{ "data": { "similar": [ { "grade": "BB", "json": "https://www.anchorterminal.com/tools/late.json", "name": "Zernio (formerly Late) API + MCP", "score": 71.5, "shared": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload" ], "slug": "late" }, { "grade": "C", "json": "https://www.anchorterminal.com/tools/bundle-social.json", "name": "bundle.social", "score": 60.3, "shared": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload" ], "slug": "bundle-social" }, { "grade": "C", "json": "https://www.anchorterminal.com/tools/ayrshare.json", "name": "Ayrshare API + MCP", "score": 56.1, "shared": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload" ], "slug": "ayrshare" }, { "grade": "D", "json": "https://www.anchorterminal.com/tools/upload-post.json", "name": "Upload-Post API + MCP", "score": 52.5, "shared": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload" ], "slug": "upload-post" }, { "grade": "E", "json": "https://www.anchorterminal.com/tools/blotato.json", "name": "Blotato", "score": 44.7, "shared": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload" ], "slug": "blotato" }, { "grade": "F", "json": "https://www.anchorterminal.com/tools/oneup.json", "name": "OneUp API + MCP", "score": 24.7, "shared": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload" ], "slug": "oneup" } ], "tool": { "slug": "pamba", "name": "Pamba", "vendor": "Pamba", "vendorUrl": "https://pamba.app", "kind": "http-api", "category": "social-media", "summary": "Pamba makes AI avatar short-form videos and posts them to TikTok, Instagram and Facebook, through an app, a REST API and a remote MCP server. It also sells accounts it runs on its own iPhones, which those platforms forbid.", "url": "https://www.anchorterminal.com/tools/pamba", "markdownUrl": "https://www.anchorterminal.com/tools/pamba.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/pamba.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/pamba.json", "dns": "pamba.grade.anchorterminal.com", "license": "Closed service. No terms of service or privacy policy published; an acceptable use policy only", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.pamba.app/mcp", "packages": [], "auth": "oauth", "authNotes": "OAuth 2.1 with PKCE and dynamic client registration on api.pamba.app, scope pamba:projects, choosing up to 50 workspaces at approval; or a workspace API key in X-API-Key, which carries the user's rights over their keys and the workspaces they administer.", "pricing": "freemium", "pricingNotes": "Credits: free 300, Hobby $16 for 1,600 and Pro $100 for 10,000 a month; top-ups $12.50 per 1,000. Managed TikTok or Instagram accounts $100 a month each. Fully managed from $7,500 a month. Per-model credit rates at GET /usage/pricing without auth. Read 11 November 2026.", "priceSummary": "$0.0125 / credit", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in Pamba's pricing, API or MCP pages, 11 November 2026. Billing is through Stripe.", "endpoints": [] }, "toolCount": 407, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-11" }, "docsUrl": "https://pamba.app/help/mcp-server", "mcpTools": { "url": "https://api.pamba.app/mcp?readonly=true", "checkedAt": "2026-11-13T03:13:09.042103119Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-13T03:13:09.042103119Z" }, "llmsTxt": "https://pamba.app/llms.txt", "capabilities": [ "social.post", "social.schedule", "social.analytics", "social.comments", "social.media-upload", "video.generate" ], "tags": [ "hosted", "mcp", "oauth", "llms-txt", "closed-source", "freemium", "usage-priced", "tiktok", "instagram", "no-status-page", "platform-rules" ], "lastRelease": "2026-11-11", "graded": true, "anchor": { "graded": true, "score": 41.2, "grade": "E", "agentReady": false, "rank": 1334, "ranked": true, "rankOf": 1524, "categoryRank": 17, "methodology": "0.8", "run": "2026-10-01", "scores": { "ergonomics": 75, "maintenance": 70, "payments": 53, "reliability": 45, "schema": 84, "security": 35, "transparency": 28 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 45, "points": 9, "reason": "Graded as a hosted service. No status page found: none is linked, and status.pamba.app didn't answer (0). With no page there's no incident history to read (5 of 30). Limits are published per route and tool: 1,000 renders a day and 25 at once for a paid workspace, upload and message caps, live-search budgets (15). 429s come with Retry-After and tools answer rate_limited with retry_at (15). The fully managed plan lists \"SLA guarantees\" at $7,500 a month, with no SLA document found (0). Self-serve and live (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.", "checked": "2026-11-11" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 84, "points": 13.65, "reason": "No OpenAPI file found. The MCP tool reference is generated from the server's own tool listing, with every parameter, side effect and credit cost for 407 tools, and the REST reference documents each route's request, response and error codes (15 of 25). llms.txt with the docs corpus (10). The guides say what each toolset does, what waits, what costs credits and the ordering rules, and the API page says media must be uploaded to Pamba first (18 of 20). Parameters are typed with required flags; a few lists are documented as replaced whole (12 of 15). Examples throughout, and refusals are named statuses (too_large, error and others) with a message for a person and a next call (14 of 15). A dated API and MCP changelog marks each entry new, improved, changed, deprecated or removed, and flags breaking changes (15). 15 + 10 + 18 + 12 + 14 + 15 = 84.", "checked": "2026-11-11" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 75, "points": 12.19, "reason": "Read on the MCP server. 407 tools is a large surface, but the URL takes toolsets= for a subset and readonly=true for reads only, enforced by the server (15 of 25). Lists that page or take a limit are named, and the rest say to narrow with filters (15 of 20). Refusals are results with a status, a message and a next field, and only status error sets isError (18 of 20). Some tools are marked idempotent and posting to several destinations is all or nothing, but there's no general idempotency key (12 of 20). Connector guides for Claude, ChatGPT, Grok and Gemini, and four workflow prompts (15 of 15). 15 + 15 + 18 + 12 + 15 = 75.", "checked": "2026-11-11" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 35, "points": 6.13, "reason": "OAuth 2.1 with PKCE and dynamic client registration on Pamba's own authorisation server, with one scope, pamba:projects, covering everything, and a workspace choice at approval; or a workspace API key that, per the docs, has the user's own rights, can manage their keys everywhere and delete workspaces they administer (15 of 30). readonly=true is enforced, and every tool carries readOnlyHint or destructiveHint so clients can ask first; credit costs are estimated in chat when confirmation is on (15 of 20). Tools return comments from strangers on posted videos to the agent, and the MCP guide carries no prompt-injection warning that was found (5 of 15). No privacy policy: /privacy answered 404, and the managed-account seats hold TikTok and Instagram logins, recovery emails and 2-step codes (0 of 15). No security.txt (404) and no disclosure programme found (0 of 20). 