{
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-10-14",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.4",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run"
  },
  "tool": {
    "slug": "fabric",
    "name": "Fabric",
    "vendor": "Commerce Fabric, Inc.",
    "vendorUrl": "https://fabric.inc",
    "kind": "http-api",
    "category": "commerce",
    "summary": "Commerce software from Commerce Fabric, Inc. for brands and retailers, now sold as Merchandising Studio (product data for AI shopping) and Dropship. Its REST APIs, documented as v3, cover orders, inventory, catalogue, pricing, carts and dropship.",
    "url": "https://www.anchorterminal.com/tools/fabric",
    "markdownUrl": "https://www.anchorterminal.com/tools/fabric.md",
    "slimMarkdownUrl": "https://www.anchorterminal.com/tools/fabric.min.md",
    "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/fabric.json",
    "license": "Proprietary SaaS under Fabric's Terms and Conditions (last updated 1 January 2026) and an order form",
    "transports": [
      "http"
    ],
    "remoteUrl": "https://api.fabric.inc/v3",
    "packages": [],
    "auth": "oauth",
    "authNotes": "Server-to-server calls use a System App with the OpenID Connect client credentials flow. A merchant admin creates the app in the Copilot console, picks one role (Admin, Developer Admin, Developer Viewer, Editor, Viewer or a module editor) and receives a client ID and secret. System tokens last 10 minutes and have no refresh token. User Apps use the authorisation code flow with PKCE for shoppers, with 30-minute user tokens and rotating refresh tokens. Every call also carries an x-fabric-tenant-id header. The Product Agent API uses its own client credentials token, valid for 60 minutes.",
    "pricing": "paid",
    "pricingNotes": "No public prices. fabric.inc/pricing returns 404, the developer docs say to reach out for a trial account, and the sites link to a demo request. Services run under an order form. The terms say beta services are free of charge (checked 14 October 2026).",
    "priceSummary": "Paid",
    "where": "hosted",
    "x402": {
      "level": "no",
      "evidence": "No x402, MPP or L402 in llms.txt, the 69 OpenAPI files listed there, the terms or the site pages read on 14 October 2026.",
      "endpoints": []
    },
    "toolCount": null,
    "popularity": {
      "githubStars": null,
      "npmWeekly": null,
      "pypiWeekly": null,
      "asOf": "2026-10-14"
    },
    "docsUrl": "https://developer.fabric.inc/v3/home",
    "llmsTxt": "https://developer.fabric.inc/llms.txt",
    "openapi": "https://developer.fabric.inc/openapi/orders/v3/orders.openapi.yaml",
    "capabilities": [
      "commerce.orders",
      "commerce.products",
      "commerce.cart",
      "commerce.checkout",
      "commerce.headless"
    ],
    "tags": [
      "hosted",
      "enterprise",
      "closed-source",
      "oauth",
      "openapi",
      "llms-txt",
      "webhooks",
      "sales-led",
      "sla",
      "soc2"
    ],
    "graded": true,
    "anchor": {
      "graded": true,
      "score": 43.7,
      "grade": "E",
      "agentReady": false,
      "rank": 949,
      "ranked": true,
      "rankOf": 1076,
      "categoryRank": 18,
      "methodology": "0.4",
      "run": "2026-10-01",
      "scores": {
        "ergonomics": 57,
        "maintenance": 15,
        "payments": 0,
        "reliability": 23,
        "schema": 79,
        "security": 62,
        "transparency": 55
      },
      "pending": [
        "performance",
        "tasks"
      ],
      "breakdown": [
        {
          "key": "reliability",
          "name": "Reliability",
          "weight": 16,
          "effectiveWeight": 20,
          "score": 23,
          "points": 4.6,
          "reason": "No status page was found. status.fabric.inc does not resolve and neither the site nor the docs link one (0 of 20). With no readable incident history, the line takes the 5-point default (5 of 30). No rate-limit figures were found in the docs or the 69 OpenAPI files (0 of 15). Some specs list 429 responses, but no Retry-After header, backoff guidance or idempotency keys were found for writes (3 of 15). The SLA, last updated 1 January 2026, commits to 99.9 per cent monthly availability with credits from 5 to 40 per cent (10 of 10). The v3 APIs are in production use, but the docs home page labels them legacy and Product Agent is beta, so half marks (5 of 10). Total 23."
        },
        {
          "key": "performance",
          "name": "Performance",
          "weight": 10,
          "effectiveWeight": 0,
          "pending": true,
          "points": 0,
          "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes."
