{ "data": { "similar": [ { "grade": "BB", "json": "https://www.anchorterminal.com/tools/customer-io.json", "name": "Customer.io", "score": 74.5, "shared": [ "marketing.profiles", "marketing.events", "marketing.segments", "marketing.campaigns", "marketing.journeys", "messaging.sms" ], "slug": "customer-io" }, { "grade": "BB", "json": "https://www.anchorterminal.com/tools/klaviyo.json", "name": "Klaviyo API + MCP", "score": 71.7, "shared": [ "marketing.profiles", "marketing.events", "marketing.segments", "marketing.campaigns", "marketing.journeys" ], "slug": "klaviyo" }, { "grade": "C", "json": "https://www.anchorterminal.com/tools/braze.json", "name": "Braze", "score": 61.2, "shared": [ "marketing.profiles", "marketing.events", "marketing.campaigns", "marketing.journeys", "marketing.segments" ], "slug": "braze" }, { "grade": "C", "json": "https://www.anchorterminal.com/tools/iterable.json", "name": "Iterable", "score": 55.2, "shared": [ "marketing.profiles", "marketing.events", "marketing.segments", "marketing.campaigns", "marketing.journeys" ], "slug": "iterable" }, { "grade": "BB", "json": "https://www.anchorterminal.com/tools/hubspot-mcp.json", "name": "HubSpot API + MCP", "score": 71.5, "shared": [ "crm.records", "crm.pipeline", "crm.webhooks" ], "slug": "hubspot-mcp" }, { "grade": "BB", "json": "https://www.anchorterminal.com/tools/zoho-crm.json", "name": "Zoho CRM", "score": 70.8, "shared": [ "crm.records", "crm.pipeline", "crm.webhooks" ], "slug": "zoho-crm" } ], "tool": { "slug": "activecampaign", "name": "ActiveCampaign", "vendor": "ActiveCampaign, LLC", "vendorUrl": "https://www.activecampaign.com", "kind": "http-api", "category": "lifecycle-marketing", "summary": "ActiveCampaign is a hosted marketing automation platform for email, SMS and WhatsApp with a built-in CRM. Its v3 REST API and an official remote MCP server cover contacts, lists, tags, segments, campaigns, automations and deals.", "url": "https://www.anchorterminal.com/tools/activecampaign", "markdownUrl": "https://www.anchorterminal.com/tools/activecampaign.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/activecampaign.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/activecampaign.json", "license": "Proprietary service under ActiveCampaign's terms of service and API licence agreement", "transports": [ "http", "streamable-http" ], "packages": [], "auth": "mixed", "authNotes": "Self-serve. The REST API takes an `Api-Token` header, and each user has one key, shown under Settings, Developer with the account's base URL. No scopes, read-only keys or OAuth for the REST API were found in the reviewed documentation. The remote MCP server uses an account-specific URL from the same page, and the user signs in to ActiveCampaign and approves the connection. Event tracking posts an event key and account ID in the request body.", "pricing": "paid", "pricingNotes": "14-day trial with no card, and a free developer sandbox on request by form (1,000 contacts, 100 email sends, 5 users, two years). No free plan. Plans are priced by contact count, from $19 a month for Starter at 1,000 contacts billed monthly, per the pricing page's own data file read on 2026-10-08. The API, webhooks and the MCP server are marked as included on all four plans (https://www.activecampaign.com/pricing).", "priceSummary": "$19 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the developer docs or on the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": 50, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://developers.activecampaign.com/reference/overview", "llmsTxt": "https://developers.activecampaign.com/llms.txt", "capabilities": [ "marketing.profiles", "marketing.events", "marketing.segments", "marketing.campaigns", "marketing.journeys", "crm.records", "crm.pipeline", "crm.webhooks", "messaging.sms", "messaging.whatsapp" ], "tags": [ "official", "hosted", "closed-source", "mcp", "api-key", "llms-txt", "openapi", "webhooks", "no-card", "trial", "sandbox", "status-page", "sla", "sms", "whatsapp" ], "lastRelease": "2026-09-02", "graded": true, "anchor": { "graded": true, "score": 50.5, "grade": "D", "agentReady": false, "rank": 516, "ranked": true, "rankOf": 629, "categoryRank": 5, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 52, "maintenance": 35, "payments": 30, "reliability": 67, "schema": 68, "security": 33, "transparency": 57 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 67, "points": 13.4, "reason": "Graded on the v3 REST API with the hosted lines. Statuspage site with 55 components across three regions, API Availability among them (20). In the 90 days to 8 October 2026 it lists three critical incidents, platform instability naming API Availability on 27 July (1 hour 22 minutes), segmented campaigns in the EU on 5 August (about 24 hours 41 minutes) and transactional email failures on 28 September (3 hours 50 minutes), plus a login incident of 2 hours 45 minutes on 10 August. That is several majors (0). 5 requests a second per account (15). 429 with Retry-After and RateLimit headers. No idempotency keys were found, though upsert by email makes contact writes repeatable (12 of 15). SLA of 99.5 per cent for enterprise subscriptions (10). The v3 API is generally available and the MCP pages carry no beta label (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 68, "points": 11.05, "reason": "Each reference page is public Markdown with an OpenAPI 3.1 definition for its operation. No single downloadable specification was found (20 of 25). llms.txt and Markdown pages (10). Pages revised in August 2026, such as contact upsert and contact search, say when to use each endpoint and when not to. Older pages are short, and the MCP page gives one line a tool with no input schemas (14 of 20). Query parameters are typed with enums on status and sort order, but the segment body is described as flexible JSON to be checked against the segment builder (10 of 15). Request examples on most pages. The errors page lists five status codes and one 422 body, and 400 responses in the definitions are empty objects (9 of 15). The version is in the path (v3, Segments 2.0.0). No changelog was found, and developers.activecampaign.com/changelog returns 404 (5 of 15)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 52, "points": 8.45, "reason": "List endpoints take `limit` up to 100 and contacts take `meta=only` for a count, but there is no field selection. The MCP server lists 50 tools with no documented toolsets (12 of 25). `limit`, `offset`, `orders`, `filters` and `id_greater` on contacts, less 4 because unsupported filter and order keys are silently ignored (16 of 20). Five documented status codes and a 422 `errors` array of titles without codes. Campaign state changes report failures as 200 with `succeeded` 0 and a localised message (10 of 20). No idempotency keys. Upsert by email and bulk import with per-row status give safe retries for contacts, and no MCP tool annotations are documented (8 of 20). Few required parameters. The official PHP and Node.js clients wrap the v1 API and last changed in 2017 and 2018, so no current official SDK was found (6 of 15)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 33, "points": 5.78, "reason": "One API key per user in an `Api-Token` header, with no scopes. The MCP server is authorised by signing in and approving, with no scopes documented. Key rotation was not found in the reviewed documentation (15 of 30). No read-only key or mode. The listed MCP tools include no delete tool and none that schedules a campaign, though `add_contact_to_automation` can start messages, and the definitions name a permission resource for each operation (8 of 20). The API returns contact data, notes and message content written by outsiders, and no prompt-injection guidance was found (0 of 15). No audit log or per-call visibility was found in the developer docs. The help centre refused our reader, so this is unchecked (0 of 15). The security page states SOC 2, HIPAA and GDPR compliance, a red team and a trust centre with the SOC 2 report. No security.txt, bug bounty or disclosure policy was found (10 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 30, "points": 3.75, "reason": "No x402, MPP or L402 (0). Plan prices are public and vary with contact count, for example $19 a month for Starter and $179 for Enterprise at 1,000 contacts billed monthly, read from the pricing page's own data file. API calls are not priced (10). A 14-day trial with no card, and a free developer sandbox on request (20). A person signs up in a browser and copies the key from account settings (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 35, "points": 3.06, "reason": "There is no changelog, so