{ "data": { "similar": [ { "grade": "E", "json": "https://www.anchorterminal.com/tools/thefork.json", "name": "TheFork B2B API", "score": 43.6, "shared": [ "booking.reservations", "booking.availability", "booking.venue", "crm.records", "events.webhooks-send" ], "slug": "thefork" }, { "grade": "E", "json": "https://www.anchorterminal.com/tools/opentable.json", "name": "OpenTable APIs", "score": 38.6, "shared": [ "booking.availability", "booking.reservations", "booking.venue", "crm.records" ], "slug": "opentable" }, { "grade": "F", "json": "https://www.anchorterminal.com/tools/sevenrooms.json", "name": "SevenRooms", "score": 17.7, "shared": [ "booking.venue", "booking.reservations", "booking.availability", "crm.records" ], "slug": "sevenrooms" }, { "grade": "C", "json": "https://www.anchorterminal.com/tools/tablecheck.json", "name": "TableCheck API", "score": 57.1, "shared": [ "booking.availability", "booking.reservations", "booking.venue" ], "slug": "tablecheck" }, { "grade": "F", "json": "https://www.anchorterminal.com/tools/resy.json", "name": "Resy", "score": 10.3, "shared": [ "booking.reservations", "booking.availability", "booking.venue" ], "slug": "resy" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/square-appointments.json", "name": "Square Appointments (Bookings API)", "score": 68.1, "shared": [ "booking.availability", "booking.venue" ], "slug": "square-appointments" } ], "tool": { "slug": "eat-app", "name": "Eat App Partner API", "vendor": "Eat App (EAT APPLICATION DMCC)", "vendorUrl": "https://restaurant.eatapp.co", "kind": "http-api", "category": "local-bookings", "summary": "Eat App is a restaurant reservation and table management system. Its Partner API lets booking channels check availability and create, change and cancel reservations, a Concierge API serves restaurant groups, and a read-only Restaurant MCP server connects AI assistants.", "url": "https://www.anchorterminal.com/tools/eat-app", "markdownUrl": "https://www.anchorterminal.com/tools/eat-app.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/eat-app.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/eat-app.json", "license": "Proprietary service under Eat App's terms of service (effective 10 September 2025) and partner agreements", "transports": [ "http" ], "remoteUrl": "https://api.eatapp.co/partners/v2", "packages": [], "auth": "mixed", "authNotes": "Partner approval required for the Partner API. A booking channel asks to become a partner (info@eatapp.co), Eat App activates partnerships restaurant by restaurant, and its support team issues a long-term API key sent as a Bearer token. A login endpoint also exchanges the partner's email and password for a 24-hour token. Concierge API keys are created by Eat App for restaurant groups. The Restaurant MCP server uses OAuth with dynamic client registration, PKCE and a single `mcp` scope, and the restaurant signs in with its Eat App login.", "pricing": "paid", "pricingNotes": "No per-call price. The pricing page marks API access in the Enterprise column only (Let's talk) and lists API and webhooks access as an add-on. Table management plans are $99, $199 and $389 a month, or $69, $159 and $299 billed yearly, with a 14-day trial and a $0 plan limited to 100 guests a month. The Restaurant MCP needs an active table management subscription. A sandbox host (api.eat-sandbox.co) is given to partners (https://restaurant.eatapp.co/pricing).", "priceSummary": "Paid", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Partner or Concierge API docs, the MCP guide or the pricing page (checked 2026-10-14).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-14" }, "docsUrl": "https://documenter.getpostman.com/view/6173104/S1Lr4Av4", "capabilities": [ "booking.reservations", "booking.availability", "booking.venue", "crm.records", "events.webhooks-send" ], "tags": [ "hosted", "closed-source", "partner-only", "rest", "mcp", "oauth", "sandbox", "status-page", "webhooks", "restaurants" ], "lastRelease": "2026-10-13", "graded": true, "anchor": { "graded": true, "score": 53.4, "grade": "D", "agentReady": false, "rank": 752, "ranked": true, "rankOf": 1076, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 40, "payments": 15, "reliability": 78, "schema": 59, "security": 43, "transparency": 52 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 78, "points": 15.6, "reason": "Graded as a hosted API. status.eatapp.co on Better Stack with separate Partner API, Concierge API and Restaurant API components and an incident page (20). In the 90 days to 14 October 2026 one incident, \"Partner API and Concierge API are down\", resolved on 12 August 2026 at 11:31 UTC. Its length isn't shown, but the page gives the Partner API 99.994 per cent uptime over 90 days, under ten minutes of downtime, so we read it as minor (20). 60 requests a minute on every endpoint (15). The 429 body is documented with a wait until the next minute, and Create Reservation takes an idempotency_token for safe retries, though no Retry-After header is documented (13 of 15). No SLA found (0). v2 is generally available (10). Total 78." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 59, "points": 9.59, "reason": "No OpenAPI file. The Partner API (23 requests) and Concierge API (41 requests) are public Postman collections that download as JSON, with request bodies and example responses (12 of 25). No llms.txt or Markdown copies (0). Each request has a parameter table and notes on behaviour, such as legacy endpoints, the 24-hour include_tables limit and locked cancelled bookings, with little when-not-to-use guidance (12 of 20). Types, required flags and the reservation status list are given in tables rather than a schema (10 of 15). Example requests and responses, the JSON:API error format and named codes such as selected_tables_unavailable, but few per-endpoint error lists (10 of 15). v2 in the path and a dated changelog with entries from November 2023 to 13 October 2026 (15). Total 59." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 66, "points": 10.73, "reason": "limit defaults to 30 with a maximum of 100, and table detail is opt-in through include_tables. No field selection (15). page and limit, with filters by restaurant, date, status and partner IDs (16). JSON:API error objects with codes, and a documented 429 body (12 of 20). idempotency_token on Create Reservation returns the earlier success for a repeat (18 of 20). No SDKs. A booking needs seven fields (5 of 15). Total 66." