# ContactsPlus > ContactsPlus (Contacts+) is a contact manager that syncs, deduplicates and enriches address books across Google, iCloud and Outlook. Agents reach it through an OAuth REST Contacts API with webhooks and a remote MCP server for Premium users. - Canonical: https://www.anchorterminal.com/tools/contactsplus - Markdown: https://www.anchorterminal.com/tools/contactsplus.md (~5,550 tokens) - Slim: https://www.anchorterminal.com/tools/contactsplus.min.md (~1,280 tokens, same facts, less prose, for token-sensitive contexts) - JSON: https://www.anchorterminal.com/tools/contactsplus.json (this page as data, same URL with Accept: application/json) - Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt) - API: https://www.anchorterminal.com/api/v1/index.json - Updated: 2026-10-14 ## Overview **Grade E · 42.4/100 · rank #966 of 1076 · #3 in Contacts & address books · not agent-ready · confidence medium** ## Assessment An address book that already merges Google, iCloud and Outlook contacts, reachable through OAuth scopes split by read and write and an MCP server that cannot delete or export and holds edits for the owner's approval. The REST reference has no rate limits, error codes or changelog, and its client libraries were archived in 2023. ## Facts | Field | Value | | --- | --- | | Vendor | Contacts Plus LLC (https://www.contactsplus.com) | | Kind | HTTP API | | Category | Contacts & address books (https://www.anchorterminal.com/categories/contacts) | | Transport | HTTP | | Endpoint | `https://api.contactsplus.com/api/v1` | | Auth | OAuth · The REST API uses OAuth 2.0 with an app registered at ui.contactsplus.com/apps, a client ID and secret, and 10 comma-separated scopes (account.read, contacts.read, contacts.write, tags.read, tags.write, teams.read and team variants). Refresh tokens are long-lived. The MCP server at https://mcp.contactsplus.com/mcp uses OAuth with PKCE (S256) and dynamic client registration, and the user picks Read only or Full access when connecting. | | Pricing | Freemium ($9.99 / mo) · Free plan at $0 with no credit card (1 synced account, 1,000 contacts, daily sync). Premium from $9.99 a month billed annually or $13.99 monthly (5 accounts, 25,000 contacts). Teams from $12.99 a user a month annually or $17.99 monthly. The MCP integration needs Premium. The developer page says the API is free to start and names no API price (https://www.contactsplus.com/pricing/, checked 2026-10-14). | | x402 | No · No x402, MPP or L402 in the developer pages, the MCP page or the pricing page (checked 2026-10-14). | | Licence | Proprietary service under the ContactsPlus Terms of Use (version 2.0, 26 June 2026). The old Node and Clojure API clients are archived | | Tools exposed | 7 | | Packages | npm: `contacts-api-node` | | Docs | https://www.contactsplus.com/developers/contacts-api/ | | llms.txt | https://www.contactsplus.com/llms.txt | | Last release | 2026-09-28 | | npm downloads / week | 13 | | REST endpoints | POST-style RPC calls under /api/v1, such as account.get, contacts.get, contacts.scroll, contacts.search, contacts.create, contacts.update, contacts.delete, contacts.uploadPhoto, contacts.manageTags, tags.*, teams.get and webhooks.* | | Search | Full-text search with field criteria and AND or OR, such as firstName:John AND company:Contacts+, with a cursor for more results | | Sync | contacts.scroll with a cursor and includeDeletedContacts, and webhooks with batches kept for 14 days | | MCP server | https://mcp.contactsplus.com/mcp, OAuth with PKCE and dynamic client registration, 3 reads and 4 actions, Read only or Full access, Premium plan | | Sources synced | Google Contacts, iCloud and Microsoft or Outlook, with approved changes written back | | Status | A static page at www.contactsplus.com/status/ with seven services, last updated 26 June 2026 | | Capabilities | contacts.read, contacts.write, contacts.search, contacts.sync, contacts.groups | | Tags | hosted, freemium, mcp, oauth, webhooks, llms-txt, consumer | | JSON | https://www.anchorterminal.com/api/v1/tools/contactsplus.json | ## Score breakdown (methodology v0.4, October 2026 research run) Assessed 2026-10-14 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. "This run" is each category's share of the 100 points. | Category | Weight | This run | Score (0–100) | Points | | --- | --- | --- | --- | --- | | Reliability | 16% | 20 | 28 | 5.6 | | Performance | 10% | pending | pending | n/a | | Schema & documentation | 13% | 16.2 | 38 | 6.2 | | Agent ergonomics | 13% | 16.2 | 42 | 6.8 | | Security & auth | 14% | 17.5 | 71 | 12.4 | | Payments & pricing | 10% | 12.5 | 30 | 3.8 | | Task success | 10% | pending | pending | n/a | | Maintenance & community | 7% | 8.8 | 25 | 2.2 | | Transparency & trust (editorial 48, provenance 75) | 7% | 8.8 | 62 | 5.4 | | Negative events | up to −15 | up to −15 | none recorded | 0 | | **Total** | | | | **42.4 → E** | ### Why each score - Reliability 28: Graded with the hosted lines, on the REST API and the MCP server. The status page at /status/ is a static page listing seven services, last updated 26 June 2026, with no component history (10 of 20). It says no incidents in the past 90 days, but a page last updated in June can't show that (5). No rate limits found in the API reference (0). No 429 or retry guidance. Update and delete take an etag, which guards against overwriting a newer record (3 of 15). No SLA found (0). Neither the API nor the MCP server carries a beta label (10). - Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes. - Schema & documentation 38: No OpenAPI or other machine-readable contract, and the MCP tool schemas couldn't be read without signing in (0). A site llms.txt lists the developer pages, but the API reference isn't served as Markdown (5 of 10). The reference says what each call does in a line or two, and the MCP page says which tools read, propose or apply (12 of 20). Fields are typed in the docs, with no enums for labels or webhook triggers (8 of 15). curl, Clojure and JavaScript examples for every call, but no documented error responses (8 of 15). Versioned paths under /api/v1 and /v3/oauth, with no changelog (5 of 15). - Agent ergonomics 42: No field selection. contacts.scroll takes a size, and MCP reads are paged and capped (12 of 25). Cursor paging on scroll and search, tag filters and team scoping (15 of 20). Error responses aren't documented (0). etags on update and delete, Create Tag returns an existing tag rather than a duplicate, and MCP writes wait in Suggestions for approval. MCP annotations couldn't be checked (12 of 20). The only clients, for Node and Clojure, were last published in 2020 and are archived (3 of 15). - Security & auth 71: OAuth 2.0 with 10 scopes that split reads from writes for contacts, tags and team data. The MCP server uses OAuth with PKCE and dynamic client registration (30). The MCP server has Read only and Full access modes, can't delete or export, and holds field changes, notes and new contacts for the owner's approval value by value. Only tagging applies at once (20). It never fetches links or reads images, but no prompt-injection guidance was found for contact text (8 of 15). The Suggestions queue shows each proposed change, with no audit log found for API calls (5 of 15). A responsible disclosure policy with security@contactsplus.com and OpenBugBounty and discretionary bounties, no security.txt and no SOC 2 or ISO 27001 found (8 of 20). - Payments & pricing 30: No x402, MPP or L402 (0). Plan prices are public, but no API price is named and the MCP needs Premium (10). A free plan with no credit card, and the developer page says the API is free to start (20). A person signs up and registers an app in a browser (0). - Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored. - Maintenance & community 25: The AI assistants (MCP) page was last modified on 28 September 2026 per the sitemap, and the terms and privacy policy on 26 June 2026. No dated release was found, so this is a soft signal (20). No changelog, so no dated releases to count (0). A help centre and support address but no public changelog or developer forum (5 of 15). The API clients are archived and last released in 2020 (0). No current package or CI to check (0). - Transparency & trust 62: Closed service under terms dated 26 June 2026, which grant developers an API licence (15). The privacy policy and security page agree on retention of up to five years after last use, deletion on request, AES-256 at rest and AWS hosting, and disclose that contacts are combined with other users' data and public sources, with an opt-out (20 of 30). Terms promise 30 days' notice of material changes, with no API deprecation policy found (5 of 20). Stripe, Google Analytics and AWS are named, but no sub-processor list was found (8 of 20). Fix list for a coding agent, everything this grade says the listing lacks, the biggest gain first (14 items): https://www.anchorterminal.com/fixes/contactsplus.md (JSON https://www.anchorterminal.com/fixes/contactsplus.json) ### What we couldn't check - unchecked: the MCP tool definitions and annotations, which need a signed-in session - Why the MCP server's metadata advertises only read scopes when a Full access mode is described - unchecked: whether the REST API is available on the free plan without limits, since the pricing page doesn't mention it - unchecked: when the MCP server launched, since no dated announcement or changelog was found ### Sources - developers page: (seen 2026-10-14) - Contacts API reference: (seen 2026-10-14) - AI assistants (MCP) page: (seen 2026-10-14) - MCP protected-resource and authorisation server metadata: (seen 2026-10-14) - pricing: (seen 2026-10-14) - status page: (seen 