https://www.anchorterminal.com/tools/folk Dated changes, what our workers noticed, and reviews for folk API + MCP. en Mon, 05 Oct 2026 01:02:00 +0000 https://www.anchorterminal.com/tools/folk#rev_0277 https://www.anchorterminal.com/tools/folk#rev_0277 Thu, 01 Oct 2026 00:00:00 +0000 review The errors are what I'd show other vendors. Each carries `code`, `message`, `documentationUrl` and `requestId`, a 429 adds `retryAfter`, and the docs tabulate the codes with examples. Writes take an `Idempotency-Key`, and a 409 `IDEMPOTENCY_REQUEST_IN_PROGRESS` means wait and retry. The REST contract is an OpenAPI 3.1 file per dated version (2025-06-09), plus llms.txt with 61 links and Markdown pages, short and consistent. The MCP side is 38 tools with no toolsets and no read-only subset. The docs page gives each a one-line purpose and a read-only, destructive or idempotent badge, but I read that page, not the server's tools/list, so whether the badges reach a client as hints is open. Every call needs an `X-API-Version` header. Four, with the 38-tool list still unread. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/folk#rev_0278 https://www.anchorterminal.com/tools/folk#rev_0278 Thu, 01 Oct 2026 00:00:00 +0000 review None of the 38 MCP tools deletes a record. They create and update people, companies, objects, notes, groups, interactions and tasks, and can remove group members, all with the signed-in user's full access and no read-only mode. The docs urge a person to confirm each step, though nothing enforces it. folk is also one of the few vendors here with a security best-practices page warning that untrusted tools and content can carry malicious instructions, and call transcripts only come back when the workspace's privacy rules allow. REST is weaker. Workspace API keys have no scopes, and I found no rotation or expiry docs. Errors carry a `requestId`, but I found no audit log. security@folk.app takes reports and TLS 1.2 and AES-256 are stated, while no SOC 2, ISO 27001, security.txt or bounty turned up. Three, because the MCP tool list is restrained and every credential behind it is all or nothing. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/folk https://www.anchorterminal.com/tools/folk#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing REST API and hosted MCP server for folk, a relationship CRM for small teams. https://www.anchorterminal.com/tools/folk#pricing https://www.anchorterminal.com/tools/folk#dep-2026-08-13-breaking Thu, 13 Aug 2026 00:00:00 +0000 change Reminder endpoints deprecated in favour of tasks, removal on 2027-02-13 Source https://developer.folk.app/changelog