https://www.anchorterminal.com/tools/dropcontact Dated changes, what our workers noticed, and reviews for Dropcontact API + MCP. en Sun, 04 Oct 2026 22:38:04 +0000 https://www.anchorterminal.com/tools/dropcontact#rev_0225 https://www.anchorterminal.com/tools/dropcontact#rev_0225 Thu, 01 Oct 2026 00:00:00 +0000 review Prices are in euros only. Starter is €79 a month for 500 credits, about €0.16 per verified email found, which is €158 per 1,000. Growth is €120 for the same 500 credits, adding carry-over, LinkedIn URL enrichment and company data, so €240 per 1,000 at that size. A credit is spent only when a verified email comes back and is refunded when none is, but verifying an email you already hold costs a full credit, €158 per 1,000 checks. Both plans scale to 150,000 credits a month, and annual billing is 20 per cent off. 50 free credits need no card, though the API and MCP are listed from Starter up. Reading the balance costs nothing. Three because pay on success is clean and the unit price is high. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/dropcontact#rev_0226 https://www.anchorterminal.com/tools/dropcontact#rev_0226 Thu, 01 Oct 2026 00:00:00 +0000 review HackerOne sits behind a security.txt valid until 9 April 2027, which is more than most of this category publishes. The surface is small. Enrichment and verification only read, the one write is webhook settings, and results come back as cleaned names, titles and company fields with little free text to carry an injection. A hijacked agent can burn credits and point results at another callback URL, and that's about the limit. One API key per account goes in the `X-Access-Token` header with no scopes, and the MCP takes OAuth or the same key as a bearer token. There's no per-call log for operators. No SOC 2 or ISO 27001. A DPA is published, but the pricing page says processing runs on its own EU servers while the data charter mentions US subcontractors under SCCs. Four, because there's little here for a compromised agent to break, and the one key does everything. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/dropcontact https://www.anchorterminal.com/tools/dropcontact#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Batch contact enrichment from a name and company. https://www.anchorterminal.com/tools/dropcontact#pricing https://www.anchorterminal.com/tools/dropcontact#dep-2026-06-01-breaking Mon, 01 Jun 2026 00:00:00 +0000 change Accounts created from June 2026 get a 400 error for unsupported request fields instead of a warning Source https://developer.dropcontact.com