Buddy vs Travis CI

Buddy's REST API manages its visual CI/CD pipelines end to end — projects, actions, environments, runs, sandboxes, and Git operations — and is described as covering the same permission model as the web app itself. Its docs state plainly that authentication is performed with OAuth2, sending requests with a Bearer access_token, which this run reconfirmed live: an unauthenticated call to api.buddy.works/user returned a 401 "Wrong authentication data" response while still carrying access-control-allow-origin: * on both the request and its OPTIONS preflight, resolving the previously unknown CORS support to open. Buddy's own pricing page lists a free plan (limited pipeline minutes and one seat) alongside paid Pro and Hyper tiers, making it freemium rather than a flat fee.

Travis CI's REST API reads and manages builds, repositories, branches, and jobs, and its docs specify a token-based Authorization: token "<token>" header rather than an OAuth redirect flow, reconfirming the stored API Key auth model. A live GET against api.travis-ci.com returned a structured JSON response (not a raw connection error), and the same request sent with an Origin header carried access-control-allow-origin: * on both the GET and its OPTIONS preflight, resolving the previously unknown CORS support to open. Travis CI's own pricing page still lists an "Open Source Only" free tier alongside paid Linux/FreeBSD plans, so it remains freemium rather than fully paid.