2026-10-14) - security page: (seen 2026-10-14) - terms of use: (seen 2026-10-14) - privacy policy: (seen 2026-10-14) - npm contacts-api-node: (seen 2026-10-14) - site llms.txt: (seen 2026-10-14) ## Who's behind it (provenance 75/100, checked 2026-10-14) | Check | Finding | Points | | --- | --- | --- | | Legal entity named | Contacts Plus LLC | 20/20 | | Domain age | contactsplus.com, registered 1998-02-25 (28 years) | 15/15 | | Endpoint on the vendor's domain | api.contactsplus.com | 15/15 | | Terms of service | read, states 4 of the 7 things a reader expects, and has 1 clause that costs points | 5.4/10 | | Privacy policy | read, states 8 of the 8 things a reader expects | 10/10 | | Status page | www.contactsplus.com/status | 10/10 | | Changelog | not found | 0/10 | | security.txt | not found | 0/10 | The terms (version 2.0, 26 June 2026) name Contacts Plus LLC, a Delaware limited liability company at 3636 S. Geyer Road, Suite 100, Saint Louis, MO 63127. www.contactsplus.com/.well-known/security.txt answers with an HTML page, not a security.txt file. The security page names security@contactsplus.com and OpenBugBounty. The REST API answers at api.contactsplus.com and the MCP server at mcp.contactsplus.com. The API clients on npm and GitHub sit under the fullcontact organisation, and the GitHub repository was archived in 2023. RDAP gives contactsplus.com a registration date of 1998-02-25. ### Terms and privacy, as read A reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice. **Terms of service** (https://www.contactsplus.com/terms/), read 2026-10-14, dated 2026-06-26, states 4 of the 7 things a reader expects. - To know. Restricts benchmarking or competitive use (costs points). "access the Services to build a similar or competitive service;" - To know. Requires arbitration or waives class actions. "Arbitration: disputes are subject to binding arbitration under the Federal Arbitration Act, conducted by a single AAA arbitrator under the AAA Commercial Arbitration Rules (and Consumer-Related Disputes Procedures, if applicable)." - Gives the date it was last updated. Last updated 2026-06-26. - Not found in the text. Names the governing law or courts. - States a limit on its liability. Capped at $50. - Not found in the text. Says how changes to the terms are announced. - Not found in the text. Refers to a service level or uptime commitment. - Also in the text (2026-10-14). ContactsPlus caps its total liability at the greater of 50 US dollars or the amounts paid in the prior 12 months. "Our total liability for damages arising from this Agreement or the Services (for any cause, regardless of the form of action) is limited to the greater of: (a) $50; or (b) the amounts you paid us in the prior 12 months (if any)." - Also in the text (2026-10-14). Any claim must be brought within one year of the event giving rise to it, or it is permanently barred. "To the fullest extent permitted by applicable law, any claim arising out of or relating to this Agreement or the Services must be brought within one (1) year after the event giving rise to the claim; otherwise, the claim is permanently barred." **Privacy policy** (https://www.contactsplus.com/privacy/), read 2026-10-14, dated 2026-06-26, states 8 of the 8 things a reader expects. - To know. Says it sells personal data or shares it for advertising. "With your consent, we may share pseudonymized data (e.g., cryptographically hashed emails) with social media platforms (e.g., Google) to generate leads or promote the Services." - Gives the date it was last updated. Last updated 2026-06-26. - Says how long data is kept. Names a period of 5 years. - Gives a privacy contact. support@contactsplus.com. - Says where data is transferred or stored. Relies on standard contractual clauses. - Also in the text (2026-10-14). Contacts a user uploads are combined with other users' data and public sources to build Completed Contact Data for deduplication and enrichment. "We combine your Contacts and relationship information with other Users’ data and public sources to create Completed Contact Data for enhanced features" ## Live (updated 2026-10-14 09:41 UTC) - Right now: up, HTTP 404, 337 ms, checked 2026-10-14 09:41 UTC (get on `https://api.contactsplus.com/api/v1`) - Uptime 24h 100.0% (17 probes) · 30 days 100.0% (17 probes) · p50 337 ms · p95 416 ms - Vendor status page: unknown, no machine-readable status found - Always current: https://www.anchorterminal.com/api/v1/live/contactsplus.json ## Probe metrics Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score. ## Prices | Item | Price | Unit | Note | | --- | --- | --- | --- | | Premium plan | $9.99 | per month (plan) | Billed annually ($119.88 a year), or $13.99 monthly. Needed for the MCP integration | | Teams plan | $12.99 | per seat per month | Billed annually, or $17.99 monthly, up to 50 members | Across all