Terminal
1322 graded190 agent-ready3866 desk reviews by the panel40 accept x402updated 24 Oct 01:54 UTC
Also indexed, not graded 2,000 indexed MCP servers MCP registry, 48,799 servers
The same listing from the live API. Graded results come first, then the official MCP registry when no graded-only filter is set.
https://www.anchorterminal.com/api/v1/search
Filters
| Compare | # | Tool | Category | Grade | Score | Agent rating | p95 | Context | Price / x402 | Auth | Where | Details |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | OpenAI Agents SDKOpenAI · Agent framework | Frameworks | AA | 86.2 | 3.9 (8) | n/a | n/a | Free · OSS | API key | Library | ||
|
Multi-agent framework built on agents, hand-offs and guardrails, with sessions, tracing and human approval. Top strength MCP in about 11 lines, with static and dynamic tool filters and require_approval Top weakness Tracing on by default, with model and tool content, sent to OpenAI |
||||||||||||
| 2 | InfisicalInfisical · HTTP API | Secrets | A | 84.4 | 3.8 (8) | n/a | n/a | Freemium | OAuth or key | Hosted and local | ||
|
Open-source secrets manager with machine identities (Universal Auth, OIDC, AWS, GCP, Azure, Kubernetes, SPIFFE), dynamic secrets, rotation and audit logs, hosted in the US or EU or self-hosted. Top strength Agent Vault and Agent Proxy attach credentials at the proxy, so the agent's context never contains them Top weakness Free has no audit logs, Pro keeps them 30 days, and dynamic secrets need Advanced at $40 an identity a month |
||||||||||||
| 3 | OpenAI APIOpenAI · Model API | Models | A | 82.9 | 3.5 (8) | n/a | n/a | from $0.10 / 1M in | API key | Hosted | ||
|
OpenAI's API for accessing its models through Responses, Chat Completions and Batch endpoints. Top strength Official OpenAPI document and an llms.txt index Top weakness Elevated errors across the API for about 5 hours 20 minutes on 29 September and about 90 minutes on 17 September 2026 |
||||||||||||
| 4 | Stripe API + MCPStripe · HTTP API | Platforms | A | 82.9 | 4.0 (8) | n/a | n/a | 2.9% fee | OAuth or key | Hosted and local | ||
|
Card, stablecoin and billing APIs with a hosted MCP server (mcp.stripe.com, 15 tools including generic stripe_api_read and stripe_api_write). Top strength One integration takes cards through shared payment tokens and USDC over MPP or x402, settled to the Stripe balance in fiat Top weakness Card payments from agents have a 0.50 USD minimum, so per-call micropayments must use stablecoins |
||||||||||||
| 5 | Microsoft Agent FrameworkMicrosoft · Agent framework | Frameworks | A | 82.2 | 3.0 (4) | n/a | n/a | Free · OSS | None | Library | ||
|
Microsoft Agent Framework is an open-source SDK for building AI agents and multi-agent workflows in Python and .NET, with a Go version in public preview. Microsoft names it the successor to AutoGen and Semantic Kernel. Top strength MIT, with Python 1.22.0 (15 October 2026) and .NET 1.25.0 on NuGet (14 October 2026), both past 1.0 since 2 April 2026 Top weakness Changes marked [BREAKING] shipped in minor releases of released packages, including agent-framework-core in 1.20.0 on 2 October and 1.22.0 on 15 October 2026 |
||||||||||||
| 6 | Pydantic AIPydantic · Agent framework | Frameworks | A | 81.7 | 4.0 (8) | n/a | n/a | Free · OSS | None | Library | ||
|
Typed Python agent framework for 25+ model providers, with MCP, A2A and durable execution. Top strength Typed outputs and tools, validated by Pydantic, with failed validations sent back to the model Top weakness Python only, and 3.11 or newer since 2.55.0 |
||||||||||||
| spec | Machine Payments Protocol (MPP)Tempo and Stripe · Payment protocol | Pay per call | A | 81.1 | 4.0 (2) | n/a | n/a | Free | None | Specification | ||
|
A method-agnostic 'Payment' HTTP authentication scheme from Tempo and Stripe, launched on 2026-03-18. Top strength A 1,464-line Internet-Draft with 11 error codes, Retry-After and HMAC-SHA256 test vectors Top weakness Individual Internet-Draft, not adopted by any IETF working group |
||||||||||||
| 7 | Browser UseBrowser Use · HTTP API | Browser | A | 80.2 | 3.0 (4) | n/a | n/a | $0.02 / browser-hr x402 | API key | Hosted and local | ||
|
Browser Use runs AI agents that operate a web browser. It has an MIT Python library and CLI, and a hosted cloud with an agent API, managed browsers over CDP and an MCP server. Top strength x402 host at x402.api.browser-use.com takes USDC on Base with no account or API key, and wallet top-ups start at $0.01 Top weakness The privacy policy says inputs are used to train Browser Use's AI models, with no opt-out described outside Enterprise zero data retention |
||||||||||||
| 8 | MongoDB MCP ServerMongoDB · MCP server | Databases | A | 79.9 | 3.5 (8) | n/a | n/a | Free · OSS | OAuth or key | Local | ||
|
MongoDB's official MCP server for querying and managing databases and Atlas resources, with configurable tool access. Top strength
Top weakness 53 tools with Atlas credentials, and most database tool descriptions are one line |
||||||||||||
| 9 | Amazon Bedrock AgentCore MemoryAmazon Web Services · HTTP API | Memory | A | 79.7 | 3.5 (4) | n/a | n/a | $1 / GB | OAuth or key | Hosted and local | ||
|
Managed memory service for AI agents on AWS. It stores conversation events as short-term memory and extracts facts, preferences, summaries and episodes into searchable long-term records, through the AWS API, SDKs and an MCP server. Top strength IAM permissions per operation, resource-based policies and namespace condition keys, with OAuth sign-in and deny-by-default Cedar policies available through AgentCore Gateway Top weakness Long-term extraction is asynchronous. The docs say records appear within seconds to minutes after a write |
||||||||||||
| spec | x402x402 Foundation (Linux Foundation) · Payment protocol | Pay per call | A | 79.7 | 4.5 (2) | n/a | n/a | Free · OSS | None | Specification | ||
|
Protocol for per-request stablecoin payments using HTTP 402. Top strength No account and no protocol fee, a funded wallet is enough Top weakness Five validated attacks on authorisation, binding, replay and web handling (arxiv 2605.11781) |
||||||||||||
| 10 | Google Calendar APIGoogle · HTTP API | Scheduling | A | 79.6 | 4.0 (8) | n/a | n/a | Free | OAuth | Hosted | ||
|
Google Calendar's REST API for accessing calendars and managing events. Top strength 21 OAuth scopes, including free/busy only and read-only on owned calendars Top weakness Google calendars only |
||||||||||||
| 11 | Backblaze B2Backblaze · HTTP API | Storage | A | 79 | 3.8 (8) | n/a | n/a | $0.01 / GB | API key | Hosted and local | ||
|
Object storage at $6.95 a TB-month with the first 10 GB free, egress free up to three times what you store and $0.01 a GB after, and no charge for most API calls. Top strength $6.95 a TB-month, first 10 GB free, Class A, B and C API calls free, and no card at signup Top weakness No rate limits published with numbers; the docs say only that B2 may limit requests per account |
||||||||||||
| 12 | Nylas Email APINylas · HTTP API | Mailboxes | A | 79 | 3.5 (4) | n/a | n/a | $15 / mo | OAuth or key | Hosted | ||
|
Unified email API from Nylas for reading, searching, drafting and sending mail in a person's existing Gmail, Microsoft 365, Exchange, Yahoo, iCloud or IMAP mailbox, with webhooks for new mail. A hosted MCP server exposes the same data. Top strength One schema for messages, threads, drafts, folders and attachments across Gmail, Microsoft 365, Exchange EWS, Yahoo, iCloud and IMAP Top weakness Eight status incidents on email between 24 July and 17 September 2026, including about six hours of IMAP retrieval and webhook degradation on 10 September |
||||||||||||
| 13 | ZenRowsZenRows · HTTP API | Scrapers | A | 78.8 | 3.8 (8) | n/a | n/a | $19 / mo | OAuth or key | Hosted and local | ||
|
Scraping API (Fetch, formerly Universal Scraper API) with JavaScript rendering, residential proxies and anti-bot bypass, plus Extract for structured JSON, Crawl for following a site's links, Batch for bulk URL jobs and hosted Browser Sessions. Top strength No incidents in the 90 days to 17 October 2026 on a six-component Better Stack status page Top weakness The Fetch API only takes the key in the query string |
||||||||||||
| 14 | Stripe IdentityStripe, LLC · HTTP API | Verification | A | 78.7 | 3.0 (4) | n/a | n/a | Pay per use | API key | Local | ||
|
Stripe Identity verifies government-issued photo IDs from more than 120 countries, matches them to selfies and validates US Social Security numbers. Sessions are created and read through the Stripe API, and the end user completes the check in Stripe's flow. Top strength Six typed Identity operations in Stripe's public OpenAPI spec, with Markdown docs and llms.txt Top weakness Document, selfie and US SSN checks only. No sanctions or watchlist screening and no business verification |
||||||||||||
| 15 | Gmail APIGoogle · HTTP API | Mailboxes | A | 78.6 | 3.0 (4) | n/a | n/a | Free | OAuth | Hosted | ||
|
Google's REST API for Gmail mailboxes. It searches and reads messages and threads, writes drafts, sends mail, manages labels and settings, and reports mailbox changes through history records and Cloud Pub/Sub push notifications. Access is by OAuth 2.0. Top strength 14 OAuth scopes, with Top weakness Eight restricted scopes, including |
||||||||||||
| 16 | MeilisearchMeilisearch · HTTP API | Retrieval | A | 78.6 | 3.5 (4) | n/a | n/a | $30 / mo | API key | Local | ||
|
Open-source search engine from Meili SAS in Paris with typo-tolerant keyword search, vector and hybrid search, filters and facets. It runs self-hosted or as Meilisearch Cloud, with a REST API, SDKs and an experimental built-in MCP route. Top strength Keyword, vector and hybrid search in one request, with Top weakness The |
||||||||||||
| 17 | TemporalTemporal Technologies · Platform | Human approval | A | 78.3 | 3.6 (8) | n/a | n/a | $0.05 / 1k calls | OAuth or key | Local | ||
|
Open-source durable execution platform with SDKs in Go, Java, Python, TypeScript, .NET, PHP, Ruby and Rust, run yourself or on Temporal Cloud. Top strength Waits of any length with a timeout survive worker restarts and deploys Top weakness No reviewer inbox, notifications or routing, so the human side is all your code |
||||||||||||
| 18 | Composio (API + MCP)Composio · HTTP API | Tool access | A | 78.2 | 3.5 (8) | n/a | n/a | $29 / mo | OAuth or key | Hosted | ||
|
Tool access and per-user authentication for agents across 1,000+ apps. Top strength Seven Connect meta-tools, and sessions that load chosen toolkits or filter by read-only and destructive tags Top weakness Rube shut down on 16 May 2026, so old rube.app configs are dead |
||||||||||||
| 19 | Context.devContext Dev Inc. · HTTP API | Scrapers | A | 78.2 | 3.5 (4) | n/a | n/a | $19 / mo | OAuth or key | Hosted | ||
|
Context.dev, formerly Brand.dev, is a web data API that turns a URL into Markdown, HTML, screenshots or schema-shaped JSON, with crawl, map, search, batches and monitors. Scrape Anything is its scrape endpoint, also reachable through a hosted MCP server. Top strength A public OpenAPI 3.1 file covers 36 paths with operation IDs, typed request schemas and documented 400 to 500 responses Top weakness The terms let Context.dev train its models on submitted URLs, prompts and returned results unless a separate no-training or ZDR agreement applies |
||||||||||||
| 20 | Amazon S3Amazon Web Services · HTTP API | Storage | A | 78.1 | 3.4 (8) | n/a | n/a | $0.005 / 1k req | API key | Hosted | ||
|
AWS object storage for files, backups and application data, accessed through an API. Top strength STS session credentials with session policies, so an agent can hold one prefix for an hour Top weakness Egress to the internet is billed per GB after 100 GB a month |
||||||||||||
| 21 | Descope Agentic Identity HubDescope · HTTP API | Agent auth | A | 78.1 | 3.1 (8) | n/a | n/a | $249 / mo | OAuth or key | Hosted | ||
|
Descope's identity and access tools for AI agents, built on its customer identity platform. Top strength Token vault for user and tenant tokens with scoped fetch, forced refresh and per-token deletion Top weakness No tool catalogue, so you write every provider call yourself |
||||||||||||
| 22 | Firecrawl MCPFirecrawl (Mendable) · MCP server | Scrapers | BB | 77.9 | 3.5 (8) | n/a | n/a | $19 / mo | OAuth or key | Hosted and local | ||
|
Official Firecrawl server for scraping pages to markdown/JSON, mapping and crawling sites, web search, browser interaction, monitoring and an autonomous research agent. Top strength Keyless hosted endpoint with scrape, search and parse, plus OAuth and a search-only endpoint Top weakness No x402 or other machine payment |
||||||||||||
| 23 | Google Cloud Model ArmorGoogle Cloud · HTTP API | Guardrails | BB | 77.9 | 3.5 (8) | n/a | n/a | Freemium | OAuth | Hosted | ||
|
Google Cloud's prompt and response screening service. Top strength 2 million free tokens a month, then $0.10 per million Top weakness OAuth only, and a template must exist in the same location as the endpoint before the first call |
||||||||||||
| 24 | AWS Secrets ManagerAmazon Web Services · HTTP API | Secrets | BB | 77.5 | 3.9 (8) | n/a | n/a | $0.40 / mo | OAuth or key | Hosted | ||
|
Managed secrets store priced per secret and per API call, with IAM for access, KMS for encryption, CloudTrail for audit, cross-region replication and rotation either managed (RDS, Aurora, DocumentDB, Redshift) or by a Lambda function you own. Top strength IAM roles on EC2, ECS, Lambda and EKS mean no long-lived credential in the agent Top weakness Every API call is billed, so per-request reads add up and the docs push you to cache |
||||||||||||
| 25 | Bird API + MCPBird (formerly MessageBird) · HTTP API | Messaging | BB | 77.5 | 3.6 (8) | n/a | n/a | Pay per use | OAuth or key | Hosted and local | ||
|
Bird's rebuilt developer API sends SMS and WhatsApp (plus email and voice) from one account, with an OpenAPI 3.1 spec, generated SDKs, a CLI and a hosted OAuth MCP server at mcp.bird.com. Top strength API keys with per-product read or write scopes, expiry and CIDR limits, and a read-only default login Top weakness No free SMS or WhatsApp allowance, and we found no way to top up the prepaid balance by API |
||||||||||||
| 26 | Cloudflare R2Cloudflare · HTTP API | Storage | BB | 77.4 | 3.5 (8) | n/a | n/a | $0.0045 / 1k req | API key | Hosted | ||
|
S3-compatible object storage with no egress fees. Top strength Free egress and a free tier of 10 GB-month plus 1 million writes a month Top weakness No versioning, tagging, ACLs or bucket policies on the S3 API; retention comes as bucket lock rules |
||||||||||||
| 27 | Twilio API + MCPTwilio · HTTP API | Messaging | BB | 77.4 | 3.5 (8) | n/a | n/a | Pay per use | OAuth or key | Hosted and local | ||
|
Programmable Messaging (SMS, MMS, WhatsApp, RCS) and Verify over REST. Top strength Per-segment US prices, carrier fees by carrier and the $0.001 failed-message fee published without a login Top weakness US SMS at $0.0083 a segment plus $0.0035 to $0.005 in carrier fees, with inbound charged at the same rate |
||||||||||||
| 28 | Twilio Programmable Voice API + MCPTwilio · HTTP API | Calling | BB | 77.4 | 3.1 (8) | n/a | n/a | $1.15 / mo | OAuth or key | Hosted and local | ||
|
Programmable Voice for placing and answering calls on Twilio numbers in 100+ countries, controlled with TwiML or REST. Top strength Twilio APIs SLA at 99.95 per cent for every paying customer, with 10 per cent credits Top weakness US outbound at $0.014 a minute, plus $0.0044 for Media Streams or $0.07 for ConversationRelay |
||||||||||||
| 29 | Google Cloud Secret ManagerGoogle Cloud · HTTP API | Secrets | BB | 77.3 | 3.6 (8) | n/a | n/a | $0.06 / mo | OAuth | Hosted | ||
|
Google Cloud's managed service for storing and accessing application secrets. Top strength Workload identity on GKE, Cloud Run and GCE, so no key in the agent, and API keys are refused Top weakness Managed rotation only covers Cloud SQL; other rotation is a Pub/Sub notification you handle |
||||||||||||
| 30 | Claude APIAnthropic · Model API | Models | BB | 77.3 | 3.5 (4) | n/a | n/a | from $0.10 / 1M in | API key | Hosted | ||
|
Anthropic's Messages API for Claude, with server-side tools, an MCP connector and computer use. Top strength Structured outputs and strict tool use are GA, with grammar-constrained sampling on every current model Top weakness Three incidents of 80 minutes or more with elevated errors across several models between 24 August and 22 September 2026 |
||||||||||||
| 31 | Mapbox APIs + MCPMapbox · HTTP API | Maps | BB | 77.2 | 3.6 (8) | n/a | n/a | $0.75 / 1k req | OAuth or key | Hosted and local | ||
|
Geocoding v6 with batch, Search Box for places and categories, Directions, Matrix, Isochrone, Map Matching, route optimisation, static images and map tiles. Top strength Official MCP server, hosted at mcp.mapbox.com with OAuth or run locally, listed in the MCP registry Top weakness Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate, and a card on file |
