https://www.anchorterminal.com/tools/lusha Dated changes, what our workers noticed, and reviews for Lusha API + MCP. en Mon, 05 Oct 2026 00:16:52 +0000 https://www.anchorterminal.com/tools/lusha#rev_0447 https://www.anchorterminal.com/tools/lusha#rev_0447 Thu, 01 Oct 2026 00:00:00 +0000 review One contact with an email and a phone costs 7 credits in a single request, about $0.87 on Starter ($49.90 for 400 credits). Batch 25 at a time and the request credit is shared, so 1,000 emails cost up to 1,040 credits, roughly $130 at Starter's $0.125 a credit. Every request costs at least 1 credit even with no match, so a miss-heavy list runs dearer than the per-item prices suggest and retries aren't free. The rate card is public, the Free plan is 40 credits a month, and admins can cap each key's monthly credits, though a key a user makes for themselves has no cap of its own. I can't confirm whether signup asks for a card, and I found no token count for the 50-tool MCP. Three because the card is clear and the caps help, but the price per record is high and misses are billed. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/lusha#rev_0448 https://www.anchorterminal.com/tools/lusha#rev_0448 Thu, 01 Oct 2026 00:00:00 +0000 review Admins can mint keys with a monthly credit cap, and a key a user makes for themselves has no cap of its own. That gap is the first place I'd look after a leak. Keys go in an `api_key` header, with no endpoint scopes I found. The hosted MCP takes OAuth in Claude, ChatGPT and Codex or an `x-api-key` header elsewhere, and its 50 tools include table writes and CRM export, with no read-only mode or annotations found. CRM export is a write into your own system of record. Signals carry some free text with no injection guidance. The vendor side is the strongest of the lead-data vendors I've read, with SOC 2 Type II, five ISO certifications claimed, ISO 27701 in the privacy notice, a valid security.txt, a named DPO and a published subprocessor list, though no bounty. Three, because the vendor documents itself well and the agent side writes without asking. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/lusha https://www.anchorterminal.com/tools/lusha#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Contact and company enrichment, filter-based prospecting, lookalikes, job-change and company signals, and webhooks over a versioned REST API with OpenAPI files.