        },
        {
          "key": "schema",
          "name": "Schema \u0026 documentation",
          "weight": 13,
          "effectiveWeight": 16.25,
          "score": 79,
          "points": 12.84,
          "reason": "69 public OpenAPI 3.0 files listed in llms.txt, about 980 operations (25 of 25). llms.txt, and every docs page served as Markdown at its path plus .md (10 of 10). Operation descriptions state purpose and filters, such as the order search explaining that filters go in the body and that 10 orders return by default, but few say when not to use an endpoint (12 of 20). Typed schemas with required fields and more than 1,000 enum declarations across the files (12 of 15). Request and response examples throughout, and standardised error codes with a published code list, implemented only for Orders and Inventory (12 of 15). Versions are in the path (v1, v2, v3) and release notes are dated, but the newest are from July 2025 and the Product Agent release notes link returned 404 (8 of 15). Total 79."
        },
        {
          "key": "ergonomics",
          "name": "Agent ergonomics",
          "weight": 13,
          "effectiveWeight": 16.25,
          "score": 57,
          "points": 9.26,
          "reason": "Responses are sized with offset and limit, with no field selection found (15 of 25). Order search takes filters for type, status and date range in the body, with offset and limit paging (18 of 20). Orders and Inventory errors carry a type, a stable errorCode, a message and the service and endpoint, while other services do not yet use the framework (14 of 20). No idempotency keys or safe-retry guidance were found for writes. Order, shipment and allocation documents carry a version number, and SERVICE-4006 reports a concurrent modification (5 of 20). Every call needs a bearer token and a tenant header, the defaults are sensible, and no official SDK was found (5 of 15). Total 57."
        },
        {
          "key": "security",
          "name": "Security \u0026 auth",
          "weight": 14,
          "effectiveWeight": 17.5,
          "score": 62,
          "points": 10.85,
          "reason": "OpenID Connect client credentials for system apps with one role each, 10-minute tokens and no refresh token, and the authorisation code flow with PKCE for shopper apps. Apps are created and managed by a merchant admin in Copilot. Roles are coarse rather than per-endpoint scopes (25 of 30). Least privilege is possible with the Viewer and Developer Viewer roles and editors limited to one module, but no confirmation step for destructive calls was found (14 of 20). The APIs return the merchant's own catalogue, order and customer data rather than outside content (10 of 15). The data security page says access logs and system changes are recorded, but no operator-facing API audit log was found, beyond a webhook event log in the v2 orders API (5 of 15). SOC 2 Type I and Type II and PCI DSS SAQ-A are listed in the docs. No security.txt, disclosure policy or bug bounty was found (8 of 20). Total 62."
        },
        {
          "key": "payments",
          "name": "Payments \u0026 pricing",
          "weight": 10,
          "effectiveWeight": 12.5,
          "score": 0,
          "points": 0,
          "reason": "No x402, MPP or L402 on any endpoint (0 of 40). No public prices. fabric.inc/pricing returns 404 and the sites link to a demo request (0 of 20). The docs say to reach out for a trial account, so no free tier or trial is available without sales contact (0 of 20). A person signs an order form and an admin creates the app credentials in Copilot (0 of 20). Total 0."
        },
        {
          "key": "tasks",
          "name": "Task success",
          "weight": 10,
          "effectiveWeight": 0,
          "pending": true,
          "points": 0,
          "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored."
        },
        {
          "key": "maintenance",
          "name": "Maintenance \u0026 community",
          "weight": 7,
          "effectiveWeight": 8.75,
          "score": 15,
          "points": 1.31,
          "reason": "No dated API release since the July 2025 release notes. The Product Agent OpenAPI file returned a Last-Modified header of 9 June 2026, 127 days before this check, which is the newest dated change found (10 of 30). No dated release notes or changelog entries in the last 90 days (0 of 20). Support runs through a ticket portal at support.fabric.inc, which was not tested, and the public changelog has stopped (5 of 15). No official SDKs and no MCP server for the commerce APIs. The docs MCP server only searches documentation (0 of 15). No public repository, package or CI to inspect (0 of 10). Total 15."