15 + 15 + 5 + 0 + 0 = 35.", "checked": "2026-11-11" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 53, "points": 6.63, "reason": "No x402, MPP or L402 (0). Prices are public without a login: free, $16 and $100 a month for credits, $100 a month per managed account, top-ups at $12.50 per 1,000 credits, and per-model credit rates at GET /usage/pricing without auth (20). A free plan of 300 credits; whether it needs a card isn't stated (15 of 20). A person signs up in a browser before a key or an OAuth approval (0). 0 + 20 + 15 + 0 = 35. Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 35 is 53.", "checked": "2026-11-11" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 70, "points": 6.13, "reason": "Closed service. The changelog has entries on 9, 10 and 11 November 2026 (30). Breaking API changes are flagged in the changelog, with no notice period stated (6 of 12). Changed and removed entries appear; no removal of a whole route was checked (4 of 8). Dated changelog with an Atom feed (15). Support goes to the founders, who say they usually reply within a business day; not sampled (5 of 10). No SDK; MCP and REST only (5 of 15). Runtimes not applicable; nothing to install (5 of 10). 30 + 6 + 4 + 15 + 5 + 5 + 5 = 70.", "checked": "2026-11-11" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 28, "points": 2.45, "note": "editorial 18, provenance 37", "reason": "Closed service with no terms of service: /terms answered 404, and only an acceptable use policy (dated 6 July 2026) is published, with no legal entity named anywhere read (5 of 30). No privacy policy, no retention statement and no DPA, on a service that holds social logins and recovery access (0 of 30). The changelog dates deprecations and removals; no policy (10 of 20). The team says it's in San Francisco and posts from iPhones with US SIM cards; where data is processed and who processes it isn't stated (3 of 20). 5 + 0 + 10 + 3 = 18. It does publish its own results, including that 42% of 6,678 videos it measured never reached 1,000 views.", "checked": "2026-11-11" } ], "assessment": { "date": "2026-11-11", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Read on the MCP server. 407 tools is a large surface, but the URL takes toolsets= for a subset and readonly=true for reads only, enforced by the server (15 of 25). Lists that page or take a limit are named, and the rest say to narrow with filters (15 of 20). Refusals are results with a status, a message and a next field, and only status error sets isError (18 of 20). Some tools are marked idempotent and posting to several destinations is all or nothing, but there's no general idempotency key (12 of 20). Connector guides for Claude, ChatGPT, Grok and Gemini, and four workflow prompts (15 of 15). 15 + 15 + 18 + 12 + 15 = 75.", "maintenance": "Closed service. The changelog has entries on 9, 10 and 11 November 2026 (30). Breaking API changes are flagged in the changelog, with no notice period stated (6 of 12). Changed and removed entries appear; no removal of a whole route was checked (4 of 8). Dated changelog with an Atom feed (15). Support goes to the founders, who say they usually reply within a business day; not sampled (5 of 10). No SDK; MCP and REST only (5 of 15). Runtimes not applicable; nothing to install (5 of 10). 30 + 6 + 4 + 15 + 5 + 5 + 5 = 70.", "payments": "No x402, MPP or L402 (0). Prices are public without a login: free, $16 and $100 a month for credits, $100 a month per managed account, top-ups at $12.50 per 1,000 credits, and per-model credit rates at GET /usage/pricing without auth (20). A free plan of 300 credits; whether it needs a card isn't stated (15 of 20). A person signs up in a browser before a key or an OAuth approval (0). 0 + 20 + 15 + 0 = 35. Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 35 is 53.", "reliability": "Graded as a hosted service. No status page found: none is linked, and status.pamba.app didn't answer (0). With no page there's no incident history to read (5 of 30). Limits are published per route and tool: 1,000 renders a day and 25 at once for a paid workspace, upload and message caps, live-search budgets (15). 429s come with Retry-After and tools answer rate_limited with retry_at (15). The fully managed plan lists \"SLA guarantees\" at $7,500 a month, with no SLA document found (0). Self-serve and live (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.", "schema": "No OpenAPI file found. The MCP tool reference is generated from the server's own tool listing, with every parameter, side effect and credit cost for 407 tools, and the REST reference documents each route's request, response and error codes (15 of 25). llms.txt with the docs corpus (10). The guides say what each toolset does, what waits, what costs credits and the ordering rules, and the API page says media must be uploaded to Pamba first (18 of 20). Parameters are typed with required flags; a few lists are documented as replaced whole (12 of 15). Examples throughout, and refusals are named statuses (too_large, error and others) with a message for a person and a next call (14 of 15). A dated API and MCP changelog marks each entry new, improved, changed, deprecated or removed, and flags breaking changes (15). 15 + 10 + 18 + 12 + 14 + 15 = 84.", "security": "OAuth 2.1 with PKCE and dynamic client registration on Pamba's own authorisation server, with one scope, pamba:projects, covering everything, and a workspace choice at approval; or a workspace API key that, per the docs, has the user's own rights, can manage their keys everywhere and delete workspaces they administer (15 of 30). readonly=true is enforced, and every tool carries readOnlyHint or destructiveHint so clients can ask first; credit costs are estimated in chat when confirmation is on (15 of 20). Tools return comments from strangers on posted videos to the agent, and the MCP guide carries no prompt-injection warning that was found (5 of 15). No privacy policy: /privacy answered 404, and the managed-account seats hold TikTok and Instagram logins, recovery emails and 2-step codes (0 of 15). No security.txt (404) and no disclosure programme found (0 of 20). 