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 43, "points": 7.53, "reason": "The Partner API uses a long-term Bearer key issued by Eat App support, and a login endpoint also accepts the partner's email and password for a 24-hour token. The Restaurant MCP uses OAuth with dynamic client registration, PKCE, refresh tokens, a revocation endpoint and one `mcp` scope. No scoped API keys or rotation guidance were found (20 of 30). Partners see only restaurants whose partnership is active, Concierge calls are scoped by group and restaurant headers, and the MCP server is read-only (12 of 20). Responses carry guest notes and reviews written by people, with no injection guidance (3). The partner portal shows the reservations and guests a partner created, which gives some operator visibility (5 of 15). No security.txt on any Eat App host, and the trust centre at trust.eatapp.co loaded only its title, so no certification or disclosure programme was confirmed (3 of 20). Total 43." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 15, "points": 1.88, "reason": "No x402, MPP or L402 (0). Table management plan prices are public, but API access sits in the Enterprise column priced through sales (10 of 20). A $0 plan and a 14-day trial exist, and partners get a sandbox host, but whether either includes API or MCP access without a card was not established (5 of 20). A person applies for a partnership or signs in to approve the MCP connection (0). Total 15." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 40, "points": 3.5, "reason": "The newest API changelog entry is 13 October 2026, adding table-level availability and table_ids on booking (30). Two dated entries in the last 90 days, 13 October and 21 July 2026, short of three (0). A dated changelog, a help centre and a support email, with no public issue tracker (10 of 15). No official SDKs (0). No package to assess (0). Total 40." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 52, "points": 4.55, "note": "editorial 32, provenance 71", "reason": "Closed service with public terms of service, effective 10 September 2025, entered into by EAT APPLICATION DMCC and referring to an agreement with its licensee Swiggy Limited (15 of 30). The privacy policy names the same entity, describes GDPR rights and says personal data is deleted or anonymised once its purpose ends, without fixed periods. No DPA was found (12 of 30). The old availability endpoint is marked legacy in the changelog, without a removal date (5 of 20). No subprocessor list or data locations were found, and the trust centre did not render for our reader (0). Total 32." } ], "assessment": { "date": "2026-10-14", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "limit defaults to 30 with a maximum of 100, and table detail is opt-in through include_tables. No field selection (15). page and limit, with filters by restaurant, date, status and partner IDs (16). JSON:API error objects with codes, and a documented 429 body (12 of 20). idempotency_token on Create Reservation returns the earlier success for a repeat (18 of 20). No SDKs. A booking needs seven fields (5 of 15). Total 66.", "maintenance": "The newest API changelog entry is 13 October 2026, adding table-level availability and table_ids on booking (30). Two dated entries in the last 90 days, 13 October and 21 July 2026, short of three (0). A dated changelog, a help centre and a support email, with no public issue tracker (10 of 15). No official SDKs (0). No package to assess (0). Total 40.", "payments": "No x402, MPP or L402 (0). Table management plan prices are public, but API access sits in the Enterprise column priced through sales (10 of 20). A $0 plan and a 14-day trial exist, and partners get a sandbox host, but whether either includes API or MCP access without a card was not established (5 of 20). A person applies for a partnership or signs in to approve the MCP connection (0). Total 15.", "reliability": "Graded as a hosted API. status.eatapp.co on Better Stack with separate Partner API, Concierge API and Restaurant API components and an incident page (20). In the 90 days to 14 October 2026 one incident, \"Partner API and Concierge API are down\", resolved on 12 August 2026 at 11:31 UTC. Its length isn't shown, but the page gives the Partner API 99.994 per cent uptime over 90 days, under ten minutes of downtime, so we read it as minor (20). 60 requests a minute on every endpoint (15). The 429 body is documented with a wait until the next minute, and Create Reservation takes an idempotency_token for safe retries, though no Retry-After header is documented (13 of 15). No SLA found (0). v2 is generally available (10). Total 78.", "schema": "No OpenAPI file. The Partner API (23 requests) and Concierge API (41 requests) are public Postman collections that download as JSON, with request bodies and example responses (12 of 25). No llms.txt or Markdown copies (0). Each request has a parameter table and notes on behaviour, such as legacy endpoints, the 24-hour include_tables limit and locked cancelled bookings, with little when-not-to-use guidance (12 of 20). Types, required flags and the reservation status list are given in tables rather than a schema (10 of 15). Example requests and responses, the JSON:API error format and named codes such as selected_tables_unavailable, but few per-endpoint error lists (10 of 15). v2 in the path and a dated changelog with entries from November 2023 to 13 October 2026 (15). Total 59.", "security": "The Partner API uses a long-term Bearer key issued by Eat App support, and a login endpoint also accepts the partner's email and password for a 24-hour token. The Restaurant MCP uses OAuth with dynamic client registration, PKCE, refresh tokens, a revocation endpoint and one `mcp` scope. No scoped API keys or rotation guidance were found (20 of 30). Partners see only restaurants whose partnership is active, Concierge calls are scoped by group and restaurant headers, and the MCP server is read-only (12 of 20). Responses carry guest notes and reviews written by people, with no injection guidance (3). The partner portal shows the reservations and guests a partner created, which gives some operator visibility (5 of 15). No security.txt on any Eat App host, and the trust centre at trust.eatapp.co loaded only its title, so no certification or disclosure programme was confirmed (3 of 20). Total 43.", "transparency": "Closed service with public terms of service, effective 10 September 2025, entered into by EAT APPLICATION DMCC and referring to an agreement with its licensee Swiggy Limited (15 of 30). The privacy policy names the same entity, describes GDPR rights and says personal data is deleted or anonymised once its purpose ends, without fixed periods. No DPA was found (12 of 30). The old availability endpoint is marked legacy in the changelog, without a removal date (5 of 20). No subprocessor list or data locations were found, and the trust centre did not render for our reader (0). Total 32." }, "sources": [ { "what": "Partner API documentation and changelog (Postman)", "url": "https://documenter.getpostman.com/view/6173104/S1Lr4Av4", "seen": "2026-10-14" }, { "what": "Concierge API documentation (Postman)", "url": "https://documenter.getpostman.com/view/6372626/SWLcc85D", "seen": "2026-10-14" }, { "what": "Partner API guide", "url": "https://restaurant.eatapp.co/knowledge/using-the-eat-app-partner-api-to-get-and-post-availability", "seen": "2026-10-14" }, { "what": "Concierge API guide", "url": "https://restaurant.eatapp.co/knowledge/using-the-eat-app-partner-api-to-get-and-post-availability-0", "seen": "2026-10-14" }, { "what": "Restaurant MCP guide", "url": "https://restaurant.eatapp.co/knowledge/restaurant-mcp", "seen": "2026-10-14" }, { "what": "MCP OAuth authorisation server metadata", "url": "https://api.eatapp.co/.well-known/oauth-authorization-server", "seen": "2026-10-14" }, { "what": "status page and incident history", "url": "https://status.eatapp.co/incidents", "seen": "2026-10-14" }, { "what": "pricing", "url": "https://restaurant.eatapp.co/pricing", "seen": "2026-10-14" }, { "what": "terms of service", "url": "https://restaurant.eatapp.co/terms", "seen": "2026-10-14" }, { "what": "privacy policy", "url": "https://restaurant.eatapp.co/privacy", "seen": "2026-10-14" } ], "openQuestions": [ "Which tools the Restaurant MCP exposes. The tool list needs a signed-in session and is not published", "Whether a Partner API booking can carry a deposit or card guarantee, or how restaurants that require one handle API bookings", "Which plans include API access. The pricing table marks only Enterprise, while the same page also lists API and webhooks access as an add-on", "unchecked: the trust centre at trust.eatapp.co, which loads by script and showed only its title", "unchecked: the registration date of eatapp.co, as RDAP did not answer", "Coverage by country. The help centre names regions in the partner portal but no public list was found" ] }, "negative": 0, "verdict": "A diner-side Partner API with idempotent booking, a stated rate limit, per-API status monitoring and a changelog updated on 13 October 2026, plus a read-only MCP server for restaurants. Partnerships are activated restaurant by restaurant, API access is priced through sales, and the docs are a Postman collection without OpenAPI or llms.txt.", "bestFor": "Booking channels and concierge services that want to book into Eat App restaurants, and for restaurants that want an assistant to read their data.", "strengths": [ "idempotency_token on Create Reservation returns the first success for a repeated request", "60 requests a minute stated, with a documented 429 body", "Better Stack status page with separate Partner API and Concierge API components and incident history", "Dated API changelog, latest entry 13 October 2026", "Restaurant MCP server with OAuth dynamic client registration and read-only access" ], "weaknesses": [ "A booking channel can book only at restaurants whose partnership Eat App has activated", "API access sits in the Enterprise column of the pricing page, priced through sales", "No OpenAPI file, llms.txt or SDK, only Postman collections", "A login endpoint accepts the partner's email and password for a 24-hour token", "No security.txt, and the trust centre content did not load for our reader" ], "agentNotes": [ "Send a unique idempotency_token with each new booking so a retry returns the first result", "Use POST /partners/v2/availability/range, not the legacy availability endpoint", "Keep include_tables ranges to 24 hours or less and pass covers with it", "Stay under 60 requests a minute and wait for the next minute after a 429", "Cancel by PATCH with status canceled, after which the reservation can no longer change" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 53.4 } ], "editorialScores": { "ergonomics": 66, "maintenance": 40, "payments": 15, "reliability": 78, "schema": 59, "security": 43, "transparency": 32 }, "provenanceScore": 71 }, "connect": { "http": "curl 'https://api.eat-sandbox.co/partners/v2/reservations' -H 'Authorization: Bearer API_TOKEN' -H 'Content-Type: application/json' -H 'Accept-Encoding: gzip'" }, "letme": { "capability": "https://letme.dev/booking.reservations", "tool": "https://letme.dev/eat-app" }, "notable": [ "Create Reservation takes an optional idempotency_token. A repeat returns the earlier success response instead of a second booking (https://documenter.getpostman.com/view/6173104/S1Lr4Av4)", "All endpoints are limited to 60 requests a minute, with a 429 and a many_requests code, and the limit can be raised (https://documenter.getpostman.com/view/6173104/S1Lr4Av4)", "The API changelog of 13 October 2026 added table-level availability (include_tables, covers) and table_ids on booking, and marked the old availability endpoint legacy (https://documenter.getpostman.com/view/6173104/S1Lr4Av4)", "The Restaurant MCP at https://api.eatapp.co/mcp/restaurants is read-only, covering reservations, guests, reviews and reports, and is set up from the MCP Servers page in Eat App (https://restaurant.eatapp.co/knowledge/restaurant-mcp)", "The status page on Better Stack lists Partner API, Concierge API and Restaurant API separately, with one outage of the Partner and Concierge APIs on 12 August 2026 (https://status.eatapp.co/incidents)", "The Concierge API documents 41 requests for restaurant groups, scoped by X-Group-ID and X-Restaurant-ID headers (https://documenter.getpostman.com/view/6372626/SWLcc85D)" ], "area": "everyday", "details": [ { "label": "Surface graded", "value": "The Partner API (v2) for booking channels, with the Concierge API and the Restaurant MCP server read as related surfaces" }, { "label": "Diner or venue", "value": "Partner API acts for the diner through a booking channel. Concierge API and Restaurant MCP act for the restaurant or group" }, { "label": "Partner API endpoints", "value": "23 requests. Authentication, profile, partnered restaurants, regions, cuisines, neighbourhoods, consumer restaurants, experiences, promotional groups, availability range, reservations (list, show, create, update), guests and tables" }, { "label": "Booking rules", "value": "Availability within the next 30 days. Create needs restaurant_id, start_time, covers, first and last name, phone and email. Update can set status to late or canceled, and a cancelled booking cannot change" }, { "label": "Credentials", "value": "Long-term Bearer API key from Eat App support, or a 24-hour token from partner email and password. MCP uses OAuth with dynamic registration, PKCE, refresh and revocation endpoints" }, { "label": "Environments", "value": "Sandbox at https://api.eat-sandbox.co and production at https://api.eatapp.co, with a partner portal for each" }, { "label": "Rate limits", "value": "60 requests a minute on every endpoint, adjustable on request. 