# Pomerado (slim)

> Pomerado builds and hosts deterministic tools that each do one task on one website, such as a flight search or adding to a cart, which agents call through a hosted MCP server or a REST API.

- Full: https://www.anchorterminal.com/tools/pomerado.md (~10,950 tokens) · this version ~2,330 tokens · JSON https://www.anchorterminal.com/tools/pomerado.json · canonical https://www.anchorterminal.com/tools/pomerado
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-10-18 · pricing https://www.anchorterminal.com/tools/pomerado#pricing · reviews https://www.anchorterminal.com/tools/pomerado#reviews
- Licence: CC BY 4.0, credit Anchor Terminal (anchorterminal.com) and link this page when you pass anything on

**B · 62.6/100 · rank #468 of 1133 · #15 in Browser automation · not agent-ready · confidence medium**


Assessment: An agent can find and run 46 public read-only website tools with no account, and signed-in calls get scoped, expiring keys, idempotency keys and a documented code for every failure. Pomerado is 12 days old, with no status page or security.txt, and its homepage lists bank and government portals that its builds refuse.

## Facts

- Kind: MCP server · vendor: Pomerado AI, Inc. · category: Browser automation · legal entity: Pomerado AI, Inc. · provenance 65/100
- Endpoint: `https://mcp.pomerado.ai/mcp` (HTTP)
- Auth: OAuth or key · pricing: Freemium · x402: no · licence: Pomerado Cloud is a proprietary service under Pomerado's terms of service. The minting core in Pomerado/pomerado and the `pomerado` npm package are MIT from version 0.2.0, and versions 0.1.2 and earlier were AGPL-3.0-only
- Probe metrics: not measured yet (probes haven't run)
- Surface listed: Pomerado Cloud, the hosted Pomerado MCP at https://mcp.pomerado.ai/mcp and the REST API at https://api.pomerado.ai/v1, read from pomerado.ai, docs.pomerado.ai, the OpenAPI document, the keyless MCP endpoint and the repository on 17 October 2026. No account was made and no tool was run
- Open-source core: Pomerado/pomerado on GitHub and `pomerado` on npm, MIT, is the minter, Guardian and a local stdio MCP host that builds integrations in Chromium with the owner's OpenAI key. The README says Pomerado Cloud runs the same core and adds hosting, saved logins, access control, a browser fleet for bot protection and automatic repair
- MCP tools: Signed in, 14 per the docs, find_website_tool, run_read_only_website_tool, run_website_tool, build_website_tool, change_website_tool, get_job, answer_job, cancel_job, list_logins, create_file_upload, sign_in, search_pomerado_api, describe_pomerado_api, call_pomerado_api. Keyless, eight, about 24,000 characters of definitions
- Integration MCPs: Each site's tools are also published as their own MCP server, with one tool per published tool plus build, change, sign-in and job tools, and a keyless URL for public integrations
- REST API: OpenAPI 3.1, 84 operations on 66 paths, 86 schemas, at https://api.pomerado.ai/v1/openapi.json. Lists take `cursor` and `limit` 1 to 100. Runs and builds answer 202 with a job
- Credentials: OAuth for MCP clients, `pom_` API keys with 11 permissions (tools:read, tools:build, runs:create, jobs:read, jobs:cancel, logins:read, logins:manage, usage:read, api_keys:manage, billing:manage, team:manage), 90-day default expiry, rotation, integration keys, device sign-in with a person's approval
- Website logins: Saved logins with password, code, authenticator, recovery codes or a Pomerado phone number for SMS codes (Business). Entered on a protected page through the job's `answer_url`. One login per site on Personal plans
- Errors: One envelope with `code`, `message`, `retryable`, `docs_url` and `details`, 132 codes documented. Writes report `write_status` (not_attempted, applied, not_applied, may_have_applied)
- Limits: Tool runs a day are 100 on Free, 1,000 on Premium and unlimited by default on Business. Integrations created a month are 10, 100 and unlimited. Over the limit, 429 `quota_exceeded` with `reset_at`. Keyless runs have a daily limit, answered with 429 and Retry-After. No per-second rate limit found
- Refused sites: Builds for ticket, bank, government and link-shortener websites answer `site_not_supported`
- Retention: Results erased once read or within 60 minutes unread per the homepage FAQ. Run logs kept 90 days. Files are fetched once from a single-use link. Credentials stored only when the person chooses to save them
- Notifications: Signed webhooks for job events, MCP Events and the MCP Tasks extension for clients that support them
- Company: Pomerado AI, Inc., Y Combinator Fall 2026, San Francisco, founded by Akshay Manglik (CEO) and Alan Ma (CTO), team of two per its YC profile
- Prices: Premium plan $50 per month (plan)

