{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "kintsugi", "name": "Kintsugi", "vendor": "Kintsugi AI, Inc.", "vendorUrl": "https://trykintsugi.com", "kind": "http-api", "category": "tax", "summary": "Kintsugi is a hosted sales tax, VAT and GST compliance platform. Its API estimates tax, records transactions, customers and exemptions, and manages nexus, registrations and filings. Two MCP servers connect AI assistants to the API and to account data.", "url": "https://www.anchorterminal.com/tools/kintsugi", "markdownUrl": "https://www.anchorterminal.com/tools/kintsugi.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/kintsugi.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/kintsugi.json", "repo": "https://github.com/kintsugi-tax/kintsugi-tax-python-sdk", "license": "Proprietary service under the Kintsugi Terms of Service. The Python SDK repository is MIT", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.trykintsugi.com", "packages": [ { "registry": "pypi", "name": "kintsugi-tax-platform-sdk" }, { "registry": "npm", "name": "@kintsugi-tax/tax-platform-sdk" } ], "auth": "mixed", "authNotes": "API keys are self-serve in the app under Configuration, API Keys, but only on a paid plan that includes them, and the pricing page lists API access under Premium, which is arranged through sales. The Tenanted API takes the key in `Api-Key`. v1, the SDKs and the docs MCP server take `x-api-key` with `x-organization-id`. A key belongs to one organisation, can expire, and has no scopes. Key and user management endpoints accept only an Owner or Admin session token. The account-data MCP server uses OAuth 2.1 with PKCE, dynamic client registration and the scope `read:user_data`, signed in with the app login.", "pricing": "paid", "pricingNotes": "API access is listed only under Premium, which is priced on request. Free is $0 with no card and covers exposure monitoring, CSV imports and no-code integrations, without API keys. Starter starts at $75 per filing or registration. No free tier or sandbox with live API access was found, so an agent can't start on the API without a Premium plan. The API Lab in the docs runs against simulated responses (https://trykintsugi.com/pricing, checked 2026-10-08).", "priceSummary": "$75 / tx", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API docs, the OpenAPI file or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": 55, "popularity": { "githubStars": null, "npmWeekly": 71, "pypiWeekly": 10, "asOf": "2026-10-08" }, "docsUrl": "https://docs.trykintsugi.com", "llmsTxt": "https://docs.trykintsugi.com/llms.txt", "openapi": "https://api.trykintsugi.com/openapi.json", "capabilities": [ "tax.calculate", "tax.transactions", "tax.filing", "tax.exemptions" ], "tags": [ "hosted", "paid", "closed-source", "api-key", "oauth", "mcp", "openapi", "llms-txt", "python", "typescript", "java", "php", "ruby", "sales-led", "status-page", "soc2" ], "lastRelease": "2026-10-07", "graded": true, "anchor": { "graded": true, "score": 60.7, "grade": "C", "agentReady": false, "rank": 392, "ranked": true, "rankOf": 722, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 75, "maintenance": 78, "payments": 13, "reliability": 73, "schema": 87, "security": 52, "transparency": 60 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 73, "points": 14.6, "reason": "Graded on the public API with the hosted lines. Statuspage at status.trykintsugi.com with five components, among them API (20). No incident in the 90 days to 8 October 2026. The only real entry is 16 March 2026, elevated API errors, minor, about seven and a half hours (30). No general rate limit was found in the docs. One endpoint, `POST /filings/{filing_id}/enhanced-data/rebuild`, states 10 requests a minute (2). The error guide says to retry 429, 500 and 503 with exponential backoff and jitter, creates are idempotent on `externalId` and `source`, and one import endpoint takes an `idempotencyKey`. No `Retry-After` header is documented (11). The pricing page lists SLA-backed premium support, and no uptime SLA document was found (0). The Tenanted API and v1 carry no beta label (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 87, "points": 14.14, "reason": "OpenAPI 3.1 is public at `https://api.trykintsugi.com/openapi.json` with 901 operations, covering v1, partner and admin paths. No downloadable file was found for the date-versioned Tenanted API, whose 287 operations a release are documented in the reference (22). `llms.txt`, a `.md` twin of every page and `llms-full.txt` (10). Reference pages state what a call does, when a selector is needed and what each status means, and MCP tool descriptions say whether a call is read-only or changes data. Some v1 descriptions are one line (16). 