429 with a many_requests code (Partner) or too_many_requests (Concierge)" }, { "label": "Errors", "value": "HTTP status codes with JSON:API error objects, for example 422 selected_tables_unavailable" }, { "label": "Deposits", "value": "Create and show return payment details when a payment exists (changelog, 2 July 2025). No deposit or card field on the Partner API booking request was found" }, { "label": "Status", "value": "status.eatapp.co on Better Stack, components Server, RealTime Server, Partner API, Concierge API and Restaurant API" } ], "provenance": { "legalEntity": "EAT APPLICATION DMCC", "domain": "eatapp.co", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://restaurant.eatapp.co/terms", "privacy": "https://restaurant.eatapp.co/privacy", "statusPage": "https://status.eatapp.co", "changelog": "https://documenter.getpostman.com/view/6173104/S1Lr4Av4", "securityTxt": "none", "checked": "2026-10-14", "notes": [ "The terms of service (effective 10 September 2025) are entered into by EAT APPLICATION DMCC, Jumeirah Lake Towers, Dubai, licence DMCC-164040, and say the agreement also includes one executed with its licensee Swiggy Limited.", "The privacy policy names EAT APPLICATION DMCC and covers GDPR rights and a retention statement without fixed periods.", "The API changelog is a section of the Partner API Postman documentation.", "security.txt returns 404 on eatapp.co, restaurant.eatapp.co and api.eatapp.co. A trust centre at trust.eatapp.co loads by script and showed only its title to our reader.", "RDAP for eatapp.co did not answer, so the registration date is not recorded." ], "score": 71, "checks": [ { "check": "Legal entity named", "value": "EAT APPLICATION DMCC", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "eatapp.co, no registry record we could read", "points": 0, "max": 15, "state": "no" }, { "check": "Endpoint on the vendor's domain", "value": "api.eatapp.co", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 6 of the 7 things a reader expects, and has 1 clause that costs points", "points": 7.1, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 6 of the 8 things a reader expects", "points": 8.5, "max": 10, "state": "part" }, { "check": "Status page", "value": "status.eatapp.co", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ], "policies": [ { "kind": "terms", "url": "https://restaurant.eatapp.co/terms", "state": "read", "readAt": "2026-10-14", "statedDate": "2025-09-10", "words": 5971, "points": 7.1, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Effective: September 10th, 2025", "says": "Last updated 2025-09-10" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "This Agreement shall be governed by and construed in accordance with the laws of India.", "says": "The law of India" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "EAT APP’S MAXIMUM CUMULATIVE LIABILITY ARISING OUT OF OR RELATED TO THE AGREEMENT WILL NOT EXCEED THE AMOUNT PAID BY THE SUBSCRIBER IN FEES IN THE 3 MONTHS PRECEDING THE INCIDENT THAT GAVE RISE TO SUCH CLAIM.", "says": "Capped at the fees paid in the 3 months before the claim" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "Unless otherwise is agreed to in writing, either party may terminate this Agreement or an Order Form for a material breach of the other party that remains uncured for sixty (60) days after the breaching party’s receipt of a written notice of such breach." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "Eat App may change the Terms of this Agreement, its Fees, and billing practices and upon written notice to You as indicated in Clause 8.2, provided that (i) any pre-paid fees will not be affected by such change and (ii) in the event of any price increases, You will have thirty (30) days to reject any such change by pr…", "says": "Gives thirty days of notice before a change" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "If you do not have such an authority or do not agree to the terms of this these Terms and Conditions, then you must not accept these Terms and Conditions and should not use the Platform and the Services." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "terms.benchmark", "label": "Restricts benchmarking or competitive use", "found": true, "quote": "In addition, you may not access the Platform and the services thereunder for purposes of monitoring their availability, performance or functionality, or for any other benchmarking or competitive purposes.", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "The continued availability of any services under the Platform shall be subject to Eat App’s consent, in its sole discretion, and to the fulfillment by the Subscriber of such conditions as Eat App may require from time to time." } ], "notes": [ { "date": "2026-10-14", "text": "Eat App may have independent access to Guest Information and other Subscriber Information, and the terms do not limit its right to use that information.", "quote": "Eat App may have independent access to certain Guest Information of Subscriber or other Subscriber Information, and nothing in this Section 3.2 limits Eat App’s right to use such information." }, { "date": "2026-10-14", "text": "Eat App may list the subscriber as a client on its website and in marketing materials, using the subscriber's Restaurant Description.", "quote": "Eat App may list Subscriber as a client on the Eat App website and marketing materials and may use the Subscriber’s Restaurant Description to do so consistent with Subscriber’s style guidelines." }, { "date": "2026-10-14", "text": "Eat App excludes liability for direct as well as indirect damages, including loss of data and loss of business.", "quote": "EAT APP PARTIES ARE NOT, AND WILL NOT BE, LIABLE TO SUBSCRIBER FOR ANY DIRECT, INDIRECT, SPECIAL, PUNITIVE, EXEMPLARY, CONSEQUENTIAL, OR ANY OTHER DAMAGES WHATSOEVER" } ] }, { "kind": "privacy", "url": "https://restaurant.eatapp.co/privacy", "state": "read", "readAt": "2026-10-14", "words": 7237, "points": 8.5, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": false }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "This policy describes how we collect, use and disclose personal and other information." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": false }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "…third-party reservation services that the Venue may use, information about Guests is recorded in (or transferred to) the Platform (either directly by the Venue or through third party integrations with the Platform facilitated by the Venue) to assist the Venue in managing the reservation and provide services to such Gu…" }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "Eat App will never sell, rent, loan, or otherwise distribute any of Your personal information (including but not limited to Your name, email address, phone number, or any other identifiable information about You) to any third party except as set forth in this Policy without Your prior, express written consent.", "says": "Says it does not sell personal data" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "Guests and Registered Users have the right to access, rectify, or delete their Personal Data, as well as the right to data portability and to restrict processing." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "Eat App has appointed a Data Protection Officer (DPO).", "says": "Names a data protection officer" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "Eat App ensures that any Personal Data transferred outside the European Economic Area (EEA) is protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs), approved by the European Commission, or by ensuring that the country provides an adequate level of data protection.", "says": "Relies on standard contractual clauses" } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/eat-app.json", "live": { "slug": "eat-app", "probe": { "target": "https://api.eatapp.co/partners/v2", "method": "get", "lastAt": "2026-10-14T09:41:49.444870422Z", "lastOk": true, "lastStatus": 404, "lastMs": 157, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 175, "p95ms24h": 322, "samples24h": 17, "samples30d": 17, "days": [ { "date": "2026-10-14", "probes": 17, "ok": 17 } ] }, "vendorStatus": { "page": "https://status.eatapp.co", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-14T08:53:05.16851429Z" }, "updatedAt": "2026-10-14T09:41:49.444870422Z" } }, "verify": { "accepts": "a page on eatapp.co or one of its subdomains", "badgeUrl": "https://www.anchorterminal.com/badges/eat-app.svg", "body": { "slug": "eat-app", "url": "the page with the badge or the link" }, "docs": "https://www.anchorterminal.com/builders/#verify", "effect": "none, it never changes a grade, rank or review", "endpoint": "https://www.anchorterminal.com/api/v1/verify", "listingUrl": "https://www.anchorterminal.com/tools/eat-app", "mcpTool": "verify_listing", "recheck": "weekly; two failed checks in a row and it lapses, a later pass restores it", "snippets": { "html": "\u003ca href=\"https://www.anchorterminal.com/tools/eat-app\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/eat-app.svg\" alt=\"Eat App Partner API on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e", "markdown": "[![Eat App Partner API on Anchor Terminal](https://www.anchorterminal.com/badges/eat-app.svg)](https://www.anchorterminal.com/tools/eat-app)", "link": "\u003ca href=\"https://www.anchorterminal.com/tools/eat-app\"\u003eEat App Partner API on Anchor Terminal\u003c/a\u003e" } } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/tools/eat-app", "json": "https://www.anchorterminal.com/tools/eat-app.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/tools/eat-app.md", "slim": "https://www.anchorterminal.com/tools/eat-app.min.md" }, "markdown": "## Overview\n\n**Grade D · 53.4/100 · rank #752 of 1076 · #3 in Restaurant \u0026 local bookings · not agent-ready · confidence medium**\n\n\n## Assessment\n\nA diner-side Partner API with idempotent booking, a stated rate limit, per-API status monitoring and a changelog updated on 13 October 2026, plus a read-only MCP server for restaurants. Partnerships are activated restaurant by restaurant, API access is priced through sales, and the docs are a Postman collection without OpenAPI or llms.txt.\n\n## Facts\n\n| Field | Value |\n| --- | --- |\n| Vendor | Eat App (EAT APPLICATION DMCC) (https://restaurant.eatapp.co) |\n| Kind | HTTP API |\n| Category | Restaurant \u0026 local bookings (https://www.anchorterminal.com/categories/local-bookings) |\n| Transport | HTTP |\n| Endpoint | `https://api.eatapp.co/partners/v2` |\n| Auth | OAuth or key · Partner approval required for the Partner API. A booking channel asks to become a partner (info@eatapp.co), Eat App activates partnerships restaurant by restaurant, and its support team issues a long-term API key sent as a Bearer token. A login endpoint also exchanges the partner's email and password for a 24-hour token. Concierge API keys are created by Eat App for restaurant groups. The Restaurant MCP server uses OAuth with dynamic client registration, PKCE and a single `mcp` scope, and the restaurant signs in with its Eat App login. |\n| Pricing | Paid (Paid) · No per-call price. The pricing page marks API access in the Enterprise column only (Let's talk) and lists API and webhooks access as an add-on. Table management plans are $99, $199 and $389 a month, or $69, $159 and $299 billed yearly, with a 14-day trial and a $0 plan limited to 100 guests a month. The Restaurant MCP needs an active table management subscription. A sandbox host (api.eat-sandbox.co) is given to partners (https://restaurant.eatapp.co/pricing). |\n| x402 | No · No x402, MPP or L402 in the Partner or Concierge API docs, the MCP guide or the pricing page (checked 2026-10-14). |\n| Licence | Proprietary service under Eat App's terms of service (effective 10 September 2025) and partner agreements |\n| Docs | https://documenter.getpostman.com/view/6173104/S1Lr4Av4 |\n| llms.txt | not found |\n| Last release | 2026-10-13 |\n| Surface graded | The Partner API (v2) for booking channels, with the Concierge API and the Restaurant MCP server read as related surfaces |\n| Diner or venue | Partner API acts for the diner through a booking channel. Concierge API and Restaurant MCP act for the restaurant or group |\n| Partner API endpoints | 23 requests. Authentication, profile, partnered restaurants, regions, cuisines, neighbourhoods, consumer restaurants, experiences, promotional groups, availability range, reservations (list, show, create, update), guests and tables |\n| Booking rules | Availability within the next 30 days. Create needs restaurant_id, start_time, covers, first and last name, phone and email. Update can set status to late or canceled, and a cancelled booking cannot change |\n| Credentials | Long-term Bearer API key from Eat App support, or a 24-hour token from partner email and password. MCP uses OAuth with dynamic registration, PKCE, refresh and revocation endpoints |\n| Environments | Sandbox at https://api.eat-sandbox.co and production at https://api.eatapp.co, with a partner portal for each |\n| Rate limits | 60 requests a minute on every endpoint, adjustable on request. 