        },
        {
          "key": "transparency",
          "name": "Transparency \u0026 trust",
          "weight": 7,
          "effectiveWeight": 8.75,
          "score": 55,
          "points": 4.81,
          "note": "editorial 35, provenance 74",
          "reason": "Closed service with published terms (Terms and Conditions of 1 January 2026, SLA, website terms of use) (15 of 30). Data handling statements disagree in places. The terms delete customer content 90 days after termination, while the security page says data is kept for one month after the contract ends. The privacy policy dates from 14 January 2021, and the Data Processing Addendum it relies on returned 404. The terms say inputs may go to third-party language models and that Fabric may keep de-identified derived data (10 of 30). Deprecated v2 endpoints are marked in the reference and beta services carry 30 days' notice of discontinuation, but the legacy label on the v3 docs carries no dates (5 of 20). Hosting on AWS and third-party language models are disclosed, with no subprocessor list or data locations (5 of 20). Total 35."
        }
      ],
      "assessment": {
        "date": "2026-10-14",
        "basis": "public evidence",
        "confidence": "medium",
        "notes": {
          "ergonomics": "Responses are sized with offset and limit, with no field selection found (15 of 25). Order search takes filters for type, status and date range in the body, with offset and limit paging (18 of 20). Orders and Inventory errors carry a type, a stable errorCode, a message and the service and endpoint, while other services do not yet use the framework (14 of 20). No idempotency keys or safe-retry guidance were found for writes. Order, shipment and allocation documents carry a version number, and SERVICE-4006 reports a concurrent modification (5 of 20). Every call needs a bearer token and a tenant header, the defaults are sensible, and no official SDK was found (5 of 15). Total 57.",
          "maintenance": "No dated API release since the July 2025 release notes. The Product Agent OpenAPI file returned a Last-Modified header of 9 June 2026, 127 days before this check, which is the newest dated change found (10 of 30). No dated release notes or changelog entries in the last 90 days (0 of 20). Support runs through a ticket portal at support.fabric.inc, which was not tested, and the public changelog has stopped (5 of 15). No official SDKs and no MCP server for the commerce APIs. The docs MCP server only searches documentation (0 of 15). No public repository, package or CI to inspect (0 of 10). Total 15.",
          "payments": "No x402, MPP or L402 on any endpoint (0 of 40). No public prices. fabric.inc/pricing returns 404 and the sites link to a demo request (0 of 20). The docs say to reach out for a trial account, so no free tier or trial is available without sales contact (0 of 20). A person signs an order form and an admin creates the app credentials in Copilot (0 of 20). Total 0.",
          "reliability": "No status page was found. status.fabric.inc does not resolve and neither the site nor the docs link one (0 of 20). With no readable incident history, the line takes the 5-point default (5 of 30). No rate-limit figures were found in the docs or the 69 OpenAPI files (0 of 15). Some specs list 429 responses, but no Retry-After header, backoff guidance or idempotency keys were found for writes (3 of 15). The SLA, last updated 1 January 2026, commits to 99.9 per cent monthly availability with credits from 5 to 40 per cent (10 of 10). The v3 APIs are in production use, but the docs home page labels them legacy and Product Agent is beta, so half marks (5 of 10). Total 23.",
          "schema": "69 public OpenAPI 3.0 files listed in llms.txt, about 980 operations (25 of 25). llms.txt, and every docs page served as Markdown at its path plus .md (10 of 10). Operation descriptions state purpose and filters, such as the order search explaining that filters go in the body and that 10 orders return by default, but few say when not to use an endpoint (12 of 20). Typed schemas with required fields and more than 1,000 enum declarations across the files (12 of 15). Request and response examples throughout, and standardised error codes with a published code list, implemented only for Orders and Inventory (12 of 15). Versions are in the path (v1, v2, v3) and release notes are dated, but the newest are from July 2025 and the Product Agent release notes link returned 404 (8 of 15). Total 79.",
          "security": "OpenID Connect client credentials for system apps with one role each, 10-minute tokens and no refresh token, and the authorisation code flow with PKCE for shopper apps. Apps are created and managed by a merchant admin in Copilot. Roles are coarse rather than per-endpoint scopes (25 of 30). Least privilege is possible with the Viewer and Developer Viewer roles and editors limited to one module, but no confirmation step for destructive calls was found (14 of 20). The APIs return the merchant's own catalogue, order and customer data rather than outside content (10 of 15). The data security page says access logs and system changes are recorded, but no operator-facing API audit log was found, beyond a webhook event log in the v2 orders API (5 of 15). SOC 2 Type I and Type II and PCI DSS SAQ-A are listed in the docs. No security.txt, disclosure policy or bug bounty was found (8 of 20). Total 62.",
          "transparency": "Closed service with published terms (Terms and Conditions of 1 January 2026, SLA, website terms of use) (15 of 30). Data handling statements disagree in places. The terms delete customer content 90 days after termination, while the security page says data is kept for one month after the contract ends. The privacy policy dates from 14 January 2021, and the Data Processing Addendum it relies on returned 404. The terms say inputs may go to third-party language models and that Fabric may keep de-identified derived data (10 of 30). Deprecated v2 endpoints are marked in the reference and beta services carry 30 days' notice of discontinuation, but the legacy label on the v3 docs carries no dates (5 of 20). Hosting on AWS and third-party language models are disclosed, with no subprocessor list or data locations (5 of 20). Total 35."
