Meta Model API

# Fix list: Meta Model API

From Anchor Terminal's listing at https://www.anchorterminal.com/tools/meta-model-api, the October 2026 research run, assessed 12 October 2026. Grade D, 52.2 out of 100.

This is everything the published grade says the listing lacks, the biggest possible gain to the total first. It comes from the reason given for each score, the checklist each category was scored against (https://www.anchorterminal.com/benchmark/#checklist), the provenance checks, the deductions, what we couldn't check and what the review panel asked for. A fix counts at the next check, once it's public.

For a coding agent working on Meta Model API: work through the items below in the product, its docs and its public pages. Each category gives the reason for its score, with the points each checklist item earned, and the checklist itself, so the gap is the items that earned less than their points. Change the product, not the wording, and keep a note of what you changed and where it's published.

## 1. Reliability, 40 out of 100, up to 12 more on the total

Why it scored 40: No status page with component history. The error guide's link to dev.meta.ai/status redirects to the home page, and `GET /v1/status` reports only the current state, `operational` when we called it on 12 October (0). No readable incident history (5). Rate limits published per team and per model, 3,000 RPM and 4,000,000 TPM for muse-wonder-1.0, 150 RPM for the contributor variants, 600 background submissions a minute (15). 429 and 503 carry Retry-After (60 seconds for `service_overloaded` and `backend_unavailable`), with backoff-with-jitter guidance, rate-limit headers on every token response and a documented mid-stream `server_shutting_down` event to retry (15). No SLA found, and the terms let Meta throttle or suspend access without notice (0). Muse Wonder is labelled a preview. Muse Spark 1.3 carries no preview label, but the API opened on 8 July 2026 as a public preview and we found no general-availability notice, so half (5 of 10, a departure from the all-or-nothing line).

The checklist (https://www.anchorterminal.com/benchmark/#checklist-reliability):

Hosted APIs, MCP servers, models and platforms.

- 20, a public status page with component history (Statuspage, Instatus, BetterStack or the vendor's own).
- 0 to 30, the incident record for the last 90 days on that page. 30 for a clean record or trivial incidents only, 20 for minor incidents only, 10 for one major outage (an hour or more of a core API down, or errors across the board), 0 for several. 5 when there's no history we could read, and the note says so.
- 15, rate limits documented with numbers.
- 15, documented 429 or overload handling (Retry-After, backoff guidance), and idempotency keys or safe-retry guidance where writes are involved.
- 10, an SLA published for any paid tier.
- 10, the surface agents use is generally available, not beta or preview.

Local packages, SDKs, frameworks and stdio MCP servers.

- 20, installs from an official package with supported runtimes stated.
- 25, a public CI and test suite, passing on the default branch.
- 0 to 25, open crash or regression issues relative to activity (25 for few and handled, 0 for many, old and unanswered).
- 15, semver discipline and breaking changes called out in a changelog.
- 15, version 1.0 or later, or declared stable.

Protocols are read from their reference implementations, the public facilitators or servers, spec stability and test vectors.

## 2. Payments & pricing, 20 out of 100, up to 10 more on the total

Why it scored 20: No machine payment protocol (0). Per-token prices for Muse Wonder and Muse Spark, and per-image, per-hour and per-frame prices for the other models, published without a login (20). No free API allowance found. Billing needs a card, and Playground requests count towards usage (0). Browser sign-up with email, phone, Facebook, Google or GitHub (0).

The checklist (https://www.anchorterminal.com/benchmark/#checklist-payments):

The published rubric, also on the [x402 page](https://www.anchorterminal.com/x402/).

- 40, a machine payment protocol (x402, MPP or L402) on the tool's own endpoints. 10 to 30 when it covers only some endpoints or only goes through a third party, and the note says which.
- 20, per-call or per-unit pricing published without a login. 10 for public plan-only pricing, 0 for "contact sales" or prices behind a login.
- 20, a free tier or trial that doesn't need a card.
- 20, autonomous onboarding, meaning an agent can get access without a person signing up in a browser (keyless use, x402, a programmatic key API).

