Where the reviewed products stand
Compare documented control across the named products and routes. Open a review for its plan, region and agreement (this is a selected sample).
0–10 on both axes · Higher and further right means more documented control
Exact scores & review links (3)
| Vendor | Data access & portability | Build & act |
|---|---|---|
| MaintainX ↗ | 4.7* | 6.3* |
| UpKeep ↗ | 7.1* | 5.3* |
| Permute ↗Publisher self-assessment | 8.0* | 7.1* |
Axes average three dimensions each: access, third-party access and exit horizontally; action, continuity and business logic vertically. Fixed 0–10 scale, midlines at 5 (overall grades use separate weights). * Some evidence is unresolved. Marker colors identify companies, not score bands. How to read the map ↗
Permute is included as a reference (it owns this site and is a publisher self-assessment). Its score is excluded from sample averages. Read the Permute review ↗
Work-order and asset APIs can have plan and acting-user restrictions. Reviews distinguish machine-readable records from complete equipment history, attachments and executable maintenance procedures.
Compare the six dimensions
| Overall control | |
|---|---|
| Data access | |
| Third-party accessibility | |
| External action | |
| Continuity | |
| Data exit | |
| Business logic and customization | |
Product scopes, dates & reviews
MaintainX
Maintenance management · Checked 2026-10-16
MaintainX REST v1 work-order list/create/update and customer bearer API keys; timestamp polling and signed webhook hints; Reporting API and OT integrations are separate.
Read findings and sources ↗UpKeep
Maintenance management · Checked 2026-10-16
UpKeep Enterprise REST work-order/asset APIs using organization API tokens; legacy administrator session tokens disclosed separately for excluded identity/webhook mutations.
Read findings and sources ↗| Customer control | MaintainX ↗ | UpKeep ↗ | Permute ↗ |
|---|---|---|---|
| Category | Maintenance management | Maintenance management | Databases and data platforms |
| Overall control | |||
| Data access | |||
| Third-party accessibility | |||
| External action | |||
| Continuity | |||
| Data exit | |||
| Business logic and customization | |||
| Assessment scope | MaintainX REST v1 work-order list/create/update and customer bearer API keys; timestamp polling and signed webhook hints; Reporting API and OT integrations are separate. | UpKeep Enterprise REST work-order/asset APIs using organization API tokens; legacy administrator session tokens disclosed separately for excluded identity/webhook mutations. | Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed. |
| Assessment checked | 2026-10-16 | 2026-10-16 | 2026-10-12 |
| Read the findings | Detailed review ↗ | Detailed review ↗ | Detailed review ↗ |
Scores are out of 10. * Incomplete evidence discounts verified capabilities (unknown answers stay unknown). Planned migration drives data exit. Scoring method ↗
Who can connect?
Yes No- Unknown
| Connection method | Customer credentials | Integrator credentials | Provider approval required |
|---|---|---|---|
| MaintainX ↗ | |||
| Customer organization REST API key ↗ | - | ||
| UpKeep ↗ | |||
| Enterprise organization API token ↗ | |||
| Legacy administrator session for excluded mutations ↗ | |||
| Permute ↗ | |||
| Scoped customer REST / TypeScript SDK ↗ | |||
| Permissioned end-user MCP ↗ | |||
A check means the column applies to that route (customer credentials can still require provider approval). Report exports use the customer account without separate API credentials. Open a connection method for its authentication, requirements and last review date.
What each review covers
MaintainX ↗
MaintainX documents customer-generated REST keys, work-order mutations and updated-time polling. Work orders use cursors, while assets/parts/purchase orders use offset pagination and require overlap plus deduplication.
MaintainX REST v1 work-order list/create/update and customer bearer API keys; timestamp polling and signed webhook hints; Reporting API and OT integrations are separate.
UpKeep ↗
UpKeep reserves API access for Enterprise and recommends organization tokens for long-running integrations. These inherit a chosen role and remain independent of an individual staff account.
UpKeep Enterprise REST work-order/asset APIs using organization API tokens; legacy administrator session tokens disclosed separately for excluded identity/webhook mutations.
Permute ↗
Scoped APIs expose SQL reads, managed records and customer-authored operation code. Customer-built apps are supported, while complete workspace recovery, outbound CDC and minimum-plan access terms remain unresolved.
Permute hosted workspaces / scoped REST and TypeScript SDK access to connected query sources, file datasets, managed database records, operation code and custom apps. Signed enterprise contracts and upstream vendor rights remain separate; no live tenant migration or reliability test was performed.