we read the `updatedAt` stamp on 46 of the 185 reference pages. The newest was 2 September 2026, 36 days before this check (20 of 30). Stamps fall on 12, 13, 17 and 31 August and 2 September 2026. These are page revisions, not changelog entries, so half credit (10 of 20). No public changelog. A community site and a developer relations email address are published, and we did not see reply times (5 of 15). No official server in the MCP registry, where two third-party servers are listed, and the official PHP and Node.js clients are v1 wrappers last changed in December 2017 and March 2018 (0 of 15). No current package to assess (0 of 10)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 57, "points": 4.99, "note": "editorial 55, provenance 58", "reason": "Closed service with terms of service dated 23 December 2025 and a separate API licence agreement, which lets ActiveCampaign revoke the licence at any time for any reason (15). Privacy policy updated 1 October 2026 and a DPA template that binds only once signed in the account. Retention is stated as the lifetime of the account or as long as necessary, with no period. The terms say Contact Data is used to supply the services and \"to train, detect issues with our Services\", which is not explained further (16 of 30). No deprecation policy. The overview says v1 has no sunset planned and promises advance notice, and deprecated contact fields are flagged without dates (6 of 20). Sub-processor list updated 25 September 2026 with locations in the United States, European Union and Australia (18 of 20)." } ], "assessment": { "date": "2026-10-08", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "List endpoints take `limit` up to 100 and contacts take `meta=only` for a count, but there is no field selection. The MCP server lists 50 tools with no documented toolsets (12 of 25). `limit`, `offset`, `orders`, `filters` and `id_greater` on contacts, less 4 because unsupported filter and order keys are silently ignored (16 of 20). Five documented status codes and a 422 `errors` array of titles without codes. Campaign state changes report failures as 200 with `succeeded` 0 and a localised message (10 of 20). No idempotency keys. Upsert by email and bulk import with per-row status give safe retries for contacts, and no MCP tool annotations are documented (8 of 20). Few required parameters. The official PHP and Node.js clients wrap the v1 API and last changed in 2017 and 2018, so no current official SDK was found (6 of 15).", "maintenance": "There is no changelog, so we read the `updatedAt` stamp on 46 of the 185 reference pages. The newest was 2 September 2026, 36 days before this check (20 of 30). Stamps fall on 12, 13, 17 and 31 August and 2 September 2026. These are page revisions, not changelog entries, so half credit (10 of 20). No public changelog. A community site and a developer relations email address are published, and we did not see reply times (5 of 15). No official server in the MCP registry, where two third-party servers are listed, and the official PHP and Node.js clients are v1 wrappers last changed in December 2017 and March 2018 (0 of 15). No current package to assess (0 of 10).", "payments": "No x402, MPP or L402 (0). Plan prices are public and vary with contact count, for example $19 a month for Starter and $179 for Enterprise at 1,000 contacts billed monthly, read from the pricing page's own data file. API calls are not priced (10). A 14-day trial with no card, and a free developer sandbox on request (20). A person signs up in a browser and copies the key from account settings (0).", "reliability": "Graded on the v3 REST API with the hosted lines. Statuspage site with 55 components across three regions, API Availability among them (20). In the 90 days to 8 October 2026 it lists three critical incidents, platform instability naming API Availability on 27 July (1 hour 22 minutes), segmented campaigns in the EU on 5 August (about 24 hours 41 minutes) and transactional email failures on 28 September (3 hours 50 minutes), plus a login incident of 2 hours 45 minutes on 10 August. That is several majors (0). 5 requests a second per account (15). 429 with Retry-After and RateLimit headers. No idempotency keys were found, though upsert by email makes contact writes repeatable (12 of 15). SLA of 99.5 per cent for enterprise subscriptions (10). The v3 API is generally available and the MCP pages carry no beta label (10).", "schema": "Each reference page is public Markdown with an OpenAPI 3.1 definition for its operation. No single downloadable specification was found (20 of 25). llms.txt and Markdown pages (10). Pages revised in August 2026, such as contact upsert and contact search, say when to use each endpoint and when not to. Older pages are short, and the MCP page gives one line a tool with no input schemas (14 of 20). Query parameters are typed with enums on status and sort order, but the segment body is described as flexible JSON to be checked against the segment builder (10 of 15). Request examples on most pages. The errors page lists five status codes and one 422 body, and 400 responses in the definitions are empty objects (9 of 15). The version is in the path (v3, Segments 2.0.0). No changelog was found, and developers.activecampaign.com/changelog returns 404 (5 of 15).", "security": "One API key per user in an `Api-Token` header, with no scopes. The MCP server is authorised by signing in and approving, with no scopes documented. Key rotation was not found in the reviewed documentation (15 of 30). No read-only key or mode. The listed MCP tools include no delete tool and none that schedules a campaign, though `add_contact_to_automation` can start messages, and the definitions name a permission resource for each operation (8 of 20). The API returns contact data, notes and message content written by outsiders, and no prompt-injection guidance was found (0 of 15). No audit log or per-call visibility was found in the developer docs. The help centre refused our reader, so this is unchecked (0 of 15). The security page states SOC 2, HIPAA and GDPR compliance, a red team and a trust centre with the SOC 2 report. No security.txt, bug bounty or disclosure policy was found (10 of 20).", "transparency": "Closed service with terms of service dated 23 December 2025 and a separate API licence agreement, which lets ActiveCampaign revoke the licence at any time for any reason (15). Privacy policy updated 1 October 2026 and a DPA template that binds only once signed in the account. Retention is stated as the lifetime of the account or as long as necessary, with no period. The terms say Contact Data is used to supply the services and \"to train, detect issues with our Services\", which is not explained further (16 of 30). No deprecation policy. The overview says v1 has no sunset planned and promises advance notice, and deprecated contact fields are flagged without dates (6 of 20). Sub-processor list updated 25 September 2026 with locations in the United States, European Union and Australia (18 of 20)." }, "sources": [ { "what": "docs index (llms.txt)", "url": "https://developers.activecampaign.com/llms.txt", "seen": "2026-10-08" }, { "what": "API overview and errors", "url": "https://developers.activecampaign.com/reference/overview", "seen": "2026-10-08" }, { "what": "rate limits", "url": "https://developers.activecampaign.com/reference/rate-limits", "seen": "2026-10-08" }, { "what": "authentication", "url": "https://developers.activecampaign.com/reference/authentication", "seen": "2026-10-08" }, { "what": "pagination, ordering and filtering", "url": "https://developers.activecampaign.com/reference/pagination", "seen": "2026-10-08" }, { "what": "errors", "url": "https://developers.activecampaign.com/reference/errors", "seen": "2026-10-08" }, { "what": "contact upsert", "url": "https://developers.activecampaign.com/reference/sync-a-contacts-data", "seen": "2026-10-08" }, { "what": "contact search", "url": "https://developers.activecampaign.com/reference/list-all-contacts", "seen": "2026-10-08" }, { "what": "schedule a campaign", "url": "https://developers.activecampaign.com/reference/schedule-a-campaign", "seen": "2026-10-08" }, { "what": "create a segment", "url": "https://developers.activecampaign.com/reference/create_segment", "seen": "2026-10-08" }, { "what": "track event", "url": "https://developers.activecampaign.com/reference/track-event", "seen": "2026-10-08" }, { "what": "remote MCP server", "url": "https://developers.activecampaign.com/page/mcp", "seen": "2026-10-08" }, { "what": "MCP tool list", "url": "https://developers.activecampaign.com/page/mcp-available-tools", "seen": "2026-10-08" }, { "what": "MCP