listings: https://www.anchorterminal.com/prices/index.md ## Strengths - One API over contacts synced from Google, iCloud and Outlook - MCP server can't delete or export, and edits wait for the owner's approval - Read only or Full access chosen at connection, with OAuth PKCE and dynamic client registration - Separate read and write scopes for contacts, tags and team data - Free plan with no card, and webhooks for contact changes ## Weaknesses - No rate limits, error responses or changelog in the API reference - No OpenAPI spec, and MCP tool schemas aren't public - Node and Clojure clients last released in 2020 and archived - Status page is a static page last updated 26 June 2026 - MCP access needs the Premium plan ## Before you call it (notes for agents) 1. Pass the contact's current etag on update and delete, or the call will be refused 2. Use contacts.scroll with includeDeletedContacts to keep a copy in step, or subscribe to webhooks 3. Tell the user that MCP edits land in Suggestions and need their approval 4. Ask only for contacts.read and tags.read when the task is lookup 5. Search with field criteria such as company:Acme AND title:CTO to keep results small ## Connect First request: ```bash curl -X POST https://api.contactsplus.com/api/v1/contacts.search \ -H "Authorization: Bearer $access_token" \ -H "Content-Type: application/json" \ -d '{"searchQuery": "company:Contacts+"}' ``` MCP client configuration: ```json { "mcpServers": { "contactsplus": { "url": "https://mcp.contactsplus.com/mcp" } } } ``` Through letme (picks today, calling later): https://letme.dev/contactsplus. letme answers with the pick and how to call it direct; calling through letme (one key, the vendor's own price) comes later. How it works: https://www.anchorterminal.com/letme/index.md ## Similar tools Ranked by shared capabilities, then score. Same-category tools with no shared capability key are listed last. | Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown | | --- | --- | --- | --- | --- | --- | --- | | Google People API | B | 65.2 | 346 | contacts.read, contacts.write, contacts.search, contacts.sync, contacts.groups | no | https://www.anchorterminal.com/tools/google-people-api.md | | Microsoft Graph People and Contacts API | B | 64.6 | 369 | contacts.read, contacts.write, contacts.search, contacts.sync | no | https://www.anchorterminal.com/tools/microsoft-graph-people.md | ## Panel reviews (0) Reviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): . Desk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md ## Notable - The MCP server has three reads (Find Contact, Read Briefing, List Tags) and four actions. Suggest Contact Update, Add Contact and Append Note wait for the owner's approval, and Tag Contact applies to up to 25 contacts straight away (source: ) - ContactsPlus says the assistant can never delete a contact or export the address book, reads are paged and capped, and it never fetches links or reads images (source: ) - The MCP server's protected-resource metadata advertises only the contacts.read and tags.read scopes, though the product page describes a Full access mode (source: ) - The REST API's update and delete calls take the record's etag, and Create Tag returns the existing ID if the tag already exists (source: ) - The privacy policy says ContactsPlus combines users' contacts with other users' data and public sources into Completed Contact Data, with an opt-out (source: ) - All 3 contacts comparisons: https://www.anchorterminal.com/compare/contacts/index.md ## Compare - [ContactsPlus vs Google People API](https://www.anchorterminal.com/compare/contactsplus-vs-google-people-api.md): E 42.4 vs B 65.2 - [ContactsPlus vs Microsoft Graph People and Contacts API](https://www.anchorterminal.com/compare/contactsplus-vs-microsoft-graph-people.md): E 42.4 vs B 64.6 ## Verify this listing For the vendor. The badge or a plain link to this page verifies the listing, from a page on contactsplus.com or one of its subdomains. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{"slug": "contactsplus", "url": "…"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify HTML badge: ```html ContactsPlus on Anchor Terminal ``` Markdown badge, for a README: ```markdown [![ContactsPlus on Anchor Terminal](https://www.anchorterminal.com/badges/contactsplus.svg)](https://www.anchorterminal.com/tools/contactsplus) ``` Plain link: ```html ContactsPlus on Anchor Terminal ``` ## Share this listing For the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say ContactsPlus is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score. - Dark: https://www.anchorterminal.com/assets/share/contactsplus-dark.png - Light: https://www.anchorterminal.com/assets/share/contactsplus-light.png - Create a video and download its frames: https://www.anchorterminal.com/assets/listing-video/index.html?listing=contactsplus