429 with a many_requests code (Partner) or too_many_requests (Concierge) |\n| Errors | HTTP status codes with JSON:API error objects, for example 422 selected_tables_unavailable |\n| Deposits | Create and show return payment details when a payment exists (changelog, 2 July 2025). No deposit or card field on the Partner API booking request was found |\n| Status | status.eatapp.co on Better Stack, components Server, RealTime Server, Partner API, Concierge API and Restaurant API |\n| Capabilities | booking.reservations, booking.availability, booking.venue, crm.records, events.webhooks-send |\n| Tags | hosted, closed-source, partner-only, rest, mcp, oauth, sandbox, status-page, webhooks, restaurants |\n| JSON | https://www.anchorterminal.com/api/v1/tools/eat-app.json |\n\n## Score breakdown (methodology v0.4, October 2026 research run)\n\nAssessed 2026-10-14 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. \"This run\" is each category's share of the 100 points.\n\n| Category | Weight | This run | Score (0–100) | Points |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% | 20 | 78 | 15.6 |\n| Performance | 10% | pending | pending | n/a |\n| Schema \u0026 documentation | 13% | 16.2 | 59 | 9.6 |\n| Agent ergonomics | 13% | 16.2 | 66 | 10.7 |\n| Security \u0026 auth | 14% | 17.5 | 43 | 7.5 |\n| Payments \u0026 pricing | 10% | 12.5 | 15 | 1.9 |\n| Task success | 10% | pending | pending | n/a |\n| Maintenance \u0026 community | 7% | 8.8 | 40 | 3.5 |\n| Transparency \u0026 trust (editorial 32, provenance 71) | 7% | 8.8 | 52 | 4.5 |\n| Negative events | up to −15 | up to −15 | none recorded | 0 |\n| **Total** | | | | **53.4 → D** |\n\n### Why each score\n\n- Reliability 78: Graded as a hosted API. status.eatapp.co on Better Stack with separate Partner API, Concierge API and Restaurant API components and an incident page (20). In the 90 days to 14 October 2026 one incident, \"Partner API and Concierge API are down\", resolved on 12 August 2026 at 11:31 UTC. Its length isn't shown, but the page gives the Partner API 99.994 per cent uptime over 90 days, under ten minutes of downtime, so we read it as minor (20). 60 requests a minute on every endpoint (15). The 429 body is documented with a wait until the next minute, and Create Reservation takes an idempotency_token for safe retries, though no Retry-After header is documented (13 of 15). No SLA found (0). v2 is generally available (10). Total 78.\n- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.\n- Schema \u0026 documentation 59: No OpenAPI file. The Partner API (23 requests) and Concierge API (41 requests) are public Postman collections that download as JSON, with request bodies and example responses (12 of 25). No llms.txt or Markdown copies (0). Each request has a parameter table and notes on behaviour, such as legacy endpoints, the 24-hour include_tables limit and locked cancelled bookings, with little when-not-to-use guidance (12 of 20). Types, required flags and the reservation status list are given in tables rather than a schema (10 of 15). Example requests and responses, the JSON:API error format and named codes such as selected_tables_unavailable, but few per-endpoint error lists (10 of 15). v2 in the path and a dated changelog with entries from November 2023 to 13 October 2026 (15). Total 59.\n- Agent ergonomics 66: limit defaults to 30 with a maximum of 100, and table detail is opt-in through include_tables. No field selection (15). page and limit, with filters by restaurant, date, status and partner IDs (16). JSON:API error objects with codes, and a documented 429 body (12 of 20). idempotency_token on Create Reservation returns the earlier success for a repeat (18 of 20). No SDKs. A booking needs seven fields (5 of 15). Total 66.\n- Security \u0026 auth 43: The Partner API uses a long-term Bearer key issued by Eat App support, and a login endpoint also accepts the partner's email and password for a 24-hour token. The Restaurant MCP uses OAuth with dynamic client registration, PKCE, refresh tokens, a revocation endpoint and one `mcp` scope. No scoped API keys or rotation guidance were found (20 of 30). Partners see only restaurants whose partnership is active, Concierge calls are scoped by group and restaurant headers, and the MCP server is read-only (12 of 20). Responses carry guest notes and reviews written by people, with no injection guidance (3). The partner portal shows the reservations and guests a partner created, which gives some operator visibility (5 of 15). No security.txt on any Eat App host, and the trust centre at trust.eatapp.co loaded only its title, so no certification or disclosure programme was confirmed (3 of 20). Total 43.\n- Payments \u0026 pricing 15: No x402, MPP or L402 (0). Table management plan prices are public, but API access sits in the Enterprise column priced through sales (10 of 20). A $0 plan and a 14-day trial exist, and partners get a sandbox host, but whether either includes API or MCP access without a card was not established (5 of 20). A person applies for a partnership or signs in to approve the MCP connection (0). Total 15.\n- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.\n- Maintenance \u0026 community 40: The newest API changelog entry is 13 October 2026, adding table-level availability and table_ids on booking (30). Two dated entries in the last 90 days, 13 October and 21 July 2026, short of three (0). A dated changelog, a help centre and a support email, with no public issue tracker (10 of 15). No official SDKs (0). No package to assess (0). Total 40.\n- Transparency \u0026 trust 52: Closed service with public terms of service, effective 10 September 2025, entered into by EAT APPLICATION DMCC and referring to an agreement with its licensee Swiggy Limited (15 of 30). The privacy policy names the same entity, describes GDPR rights and says personal data is deleted or anonymised once its purpose ends, without fixed periods. No DPA was found (12 of 30). The old availability endpoint is marked legacy in the changelog, without a removal date (5 of 20). No subprocessor list or data locations were found, and the trust centre did not render for our reader (0). Total 32.\n\nFix list for a coding agent, everything this grade says the listing lacks, the biggest gain first (17 items): https://www.anchorterminal.com/fixes/eat-app.md (JSON https://www.anchorterminal.com/fixes/eat-app.json)\n\n### What we couldn't check\n\n- Which tools the Restaurant MCP exposes. The tool list needs a signed-in session and is not published\n- Whether a Partner API booking can carry a deposit or card guarantee, or how restaurants that require one handle API bookings\n- Which plans include API access. The pricing table marks only Enterprise, while the same page also lists API and webhooks access as an add-on\n- unchecked: the trust centre at trust.eatapp.co, which loads by script and showed only its title\n- unchecked: the registration date of eatapp.co, as RDAP did not answer\n- Coverage by country. The help centre names regions in the partner portal but no public list was found\n\n### Sources\n\n- Partner API documentation and changelog (Postman): \u003chttps://documenter.getpostman.com/view/6173104/S1Lr4Av4\u003e (seen 