# Vonage Messages API + MCP vs Wati (slim)

> Vonage Messages scores 66.8 (B) to Wati's 51.1 (D) for whatsapp messaging. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/vonage-vs-wati.md (~4,550 tokens) · this version ~2,530 tokens · JSON https://www.anchorterminal.com/compare/vonage-vs-wati.json · canonical https://www.anchorterminal.com/compare/vonage-vs-wati
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-07
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

Vonage Messages API + MCP scores 66.8 (B) on agent readiness against Wati's 51.1 (D), and leads in 6 of 7 scored categories. Both do whatsapp messaging.

- Vonage Messages API + MCP: B 66.8, rank #356 of 1510 · https://www.anchorterminal.com/tools/vonage.min.md
- Wati: D 51.1, rank #1044 of 1510 · https://www.anchorterminal.com/tools/wati.min.md
- Vonage Messages API + MCP, good for Agents that need several chat channels behind one call with SMS failover. Ahead on Reliability, 77 against 55; Schema & documentation, 90 against 79; Security & auth, 73 against 40; Payments & pricing, 37 against 20; Maintenance & community, 80 against 62. Also Runs on your own machine; Free to start without a card.
- Wati, good for Businesses whose customers are on WhatsApp and Instagram and who want an inbox, campaigns and an agent on one account.

| Category | Vonage Messages API + MCP | Wati |
| --- | --- | --- |
| Reliability (16%) | 77 | 55 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 90 | 79 |
| Agent ergonomics (13%) | 50 | 48 |
| Security & auth (14%) | 73 | 40 |
| Payments & pricing (10%) | 37 | 20 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 80 | 62 |
| Transparency & trust (7%) | 49 | 52 |

| Fact (where they differ) | Vonage Messages API + MCP | Wati |
| --- | --- | --- |
| Vendor | Vonage (Ericsson) | Clare.AI Limited (Wati) |
| Hosted endpoint | `https://api.nexmo.com/v1` | `https://mcp.wati.io/mcp` |
| Transports | HTTP, stdio, Streamable HTTP | HTTP, Streamable HTTP |
| Pricing | Pay per use | Paid |
| Licence | Apache-2.0 | Proprietary service under Clare.AI Limited's terms and conditions. The wati-mcp repository (setup docs and skills for the hosted server) is MIT |
| Tools exposed | 15 | 73 |
| MCP registry | `io.github.Vonage/vonage-documentation-mcp` | `io.github.wati-io/wati-mcp` |
| Last release | 2026-10-21 | 2026-11-03 |
| Terms last updated | couldn't be read | 2025-12-08 |
| Privacy policy last updated | couldn't be read | 2026-08-10 |
| Customer content may train models | couldn't be read | not found in the text |
| Terms restrict automated access | couldn't be read | not found in the text |
| Terms restrict benchmarking | couldn't be read | not found in the text |
| Terms or service can change without notice | couldn't be read | yes |
| Arbitration or class-action waiver | couldn't be read | not found in the text |
| Popularity | 154k npm/wk, 67k PyPI/wk | none |
| Agent reviews | 3/5 (2) | none |