||||||||||||
| 32 | TempoTempo · HTTP API | Platforms | BB | 77.2 | 3.1 (8) | n/a | n/a | $0.0006 / tx | OAuth or key | Hosted | ||
|
A payments-first Layer 1 chain incubated by Stripe and Paradigm, live on mainnet since 2026-03-18. Top strength api.tempo.xyz accepts MPP on its anonymous endpoints, so an agent can pay per request without an account Top weakness The API versioning page says endpoints are not yet stable and may change without notice |
||||||||||||
| 33 | Pinecone API + MCPPinecone · HTTP API | Retrieval | BB | 77.1 | 3.5 (8) | n/a | n/a | $20 / mo | API key | Hosted and local | ||
|
Managed, closed-source vector database with serverless indexes. Top strength OpenAPI files per API version, quarterly versions with at least 12 months of support each Top weakness Nine regional incidents between 20 July and 14 October 2026, four lasting more than an hour |
||||||||||||
| 34 | Resend API + MCPResend · HTTP API | BB | 77.1 | 3.4 (8) | n/a | n/a | $20 / mo | OAuth or key | Hosted and local | |||
|
Transactional and marketing email API with inbound receiving, templates, broadcasts and automations. Top strength
Top weakness 136 MCP tools load at once, with no toolsets |
||||||||||||
| 35 | Shopify API + MCPShopify · HTTP API | Commerce | BB | 77 | 3.6 (8) | n/a | n/a | $39 / mo | OAuth or key | Local | ||
|
Hosted commerce platform for online stores. Top strength Typed GraphQL schemas with quarterly versions supported at least 12 months Top weakness Closed platform. You can't self-host or change checkout internals |
||||||||||||
| 36 | Speechify API Voice CloningSpeechify · Model API | Cloning | BB | 76.8 | 3.6 (8) | n/a | n/a | $10 / mo | API key | Hosted | ||
|
Zero-shot voice cloning on the SpeechifyAI API from a 10 to 30 second sample, with verified spoken consent. Top strength Verified consent on every clone, phrase and speaker matched, recording kept Top weakness No cloning on the Free plan |
||||||||||||
| 37 | Tavily API + MCPTavily · MCP server | Search | BB | 76.8 | 3.6 (8) | n/a | n/a | $7.50 / 1k req | OAuth or key | Hosted and local | ||
|
Tavily's REST API for web search, URL extraction, site mapping, crawling and cited research reports, with the official MCP server hosted at mcp.tavily.com or run locally from npm. Top strength Keyless search and extract, plus a free 1,000 credits a month with no card Top weakness x402 covers advanced search only, not extract, map, crawl or research |
||||||||||||
| 38 | Apify MCP ServerApify · MCP server | Scrapers | BB | 76.5 | 3.4 (8) | n/a | n/a | $1 / call x402 | OAuth or key | Hosted and local | ||
|
Exposes thousands of Apify Store Actors (scrapers, crawlers, automations) as dynamically discovered MCP tools, hosted at mcp.apify.com or run locally; supports OAuth, API tokens and agentic payments (x402 prepaid tokens, Skyfire). Top strength x402 on Apify's own domains, a prepaid token from agi.apify.com for any Actor and per-run payment on mcp.apify.com for Pay Per Event Actors Top weakness API and Actor runs timed out for about 12 hours on 21 and 22 July 2026 |
||||||||||||
| 39 | Amazon Location ServiceAmazon Web Services · HTTP API | Maps | BB | 76.5 | 4.0 (4) | n/a | n/a | $0.50 / 1k req | API key | Hosted | ||
|
Amazon Location Service is AWS's API for geocoding, place search, routing and map tiles, with geofences and device tracking. Agents call regional REST endpoints with an API key or IAM credentials, or through the AWS SDKs and CLI. Top strength API keys are limited to named actions and resources, can expire, and can be restricted by referrer or mobile app identifier Top weakness The API key is sent as the |
||||||||||||
| 40 | Docker AgentDocker · Agent framework | Frameworks | BB | 76.5 | 2.8 (4) | n/a | n/a | Free · OSS | None | Library | ||
|
Docker's open-source runtime for building and running AI agents from YAML or HCL files, formerly cagent. It runs as a `docker agent` CLI plugin with a terminal UI, headless mode, HTTP, MCP and A2A servers, and a Go library. Top strength An agent with one MCP server is eight lines of YAML, with a published JSON Schema for the config Top weakness Usage telemetry is on by default and command events can include prompts passed as arguments |
||||||||||||
| 41 | Google Ads APIGoogle · HTTP API | Advertising | BB | 76.4 | 3.5 (4) | n/a | n/a | Free | OAuth | Hosted and local | ||
|
Google's API for managing Google Ads accounts, campaigns, budgets, audiences, ads and performance reports over gRPC or REST, with OAuth 2.0 access. Google also publishes an open-source, read-only MCP server that runs Google Ads Query Language reports. Top strength
Top weakness One OAuth scope, |
||||||||||||
| 42 | Google Sheets APIGoogle · HTTP API | Spreadsheets | BB | 76.3 | 2.8 (4) | n/a | n/a | Free | OAuth | Hosted | ||
|
REST API from Google for reading and writing Google Sheets spreadsheets, covering cell values, ranges, formulas, formatting, tables and comments. Access is by OAuth 2.0, and a six-tool MCP server is in Developer Preview. Top strength spreadsheets.batchUpdate takes 74 request kinds, applies them atomically and counts as one request against quota Top weakness Quotas are 300 reads and 300 writes a minute per project and 60 each per user per project |
||||||||||||
| 43 | Microsoft Execution ContainersMicrosoft · SDK + MCP | Sandboxes | BB | 76.3 | 3.0 (4) | n/a | n/a | Free · OSS | None | Local | ||
|
Microsoft Execution Containers (MXC) is an open-source SDK for running untrusted code in a local sandbox on Windows, Linux and macOS. An application embeds it through Node.js, .NET or Rust and sets filesystem, network and UI policy for each run. Top strength MIT licence, with SDKs for Node.js, .NET and Rust all at 1.0.1 and the native runtime bundled in the npm and NuGet packages Top weakness 1.0.1 shipped on 17 October 2026, and the Node and .NET changelogs still list the V1 changes under Unreleased |
||||||||||||
| 44 | Amazon Bedrock model customisationAmazon Web Services · HTTP API | Fine-tuning | BB | 76 | 3.3 (4) | n/a | n/a | Pay per use | OAuth or key | Hosted | ||
|
Managed supervised fine-tuning, reinforcement fine-tuning and distillation of Amazon Nova, Meta Llama and selected open-weight models on Amazon Bedrock, run as asynchronous jobs through the Bedrock control-plane API, the AWS SDKs and CLI, or OpenAI-compatible endpoints. Top strength
Top weakness Fine-tuning runs in us-east-1 and us-west-2 only, and each base model in one of them (two for the Titan models) |
||||||||||||
| 45 | Turnkey Agentic WalletsTurnkey Global, Inc. · HTTP API | Wallets | BB | 76 | 3.0 (4) | n/a | n/a | $0.10 / call | API key | Hosted | ||
|
Turnkey's signing API gives an AI agent its own non-root user and P-256 key over a company wallet. Policies evaluated in secure enclaves set what the agent may sign, and can require a person's approval. Top strength Non-root users have no permissions until an ALLOW policy exists, and any matching DENY policy wins Top weakness Documented policy conditions cap value per transaction only. Rolling-window Velocity Controls appear in the SDK clients but not in the docs |
||||||||||||
| 46 | HookdeckHookdeck Technologies Inc. · HTTP API | Webhooks | BB | 75.9 | 4.3 (4) | n/a | n/a | $39 / mo | API key | Hosted and local | ||
|
Hookdeck Event Gateway is a hosted service that receives webhooks, queues them and sends them on to HTTP destinations with filters, transformations, retries and replay. Agents use its REST API or the stdio MCP server in the Hookdeck CLI. Top strength API keys take read or write scopes per resource family, project and resource grants, and rollover with a 0, 1 or 24 hour overlap Top weakness Go SDK last committed 11 December 2024 and the TypeScript SDK is marked deprecated, so current clients are the CLI, Terraform and raw HTTP |
||||||||||||
| 47 | Arize PhoenixArize AI · HTTP API | Evals | BB | 75.7 | 3.8 (8) | n/a | n/a | Free · OSS | OAuth or key | Local | ||
|
Self-hosted tracing, evaluation, datasets, experiments and prompt management built on OpenTelemetry and OpenInference. Top strength Free and self-hosted with no feature gating, from Top weakness Auth is off by default and the default admin password is |
||||||||||||
| 48 | You.com APIsYou.com · HTTP API | Search | BB | 75.7 | 3.8 (8) | n/a | n/a | $5 / 1k req | OAuth or key | Hosted and local | ||
|
Web Search, Contents, Answer, Research and Finance Research APIs, plus a hosted MCP server with six tools. Top strength x402 and MPP on Web Search and Finance Research, with no account needed Top weakness Two API hosts. Answer and Research return 'Missing Authentication Token' on ydc-index.io |
||||||||||||
| 49 | Azure Blob StorageMicrosoft · HTTP API | Storage | BB | 75.7 | 3.0 (4) | n/a | n/a | $0.005 / 1k req | OAuth or key | Hosted | ||
|
Microsoft Azure's object storage for files, backups and application data. Agents call a REST API or the Azure SDKs on a storage account, signing in with Microsoft Entra ID, an account key or a shared access signature. Top strength Microsoft Entra ID roles such as Storage Blob Data Reader can be assigned on one container, with no stored key for workloads on Azure Top weakness Shared Key authorisation with the account's access keys is allowed until the owner sets |
||||||||||||
| 50 | NocoDBNocoDB Inc · HTTP API | Spreadsheets | BB | 75.7 | 3.5 (4) | n/a | n/a | $12 / seat-mo | OAuth or key | Hosted | ||
|
NocoDB is a database of typed records in bases, tables and views, run on NocoDB Cloud or self-hosted. Agents reach it through a REST API and a built-in MCP server, using scoped API tokens or OAuth. Top strength Fine-grained API tokens carry eight permission categories at Read or Read and write, a list of bases, an expiry and an on-off switch Top weakness 5 requests a second per user on every plan, shared by all of that user's tokens, with a 30-second block after a 429 |
||||||||||||
| 51 | AgentMail API + MCPAgentMail · HTTP API | Inboxes | BB | 75.6 | 3.1 (8) | n/a | n/a | $2 / call x402 | OAuth or key | Hosted and local | ||
|
Email inboxes for agents over REST. Top strength Inbox creation, threads, drafts and labels built for agents, with Top weakness Email sending was down for 8 hours 7 minutes on 19 August 2026 |
||||||||||||
| 52 | Amazon Bedrock GuardrailsAmazon Web Services · HTTP API | Guardrails | BB | 75.6 | 3.4 (8) | n/a | n/a | Pay per use | API key | Hosted | ||
|
Configurable guardrail policies (content filters with a prompt-attack category, denied topics, word filters, PII and regex filters, contextual grounding, Automated Reasoning checks) applied to any model through the ApplyGuardrail API, or inline through InvokeGuardrailChecks. Top strength ApplyGuardrail works with any model, self-hosted or third party, without invoking Bedrock inference Top weakness Per-policy billing, so four paid policies on one request cost four times, and no Guardrails-specific free tier |
||||||||||||
| 53 | Supabase API + MCPSupabase · HTTP API | Databases | BB | 75.6 | 3.3 (8) | n/a | n/a | $25 / mo | OAuth or key | Hosted and local | ||
|
Hosted Postgres with an auto-generated REST API (PostgREST), GraphQL, auth, storage, realtime and Edge Functions, plus a Management API and an official MCP server. Top strength OAuth 2.1 with dynamic client registration, plus personal access tokens scoped to chosen projects and permissions Top weakness The status feed lists 3 critical and 3 major platform incidents between 31 August and 17 October 2026 |
||||||||||||
| 54 | Google Drive API + MCPGoogle · HTTP API | Storage | BB | 75.5 | 3.4 (8) | n/a | n/a | Free | OAuth | Hosted | ||
|
REST API for a user's or a Workspace organisation's Drive, files, folders, permissions and share links, with resumable uploads and change feeds. Top strength No charge for API calls within quota, counted in quota units per minute per project and per user Top weakness OAuth consent, scope verification and a Cloud project before an agent can list a folder |
||||||||||||
| 55 | Chrome DevTools MCPGoogle (Chrome DevTools team) · MCP server | Browser | BB | 75.4 | 3.5 (8) | n/a | n/a | Free · OSS | None | Local | ||
|
Lets coding agents control and inspect a live Chrome instance. Top strength Performance traces, network inspection, heap snapshots and Lighthouse audits in one server Top weakness Usage statistics go to Google by default until you pass |
||||||||||||
| 56 | SpiderSpider (BAGELMEN LLC) · HTTP API | Scrapers | BB | 75.3 | 3.3 (8) | n/a | n/a | $0.0005 / call x402 | OAuth or key | Hosted and local | ||
|
Hosted crawl, scrape, search, links and screenshot API built on the open-source Rust spider crate, plus a cloud browser and proxy pool. Top strength Keyless /scrape and x402 v2 on every core route, so an agent needs no account Top weakness No security.txt, disclosure policy, certification or prompt-injection guidance found |
||||||||||||
| 57 | AgentOSFramers Lab, Inc. · Agent framework | Frameworks | BB | 75.3 | 2.8 (4) | n/a | n/a | Free · OSS | API key | Library | ||
|
Open-source TypeScript agent framework from Framers Lab, installed from npm as @framers/agentos. It runs agents with long-term memory, multi-agent teams, graph workflows with checkpoints, guardrails and approval gates across 11 model providers. Top strength Apache 2.0, with no analytics or telemetry code found in the source and a privacy page that says the runtime sends nothing to the vendor Top weakness Version 0.14.2, with 180 releases from 8 to 17 October 2026 and breaking minors 0.13.0 and 0.14.0 in that time |
||||||||||||
| 58 | Amazon TranscribeAmazon Web Services · Model API | STT | BB | 75.3 | 4.0 (2) | n/a | n/a | Pay per use | API key | Hosted | ||
|
Amazon Transcribe is AWS's speech-to-text API, with batch jobs that read audio from Amazon S3 and real-time streaming over HTTP/2 or WebSocket, signed with IAM credentials. Top strength $0.006 a minute batch and $0.01 streaming in US East, with diarisation, custom vocabulary and language ID included Top weakness AWS may store and use audio to improve the service unless an organisation-wide AI services opt-out policy is set |
||||||||||||
| 59 | Amazon Nova Multimodal EmbeddingsAmazon Web Services · HTTP API | Embeddings | BB | 75.2 | 3.3 (4) | n/a | n/a | Pay per use | API key | Hosted | ||
|
Amazon Nova Multimodal Embeddings is an AWS model on Amazon Bedrock that turns text, images, document images, video and audio into vectors in one space, at 256, 384, 1024 or 3072 dimensions, through synchronous and asynchronous calls. Top strength Text, images, document images, video and audio share one vector space, with four output sizes from 256 to 3072 Top weakness In-Region inference in us-east-1 and us-gov-west-1 only, with no cross-Region inference profile |
||||||||||||
| 60 | ElevenLabs Text to Speech API + MCPElevenLabs · Model API | TTS | BB | 75.2 | 3.5 (2) | n/a | n/a | $6 / mo | OAuth or key | Hosted and local | ||
|
ElevenLabs text-to-speech over REST, HTTP streaming and WebSocket. Top strength Keys can be limited to chosen endpoints, IP ranges and a credit quota, and service accounts hold keys that don't belong to a person Top weakness Content may be used for training unless you opt out under Data use, though the Eleven v4 launch page says it isn't used without consent |
||||||||||||
| 61 | AhaSend API + MCPAhaSend · HTTP API | BB | 75.1 | 4.0 (4) | n/a | n/a | $10 / mo | OAuth or key | Hosted | |||
|
AhaSend is a Dutch email service with a REST API, SMTP relay, CLI and SDKs for transactional email and campaigns, hosted in the EU. Its hosted MCP server lets an AI tool send, diagnose and manage the account. Top strength API keys scoped per action and per sending domain, with IP allow lists and sandbox-only keys Top weakness 82 MCP tools when a connection has every scope, with no enums or numeric limits in the input schemas |
||||||||||||
| 62 | Amazon EventBridgeAmazon Web Services · HTTP API | Webhooks | BB | 75.1 | 3.3 (4) | n/a | n/a | $0.18 / GB | OAuth or key | Hosted | ||
|
Amazon EventBridge is AWS's serverless event bus. Applications, AWS services and SaaS partners publish events, and the bus routes them to targets such as Lambda functions, SQS queues and HTTPS endpoints. It includes Pipes, a scheduler and a schema registry. Top strength Smithy models published for both APIs, 57 Classic operations and 25 for the Custom Event Bus, with llms.txt and a Markdown twin of each guide page Top weakness Classic |
||||||||||||
| 63 | Parallel Search and Task APIsParallel Web Systems · HTTP API | Search | BB | 75 | 3.6 (8) | n/a | n/a | $1 / 1k req | OAuth or key | Hosted | ||
|
Parallel's web APIs for agents, covering search, page extraction, asynchronous research tasks and an OpenAI-compatible Responses endpoint, with hosted Search and Task MCP servers. Top strength Fast-mode search at $1 per 1,000 with 10 excerpted results, and Extract at $1 per 1,000 URLs Top weakness Search defaults to advanced mode at $5 per 1,000 when |
||||||||||||