2026-10-14)\n- Concierge API documentation (Postman): \u003chttps://documenter.getpostman.com/view/6372626/SWLcc85D\u003e (seen 2026-10-14)\n- Partner API guide: \u003chttps://restaurant.eatapp.co/knowledge/using-the-eat-app-partner-api-to-get-and-post-availability\u003e (seen 2026-10-14)\n- Concierge API guide: \u003chttps://restaurant.eatapp.co/knowledge/using-the-eat-app-partner-api-to-get-and-post-availability-0\u003e (seen 2026-10-14)\n- Restaurant MCP guide: \u003chttps://restaurant.eatapp.co/knowledge/restaurant-mcp\u003e (seen 2026-10-14)\n- MCP OAuth authorisation server metadata: \u003chttps://api.eatapp.co/.well-known/oauth-authorization-server\u003e (seen 2026-10-14)\n- status page and incident history: \u003chttps://status.eatapp.co/incidents\u003e (seen 2026-10-14)\n- pricing: \u003chttps://restaurant.eatapp.co/pricing\u003e (seen 2026-10-14)\n- terms of service: \u003chttps://restaurant.eatapp.co/terms\u003e (seen 2026-10-14)\n- privacy policy: \u003chttps://restaurant.eatapp.co/privacy\u003e (seen 2026-10-14)\n\n## Who's behind it (provenance 71/100, checked 2026-10-14)\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Legal entity named | EAT APPLICATION DMCC | 20/20 |\n| Domain age | eatapp.co, no registry record we could read | 0/15 |\n| Endpoint on the vendor's domain | api.eatapp.co | 15/15 |\n| Terms of service | read, states 6 of the 7 things a reader expects, and has 1 clause that costs points | 7.1/10 |\n| Privacy policy | read, states 6 of the 8 things a reader expects | 8.5/10 |\n| Status page | status.eatapp.co | 10/10 |\n| Changelog | published | 10/10 |\n| security.txt | not found | 0/10 |\n\nThe terms of service (effective 10 September 2025) are entered into by EAT APPLICATION DMCC, Jumeirah Lake Towers, Dubai, licence DMCC-164040, and say the agreement also includes one executed with its licensee Swiggy Limited.\n\nThe privacy policy names EAT APPLICATION DMCC and covers GDPR rights and a retention statement without fixed periods.\n\nThe API changelog is a section of the Partner API Postman documentation.\n\nsecurity.txt returns 404 on eatapp.co, restaurant.eatapp.co and api.eatapp.co. A trust centre at trust.eatapp.co loads by script and showed only its title to our reader.\n\nRDAP for eatapp.co did not answer, so the registration date is not recorded.\n\n### Terms and privacy, as read\n\nA reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.\n\n**Terms of service** (https://restaurant.eatapp.co/terms), read 2026-10-14, dated 2025-09-10, states 6 of the 7 things a reader expects.\n\n- To know. Restricts benchmarking or competitive use (costs points). \"In addition, you may not access the Platform and the services thereunder for purposes of monitoring their availability, performance or functionality, or for any other benchmarking or competitive purposes.\"\n- To know. Says access can be ended without notice or for any reason. \"The continued availability of any services under the Platform shall be subject to Eat App’s consent, in its sole discretion, and to the fulfillment by the Subscriber of such conditions as Eat App may require from time to time.\"\n- Gives the date it was last updated. Last updated 2025-09-10.\n- Names the governing law or courts. The law of India.\n- States a limit on its liability. Capped at the fees paid in the 3 months before the claim.\n- Says how changes to the terms are announced. Gives thirty days of notice before a change.\n- Not found in the text. Refers to a service level or uptime commitment.\n- Also in the text (2026-10-14). Eat App may have independent access to Guest Information and other Subscriber Information, and the terms do not limit its right to use that information. \"Eat App may have independent access to certain Guest Information of Subscriber or other Subscriber Information, and nothing in this Section 3.2 limits Eat App’s right to use such information.\"\n- Also in the text (2026-10-14). Eat App may list the subscriber as a client on its website and in marketing materials, using the subscriber's Restaurant Description. \"Eat App may list Subscriber as a client on the Eat App website and marketing materials and may use the Subscriber’s Restaurant Description to do so consistent with Subscriber’s style guidelines.\"\n- Also in the text (2026-10-14). Eat App excludes liability for direct as well as indirect damages, including loss of data and loss of business. \"EAT APP PARTIES ARE NOT, AND WILL NOT BE, LIABLE TO SUBSCRIBER FOR ANY DIRECT, INDIRECT, SPECIAL, PUNITIVE, EXEMPLARY, CONSEQUENTIAL, OR ANY OTHER DAMAGES WHATSOEVER\"\n\n**Privacy policy** (https://restaurant.eatapp.co/privacy), read 2026-10-14, gives no date, states 6 of the 8 things a reader expects.\n\n- Not found in the text. Gives the date it was last updated.\n- Not found in the text. Says how long data is kept.\n- Says whether personal data is sold or shared for advertising. Says it does not sell personal data.\n- Gives a privacy contact. Names a data protection officer.\n- Says where data is transferred or stored. Relies on standard contractual clauses.\n\n## Live (updated 2026-10-14 09:41 UTC)\n\n- Right now: up, HTTP 404, 157 ms, checked 2026-10-14 09:41 UTC (get on `https://api.eatapp.co/partners/v2`)\n- Uptime 24h 100.0% (17 probes) · 30 days 100.0% (17 probes) · p50 175 ms · p95 322 ms\n- Vendor status page: unknown, no machine-readable status found\n- Always current: https://www.anchorterminal.com/api/v1/live/eat-app.json\n\n## Probe metrics\n\nNot measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.\n\n## Strengths\n\n- idempotency_token on Create Reservation returns the first success for a repeated request\n- 60 requests a minute stated, with a documented 429 body\n- Better Stack status page with separate Partner API and Concierge API components and incident history\n- Dated API changelog, latest entry 13 October 2026\n- Restaurant MCP server with OAuth dynamic client registration and read-only access\n\n## Weaknesses\n\n- A booking channel can book only at restaurants whose partnership Eat App has activated\n- API access sits in the Enterprise column of the pricing page, priced through sales\n- No OpenAPI file, llms.txt or SDK, only Postman collections\n- A login endpoint accepts the partner's email and password for a 24-hour token\n- No security.txt, and the trust centre content did not load for our reader\n\n## Before you call it (notes for agents)\n\n1. Send a unique idempotency_token with each new booking so a retry returns the first result\n2. Use POST /partners/v2/availability/range, not the legacy availability endpoint\n3. Keep include_tables ranges to 24 hours or less and pass covers with it\n4. Stay under 60 requests a minute and wait for the next minute after a 429\n5. Cancel by PATCH with status canceled, after which the reservation can no longer change\n\n## Connect\n\nFirst request:\n\n```bash\ncurl 'https://api.eat-sandbox.co/partners/v2/reservations' -H 'Authorization: Bearer API_TOKEN' -H 'Content-Type: application/json' -H 'Accept-Encoding: gzip'\n```\n\nThrough letme (picks today, calling later): https://letme.dev/eat-app. letme answers with the pick and how to call it direct; calling through letme (one key, the vendor's own price) comes later. How it works: https://www.anchorterminal.com/letme/index.md\n\n## Similar tools\n\nRanked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.