Payment platforms and agent wallets rarely charge for their own API over a machine protocol, so the first line has steps for them, and the highest one that applies counts. 40 when x402, MPP or L402 runs on all their own endpoints, 30 when it runs on part of their own API, 25 when their merchants can accept one, 20 for running a facilitator, 15 for paying as a buyer, and 0 when the only protocol is their own. Merchant acceptance sits above a facilitator because the platform's own customers can charge agents through it, while a facilitator settles for sellers who wire up the protocol themselves. The counter-argument (a facilitator does more for the protocol as a whole) has a point. Each note says which step applied.

Open-source software you run yourself is scored on its hosted or paid option if it has one. A free, self-hosted package with nothing to buy gets 20, 20 and 20 for the last three lines, and 0 to 40 for the first only if it ships a payment protocol.

## 3. Schema & documentation, 60 out of 100, up to 6.5 more on the total

Why it scored 60: No OpenAPI or similar machine-readable contract found. The reference is Markdown pages with schema sections, and /openapi.json paths on dev.meta.ai return 404 (0). llms.txt at dev.meta.ai/llms.txt, and every docs page has a Markdown copy (10). The models page says when to choose Muse Wonder and when Muse Spark, and the tool-calling and structured-output guides state their limits, such as `tool_choice` only accepting `auto` and which schema keywords `strict` allows (16 of 20). JSON Schema tools and output, `reasoning_effort` an enum from minimal to max, a strict subset that returns 400 when violated, though `tool_choice` has one value (12 of 15). Curl, Python and TypeScript examples on each page and an error guide covering 400 to 504 with the error envelope, codes and a fix for each (15). Versioned model IDs (muse-spark-1.1 to 1.3, muse-wonder-1.0) and dated launch posts on the developer blog, but no API changelog (7 of 15).

The checklist (https://www.anchorterminal.com/benchmark/#checklist-schema):

APIs and MCP servers.

- 25, a machine-readable contract (a public OpenAPI file or similar; for MCP, typed JSON Schema inputs on every tool).
- 10, llms.txt or Markdown docs served for agents.
- 0 to 20, descriptions that say what a tool is for, when to use it and when not to, read from the tool definitions in the source or the API reference.
- 0 to 15, typed inputs with enums, constraints and required fields, and no free-form JSON blobs.
- 0 to 15, examples and documented error responses.
- 15, versioning and a public changelog.

Models are read from the API reference, the OpenAPI file, llms.txt, the structured-output and tool-use docs and the model cards. Frameworks from docs a model can follow, typed interfaces, examples and the API reference.

## 4. Security & auth, 64 out of 100, up to 6.3 more on the total

Why it scored 64: Model reading. Bearer keys per team, named, shown once and revoked by deletion, with rotation advice. No scopes, read-only keys or per-key limits found (20 of 30). The terms say Meta will not use Content submitted to the Standard Services to train Meta Models, and training applies only to the `-contributor` model IDs a caller picks. Content may still be used to develop and improve safety and security systems (17 of 20). Retention is 'as needed' for the service, the law, flagged violations and safety review, with no period stated. Zero data retention for qualified accounts through sales, with flagged content kept up to 2 years (10 of 15). The usage dashboard shows tokens and requests per day by model, with no per-key or per-call log found (5 of 15). No security.txt on dev.meta.ai. Meta's bug bounty at bugbounty.meta.com is named in the Muse Code SDK's security policy, and a security commitments page describes TLS 1.2 or later, PCI-DSS card handling and an ISMS, with no named certification for the API (12 of 20).

The checklist (https://www.anchorterminal.com/benchmark/#checklist-security):

- 0 to 30, the credential model. 30 for OAuth 2.1 with scopes, or scoped and revocable keys with rotation. 20 for plain revocable API keys. 10 for one all-powerful key. 10 off when a secret can travel in a URL query string as a documented option.
- 0 to 20, read-only or least-privilege modes, and confirmation or approval for destructive actions.
- 0 to 15, prompt-injection posture where the tool returns untrusted content (documented mitigations or guidance). A tool that returns no untrusted content gets 10.
- 0 to 15, audit logs or per-call visibility for the operator.
- 0 to 20, a security programme. security.txt or a disclosure policy, a bug bounty, SOC 2 or ISO 27001, advisories handled in public.