        },
        "sources": [
          {
            "what": "llms.txt with the OpenAPI index",
            "url": "https://developer.fabric.inc/llms.txt",
            "seen": "2026-10-14"
          },
          {
            "what": "docs home page, NEON and the legacy v3 and v2 links",
            "url": "https://developer.fabric.inc/home",
            "seen": "2026-10-14"
          },
          {
            "what": "v3 docs home",
            "url": "https://developer.fabric.inc/v3/home",
            "seen": "2026-10-14"
          },
          {
            "what": "Orders OpenAPI file, one of 69 read",
            "url": "https://developer.fabric.inc/openapi/orders/v3/orders.openapi.yaml",
            "seen": "2026-10-14"
          },
          {
            "what": "Product Agent OpenAPI file and its Last-Modified header",
            "url": "https://developer.fabric.inc/openapi/product-agent/product-agent.openapi.yaml",
            "seen": "2026-10-14"
          },
          {
            "what": "Product Agent overview, beta status",
            "url": "https://developer.fabric.inc/product-agent/overview",
            "seen": "2026-10-14"
          },
          {
            "what": "getting started with the APIs, trial account and token request",
            "url": "https://developer.fabric.inc/v3/getting-started/api-guides/getting-started-with-fabric-apis",
            "seen": "2026-10-14"
          },
          {
            "what": "authentication concepts, token lifetimes and flows",
            "url": "https://developer.fabric.inc/v3/getting-started/authentication-v3/concepts",
            "seen": "2026-10-14"
          },
          {
            "what": "creating a system app, roles",
            "url": "https://developer.fabric.inc/v3/platform/settings/api-apps/creating-system-app",
            "seen": "2026-10-14"
          },
          {
            "what": "standardised error codes",
            "url": "https://developer.fabric.inc/v3/error-codes/overview",
            "seen": "2026-10-14"
          },
          {
            "what": "security and compliance",
            "url": "https://developer.fabric.inc/v3/getting-started/api-guides/security-and-compliance",
            "seen": "2026-10-14"
          },
          {
            "what": "data security",
            "url": "https://developer.fabric.inc/v3/getting-started/data-security",
            "seen": "2026-10-14"
          },
          {
            "what": "July 2025 release summary, the newest dated release notes",
            "url": "https://developer.fabric.inc/v3/release-notes/july2025/release-summary",
            "seen": "2026-10-14"
          },
          {
            "what": "docs MCP server, handshake and tools/list",
            "url": "https://developer.fabric.inc/mcp",
            "seen": "2026-10-14"
          },
          {
            "what": "Terms and Conditions",
            "url": "https://fabric.inc/legal/terms-and-conditions",
            "seen": "2026-10-14"
          },
          {
            "what": "Service Level Agreement",
            "url": "https://fabric.inc/legal/service-level-agreement",
            "seen": "2026-10-14"
          },
          {
            "what": "privacy policy",
            "url": "https://fabric.inc/legal/privacy-policy",
            "seen": "2026-10-14"
          },
          {
            "what": "website terms of use, automated access clause",
            "url": "https://fabric.inc/legal/terms-of-use",
            "seen": "2026-10-14"
          },
          {
            "what": "home page and products (Merchandising Studio, Dropship)",
            "url": "https://fabric.inc/",
            "seen": "2026-10-14"
          },
          {
            "what": "robots.txt for the docs site",
            "url": "https://developer.fabric.inc/robots.txt",
            "seen": "2026-10-14"
          }
        ],
        "openQuestions": [
          "unchecked: whether the v3 order management, catalogue, pricing and cart APIs are still sold to new customers. The site markets only Merchandising Studio and Dropship, and the docs call v3 and v2 legacy products.",
          "unchecked: the Data Processing Addendum at https://fabric.inc/data-processing-addendum and the API licence at https://fabric.inc/api-license, both 404 on 14 October 2026.",
          "unchecked: rate limits. No figures were found in the docs or the OpenAPI files.",
          "unchecked: Product Agent release notes. The link from the docs home page returned 404.",
          "unchecked: support response times through support.fabric.inc, which was not tested.",
          "The founder's list suggested the commerce category, which fits the order, catalogue and cart APIs. Product Agent itself is closer to product-data enrichment for AI search and is in beta.",
          "The site footer says Fabric, Inc., while the terms, privacy policy and terms of use name Commerce Fabric, Inc. The listing uses Commerce Fabric, Inc."