setup for Claude", "url": "https://developers.activecampaign.com/page/connect-claude", "seen": "2026-10-08" }, { "what": "developer sandbox accounts", "url": "https://developers.activecampaign.com/page/developer-sandbox-accounts", "seen": "2026-10-08" }, { "what": "status incidents feed", "url": "https://status.activecampaign.com/api/v2/incidents.json", "seen": "2026-10-08" }, { "what": "status components", "url": "https://status.activecampaign.com/api/v2/components.json", "seen": "2026-10-08" }, { "what": "pricing page", "url": "https://www.activecampaign.com/pricing", "seen": "2026-10-08" }, { "what": "pricing data file used by the pricing page", "url": "https://www.activecampaign.com/dist/pricing/USD.json", "seen": "2026-10-08" }, { "what": "service level agreement", "url": "https://www.activecampaign.com/legal/service-level-agreement", "seen": "2026-10-08" }, { "what": "API licence agreement", "url": "https://www.activecampaign.com/legal/api-license-agreement", "seen": "2026-10-08" }, { "what": "terms of service", "url": "https://www.activecampaign.com/legal/terms-of-service", "seen": "2026-10-08" }, { "what": "privacy policy", "url": "https://www.activecampaign.com/legal/privacy-policy", "seen": "2026-10-08" }, { "what": "sub-processors", "url": "https://www.activecampaign.com/legal/subprocessors", "seen": "2026-10-08" }, { "what": "DPA template", "url": "https://www.activecampaign.com/legal/dpa", "seen": "2026-10-08" }, { "what": "security page", "url": "https://www.activecampaign.com/security", "seen": "2026-10-08" }, { "what": "security.txt (404)", "url": "https://www.activecampaign.com/.well-known/security.txt", "seen": "2026-10-08" }, { "what": "MCP registry search", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=activecampaign", "seen": "2026-10-08" }, { "what": "official PHP client repository", "url": "https://github.com/ActiveCampaign/activecampaign-api-php", "seen": "2026-10-08" }, { "what": "official Node.js client on npm", "url": "https://registry.npmjs.org/activecampaign", "seen": "2026-10-08" }, { "what": "RDAP record", "url": "https://rdap.org/domain/activecampaign.com", "seen": "2026-10-08" } ], "openQuestions": [ "unchecked: the help centre (help.activecampaign.com) answered 403 to our reader, so MCP permissions, audit logs, API key reset and user permission settings described there were not read", "unchecked: the trust centre (trust.activecampaign.com) renders by script, so the SOC 2 type and any ISO 27001 certificate were not confirmed", "unchecked: the MCP server's tool schemas and annotations, which need an account-specific URL and a sign-in", "Prices come from the fallback data file the pricing page loads (dist/pricing/USD.json). The live catalogue the page queries first may differ", "Whether an API key carries its user's permission group limits, not stated on the authentication page", "What \"to train\" means in the Contact Data clause of the terms of service", "Only 46 of 185 reference pages were sampled for update dates, so a later API change than 2 September 2026 may exist", "The 9 July 2026 APAC outage (1 hour 12 minutes) falls one day outside the 90-day window and was not counted" ] }, "negative": 0, "verdict": "The v3 REST API covers contacts, segments, campaign scheduling and bulk import, with OpenAPI 3.1 definitions inside public Markdown reference pages and documented Retry-After on 429s. Each user has one unscoped API key, the limit is 5 requests a second, and no changelog was found. The status page shows three critical incidents between 27 July and 28 September 2026.", "bestFor": "Small and mid-sized teams already on ActiveCampaign that want an agent to maintain contacts, segments and campaign drafts and enrol contacts in automations.", "strengths": [ "Every reference page is served as Markdown with an OpenAPI 3.1 definition for its operation, indexed by llms.txt", "429 responses carry Retry-After, RateLimit-Limit and RateLimit-Remaining headers per the rate limit page", "Contact upsert by email and bulk import of 250 contacts a request make contact writes safe to repeat", "Official remote MCP server with 50 listed tools and no delete tool, included on all four plans per the pricing page", "A 99.5 per cent availability SLA is published for enterprise subscriptions, and the sub-processor list of 25 September 2026 names locations" ], "weaknesses": [ "Three critical incidents on status.activecampaign.com between 27 July and 28 September 2026, one of about 24 hours 41 minutes on EU segmented campaigns", "One API key per user with no scopes or read-only keys in the reviewed documentation", "The limit is 5 requests a second per account on every plan", "No public API changelog or deprecation policy was found, and developers.activecampaign.com/changelog returns 404", "The official PHP and Node.js clients wrap the v1 API and last changed in December 2017 and March 2018" ], "agentNotes": [ "Take the base URL from Settings, Developer in the account. Do not build it from the account name, because non-US accounts may not sit on api-us1.com", "Use POST /contact/sync to upsert by email, and POST /import/bulk_import for up to 250 contacts, then read each row's outcome from GET /import/info", "Page large contact sets with `orders[id]=ASC` and `id_greater`, not `offset`. Unsupported filter and order keys are silently ignored", "Check `succeeded` in the body after scheduling, pausing or stopping a campaign. Business-rule failures return 200 with `succeeded` set to 0", "Stay under 5 requests a second per account and wait for the Retry-After value on a 429" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 50.5 } ], "editorialScores": { "ergonomics": 52, "maintenance": 35, "payments": 30, "reliability": 67, "schema": 68, "security": 33, "transparency": 55 }, "provenanceScore": 58 }, "connect": { "http": "curl -H \"Api-Token: $ACTIVECAMPAIGN_API_TOKEN\" https://\u003caccount\u003e.api-us1.com/api/3/users/me" }, "letme": { "capability": "https://letme.dev/marketing.profiles", "tool": "https://letme.dev/activecampaign" }, "notable": [ "The rate limit is 5 requests a second per account, and a 429 carries Retry-After, RateLimit-Limit and RateLimit-Remaining headers (https://developers.activecampaign.com/reference/rate-limits)", "The remote MCP server lists 50 tools, among them `create_or_update_contact`, `add_contact_to_automation` and `update_campaign_message`, with no delete tool and no tool that schedules a campaign (https://developers.activecampaign.com/page/mcp-available-tools)", "Each reference page is served as Markdown with the operation's OpenAPI 3.1 definition, and llms.txt indexes 185 reference pages (https://developers.activecampaign.com/llms.txt)", "Scheduling, pausing and stopping a campaign return 200 with `succeeded` 0 on business-rule failures, with a message in the account's language (https://developers.activecampaign.com/reference/schedule-a-campaign)", "status.activecampaign.com lists critical incidents on 27 July (platform instability, 1 hour 22 minutes), 5 August (EU segmented campaigns, about 24 hours 41 minutes) and 28 September 2026 (transactional email, 3 hours 50 minutes) (https://status.activecampaign.com/history)", "The SLA commits to 99.5 per cent availability for enterprise subscriptions, with credits of 5 or 10 per cent (https://www.activecampaign.com/legal/service-level-agreement)", "The official MCP registry holds two third-party ActiveCampaign servers and none under an ActiveCampaign namespace (https://registry.modelcontextprotocol.io/v0/servers?search=activecampaign)" ], "area": "communication", "details": [ { "label": "Graded surface", "value": "The v3 REST API at https://\u003caccount\u003e.api-us1.com/api/3 (the base URL is account-specific). The remote MCP server is described where its documentation allows" }, { "label": "MCP server", "value": "Official remote server with an account-specific URL shown under Settings, Developer. 50 tools listed on 13 July 2026 across contacts, tags, lists, custom fields, campaigns, automations, deals, pipelines and custom objects. Tutorials for Claude and ChatGPT" }, { "label": "Credentials", "value": "REST takes an `Api-Token` header, one key per user. The MCP server is authorised by signing in to ActiveCampaign and approving the connection. No scopes documented for either" }, { "label": "Rate limits", "value": "5 requests a second per account. 429 with Retry-After, RateLimit-Limit and RateLimit-Remaining headers" }, { "label": "Pagination", "value": "`limit` (default 20, maximum 100) and `offset`, `orders[...]`, `filters[...]