Models are read for retention, whether API data trains models (and whether that's off by default), zero-retention options and certifications. Frameworks for telemetry defaults, approval hooks, guardrails and sandboxing.

## 5. Maintenance & community, 46 out of 100, up to 4.7 more on the total

Why it scored 46: Model reading. Muse Wonder launched on 12 October 2026 (30). No deprecation policy or notice period found. All three Muse Spark versions are still served, so no retirement has tested one (0 of 12). Three dated launches in the last 90 days that we read, Muse Spark 1.2 on 5 August, Muse Code out of beta on 31 August and Muse Wonder on 12 October (8 of 8). No Model API changelog. A help centre with support tickets, answered 'typically within two business days' by Meta's own account, which we didn't test (8 of 15). No SDK of Meta's own for the API (0 of 15, 0 of 10).

The checklist (https://www.anchorterminal.com/benchmark/#checklist-maintenance):

- 0 to 30, time since the last release, or the last published model or API change for a closed service. 30 within 30 days, 20 within 90, 10 within 180, 0 older.
- 20, at least three releases or dated changelog entries in the last 90 days.
- 0 to 25, responsiveness. Issues and pull requests answered on GitHub (the open issues and how recent the replies are). For closed services, a public changelog and a support or community channel that answers, 0 to 15.
- 15, presence in the official MCP registry under a verified namespace (MCP servers), or current official SDKs (APIs and models).
- 10, package health, current dependencies and CI.

Models are read for deprecation notice periods and model churn rather than release counts.

## 6. Transparency & trust, 52 out of 100, up to 4.2 more on the total

Made of editorial 41, provenance 63.

Why it scored 52: Closed service with clear terms, under California law with AAA arbitration for Meta Platforms, Inc. and Irish law and courts for Meta Platforms Ireland Limited, with liability capped at the greater of 12 months of fees or $1,000. Muse Glimmer's open weights don't change the hosted service (15). The terms, the models page, the pricing page and the zero-retention help page agree that Standard content isn't used for training and Contributor content may be, but retention periods are not stated outside zero retention, and the privacy policy is Meta's general one (18 of 30). No deprecation policy or dated notices found, and the terms let Meta remove functionality without notice (0). A subprocessor list is linked from the terms but wasn't read, and no data locations were found (8 of 20).

The checklist (https://www.anchorterminal.com/benchmark/#checklist-transparency):

- 0 to 30, source availability and licence clarity. 30 for open source under an OSI licence, 15 for closed with clear terms, 0 for unclear terms.
- 0 to 30, data handling and retention statements that agree with each other (privacy policy, DPA, retention periods, subprocessors).
- 0 to 20, a deprecation policy or notices with dates.
- 0 to 20, telemetry disclosed with an opt-out (local software), or subprocessors and data locations disclosed (hosted).

The other half of Transparency and trust is the provenance score, computed from checked facts (below). The category score is the mean of the two.

Provenance checks not met in full (half of this category, computed from checked facts):

- Domain age: meta.ai, registered 2017-12-16 (8 years) (11 of 15)
- Privacy policy: published, but our reader couldn't read it (7 of 10)
- Status page: not found (0 of 10)
- Changelog: not found (0 of 10)
- security.txt: not found (0 of 10)

## 7. Agent ergonomics, 75 out of 100, up to 4.1 more on the total

Why it scored 75: Model reading of the checklist (tool use, structured output, caching, context, batch, SDKs, errors). Tool calls on all three endpoints, parallel calls, tool search with deferred loading, built-in web search and a computer-use tool, but `tool_choice` accepts only `auto`, so a call can't be forced or forbidden (15 of 20). Output constrained to the JSON Schema on every surface (15). Automatic prompt caching with no setup, and cached input at 5 per cent of the input price on Muse Wonder (15). 1,048,576-token context on Muse Wonder and every Muse Spark version, with no long-context premium (15). No batch endpoint or discount found. Background responses run asynchronously at the normal price (0). No SDK of Meta's own. The docs use the OpenAI and Anthropic SDKs against compatible endpoints, the same reading as StepFun (0). OpenAI-style error envelope with `type` and `code`, per-status fixes and named retryable codes (15).