        ]
      },
      "negative": 0,
      "verdict": "Public OpenAPI files for about 980 operations, llms.txt, client credentials with role-limited system apps, and a published 99.9 per cent SLA. Access needs a sales contract, with no public price or self-serve trial. The commerce docs are labelled legacy, the newest release notes date from July 2025, and no status page was found.",
      "bestFor": "A merchant-side API for retailers already on Fabric's order management, catalogue or dropship products.",
      "strengths": [
        "69 public OpenAPI files covering orders, inventory, catalogue, carts, pricing and dropship, listed in llms.txt",
        "System apps take one of ten roles, including Viewer and module-only editors, and tokens expire after 10 minutes",
        "Standardised JSON error codes with service and endpoint context for the Orders and Inventory APIs",
        "Published SLA of 99.9 per cent monthly availability with service credits up to 40 per cent"
      ],
      "weaknesses": [
        "No public price, free tier or self-serve signup. A trial account is arranged with Fabric",
        "The v3 and v2 commerce docs are labelled legacy, and the newest dated release notes are from July 2025",
        "No status page, rate-limit figures, Retry-After guidance or idempotency keys were found",
        "No official SDKs and no MCP server for the commerce APIs. The docs MCP server only searches documentation"
      ],
      "agentNotes": [
        "Get the tenant ID and a System App client ID and secret from the merchant's Copilot admin, with the narrowest role the task needs",
        "Request a new system token from {authURL}/v1/token every 10 minutes, since system apps receive no refresh token",
        "Send x-fabric-tenant-id on every call, and x-fabric-channel-id where the merchant sells in more than one channel",
        "Page order searches with offset and limit, because the default response returns 10 orders",
        "Read errorCode and context.endpoint in Orders and Inventory errors, and check for duplicates before retrying a write"
      ],
      "metrics": {
        "kind": "remote",
        "measured": false
      },
      "reviewCount": 0,
      "avgRating": 0,
      "history": [
        {
          "basis": "public evidence",
          "confidence": "medium",
          "grade": "E",
          "methodology": "0.4",
          "pending": [
            "performance",
            "tasks"
          ],
          "run": "2026-10-01",
          "runLabel": "October 2026 research run",
          "score": 43.7
        }
      ],
      "editorialScores": {
        "ergonomics": 57,
        "maintenance": 15,
        "payments": 0,
        "reliability": 23,
        "schema": 79,
        "security": 62,
        "transparency": 35
      },
      "provenanceScore": 74
    },
    "connect": {
      "http": "curl -X POST '{authURL}/v1/token' \\\n  -H 'content-type: application/x-www-form-urlencoded' \\\n  --data-urlencode 'grant_type=client_credentials' \\\n  --data-urlencode 'scope=s2s' \\\n  --data-urlencode 'client_id={clientId}' \\\n  --data-urlencode 'client_secret={clientSecret}'\ncurl https://api.fabric.inc/v3/product-attributes \\\n  -H 'Authorization: Bearer {token}' \\\n  -H 'x-fabric-tenant-id: {tenantId}'"
    },
    "letme": {
      "capability": "https://letme.dev/commerce.orders",
      "tool": "https://letme.dev/fabric"
    },
    "notable": [
      "llms.txt lists 69 OpenAPI files with about 980 operations across v1, v2 and v3 services, among them orders (53 operations), shipments, inventory, locations, catalogue, cart and checkout, customers, pricing and promotions, dropship and the Product Agent API (https://developer.fabric.inc/llms.txt)",
      "The docs home page now describes fabric NEON and Product Agent, and links the v3 and v2 commerce docs as documentation on legacy products (https://developer.fabric.inc/home)",
      "Product Agent, which monitors product visibility in AI search and enriches catalogue data, is marked beta, and Fabric says it is seeking partners (https://developer.fabric.inc/product-agent/overview)",
      "The newest dated release notes are for July 2025, covering smart order routing, standardised error codes, a Shopify integration and a beta Chrome extension. The Product Agent release notes link returned 404 (https://developer.fabric.inc/v3/release-notes/july2025/release-summary)",