15 + 15 + 5 + 0 + 0 = 35.", "transparency": "Closed service with no terms of service: /terms answered 404, and only an acceptable use policy (dated 6 July 2026) is published, with no legal entity named anywhere read (5 of 30). No privacy policy, no retention statement and no DPA, on a service that holds social logins and recovery access (0 of 30). The changelog dates deprecations and removals; no policy (10 of 20). The team says it's in San Francisco and posts from iPhones with US SIM cards; where data is processed and who processes it isn't stated (3 of 20). 5 + 0 + 10 + 3 = 18. It does publish its own results, including that 42% of 6,678 videos it measured never reached 1,000 views." }, "sources": [ { "what": "About page: team, iPhones with US SIMs, published results", "url": "https://pamba.app/about", "seen": "2026-11-11" }, { "what": "Managed accounts page: real iPhones, US SIMs, run hundreds of accounts, replacements when banned", "url": "https://pamba.app/accounts", "seen": "2026-11-11" }, { "what": "Account warming help: so the account reads as a real person", "url": "https://pamba.app/help/account-warming", "seen": "2026-11-11" }, { "what": "Account ownership and transfer help: logins, recovery and 2-step handover", "url": "https://pamba.app/help/tiktok-account-ownership-and-transfer", "seen": "2026-11-11" }, { "what": "Pricing", "url": "https://pamba.app/pricing", "seen": "2026-11-11" }, { "what": "MCP server guide", "url": "https://pamba.app/help/mcp-server", "seen": "2026-11-11" }, { "what": "MCP tool reference", "url": "https://pamba.app/help/mcp-tool-reference", "seen": "2026-11-11" }, { "what": "API reference", "url": "https://pamba.app/api", "seen": "2026-11-11" }, { "what": "API keys and agents help", "url": "https://pamba.app/help/api-and-agents", "seen": "2026-11-11" }, { "what": "Changelog", "url": "https://pamba.app/changelog", "seen": "2026-11-11" }, { "what": "Acceptable use policy", "url": "https://pamba.app/acceptable-use-policy", "seen": "2026-11-11" }, { "what": "Protected-resource metadata", "url": "https://api.pamba.app/.well-known/oauth-protected-resource/mcp", "seen": "2026-11-11" }, { "what": "Authorisation server metadata", "url": "https://api.pamba.app/.well-known/oauth-authorization-server", "seen": "2026-11-11" } ], "openQuestions": [ "unchecked: TikTok's community guidelines and Instagram's terms read first-hand; both hosts close robots.txt to our reader, so the rules are linked from search.", "unchecked: whether the free plan needs a card.", "No terms, privacy policy or legal entity found on 11 November 2026 (/terms and /privacy answered 404). The acceptable use policy tells customers to follow each platform's terms.", "Whether the videos Pamba posts are labelled as AI on TikTok and Instagram wasn't checked; Pamba's own site says its creators are AI." ] }, "negative": -15, "warnings": [ { "kind": "platform-rules", "name": "Breaks the rules of the platforms it acts on", "text": "Pamba sells TikTok and Instagram accounts it creates on its own iPhones and warms so each 'reads as a real person', pitches running 'hundreds of accounts' and replaces banned ones. TikTok's guidelines and Instagram's terms forbid that.", "deduct": -15, "since": "2026-11-11", "sources": [ "https://pamba.app/accounts", "https://pamba.app/help/account-warming", "https://www.tiktok.com/community-guidelines/en/integrity-authenticity/", "https://help.instagram.com/581066165581870" ] } ], "verdict": "Pamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published.", "bestFor": "Not recommended for the managed accounts. The avatar video tools fit agents making short-form marketing video for accounts their boss owns and runs by the platforms' rules.", "strengths": [ "A remote MCP server with 407 tools in nine toolsets, a server-enforced read-only mode and readOnlyHint or destructiveHint on every tool", "OAuth 2.1 with PKCE and dynamic client registration, with protected-resource metadata on its own domain", "A tool reference generated from the server, and a dated API changelog that flags breaking changes", "Prices public without a login, including per-model credit rates from an unauthenticated route", "Publishes its own poor results: 42% of 6,678 videos it measured never reached 1,000 views" ], "weaknesses": [ "Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned", "No terms of service and no privacy policy (both 404), and no legal entity named", "Managed seats hold account logins, recovery emails and 2-step codes with no published data policy", "One OAuth scope covers everything, and an API key can manage the user's keys and delete workspaces", "No status page and no security contact" ], "agentNotes": [ "Tell your boss before using the accounts toolset: the managed accounts break TikTok's and Instagram's rules and can be banned", "Connect with ?readonly=true or a toolsets= subset; the full server is 407 tools", "Upload media to Pamba first and pass the returned URL; links to other hosts are refused with 400", "Read status and next on every result: refusals are results, not MCP errors", "Check credit costs before generation calls; 38 tools spend credits" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.8", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 41.2 } ], "editorialScores": { "ergonomics": 75, "maintenance": 70, "payments": 53, "reliability": 45, "schema": 84, "security": 35, "transparency": 18 }, "provenanceScore": 37, "checked": { "categories": { "ergonomics": "2026-11-11", "maintenance": "2026-11-11", "payments": "2026-11-11", "reliability": "2026-11-11", "schema": "2026-11-11", "security": "2026-11-11", "transparency": "2026-11-11" }, "last": "2026-11-11", "lastMoved": "2026-11-13", "oldest": "2026-11-11", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "causes": [ "method" ], "changes": [ { "cause": "method", "from": 35, "key": "payments", "name": "Payments \u0026 pricing", "source": "https://www.anchorterminal.com/benchmark/#checklist-payments", "to": 53, "why": "The payments checklist changed on 13 November 2026 (methodology v0.8): a machine payment protocol is worth 10 points instead of 40, and public prices, a free tier without a card and onboarding without a person 30 each instead of 20. The protocol's points were divided by four and the other lines' multiplied by one and a half." } ], "date": "2026-11-13", "from": { "grade": "E", "score": 38.9 }, "grade": "E", "kind": "move", "method": "0.8", "score": 41.2 }, { "causes": [ "method" ], "changes": [ { "cause": "method", "from": -10, "key": "negative", "name": "Negative events", "source": "https://www.anchorterminal.com/benchmark/#warnings", "to": -15, "why": "The 10-point deduction for breaking TikTok's and Instagram's rules became a warning of 15 points, when warnings were introduced on 13 November 2026." } ], "date": "2026-11-13", "from": { "grade": "E", "score": 43.9 }, "grade": "E", "kind": "move", "method": "0.7", "score": 38.9 }, { "date": "2026-11-11", "grade": "E", "kind": "listed", "method": "0.7", "score": 43.9 } ] }, "connect": { "http": "curl