`, `meta.total`. Contacts also take `id_greater` and `meta=only` for a count" }, { "label": "Profiles and events", "value": "Contact upsert by email, bulk import of 250 a request, custom fields, tags, lists and custom objects. Events post to https://trackcmp.net/event with an event key and account ID" }, { "label": "Segments", "value": "Segments API 2.0.0 creates, updates, reverts and deletes segments and runs match requests that return contact IDs asynchronously" }, { "label": "Campaign control", "value": "Create, edit, duplicate, schedule, pause, resume and stop campaigns, send a test and preview a message. SMS broadcasts and WhatsApp templates have their own endpoints" }, { "label": "Errors", "value": "402, 403, 404, 422 and 429 documented. 422 returns an `errors` array of titles. Campaign state changes return 200 with `succeeded` 0 on business-rule failures" }, { "label": "Sandbox", "value": "Free developer sandbox on request by form, with 1,000 contacts, 100 email sends and 5 users, expiring after two years. 14-day trial without a card" }, { "label": "SLA", "value": "99.5 per cent availability per reporting period for enterprise subscriptions, with service credits of 5 or 10 per cent" }, { "label": "Status", "value": "status.activecampaign.com on Statuspage, 55 components across US, EU and APAC regions including API Availability" }, { "label": "Sub-processors", "value": "List updated 25 September 2026. Amazon Web Services (US, EU, Australia), Cloudflare, Snowflake, Zendesk, Zight, Twilio and OpenAI" } ], "unitPrices": [ { "item": "Starter, 1,000 contacts", "unit": "month", "usd": 19, "note": "billed monthly, $180 billed yearly, 1 user. $49 at 2,500 contacts" }, { "item": "Plus, 1,000 contacts", "unit": "month", "usd": 59, "note": "billed monthly, $588 billed yearly, 1 user" }, { "item": "Pro, 1,000 contacts", "unit": "month", "usd": 99, "note": "billed monthly, $948 billed yearly, 3 users" }, { "item": "Enterprise, 1,000 contacts", "unit": "month", "usd": 179, "note": "billed monthly, $1,740 billed yearly, 5 users" } ], "provenance": { "legalEntity": "ActiveCampaign, LLC", "domain": "activecampaign.com", "domainRegistered": "2003-01-10", "endpointOnVendorDomain": false, "terms": "https://www.activecampaign.com/legal/terms-of-service", "privacy": "https://www.activecampaign.com/legal/privacy-policy", "statusPage": "https://status.activecampaign.com", "changelog": "", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The terms of service (last updated 23 December 2025) name ActiveCampaign, LLC, 1 North Dearborn Street, 5th Floor, Chicago, IL 60602.", "The API answers at https://\u003caccount\u003e.api-us1.com/api/3 and event tracking at https://trackcmp.net/event, neither on activecampaign.com. The docs name both hosts.", "www.activecampaign.com/.well-known/security.txt and /security.txt return 404.", "developers.activecampaign.com/changelog returns 404 and no other API changelog was found.", "RDAP for activecampaign.com gives a registration date of 2003-01-10." ], "score": 58, "checks": [ { "check": "Legal entity named", "value": "ActiveCampaign, LLC", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "activecampaign.com, registered 2003-01-10 (23 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": " is not on activecampaign.com", "points": 0, "max": 15, "state": "no" }, { "check": "Terms of service", "value": "read, states 6 of the 7 things a reader expects, and has 3 clauses that cost points", "points": 3.1, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "status.activecampaign.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ], "policies": [ { "kind": "terms", "url": "https://www.activecampaign.com/legal/terms-of-service", "state": "read", "readAt": "2026-10-08", "statedDate": "2025-12-23", "words": 10157, "points": 3.1, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Updated: December 23, 2025", "says": "Last updated 2025-12-23" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "You and ActiveCampaign agree that the state or federal courts of the State of Illinois and the United States sitting in Cook County, Illinois have exclusive jurisdiction over any appeals and the enforcement of an arbitration award.", "says": "Disputes go to the courts of the State of Illinois" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "THE TOTAL LIABILITY OF ACTIVECAMPAIGN AND THE OTHER ACTIVECAMPAIGN PARTIES, FOR ANY CLAIM ARISING OUT OF OR RELATING TO THESE TERMS OR OUR SERVICES, REGARDLESS OF THE FORM OF THE ACTION, IS LIMITED TO THE AMOUNT PAID, IF ANY, BY YOU TO ACCESS OR USE OUR SERVICES." }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "We may suspend, restrict or terminate your access to or use of the Services if we suspect, in our sole discretion, that your Marketing Content violates our Acceptable Use Policy or any applicable law, rule or regulation, or that it relates to goods, services or information that are offered in violation of applicable l…" }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "If we make changes, we will post the amended Terms to our Services and update the “Last Updated” date above.", "says": "Changes are posted, with no other notice named" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "You may not create, post, store or share any Marketing Content that violates these Terms, including our Acceptable Use Policy (https://www.activecampaign.com/legal/acceptable-use-policy), or for which you do not have all the rights necessary to grant us the license described above." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "training", "label": "Says it may use customer content to train or improve models, and no opt-out was found", "found": true, "quote": "As a part of the Services, we may view, copy, and internally use Marketing Content to help us train and improve the Services, including their functionality and effectiveness for you and your campaigns, as well as to assist us in detecting issues.", "costsPoints": true }, { "key": "terms.automated", "label": "Restricts automated access", "found": true, "quote": "Develop or use any third-party applications that interact with our Services without our prior written consent, including any scripts designed to scrape or extract data from our Services;", "costsPoints": true }, { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "We reserve the right to fully or partially discontinue Beta Features at any time and for any reason, temporarily or permanently, with or without notice.", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "We reserve the right, without notice and in our sole discretion, to terminate your right to access or use our Services." }, { "key": "terms.arbitration", "label": "Requires arbitration or waives class actions", "found": true, "quote": "If you do not agree to these Terms, including the mandatory arbitration provision and class action waiver in Section 20, do not access or use our Services." } ], "notes": [ { "date": "2026-10-08", "text": "ActiveCampaign takes a worldwide, sub-licensable licence to use the customer name, trade names, trademarks and logos under its publicity section.", "quote": "You hereby grant ActiveCampaign a nonexclusive, royalty-free, worldwide, fully-paid, and sub-licensable license to use your name and any of your trade names, trademarks, logos and other proprietary marks or words pursuant to this Section." }, { "date": "2026-10-08", "text": "Contact Data cannot be accessed or restored after cancellation or termination.", "quote": "Upon cancellation or termination, you will not have access to or be able to restore any Contact Data." }, { "date": "2026-10-08", "text": "A claim under the terms must be filed within one year after it arose, or it is permanently barred.", "quote": "Any claim arising out of or related to these Terms or our Services must be filed within one year after such claim arose; otherwise, the claim is permanently barred, which means that you and ActiveCampaign will not have the right to assert the claim." } ] }, { "kind": "privacy", "url": "https://www.activecampaign.com/legal/privacy-policy", "state": "read", "readAt": "2026-10-08", "statedDate": "2026-10-01", "words": 9395, "points": 10, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Updated: October 1, 2026", "says": "Last updated 2026-10-01" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "The types of personal information that we collect will depend on the nature of your dealings with us." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "We will retain information about you only for as long as is necessary for the purposes set out in this Privacy Policy or as described to you, including for as long as your account is active (i.e., for the lifetime of your account), or as needed to provide the Services to you.