205 enums and 683 maxLength constraints in the spec, with required fields marked. Several v1 filters are free strings that take comma-separated values (12). 866 examples in the spec, plus a documented error envelope and a table of 20 error codes (14). Tenanted releases are dated and chosen with `Api-Version`, and the changelog is public with dated entries. Changes marked breaking were applied to the pinned 2026-07-21 release (13)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 75, "points": 12.19, "reason": "List endpoints take `limit` and a cursor, with no field selection found. The docs MCP server returns 55 tool definitions of about 185 KB in all, three of them over 25 KB each, and the account-data server has 46 (10). Keyset cursors, sort and order, and filters by date, status, source, customer and country (18). One envelope with a stable `code`, `requestId` and field-level `errors` naming each field. v1 error shapes vary by endpoint, per the changelog (18). Creates are idempotent on `externalId` and `source`, and all 55 MCP tools set readOnlyHint, destructiveHint and idempotentHint. No general idempotency key header (17). Five official SDKs (Python, TypeScript, Java, PHP, Ruby), which cover v1 only. An estimate needs three required fields plus line items and an address (12)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 52, "points": 9.1, "reason": "Two credential models. An API key is tied to one organisation, shown once, revocable at once, with optional expiry and several keys allowed for rotation, and no scopes (22 on its own). The account-data MCP server uses OAuth 2.1 with PKCE (S256), dynamic client registration and one scope, `read:user_data` (27 on its own). Scored between the two (24). Kintsugi says all 46 tools on the account-data server are read-only, the docs MCP server marks 23 of its 55 tools as changing data and tells the client to confirm with the user, and key management needs an Owner or Admin session. The API key has no read-only mode (13). Responses carry customer names and descriptions written by others, and no injection guidance was found (3). Every error carries a `requestId`. No audit log of API calls was found (2). SOC 2 Type II per the security page and a 72-hour breach notice in the terms. No `security.txt`, disclosure policy or bug bounty found (10)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 13, "points": 1.63, "reason": "No x402, MPP or L402 (0). Free is $0 and Starter starts at $75 per filing or registration, both public, but API access is listed only under Premium, which is priced on request (5). The Free plan needs no card, and the account-data MCP server asks only for a Kintsugi login. API keys need a paid plan that includes them, so we scored the free tier as partial (8). Signup happens in a browser, and the endpoint that creates API keys accepts only a signed-in Owner or Admin session token (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 78, "points": 6.83, "reason": "The API changelog's newest entry is 7 October 2026, and release 2026-10-06 shipped the day before (30). 33 changelog entries on eight dates from 17 September to 7 October 2026 (20). Closed service with a public changelog, support by email, phone and live chat, and a developer community marked coming soon (10). Five official SDKs generated with Speakeasy. Python 0.13.0 is dated 15 September 2026 and `@kintsugi-tax/tax-platform-sdk` 0.10.2 is dated 7 July 2026, and they cover v1 only. Neither MCP server is in the official registry (11). The Python SDK repository is MIT with Dependabot updates merged (7)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 60, "points": 5.25, "note": "editorial 44, provenance 75", "reason": "Closed service with clear terms, last updated 29 September 2026, naming Kintsugi AI, Inc. of