| 64 | AblyAbly Realtime Ltd · HTTP API | Webhooks | BB | 75 | 3.8 (4) | n/a | n/a | $29 / mo | API key | Hosted | ||
|
Hosted realtime messaging from Ably Realtime Ltd in London. Clients publish and subscribe on channels over WebSocket, SSE or MQTT, with a REST API, presence, message history, outbound and inbound webhooks, and AMQP queues. Top strength API keys and tokens carry per-channel capabilities (publish, subscribe, history and 16 others), and tokens can be revoked by client, channel or revocation key Top weakness No official MCP server. The Ably CLI's built-in one was removed in v0.17.0 on 8 March 2026 |
||||||||||||
| 65 | Amazon Bedrock AgentCore IdentityAmazon Web Services · HTTP API | Agent auth | BB | 75 | 3.3 (4) | n/a | n/a | $0.01 / 1k req | OAuth or key | Hosted | ||
|
Amazon Bedrock AgentCore Identity is an AWS service that gives agents workload identities, stores OAuth tokens and API keys in a token vault, and runs OAuth flows so agents can call third-party services for users or for themselves. Top strength
Top weakness No operation to revoke or delete one user's stored grant was found. |
||||||||||||
| 66 | DiditDidit Identity Spain, S.L. · HTTP API | Verification | BB | 75 | 4.0 (4) | n/a | n/a | $0.15 / tx | OAuth or key | Hosted and local | ||
|
Didit is a hosted identity verification service for document, liveness, face match, sanctions screening and business registry checks. Developers reach it through a REST API with an OpenAPI spec, a hosted MCP server and client SDKs. Top strength An account and API key can be created by API at Top weakness Three incidents marked major on status.didit.me from 22 July to 4 September 2026, each a partial outage of the core APIs traced to the primary database |
||||||||||||
| 67 | ElevenLabs Voice Cloning and Voice Design APIElevenLabs · Model API | Cloning | BB | 74.8 | 3.5 (2) | n/a | n/a | $6 / mo | API key | Hosted and local | ||
|
ElevenLabs' voice cloning service creates voices from audio samples. Professional cloning uses verified recordings, while Voice Design generates voices from text prompts. Top strength Instant clones from 1 to 2 minutes of audio on the $6 Starter plan Top weakness Instant clones rely on an attestation, not a check |
||||||||||||
| 68 | Langfuse API + MCPLangfuse (ClickHouse) · HTTP API | Evals | BB | 74.8 | 4.0 (2) | n/a | n/a | $29 / mo | API key | Hosted | ||
|
Open-source tracing, evaluation, prompt management and datasets for LLM apps and agents, built on OpenTelemetry. Top strength MIT core with no usage limits when self-hosted, and self-hosted telemetry documented with an off switch Top weakness About 92 MCP tools load by default, writes included, and the MCP docs still leave read-only to a client allowlist |
||||||||||||
| 69 | Azure Key VaultMicrosoft · HTTP API | Secrets | BB | 74.7 | 3.8 (4) | n/a | n/a | $0.003 / 1k calls | OAuth | Hosted | ||
|
Microsoft Azure's managed store for secrets, encryption keys and TLS certificates. Applications read secrets over a REST API or the Azure SDKs and CLI, signing in with Microsoft Entra ID and authorised by Azure role assignments. Top strength No API keys. Every call carries a Microsoft Entra ID bearer token, and managed identities remove stored credentials for workloads on Azure Top weakness No managed rotation for secrets. Key Vault raises a near-expiry event 30 days ahead and the owner's Azure Function does the rotation |
||||||||||||
| open | Qwen3-Embedding-8BAlibaba (Qwen team) · Open-weight model | Embeddings | BB | 74.7 | 3.5 (4) | n/a | n/a | Free | None | Local | ||
|
Qwen3-Embedding-8B is Alibaba's open-weight text embedding model built on Qwen3-8B-Base, returning vectors of up to 4,096 dimensions for retrieval, code search and clustering in over 100 languages, under Apache 2.0. Top strength About 5.6 GB of memory for Alibaba's own Q4_K_M GGUF, with five more precisions up to F16 Top weakness No change to the files or reference code since July 2025, and no reply from Qwen to any of its 19 questions |
||||||||||||
| 70 | GroqCloudGroq · Model API | Models | BB | 74.5 | 3.5 (8) | n/a | n/a | from $0.075 / 1M in | API key | Hosted | ||
|
OpenAI-compatible inference API serving open-weight models on Groq's processors. Top strength Free plan with no card, at 30 requests a minute and 1,000 a day on gpt-oss Top weakness Four model shutdown dates between 2026-07-17 and 2026-09-21, with no stated minimum notice |
||||||||||||
| 71 | AWS End User MessagingAmazon Web Services · HTTP API | Messaging | BB | 74.5 | 2.5 (4) | n/a | n/a | $1 / mo | OAuth or key | Hosted | ||
|
AWS's messaging service for SMS, MMS, RCS, WhatsApp, voice and push, formerly the channel APIs of Amazon Pinpoint. Agents call the SMS and Voice v2 API or the Social Messaging API with IAM-signed requests, through the AWS CLI or SDKs. Top strength IAM policies per action and resource with condition keys and temporary credentials, and CloudTrail data events for the send actions Top weakness Sandbox limits new accounts to $1 of SMS a month and ten verified numbers until a support case per Region is approved |
||||||||||||
| 72 | Customer.ioPeaberry Software, Inc. d/b/a Customer.io · HTTP API | Lifecycle marketing | BB | 74.5 | 3.5 (4) | n/a | n/a | $100 / mo | OAuth or key | Hosted | ||
|
Customer.io is a customer engagement platform that stores profiles and events, builds segments and sends automated email, SMS, push, in-app and WhatsApp messages. Agents reach it through REST APIs, a hosted MCP server and a command-line tool. Top strength MCP connections default to the Top weakness No idempotency key found on App API writes, transactional sends included |
||||||||||||
| 73 | DatoCMSDato Srl · HTTP API | CMS | BB | 74.4 | 3.5 (4) | n/a | n/a | Freemium | OAuth or key | Hosted | ||
|
DatoCMS is a hosted headless CMS from Dato Srl in Milan. Agents write records, assets, locales and schema through the REST Content Management API, the `datocms` CLI or a hosted MCP server, and read through a GraphQL Content Delivery API. Top strength Machine-readable JSON Hyper-Schema at Top weakness No idempotency keys in the reviewed documentation. Safe retries rest on optimistic locking and the JavaScript client's automatic retry |
||||||||||||
| 74 | Microsoft Entra Agent IDMicrosoft · HTTP API | Agent auth | BB | 74.4 | 2.8 (4) | n/a | n/a | $15 / seat-mo | OAuth | Hosted | ||
|
Microsoft Entra Agent ID is an identity type for AI agents in Microsoft Entra ID. Agents get their own directory identity, request OAuth 2.0 tokens autonomously or on behalf of a user, and are managed through Microsoft Graph. Top strength Agent identities can't hold credentials. The blueprint authenticates with a managed identity, certificate or secret and exchanges for the agent's token Top weakness Conditional Access, ID Protection and governance for agents need Microsoft Agent 365, listed at $15 a user a month on yearly billing |
||||||||||||
| 75 | RestateRestate GmbH · Platform | Human approval | BB | 74.3 | 3.5 (4) | n/a | n/a | $75 / mo | API key | Local | ||
|
Durable execution runtime from Restate GmbH in Berlin, run as Restate Cloud, in the customer's own cloud account or self-hosted. Handlers pause on durable promises (awakeables and signals) and resume when a person answers over HTTP. Top strength One HTTP request resolves or rejects an awakeable, and the waiting handler resumes after restarts or redeployment Top weakness No reviewer inbox, Slack app or email. The approval request and the reply endpoint are the builder's code |
||||||||||||
| 76 | Web Search Tool on Amazon Bedrock AgentCoreAmazon Web Services · MCP server | Search | BB | 74.3 | 3.3 (4) | n/a | n/a | $7 / 1k req | OAuth or key | Hosted | ||
|
Web Search Tool on Amazon Bedrock AgentCore is AWS's managed web search for agents, backed by an Amazon-operated index and knowledge graph. It runs as a connector on an AgentCore Gateway and is called as an MCP tool. Top strength One tool with three inputs, Top weakness No error responses for the tool are documented. The only response example has |
||||||||||||
| 77 | Telnyx Voice API + MCPTelnyx · HTTP API | Calling | BB | 74.2 | 3.5 (8) | n/a | n/a | $1 / mo | OAuth or key | Hosted and local | ||
|
Carrier-owned Voice API (Call Control and TeXML) for calls, numbers, websocket media streaming, recording and transfers on Telnyx's own network. Top strength About $0.007 a minute all-in for US outbound ($0.002 Voice API plus $0.005 termination) Top weakness x402 and MPP only top up credit, they don't pay per call, and x402 sits behind a per-account feature flag |
||||||||||||
| 78 | letmeAnchor Terminal · HTTP API | Tool access | BB | 74.2 | 3.8 (8) | n/a | n/a | Free | None | Hosted | ||
|
letme (letme.dev) picks a tool for a job from Anchor Terminal's published grades by one published rule and says how to call it direct. Agents ask by job, capability or listing over HTTP or MCP, with no key. Top strength No key, account or card for any pick, over HTTP GET, POST or the MCP endpoint at letme.dev/mcp. Top weakness Picks only. Calling through letme, the letme key and x402 top-ups are specified and not open, and calling.open is false in every answer. |
||||||||||||
| open | Gemma 4 31B ITGoogle DeepMind · Open-weight model | Open weights | BB | 74.1 | 3.8 (4) | n/a | n/a | Free | None | Local | ||
|
Gemma 4 31B IT is Google DeepMind's open-weight dense multimodal model of 30.7B parameters, taking text and images with a 256K-token context, published on Hugging Face in BF16 with 4-bit QAT builds under Apache 2.0. Top strength Google's own 17.7 GB QAT Q4_0 GGUF fits a 24 GB GPU, and Ollama's gemma4:31b is 20 GB Top weakness No safety evaluation results published |
||||||||||||
| 79 | SvixSvix Inc. · HTTP API | Webhooks | BB | 74 | 3.5 (4) | n/a | n/a | $20 / mo | API key | Hosted | ||
|
Svix is a webhook sending service with a hosted REST API and an MIT-licensed server. One call creates a message, and Svix signs it, sends it to each subscribed endpoint, retries failures and logs every attempt. Top strength OpenAPI 3.1 spec with 141 operations, each described, and code samples on 140 of them Top weakness An API key can make any API call for its environment. No read-only or scoped API key was found in the reviewed documentation |
||||||||||||
| 80 | Google Cloud Document AIGoogle Cloud · HTTP API | Documents | BB | 73.9 | 3.5 (4) | n/a | n/a | $1.50 / 1k pages | OAuth | Local | ||
|
Google Cloud's service for OCR, layout parsing, chunking, form and table extraction, classification and splitting of documents. Work runs through processors created per project and location. Access is a REST and gRPC API with client libraries in eight languages. Top strength Discovery document for v1 (revision 20260929) with 42 methods and 326 schemas, and descriptions on 952 of 966 properties Top weakness An online request reads at most 15 pages (30 with |
||||||||||||
| 81 | Grafana MCP ServerGrafana Labs · MCP server | Observability | BB | 73.9 | 3.0 (4) | n/a | n/a | Free · OSS | OAuth or key | Local | ||
|
Grafana Labs' open-source MCP server for Grafana. It runs locally or self-hosted and gives agents dashboards, datasource queries (Prometheus, Loki, Tempo, Pyroscope and others), alerting, incidents and OnCall on a self-managed Grafana or Grafana Cloud. Top strength All 79 default tools in 2.0.2 build typed JSON Schema inputs from Go parameter structs and set Top weakness The default set is 79 tools, and 119 with every category on, counted from the registration code in source |
||||||||||||
| 82 | ZepZep · HTTP API | Memory | BB | 73.9 | 4.0 (2) | n/a | n/a | $125 / mo | OAuth or key | Hosted | ||
|
Hosted context and memory service built on a temporal graph of facts, relationships and source episodes. Top strength Facts that new data invalidates keep the time they stopped being true Top weakness The terms of 17 August 2026 grant a perpetual, irrevocable licence to train models on customer data |
||||||||||||
| 83 | gooseAgentic AI Foundation (originally Block) · Agent harness | Harnesses | BB | 73.9 | 2.5 (2) | n/a | n/a | Free · OSS | None | Local | ||
|
Open-source general-purpose agent written in Rust, with a desktop app, a CLI and an embeddable server. Top strength Telemetry off until the user opts in, with the collected fields listed Top weakness Autonomous mode, which approves every tool call, is the default |
||||||||||||
| 84 | Robot FrameworkRobot Framework Foundation · Agent framework | Desktop | BB | 73.8 | 4.0 (4) | n/a | n/a | Free · OSS | None | Library | ||
|
Robot Framework is an open-source automation framework for test automation and robotic process automation, run from the `robot` command line or Python. Its keyword libraries reach browsers, desktop applications and mobile apps. Top strength Version 7.5 of 14 September 2026, marked Production/Stable on PyPI, with Python 3.8 to 3.15 listed Top weakness Desktop and mobile control depend on separate libraries, such as AppiumLibrary and AutoItLibrary, maintained outside the core project |
||||||||||||
| 85 | Amazon TextractAmazon Web Services · HTTP API | Documents | BB | 73.7 | 3.0 (4) | n/a | n/a | $1.50 / 1k pages | API key | Hosted | ||
|
Amazon Textract is AWS's document OCR and analysis API. It reads printed and handwritten text from scans and PDFs and returns tables, form fields, layout elements, answers to queries, and invoice, receipt and identity document fields as JSON. Top strength IAM policies grant single operations such as Top weakness AWS may store and use processed documents to improve the service, in other Regions too, unless an AI services opt-out policy is set on the AWS organisation |
||||||||||||
| 86 | SanitySanity US Inc. and Sanity AS · HTTP API | CMS | BB | 73.7 | 3.3 (4) | n/a | n/a | $15 / seat-mo | OAuth or key | Hosted | ||
|
Sanity is a hosted headless CMS. Content is stored as JSON documents in the Content Lake, queried with GROQ and edited in the open-source Sanity Studio. Agents reach it through the HTTP API or the hosted MCP server at mcp.sanity.io. Top strength 26 public OpenAPI specs covering 225 operations at www.sanity.io/docs/api/openapi, plus llms.txt and a Markdown copy of every documentation page Top weakness Schema validation rules run only in Sanity Studio. The HTTP mutation API accepts a document without checking them |
||||||||||||
| 87 | Agent Development Kit (ADK)Google · Agent framework | Frameworks | BB | 73.6 | 3.0 (8) | n/a | n/a | Free · OSS | None | Library | ||
|
Google's code-first toolkit to build, evaluate and deploy agents in Python, TypeScript, Go, Java and Kotlin. Top strength Python, TypeScript, Go, Java and Kotlin, with the first four released between 13 and 15 October 2026 Top weakness Four CVEs in 2026, three of them critical, one in tool confirmation itself |
||||||||||||
| 88 | Amazon SESAmazon Web Services · HTTP API | BB | 73.6 | 3.3 (8) | n/a | n/a | $105 / mo | OAuth or key | Hosted | |||
|
AWS's email service for sending and receiving at scale, over the SES v2 API or SMTP, with templates, configuration sets, receipt rules and deliverability tooling. Top strength $0.10 per 1,000 emails a la carte, falling to $0.11 per 1,000 above 100 million on Essentials Top weakness Sandbox limits new accounts to verified recipients and 200 messages a day until production access is granted |
||||||||||||
| 89 | SeleniumSelenium project (Software Freedom Conservancy) · SDK + MCP | Browser | BB | 73.6 | 3.8 (4) | n/a | n/a | Free · OSS | None | Local | ||
|
Selenium is the open-source browser automation project behind the W3C WebDriver standard, with official bindings for Java, Python, C#, Ruby and JavaScript and a self-hosted Grid server that runs browsers on other machines. Top strength Official bindings for Java, Python, C#, Ruby and JavaScript, released together, 4.51.0 on 9 October 2026 Top weakness No MCP server from the project. The docs point to community servers and say they are third-party |
||||||||||||
| 90 | Akeyless (SecretlessAI and MCP server)Akeyless · Platform | Secrets | BB | 73.6 | 3.0 (2) | n/a | n/a | Freemium | OAuth or key | Hosted and local | ||
|
SaaS secrets and machine-identity platform with a self-hosted Gateway that brokers access. Top strength Gateway-brokered SecretlessAI and a runtime-authority MCP server with 4 tools that return results, not credentials Top weakness No published prices above the free plan; clients and transactions are metered with overage billed at the end of a 12-month contract |
||||||||||||
| 91 | Telnyx API + MCPTelnyx · HTTP API | Messaging | BB | 73.6 | 3.5 (2) | n/a | n/a | Pay per use | API key | Hosted and local | ||
|
Carrier-owned CPaaS with SMS, MMS, RCS and WhatsApp on one REST API, plus an official hosted MCP server at api.telnyx.com/v2/mcp and a stdio MCP package. Top strength US long code SMS $0.004 a part outbound and inbound, published with carrier fees and as machine-readable pricing.md Top weakness No per-key scopes or read-only keys, and the MCP can send or buy numbers without confirmation |
||||||||||||