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "This Privacy Policy does not apply where we process personal information as a data processor or service provider on behalf of our clients." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "…toll-free number at +1 (866) 851-5211, and finally, you may exercise your rights by clicking on the “Do Not Sell or Share My Personal Information” link on our CCPA page to take you to a webform or, as applicable, submitting a verifiable consumer request through https://postmarkapp.com/contact.", "says": "Says it does not sell personal data" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "You may also have the right to object to, or request that we restrict, certain processing activities." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "At any time, you can disconnect your Google account and delete this data in your account or by reaching out to privacy@activecampaign.com and requesting that it be deleted.", "says": "privacy@activecampaign.com" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "Department of Commerce (collectively, the “Data Privacy Framework”) with respect to personal data we process from the EU, the UK or Switzerland and transfer to the United States.", "says": "Relies on the Data Privacy Framework" } ], "toKnow": [ { "key": "privacy.sells", "label": "Says it sells personal data or shares it for advertising", "found": true, "quote": "As part of these ad campaigns, we or the third-party platforms may convert information about you, such as your email address and phone number, into a unique value that can be matched with a user account on these platforms" } ], "notes": [ { "date": "2026-10-08", "text": "The policy does not apply where ActiveCampaign processes personal information as a data processor or service supplier for its clients.", "quote": "This Privacy Policy does not apply where we process personal information as a data processor or service provider on behalf of our clients." }, { "date": "2026-10-08", "text": "Connecting a Google account through the Nylas integration gives ActiveCampaign access to email headers, message bodies and subject lines.", "quote": "When you connect your Google account with the ActiveCampaign platform through Nylas, we will have access to certain information such as the email meta headers (sender, recipient, and date), the email message body and subject line (“Google Data”)." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/activecampaign.json", "live": { "slug": "activecampaign", "vendorStatus": { "page": "https://status.activecampaign.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-08T17:37:06.666792936Z" }, "securityTxt": { "url": "https://activecampaign.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-08T15:39:02.115932036Z" }, "updatedAt": "2026-10-08T17:37:06.666792936Z" } }, "verify": { "accepts": "a page on activecampaign.com or one of its subdomains", "badgeUrl": "https://www.anchorterminal.com/badges/activecampaign.svg", "body": { "slug": "activecampaign", "url": "the page with the badge or the link" }, "docs": "https://www.anchorterminal.com/builders/#verify", "effect": "none, it never changes a grade, rank or review", "endpoint": "https://www.anchorterminal.com/api/v1/verify", "listingUrl": "https://www.anchorterminal.com/tools/activecampaign", "mcpTool": "verify_listing", "recheck": "weekly; two failed checks in a row and it lapses, a later pass restores it", "snippets": { "html": "\u003ca href=\"https://www.anchorterminal.com/tools/activecampaign\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/activecampaign.svg\" alt=\"ActiveCampaign on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e", "markdown": "[![ActiveCampaign on Anchor Terminal](https://www.anchorterminal.com/badges/activecampaign.svg)](https://www.anchorterminal.com/tools/activecampaign)", "link": "\u003ca href=\"https://www.anchorterminal.com/tools/activecampaign\"\u003eActiveCampaign on Anchor Terminal\u003c/a\u003e" } } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/tools/activecampaign", "json": "https://www.anchorterminal.com/tools/activecampaign.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/tools/activecampaign.md", "slim": "https://www.anchorterminal.com/tools/activecampaign.min.md" }, "markdown": "## Overview\n\n**Grade D · 50.5/100 · rank #516 of 629 · #5 in Lifecycle marketing \u0026 customer engagement · not agent-ready · confidence medium**\n\n\n## Assessment\n\nThe v3 REST API covers contacts, segments, campaign scheduling and bulk import, with OpenAPI 3.1 definitions inside public Markdown reference pages and documented Retry-After on 429s. Each user has one unscoped API key, the limit is 5 requests a second, and no changelog was found. The status page shows three critical incidents between 27 July and 28 September 2026.\n\n## Facts\n\n| Field | Value |\n| --- | --- |\n| Vendor | ActiveCampaign, LLC (https://www.activecampaign.com) |\n| Kind | HTTP API |\n| Category | Lifecycle marketing \u0026 customer engagement (https://www.anchorterminal.com/categories/lifecycle-marketing) |\n| Transport | HTTP, Streamable HTTP |\n| Auth | OAuth or key · Self-serve. The REST API takes an `Api-Token` header, and each user has one key, shown under Settings, Developer with the account's base URL. No scopes, read-only keys or OAuth for the REST API were found in the reviewed documentation. The remote MCP server uses an account-specific URL from the same page, and the user signs in to ActiveCampaign and approves the connection. Event tracking posts an event key and account ID in the request body. |\n| Pricing | Paid ($19 / mo) · 14-day trial with no card, and a free developer sandbox on request by form (1,000 contacts, 100 email sends, 5 users, two years). No free plan. Plans are priced by contact count, from $19 a month for Starter at 1,000 contacts billed monthly, per the pricing page's own data file read on 2026-10-08. The API, webhooks and the MCP server are marked as included on all four plans (https://www.activecampaign.com/pricing). |\n| x402 | No · No x402, MPP or L402 in the developer docs or on the pricing page (checked 2026-10-08). |\n| Licence | Proprietary service under ActiveCampaign's terms of service and API licence agreement |\n| Tools exposed | 50 |\n| Docs | https://developers.activecampaign.com/reference/overview |\n| llms.txt | https://developers.activecampaign.com/llms.txt |\n| Last release | 2026-09-02 |\n| Graded surface | The v3 REST API at https://\u003caccount\u003e.api-us1.com/api/3 (the base URL is account-specific). The remote MCP server is described where its documentation allows |\n| MCP server | Official remote server with an account-specific URL shown under Settings, Developer. 50 tools listed on 13 July 2026 across contacts, tags, lists, custom fields, campaigns, automations, deals, pipelines and custom objects. Tutorials for Claude and ChatGPT |\n| Credentials | REST takes an `Api-Token` header, one key per user. The MCP server is authorised by signing in to ActiveCampaign and approving the connection. No scopes documented for either |\n| Rate limits | 5 requests a second per account. 429 with Retry-After, RateLimit-Limit and RateLimit-Remaining headers |\n| Pagination | `limit` (default 20, maximum 100) and `offset`, `orders[...]`, `filters[...]`, `meta.total`. Contacts also take `id_greater` and `meta=only` for a count |\n| Profiles and events | Contact upsert by email, bulk import of 250 a request, custom fields, tags, lists and custom objects. Events post to https://trackcmp.net/event with an event key and account ID |\n| Segments | Segments API 2.0.0 creates, updates, reverts and deletes segments and runs match requests that return contact IDs asynchronously |\n| Campaign control | Create, edit, duplicate, schedule, pause, resume and stop campaigns, send a test and preview a message. SMS broadcasts and WhatsApp templates have their own endpoints |\n| Errors | 402, 403, 404, 422 and 429 documented. 422 returns an `errors` array of titles. Campaign state changes return 200 with `succeeded` 0 on business-rule failures |\n| Sandbox | Free developer sandbox on request by form, with 1,000 contacts, 100 email sends and 5 users, expiring after two years. 