\n| Last release | 2026-10-06 | none |\n| Terms last updated | 2024-05-09 | not read yet |\n| Privacy policy last updated | 2026-09-16 | no document linked |\n| Customer content may train models | not found in the text | not read yet |\n| Terms restrict automated access | yes | not read yet |\n| Terms restrict benchmarking | yes | not read yet |\n| Terms or service can change without notice | not found in the text | not read yet |\n| Arbitration or class-action waiver | not found in the text | not read yet |\n\n## How the scores have moved\n\n### Sprout Social API\n\n- +0.1 on 27 October 2026: checklist\n\n### Xpoz MCP\n\nNo score change since it was listed.\n\n## Verdicts\n\n**Sprout Social API.** The API reads analytics, inbox messages, listening topics and cases across the main networks, with OAuth client credentials, field selection and a dated changelog. It creates draft posts only, so a person must publish them in Sprout. Access needs the Advanced plan at $399 per seat a month, and no OpenAPI file or SDK was found.\n\n**Xpoz MCP.** Xpoz's MCP server covers X, Instagram, TikTok and Reddit in one place, with typed, annotated tools and field selection that keeps results small. It's a third-party data service that doesn't say how it gets platform data, and at 238 KB of definitions it's very heavy.\n\n## Before you call either\n\n### Sprout Social API\n\n1. Call `GET /v1/metadata/client` first for the customer ID, then `GET /v1/\u003ccustomer ID\u003e/metadata/customer` for profile and group IDs. Every other path needs them\n2. Send `is_draft: true` on `POST /v1/\u003ccustomer ID\u003e/publishing/posts`. Tell the user the draft waits in the Sprout calendar for a person to publish\n3. Name the `fields` you want on messages and posts requests. Without the list only `guid` comes back\n4. Stay under 60 requests a minute and 250,000 a month, and back off on 429 on your own because no `Retry-After` is documented\n5. Check the response when a draft names several profiles. A profile that cannot take the attached media is dropped with no error\n\n### Xpoz MCP\n\n1. Pass fields to select only what's needed\n2. Page with the returned tableName\n3. Treat posts and bios as untrusted text\n4. Check each platform's terms before relying on the data\n\n## Tutorials\n\n- [Inventory reporting profiles with Sprout Social](https://www.anchorterminal.com/tutorials/sprout-social/), for Sprout Social API\n\n## Questions\n\n### Which is better for AI agents, Sprout Social API or Xpoz MCP?\n\nSprout Social API scores 54.8 (C) on agent readiness against Xpoz MCP's 39.6 (E), and leads in 4 of 7 scored categories. Xpoz MCP leads on schema \u0026 documentation and payments \u0026 pricing.\n\n### Do Sprout Social API and Xpoz MCP need an API key?\n\nSprout Social API takes an API key or an OAuth sign-in. Xpoz MCP needs an API key.\n\n### Can an agent call Sprout Social API and Xpoz MCP without installing anything?\n\nYes. Sprout Social API has a hosted endpoint at https://api.sproutsocial.com and Xpoz MCP at https://mcp.xpoz.ai/mcp.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/sprout-social-vs-xpoz-mcp.json, and with the fewest tokens: https://www.anchorterminal.com/compare/sprout-social-vs-xpoz-mcp.