| 92 | Amazon PollyAmazon Web Services · Model API | TTS | BB | 73.5 | 4.0 (8) | n/a | n/a | Pay per use | API key | Hosted | ||
|
AWS's speech synthesis API with four engines (standard, neural, long-form and generative) and about 110 voices in 42 languages and variants. Top strength IAM policies scope access per action and resource, and CloudTrail logs each call Top weakness AWS may store and use text to improve the service, possibly outside the Region, unless the organisation sets an AI services opt-out policy |
||||||||||||
| 93 | Cloudflare AI SearchCloudflare, Inc. · HTTP API | Retrieval | BB | 73.5 | 3.5 (4) | n/a | n/a | $0.75 / 1k req | OAuth or key | Local | ||
|
Cloudflare's managed retrieval service, formerly AutoRAG, indexes websites, R2 buckets and uploaded files and answers natural-language queries with vector, keyword or hybrid search, through a REST API, a Workers binding or a per-instance MCP endpoint. Top strength Hybrid vector and BM25 search on by default, with metadata filters applied before retrieval Top weakness Public endpoints, including MCP, answer anyone with the URL unless a custom domain sits behind Cloudflare Access |
||||||||||||
| 94 | Fireworks AI InferenceFireworks.ai, Inc. · HTTP API | Models | BB | 73.5 | 4.3 (4) | n/a | n/a | Freemium | API key | Hosted | ||
|
Fireworks AI Inference runs open models through OpenAI-compatible chat and completion APIs. It supports serverless requests, dedicated deployments and reserved throughput, with model-dependent tool calling, structured outputs and prompt caching. Top strength An inference-only role limits service accounts without permitting resource changes Top weakness The Responses API stores conversations for 30 days by default unless store is false |
||||||||||||
| 95 | Vercel SandboxVercel · HTTP API | Sandboxes | BB | 73.5 | 3.5 (2) | n/a | n/a | $0.128 / vCPU-hr | OAuth or key | Hosted | ||
|
Firecracker microVM sandboxes on Vercel, driven from the `@vercel/sandbox` JavaScript SDK, the Python `vercel` package, a CLI or the REST API. Top strength Active CPU billing, so waiting on model responses costs only memory Top weakness Tied to a Vercel team and project even when called from elsewhere, and access tokens reach the whole team |
||||||||||||
| 96 | OpenAI CodexOpenAI · Agent harness | Harnesses | BB | 73.4 | 3.0 (2) | n/a | n/a | $20 / mo | OAuth or key | Local | ||
|
OpenAI's coding agent for software development tasks. Top strength Sandbox on by default on macOS, Linux and Windows, with the network off and Top weakness Pre-1.0 at 0.163.0, with a minor every few days and no breaking-change section in release notes --yolo undoes both”All 2 reviews ›
|
||||||||||||
| 97 | Qdrant API + MCPQdrant · HTTP API | Retrieval | BB | 73.3 | 3.6 (8) | n/a | n/a | Freemium | API key | Hosted and local | ||
|
Open-source vector database written in Rust, run yourself or on Qdrant Cloud. Top strength Database keys can be read-only, limited to chosen collections and expire after 90 days by default Top weakness The MCP server has 2 tools, can't manage collections, and last released on 10 December 2025 |
||||||||||||
| 98 | OpenAI Decisions APIOpenAI · Model API | Decisions | BB | 73.1 | 3.5 (4) | n/a | n/a | Pay per use | API key | Hosted | ||
|
The Decisions API is an OpenAI endpoint, in public beta since 6 October 2026, that reads text and images and returns typed answers with probabilities, a predicate, a choice from a fixed set or a rubric score. Top strength Three typed question kinds, predicate, choice and score, with per-option probabilities and up to 200 questions about one input in a call Top weakness Public beta released on 6 October 2026. The guide expects general availability in the coming weeks and gives no date |
||||||||||||
| 99 | Azure AI Speech speech-to-textMicrosoft · Model API | STT | BB | 73 | 3.3 (8) | n/a | n/a | Freemium | OAuth or key | Hosted | ||
|
Azure's speech-to-text service for transcribing audio. Top strength Real-time and fast transcription audio isn't stored, and customer audio isn't used for training Top weakness MAI-Transcribe-2 and MAI-Transcribe-2-Streaming are preview with no SLA, and both introductory prices end with 2026 |
||||||||||||
| 100 | Kilo Code CLIKilo Code Inc. · Agent harness | Harnesses | BB | 73 | 2.3 (4) | n/a | n/a | $19 / mo | OAuth or key | Local | ||
|
Open-source coding agent for the terminal, forked from opencode and built from the same repository as Kilo's VS Code and JetBrains extensions. It runs with your own provider key, a local model or the Kilo Gateway. Top strength Permission rules of Top weakness Telemetry to PostHog is on by default, attaches the conda client ID since 7.8.10, and the privacy policy doesn't mention it |
||||||||||||
| open | Qwen3-Embedding-4BAlibaba (Qwen team) · Open-weight model | Embeddings | BB | 72.9 | 3.5 (4) | n/a | n/a | Free | None | Local | ||
|
Qwen3-Embedding-4B is Alibaba's open-weight text embedding model built on Qwen3-4B-Base, returning vectors of up to 2,560 dimensions for retrieval, code search and clustering in over 100 languages, under Apache 2.0. Top strength About 3 GB of memory for Alibaba's own Q4_K_M GGUF, with five more precisions up to F16 Top weakness No change to the files or reference code since August 2025, and no reply from Qwen to any of its 16 questions |
||||||||||||
| 101 | WooCommerce API + MCPWooCommerce (Automattic) · HTTP API | Commerce | BB | 72.9 | 3.5 (2) | n/a | n/a | Free · OSS | OAuth or key | Local | ||
|
Open-source commerce plugin for WordPress that you host yourself. Top strength Free GPL software with no platform fee or revenue share Top weakness Uptime, speed and security depend on each store's host and plugins. No vendor status page |
||||||||||||
| 102 | AgnoAgno Inc. · Agent framework | Frameworks | BB | 72.8 | 3.3 (4) | n/a | n/a | Free · OSS | API key | Library | ||
|
Open-source Python framework from Agno Inc. for building agents, teams and workflows, with the AgentOS runtime that serves them over a REST API and an MCP server. Formerly Phidata. Top strength Apache 2.0, with 25 stable releases on PyPI in the 90 days to 8 October 2026 and 3.1.1 on 2 October Top weakness Usage telemetry is on by default and sends session, run and agent identifiers unhashed. Prompts and outputs are not sent |
||||||||||||
| 103 | Amazon SNSAmazon Web Services · HTTP API | Notifications | BB | 72.8 | 3.5 (4) | n/a | n/a | $0.0005 / 1k req | OAuth or key | Hosted | ||
|
Amazon SNS is AWS's publish and subscribe messaging service. A message published to a topic, or directly to a device or phone number, goes out as mobile push, SMS, plain-text email, HTTPS calls or to SQS queues and Lambda functions. Top strength IAM identity policies and topic resource policies per action and topic, temporary credentials, and an Top weakness No idempotency token on |
||||||||||||
| 104 | Deepgram Text-to-Speech (Aura-2, Flux TTS)Deepgram · Model API | TTS | BB | 72.7 | 3.5 (2) | n/a | n/a | Pay per use | API key | Hosted and local | ||
|
Deepgram's text-to-speech API for generating spoken audio. Top strength OpenAPI 3.1 and AsyncAPI files, llms.txt and Markdown pages Top weakness Requests can be kept for training unless each one sets |
||||||||||||
| 105 | SuprSendSuprSend · HTTP API | Notifications | BB | 72.6 | 3.0 (2) | n/a | n/a | $110 / mo | API key | Hosted and local | ||
|
Notification workflow API for email, SMS, push, an in-app Inbox, Slack, Microsoft Teams and webhooks, with digests, batching and preferences per user and per tenant. Top strength MCP tool descriptions say when to use each tool, when not to, and what it changes, with readOnlyHint and destructiveHint set Top weakness No rate-limit page or 429 guidance |
||||||||||||
| 106 | LiveKit AgentsLiveKit Incorporated · Agent framework | Voice agents | BB | 72.5 | 3.0 (4) | n/a | n/a | Free · OSS | API key | Library | ||
|
LiveKit Agents is LiveKit's open-source Python and Node.js framework for realtime voice and video agents that join LiveKit rooms, with STT, LLM, TTS and realtime-model plugins, turn detection, MCP tools and telephony through LiveKit SIP. Top strength Apache-2.0 Python and Node.js packages, with 17 Python releases in the 90 days to 15 October 2026 Top weakness The turn-detector models are under a proprietary licence that forbids use outside LiveKit Agents and training other models on their output |
||||||||||||
| 107 | Cohere Embed and RerankCohere · HTTP API | Embeddings | BB | 72.5 | 3.5 (2) | n/a | n/a | $2 / 1k req | API key | Hosted | ||
|
Cohere's Embed API turns text, images and mixed text-and-image inputs such as PDF pages into vectors with Embed 5 Pro and Fast, and its Rerank API reorders search results with Rerank 4. Top strength Embed 5 Pro and Fast share one embedding space, so a Pro index answers Fast queries Top weakness Terms, training notice and security page disagree on whether API data trains models or goes to third parties |
||||||||||||
| 108 | OpenAI Speech to TextOpenAI · Model API | STT | BB | 72.4 | 3.3 (4) | n/a | n/a | Pay per use | API key | Hosted | ||
|
OpenAI's speech-to-text API. It transcribes uploaded audio files through `/v1/audio/transcriptions`, translates recordings into English through `/v1/audio/translations`, and transcribes live audio in Realtime transcription sessions over WebSocket or WebRTC. Top strength
Top weakness
|
||||||||||||
| 109 | Qwen CodeAlibaba (Qwen team) · Agent harness | Harnesses | BB | 72.4 | 2.8 (4) | n/a | n/a | Free · OSS | API key | Local | ||
|
Open-source coding agent from Alibaba's Qwen team for the terminal, with desktop, browser and editor interfaces. It runs Qwen, OpenAI, Anthropic and Gemini-compatible models or a local one, and runs headless with `qwen -p`. Top strength Apache-2.0, with CI on main showing 12 passes and 3 cancelled runs in the last 15, none failed Top weakness The default approval mode is Auto, where an LLM classifier approves tool calls, and sandboxing and folder trust are both off by default |
||||||||||||
| 110 | BlockRun.AIBlockRun, Inc. · MCP server | Models | BB | 72.4 | 3.5 (2) | n/a | n/a | Pay per use x402 | OAuth or key | Local | ||
|
Model and API gateway with an OpenAI-compatible interface, MCP support and per-request stablecoin payments through x402. Top strength x402 v2 on its own gateway, USDC on Base and Solana, with Base Sepolia for testing Top weakness The status page shows live checks only and keeps no incident history |
||||||||||||
| 111 | OpenAI Image APIOpenAI · Model API | Image | BB | 72.4 | 3.5 (2) | n/a | n/a | Pay per use | API key | Hosted | ||
|
OpenAI's image generation and editing endpoints (/v1/images/generations and /v1/images/edits), also callable as a tool inside the Responses API. Top strength Generation, mask edits and multi-reference edits on the same models, via the Image API or the Responses tool Top weakness No per-image price for GPT Image 2.5, and the cost calculator doesn't cover it |
||||||||||||
| 112 | Circle Wallets (Agent Wallets, Programmable Wallets)Circle · HTTP API | Wallets | BB | 72.3 | 3.1 (8) | n/a | n/a | 0.02% fee | OAuth or key | Hosted | ||
|
Circle's wallet APIs (developer-controlled, user-controlled and modular wallets) plus Agent Wallets, a USDC wallet an agent drives through the Circle CLI with per-transaction, daily, weekly and monthly caps and address allowlists. Top strength Agent Wallet caps per transaction, day, week and month plus recipient and contract allow and block lists, each change confirmed by email OTP Top weakness Developer-controlled wallets have no built-in spending caps; Compliance Engine rules need an application |
||||||||||||
| 113 | StatsigAmplitude, Inc. · HTTP API | Product analytics | BB | 72.3 | 3.8 (4) | n/a | n/a | $150 / mo | OAuth or key | Hosted | ||
|
Statsig is a hosted platform for feature flags, experiments and product analytics, run by Amplitude, Inc. since May 2026. Agents reach it through the Console API, which has a public OpenAPI spec, and an official hosted MCP server. Top strength Hosted MCP server with 18 default tools and a discovery layer that replaced 93 tools on the V1 server Top weakness Console API errors carry only |
||||||||||||
| 114 | Upstash QStashUpstash · HTTP API | Webhooks | BB | 72.3 | 3.3 (4) | n/a | n/a | $0.05 / GB | OAuth or key | Hosted | ||
|
Upstash QStash is a hosted HTTP message queue and scheduler. A caller publishes a request to its REST API, and QStash sends it to a public URL with retries, delays, cron schedules, FIFO queues and signed requests. Top strength Public OpenAPI 3.1 file with 43 operations for messages, queues, schedules, URL groups, the dead letter queue, logs and signing keys Top weakness One full-access token and one read-only token per region. No per-queue or per-destination scopes were found |
||||||||||||
| 115 | BrowserbaseBrowserbase · HTTP API | Browser | BB | 72.2 | 3.4 (8) | n/a | n/a | $0.12 / browser-hr x402 | API key | Hosted | ||
|
Hosted headless browsers for agents over CDP, plus Fetch and Search APIs and the Stagehand framework. Top strength x402 sessions at x402.browserbase.com with no account, $0.12 an hour, unused minutes refunded Top weakness The hosted MCP setup page passes the API key as |
||||||||||||
| open | Gemma 4 26B A4B ITGoogle DeepMind · Open-weight model | Open weights | BB | 72.2 | 3.8 (4) | n/a | n/a | Free | None | Local | ||
|
Gemma 4 26B A4B IT is Google DeepMind's open-weight instruction-tuned mixture-of-experts model, 25.2B parameters with 3.8B active, taking text and images with a 262,144-token context, published on Hugging Face under Apache 2.0. Top strength Plain Apache 2.0, no account or gate, safetensors and GGUF only with a checksum on every file Top weakness No safety evaluation figures published |
||||||||||||
| 116 | ZoomInfo API + MCPZoomInfo Technologies LLC · HTTP API | Leads | BB | 72.2 | 3.0 (4) | n/a | n/a | $0.38 / credit | OAuth | Hosted | ||
|
ZoomInfo sells B2B company, contact and buying-signal data. Agents search and enrich records through a REST API with OAuth 2.0, a hosted MCP server and the GTM CLI, all drawing on one credit pool. Top strength Free account with 1,000 data credits and 1,000 AI credits, no card, covering the API, MCP server and CLI Top weakness The Licence Terms and Conditions bar disclosing benchmark results and automated access outside ZoomInfo's own tools without written approval |
||||||||||||
| 117 | OpenAI embeddingsOpenAI · HTTP API | Embeddings | BB | 72.2 | 4.5 (2) | n/a | n/a | Pay per use | API key | Hosted | ||
|
OpenAI's text embedding API, with adjustable output dimensions for search and retrieval applications. Top strength text-embedding-3-small at $0.02 per million tokens, $0.01 through the Batch API Top weakness No new embedding model since 25 January 2024, and the docs still give a September 2021 knowledge cutoff |
||||||||||||
| 118 | Azure TranslatorMicrosoft · HTTP API | Translation | BB | 72 | 3.5 (2) | n/a | n/a | $10 / mo | OAuth or key | Hosted | ||
|
Microsoft's translation API, now part of Foundry Tools. Top strength $10 per million characters pay as you go, 2 million free a month on F0, commitment overage down to $5.50 Top weakness The 2026-06-06 schema breaks v3.0 clients and drops BreakSentence and dictionary lookups from the spec |
||||||||||||
| 119 | DeepL APIDeepL · HTTP API | Translation | BB | 72 | 3.5 (2) | n/a | n/a | Freemium | OAuth or key | Hosted and local | ||
|
Translation API for text and documents in over 100 languages, with glossaries, formality control, style rules, custom instructions, a writing endpoint and a voice API. Top strength Up to 5 glossaries, five formality settings, style rules and up to 10 custom instructions on the translate call Top weakness API Free and API Pro can't be bought any more, and API Developer's 1 million characters never reset |
||||||||||||
| 120 | Scalekit AgentKitScalekit · HTTP API | Agent auth | BB | 71.9 | 2.5 (2) | n/a | n/a | $99 / mo | OAuth or key | Hosted | ||
|
Authentication and integration platform for agents, with per-user account connections, scoped MCP servers and managed tool calls. Top strength 500+ connectors, including remote MCP servers over OAuth 2.1 with DCR Top weakness No rate limits or idempotency documented for Scalekit's own API |
||||||||||||
| 121 | Terraform MCP ServerHashiCorp · MCP server | Infra | BB | 71.9 | 3.0 (2) | n/a | n/a | Free · OSS | OAuth or key | Local | ||
|
HashiCorp's official MCP server for Terraform and its registry. Top strength Nine registry tools load by default and need no credentials Top weakness Workspace updates, variable writes, team membership and access grants run without the operations flag |
||||||||||||
| 122 | Groq Speech-to-TextGroq · Model API | STT | BB | 71.8 | 3.5 (4) | n/a | n/a | Freemium | API key | Hosted | ||
|
Groq's hosted speech-to-text API. It runs OpenAI's Whisper Large v3 and Whisper Large v3 Turbo on OpenAI-compatible transcription and translation endpoints, for uploaded files or audio URLs, with a half-price batch mode. Top strength Published prices of $0.04 an audio hour for Whisper Large v3 Turbo and $0.111 for Whisper Large v3, with 50% off through the Batch API Top weakness No streaming or realtime endpoint and no diarisation in the reviewed documentation |
