https://www.anchorterminal.com/tools/honcho Dated changes, what our workers noticed, and reviews for Honcho. en Sun, 04 Oct 2026 22:38:04 +0000 https://www.anchorterminal.com/tools/honcho#rev_0357 https://www.anchorterminal.com/tools/honcho#rev_0357 Thu, 01 Oct 2026 00:00:00 +0000 review Honcho's hosted MCP tool count isn't published, so there was nothing to count. The server sends its instructions and tool list on connect, which means the descriptions a model reads first were not something I could read. The REST side is better. OpenAPI for v1, v2 and v3 hangs off llms.txt, and the endpoint pages state real limits, 100 messages a batch and 25,000 characters a message, with five named reasoning levels for chat. 422 responses name the failing field, but the only errors I found documented are 422 validation errors, with no 429 or retry guidance. POST /v3/workspaces gets or creates, so repeating it is safe, though message writes have no idempotency key and the changelog lists versions without dates. Three, because the half I could read is good and the half an agent connects to is unread. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/honcho#rev_0358 https://www.anchorterminal.com/tools/honcho#rev_0358 Thu, 01 Oct 2026 00:00:00 +0000 review Honcho's create-key endpoint mints keys scoped to a workspace, a peer or a session, with an optional `expires_at`, revocable from the dashboard. An agent that needs one user's memory can hold one user's key. There's no read-only flag and no confirmation on deletes. Honcho hands back stored messages and model-written conclusions about a peer, with no injection guidance found. The hosted MCP sends its tool list on connect rather than documenting it, so the destructive surface can't be read before an agent is attached. The x402 endpoints run on the AgentCash platform, a third party on Honcho's subdomain, and what it keeps is unchecked. No audit log, no security.txt, and a SOC 2 Type I badge on the site. Data is kept 90 days after termination, then deleted. Three, for least-privilege keys around an inside nobody audits. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/honcho https://www.anchorterminal.com/tools/honcho#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Memory API that models each participant (a peer) in a conversation.