\n\n| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |\n| --- | --- | --- | --- | --- | --- | --- |\n| TheFork B2B API | E | 43.6 | 951 | booking.reservations, booking.availability, booking.venue, crm.records, events.webhooks-send | no | https://www.anchorterminal.com/tools/thefork.md |\n| OpenTable APIs | E | 38.6 | 994 | booking.availability, booking.reservations, booking.venue, crm.records | no | https://www.anchorterminal.com/tools/opentable.md |\n| SevenRooms | F | 17.7 | 1043 | booking.venue, booking.reservations, booking.availability, crm.records | no | https://www.anchorterminal.com/tools/sevenrooms.md |\n| TableCheck API | C | 57.1 | 661 | booking.availability, booking.reservations, booking.venue | no | https://www.anchorterminal.com/tools/tablecheck.md |\n| Resy | F | 10.3 | 1068 | booking.reservations, booking.availability, booking.venue | no | https://www.anchorterminal.com/tools/resy.md |\n| Square Appointments (Bookings API) | B | 68.1 | 242 | booking.availability, booking.venue | no | https://www.anchorterminal.com/tools/square-appointments.md |\n\n## Panel reviews (0)\n\nReviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .\n\nDesk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md\n\n## Notable\n\n- Create Reservation takes an optional idempotency_token. A repeat returns the earlier success response instead of a second booking (source: \u003chttps://documenter.getpostman.com/view/6173104/S1Lr4Av4\u003e)\n- All endpoints are limited to 60 requests a minute, with a 429 and a many_requests code, and the limit can be raised (source: \u003chttps://documenter.getpostman.com/view/6173104/S1Lr4Av4\u003e)\n- The API changelog of 13 October 2026 added table-level availability (include_tables, covers) and table_ids on booking, and marked the old availability endpoint legacy (source: \u003chttps://documenter.getpostman.com/view/6173104/S1Lr4Av4\u003e)\n- The Restaurant MCP at https://api.eatapp.co/mcp/restaurants is read-only, covering reservations, guests, reviews and reports, and is set up from the MCP Servers page in Eat App (source: \u003chttps://restaurant.eatapp.co/knowledge/restaurant-mcp\u003e)\n- The status page on Better Stack lists Partner API, Concierge API and Restaurant API separately, with one outage of the Partner and Concierge APIs on 12 August 2026 (source: \u003chttps://status.eatapp.co/incidents\u003e)\n- The Concierge API documents 41 requests for restaurant groups, scoped by X-Group-ID and X-Restaurant-ID headers (source: \u003chttps://documenter.getpostman.com/view/6372626/SWLcc85D\u003e)\n\n- #3 of 9 in Best restaurant reservation and local appointment APIs for AI agents: https://www.anchorterminal.com/best/local-bookings/index.md\n- All 36 bookings comparisons: https://www.anchorterminal.com/compare/local-bookings/index.md\n\n## Compare\n\n- [Chope vs Eat App Partner API](https://www.anchorterminal.com/compare/chope-vs-eat-app.md): F 13.3 vs D 53.4\n- [Eat App Partner API vs OpenTable APIs](https://www.anchorterminal.com/compare/eat-app-vs-opentable.md): D 53.4 vs E 38.6\n- [Eat App Partner API vs Resy](https://www.anchorterminal.com/compare/eat-app-vs-resy.md): D 53.4 vs F 10.3\n- [Eat App Partner API vs SevenRooms](https://www.anchorterminal.com/compare/eat-app-vs-sevenrooms.md): D 53.4 vs F 17.7\n- [Eat App Partner API vs TableCheck API](https://www.anchorterminal.com/compare/eat-app-vs-tablecheck.md): D 53.4 vs C 57.1\n- [Eat App Partner API vs TheFork B2B API](https://www.anchorterminal.com/compare/eat-app-vs-thefork.md): D 53.4 vs E 43.6\n- [Eat App Partner API vs Tock](https://www.anchorterminal.com/compare/eat-app-vs-tock.md): D 53.4 vs F 12.4\n- [Eat App Partner API vs Square Appointments (Bookings API)](https://www.anchorterminal.com/compare/eat-app-vs-square-appointments.md): D 53.4 vs B 68.1\n\n## Verify this listing\n\nFor the vendor. The badge or a plain link to this page verifies the listing, from a page on eatapp.co or one of its subdomains. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{\"slug\": \"eat-app\", \"url\": \"…\"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify\n\nHTML badge:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/eat-app\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/eat-app.svg\" alt=\"Eat App Partner API on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e\n```\n\nMarkdown badge, for a README:\n\n```markdown\n[![Eat App Partner API on Anchor Terminal](https://www.anchorterminal.com/badges/eat-app.svg)](https://www.anchorterminal.com/tools/eat-app)\n```\n\nPlain link:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/eat-app\"\u003eEat App Partner API on Anchor Terminal\u003c/a\u003e\n```\n\n## Share this listing\n\nFor the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Eat App Partner API is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.\n\n- Dark: https://www.anchorterminal.com/assets/share/eat-app-dark.png\n- Light: https://www.anchorterminal.com/assets/share/eat-app-light.png\n- Create a video and download its frames: https://www.anchorterminal.com/assets/listing-video/index.html?listing=eat-app\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-14", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Terminal", "url": "https://www.anchorterminal.com/tools/" }, { "name": "Restaurant \u0026 local bookings", "url": "https://www.anchorterminal.com/categories/local-bookings" }, { "name": "Eat App Partner API", "url": "" } ], "description": "Eat App is a restaurant reservation and table management system. Its Partner API lets booking channels check availability and create, change and cancel reservations, a Concierge API serves restaurant groups, and a read-only Restaurant MCP server connects AI assistants.", "facts": [ "rank #752 of 1076", "OAuth or key auth", "0 desk reviews" ], "h1": "Eat App Partner API", "image": "https://www.anchorterminal.com/assets/og/tools-eat-app.png", "path": "/tools/eat-app", "published": "2026-10-01", "section": "tools", "title": "Eat App Partner review (2026): pricing, alternatives and grade D", "toc": null, "updated": "2026-10-14", "url": "https://www.anchorterminal.com/tools/eat-app" }, "tokens": { "markdown": 6250, "slim": 1580 }, "version": 1 }