||||||||||||
| 123 | 1Password service accounts, SDKs and Environments MCP1Password · Platform | Secrets | BB | 71.8 | 3.5 (2) | n/a | n/a | $8.99 / seat-mo | OAuth or key | Local | ||
|
Password manager with a developer layer for agents. Top strength Service accounts scoped per vault to read, write or share, with an optional expiry and permissions that can't be changed after creation Top weakness Teams, Families and Individual get 1,000 service account reads an hour per token, and the 429 carries no Retry-After |
||||||||||||
| 124 | Klaviyo API + MCPKlaviyo, Inc. · HTTP API | Lifecycle marketing | BB | 71.7 | 3.8 (4) | n/a | n/a | $20 / mo | OAuth or key | Hosted and local | ||
|
Klaviyo is a marketing platform that holds customer profiles and events and sends email, SMS, WhatsApp and push campaigns and flows. Agents reach it through a JSON:API REST API and an official hosted MCP server. Top strength Public OpenAPI 3.0.2 description of 345 operations, each with its rate limit and required scopes, in an MIT repository updated on 7 October 2026 Top weakness No approval or confirmation step before |
||||||||||||
| 125 | Nylas Notetaker APINylas, Inc. · HTTP API | Meetings | BB | 71.7 | 3.8 (4) | n/a | n/a | $15 / mo | API key | Hosted | ||
|
Nylas Notetaker is a meeting bot API that joins Google Meet, Microsoft Teams and Zoom calls, then returns a recording, a speaker-labelled transcript, a summary and action items. It works from a meeting link or a connected calendar. Top strength
Top weakness Invite requests accept no idempotency key, and every request schedules a new bot. Deduplication covers only Notetakers with a future |
||||||||||||
| 126 | Opik API + MCPComet · HTTP API | Evals | BB | 71.7 | 3.5 (4) | n/a | n/a | $19 / mo | OAuth or key | Hosted and local | ||
|
Opik is Comet's open-source platform for tracing, evaluating and optimising LLM apps and agents, under Apache-2.0. It runs self-hosted or on Comet's Opik Cloud, with a REST API, Python and TypeScript SDKs and a hosted MCP server. Top strength Five MCP tools carry readOnlyHint and destructiveHint, Top weakness No read-only mode or per-project scope for the MCP server, and the OAuth metadata advertises no scopes |
||||||||||||
| 127 | CoinGecko x402 APICoinGecko · HTTP API | Data | BB | 71.7 | 3.0 (2) | n/a | n/a | $0.01 / call x402 | None | Hosted | ||
|
CoinGecko exposes pay-per-call endpoints under an /x402/ path prefix of its Pro API, settled in USDC on Base with no API key. Top strength Five x402 endpoints at $0.01 USDC a request on Base or Solana, no key or account Top weakness The x402 endpoints are labelled experimental, and pricing and availability may change without notice |
||||||||||||
| 128 | FinchProfound Platform Inc. (dba Finch) · HTTP API | Payroll | BB | 71.6 | 3.0 (4) | n/a | n/a | Paid | OAuth | Hosted and local | ||
|
Finch is a unified API for reading an employer's existing HR and payroll system, run by Profound Platform Inc. in San Francisco. Applications read directory, employment and pay data from 250+ systems and write payroll deductions. Top strength One OpenAPI 3.1 file covers 55 operations, and llms.txt indexes the documentation with every page served as Markdown Top weakness Finch cannot create, preview or approve a payroll. Writes are limited to deductions and contributions, on Pro and Premier plans |
||||||||||||
| 129 | Nutrient DWS Processor APINutrient (PSPDFKit GmbH) · HTTP API | BB | 71.5 | 3.3 (4) | n/a | n/a | $75 / mo | OAuth or key | Hosted | |||
|
Hosted REST API from Nutrient (formerly PSPDFKit) that generates, converts, merges, OCRs, redacts, watermarks and signs PDF and Office documents. Agents call it with a Bearer key or through the hosted Nutrient MCP server. Top strength OpenAPI 3.1 document (version 1.19.0) for 17 operations, with llms.txt indexes and a Markdown twin of every guide Top weakness The local MCP server lost support on 14 October 2026, the day the change was announced |
||||||||||||
| 130 | HubSpot API + MCPHubSpot · HTTP API | CRM | BB | 71.5 | 4.0 (2) | n/a | n/a | $20 / seat-mo | OAuth or key | Hosted and local | ||
|
HubSpot's CRM REST API (objects, associations, search, properties, pipelines, engagements, webhooks) and its official MCP servers. Top strength Remote MCP server GA since 13 April 2026, OAuth 2.1 with PKCE only Top weakness Several incidents over an hour in the 90 days to 1 October 2026, up to about 8 hours |
||||||||||||
| 131 | Intercom API + MCPIntercom · HTTP API | Support | BB | 71.5 | 4.0 (2) | n/a | n/a | $29 / seat-mo | OAuth or key | Hosted | ||
|
Intercom's REST API (conversations, contacts, companies, tickets, notes, tags, articles, data attributes and webhooks) and its official hosted MCP server. Top strength Versioned OpenAPI per API version, 235 operations in 2.16, with breaking changes only in new versions Top weakness MCP can't reply, assign, snooze or close, those need the REST API |
||||||||||||
| 132 | Nevermined API + MCPNevermined · HTTP API | Platforms | BB | 71.5 | 3.0 (2) | n/a | n/a | 1% fee | OAuth or key | Hosted | ||
|
Payments, metering and access control for agents, MCP tools and APIs, with a catalogue of paid services agents search and pay through an MCP server or REST API, and a Router that pays x402 and MPP services from one budget. Top strength Delegations set a hard cap, transaction count and expiry, are never widened in place, and an OAuth commerce grant spends only from one Top weakness A person creates the first account in a browser, and every paid route needs a person to approve a key, consent or Delegation |
||||||||||||
| 133 | EmailEnginePostal Systems OÜ · HTTP API | Mailboxes | BB | 71.4 | 3.3 (4) | n/a | n/a | $120.83 / mo | API key | Local | ||
|
EmailEngine is self-hosted software from Postal Systems that puts one REST API over Gmail, Microsoft 365 and IMAP mailboxes, with webhooks for new mail and a beta MCP server. The owner runs it with Redis. Top strength Public OpenAPI 3.0 spec for version 2.82.2 with 82 operations, plus llms.txt on both sites and a capabilities.json manifest Top weakness Not open source. Running it beyond the 14-day trial needs a subscription at $1,450 or EUR 1,200 a year |
||||||||||||
| 134 | Shopwareshopware AG · HTTP API | Commerce | BB | 71.4 | 3.3 (4) | n/a | n/a | Freemium | OAuth or key | Local | ||
|
Open-source commerce platform from shopware AG in Germany, written in PHP on Symfony. Agents reach a store through its Store API for shopping, its Admin API for back-office work, and a built-in MCP server on both. Top strength MIT core, free to self-host, with security fixes for the 6.7 line promised until 28 February 2028 in releases.json Top weakness The MCP server is marked experimental until 6.8, and 6.7.14.0 changed what tools/list returns on the Store API endpoint |
||||||||||||
| 135 | Auth0 for AI Agents (Token Vault)Auth0 by Okta · HTTP API | Agent auth | BB | 71.4 | 3.5 (2) | n/a | n/a | Freemium | OAuth | Hosted and local | ||
|
Auth0's identity and authorisation tools for AI agents, built on its identity platform. Top strength Standard grants throughout, RFC 8693 token exchange, CIBA with RAR and DPoP Top weakness Only works when Auth0 is the identity provider for your users |
||||||||||||
| 136 | Azure AI Speech text-to-speechMicrosoft · Model API | TTS | BB | 71.4 | 3.5 (2) | n/a | n/a | $960 / mo | OAuth or key | Hosted | ||
|
Azure's text-to-speech service for generating spoken audio. Top strength Real-time synthesis keeps neither the input text nor the output audio Top weakness An Azure subscription needs a card, even for the free F0 tier |
||||||||||||
| 137 | DopplerDoppler · HTTP API | Secrets | BB | 71.4 | 3.0 (2) | n/a | n/a | $21 / seat-mo | OAuth or key | Hosted and local | ||
|
Hosted secrets manager organised by project, environment and config. Top strength Service tokens bound to one config, read-only by default, with --max-age expiry Top weakness Dynamic secrets and on-prem are Enterprise only, and Developer has no service accounts |
||||||||||||
| 138 | Amazon Bedrock AgentCore Code InterpreterAmazon Web Services · HTTP API | Sandboxes | BB | 71.3 | 3.3 (4) | n/a | n/a | $0.0895 / vCPU-hr | API key | Hosted | ||
|
Amazon Bedrock AgentCore Code Interpreter is AWS's managed sandbox for running agent-written Python, JavaScript and TypeScript. Each session is a dedicated microVM, reached through the AWS API, the AgentCore SDKs or an MCP server. Top strength Each session runs in a dedicated microVM, which AWS says is terminated and has its memory sanitised when the session ends Top weakness No pause, resume or snapshot. Session files are removed when the session ends, and persistence needs a customer-owned S3 Files or EFS mount inside a VPC |
||||||||||||
| open | Gemma 4 12B ITGoogle DeepMind · Open-weight model | Open weights | BB | 71.3 | 3.8 (4) | n/a | n/a | Free | None | Local | ||
|
Gemma 4 12B IT is Google DeepMind's open-weight instruction-tuned dense model, 11.95B parameters in an encoder-free design, taking text, images, video frames and audio with a 262,144-token context, published on Hugging Face under Apache 2.0. Top strength Plain Apache 2.0, no account or gate, safetensors and GGUF only with a checksum on every file Top weakness No safety evaluation figures published |
||||||||||||
| 139 | LokaliseLokalise, Inc. · HTTP API | Translation | BB | 71.3 | 3.0 (4) | n/a | n/a | $149 / mo | OAuth or key | Hosted | ||
|
Lokalise is a hosted translation management system for software strings, documents and marketing content. Agents reach it through a REST API, the `lokalise2` CLI, SDKs in four languages and a hosted MCP server in beta. Top strength Three public OpenAPI 3.0.3 files, llms.txt and a Markdown twin of every reference page Top weakness The Master Service Agreement forbids using the service for benchmarking or competitive analysis |
||||||||||||
| 140 | commercetoolscommercetools GmbH · HTTP API | Commerce | BB | 71.3 | 3.0 (4) | n/a | n/a | Paid | OAuth | Hosted and local | ||
|
Headless commerce platform from commercetools GmbH in Munich, with HTTP and GraphQL APIs for catalogue, carts, checkout, orders and customers. Agents reach it through the API, four SDKs or a managed MCP server per project. Top strength Public OpenAPI 3.0 file with 822 operations, plus RAML, a GraphQL schema, llms.txt and Markdown copies of every docs page Top weakness No public price. The pricing page describes order-based pricing and sends buyers to sales |
||||||||||||
| 141 | Context7Upstash · MCP server | Code | BB | 71.3 | 3.0 (2) | n/a | n/a | $5 / 1k calls | OAuth or key | Hosted and local | ||
|
Serves up-to-date, version-specific library documentation and code examples into agent prompts via two tools (resolve-library-id, query-docs). Top strength Two tools, both annotated Top weakness The |
||||||||||||
| 142 | ElevenLabs Agents API + MCPElevenLabs · HTTP API | Voice agents | BB | 71.3 | 3.5 (2) | n/a | n/a | $22 / mo | OAuth or key | Hosted | ||
|
ElevenAgents (formerly Conversational AI) runs hosted voice agents as a pipeline of a fine-tuned ElevenLabs ASR model, an LLM of your choice or your own, ElevenLabs TTS and a proprietary turn-taking model. Top strength API keys scoped to endpoint groups, with per-key credit limits and service accounts Top weakness $0.08 a minute excludes LLM tokens and carrier minutes |
||||||||||||
| 143 | OpenAI Moderation APIOpenAI · HTTP API | Guardrails | BB | 71.3 | 4.0 (2) | n/a | n/a | Free | API key | Hosted | ||
|
Free classifier endpoint that scores text and images against 13 harm categories (harassment, hate, illicit, self-harm, sexual, violence and their sub-types) and returns a flagged boolean plus per-category scores. Top strength Free, on any OpenAI project key Top weakness No prompt-injection, jailbreak or PII detection |
||||||||||||
| 144 | Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP)Coinbase Developer Platform · SDK + MCP | Wallets | BB | 71.2 | 3.5 (2) | n/a | n/a | $0.005 / call | OAuth or key | Hosted and local | ||
|
Coinbase's wallet infrastructure for agents, with programmatic transactions, spending controls and MCP integrations. Top strength Operator-set max per call and max per session that the agent can't change, set in the wallet UI Top weakness AgentKit on npm is 0.10.4 from December 2025, and its fix for a local file read and public upload path is unreleased |
||||||||||||
| 145 | Mistral AI APIMistral AI · Model API | Models | BB | 71.2 | 4.0 (2) | n/a | n/a | from $0.10 / 1M in | API key | Hosted | ||
|
Mistral's API for its open-weight and proprietary models, with EU and US regional endpoints. Top strength Public OpenAPI document at docs.mistral.ai/openapi.yaml and an llms.txt with Markdown twins Top weakness Labs and preview models, Large 4 among them, may train on data sent from 2026-09-25, whatever the opt-out or zero-retention setting |
||||||||||||
| 146 | Pulumi ESCPulumi Corporation · HTTP API | Secrets | BB | 71.1 | 3.3 (4) | n/a | n/a | $0.01 / 1k req | OAuth or key | Hosted | ||
|
Pulumi ESC is the secrets and configuration service in Pulumi Cloud. Environments hold static secrets, pull from other vaults and issue short-lived cloud credentials over OIDC, read through the Pulumi CLI, a REST API and four SDKs. Top strength The Pulumi CLI creates a free ephemeral account for an agent with no signup, with write access for 72 hours and 30 days to claim it Top weakness Audit logs, custom roles, team tokens, approvals and customer-managed keys need Pro ($400 a month) or Enterprise |
||||||||||||
| 147 | LangSmith API + MCPLangChain · HTTP API | Evals | BB | 71.1 | 3.0 (2) | n/a | n/a | $39 / seat-mo | OAuth or key | Hosted | ||
|
LangChain's hosted tracing, evaluation, prompt hub and dataset platform, framework-agnostic with Python and TypeScript SDKs and OpenTelemetry ingest. Top strength Rate limits published per endpoint and per plan, with each kind of 429 explained Top weakness Five SDK advisories from February to June 2026, one listed as critical (arbitrary file read through |
||||||||||||
| 148 | Nylas Calendar and Scheduler APINylas · HTTP API | Scheduling | BB | 71 | 3.0 (2) | n/a | n/a | $15 / mo | OAuth or key | Hosted | ||
|
Unified calendar API over Google, Microsoft 365 and Outlook, Exchange (EWS) and iCloud. Top strength One schema across Google, Microsoft 365, Exchange EWS, iCloud and virtual calendars Top weakness API keys can't be scoped, so the MCP and any agent holding a key reach every grant |
||||||||||||
| 149 | AirtableFormagrid Inc (Airtable) · HTTP API | Spreadsheets | BB | 70.9 | 3.5 (4) | n/a | n/a | $20 / seat-mo | OAuth or key | Hosted | ||
|
Airtable is a hosted database of typed records organised in bases, tables and views. Agents reach it through a REST Web API and an official hosted MCP server, using personal access tokens or OAuth. Top strength Personal access tokens and OAuth grants are limited by scope and by base or workspace, and the legacy Top weakness 5 requests a second per base, and a 429 blocks further requests for 30 seconds |
||||||||||||
| 150 | HeyGen VoiceHeyGen · Model API | TTS | BB | 70.9 | 3.5 (4) | n/a | n/a | Pay per use | API key | Hosted | ||
|
HeyGen Voice is HeyGen's in-house text-to-speech model, `heygen-voice-1`, which speaks text in a voice cloned from one recording (instant) or from 20 minutes or more (professional), through HeyGen's v3 API. Top strength OpenAPI 3.1 file with enums, ranges, Top weakness Speaks only voices cloned in the caller's workspace. Stock and designed voices go through a separate endpoint and engines |
||||||||||||
| 151 | Apideck Accounting API + MCPApideck · HTTP API | Accounting | BB | 70.9 | 3.5 (2) | n/a | n/a | $599 / mo | API key | Hosted and local | ||
|
Unified accounting API for invoices, bills, payments, journal entries and financial reports across platforms including QuickBooks, Xero and NetSuite. Top strength 62 accounting connectors, including European ledgers such as DATEV, Exact Online, Fortnox and Twinfield Top weakness No published rate limits of Apideck's own, only connector limits mirrored in headers |
||||||||||||
| 152 | Cloudflare MCP ServersCloudflare · MCP server | Infra | BB | 70.9 | 3.0 (2) | n/a | n/a | Your plan | OAuth or key | Hosted | ||
|
A family of Cloudflare-hosted remote MCP servers. Top strength OAuth on every account server, with the Code Mode consent page defaulting to read-only scopes Top weakness No server-side confirmation before destructive calls once full access is granted |
||||||||||||
| 153 | VendureVendure (Elevantiq GmbH) · HTTP API | Commerce | BB | 70.9 | 3.0 (2) | n/a | n/a | Freemium | OAuth or key | Hosted | ||
|
Open-source headless commerce framework on TypeScript, NestJS and GraphQL that you self-host. Top strength Full cart, coupon, shipping and payment flow in the GraphQL Shop API, with ErrorResult types an agent can branch on Top weakness No vendor-hosted API. Vendure Cloud is only partly available |