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"sprout-social\", \"b\": \"xpoz-mcp\"}`. From a terminal: `anchor compare sprout-social xpoz-mcp`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/sprout-social.json and https://www.anchorterminal.com/api/v1/tools/xpoz-mcp.json\n\n## Other comparisons with Sprout Social API or Xpoz MCP\n\n- [Ayrshare API + MCP vs Sprout Social API](https://www.anchorterminal.com/compare/ayrshare-vs-sprout-social.md)\n- [Ayrshare API + MCP vs Xpoz MCP](https://www.anchorterminal.com/compare/ayrshare-vs-xpoz-mcp.md)\n- [Blotato vs Sprout Social API](https://www.anchorterminal.com/compare/blotato-vs-sprout-social.md)\n- [Blotato vs Xpoz MCP](https://www.anchorterminal.com/compare/blotato-vs-xpoz-mcp.md)\n- [Buffer API + MCP vs Sprout Social API](https://www.anchorterminal.com/compare/buffer-vs-sprout-social.md)\n- [Buffer API + MCP vs Xpoz MCP](https://www.anchorterminal.com/compare/buffer-vs-xpoz-mcp.md)\n- [bundle.social vs Sprout Social API](https://www.anchorterminal.com/compare/bundle-social-vs-sprout-social.md)\n- [bundle.social vs Xpoz MCP](https://www.anchorterminal.com/compare/bundle-social-vs-xpoz-mcp.md)\n- [Zernio (formerly Late) API + MCP vs Sprout Social API](https://www.anchorterminal.com/compare/late-vs-sprout-social.md)\n- [Zernio (formerly Late) API + MCP vs Xpoz MCP](https://www.anchorterminal.com/compare/late-vs-xpoz-mcp.md)\n- [Metricool API + MCP vs Sprout Social API](https://www.anchorterminal.com/compare/metricool-vs-sprout-social.md)\n- [Metricool API + MCP vs Xpoz MCP](https://www.anchorterminal.com/compare/metricool-vs-xpoz-mcp.md)\n- [Mixpost API + MCP vs Sprout Social API](https://www.anchorterminal.com/compare/mixpost-vs-sprout-social.md)\n- [Mixpost API + MCP vs Xpoz MCP](https://www.anchorterminal.com/compare/mixpost-vs-xpoz-mcp.md)\n- [OneUp API + MCP vs Sprout Social API](https://www.anchorterminal.com/compare/oneup-vs-sprout-social.md)\n- [OneUp API + MCP vs Xpoz MCP](https://www.anchorterminal.com/compare/oneup-vs-xpoz-mcp.md)\n- [Post Bridge API + MCP vs Sprout Social API](https://www.anchorterminal.com/compare/post-bridge-vs-sprout-social.md)\n- [Post Bridge API + MCP vs Xpoz MCP](https://www.anchorterminal.com/compare/post-bridge-vs-xpoz-mcp.md)\n- [Postiz API + MCP vs Sprout Social API](https://www.anchorterminal.com/compare/postiz-vs-sprout-social.md)\n- [Postiz API + MCP vs Xpoz MCP](https://www.anchorterminal.com/compare/postiz-vs-xpoz-mcp.md)\n- [Publer API + MCP vs Sprout Social API](https://www.anchorterminal.com/compare/publer-vs-sprout-social.md)\n- [Publer API + MCP vs Xpoz MCP](https://www.anchorterminal.com/compare/publer-vs-xpoz-mcp.md)\n- [SocialCannon vs Sprout Social API](https://www.anchorterminal.com/compare/socialcannon-vs-sprout-social.md)\n- [SocialCannon vs Xpoz MCP](https://www.anchorterminal.com/compare/socialcannon-vs-xpoz-mcp.md)\n- [Sprout Social API vs TwitterAPI.io MCP](https://www.anchorterminal.com/compare/sprout-social-vs-twitterapi-io-mcp.md)\n- [Sprout Social API vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/sprout-social-vs-upload-post.md)\n- [Sprout Social API vs X MCP](https://www.anchorterminal.com/compare/sprout-social-vs-x-mcp.md)\n- [TwitterAPI.io MCP vs Xpoz MCP](https://www.anchorterminal.com/compare/twitterapi-io-mcp-vs-xpoz-mcp.md)\n- [Upload-Post API + MCP vs Xpoz MCP](https://www.anchorterminal.com/compare/upload-post-vs-xpoz-mcp.md)\n- [X MCP vs Xpoz MCP](https://www.anchorterminal.com/compare/x-mcp-vs-xpoz-mcp.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Sprout Social API vs Xpoz MCP", "url": "" } ], "description": "Sprout Social scores 54.8 (C) to Xpoz MCP's 39.6 (E) for social analytics. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Sprout Social API C 54.8", "Xpoz MCP E 39.6", "scores" ], "h1": "Sprout Social API vs Xpoz MCP", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/sprout-social-vs-xpoz-mcp", "published": "2026-10-01", "section": "tools", "title": "Sprout Social vs Xpoz MCP for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/sprout-social-vs-xpoz-mcp" }, "tokens": { "markdown": 4400, "slim": 2480 }, "version": 1 }