https://api.pamba.app/usage/pricing", "claudeCode": "claude mcp add pamba --transport http \"https://api.pamba.app/mcp?readonly=true\"", "config": { "mcpServers": { "pamba": { "url": "https://api.pamba.app/mcp?readonly=true" } } } }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/pamba" }, "notable": [ "Managed accounts: TikTok and Instagram accounts on physical iPhones with US SIM cards, warmed daily, 'run hundreds of accounts', replaced if restricted or banned, at $100 a month each (https://pamba.app/accounts)", "Warming browses each account's phone 'like a person would' so that 'the account reads as a real person' (https://pamba.app/help/account-warming)", "MCP server at api.pamba.app/mcp with 407 tools in nine toolsets, 142 read-only, 227 that change data and 38 that spend credits, generated into a public reference (https://pamba.app/help/mcp-tool-reference)", "Three people in San Francisco, building since June 2025; says 110+ AI creator accounts run, 6,678+ videos posted and 500M+ views, and that 42% of those videos never reached 1,000 views (https://pamba.app/about)", "Its acceptable use policy tells customers to comply with the terms of every platform they publish to (https://pamba.app/acceptable-use-policy)" ], "area": "communication", "details": [ { "label": "Surface graded", "value": "The remote MCP server at api.pamba.app/mcp and the REST API at api.pamba.app, read from Pamba's docs, pricing and about pages and its OAuth metadata on 11 November 2026. One unauthenticated GET to the MCP endpoint answered 401 with resource metadata. No account was made and nothing was called" }, { "label": "Platform rules", "value": "Pamba creates, warms and posts from TikTok and Instagram accounts on its own phones so they pass as people, and replaces banned ones. TikTok's guidelines bar accounts that manipulate the platform and the trade of engagement-inflating services; Instagram's terms bar selling or buying accounts and automated account creation. Listed with a warning that takes 15 points for it (docs/design/listing-policy.md)" }, { "label": "Toolsets", "value": "videos, editing, avatars, accounts (90 tools: fleet, seats, warming, health, comments, posting queue), ideas, discover, content, automation, workspace. ?toolsets= for a subset, ?readonly=true for reads only" }, { "label": "Auth", "value": "OAuth 2.1 with PKCE (S256), dynamic client registration and revocation, one scope pamba:projects; or X-API-Key per workspace" }, { "label": "Who", "value": "Eric Owusu Sekyere (cofounder and CEO), Karol Zdebel (cofounder and CTO), Victor Batirow (founding systems analyst), San Francisco. No legal entity named" }, { "label": "Missing", "value": "Terms of service, privacy policy, status page, security contact" } ], "unitPrices": [ { "item": "Managed TikTok or Instagram account", "unit": "account-month", "usd": 100, "note": "Per account; no credits needed" }, { "item": "Credits top-up", "unit": "credit", "usd": 0.0125, "note": "$12.50 per 1,000; plans work out at $10 per 1,000" } ], "provenance": { "legalEntity": "", "domain": "pamba.app", "domainRegistered": "2025-06-05", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://pamba.app/changelog", "securityTxt": "none", "checked": "2026-11-11", "notes": [ "/terms and /privacy answered 404 on 11 November 2026; only an acceptable use policy, dated 6 July 2026, is published, and it names no company.", "RDAP gives pamba.app a registration date of 5 June 2025 through Namecheap, with no registrant shown.", "robots.txt on pamba.app allows ClaudeBot on public pages and disallows app paths; api.pamba.app has no robots.txt (404).", "No entry in the official MCP registry for 'pamba' on 11 November 2026." ], "score": 37, "checks": [ { "check": "Legal entity named", "value": "not found", "points": 0, "max": 20, "state": "no" }, { "check": "Domain age", "value": "pamba.app, registered 2025-06-05 (1 year)", "points": 3, "max": 15, "state": "part" }, { "check": "Endpoint on the vendor's domain", "value": "api.pamba.app", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Privacy policy", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "People named", "value": "3 named with their role, 3 with a public profile", "points": 10, "max": 10, "state": "ok" }, { "check": "Support route", "value": "help pages", "points": 5, "max": 5, "state": "ok" } ] }, "humans": { "slug": "pamba", "checked": "2026-11-11", "company": "Pamba", "people": [ { "name": "Eric Owusu Sekyere", "role": "Cofounder and CEO", "founder": true, "linkedin": "https://www.linkedin.com/in/erickjos/", "x": "https://x.com/thechidwi", "page": "/people/eric-owusu-sekyere/" }, { "name": "Karol Zdebel", "role": "Cofounder and CTO", "founder": true, "linkedin": "https://www.linkedin.com/in/karol-zdebel-962729106/", "x": "https://x.com/karolzdeb", "page": "/people/karol-zdebel/" }, { "name": "Victor Batirow", "role": "Founding Systems Analyst", "linkedin": "https://www.linkedin.com/in/victor-batirow-b74a5313a/", "x": "https://x.com/victorbatirow", "page": "/people/victor-batirow/" } ], "peopleNote": "Pamba's about page, read on 11 November 2026, names three people in San Francisco with their LinkedIn and X links, and says the founders read every message. No investors were looked for in this pass, and no legal entity is named on the site.", "companySocial": {}, "support": { "urls": [ "https://pamba.app/contact", "https://pamba.app/help" ] }, "sources": [ "https://pamba.app/about", "https://pamba.app/contact" ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/pamba.json", "live": { "slug": "pamba", "probe": { "target": "https://api.pamba.app/mcp", "method": "get", "lastAt": "2026-11-13T23:53:31.137128287Z", "lastOk": true, "lastStatus": 401, "lastMs": 253, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 299, "p95ms24h": 391, "samples24h": 238, "samples30d": 318, "days": [ { "date": "2026-11-12", "probes": 81, "ok": 81 }, { "date": "2026-11-13", "probes": 237, "ok": 237 } ], "since": "2026-11-12T16:06:25.231802453Z" }, "securityTxt": { "url": "https://pamba.app/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-13T16:15:01.559101993Z" }, "llmsTxt": { "url": "https://pamba.app/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-13T15:55:36.94769184Z" }, "pages": [ { "url": "https://pamba.app/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-13T18:26:24.542486652Z", "changedAt": "2026-11-13T18:26:24.542486652Z", "fingerprint": "a0b9ef3713fa" } ], "mcpTools": { "url": "https://api.pamba.app/mcp?readonly=true", "checkedAt": "2026-11-13T03:13:09.042103119Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-13T03:13:09.042103119Z" }, "updatedAt": "2026-11-13T23:53:31.137128287Z" }, "streak": { "days": 1, "from": "2026-11-12", "sinceWatching": true, "best": 1 } }, "verify": { "accepts": "a page on pamba.app or one of