| Vendor | Canto | Pimcore GmbH |
|---|
| HQ | USA (Atlanta, GA) | Austria (Salzburg) |
|---|
| Founded | 1990 | 2013 |
|---|
| Ownership | PE-backed (JMI Equity) | independent (venture-backed; Series B led by Nordwind Growth, 2022) |
|---|
| Target market | Mid-market | Mid-market, enterprise |
|---|
| Deployment | SaaS | On-premise, Private cloud, PaaS |
|---|
| Hosting regions | US, EU, Canada, Australia | Not public |
|---|
| Pricing model | quote-only packages (4 tiers) + paid add-ons | annual subscription per edition (no per-user fees); Community free below EUR/USD 5M revenue; PaaS tiers |
|---|
| Public pricing | No | Yes |
|---|
| SSO | SAML | OIDC |
|---|
| Certifications | SOC 2 Type 2, ISO 27001, HIPAA, TX-RAMP | None published |
|---|
| Analyst coverage | Forrester Wave DAM Systems Q1 2026: Strong Performer | Gartner MQ PIM 2026: Visionary (vendor-reported) · Gartner MQ MDM 2026: Niche Player · Gartner MQ DXP 2025: included (placement not stated) · Gartner Peer Insights VoC DXP 2024: Customers' Choice |
|---|
| API style (overview) | REST | REST, GraphQL, webdav |
|---|
| OpenAPI spec | Yes | Partial |
|---|
| Webhooks (overview) | UI only | YesDatahub Webhooks, Enterprise edition only |
|---|
| Official MCP server | YesProduct Hub MCP — PIM data only, no DAM MCP | Yesself-hosted, experimental: Datahub Simple REST MCP endpoint (Enterprise) and Pimcore Agent MCP tool groups |
|---|
| API base URL | https://{tenant}.{region}/api/v1 | https://{host}/pimcore-graphql-webservices/{config} · https://{host}/pimcore-studio/api |
|---|
| API styles | REST | REST, GraphQL, WebDAV |
|---|
| Authentication | OAuth 2.0 authorization code, OAuth 2.0 client credentials | API key, Session login, OAuth 2.0 PKCE, Personal token |
|---|
| Token lifetime | Access 30 days; refresh 365 days, rotated; no refresh for client_credentials | OAuth 2.1 (experimental): access 1 h, refresh 30 days (defaults); API keys static |
|---|
| Rate limit | Per endpoint, 50-1,000 req/min by level; HTTP 429 | Studio API 500 req/min per IP, MCP 3,000/min (defaults, configurable); Datahub: none documented |
|---|
| Pagination | offset (start/limit, max 1,000); marker on reports; page on users | GraphQL first/after offset; Studio page/pageSize; Simple REST page_cursor (search_after) |
|---|
| Webhooks (API) | Admin UI only, 14 event types, no retries (Product Hub: API-managed) | Datahub Webhooks (Enterprise): UI-configured, custom headers, no signature, one attempt |
|---|
| API spec | OpenAPI 3.0.1 (11 files) + Postman collection | OpenAPI 3.1 for Studio API on GitHub (POCL, not archived); GraphQL schema per endpoint |
|---|
| Official SDKs | None official (JS sample; community PHP clients) | none official (PHP API in-process; Studio UI SDK for plugins) |
|---|