The checklist (https://www.anchorterminal.com/benchmark/#checklist-ergonomics):

- 0 to 25, context cost. For MCP, the number and size of the tool definitions (25 for ten or fewer compact tools, 15 for 11 to 30, 5 for more than 30, plus up to 10 back for toolsets, dynamic loading or read-only subsets). For APIs, whether responses can be sized (field selection, limits, summaries).
- 20, pagination, filtering and output-size controls.
- 20, actionable, documented error responses, codes and messages an agent can recover from.
- 20, idempotency or safe retries, and for MCP the `readOnlyHint` and `destructiveHint` annotations.
- 15, sensible defaults, few required parameters, and official SDKs in at least two languages.

Models are read for tool use, structured output, prompt caching, context length, batch and SDKs. Frameworks for how much code and how many defaults a tool-calling agent with MCP needs.

## What we couldn't check

What we couldn't read counted as absent. Publishing it on a page a plain HTTP fetch can read (not only in a browser) lets the next check count it.

- unchecked: whether an API call works before a card is added. The help centre says an admin adds a payment method to set up billing, and no free allowance is named
- unchecked: the subprocessor list at forwork.meta.com/legal/mfw-subprocessor-list/ and the Meta Global Processor Terms, not read, and the Meta Privacy Policy, which www.facebook.com's robots.txt asks readers like ours not to fetch
- unchecked: www.meta.ai/.well-known/security.txt. www.meta.ai's robots.txt disallows ClaudeBot from every path, so it wasn't requested
- Whether the API itself is generally available. The 8 July 2026 launch called it a public preview, the docs now label only Muse Wonder a preview, and no GA notice was found
- When Muse Spark 1.3 was released. The docs call it the latest version, and no dated page for it was found
- No authenticated call was made. That `muse-wonder-1.0` answers on api.meta.ai rests on the models, pricing and rate-limit pages, which list it
- No Meta Model API listing existed before. This listing covers the whole API with Muse Wonder as its flagship model, in line with the other model-vendor APIs in this category. llama-guard and llamafirewall are Meta's open-weight safety models and stay separate

## Weaknesses

- Muse Wonder is labelled a preview, and no deprecation policy or notice period was found
- No free API allowance found, and billing is set up with a card
- No status page with history. The docs' status link redirects to the home page, and `/v1/status` reports only the current state
- `tool_choice` accepts only `auto`, so a call can't be forced or ruled out
- No OpenAPI file, batch endpoint or Model API changelog found, and API keys have no scopes

## What costs an agent a turn today

The notes we give agents before they call it. Each one is a workaround an agent shouldn't need.

- Use `muse-wonder-1.0` for long multi-step work and `muse-spark-1.3` for cheaper, high-volume calls. Both take the same requests
- Keep personal or confidential data away from `-contributor` model IDs. Meta may train on that content
- Honour Retry-After on 429 and 503, which is 60 seconds for `service_overloaded`, and check `GET https://api.meta.ai/v1/status`, which needs no key
- Pass the key to the OpenAI SDK explicitly or set `OPENAI_API_KEY`. The SDK doesn't read `MODEL_API_KEY`
- Leave `tool_choice` at `auto`. The docs say `none` and `required` are not supported

## When it's done

Send what changed and where it's published as a dispute (https://www.anchorterminal.com/builders/#disputes, or `POST https://www.anchorterminal.com/api/v1/contact` with `"kind": "dispute"`). Disputes are answered in public, and the listing is checked again by the same checklist. Paying for an audit or a listing claim changes nothing here.