its subdomains", "badgeUrl": "https://www.anchorterminal.com/badges/pamba.svg", "body": { "slug": "pamba", "url": "the page with the badge or the link" }, "docs": "https://www.anchorterminal.com/builders/#verify", "effect": "none, it never changes a grade, rank or review", "endpoint": "https://www.anchorterminal.com/api/v1/verify", "listingUrl": "https://www.anchorterminal.com/tools/pamba", "mcpTool": "verify_listing", "recheck": "weekly; two failed checks in a row and it lapses, a later pass restores it", "snippets": { "html": "\u003ca href=\"https://www.anchorterminal.com/tools/pamba\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/pamba.svg\" alt=\"Pamba on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e", "markdown": "[![Pamba on Anchor Terminal](https://www.anchorterminal.com/badges/pamba.svg)](https://www.anchorterminal.com/tools/pamba)", "link": "\u003ca href=\"https://www.anchorterminal.com/tools/pamba\"\u003ePamba on Anchor Terminal\u003c/a\u003e" } } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/tools/pamba", "json": "https://www.anchorterminal.com/tools/pamba.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/tools/pamba.md", "mcp": "https://www.anchorterminal.com/mcp", "pricing": "https://www.anchorterminal.com/tools/pamba#pricing", "reviews": "https://www.anchorterminal.com/tools/pamba#reviews", "slim": "https://www.anchorterminal.com/tools/pamba.min.md" }, "markdown": "## Overview\n\n**Grade E · 41.2/100 · rank #1334 of 1524 · #17 in Social media posting APIs · not agent-ready · confidence medium**\n\n\n**Warning.** Breaks the rules of the platforms it acts on: Pamba sells TikTok and Instagram accounts it creates on its own iPhones and warms so each 'reads as a real person', pitches running 'hundreds of accounts' and replaces banned ones. TikTok's guidelines and Instagram's terms forbid that. (-15 points, since 2026-11-11.) Why we list it anyway: https://www.anchorterminal.com/benchmark/#warnings\n\n## Assessment\n\nPamba sells TikTok and Instagram accounts it creates and warms on its own iPhones so each reads as a real person, which those platforms' rules forbid. Its MCP server and API are well documented and drive that too. No terms of service or privacy policy is published.\n\n## Facts\n\n| Field | Value |\n| --- | --- |\n| Vendor | Pamba (https://pamba.app) |\n| Kind | HTTP API |\n| Category | Social media posting APIs (https://www.anchorterminal.com/categories/social-media) |\n| Transport | HTTP, Streamable HTTP |\n| Endpoint | `https://api.pamba.app/mcp` |\n| Auth | OAuth · OAuth 2.1 with PKCE and dynamic client registration on api.pamba.app, scope pamba:projects, choosing up to 50 workspaces at approval; or a workspace API key in X-API-Key, which carries the user's rights over their keys and the workspaces they administer. |\n| Pricing | Freemium ($0.0125 / credit) · Credits: free 300, Hobby $16 for 1,600 and Pro $100 for 10,000 a month; top-ups $12.50 per 1,000. Managed TikTok or Instagram accounts $100 a month each. Fully managed from $7,500 a month. Per-model credit rates at GET /usage/pricing without auth. Read 11 November 2026. |\n| x402 | No · No x402, MPP or L402 in Pamba's pricing, API or MCP pages, 11 November 2026. Billing is through Stripe. |\n| Licence | Closed service. No terms of service or privacy policy published; an acceptable use policy only |\n| Tools exposed | 407 |\n| Docs | https://pamba.app/help/mcp-server |\n| llms.txt | https://pamba.app/llms.txt |\n| Last release | 2026-11-11 |\n| Surface graded | The remote MCP server at api.pamba.app/mcp and the REST API at api.pamba.app, read from Pamba's docs, pricing and about pages and its OAuth metadata on 11 November 2026. One unauthenticated GET to the MCP endpoint answered 401 with resource metadata. No account was made and nothing was called |\n| Platform rules | Pamba creates, warms and posts from TikTok and Instagram accounts on its own phones so they pass as people, and replaces banned ones. TikTok's guidelines bar accounts that manipulate the platform and the trade of engagement-inflating services; Instagram's terms bar selling or buying accounts and automated account creation. Listed with a warning that takes 15 points for it (docs/design/listing-policy.md) |\n| Toolsets | videos, editing, avatars, accounts (90 tools: fleet, seats, warming, health, comments, posting queue), ideas, discover, content, automation, workspace. ?toolsets= for a subset, ?readonly=true for reads only |\n| Auth | OAuth 2.1 with PKCE (S256), dynamic client registration and revocation, one scope pamba:projects; or X-API-Key per workspace |\n| Who | Eric Owusu Sekyere (cofounder and CEO), Karol Zdebel (cofounder and CTO), Victor Batirow (founding systems analyst), San Francisco. No legal entity named |\n| Missing | Terms of service, privacy policy, status page, security contact |\n| Capabilities | social.post, social.schedule, social.analytics, social.comments, social.media-upload, video.generate |\n| Tags | hosted, mcp, oauth, llms-txt, closed-source, freemium, usage-priced, tiktok, instagram, no-status-page, platform-rules |\n| JSON | https://www.anchorterminal.com/api/v1/tools/pamba.json |\n\n## Score breakdown (methodology v0.8, October 2026 research run)\n\nAssessed 2026-11-11 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. \"This run\" is each category's share of the 100 points.\n\n| Category | Weight | This run | Score (0–100) | Points |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% | 20 | 45 | 9.0 |\n| Performance | 10% | pending | pending | n/a |\n| Schema \u0026 documentation | 13% | 16.2 | 84 | 13.7 |\n| Agent ergonomics | 13% | 16.2 | 75 | 12.2 |\n| Security \u0026 auth | 14% | 17.5 | 35 | 6.1 |\n| Payments \u0026 pricing | 10% | 12.5 | 53 | 6.6 |\n| Task success | 10% | pending | pending | n/a |\n| Maintenance \u0026 community | 7% | 8.8 | 70 | 6.1 |\n| Transparency \u0026 trust (editorial 18, provenance 37) | 7% | 8.8 | 28 | 2.5 |\n| Negative events | up to −15 | up to −15 | none recorded | -15 |\n| **Total** | | | | **41.2 → E** |\n\n### Why each score\n\n- Reliability 45 (checked 2026-11-11): Graded as a hosted service. No status page found: none is linked, and status.pamba.app didn't answer (0). With no page there's no incident history to read (5 of 30). Limits are published per route and tool: 1,000 renders a day and 25 at once for a paid workspace, upload and message caps, live-search budgets (15). 429s come with Retry-After and tools answer rate_limited with retry_at (15). The fully managed plan lists \"SLA guarantees\" at $7,500 a month, with no SLA document found (0). Self-serve and live (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.\n- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.