14-day trial without a card |\n| SLA | 99.5 per cent availability per reporting period for enterprise subscriptions, with service credits of 5 or 10 per cent |\n| Status | status.activecampaign.com on Statuspage, 55 components across US, EU and APAC regions including API Availability |\n| Sub-processors | List updated 25 September 2026. Amazon Web Services (US, EU, Australia), Cloudflare, Snowflake, Zendesk, Zight, Twilio and OpenAI |\n| Capabilities | marketing.profiles, marketing.events, marketing.segments, marketing.campaigns, marketing.journeys, crm.records, crm.pipeline, crm.webhooks, messaging.sms, messaging.whatsapp |\n| Tags | official, hosted, closed-source, mcp, api-key, llms-txt, openapi, webhooks, no-card, trial, sandbox, status-page, sla, sms, whatsapp |\n| JSON | https://www.anchorterminal.com/api/v1/tools/activecampaign.json |\n\n## Score breakdown (methodology v0.4, October 2026 research run)\n\nAssessed 2026-10-08 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. \"This run\" is each category's share of the 100 points.\n\n| Category | Weight | This run | Score (0–100) | Points |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% | 20 | 67 | 13.4 |\n| Performance | 10% | pending | pending | n/a |\n| Schema \u0026 documentation | 13% | 16.2 | 68 | 11.1 |\n| Agent ergonomics | 13% | 16.2 | 52 | 8.4 |\n| Security \u0026 auth | 14% | 17.5 | 33 | 5.8 |\n| Payments \u0026 pricing | 10% | 12.5 | 30 | 3.8 |\n| Task success | 10% | pending | pending | n/a |\n| Maintenance \u0026 community | 7% | 8.8 | 35 | 3.1 |\n| Transparency \u0026 trust (editorial 55, provenance 58) | 7% | 8.8 | 57 | 5.0 |\n| Negative events | up to −15 | up to −15 | none recorded | 0 |\n| **Total** | | | | **50.5 → D** |\n\n### Why each score\n\n- Reliability 67: Graded on the v3 REST API with the hosted lines. Statuspage site with 55 components across three regions, API Availability among them (20). In the 90 days to 8 October 2026 it lists three critical incidents, platform instability naming API Availability on 27 July (1 hour 22 minutes), segmented campaigns in the EU on 5 August (about 24 hours 41 minutes) and transactional email failures on 28 September (3 hours 50 minutes), plus a login incident of 2 hours 45 minutes on 10 August. That is several majors (0). 5 requests a second per account (15). 429 with Retry-After and RateLimit headers. No idempotency keys were found, though upsert by email makes contact writes repeatable (12 of 15). SLA of 99.5 per cent for enterprise subscriptions (10). The v3 API is generally available and the MCP pages carry no beta label (10).\n- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.\n- Schema \u0026 documentation 68: Each reference page is public Markdown with an OpenAPI 3.1 definition for its operation. No single downloadable specification was found (20 of 25). llms.txt and Markdown pages (10). Pages revised in August 2026, such as contact upsert and contact search, say when to use each endpoint and when not to. Older pages are short, and the MCP page gives one line a tool with no input schemas (14 of 20). Query parameters are typed with enums on status and sort order, but the segment body is described as flexible JSON to be checked against the segment builder (10 of 15). Request examples on most pages. The errors page lists five status codes and one 422 body, and 400 responses in the definitions are empty objects (9 of 15). The version is in the path (v3, Segments 2.0.0). No changelog was found, and developers.activecampaign.com/changelog returns 404 (5 of 15).\n- Agent ergonomics 52: List endpoints take `limit` up to 100 and contacts take `meta=only` for a count, but there is no field selection. The MCP server lists 50 tools with no documented toolsets (12 of 25). `limit`, `offset`, `orders`, `filters` and `id_greater` on contacts, less 4 because unsupported filter and order keys are silently ignored (16 of 20). Five documented status codes and a 422 `errors` array of titles without codes. Campaign state changes report failures as 200 with `succeeded` 0 and a localised message (10 of 20). No idempotency keys. Upsert by email and bulk import with per-row status give safe retries for contacts, and no MCP tool annotations are documented (8 of 20). Few required parameters. The official PHP and Node.js clients wrap the v1 API and last changed in 2017 and 2018, so no current official SDK was found (6 of 15).\n- Security \u0026 auth 33: One API key per user in an `Api-Token` header, with no scopes. The MCP server is authorised by signing in and approving, with no scopes documented. Key rotation was not found in the reviewed documentation (15 of 30). No read-only key or mode. The listed MCP tools include no delete tool and none that schedules a campaign, though `add_contact_to_automation` can start messages, and the definitions name a permission resource for each operation (8 of 20). The API returns contact data, notes and message content written by outsiders, and no prompt-injection guidance was found (0 of 15). No audit log or per-call visibility was found in the developer docs. The help centre refused our reader, so this is unchecked (0 of 15). The security page states SOC 2, HIPAA and GDPR compliance, a red team and a trust centre with the SOC 2 report. No security.txt, bug bounty or disclosure policy was found (10 of 20).\n- Payments \u0026 pricing 30: No x402, MPP or L402 (0). Plan prices are public and vary with contact count, for example $19 a month for Starter and $179 for Enterprise at 1,000 contacts billed monthly, read from the pricing page's own data file. API calls are not priced (10). A 14-day trial with no card, and a free developer sandbox on request (20). A person signs up in a browser and copies the key from account settings (0).\n- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.\n- Maintenance \u0026 community 35: There is no changelog, so we read the `updatedAt` stamp on 46 of the 185 reference pages. The newest was 2 September 2026, 36 days before this check (20 of 30). Stamps fall on 12, 13, 17 and 31 August and 2 September 2026. These are page revisions, not changelog entries, so half credit (10 of 20). No public changelog. A community site and a developer relations email address are published, and we did not see reply times (5 of 15). No official server in the MCP registry, where two third-party servers are listed, and the official PHP and Node.js clients are v1 wrappers last changed in December 2017 and March 2018 (0 of 15). No current package to assess (0 of 10).\n- Transparency \u0026 trust 57: Closed service with terms of service dated 23 December 2025 and a separate API licence agreement, which lets ActiveCampaign revoke the licence at any time for any reason (15). Privacy policy updated 1 October 2026 and a DPA template that binds only once signed in the account. Retention is stated as the lifetime of the account or as long as necessary, with no period. The terms say Contact Data is used to supply the services and \"to train, detect issues with our Services\", which is not explained further (16 of 30). No deprecation policy. The overview says v1 has no sunset planned and promises advance notice, and deprecated contact fields are flagged without dates (6 of 20). Sub-processor list updated 25 September 2026 with locations in the United States, European Union and Australia (18 of 20).\n\nFix list for a coding agent, everything this grade says the listing lacks, the biggest gain first (19 items): https://www.anchorterminal.com/fixes/activecampaign.md (JSON https://www.anchorterminal.com/fixes/activecampaign.json)\n\n### What we couldn't check\n\n- unchecked: the help centre (help.activecampaign.com) answered 403 to our reader, so MCP permissions, audit logs, API key reset and user permission settings described there were not read\n- unchecked: the trust centre (trust.activecampaign.com) renders by script, so the SOC 2 type and any ISO 27001 certificate were not confirmed\n- unchecked: the MCP server's tool schemas and annotations, which need an account-specific URL and a sign-in\n- Prices come from the fallback data file the pricing page loads (dist/pricing/USD.json). The live catalogue the page queries first may differ\n- Whether an API key carries its user's permission group limits, not stated on the authentication page\n- What \"to train\" means in the Contact Data clause of the terms of service\n- Only 46 of 185 reference pages were sampled for update dates, so a later API change than 2 September 2026 may exist\n- The 9 July 2026 APAC outage (1 hour 12 minutes) falls one day outside the 90-day window and was not counted\n\n### Sources\n\n- docs index (llms.txt): \u003chttps://developers.activecampaign.com/llms.txt\u003e (seen 2026-10-08)\n- API overview and errors: \u003chttps://developers.activecampaign.com/reference/overview\u003e (seen 2026-10-08)\n- rate limits: \u003chttps://developers.activecampaign.com/reference/rate-limits\u003e (seen 2026-10-08)\n- authentication: \u003chttps://developers.activecampaign.com/reference/authentication\u003e (seen 2026-10-08)\n- pagination, ordering and filtering: \u003chttps://developers.activecampaign.com/reference/pagination\u003e (seen 2026-10-08)\n- errors: \u003chttps://developers.activecampaign.com/reference/errors\u003e (seen 2026-10-08)\n- contact upsert: \u003chttps://developers.activecampaign.com/reference/sync-a-contacts-data\u003e (seen 2026-10-08)\n- contact search: \u003chttps://developers.activecampaign.com/reference/list-all-contacts\u003e (seen 2026-10-08)\n- schedule a campaign: \u003chttps://developers.activecampaign.com/reference/schedule-a-campaign\u003e (seen 2026-10-08)\n- create a segment: \u003chttps://developers.activecampaign.com/reference/create_segment\u003e (seen 2026-10-08)\n- track event: \u003chttps://developers.activecampaign.com/reference/track-event\u003e (seen 2026-10-08)\n- remote MCP server: \u003chttps://developers.activecampaign.com/page/mcp\u003e (seen 2026-10-08)\n- MCP tool list: \u003chttps://developers.activecampaign.com/page/mcp-available-tools\u003e (seen 2026-10-08)\n- MCP setup for Claude: \u003chttps://developers.activecampaign.com/page/connect-claude\u003e (seen 2026-10-08)\n- developer sandbox accounts: \u003chttps://developers.activecampaign.com/page/developer-sandbox-accounts\u003e (seen 2026-10-08)\n- status incidents feed: \u003chttps://status.activecampaign.com/api/v2/incidents.json\u003e (seen 2026-10-08)\n- status components: \u003chttps://status.activecampaign.com/api/v2/components.json\u003e (seen 2026-10-08)\n- pricing page: \u003chttps://www.activecampaign.com/pricing\u003e (seen 2026-10-08)\n- pricing data file used by the pricing page: \u003chttps://www.activecampaign.com/dist/pricing/USD.json\u003e (seen 2026-10-08)\n- service level agreement: \u003chttps://www.activecampaign.com/legal/service-level-agreement\u003e (seen 2026-10-08)\n- API licence agreement: \u003chttps://www.activecampaign.com/legal/api-license-agreement\u003e (seen 2026-10-08)\n- terms of service: \u003chttps://www.activecampaign.com/legal/terms-of-service\u003e (seen 2026-10-08)\n- privacy policy: \u003chttps://www.activecampaign.com/legal/privacy-policy\u003e (seen 2026-10-08)\n- sub-processors: \u003chttps://www.activecampaign.com/legal/subprocessors\u003e (seen 2026-10-08)\n- DPA template: \u003chttps://www.activecampaign.com/legal/dpa\u003e (seen 2026-10-08)\n- security page: \u003chttps://www.activecampaign.com/security\u003e (seen 2026-10-08)\n- security.txt (404): \u003chttps://www.activecampaign.com/.well-known/security.txt\u003e (seen 2026-10-08)\n- MCP registry search: \u003chttps://registry.modelcontextprotocol.io/v0/servers?search=activecampaign\u003e (seen 2026-10-08)\n- official PHP client repository: \u003chttps://github.com/ActiveCampaign/activecampaign-api-php\u003e (seen 2026-10-08)\n- official Node.js client on npm: \u003chttps://registry.npmjs.org/activecampaign\u003e (seen 2026-10-08)\n- RDAP record: \u003chttps://rdap.org/domain/activecampaign.com\u003e (seen 2026-10-08)\n\n## Who's behind it (provenance 58/100, checked 2026-10-08)\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Legal entity named | ActiveCampaign, LLC | 20/20 |\n| Domain age | activecampaign.com, registered 2003-01-10 (23 years) | 15/15 |\n| Endpoint on the vendor's domain | is not on activecampaign.com | 0/15 |\n| Terms of service | read, states 6 of the 7 things a reader expects, and has 3 clauses that cost points | 3.1/10 |\n| Privacy policy | read, states 8 of the 8 things a reader expects | 10/10 |\n| Status page | status.activecampaign.com | 10/10 |\n| Changelog | not found | 0/10 |\n| security.txt | not found | 0/10 |\n\nThe terms of service (last updated 23 December 2025) name ActiveCampaign, LLC, 1 North Dearborn Street, 5th Floor, Chicago, IL 60602.\n\nThe API answers at https://\u003caccount\u003e.api-us1.com/api/3 and event tracking at https://trackcmp.net/event, neither on activecampaign.com. The docs name both hosts.\n\nwww.activecampaign.com/.well-known/security.txt and /security.txt return 404.\n\ndevelopers.activecampaign.com/changelog returns 404 and no other API changelog was found.\n\nRDAP for activecampaign.com gives a registration date of 2003-01-10.\n\n### Terms and privacy, as read\n\nA reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.\n\n**Terms of service** (https://www.activecampaign.com/legal/terms-of-service), read 2026-10-08, dated 2025-12-23, states 6 of the 7 things a reader expects.\n\n- To know. Says it may use customer content to train or improve models, and no opt-out was found (costs points). \"As a part of the Services, we may view, copy, and internally use Marketing Content to help us train and improve the Services, including their functionality and effectiveness for you and your campaigns, as well as to assist us in detecting issues.\"\n- To know. Restricts automated access (costs points). \"Develop or use any third-party applications that interact with our Services without our prior written consent, including any scripts designed to scrape or extract data from our Services;\"\n- To know. Says the terms or the service can change without notice (costs points). \"We reserve the right to fully or partially discontinue Beta Features at any time and for any reason, temporarily or permanently, with or without notice.\"\n- To know. Says access can be ended without notice or for any reason. \"We reserve the right, without notice and in our sole discretion, to terminate your right to access or use our Services.\"\n- To know. Requires arbitration or waives class actions. \"If you do not agree to these Terms, including the mandatory arbitration provision and class action waiver in Section 20, do not access or use our Services.\"\n- Gives the date it was last updated. Last updated 2025-12-23.\n- Names the governing law or courts. Disputes go to the courts of the State of Illinois.\n- Says how changes to the terms are announced. Changes are posted, with no other notice named.\n- Not found in the text. Refers to a service level or uptime commitment.\n- Also in the text (2026-10-08). ActiveCampaign takes a worldwide, sub-licensable licence to use the customer name, trade names, trademarks and logos under its publicity section. \"You hereby grant ActiveCampaign a nonexclusive, royalty-free, worldwide, fully-paid, and sub-licensable license to use your name and any of your trade names, trademarks, logos and other proprietary marks or words pursuant to this Section.\"\n- Also in the text (2026-10-08). Contact Data cannot be accessed or restored after cancellation or termination. \"Upon cancellation or termination, you will not have access to or be able to restore any Contact Data.\"\n- Also in the text (2026-10-08). A claim under the terms must be filed within one year after it arose, or it is permanently barred. \"Any claim arising out of or related to these Terms or our Services must be filed within one year after such claim arose; otherwise, the claim is permanently barred, which means that you and ActiveCampaign will not have the right to assert the claim.\"\n\n**Privacy policy** (https://www.activecampaign.com/legal/privacy-policy), read 2026-10-08, dated 2026-10-01, states 8 of the 8 things a reader expects.\n\n- To know. Says it sells personal data or shares it for advertising. \"As part of these ad campaigns, we or the third-party platforms may convert information about you, such as your email address and phone number, into a unique value that can be matched with a user account on these platforms\"\n- Gives the date it was last updated. Last updated 2026-10-01.\n- Says how long data is kept. For as long as needed, with no period named.\n- Says whether personal data is sold or shared for advertising. Says it does not sell personal data.\n- Gives a privacy contact. privacy@activecampaign.com.\n- Says where data is transferred or stored. Relies on the Data Privacy Framework.\n- Also in the text (2026-10-08). The policy does not apply where ActiveCampaign processes personal information as a data processor or service supplier for its clients. \"This Privacy Policy does not apply where we process personal information as a data processor or service provider on behalf of our clients.\"\n- Also in the text (2026-10-08). Connecting a Google account through the Nylas integration gives ActiveCampaign access to email headers, message bodies and subject lines. \"When you connect your Google account with the ActiveCampaign platform through Nylas, we will have access to certain information such as the email meta headers (sender, recipient, and date), the email message body and subject line (“Google Data”).\"\n\n## Live (updated 2026-10-08 17:37 UTC)\n\n- Vendor status page: none, All Systems Operational\n- security.txt: none\n- Always current: https://www.anchorterminal.com/api/v1/live/activecampaign.json\n\n## Probe metrics\n\nNot measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.