      "The docs site runs a read-only documentation MCP server at https://developer.fabric.inc/mcp with two tools, search_fabric and query_docs_filesystem_fabric. It searches docs only and cannot call the commerce APIs (tools/list read 14 October 2026)",
      "A published SLA (last updated 1 January 2026) commits to 99.9 per cent monthly availability with service credits from 5 to 40 per cent, and excludes beta services (https://fabric.inc/legal/service-level-agreement)",
      "The docs list SOC 2 Type I, SOC 2 Type II and PCI DSS SAQ-A, and say card data goes through third-party gateways (https://developer.fabric.inc/v3/getting-started/api-guides/security-and-compliance)",
      "The website terms of use forbid any robot, spider or other automatic means to access the website, including monitoring or copying its material (https://fabric.inc/legal/terms-of-use)"
    ],
    "area": "business",
    "details": [
      {
        "label": "APIs",
        "value": "REST at https://api.fabric.inc/v3/{product}. Orders, shipments, allocations, invoices, inventory and locations, product catalogue, cart and checkout, customers, pricing and promotions, dropship for retailers and suppliers, and the Product Agent API at https://commerceos.aiagents.fabric.inc/api"
      },
      {
        "label": "Specs",
        "value": "69 OpenAPI 3.0 files listed in https://developer.fabric.inc/llms.txt, about 980 operations, versioned v1, v2 and v3 in the path"
      },
      {
        "label": "Credentials",
        "value": "System Apps (client credentials, scope s2s, 10-minute tokens, one role each) and User Apps (authorisation code with PKCE, 30-minute tokens, rotating refresh tokens). Product Agent tokens last 60 minutes"
      },
      {
        "label": "Roles",
        "value": "Admin, Developer Admin, Developer Viewer, Editor, Viewer, Experiences Editor, Experiences Publisher, pricing and promotions editor, Orders and Inventory Editor, Product Catalogue Editor"
      },
      {
        "label": "Errors",
        "value": "JSON with type, errorCode (for example SERVICE-4006), message and context naming the service and endpoint. Implemented for the Orders and Inventory APIs only"
      },
      {
        "label": "Webhooks",
        "value": "Order and inventory event webhooks configured in Copilot, and dropship webhook subscriptions for retailers and suppliers"
      },
      {
        "label": "SLA",
        "value": "99.9 per cent monthly availability, credits of 5 to 40 per cent, planned downtime capped at 480 minutes a year, beta services excluded (last updated 1 January 2026)"
      },
      {
        "label": "Docs MCP",
        "value": "https://developer.fabric.inc/mcp, read-only search over the docs and specs (search_fabric, query_docs_filesystem_fabric)"
      },
      {
        "label": "Certifications",
        "value": "SOC 2 Type I and Type II, PCI DSS SAQ-A, per the developer docs. Hosted on AWS"
      }
    ],
    "provenance": {
      "legalEntity": "Commerce Fabric, Inc.",
      "domain": "fabric.inc",
      "domainRegistered": "2019-08-08",
      "endpointOnVendorDomain": true,
      "terms": "https://fabric.inc/legal/terms-and-conditions",
      "privacy": "https://fabric.inc/legal/privacy-policy",
      "statusPage": "",
      "changelog": "https://developer.fabric.inc/v3/release-notes/july2025/release-summary",
      "securityTxt": "none",
      "checked": "2026-10-14",
      "notes": [
        "The Terms and Conditions (last updated 1 January 2026) and the website terms of use name Commerce Fabric, Inc., 455 Market St. PMB 66768 Suite 1940, San Francisco, California 94105-2448. The site footer reads Fabric, Inc., San Francisco and Toronto.",
        "The privacy policy is dated 14 January 2021. The Data Processing Addendum it and the terms link at https://fabric.inc/data-processing-addendum returned 404, as did https://fabric.inc/api-license, named as the API licence in the OpenAPI files.",
        "No status page was found. status.fabric.inc does not resolve.",
        "fabric.inc/.well-known/security.txt and api.fabric.inc/.well-known/security.txt return 404.",
        "RDAP for fabric.inc gives a registration date of 8 August 2019 and GoDaddy.com, LLC as registrar."