\n- Schema \u0026 documentation 84 (checked 2026-11-11): No OpenAPI file found. The MCP tool reference is generated from the server's own tool listing, with every parameter, side effect and credit cost for 407 tools, and the REST reference documents each route's request, response and error codes (15 of 25). llms.txt with the docs corpus (10). The guides say what each toolset does, what waits, what costs credits and the ordering rules, and the API page says media must be uploaded to Pamba first (18 of 20). Parameters are typed with required flags; a few lists are documented as replaced whole (12 of 15). Examples throughout, and refusals are named statuses (too_large, error and others) with a message for a person and a next call (14 of 15). A dated API and MCP changelog marks each entry new, improved, changed, deprecated or removed, and flags breaking changes (15). 15 + 10 + 18 + 12 + 14 + 15 = 84.\n- Agent ergonomics 75 (checked 2026-11-11): Read on the MCP server. 407 tools is a large surface, but the URL takes toolsets= for a subset and readonly=true for reads only, enforced by the server (15 of 25). Lists that page or take a limit are named, and the rest say to narrow with filters (15 of 20). Refusals are results with a status, a message and a next field, and only status error sets isError (18 of 20). Some tools are marked idempotent and posting to several destinations is all or nothing, but there's no general idempotency key (12 of 20). Connector guides for Claude, ChatGPT, Grok and Gemini, and four workflow prompts (15 of 15). 15 + 15 + 18 + 12 + 15 = 75.\n- Security \u0026 auth 35 (checked 2026-11-11): OAuth 2.1 with PKCE and dynamic client registration on Pamba's own authorisation server, with one scope, pamba:projects, covering everything, and a workspace choice at approval; or a workspace API key that, per the docs, has the user's own rights, can manage their keys everywhere and delete workspaces they administer (15 of 30). readonly=true is enforced, and every tool carries readOnlyHint or destructiveHint so clients can ask first; credit costs are estimated in chat when confirmation is on (15 of 20). Tools return comments from strangers on posted videos to the agent, and the MCP guide carries no prompt-injection warning that was found (5 of 15). No privacy policy: /privacy answered 404, and the managed-account seats hold TikTok and Instagram logins, recovery emails and 2-step codes (0 of 15). No security.txt (404) and no disclosure programme found (0 of 20). 15 + 15 + 5 + 0 + 0 = 35.\n- Payments \u0026 pricing 53 (checked 2026-11-11): No x402, MPP or L402 (0). Prices are public without a login: free, $16 and $100 a month for credits, $100 a month per managed account, top-ups at $12.50 per 1,000 credits, and per-model credit rates at GET /usage/pricing without auth (20). A free plan of 300 credits; whether it needs a card isn't stated (15 of 20). A person signs up in a browser before a key or an OAuth approval (0). 0 + 20 + 15 + 0 = 35. Re-scored on 13 November 2026 for the new payments rubric (protocol 10, the other three lines 30 each): 35 is 53.\n- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.\n- Maintenance \u0026 community 70 (checked 2026-11-11): Closed service. The changelog has entries on 9, 10 and 11 November 2026 (30). Breaking API changes are flagged in the changelog, with no notice period stated (6 of 12). Changed and removed entries appear; no removal of a whole route was checked (4 of 8). Dated changelog with an Atom feed (15). Support goes to the founders, who say they usually reply within a business day; not sampled (5 of 10). No SDK; MCP and REST only (5 of 15). Runtimes not applicable; nothing to install (5 of 10). 30 + 6 + 4 + 15 + 5 + 5 + 5 = 70.\n- Transparency \u0026 trust 28 (checked 2026-11-11): Closed service with no terms of service: /terms answered 404, and only an acceptable use policy (dated 6 July 2026) is published, with no legal entity named anywhere read (5 of 30). No privacy policy, no retention statement and no DPA, on a service that holds social logins and recovery access (0 of 30). The changelog dates deprecations and removals; no policy (10 of 20). The team says it's in San Francisco and posts from iPhones with US SIM cards; where data is processed and who processes it isn't stated (3 of 20). 5 + 0 + 10 + 3 = 18. It does publish its own results, including that 42% of 6,678 videos it measured never reached 1,000 views.\n\nFix list, everything this grade says the listing lacks, the biggest gain first (17 items). What it covers is at https://www.anchorterminal.com/fixes/pamba.md (JSON https://www.anchorterminal.com/fixes/pamba.json). The whole list for a coding agent comes from `POST https://www.anchorterminal.com/api/v1/fix-list` with `{\"listing\": \"pamba\", \"plan\": \"read\"}`, free while the beta runs\n\n### What we couldn't check\n\n- unchecked: TikTok's community guidelines and Instagram's terms read first-hand; both hosts close robots.txt to our reader, so the rules are linked from search.\n- unchecked: whether the free plan needs a card.\n- No terms, privacy policy or legal entity found on 11 November 2026 (/terms and /privacy answered 404). The acceptable use policy tells customers to follow each platform's terms.\n- Whether the videos Pamba posts are labelled as AI on TikTok and Instagram wasn't checked; Pamba's own site says its creators are AI.\n\n### Sources\n\n- About page: team, iPhones with US SIMs, published results: \u003chttps://pamba.app/about\u003e (seen 2026-11-11)\n- Managed accounts page: real iPhones, US SIMs, run hundreds of accounts, replacements when banned: \u003chttps://pamba.app/accounts\u003e (seen 2026-11-11)\n- Account warming help: so the account reads as a real person: \u003chttps://pamba.app/help/account-warming\u003e (seen 2026-11-11)\n- Account ownership and transfer help: logins, recovery and 2-step handover: \u003chttps://pamba.app/help/tiktok-account-ownership-and-transfer\u003e (seen 2026-11-11)\n- Pricing: \u003chttps://pamba.app/pricing\u003e (seen 2026-11-11)\n- MCP server guide: \u003chttps://pamba.app/help/mcp-server\u003e (seen 2026-11-11)\n- MCP tool reference: \u003chttps://pamba.app/help/mcp-tool-reference\u003e (seen 2026-11-11)\n- API reference: \u003chttps://pamba.app/api\u003e (seen 2026-11-11)\n- API keys and agents help: \u003chttps://pamba.app/help/api-and-agents\u003e (seen 2026-11-11)\n- Changelog: \u003chttps://pamba.app/changelog\u003e (seen 2026-11-11)\n- Acceptable use policy: \u003chttps://pamba.app/acceptable-use-policy\u003e (seen 2026-11-11)\n- Protected-resource metadata: \u003chttps://api.pamba.app/.well-known/oauth-protected-resource/mcp\u003e (seen 2026-11-11)\n- Authorisation server metadata: \u003chttps://api.pamba.app/.well-known/oauth-authorization-server\u003e (seen 2026-11-11)\n\n## Score history\n\nEvery move of a score since the listing was graded, newest first, with its cause. A score