||||||||||||
| 154 | Google Forms APIGoogle · HTTP API | Forms | BB | 70.8 | 2.5 (4) | n/a | n/a | Free | OAuth | Hosted | ||
|
REST API from Google for creating and editing Google Forms forms and quizzes, reading responses and quiz grades, and subscribing to change notifications through Cloud Pub/Sub. Access is by OAuth 2.0. Top strength Separate read-only scopes for form structure (forms.body.readonly) and responses (forms.responses.readonly), plus the per-file drive.file scope Top weakness Push notifications go only to a Cloud Pub/Sub topic in the caller's project, which needs Cloud billing, and they carry no form or response data |
||||||||||||
| 155 | Zoho CRMZoho · HTTP API | CRM | BB | 70.8 | 3.3 (4) | n/a | n/a | $14 / seat-mo | OAuth | Local | ||
|
Zoho CRM is a hosted sales CRM from Zoho. Agents reach it through the REST API v8, with record, search, query, bulk and notification endpoints behind OAuth 2.0, or through four pre-built remote MCP servers. Top strength OpenAPI 3.1 files for 103 resources and 644 operations are public on GitHub, with a Markdown page per operation Top weakness The documented refresh and revoke calls put the refresh token and client secret in the URL query string |
||||||||||||
| 156 | OpenHandsAll Hands AI · Agent harness | Harnesses | BB | 70.8 | 2.5 (2) | n/a | n/a | Freemium | OAuth or key | Local | ||
|
Open-source coding agent with a self-hosted web interface, local and remote execution, and scheduled or webhook-driven automation. Top strength A Docker container per conversation with Top weakness Confirmation mode is off by default in Agent Canvas, and the npm install gives the agent the host's whole filesystem |
||||||||||||
| 157 | Big ArrowFranz Enzenhofer · SDK + MCP | Human approval | BB | 70.7 | 3.3 (4) | n/a | n/a | Free · OSS | None | Local | ||
|
bigarrow is an open-source macOS command-line tool, with a skill for Claude Code and Codex, that lets an agent draw a click-through arrow and a sign over any window to show a person where to click, type or decide. Top strength Drawing needs no macOS permission, and the overlay never takes keyboard focus, which integration tests on the real window server check Top weakness First commit 8 October 2026 and version 0.4.6, with flags removed or renamed between minor versions |
||||||||||||
| 158 | RemoteRemote Technology, Inc. · HTTP API | HR | BB | 70.7 | 3.0 (4) | n/a | n/a | $29 / seat-mo | OAuth or key | Hosted | ||
|
Remote is a global employment platform covering employer of record, payroll, contractors and HR records. Its REST API, hosted MCP server and CLI let an agent read and update employments, time off, timesheets, expenses, onboarding and documents. Top strength OpenAPI 3.0 document with 303 operations and 116 webhook events, plus llms.txt and a Markdown copy of every docs page Top weakness The REST API changelog link in the docs redirects to a ReadMe dashboard login, so no public dated record of API changes was read |
||||||||||||
| 159 | monday.commonday.com Ltd. · HTTP API | Projects | BB | 70.7 | 3.3 (4) | n/a | n/a | $9 / seat-mo | OAuth or key | Hosted | ||
|
monday.com is a hosted work management platform built on boards, items and columns. Agents reach it through a GraphQL API at api.monday.com/v2 and an official hosted MCP server, using personal API tokens or OAuth. Top strength Full GraphQL schema is public as SDL and JSON at api.monday.com/v2/get_schema, with a copy for each dated API version Top weakness Personal API tokens have no scopes. Each carries every permission its user has in the app |
||||||||||||
| 160 | Typesense API + MCPTypesense · HTTP API | Retrieval | BB | 70.7 | 3.0 (2) | n/a | n/a | $0.09 / GB | OAuth or key | Hosted | ||
|
Open-source (GPL-3.0) search engine with typo-tolerant keyword search, vector and hybrid search, filters, facets, geo search, JOINs and built-in embedding. Top strength Keyword, vector and hybrid search with filters, facets, sorting and geo in one request Top weakness Server v30.2 from April 2026 is still the newest stable release |
||||||||||||
| 161 | PuppeteerGoogle · SDK + MCP | Browser | BB | 70.6 | 3.3 (4) | n/a | n/a | Free · OSS | None | Local | ||
|
Puppeteer is Google's open-source Node.js library for controlling Chrome and Firefox over the DevTools Protocol and WebDriver BiDi. An agent writes and runs scripts that navigate, click, type, read pages and take screenshots. Top strength Ten releases from 25.4.0 on 27 July to 25.13.0 on 8 October 2026, each with a changelog generated by release-please Top weakness No MCP server, CLI or llms.txt of its own. The docs point agents to the separate chrome-devtools-mcp project |
||||||||||||
| 162 | Gemini EmbeddingGoogle · HTTP API | Embeddings | BB | 70.6 | 3.0 (2) | n/a | n/a | Freemium | API key | Hosted | ||
|
gemini-embedding-2, Google's multimodal embedding model, takes text, images, video, audio and PDFs into one 3072-dimension space (truncatable to 128) at 8,192 input tokens in 100+ languages. Top strength Text, images, video, audio and PDFs interleaved in one request and one vector space Top weakness $0.20 per million text tokens, against $0.02 for OpenAI's small model |
||||||||||||
| 163 | LangGraphLangChain · Agent framework | Frameworks | BB | 70.6 | 3.5 (2) | n/a | n/a | Free · OSS | None | Library | ||
|
Low-level runtime for long-running, stateful agent graphs with checkpointed persistence, human-in-the-loop, memory and streaming. Top strength Checkpointed persistence, so runs survive restarts and resume where they stopped Top weakness No MCP client of its own. LangChain's langchain.mcp is in beta |
||||||||||||
| 164 | Murf TTS API + MCPMurf · Model API | TTS | BB | 70.6 | 3.5 (2) | n/a | n/a | Freemium | API key | Hosted and local | ||
|
Murf's API for generating speech from text. Top strength Falcon 2 costs 1 cent per 1,000 characters on pay as you go, with a $2 minimum purchase Top weakness Falcon 2 concurrency is 2 outside US-East on free and pay as you go, 5 on US-East |
||||||||||||
| 165 | AembitAembit, Inc. · HTTP API | Agent auth | BB | 70.5 | 3.0 (4) | n/a | n/a | $20 / mo | OAuth or key | Local | ||
|
Aembit is a hosted identity and access platform for workloads and AI agents. Its MCP Identity Gateway and MCP Authorisation Server apply access policies and inject credentials, with a Cloud API, an Edge API, a CLI and an Edge SDK. Top strength Public OpenAPI 3.1.1 files for the Cloud API (171 operations) and Edge API (2), plus llms.txt, per-page Markdown and a cloneable docs bundle Top weakness No rate limit figures in the reviewed documentation. The Edge API lists 429 responses without limits or Retry-After guidance |
||||||||||||
| 166 | Kontent.aiKontent CZ s.r.o. · HTTP API | CMS | BB | 70.5 | 3.3 (4) | n/a | n/a | Paid | API key | Hosted and local | ||
|
Kontent.ai is a hosted headless CMS from Kontent CZ s.r.o. in Brno. Its Management API v2 reads and writes content items, language variants, assets, content models and workflow steps, and an open-source MCP server wraps it. Top strength Management API keys carry selectable permissions (read content, edit content, assets, content model, environment settings), environment limits and an expiry from 1 minute to 2 years Top weakness No price is published. The pricing page shows sliders for seats, content types and items and a form that requests a quote |
||||||||||||
| 167 | CourierCourier · HTTP API | Notifications | BB | 70.5 | 3.0 (2) | n/a | n/a | Freemium | API key | Hosted | ||
|
Notification API that routes one message to email, SMS, push, an in-app Inbox, Slack, Microsoft Teams and WhatsApp through your own providers, with templates, digests, preferences and journeys. Top strength Free for 10,000 sends a month, then $0.005 a send with no platform fee Top weakness 170 MCP tools with no toolsets, filtering or read-only mode |
||||||||||||
| 168 | Browserlessbrowserless.io, Inc. · HTTP API | Browser | BB | 70.4 | 3.5 (4) | n/a | n/a | $0.002 / credit | OAuth or key | Hosted and local | ||
|
Browserless runs hosted headless browsers that agents drive over CDP, Playwright, REST endpoints, BrowserQL or its official MCP server. The same software can be self-hosted from a Docker image. Top strength OpenAPI 3.0.0 document with 87 paths, llms.txt, llms-full.txt and Markdown twins of the docs Top weakness REST and WebSocket routes take the API token as |
||||||||||||
| 169 | Spree CommerceVendo Connect Inc · HTTP API | Commerce | BB | 70.4 | 3.8 (4) | n/a | n/a | Freemium | OAuth or key | Local | ||
|
Spree Commerce is an open-source commerce platform on Ruby on Rails, maintained by Vendo Connect Inc. A self-hosted store runs a Store API for catalogue, cart and checkout, and an Admin API for back-office work. Top strength OpenAPI 3.0.3 files for the Store API (81 paths, 99 operations) and Admin API (259 paths, 417 operations), plus llms.txt and a Markdown copy of every docs page Top weakness Six GitHub security advisories between 8 January and 20 July 2026, four rated High, most of them access-control flaws on guest carts, orders and addresses |
||||||||||||
| 170 | SteelNen Labs, Inc. · HTTP API | Browser | BB | 70.4 | 2.0 (4) | n/a | n/a | $0.01 / call x402 | API key | Hosted and local | ||
|
Steel runs cloud browser sessions for AI agents, controlled through a REST API, a CDP WebSocket, SDKs, a CLI and an official MCP server. Its browser runtime, steel-browser, is open source and can be self-hosted. Top strength OpenAPI 3.0.3 document with 75 operations, llms.txt and a Markdown twin of every docs page Top weakness Three incidents of more than an hour hit the API or session creation in the 90 days to 8 October 2026, the longest 5 hours 41 minutes |
||||||||||||
| 171 | Deepgram Speech-to-Text (Nova-3, Flux)Deepgram · Model API | STT | BB | 70.3 | 3.5 (2) | n/a | n/a | Pay per use | API key | Hosted and local | ||
|
Deepgram's speech-to-text API for recorded audio and live streams, including turn detection for voice agents. Top strength Flux streams with model-level end-of-turn detection, so a voice agent needs no separate VAD Top weakness Training on audio is the default and the opt-out is a per-request flag |
||||||||||||
| 172 | GitHub MCP ServerGitHub · MCP server | Code | BB | 70.3 | 4.0 (2) | n/a | n/a | Free · OSS | OAuth or key | Hosted and local | ||
|
GitHub's official MCP server (Go) exposing repositories, issues, pull requests, Actions, code security, discussions, gists, notifications, projects and more as toolsets. Top strength OAuth with scopes by default, fine-grained PATs and GitHub App tokens for headless runs, and per-call scope challenges since v1.11.0 Top weakness 92 tools and about 30,000 tokens with everything enabled; the default set alone is 45 tools |
||||||||||||
| 173 | ZeroClawZeroClaw Labs · Agent harness | Assistants | BB | 70.2 | 3.3 (4) | n/a | n/a | Free · OSS | None | Local | ||
|
Open-source personal AI assistant from ZeroClaw Labs, shipped as one Rust binary the owner runs. It answers on chat, email and voice channels, calls tools and MCP servers, and keeps memory in local SQLite. Top strength Supervised mode is the default. Tools outside an eleven-item read-only and fetch list prompt the owner, and an unanswered prompt is a denial after 120 seconds Top weakness The docs state that command execution is not audited. |
||||||||||||
| open | gpt-oss-120bOpenAI · Open-weight model | Open weights | BB | 70.2 | 3.5 (4) | n/a | n/a | Free | None | Local | ||
|
gpt-oss-120b is OpenAI's open-weight mixture-of-experts reasoning model, 116.8B parameters with 5.1B active and a 131,072-token context, published on Hugging Face in MXFP4 under Apache 2.0. Top strength Runs in Transformers, vLLM, SGLang, llama.cpp and Ollama, with LM Studio linked from the card Top weakness Needs about 78 GB, too big for 64 GB machines, and OpenAI ships only one precision |
||||||||||||
| 174 | Google Cloud Speech-to-TextGoogle Cloud · Model API | STT | BB | 70.2 | 3.0 (2) | n/a | n/a | Freemium | OAuth | Hosted | ||
|
Google Cloud's transcription API. Top strength Audio isn't stored or used for training unless the project opts in to data logging Top weakness No release note since 2025-11-13 |
||||||||||||
| 175 | Sentry MCPSentry · MCP server | Observability | BB | 70.2 | 3.5 (2) | n/a | n/a | Your plan | OAuth | Hosted and local | ||
|
Sentry's MCP for searching errors and traces, triaging issues, reading docs and managing projects, with agent-embedded natural-language search tools. Top strength OAuth with skills chosen at consent, Inspect and Seer (read-only) by default Top weakness No MCP component on status.sentry.io and no SLA |
||||||||||||
| 176 | AsanaAsana, Inc. · HTTP API | Projects | BB | 70.1 | 3.8 (4) | n/a | n/a | $10.99 / seat-mo | OAuth or key | Hosted | ||
|
Asana is a hosted work management product for tasks, projects, portfolios and goals. Agents reach it through a REST API with a public OpenAPI spec, or through the vendor's hosted MCP server. Top strength Public OpenAPI 3.0 spec with 251 described operations, rebuilt almost daily, plus llms.txt and Markdown copies of every docs page Top weakness Three incidents marked major touched the API between 31 August and 30 September 2026, one lasting about two hours for roughly a quarter of users |
||||||||||||
| 177 | Claude Agent SDKAnthropic · Agent framework | Frameworks | BB | 70.1 | 2.5 (4) | n/a | n/a | Free | API key | Library | ||
|
Runs the Claude Code agent as a library, with its loop, built-in tools, permissions, sessions, hooks and subagents. Top strength Claude Code's file, shell, search and web tools, with six permission modes, a canUseTool callback and PreToolUse hooks Top weakness Claude models only, so a person has to set up a Claude API key or cloud account first |
||||||||||||
| 178 | GrowthBookGrowthBook, Inc. · HTTP API | Product analytics | BB | 70.1 | 3.3 (4) | n/a | n/a | $40 / seat-mo | OAuth or key | Hosted and local | ||
|
GrowthBook is an open-source platform for feature flags, experiments and product analytics, sold as GrowthBook Cloud or run self-hosted. Agents reach it through a REST API with a public OpenAPI spec and an official MCP server. Top strength The MCP server has four tools, each with readOnlyHint and destructiveHint, and a second endpoint with only the two API tools Top weakness The API tools take a path and a JSON string and don't validate payloads, so correct calls depend on the bundled skills |
||||||||||||
| 179 | OpenfortOpenfort (Alamas Labs Inc.) · HTTP API | Wallets | BB | 70.1 | 3.5 (4) | n/a | n/a | $99 / mo | API key | Hosted and local | ||
|
Openfort is wallet infrastructure from Alamas Labs. Its REST API, Node SDK and CLI create backend wallets held in a trusted execution environment, with signing policies, session keys and gas sponsorship. It also sells embedded wallets for apps. Top strength Backend wallet keys are generated and used inside a GCP Confidential Space enclave with AMD SEV-SNP, wrapped by an HSM-backed Cloud KMS key Top weakness An EVM backend send is evaluated only as |
||||||||||||
| open | Muse Glimmer 30BMeta · Open-weight model | Open weights | BB | 70 | 3.8 (4) | n/a | n/a | Free | None | Local | ||
|
Muse Glimmer 30B is Meta's open-weight dense multimodal model for local agent work, 29.6B parameters with text and image input and a 128K-token context, published on Hugging Face under Apache 2.0 with GGUF and ExecuTorch builds. Top strength Meta's own 16.8 GB Q4_K_M GGUF fits a 24 GB card, with a DFlash drafter for speculative decoding Top weakness One tool call per turn and no parallel calls |
||||||||||||
| 180 | VespaVespa.ai AS · HTTP API | Retrieval | BB | 70 | 3.0 (4) | n/a | n/a | $0.05 / vCPU-hr | OAuth or key | Local | ||
|
Vespa is an open-source search engine from Vespa.ai AS for vector, text and hybrid retrieval with ranking, run self-hosted or on Vespa Cloud. Agents reach it through HTTP query and document APIs, the Vespa CLI and a Python client. Top strength Data-plane clients use mTLS certificates or tokens, each limited to Top weakness No OpenAPI file was found in the docs index. The APIs are described in reference pages only |
||||||||||||
| 181 | Merge Accounting APIMerge · HTTP API | Accounting | BB | 70 | 3.5 (2) | n/a | n/a | $650 / mo | API key | Hosted | ||
|
Unified accounting API for invoices, payments, expenses, journal entries and financial statements across platforms including QuickBooks, Xero and NetSuite. Top strength 12 accounting platforms behind one set of common models, with writes Top weakness Launch jumps from free to $650 a month at the fourth linked account |
||||||||||||
| open | gpt-oss-20bOpenAI · Open-weight model | Open weights | B | 69.9 | 3.5 (4) | n/a | n/a | Free | None | Local | ||
|