      ],
      "score": 74,
      "checks": [
        {
          "check": "Legal entity named",
          "value": "Commerce Fabric, Inc.",
          "points": 20,
          "max": 20,
          "state": "ok"
        },
        {
          "check": "Domain age",
          "value": "fabric.inc, registered 2019-08-08 (7 years)",
          "points": 11,
          "max": 15,
          "state": "part"
        },
        {
          "check": "Endpoint on the vendor's domain",
          "value": "api.fabric.inc",
          "points": 15,
          "max": 15,
          "state": "ok"
        },
        {
          "check": "Terms of service",
          "value": "read, states 7 of the 7 things a reader expects, and has 1 clause that costs points",
          "points": 8,
          "max": 10,
          "state": "part"
        },
        {
          "check": "Privacy policy",
          "value": "read, states 8 of the 8 things a reader expects",
          "points": 10,
          "max": 10,
          "state": "ok"
        },
        {
          "check": "Status page",
          "value": "not found",
          "points": 0,
          "max": 10,
          "state": "no"
        },
        {
          "check": "Changelog",
          "value": "published",
          "points": 10,
          "max": 10,
          "state": "ok"
        },
        {
          "check": "security.txt",
          "value": "not found",
          "points": 0,
          "max": 10,
          "state": "no"
        }
      ],
      "policies": [
        {
          "kind": "terms",
          "url": "https://fabric.inc/legal/terms-and-conditions",
          "state": "read",
          "readAt": "2026-10-14",
          "statedDate": "2026-01-01",
          "words": 3169,
          "points": 8,
          "max": 10,
          "expected": [
            {
              "key": "terms.date",
              "label": "Gives the date it was last updated",
              "found": true,
              "quote": "Last Updated: January 1, 2026",
              "says": "Last updated 2026-01-01"
            },
            {
              "key": "terms.law",
              "label": "Names the governing law or courts",
              "found": true,
              "quote": "…and any disputes arising out of or related hereto, will be governed exclusively by the internal laws of the State of California, without regard to its conflicts of laws rules or the United Nations Convention on the International Sale of Goods.\" State and federal California courts have exclusive dispute jurisdiction, w…",
              "says": "The law of the State of California"
            },
            {
              "key": "terms.liability",
              "label": "States a limit on its liability",
              "found": true,
              "quote": "\"TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THE AGGREGATE LIABILITY OF EITHER PARTY TOGETHER WITH ALL OF ITS AFFILIATES ARISING OUT OF OR RELATED TO THIS AGREEMENT EXCEED THE TOTAL AMOUNT OF FEES PAID OR PAYABLE BY CUSTOMER AND ITS AFFILIATES HEREUNDER FOR THE SERVICES GIVING RISE TO THE LIAB…",
              "says": "Capped at the fees paid in the 12 months before the claim"
            },
            {
              "key": "terms.termination",
              "label": "Says how the agreement or account can be ended",
              "found": true,
              "quote": "As exclusive remedy for warranty breach, (y) Fabric shall correct non-conforming Services at no charge, or (z) if unable to correct within commercially reasonable timeframe, Customer may terminate the applicable Order Form and receive pro-rata refund of pre-paid fees for defective Services from notice date."
            },
            {
              "key": "terms.changes",
              "label": "Says how changes to the terms are announced",
              "found": true,
              "quote": "Material changes require written notice and typically become effective within thirty days, unless Customer accepts updated Terms earlier through a specified mechanism.",
              "says": "Gives thirty days of notice before a change"
            },
            {
              "key": "terms.use",
              "label": "Lists what users may not do",
              "found": true,
              "quote": "Unless expressly permitted, Customer will not knowingly and intentionally:"
            },
            {
              "key": "terms.sla",
              "label": "Refers to a service level or uptime commitment",
              "found": true,
              "quote": "During the Term, Fabric grants Customer a \"limited, non-exclusive, non-transferrable, revocable, non-sublicensable right to access and use the Services.\" Fabric will provide Services, support, and maintenance according to service levels at https://fabric.inc/service-level-agreement."
            }
          ],
          "toKnow": [
            {
              "key": "terms.benchmark",
              "label": "Restricts benchmarking or competitive use",
              "found": true,
              "quote": "(j) Access Services to build competitive products or benchmark against non-Fabric services",
              "costsPoints": true
            }
          ],
          "notes": [
            {
              "date": "2026-10-14",
              "text": "Customer inputs to the AI functions may be sent to third-party services, and similar outputs may be generated for other customers.",
              "quote": "Inputs may be provided to third-party services to access AI Features. Similar Outputs may be generated for other customers based on their inputs."