Delaware. The SDKs are MIT (15). The terms give 60 days to retrieve data after termination and deletion on request, and allow Customer Data to be used to improve the models Kintsugi runs for all customers. The DPA of 26 August 2026 says processing happens in the United States and promises 30 days' notice of a new sub-processor. The privacy policy is dated 13 April 2025 (17). No deprecation policy with dates was found. v1 is labelled legacy with no end date, and deprecated fields are described as removed in future releases (5). The DPA states the United States as the processing location. No sub-processor list was found on the public pages, and the Drata trust centre was not read (7)." } ], "assessment": { "date": "2026-10-08", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "List endpoints take `limit` and a cursor, with no field selection found. The docs MCP server returns 55 tool definitions of about 185 KB in all, three of them over 25 KB each, and the account-data server has 46 (10). Keyset cursors, sort and order, and filters by date, status, source, customer and country (18). One envelope with a stable `code`, `requestId` and field-level `errors` naming each field. v1 error shapes vary by endpoint, per the changelog (18). Creates are idempotent on `externalId` and `source`, and all 55 MCP tools set readOnlyHint, destructiveHint and idempotentHint. No general idempotency key header (17). Five official SDKs (Python, TypeScript, Java, PHP, Ruby), which cover v1 only. An estimate needs three required fields plus line items and an address (12).", "maintenance": "The API changelog's newest entry is 7 October 2026, and release 2026-10-06 shipped the day before (30). 33 changelog entries on eight dates from 17 September to 7 October 2026 (20). Closed service with a public changelog, support by email, phone and live chat, and a developer community marked coming soon (10). Five official SDKs generated with Speakeasy. Python 0.13.0 is dated 15 September 2026 and `@kintsugi-tax/tax-platform-sdk` 0.10.2 is dated 7 July 2026, and they cover v1 only. Neither MCP server is in the official registry (11). The Python SDK repository is MIT with Dependabot updates merged (7).", "payments": "No x402, MPP or L402 (0). Free is $0 and Starter starts at $75 per filing or registration, both public, but API access is listed only under Premium, which is priced on request (5). The Free plan needs no card, and the account-data MCP server asks only for a Kintsugi login. API keys need a paid plan that includes them, so we scored the free tier as partial (8). Signup happens in a browser, and the endpoint that creates API keys accepts only a signed-in Owner or Admin session token (0).", "reliability": "Graded on the public API with the hosted lines. Statuspage at status.trykintsugi.com with five components, among them API (20). No incident in the 90 days to 8 October 2026. The only real entry is 16 March 2026, elevated API errors, minor, about seven and a half hours (30). No general rate limit was found in the docs. One endpoint, `POST /filings/{filing_id}/enhanced-data/rebuild`, states 10 requests a minute (2). The error guide says to retry 429, 500 and 503 with exponential backoff and jitter, creates are idempotent on `externalId` and `source`, and one import endpoint takes an `idempotencyKey`. No `Retry-After` header is documented (11). The pricing page lists SLA-backed premium support, and no uptime SLA document was found (0). The Tenanted API and v1 carry no beta label (10).", "schema": "OpenAPI 3.1 is public at `https://api.trykintsugi.com/openapi.json` with 901 operations, covering v1, partner and admin paths. No downloadable file was found for the date-versioned Tenanted API, whose 287 operations a release are documented in the reference (22). `llms.txt`, a `.md` twin of every page and `llms-full.txt` (10). Reference pages state what a call does, when a selector is needed and what each status means, and MCP tool descriptions say whether a call is read-only or changes data. Some v1 descriptions are one line (16). 205 enums and 683 maxLength constraints in the spec, with required fields marked. Several v1 filters are free strings that take comma-separated values (12). 