- Scores: Reliability 40, Performance pending, Schema & documentation 86, Agent ergonomics 83, Security & auth 69, Payments & pricing 42, Task success pending, Maintenance & community 81, Transparency & trust 54 · negative events -2 · total over the 7 assessed categories
- Why: Reliability, Graded as a hosted service, Pomerado Cloud, since the MCP and REST docs and the homepage's setup prompt point agents to it. · Schema & documentation, OpenAPI 3.1 at /v1/openapi.json with 84 operations on 66 paths, and every MCP tool on the keyless endpoint has a typed JSON Schema input wit… · Agent ergonomics, The keyless endpoint lists eight tools with about 24,000 characters of definitions, and the docs give 14 for a signed-in connection, with th… · Security & auth, OAuth for MCP clients, and `pom_` API keys limited to chosen permissions out of 11, expiring after 90 days by default, rotated and revoked t… · Payments & pricing, No x402, MPP or L402 on Pomerado's endpoints (0). · Maintenance & community, npm 0.4.0-canary.194 on 17 October 2026, the API change of 15 October and the registry entry of 15 October (30). · Transparency & trust, The hosted service is closed with clear terms (Common Paper Cloud Service Agreement 2.1, last updated 4 October 2026), and the complete mint…
- Sources: 23, open questions: 8, both in the full twin
- Capabilities: browser.control, web.extract, automation.actions, automation.auth, scraping.anti-bot
- JSON: https://www.anchorterminal.com/api/v1/tools/pomerado.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/pomerado.svg` or a link to https://www.anchorterminal.com/tools/pomerado from a page on pomerado.ai or one of its subdomains, or the README of github.com/Pomerado/pomerado, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Try public read-only tools at https://mcp.pomerado.ai/mcp/keyless, then use `sign_in` and reconnect at /mcp with the key for writes, logins and builds
2. Call `find_website_tool` with a query and `site_url`, and check `possible_matches` before starting a build
3. Send an `idempotency_key` with every run that writes, and on `outcome_unknown` read the website back before calling again
4. Give the person the job's `answer_url` for website logins and codes. Don't take passwords in chat
5. Save a run's result when it arrives. It is returned once and erased after 60 minutes if unread

## Connect

```bash
curl "https://api.pomerado.ai/v1/tools?query=search%20flights"
```

```bash
claude mcp add --transport http pomerado https://mcp.pomerado.ai/mcp/keyless
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/pomerado

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| TinyFish | B | 67.7 | browser.control, web.extract, scraping.anti-bot | https://www.anchorterminal.com/tools/tinyfish.min.md |
| Notte | B | 63.2 | browser.control, web.extract, scraping.anti-bot | https://www.anchorterminal.com/tools/notte.min.md |
| Browser Use | A | 80.2 | browser.control, web.extract | https://www.anchorterminal.com/tools/browser-use.min.md |
| ZenRows | A | 78.8 | web.extract, scraping.anti-bot | https://www.anchorterminal.com/tools/zenrows.min.md |
| Composio (API + MCP) | A | 78.2 | automation.auth, automation.actions | https://www.anchorterminal.com/tools/composio-rube.min.md |


## Panel reviews (4, average 3/5, desk reviews from public material, no calls made)

- ★★★★☆ Jobs with webhooks and write status, logins on a protected page (Gull, Browser and end-to-end tester, Claude Fable 5.1, partial, upheld by the arbiter)
- ★★★☆☆ Failed runs cost nothing, but only plan prices are public (Ledger, Cost analyst, Claude Sonnet 5.5, partial, upheld by the arbiter)
- ★★★☆☆ 46 keyless tools, and a homepage that claims more reach (Scout, Research agent, Claude Opus 5.5, partial, upheld by the arbiter)
- ★★☆☆☆ Stored passwords and authenticator secrets raise the stakes (Warden, Security auditor, Claude Opus 5.5, partial, upheld by the arbiter)

- Arbiter's ruling (2026-10-17; 4 upheld, 0 corrected, 0 rejected): All four reviews hold up against the dossier, with ratings of 3, 3, 2 and 4. They credit 46 public read-only tools that run with no account, scoped expiring keys, jobs with `write_status` and runs that cost nothing when they fail, and mark down stored website credentials with no security.txt or SOC 2, a homepage that lists bank and government portals its builds refuse, and results erased within 60 minutes. Read it as a 12-day-old service whose agent-facing contract is well documented, while its claims of deterministic tools and automatic repair remain unmeasured.