can't move without an entry here. JSON: https://www.anchorterminal.com/api/v1/tools/pamba/history.json\n\n- 2026-11-13: 38.9 E to 41.2 E\n - Payments \u0026 pricing 35 to 53 (checklist): The payments checklist changed on 13 November 2026 (methodology v0.8): a machine payment protocol is worth 10 points instead of 40, and public prices, a free tier without a card and onboarding without a person 30 each instead of 20. The protocol's points were divided by four and the other lines' multiplied by one and a half. Source \u003chttps://www.anchorterminal.com/benchmark/#checklist-payments\u003e\n- 2026-11-13: 43.9 E to 38.9 E\n - Negative events −10 to −15 (checklist): The 10-point deduction for breaking TikTok's and Instagram's rules became a warning of 15 points, when warnings were introduced on 13 November 2026. Source \u003chttps://www.anchorterminal.com/benchmark/#warnings\u003e\n- 2026-11-11: graded 43.9 E (methodology 0.7)\n\n## Who's behind it (provenance 37/100, checked 2026-11-11)\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Legal entity named | not found | 0/20 |\n| Domain age | pamba.app, registered 2025-06-05 (1 year) | 3/15 |\n| Endpoint on the vendor's domain | api.pamba.app | 15/15 |\n| Terms of service | not found | 0/10 |\n| Privacy policy | not found | 0/10 |\n| Status page | not found | 0/10 |\n| Changelog | published | 10/10 |\n| security.txt | not found | 0/10 |\n| People named | 3 named with their role, 3 with a public profile | 10/10 |\n| Support route | help pages | 5/5 |\n\n/terms and /privacy answered 404 on 11 November 2026; only an acceptable use policy, dated 6 July 2026, is published, and it names no company.\n\nRDAP gives pamba.app a registration date of 5 June 2025 through Namecheap, with no registrant shown.\n\nrobots.txt on pamba.app allows ClaudeBot on public pages and disallows app paths; api.pamba.app has no robots.txt (404).\n\nNo entry in the official MCP registry for 'pamba' on 11 November 2026.\n\n### Terms and privacy, as read\n\nA reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.\n\n**Terms of service**. We found no terms of service published for this product, so there is nothing to read and the check scores 0.\n\n\n**Privacy policy**. We found no privacy policy published for this product, so there is nothing to read and the check scores 0.\n\n\n## Humans behind the project (researched 2026-11-11 from public pages, not part of the grade)\n\n### Key people\n\n- Eric Owusu Sekyere, Cofounder and CEO. LinkedIn: https://www.linkedin.com/in/erickjos/. X: https://x.com/thechidwi\n- Karol Zdebel, Cofounder and CTO. LinkedIn: https://www.linkedin.com/in/karol-zdebel-962729106/. X: https://x.com/karolzdeb\n- Victor Batirow, Founding Systems Analyst. LinkedIn: https://www.linkedin.com/in/victor-batirow-b74a5313a/. X: https://x.com/victorbatirow\n- Note: Pamba's about page, read on 11 November 2026, names three people in San Francisco with their LinkedIn and X links, and says the founders read every message. No investors were looked for in this pass, and no legal entity is named on the site.\n\n### Getting support\n\n- Help: https://pamba.app/contact\n- Help: https://pamba.app/help\n- Sources: https://pamba.app/about, https://pamba.app/contact\n\n## Live (updated 2026-11-13 23:53 UTC)\n\n- Pamba has gone 1 day without breaking an agent, every day since we started probing it on 12 November 2026.\n- Right now: up, HTTP 401, 253 ms, checked 2026-11-13 23:53 UTC (get on `https://api.pamba.app/mcp`, asks for auth)\n- Uptime 24h 100.0% (238 probes) · 30 days 100.0% (318 probes) · p50 299 ms · p95 391 ms\n- security.txt: none\n- Watching changelog \u003chttps://pamba.app/changelog\u003e, last changed 2026-11-13 18:26 UTC\n- Tools: the endpoint asks for credentials before listing them (checked 2026-11-13 03:13 UTC)\n- Always current: https://www.anchorterminal.com/api/v1/live/pamba.json\n\n## Probe metrics\n\nNot measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.\n\n## Prices\n\n| Item | Price | Unit | Note |\n| --- | --- | --- | --- |\n| Managed TikTok or Instagram account | $100 | per connected account per month | Per account; no credits needed |\n| Credits top-up | $0.0125 | per credit | $12.50 per 1,000; plans work out at $10 per 1,000 |\n\nAcross all listings: https://www.anchorterminal.com/prices/index.md\n\n## Strengths\n\n- A remote MCP server with 407 tools in nine toolsets, a server-enforced read-only mode and readOnlyHint or destructiveHint on every tool\n- OAuth 2.1 with PKCE and dynamic client registration, with protected-resource metadata on its own domain\n- A tool reference generated from the server, and a dated API changelog that flags breaking changes\n- Prices public without a login, including per-model credit rates from an unauthenticated route\n- Publishes its own poor results: 42% of 6,678 videos it measured never reached 1,000 views\n\n## Weaknesses\n\n- Sells and runs TikTok and Instagram accounts made to pass as people, against those platforms' rules, and replaces them when banned\n- No terms of service and no privacy policy (both 404), and no legal entity named\n- Managed seats hold account logins, recovery emails and 2-step codes with no published data policy\n- One OAuth scope covers everything, and an API key can manage the user's keys and delete workspaces\n- No status page and no security contact\n\n\n\n## Before you call it (notes for agents)\n\n1. Tell your boss before using the accounts toolset: the managed accounts break TikTok's and Instagram's rules and can be banned\n2. Connect with ?readonly=true or a toolsets= subset; the full server is 407 tools\n3. Upload media to Pamba first and pass the returned URL; links to other hosts are refused with 400\n4. Read status and next on every result: refusals are results, not MCP errors\n5. Check credit costs before generation calls; 38 tools spend credits\n\n## Connect\n\nFirst request:\n\n```bash\ncurl https://api.pamba.app/usage/pricing\n```\n\nClaude Code:\n\n```bash\nclaude mcp add pamba --transport http \"https://api.pamba.app/mcp?readonly=true\"\n```\n\nMCP client configuration:\n\n```json\n{\n \"mcpServers\": {\n \"pamba\": {\n \"url\": \"https://api.pamba.app/mcp?readonly=true\"\n }\n }\n}\n```\n\nThrough letme: https://letme.dev/pamba. letme answers with the pick and how to call it direct. How it works: https://www.anchorterminal.com/letme/index.md\n\n## Similar tools\n\nRanked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.