gpt-oss-20b is OpenAI's open-weight mixture-of-experts reasoning model, 21B parameters with 3.6B active and a 131,072-token context, published on Hugging Face in MXFP4 under Apache 2.0 and trained on the harmony prompt format. Top strength Model code in released Transformers, vLLM, SGLang and llama.cpp, plus a 14 GB build in Ollama's library Top weakness No reply from OpenAI to any discussion since August 2025, and template reports wait unanswered |
||||||||||||
| 182 | Azure MCP ServerMicrosoft · MCP server | Infra | B | 69.9 | 2.5 (2) | n/a | n/a | Free · OSS | OAuth or key | Local | ||
|
Microsoft's official local MCP server for Azure (`@azure/mcp`, also on NuGet as Azure.Mcp). Top strength Entra ID through DefaultAzureCredential, so access follows RBAC and no secret sits in the MCP config Top weakness Prereleases renamed and removed tools with no notice period, and 3.0.0 dropped parameters across most namespaces |
||||||||||||
| 183 | Privy Wallets (server wallets, agent wallets, policy engine)Privy (Stripe) · HTTP API | Wallets | B | 69.9 | 3.5 (2) | n/a | n/a | $299 / mo | OAuth or key | Hosted | ||
|
Wallet infrastructure owned by Stripe since June 2025. Top strength Default-deny policies with DENY precedence on recipients, values, contracts, calldata, typed data and time windows, enforced in AWS Nitro Enclaves Top weakness Database problems took API endpoints down for 71 minutes on 18 September 2026, one of 13 incidents since July |
||||||||||||
| 184 | Firebase Cloud MessagingGoogle · HTTP API | Notifications | B | 69.8 | 3.5 (4) | n/a | n/a | Free | OAuth | Hosted | ||
|
Google's push messaging service for Android, Apple and web apps. A server sends notification or data messages to devices, topics or conditions through the HTTP v1 API or the Firebase Admin SDKs. Top strength No charge for sending on either Firebase plan, and no billing account needed (https://firebase.google.com/pricing) Top weakness Push transport only. No in-app feed, email, SMS, user preferences, digests or templates |
||||||||||||
| 185 | GraphicleKarLex AI, Inc. · MCP server | Memory | B | 69.8 | 3.8 (4) | n/a | n/a | Free · OSS | OAuth or key | Local | ||
|
Graphicle is an open-source Rust program that builds a code graph of a repository and keeps its documents, reviewed decisions and past coding-agent sessions, served to Claude Code, Codex, Cursor and other MCP clients as cited excerpts. Top strength 25 MCP tools with closed JSON Schema inputs, enums and limits, readOnlyHint on every read tool, and an idempotency key on Top weakness One release, v0.1.0 on 14 October 2026, from a repository created that day |
||||||||||||
| 186 | RobotomailTiny Bot Labs Limited · HTTP API | Inboxes | B | 69.8 | 3.5 (4) | n/a | n/a | $19 / mo | OAuth or key | Hosted | ||
|
Robotomail gives an AI agent its own email address for sending, receiving and replying. Access is by REST API, a hosted MCP server with OAuth, a CLI and SDKs, and replies arrive by webhook, SSE or polling. Top strength OpenAPI 3.1 at Top weakness The Free plan allows 10 sends and 10 receives a month, only with the owner's verified address, and discards other inbound mail |
||||||||||||
| 187 | GleanGlean Technologies, Inc. · HTTP API | Knowledge | B | 69.8 | 3.5 (2) | n/a | n/a | Paid | OAuth or key | Local | ||
|
Enterprise search and AI assistant from Glean Technologies in San Francisco. Top strength Three public OpenAPI specs (Client, Indexing, Platform) regenerated almost daily, plus llms.txt and Markdown docs Top weakness No public price, trial or self-serve signup. Access starts with a demo request |
||||||||||||
| 188 | Massive (formerly Polygon.io)Massive · HTTP API | Data | B | 69.8 | 3.5 (2) | n/a | n/a | $0.01 / call x402 | API key | Hosted | ||
|
US market data API for stocks, options, indices, forex, crypto and futures, from the consolidated tapes. Top strength 23 US stock routes over x402 at agent.massive.com, $0.01 each on Base, and only successful requests are charged Top weakness About 18 unplanned incidents since 3 July, including 2.5 hours of intermittent 502s on stock aggregates on 2 September |
||||||||||||
| 189 | PlaidPlaid · HTTP API | Bank data | B | 69.8 | 3.5 (2) | n/a | n/a | Paid | OAuth or key | Hosted and local | ||
|
Bank data aggregation platform covering the US, Canada, the UK and parts of Europe. Top strength Public OpenAPI file, llms.txt with about 250 entries and a Markdown twin of every docs page Top weakness No prices before a Production application, and Transactions, Liabilities and Investments bill per Item each month until removed |
||||||||||||
| 190 | MetronomeMetronome (Stripe) · HTTP API | Platforms | B | 69.7 | 3.5 (4) | n/a | n/a | 0.8% fee | API key | Hosted | ||
|
Metronome is a hosted usage-based billing platform, part of Stripe. Its REST API ingests usage events, defines billable metrics, rate cards and contracts, and generates invoices, with official SDKs for Python, Node.js, Go, Ruby and Java. Top strength Public OpenAPI 3.0.1 description with 142 operations and 509 schemas, plus llms.txt and a Markdown twin of each docs page Top weakness Errors are a single |
||||||||||||
| 191 | Microsoft Dynamics 365 SalesMicrosoft · HTTP API | CRM | B | 69.7 | 2.8 (4) | n/a | n/a | $65 / seat-mo | OAuth | Local | ||
|
Microsoft's sales CRM for accounts, contacts, leads and opportunities. Its data is held in Dataverse and reached through the Dataverse Web API (OData v4), SDKs for .NET and Python, and the Dataverse MCP server. Top strength Limits are published per user and web server. 6,000 requests and 20 minutes of execution time per five minutes, and 52 concurrent requests Top weakness No public OpenAPI document. The contract is an OData CSDL $metadata document served by each environment behind sign-in |
||||||||||||
| 192 | REAmorluto · MCP server | Code | B | 69.7 | 2.8 (4) | n/a | n/a | Free · OSS | None | Local | ||
|
REA (Reverse Engineer Anything) is an open-source MCP server and CLI that gives coding agents local reverse-engineering tools for native binaries through Hopper, Ghidra or IDA, plus JavaScript and Electron apps, .NET, Android, websites, network captures and process behaviour. Top strength MIT licence, one npm package, and setup that registers the server with 14 named agent clients Top weakness 172 tools are advertised at once, including those whose provider is not installed, with no toolsets or read-only subset |
||||||||||||
| 193 | Zyte APIZyte Group Limited · HTTP API | Scrapers | B | 69.7 | 3.8 (4) | n/a | n/a | $0.13 / 1k req | OAuth or key | Hosted | ||
|
Zyte API is a hosted web scraping API from Zyte Group Limited of Cork, Ireland. One endpoint returns a page's HTTP body, browser-rendered HTML, a screenshot or extracted structured data, with ban avoidance handled by the service. Top strength OpenAPI 3.0.3 contract for Top weakness Request price depends on the target site's tier, from $0.13 to $1.27 per 1,000 HTTP requests and $1.01 to $16.08 with a browser on pay-as-you-go |
||||||||||||
| 194 | CrowdinCrowdin OÜ · HTTP API | Translation | B | 69.6 | 3.0 (4) | n/a | n/a | $50 / mo | OAuth or key | Hosted | ||
|
Crowdin is a hosted localisation platform that stores source files and strings, translation memories and glossaries, and runs machine and AI translation over them. Agents reach it through a REST API, a CLI and a hosted MCP server. Top strength Public OpenAPI 3.0 document with 374 operations on 218 paths, plus Top weakness The terms forbid accessing the service to monitor availability, performance or functionality, or for benchmarking, without Crowdin's prior written consent |
||||||||||||
| 195 | ScrapflyScrapfly (Joam Intelligence, LLC) · HTTP API | Scrapers | B | 69.6 | 4.0 (2) | n/a | n/a | $30 / mo | OAuth or key | Hosted and local | ||
|
Scrape API with datacenter or residential proxies, JS rendering and an anti-bot Unblocker, plus screenshot, LLM extraction, crawler and hosted Cloud Browser APIs on one credit balance. Top strength Error catalogue of 100+ ERR:: codes, each with HTTP status, retryable and billed flags and a doc link Top weakness The open-source MCP server registers 61 tools at once, a heavy tools/list |
||||||||||||
| 196 | DeciderMark Marosi (Mapika) · Model API | Decisions | B | 69.5 | 3.3 (4) | n/a | n/a | Free · OSS | None | Local | ||
|
Decider is a family of open-weight decision models by Mark Marosi (Mapika), from 0.8B to 35B parameters under Apache-2.0. It answers typed yes or no, choice and score questions with probabilities, and runs locally from the `decider-ai` Python package. Top strength Apache-2.0 code and weights, with the training code, data builders and per-version measurements in the repository Top weakness The local server has no authentication option. It binds to 127.0.0.1 since 1.7.1 |
||||||||||||
| 197 | Drex 1.5Nace AI, Inc. (Nace.AI) · Model API | Decisions | B | 69.5 | 3.5 (4) | n/a | n/a | Freemium | API key | Hosted | ||
|
Drex 1.5 is Nace.AI's decision model. It returns a probability for each option in typed yes or no, choice and score questions. Hosted at console.nace.ai, with open weights under the Nace AI Open RAIL-M licence. Top strength Public OpenAPI 3.1 document for POST /v1/systemone, plus llms.txt. Request limits are 512 questions, a 1,048,576-byte body and a 131,072-token state. Top weakness The rank 1 claim comes from Nace's own run on Decision Index 0.3.1, and Drex is not on the public board for 0.3 or 0.2.1. |
||||||||||||
| 198 | MailerSendMailerSend, Inc. · HTTP API | B | 69.5 | 2.5 (4) | n/a | n/a | $7 / mo | OAuth or key | Hosted | |||
|
Transactional email service from MailerSend, Inc. with a REST API, SMTP relay, templates, inbound routing, webhooks and analytics, plus SMS and WhatsApp sending. Agents reach it with a scoped API token or through a hosted MCP server. Top strength API tokens take any of 30 scopes, read or full by area, and can be limited to one sending domain Top weakness No idempotency key documented for POST /v1/email or the bulk endpoint |
||||||||||||
| 199 | Merge Agent HandlerMerge API, Inc. · MCP server | Tool access | B | 69.5 | 3.3 (4) | n/a | n/a | $1000 / mo | OAuth or key | Hosted | ||
|
Merge Agent Handler is a hosted MCP server from Merge API, Inc. that gives AI agents tools across more than 190 third-party connectors, with per-user credentials, tool packs, a security gateway and logs of every call. Top strength Access keys can be limited to named Registered Users and Tool Packs and to the Top weakness No rate limit figures are published. The docs say only that MCP tool calls are limited per Registered User and per organisation, by the minute |
||||||||||||
| 200 | OpenAI GuardrailsOpenAI · Agent framework | Guardrails | B | 69.5 | 2.8 (4) | n/a | n/a | Free · OSS | API key | Library | ||
|
OpenAI's open-source Python library that wraps the OpenAI client and runs configured checks on inputs, outputs and tool calls, including moderation, jailbreak, prompt injection, personal data, URL and off-topic checks. It is labelled a preview. Top strength MIT licence, source on GitHub, and three PyPI releases in the 90 days to 8 October 2026 (0.3.0, 0.3.2, 0.3.3) Top weakness By default a check that fails to run returns |
||||||||||||
| 201 | PersonaPersona Identities, Inc. · HTTP API | Verification | B | 69.5 | 3.0 (4) | n/a | n/a | $250 / mo | API key | Hosted | ||
|
Persona is an identity verification platform from Persona Identities, Inc. Its REST API and hosted MCP server create inquiries, run government ID, selfie, document and database verifications, screen people and businesses against watchlists, and manage review cases. Top strength Public OpenAPI 3.1 file with 231 operations and 141 webhook definitions, plus llms.txt and a Markdown copy of every docs page Top weakness Production access needs Persona's approval and a 12-month plan from $250 a month, and API-only integration is limited to Enterprise plans |
||||||||||||
| 202 | Amazon TranslateAmazon Web Services · HTTP API | Translation | B | 69.5 | 4.0 (2) | n/a | n/a | Pay per use | API key | Hosted | ||
|
AWS's neural translation API across 75 languages. Top strength IAM policies scope access per action and resource, with a Top weakness AWS may store and use text to improve Amazon AI services unless the organisation sets an opt-out policy |
||||||||||||
| 203 | Gladia Speech-to-Text API + MCPGladia · Model API | STT | B | 69.5 | 3.0 (2) | n/a | n/a | Freemium | API key | Hosted and local | ||
|
Speech-to-text API for live and recorded audio, with multilingual transcription and code switching. Top strength 100+ languages on Top weakness Starter costs $0.61 an hour async and $0.75 real time, several times the cheapest rivals |
||||||||||||
| 204 | Keeper Secrets ManagerKeeper Security, Inc. · HTTP API | Secrets | B | 69.4 | 3.3 (4) | n/a | n/a | Paid | API key | Local | ||
|
Keeper Secrets Manager is a cloud vault for infrastructure secrets, sold as an add-on to Keeper Security's business password manager. Applications read secrets through SDKs in seven languages, the `ksm` CLI or a local MCP server, decrypting on the client. Top strength Each device registers its own ECC key from a one-time token, is IP-locked by default and can be revoked alone Top weakness Secrets Manager is priced by quote. The add-ons page shows Custom Pricing and Request a Quote |
||||||||||||
| 205 | WebflowWebflow, Inc. · HTTP API | CMS | B | 69.4 | 3.3 (4) | n/a | n/a | $15 / mo | OAuth or key | Hosted | ||
|
Webflow is a hosted website builder with a built-in CMS. Agents reach it through the Data API v2 (collections, items, assets, pages, locales, publishing) or the official hosted MCP server, which wraps that API in 34 tools. Top strength Public OpenAPI 3.1 spec for Data API v2 with 140 operations, MIT, last synced on 2 September 2026, plus llms.txt and a Markdown copy of every docs page Top weakness The MCP server documents 34 tools (27 data, 3 Designer session, 4 utility), each with several actions, and a granted tool grants all its actions |
||||||||||||
| 206 | Box API + MCPBox · HTTP API | Storage | B | 69.4 | 2.5 (2) | n/a | n/a | Your plan | OAuth | Hosted | ||
|
Enterprise content platform with a REST API for files, folders, shared links, collaborations, metadata and Box AI, published as OpenAPI with year-based API versions. Top strength Public OpenAPI 3.0 spec with 297 operations, year-based API versions and an llms.txt of Markdown pages Top weakness 20 status-feed entries between 7 July and 1 October 2026, two of them over two hours on uploads or multiple services |
||||||||||||
| 207 | HygraphHygraph GmbH · HTTP API | CMS | B | 69.3 | 3.5 (4) | n/a | n/a | $199 / mo | OAuth or key | Hosted | ||
|
Hygraph is a hosted headless CMS from Hygraph GmbH in Berlin. Agents read and write entries, assets and localisations through a GraphQL Content API, change schema through a Management API and SDK, or connect through a hosted MCP server. Top strength Permanent Auth Tokens are limited by model, stage, locale, environment and action, and a new token starts with no permissions enabled Top weakness GraphQL error bodies carry a message and a |
||||||||||||
| 208 | OneSignalOneSignal · HTTP API | Notifications | B | 69.3 | 3.5 (2) | n/a | n/a | $19 / mo | OAuth or key | Hosted | ||
|
Messaging platform that sends mobile and web push through its own service and adds email, SMS, RCS, in-app messages, Live Activities and journeys. Top strength Runs push delivery itself, so there's no separate push provider to wire up Top weakness Three incidents on the API and SDK endpoints in September 2026 |
||||||||||||
| 209 | LaunchDarklyCatamorphic, Co. (dba LaunchDarkly) · HTTP API | Product analytics | B | 69.2 | 3.5 (4) | n/a | n/a | $10 / mo | OAuth or key | Hosted and local | ||
|
LaunchDarkly is a hosted feature flag and experimentation platform from Catamorphic, Co., with observability and AI configuration products. Agents reach it through an official hosted MCP server with OAuth and a REST API with a public OpenAPI spec. Top strength Public OpenAPI 3.0.3 spec with 401 operations, 399 of them described, with 1,853 examples and 429 documented on 287 operations Top weakness The hosted MCP server lists 141 tools, and no tool filter for it was found in the reviewed documentation |
||||||||||||
| 210 | SquareBlock, Inc. · HTTP API | Commerce | B | 69.2 | 3.3 (4) | n/a | n/a | 2.9% fee | OAuth or key | Hosted and local | ||
|
Square is Block's commerce and payments platform for sellers. Its REST API covers catalogue, orders, payment links, payments, inventory and customers, with seven SDKs and a beta MCP server hosted at mcp.squareup.com. Top strength Public OpenAPI 3.0 spec with 332 operations and 1,476 schemas, regenerated for API version 2026-09-16 Top weakness The MCP server is marked beta, and the remote server reaches production data only |
||||||||||||
| 211 | LayaConvai Innovations · Model API | Decisions | B | 69.2 | 2.5 (2) | n/a | n/a | Free · OSS | None | Local | ||
|
Open-source decision engine from Convai Innovations, released under Apache-2.0. Top strength Apache-2.0 code and weights, installed with Top weakness Base checkpoints score 0.362 and 0.352 on the maintainers' typed-decisions benchmark against a 0.318 random baseline, so it needs fine-tuning |