866 examples in the spec, plus a documented error envelope and a table of 20 error codes (14). Tenanted releases are dated and chosen with `Api-Version`, and the changelog is public with dated entries. Changes marked breaking were applied to the pinned 2026-07-21 release (13).", "security": "Two credential models. An API key is tied to one organisation, shown once, revocable at once, with optional expiry and several keys allowed for rotation, and no scopes (22 on its own). The account-data MCP server uses OAuth 2.1 with PKCE (S256), dynamic client registration and one scope, `read:user_data` (27 on its own). Scored between the two (24). Kintsugi says all 46 tools on the account-data server are read-only, the docs MCP server marks 23 of its 55 tools as changing data and tells the client to confirm with the user, and key management needs an Owner or Admin session. The API key has no read-only mode (13). Responses carry customer names and descriptions written by others, and no injection guidance was found (3). Every error carries a `requestId`. No audit log of API calls was found (2). SOC 2 Type II per the security page and a 72-hour breach notice in the terms. No `security.txt`, disclosure policy or bug bounty found (10).", "transparency": "Closed service with clear terms, last updated 29 September 2026, naming Kintsugi AI, Inc. of Delaware. The SDKs are MIT (15). The terms give 60 days to retrieve data after termination and deletion on request, and allow Customer Data to be used to improve the models Kintsugi runs for all customers. The DPA of 26 August 2026 says processing happens in the United States and promises 30 days' notice of a new sub-processor. The privacy policy is dated 13 April 2025 (17). No deprecation policy with dates was found. v1 is labelled legacy with no end date, and deprecated fields are described as removed in future releases (5). The DPA states the United States as the processing location. No sub-processor list was found on the public pages, and the Drata trust centre was not read (7)." }, "sources": [ { "what": "docs index for agents", "url": "https://docs.trykintsugi.com/llms.txt", "seen": "2026-10-08" }, { "what": "full docs text (API keys, authentication, error handling, SDKs, MCP, reference)", "url": "https://docs.trykintsugi.com/llms-full.txt", "seen": "2026-10-08" }, { "what": "API changelog and releases", "url": "https://docs.trykintsugi.com/reference/changelog", "seen": "2026-10-08" }, { "what": "OpenAPI 3.1 file", "url": "https://api.trykintsugi.com/openapi.json", "seen": "2026-10-08" }, { "what": "unauthenticated API response and headers", "url": "https://api.trykintsugi.com/products/categories", "seen": "2026-10-08" }, { "what": "docs MCP server, initialize and tools/list", "url": "https://docs.trykintsugi.com/mcp", "seen": "2026-10-08" }, { "what": "MCP setup guide", "url": "https://docs.trykintsugi.com/docs/mcp/integration", "seen": "2026-10-08" }, { "what": "account-data MCP OAuth metadata", "url": "https://mcp.trykintsugi.com/.well-known/oauth-authorization-server", "seen": "2026-10-08" }, { "what": "account-data MCP announcement, 18 September 2026", "url": "https://trykintsugi.com/blog/kintsugi-announces-mcp-server", "seen": "2026-10-08" }, { "what": "help centre, MCP tool reference", "url": "https://help.trykintsugi.com/en-US/trykintsugi/article/INdEZWuF-kintsugi-mcp-tool-reference", "seen": "2026-10-08" }, { "what": "help centre, connect to Claude", "url": "https://help.trykintsugi.com/en-US/trykintsugi/article/Wy-qtcW7-connect-your-kintsugi-account-to-claude-for-tax-compliance-queries", "seen": "2026-10-08" }, { "what": "pricing", "url": "https://trykintsugi.com/pricing", "seen": "2026-10-08" }, { "what": "terms of service", "url": "https://trykintsugi.com/terms-of-service", "seen": "2026-10-08" }, { "what": "privacy policy", "url": "https://trykintsugi.com/privacy-policy", "seen": "2026-10-08" }, { "what": "data processing agreement", "url": "https://trykintsugi.com/data-processing-agreement", "seen": "2026-10-08" }, { "what": "security page", "url": "https://trykintsugi.com/security-and-privacy", "seen": "2026-10-08" }, { "what": "status page components", "url": "https://status.trykintsugi.com/api/v2/components.json", "seen": "2026-10-08" }, { "what": "status incident