\n\n## Prices\n\n| Item | Price | Unit | Note |\n| --- | --- | --- | --- |\n| Starter, 1,000 contacts | $19 | per month (plan) | billed monthly, $180 billed yearly, 1 user. $49 at 2,500 contacts |\n| Plus, 1,000 contacts | $59 | per month (plan) | billed monthly, $588 billed yearly, 1 user |\n| Pro, 1,000 contacts | $99 | per month (plan) | billed monthly, $948 billed yearly, 3 users |\n| Enterprise, 1,000 contacts | $179 | per month (plan) | billed monthly, $1,740 billed yearly, 5 users |\n\nAcross all listings: https://www.anchorterminal.com/prices/index.md\n\n## Strengths\n\n- Every reference page is served as Markdown with an OpenAPI 3.1 definition for its operation, indexed by llms.txt\n- 429 responses carry Retry-After, RateLimit-Limit and RateLimit-Remaining headers per the rate limit page\n- Contact upsert by email and bulk import of 250 contacts a request make contact writes safe to repeat\n- Official remote MCP server with 50 listed tools and no delete tool, included on all four plans per the pricing page\n- A 99.5 per cent availability SLA is published for enterprise subscriptions, and the sub-processor list of 25 September 2026 names locations\n\n## Weaknesses\n\n- Three critical incidents on status.activecampaign.com between 27 July and 28 September 2026, one of about 24 hours 41 minutes on EU segmented campaigns\n- One API key per user with no scopes or read-only keys in the reviewed documentation\n- The limit is 5 requests a second per account on every plan\n- No public API changelog or deprecation policy was found, and developers.activecampaign.com/changelog returns 404\n- The official PHP and Node.js clients wrap the v1 API and last changed in December 2017 and March 2018\n\n## Before you call it (notes for agents)\n\n1. Take the base URL from Settings, Developer in the account. Do not build it from the account name, because non-US accounts may not sit on api-us1.com\n2. Use POST /contact/sync to upsert by email, and POST /import/bulk_import for up to 250 contacts, then read each row's outcome from GET /import/info\n3. Page large contact sets with `orders[id]=ASC` and `id_greater`, not `offset`. Unsupported filter and order keys are silently ignored\n4. Check `succeeded` in the body after scheduling, pausing or stopping a campaign. Business-rule failures return 200 with `succeeded` set to 0\n5. Stay under 5 requests a second per account and wait for the Retry-After value on a 429\n\n## Connect\n\nFirst request:\n\n```bash\ncurl -H \"Api-Token: $ACTIVECAMPAIGN_API_TOKEN\" https://\u003caccount\u003e.api-us1.com/api/3/users/me\n```\n\nThrough letme (picks today, calling later): https://letme.dev/activecampaign. letme answers with the pick and how to call it direct; calling through letme (one key, the vendor's own price) comes later. How it works: https://www.anchorterminal.com/letme/index.md\n\n## Similar tools\n\nRanked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.\n\n| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |\n| --- | --- | --- | --- | --- | --- | --- |\n| Customer.io | BB | 74.5 | 60 | marketing.profiles, marketing.events, marketing.segments, marketing.campaigns, marketing.journeys, messaging.sms | no | https://www.anchorterminal.com/tools/customer-io.md |\n| Klaviyo API + MCP | BB | 71.7 | 98 | marketing.profiles, marketing.events, marketing.segments, marketing.campaigns, marketing.journeys | no | https://www.anchorterminal.com/tools/klaviyo.md |\n| Braze | C | 61.2 | 330 | marketing.profiles, marketing.events, marketing.campaigns, marketing.journeys, marketing.segments | no | https://www.anchorterminal.com/tools/braze.md |\n| Iterable | C | 55.2 | 457 | marketing.profiles, marketing.events, marketing.segments, marketing.campaigns, marketing.journeys | no | https://www.anchorterminal.com/tools/iterable.md |\n| HubSpot API + MCP | BB | 71.5 | 100 | crm.records, crm.pipeline, crm.webhooks | no | https://www.anchorterminal.com/tools/hubspot-mcp.md |\n| Zoho CRM | BB | 70.8 | 121 | crm.records, crm.pipeline, crm.webhooks | no | https://www.anchorterminal.com/tools/zoho-crm.md |\n\n## Panel reviews (0)\n\nReviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .\n\nDesk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md\n\n## Notable\n\n- The rate limit is 5 requests a second per account, and a 429 carries Retry-After, RateLimit-Limit and RateLimit-Remaining headers (source: \u003chttps://developers.activecampaign.com/reference/rate-limits\u003e)\n- The remote MCP server lists 50 tools, among them `create_or_update_contact`, `add_contact_to_automation` and `update_campaign_message`, with no delete tool and no tool that schedules a campaign (source: \u003chttps://developers.activecampaign.com/page/mcp-available-tools\u003e)\n- Each reference page is served as Markdown with the operation's OpenAPI 3.1 definition, and llms.txt indexes 185 reference pages (source: \u003chttps://developers.activecampaign.com/llms.txt\u003e)\n- Scheduling, pausing and stopping a campaign return 200 with `succeeded` 0 on business-rule failures, with a message in the account's language (source: \u003chttps://developers.activecampaign.com/reference/schedule-a-campaign\u003e)\n- status.activecampaign.com lists critical incidents on 27 July (platform instability, 1 hour 22 minutes), 5 August (EU segmented campaigns, about 24 hours 41 minutes) and 28 September 2026 (transactional email, 3 hours 50 minutes) (source: \u003chttps://status.activecampaign.com/history\u003e)\n- The SLA commits to 99.5 per cent availability for enterprise subscriptions, with credits of 5 or 10 per cent (source: \u003chttps://www.activecampaign.com/legal/service-level-agreement\u003e)\n- The official MCP registry holds two third-party ActiveCampaign servers and none under an ActiveCampaign namespace (source: \u003chttps://registry.modelcontextprotocol.io/v0/servers?search=activecampaign\u003e)\n\n## Compare\n\n- [ActiveCampaign vs Braze](https://www.anchorterminal.com/compare/activecampaign-vs-braze.md): D 50.5 vs C 61.2\n- [ActiveCampaign vs Customer.io](https://www.anchorterminal.com/compare/activecampaign-vs-customer-io.md): D 50.5 vs BB 74.5\n- [ActiveCampaign vs Iterable](https://www.anchorterminal.com/compare/activecampaign-vs-iterable.md): D 50.5 vs C 55.2\n- [ActiveCampaign vs Klaviyo API + MCP](https://www.anchorterminal.com/compare/activecampaign-vs-klaviyo.md): D 50.5 vs BB 71.7\n\n## Verify this listing\n\nFor the vendor. The badge or a plain link to this page verifies the listing, from a page on activecampaign.com or one of its subdomains. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{\"slug\": \"activecampaign\", \"url\": \"…\"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify\n\nHTML badge:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/activecampaign\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/activecampaign.svg\" alt=\"ActiveCampaign on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e\n```\n\nMarkdown badge, for a README:\n\n```markdown\n[![ActiveCampaign on Anchor Terminal](https://www.anchorterminal.com/badges/activecampaign.svg)](https://www.anchorterminal.com/tools/activecampaign)\n```\n\nPlain link:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/activecampaign\"\u003eActiveCampaign on Anchor Terminal\u003c/a\u003e\n```\n\n## Share this listing\n\nFor the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say ActiveCampaign is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.\n\n- Dark: https://www.anchorterminal.com/assets/share/activecampaign-dark.png\n- Light: https://www.anchorterminal.com/assets/share/activecampaign-light.png\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Terminal", "url": "https://www.anchorterminal.com/tools/" }, { "name": "Lifecycle marketing \u0026 customer engagement", "url": "https://www.anchorterminal.com/categories/lifecycle-marketing" }, { "name": "ActiveCampaign", "url": "" } ], "description": "ActiveCampaign is a hosted marketing automation platform for email, SMS and WhatsApp with a built-in CRM. Its v3 REST API and an official remote MCP server cover contacts, lists, tags, segments, campaigns, automations and deals.", "facts": [ "rank #516 of 629", "OAuth or key auth", "0 desk reviews" ], "h1": "ActiveCampaign", "image": "https://www.anchorterminal.com/assets/og/tools-activecampaign.png", "path": "/tools/activecampaign", "published": "2026-10-01", "section": "tools", "title": "ActiveCampaign review for AI agents, grade D (50.5/100)", "toc": null, "updated": "2026-10-08", "url": "https://www.anchorterminal.com/tools/activecampaign" }, "tokens": { "markdown": 7800, "slim": 1830 }, "version": 1 }