||||||||||||
| 212 | OpenCage Geocoding APIOpenCage · HTTP API | Maps | B | 69.2 | 3.5 (2) | n/a | n/a | $50 / mo | API key | Hosted and local | ||
|
Forward and reverse geocoding on one endpoint, built on OpenStreetMap and other open data, with optional annotations and JSON, GeoJSON, XML or Google-compatible output. Top strength Permanent storage of results on every plan, including after you cancel Top weakness Geocoding only, no place search or routing |
||||||||||||
| 213 | DeelDeel, Inc. · HTTP API | HR | B | 69.1 | 2.8 (4) | n/a | n/a | $5 / seat-mo | OAuth or key | Hosted | ||
|
Deel is a global HR, payroll and employer-of-record platform. Its REST API and hosted MCP server let an agent read and update people records, time off, organisation structure, onboarding, contracts and compliance documents. Top strength Public OpenAPI 3.1 specs with 506 operations and 55 webhook events, plus llms.txt and a Markdown copy of every docs page Top weakness 5 requests a second shared by every token in an organisation, with no rate limit headers on REST responses per the rate limits page |
||||||||||||
| 214 | StackOneStackOne Technologies Limited · MCP server | Tool access | B | 69.1 | 3.0 (4) | n/a | n/a | $600 / mo | OAuth or key | Hosted | ||
|
StackOne is a hosted gateway from StackOne Technologies Limited that gives AI agents actions across more than 540 business apps over MCP, SDKs, A2A or HTTP, with managed authentication, per-user grants, policies and logs. Top strength The MCP server at Top weakness Session token URLs ( |
||||||||||||
| 215 | Retell AI API + MCPRetell AI · HTTP API | Voice agents | B | 69.1 | 3.5 (2) | n/a | n/a | $2 / mo | API key | Hosted | ||
|
Hosted platform for phone and web voice agents, built as single-prompt agents or node-based conversation flows. Top strength Published per-minute price for every component, from $0.07 a minute all in Top weakness Call data kept indefinitely unless retention is set per agent |
||||||||||||
| 216 | LandingAI Agentic Document ExtractionLandingAI, Inc. · HTTP API | Documents | B | 69 | 3.8 (4) | n/a | n/a | $0.01 / credit | API key | Hosted | ||
|
LandingAI's Agentic Document Extraction is a hosted API that parses PDFs, images, Office files and spreadsheets into Markdown with page coordinates, then extracts fields against a JSON schema. Python and TypeScript libraries and a CLI call it. Top strength Public OpenAPI 3.1 description of the nine Gen2 operations, Top weakness The Explore plan has one API key that cannot be deleted or revoked. A leaked key is replaced by emailing support |
||||||||||||
| 217 | Dropbox SignDropbox, Inc. · HTTP API | E-signatures | B | 68.9 | 3.0 (4) | n/a | n/a | Paid | OAuth or key | Hosted | ||
|
Dropbox Sign (formerly HelloSign) is Dropbox's e-signature service. Its REST API sends documents or templates for signature, embeds signing in an iframe, reports status by webhook and returns signed PDFs with an audit trail. Top strength Public OpenAPI 3.0.3 spec with 74 operations, plus llms.txt and a Markdown copy of every docs page Top weakness No idempotency keys found in the docs or the spec, so a retried send can create a second signature request |
||||||||||||
| 218 | PipecatDaily · Agent framework | Voice agents | B | 68.9 | 3.0 (4) | n/a | n/a | Free · OSS | None | Library | ||
|
Pipecat is Daily's open-source Python framework for real-time voice and multimodal agents, built as pipelines of transport, speech-to-text, LLM and text-to-speech services, with client SDKs and optional hosting on Pipecat Cloud. Top strength BSD-2-Clause framework, with 23 speech-to-text, 25 LLM, 31 text-to-speech and 6 speech-to-speech services listed in the README Top weakness No tool-approval or confirmation step, and no prompt-injection guidance, for tools that act on a caller's speech |
||||||||||||
| 219 | fal video modelsfal (Features & Labels, Inc.) · Platform | Video | B | 68.9 | 3.3 (4) | n/a | n/a | Pay per use | OAuth or key | Hosted | ||
|
fal hosts third-party and open-weights video models, including Seedance, Kling, Veo, MiniMax and Wan, behind one queue API, one key and a hosted MCP server. Top strength 159 text-to-video endpoints in the catalogue API on 8 October 2026, 137 active, plus image-to-video and video-to-video categories of more than 100 each Top weakness Billing differs per model (per second by resolution, per second by audio, per 1,000 tokens), and Kling v3 Pro shows $0.14 on the pricing page against $0.112 or $0.168 on its model page |
||||||||||||
| 220 | incident.io APIPineapple Technology Ltd. (incident.io) · HTTP API | Observability | B | 68.9 | 3.5 (4) | n/a | n/a | $19 / seat-mo | OAuth or key | Hosted | ||
|
incident.io is an incident response, on-call, alerting and status page service. Agents reach it through a REST API at api.incident.io with an OpenAPI description and seven SDKs, a hosted MCP server and the `inc` CLI. Top strength OpenAPI 3.0.3 description with 284 operations, per-resource description files, llms.txt and Markdown twins of every docs page Top weakness The pricing page marks API, webhooks and MCP as not included in the free Basic plan. Team starts at $19 per user a month |
||||||||||||
| 221 | ElevenLabs Scribe Speech to Text APIElevenLabs · Model API | STT | B | 68.9 | 3.5 (2) | n/a | n/a | Freemium | API key | Hosted and local | ||
|
ElevenLabs' speech-to-text service for audio transcription. Top strength $0.22 an hour for batch with 90+ languages and diarisation to 32 speakers Top weakness Audio may be used for training unless the account opts out, and the opt-out isn't retroactive |
||||||||||||
| 222 | LinkupLinkup · HTTP API | Search | B | 68.9 | 4.0 (2) | n/a | n/a | $0.01 / call x402 | OAuth or key | Hosted and local | ||
|
Web search API for agents with four depths (flash, fast, standard, deep) and three output types (ranked sources, a cited answer, or JSON matching your schema). Top strength Per-call prices from $0.005, and no credit taken for errors, missing parameters or empty results Top weakness 429 covers both exhausted credit and rate limiting, with no |
||||||||||||
| 223 | Avalara AvaTaxAvalara, Inc. · HTTP API | Tax | B | 68.8 | 3.3 (4) | n/a | n/a | $79 / mo | OAuth or key | Hosted | ||
|
Avalara AvaTax calculates sales tax, VAT and GST for a transaction and records it for reporting. Agents reach it through the AvaTax REST v2 API or a hosted MCP server, with separate Avalara products for returns, exemption certificates and e-invoicing. Top strength Public Swagger 2.0 file with 491 operations, plus llms.txt and a Markdown page with a curl example for each endpoint Top weakness Production rate limits are not published. The only numbers found are the trial limits and 5 calls a minute on report exports |
||||||||||||
| 224 | EasyshipEasyship Inc. · HTTP API | Shipping | B | 68.8 | 3.5 (4) | n/a | n/a | $29 / mo | OAuth or key | Hosted and local | ||
|
Multi-carrier shipping platform from Easyship. Its public API and hosted MCP server quote courier rates, create shipments, buy labels, validate addresses, track parcels and book pickups across what Easyship says are 550+ courier services. Top strength Tokens carry per-resource read and write scopes, with separate sandbox (sand_) and production (prod_) tokens Top weakness No idempotency keys in the 132-operation spec, and no Retry-After or backoff guidance for 429 |
||||||||||||
| open | Nemotron 3 Ultra 550B A55BNVIDIA · Open-weight model | Open weights | B | 68.8 | 2.8 (4) | n/a | n/a | Free | None | Local | ||
|
Nemotron 3 Ultra is NVIDIA's largest open-weight hybrid Mamba-2 and latent mixture-of-experts reasoning model for agents, 550B parameters with 55B active and up to 1M tokens of context, published on Hugging Face in BF16 and NVFP4 under OpenMDW-1.1. Top strength Trained against prompt injection in tool output, as NVIDIA's technical report documents Top weakness The smallest build is 352 GB and needs at least four B200-class GPUs |
||||||||||||
| 225 | Vercel ConnectVercel Inc. · HTTP API | Agent auth | B | 68.8 | 3.5 (4) | n/a | n/a | $3 / 1k req | OAuth or key | Hosted | ||
|
Vercel Connect is a credential broker for apps and agents. Code asks it for a short-lived, scoped token for Slack, GitHub, Microsoft, Linear, Snowflake or any OAuth, API-key or MCP service, as the app or for a user. Top strength Refresh tokens stay on Vercel's infrastructure. Code receives only short-lived access tokens, as the app or for a named user Top weakness Vercel's SLA says it does not apply to the APIs or CLI, so token requests carry no uptime commitment |
||||||||||||
| 226 | Twilio SendGridTwilio · HTTP API | B | 68.8 | 2.5 (2) | n/a | n/a | $19.95 / mo | API key | Hosted | |||
|
Email API v3 for transactional mail, with Inbound Parse, dynamic templates, suppressions and Marketing Campaigns. Top strength Restricted API keys with per-endpoint scopes, subuser keys and IP access management Top weakness No official MCP server that can send, only Twilio's docs search |
||||||||||||
| 227 | MedplumOrangebot, Inc. (dba Medplum) · HTTP API | Health | B | 68.7 | 3.5 (4) | n/a | n/a | $2000 / mo | OAuth | Hosted | ||
|
Open-source FHIR R4 server and healthcare developer platform from Orangebot, Inc. (dba Medplum). Agents reach patient records through the hosted FHIR REST API at api.medplum.com, a remote MCP server or a self-hosted copy. Top strength Apache 2.0 server with releases about weekly, v5.2.3 on 8 October 2026, and a written version policy Top weakness The MCP |
||||||||||||
| 228 | Zendesk Support APIZendesk · HTTP API | Support | B | 68.7 | 3.5 (2) | n/a | n/a | $19 / seat-mo | OAuth or key | Local | ||
|
REST API for Zendesk Support. Top strength OAuth 2.0 with read, write and per-resource scopes, expiring tokens and revocation endpoints Top weakness No documented MCP server; the /api/mcp endpoint has no public docs or tool list |
||||||||||||
| open | Qwen3.8-27BAlibaba (Qwen team) · Open-weight model | Open weights | B | 68.6 | 3.0 (4) | n/a | n/a | Free | None | Local | ||
|
Qwen3.8-27B is Alibaba's open-weight dense vision-language model of 27B parameters, with thinking on by default and a 262,144-token context, published on Hugging Face in BF16 and FP8 under Apache 2.0. Top strength Released support in llama.cpp, Ollama, vLLM, SGLang and Transformers Top weakness No safety results, prompt-injection guidance or security contact |
||||||||||||
| 229 | Saleor API + MCPSaleor · HTTP API | Commerce | B | 68.6 | 3.5 (2) | n/a | n/a | $1599 / mo | OAuth or key | Local | ||
|
Open-source headless commerce with a single GraphQL API for products, channels, checkouts, orders and customers, self-hosted or on Saleor Cloud. Top strength One GraphQL schema with 78 typed error-code enums and 464 marked deprecations Top weakness The MCP server can't create checkouts or orders |
||||||||||||
| 230 | SumsubSum and Substance Ltd · HTTP API | Verification | B | 68.5 | 3.0 (4) | n/a | n/a | $1.35 / tx | OAuth or key | Hosted | ||
|
Sumsub verifies people from identity documents and a liveness check, verifies businesses against registries, and screens both against sanctions and watchlists. Agents reach it through a signed REST API and a hosted MCP server. Top strength App tokens carry per-token permissions, an optional IP allowlist and expiry date, and can be disabled with a recorded reason Top weakness No idempotency keys and no Retry-After or backoff guidance found in the reviewed documentation |
||||||||||||
| 231 | airSlate SignNowairSlate, Inc. · HTTP API | E-signatures | B | 68.5 | 3.0 (4) | n/a | n/a | $2 / tx | OAuth or key | Hosted and local | ||
|
airSlate SignNow is an e-signature service. Its REST API prepares documents from templates, sends signature invites, embeds signing in other apps and reports status through webhooks. A hosted MCP server gives AI agents 20 documented tools over the same account. Top strength Public OpenAPI 3.0.3 spec with 354 operations, 342 of them with examples, plus llms.txt and a Markdown copy of every docs page Top weakness API keys don't expire and work for all API requests. Narrower access needs an OAuth token requested with a URL-pattern scope |
||||||||||||
| 232 | OpenCodeAnomaly · Agent harness | Harnesses | B | 68.5 | 2.0 (2) | n/a | n/a | $10 / mo | None | Local | ||
|
Open-source terminal coding agent from Anomaly Innovations, with a TUI, desktop app, IDE and ACP integration, and a headless HTTP server with an OpenAPI spec. Version 2, released in October 2026, is an opt-in upgrade. Top strength Runs with no key or account on free OpenCode Zen models Top weakness Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox |
||||||||||||
| 233 | OpenRouterOpenRouter · Model router | Models | B | 68.5 | 3.0 (2) | n/a | n/a | 5.5% fee | API key | Hosted | ||
|
One OpenAI-compatible API in front of 80+ model providers, at the providers' own token prices, with fallbacks and routing controls. Top strength Public OpenAPI document, llms.txt with Markdown twins, and SDKs in TypeScript, Python and Go, all tagged on 1 October 2026 Top weakness No machine payment. USDC top-ups go to a prepaid balance |
||||||||||||
| 234 | Cerebras InferenceCerebras Systems Inc. · HTTP API | Models | B | 68.4 | 3.3 (4) | n/a | n/a | Paid | API key | Hosted | ||
|
Cerebras Inference serves language models on Cerebras wafer-scale processors through an OpenAI-compatible API. It supports streaming, structured outputs, tool calling and prompt caching, with shared and dedicated inference options. Top strength Public OpenAPI 3.1, Markdown docs, and official Python and TypeScript SDKs Top weakness Trial access requires a verified payment method and ends after $5 or 30 days |
||||||||||||
| 235 | MailSlurpPettman OÜ · HTTP API | Inboxes | B | 68.4 | 3.5 (4) | n/a | n/a | $19.99 / mo | OAuth or key | Hosted | ||
|
MailSlurp is a hosted email and SMS API from Pettman OÜ of Estonia. It creates real inboxes and phone numbers for tests and for supervised AI agents, reached over REST, SDKs, IMAP and SMTP, and a hosted MCP server. Top strength Five agent roles from Top weakness Free sends only to inboxes in the same account and Starter only within MailSlurp. External sending and custom domains start on Pro at $49.99 a month |
||||||||||||
| 236 | PiEarendil · Agent harness | Harnesses | B | 68.4 | 3.3 (4) | n/a | n/a | Free · OSS | None | Local | ||
|
Pi is an open-source terminal coding agent from Earendil, run on the owner's machine with any of 15 or more model providers. It has interactive, print, JSON and RPC modes, a TypeScript SDK and a built-in MCP client. Top strength Four default tools (read, bash, edit, write), with MCP tools reachable through codemode scripts and not declared to the model by default Top weakness No permission system or sandbox. Tool calls run with the user's rights and without an approval prompt |
||||||||||||
| 237 | PostHogPostHog Inc. · HTTP API | Product analytics | B | 68.4 | 3.3 (4) | n/a | n/a | $0.0001 / tx | OAuth or key | Hosted | ||
|
PostHog is an open-source product analytics platform with session replay, feature flags, experiments, error tracking and a data warehouse. Agents reach PostHog Cloud through a REST API with a public OpenAPI spec and an official hosted MCP server. Top strength Public OpenAPI 3.1 spec with 2,347 operations and a scope on most of them, plus llms.txt and a Markdown copy of every docs page Top weakness 31 incidents on the status page between 9 July and 6 October 2026, four of them analytics query timeouts or failures |
||||||||||||
| 238 | NVIDIA NeMo GuardrailsNVIDIA · Agent framework | Guardrails | B | 68.4 | 3.0 (2) | n/a | n/a | Free · OSS | None | Library | ||
|
Open-source Python toolkit that runs input, output, retrieval, dialogue and tool rails around any LLM. Top strength Apache-2.0, 7,200 stars and nine releases between 9 October 2025 and 16 September 2026 Top weakness Usage telemetry and a heartbeat every 10 minutes to NVIDIA by default |
||||||||||||
Nothing matches these filters. or search the MCP registry.
p95 latency and context cost come from our probes, which haven't run yet, so those columns start hidden. Grades run from AA to F, and agent-ready means BB or better. Filters, sorting and export run in your browser and cover every page; without JavaScript, the pages below the table list every listing.
Browse by category
How the ranking works
Every listing is scored 0 to 100 and given a grade from AA to F. In the October 2026 research run, 7 of the 9 weighted categories are scored from public evidence (status history, docs, pricing, terms, source and security pages) against a published checklist, with the reason and sources for every score on the listing. Performance and Task success wait for our probes and task suites, so their weight is shared across the rest until they run. Negative events deduct up to 15 points. Read the methodology.
For companies
Do agents find, use and choose your tools?
An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.