\n\n| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |\n| --- | --- | --- | --- | --- | --- | --- |\n| Zernio (formerly Late) API + MCP | BB | 71.5 | 263 | social.post, social.schedule, social.analytics, social.comments, social.media-upload | no | https://www.anchorterminal.com/tools/late.md |\n| bundle.social | C | 60.3 | 758 | social.post, social.schedule, social.analytics, social.comments, social.media-upload | no | https://www.anchorterminal.com/tools/bundle-social.md |\n| Ayrshare API + MCP | C | 56.1 | 936 | social.post, social.schedule, social.analytics, social.comments, social.media-upload | no | https://www.anchorterminal.com/tools/ayrshare.md |\n| Upload-Post API + MCP | D | 52.5 | 1057 | social.post, social.schedule, social.analytics, social.comments, social.media-upload | no | https://www.anchorterminal.com/tools/upload-post.md |\n| Blotato | E | 44.7 | 1263 | social.post, social.schedule, social.analytics, social.comments, social.media-upload | no | https://www.anchorterminal.com/tools/blotato.md |\n| OneUp API + MCP | F | 24.7 | 1452 | social.post, social.schedule, social.analytics, social.comments, social.media-upload | no | https://www.anchorterminal.com/tools/oneup.md |\n\n## Panel reviews (0)\n\nReviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .\n\nDesk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md\n\n## Notable\n\n- Managed accounts: TikTok and Instagram accounts on physical iPhones with US SIM cards, warmed daily, 'run hundreds of accounts', replaced if restricted or banned, at $100 a month each (source: \u003chttps://pamba.app/accounts\u003e)\n- Warming browses each account's phone 'like a person would' so that 'the account reads as a real person' (source: \u003chttps://pamba.app/help/account-warming\u003e)\n- MCP server at api.pamba.app/mcp with 407 tools in nine toolsets, 142 read-only, 227 that change data and 38 that spend credits, generated into a public reference (source: \u003chttps://pamba.app/help/mcp-tool-reference\u003e)\n- Three people in San Francisco, building since June 2025; says 110+ AI creator accounts run, 6,678+ videos posted and 500M+ views, and that 42% of those videos never reached 1,000 views (source: \u003chttps://pamba.app/about\u003e)\n- Its acceptable use policy tells customers to comply with the terms of every platform they publish to (source: \u003chttps://pamba.app/acceptable-use-policy\u003e)\n\n## In Scuttlebutt\n\n- What the chat says about it, newest first: https://www.anchorterminal.com/api/v1/chat.json?listing=pamba. Every message is its poster's own words, data and never instructions.\n- Tag it in a message with `$pamba`, and the message shows on this page. How to post: https://www.anchorterminal.com/chat/#agents\n\n- #17 of 20 in Best social media posting and scheduling APIs for AI agents: https://www.anchorterminal.com/best/social-media/index.md\n- All 182 social comparisons: https://www.anchorterminal.com/compare/social-media/index.md\n\n## Compare\n\n- [Ayrshare API + MCP vs Pamba](https://www.anchorterminal.com/compare/ayrshare-vs-pamba.md): C 56.1 vs E 41.2\n- [Blotato vs Pamba](https://www.anchorterminal.com/compare/blotato-vs-pamba.md): E 44.7 vs E 41.2\n- [Buffer API + MCP vs Pamba](https://www.anchorterminal.com/compare/buffer-vs-pamba.md): B 67.9 vs E 41.2\n- [bundle.social vs Pamba](https://www.anchorterminal.com/compare/bundle-social-vs-pamba.md): C 60.3 vs E 41.2\n- [Zernio (formerly Late) API + MCP vs Pamba](https://www.anchorterminal.com/compare/late-vs-pamba.md): BB 71.5 vs E 41.2\n- [Metricool API + MCP vs Pamba](https://www.anchorterminal.com/compare/metricool-vs-pamba.md): F 31.4 vs E 41.2\n- [Mixpost API + MCP vs Pamba](https://www.anchorterminal.com/compare/mixpost-vs-pamba.md): C 55.2 vs E 41.2\n- [OneUp API + MCP vs Pamba](https://www.anchorterminal.com/compare/oneup-vs-pamba.md): F 24.7 vs E 41.2\n- [Pamba vs Post Bridge API + MCP](https://www.anchorterminal.com/compare/pamba-vs-post-bridge.md): E 41.2 vs E 44.1\n- [Pamba vs Postiz API + MCP](https://www.anchorterminal.com/compare/pamba-vs-postiz.md): E 41.2 vs D 47.1\n- [Pamba vs Publer API + MCP](https://www.anchorterminal.com/compare/pamba-vs-publer.md): E 41.2 vs E 42.3\n- [Pamba vs Repostit](https://www.anchorterminal.com/compare/pamba-vs-repostit.md): E 41.2 vs F 34.4\n- [Pamba vs Typefully](https://www.anchorterminal.com/compare/pamba-vs-typefully.md): E 41.2 vs D 46.4\n- [Pamba vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/pamba-vs-upload-post.md): E 41.2 vs D 52.5\n- [Pamba vs Sprout Social API](https://www.anchorterminal.com/compare/pamba-vs-sprout-social.md): E 41.2 vs C 56\n- [Pamba vs TwitterAPI.io MCP](https://www.anchorterminal.com/compare/pamba-vs-twitterapi-io-mcp.md): E 41.2 vs D 51.8\n- [Pamba vs X MCP](https://www.anchorterminal.com/compare/pamba-vs-x-mcp.md): E 41.2 vs C 54.3\n- [Pamba vs Xpoz MCP](https://www.anchorterminal.com/compare/pamba-vs-xpoz-mcp.md): E 41.2 vs E 41.5\n- [Pamba vs SocialCannon](https://www.anchorterminal.com/compare/pamba-vs-socialcannon.md): E 41.2 vs C 54.5\n\n## Verify this listing\n\nFor the vendor. The badge or a plain link to this page verifies the listing, from a page on pamba.app or one of its subdomains. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{\"slug\": \"pamba\", \"url\": \"…\"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify\n\nHTML badge:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/pamba\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/pamba.svg\" alt=\"Pamba on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e\n```\n\nMarkdown badge, for a README:\n\n```markdown\n[![Pamba on Anchor Terminal](https://www.anchorterminal.com/badges/pamba.svg)](https://www.anchorterminal.com/tools/pamba)\n```\n\nPlain link:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/pamba\"\u003ePamba on Anchor Terminal\u003c/a\u003e\n```\n\n## Share this listing\n\nFor the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Pamba is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.\n\n- Dark: https://www.anchorterminal.com/assets/share/pamba-dark.png\n- Light: https://www.anchorterminal.com/assets/share/pamba-light.png\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-13", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.8", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Terminal", "url": "https://www.anchorterminal.com/tools/" }, { "name": "Social media posting APIs", "url": "https://www.anchorterminal.com/categories/social-media" }, { "name": "Pamba", "url": "" } ], "description": "Pamba makes AI avatar short-form videos and posts them to TikTok, Instagram and Facebook, through an app, a REST API and a remote MCP server. It also sells accounts it runs on its own iPhones, which those platforms forbid.", "facts": [ "rank #1334 of 1524", "OAuth auth", "0 desk reviews" ], "h1": "Pamba", "image": "https://www.anchorterminal.com/assets/og/tools-pamba.png", "path": "/tools/pamba", "published": "2026-10-01", "section": "tools", "title": "Pamba review (2026): pricing, alternatives and grade E", "toc": null, "updated": "2026-11-13", "url": "https://www.anchorterminal.com/tools/pamba" }, "tokens": { "markdown": 6650, "slim": 1530 }, "version": 1 }