history", "url": "https://status.trykintsugi.com/api/v2/incidents.json", "seen": "2026-10-08" }, { "what": "npm package", "url": "https://registry.npmjs.org/@kintsugi-tax%2ftax-platform-sdk", "seen": "2026-10-08" }, { "what": "PyPI package", "url": "https://pypi.org/pypi/kintsugi-tax-platform-sdk/json", "seen": "2026-10-08" }, { "what": "Python SDK repository", "url": "https://github.com/kintsugi-tax/kintsugi-tax-python-sdk", "seen": "2026-10-08" }, { "what": "official MCP registry search", "url": "https://registry.modelcontextprotocol.io/v0.1/servers?search=kintsugi", "seen": "2026-10-08" }, { "what": "domain registration", "url": "https://rdap.verisign.com/com/v1/domain/trykintsugi.com", "seen": "2026-10-08" } ], "openQuestions": [ "unchecked: the Drata trust centre at app.drata.com linked from the security page, which may hold a sub-processor list and the SOC 2 report. We didn't load it", "unchecked: the live tool definitions of the account-data MCP server, which need a Kintsugi login. The count of 46 and the read-only claim come from the help centre and the announcement", "unchecked: Maven Central, Packagist and RubyGems for the Java, PHP and Ruby SDKs. We read npm, PyPI and the Python repository only", "Whether advance notice of the breaking changes of September and October 2026 reached customers by email. None was found in the changelog or docs", "Whether the docs MCP server calls the API. The setup guide says it never proxies calls or sees credentials, while its own configuration sends `X-API-KEY` and the server's instructions say each tool calls the API with that key", "Whether the account-data MCP server works on the Free plan. The help article asks for an active account and names no plan", "What the general rate limits are. Only one endpoint states a number", "Whether an uptime SLA exists in Premium contracts. The pricing page names SLA-backed premium support only", "No downloadable OpenAPI file was found for the Tenanted API. The public file covers v1, partner and admin paths", "The terms bar using the services to train or improve any machine-learning model and bar competitors from benchmarking. Recorded as a fact with no deduction" ] }, "negative": -3, "negativeNotes": [ "2 to 7 October 2026. The API changelog marks five changes applied to the pinned 2026-07-21 release as breaking (address access rules and import `userId` on 2 October, filing pause window and a changed error code on 5 October, billing callers on 7 October), while the docs say a pinned release can't change an integration. Each is documented with migration steps on the day, so we deducted the minimum of 3. No advance notice was found (https://docs.trykintsugi.com/reference/changelog)" ], "verdict": "The docs are built for machine readers, with llms.txt, Markdown pages, a public OpenAPI 3.1 file, a dated changelog and an MCP server whose 55 tools carry read-only and destructive annotations. API keys need the custom-priced Premium plan and carry no scopes, no general rate limit is published, and breaking changes reached the pinned 2026-07-21 release in October 2026.", "bestFor": "An agent working for a seller that already has Kintsugi Premium and wants estimates, transaction sync, exemptions, nexus, registrations and filing status through one API, or read-only answers about an account through the OAuth MCP server.", "strengths": [ "Docs served for agents. `llms.txt` indexes 682 pages, every page has a `.md` twin, and `llms-full.txt` holds the full text", "Public OpenAPI 3.1 file at `https://api.trykintsugi.com/openapi.json`, readable without a key, with 901 operations and 1,325 schemas", "The MCP server at `https://docs.trykintsugi.com/mcp` lists 55 tools, each with readOnlyHint, destructiveHint and idempotentHint set", "A second MCP server at `https://mcp.trykintsugi.com/mcp` uses OAuth 2.1 with PKCE and dynamic client registration, and Kintsugi says its 46 tools are all read-only", "One error envelope on the Tenanted API with a stable `code`, a `requestId` and field-level `errors`, and creates that are idempotent on `externalId` and `source`" ], "weaknesses": [ "API access, SDKs and real-time tax calculation are listed only under Premium, which is priced on request. API keys need a paid plan that includes them", "Nine changelog entries from 17 September to 7 October 