Why the edge:
- Security & auth, Vonage Messages API + MCP +33: Vonage Messages API + MCP 73 (Sends can be authorised with an application JWT signed RS256, whose ACL claim limits paths and methods and whose lifetime runs from 30 seconds to 24 hours, or with Basic auth on the account key and secret (30). JWT ACLs can narrow a token, with no confirmation step for sends (15 of 20). Inbound messages are untrusted text. Webhooks carry an HS256 JWT with a payload_hash of the body, and we found no prompt-injection guidance (5 of 15). Message records through the Reports API, which the MCP's get-records-report tool calls, and an Audit API that monitors the account through events, priced at $550 a month on the pricing page (13 of 15). Per the 2 October check (www.vonage.com answered a bot check on 1 November), the security page says Vonage holds ISO 27001, PCI-DSS, SOC, HITRUST and CSA STAR across its product lines without saying which cover the Communications APIs, and links a CSA STAR registry entry. www.vonage.com/.well-known/security.txt answered 404 on 1 November, and no disclosure policy or bug bounty was found. OSV lists no advisory for @vonage/server-sdk, vonage, @vonage/messages or the MCP package (10 of 20).); Wati 40 (REST tokens carry per-endpoint read and write scopes, an expiry and revocation, and the docs forbid tokens in URLs; the MCP server's OAuth metadata lists a single `all` scope (25 of 30). Read-only REST tokens are possible through scopes; the MCP server has no read-only mode and relies on the client to confirm writes (10 of 20). Inbound WhatsApp and Instagram text and comments reach the agent, and no prompt-injection guidance was found (2 of 15). No operator request log found in the docs (3 of 15). The trust centre answered 403, security.txt answers 404, and no certification or disclosure policy could be read (0 of 20). 25 + 10 + 2 + 3 + 0 = 40.)
- Reliability, Vonage Messages API + MCP +22: Vonage Messages API + MCP 77 (Statuspage at vonageapi.statuspage.io with components and history (20). Its history pages, read on 1 November, list 565 entries from 3 August, 444 of them maintenance, 101 minor and 20 with no impact set, and none major or critical. Messaging incidents hit one carrier, country or region, such as outbound SMS in the APAC region for 19 minutes on 21 October and T-Mobile delivery on a subset of 10DLC numbers on 1 October, so partial and minor (20). The earlier IsDown count is struck, since a third-party copy of a status page isn't evidence in this run. The Messages API allows 75 requests a second per API key by default, and exceeding it returns 429 (15). The OpenAPI spec documents 429 with Retry-After and X-RateLimit headers, without backoff or safe-retry guidance (12 of 15). No SLA found on the legal hub or security page, per the 2 October check, not re-read on 1 November (0). The Messages API is generally available (10). 20 + 20 + 15 + 12 + 0 + 10 = 77.); Wati 55 (Read with the hosted lines. status.wati.io is a Site24x7 StatusIQ page with components for the API, webhooks and inbox on each regional host (20). Its incident history is drawn by script and wasn't readable by our reader, so the record is scored as unreadable (5). Request limits are published only for legacy V1 operations, by plan; V3 limits are account-specific and unpublished (8 of 15). The docs say to honour Retry-After when present, use bounded backoff and reconcile unknown writes before resending, with no idempotency keys (10 of 15). The pricing page names a basic or standard SLA by plan, with no SLA document or uptime figure (2 of 10). The V3 API is the documented default (10). 20 + 5 + 8 + 10 + 2 + 10 = 55.)
- Maintenance & community, Vonage Messages API + MCP +18: Vonage Messages API + MCP 80 (vonage-python-sdk v4.9.1 tagged on 2026-10-21, fixing the SMS text length limit in the Messages package (30). In the 90 days from 3 August, vonage-node-sdk v3.30.0 (1 September) and v3.30.1 (8 September, a version bump only, counted half) and vonage-python-sdk v4.9.0 (16 September) and v4.9.1 (21 October), 3.5 in all. The developer changelog index carries only Video entries (20). Closed service with a changelog index and a support site. We didn't sample issue replies (8 of 15). Official SDKs current in six languages (15). The MCP repo runs CI, which since 21 October fails on test errors, but its last release is still v1.5.1 on 2026-05-26, with nine commits since then unreleased on 1 November (7 of 10). 30 + 20 + 8 + 15 + 7 = 80.); Wati 62 (The API reference, authentication and error pages were updated on 3 November 2026 under documentation version 2.6, read as the last published API change (30). No changelog; the MCP registry entry moved to 1.1.0 on 9 October and the repository changed on 15 and 20 October, which count for half (10 of 20). Closed service with a public roadmap and support by plan; GitHub issue replies weren't sampled (6 of 15). `io.github.wati-io/wati-mcp` is in the official MCP registry under a verified GitHub namespace, with no official SDKs (12 of 15). The repository holds setup docs for a hosted server, with a registry publish workflow (4 of 10). 30 + 10 + 6 + 12 + 4 = 62.)
- Payments & pricing, Vonage Messages API + MCP +17: Vonage Messages API + MCP 37 (No x402, MPP or L402 (0). Per the 2 October check of the pricing page, which answered a bot check on 1 November, Messenger is $0.0011 per delivered message, while SMS, MMS, RCS and WhatsApp rates appear per country through a selector or a downloadable sheet, with no login, and Viber is custom (17 of 20). Free trial with no card, per the pricing page, and €2 of test credit per the 30 September check (20). A person signs up in a browser (0).); Wati 20 (No x402, MPP or L402 (0). Public plan prices only, plus Meta's fees by reference (10 of 20). A 7-day free trial whose card rule isn't stated (10 of 20). A person signs up and connects a WhatsApp Business account (0). 0 + 10 + 10 + 0 = 20.)
- Schema & documentation, Vonage Messages API + MCP +11: Vonage Messages API + MCP 90 (OpenAPI 3.0.3 spec for the Messages API, version 1.20.0 on 1 November, with POST /messages and PATCH /messages/{message_uuid} (25). llms.txt that tells agents to keep the api.nexmo.com hostnames and use the Messages API over the legacy SMS API (10). The reference explains each channel's message types, with less on when not to use one (14 of 20). Typed fields from the spec (12 of 15). Examples per channel and a shared API error catalogue (14 of 15). Versioned /v1 path, a versioned spec and a public changelog index (15).); Wati 79 (No standalone spec file was found, but every reference page embeds the OpenAPI 3.0.4 contract for its operation, with the documentation version 2.6 (20 of 25). llms.txt and Markdown pages (10). Descriptions say when to use each route, when not to, which roles are refused and what a 200 can hide (19 of 20). Typed parameters with ranges such as batch sizes of 1 to 100 and 1 to 10,000 (12 of 15). Examples in five languages and a recovery guide; error bodies vary by endpoint and some are plain text (12 of 15). Versioned documentation and a public roadmap, but no changelog (6 of 15). 20 + 10 + 19 + 12 + 12 + 6 = 79.)