            },
            {
              "date": "2026-10-14",
              "text": "The licence over customer content also covers creating de-identified and aggregated Derived Data, which includes performance benchmarks and usage telemetry.",
              "quote": "Customer grants Fabric a \"worldwide, revocable, non-transferrable, limited-term license during the Term to host, copy, transmit, and display Customer Content\" as necessary for Service provision and creating Derived Data (without Customer Personal Data)."
            },
            {
              "date": "2026-10-14",
              "text": "Fabric may use the customer's name and logo in press releases, presentations, case studies and on its website, and the customer may revoke this at any time.",
              "quote": "Customer grants Fabric the express right to use Customer's company logo and/or name in press releases, newsletters, investor and business presentations, case studies, and website to identify Customer as a Fabric customer."
            }
          ]
        },
        {
          "kind": "privacy",
          "url": "https://fabric.inc/legal/privacy-policy",
          "state": "read",
          "readAt": "2026-10-14",
          "statedDate": "2021-01-14",
          "words": 4304,
          "points": 10,
          "max": 10,
          "expected": [
            {
              "key": "privacy.date",
              "label": "Gives the date it was last updated",
              "found": true,
              "quote": "Last Updated: January 14, 2021",
              "says": "Last updated 2021-01-14"
            },
            {
              "key": "privacy.collected",
              "label": "Says what personal data is collected",
              "found": true,
              "quote": "When You access fabric.inc by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, un…"
            },
            {
              "key": "privacy.retention",
              "label": "Says how long data is kept",
              "found": true,
              "quote": "The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.",
              "says": "For as long as needed, with no period named"
            },
            {
              "key": "privacy.processors",
              "label": "Says who else receives the data",
              "found": true,
              "quote": "Service Provider means any natural or legal person who processes the data on behalf of the Company."
            },
            {
              "key": "privacy.sale",
              "label": "Says whether personal data is sold or shared for advertising",
              "found": true,
              "quote": "In order to exercise any of Your rights under the CCPA, and if you are a California resident, You can email or call us or visit our \"Do Not Sell My Personal Information\" section or web page.",
              "says": "Says it does not sell personal data"
            },
            {
              "key": "privacy.rights",
              "label": "Says what rights people have over their data",
              "found": true,
              "quote": "Under GDPR (General Data Protection Regulation), You can be referred to as the Data Subject or as the User as you are the individual using the Service."
            },
            {
              "key": "privacy.contact",
              "label": "Gives a privacy contact",
              "found": true,
              "quote": "If you have any questions about Fabric's Privacy Policy, please contact us at privacy@fabric.inc.",
              "says": "privacy@fabric.inc"
            },
            {
              "key": "privacy.transfers",
              "label": "Says where data is transferred or stored",
              "found": true,
              "quote": "It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction."
            }
          ],
          "toKnow": [
            {
              "key": "privacy.sells",
              "label": "Says it sells personal data or shares it for advertising",
              "found": true,
              "quote": "With Service Providers: We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to advertise on third party websites to You after You visited our Service, to contact You."
            },
            {
              "key": "old",
              "label": "Has not been updated for three years or more",
              "found": true,
              "quote": "Last Updated: January 14, 2021"
            }
          ],
          "notes": [
            {
              "date": "2026-10-14",
              "text": "Sessions in the signed-in Fabric application are recorded with PostHog, including on-screen content, and recording can be turned off on request.",
              "quote": "When You are signed in to the Fabric application, We record Your session using PostHog."
            }
          ]
        }
      ]
    },
    "pageJsonUrl": "https://www.anchorterminal.com/tools/fabric.json",
    "live": {
      "slug": "fabric",
      "probe": {
        "target": "https://api.fabric.inc/v3",
        "method": "get",
        "lastAt": "2026-10-14T09:41:50.740446708Z",
        "lastOk": true,
        "lastStatus": 404,
        "lastMs": 255,
        "authRequired": false,
        "uptime24h": 100,
        "uptime30d": 100,
        "p50ms24h": 259,
        "p95ms24h": 360,
        "samples24h": 17,
        "samples30d": 17,
        "days": [
          {
            "date": "2026-10-14",
            "probes": 17,
            "ok": 17
          }
        ]
      },
      "updatedAt": "2026-10-14T09:41:50.740446708Z"
    }
  }
}