2026 are marked breaking, five on the pinned 2026-07-21 release and four on v1. No advance notice was found", "No general rate limit is published and no `Retry-After` header is documented. The docs say only to retry 429, 500 and 503 with backoff", "API keys act on a whole organisation with no scopes or read-only mode. Expiry is the only setting", "No `security.txt`, disclosure policy, bug bounty, uptime SLA document or subprocessor list was found on the public pages" ], "agentNotes": [ "Send `Api-Key` and pin `Api-Version` (for example `2026-10-06`) on Tenanted API calls to `https://api.trykintsugi.com`. Without the header a request runs against `2026-07-21`", "Use `x-api-key` and `x-organization-id` with `/v1` paths for the SDKs and the docs MCP server. They don't cover the Tenanted API", "Call `POST /tax-estimations` for a quote. Nothing is stored. Record the sale with a transaction create, which answers 202, then check `processingStatus` before reading tax totals", "Always send `externalId` on creates. A repeat with the same `externalId` and `source` returns the stored record with 200 and doesn't apply the new fields", "Branch on the error `code`, not the message. Retry 429, 500 and 503 with exponential backoff, and restart paging from the first page on `stale_cursor`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 60.7 } ], "editorialScores": { "ergonomics": 75, "maintenance": 78, "payments": 13, "reliability": 73, "schema": 87, "security": 52, "transparency": 44 }, "provenanceScore": 75 }, "connect": { "install": "pip install kintsugi-tax-platform-sdk", "http": "curl https://api.trykintsugi.com/products/categories \\\n -H \"Api-Key: $KINTSUGI_API_KEY\" \\\n -H \"Api-Version: 2026-07-21\"", "config": { "mcpServers": { "kintsugi": { "headers": { "X-API-KEY": "your-api-key", "X-ORGANIZATION-ID": "your-org-id" }, "url": "https://docs.trykintsugi.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/tax.calculate", "tool": "https://letme.dev/kintsugi" }, "notable": [ "Two API generations share one host. The Tenanted API is versioned by date with the `Api-Version` header (releases 2026-07-21 and 2026-10-06, 287 operations each), and v1 keeps `/v1` paths and is labelled legacy (https://docs.trykintsugi.com/reference/changelog)", "The changelog lists 33 entries on eight dates from 17 September to 7 October 2026, nine marked breaking, five of them applied to the pinned 2026-07-21 release (https://docs.trykintsugi.com/reference/changelog)", "The MCP server at https://docs.trykintsugi.com/mcp answered tools/list with 55 tools, one for each documented v1 operation, 32 read-only and 23 that change data, each with annotations (checked 2026-10-08)", "A second MCP server at https://mcp.trykintsugi.com/mcp, announced on 18 September 2026, uses OAuth 2.1 and, Kintsugi says, has 46 read-only tools across nine areas of an account (https://trykintsugi.com/blog/kintsugi-announces-mcp-server)", "The MCP setup guide says the docs server never proxies API calls or sees credentials, while its configuration sends `X-API-KEY` and the server's own instructions say each tool calls the API with that key (https://docs.trykintsugi.com/docs/mcp/integration)", "The terms bar using the services to train, fine-tune or improve any machine-learning model, and allow Kintsugi to use Customer Data to improve the models it runs for all customers (https://trykintsugi.com/terms-of-service, sections 4.3 and 8.2)", "The status page has one incident on record, elevated API errors on 16 March 2026 for about seven and a half hours, and none in the 90 days to 8 October 2026 (https://status.trykintsugi.com)" ], "area": "domain-data", "details": [ { "label": "APIs", "value": "Tenanted API at https://api.trykintsugi.com with no path prefix, 287 operations in each of releases 2026-07-21 and 2026-10-06. v1 under `/v1`, 55 documented operations, labelled legacy. A separate Partner API is documented too" }, { "label": "Calculation", "value": "`POST /tax-estimations` (v1 `POST /v1/tax/estimate`) returns tax without storing anything. Tax is zero where no active registration covers the destination unless `simulateActiveRegistration` is set" }, { "label": "Transactions", "value": "Creating a transaction answers 202 and tax is calculated just after. Credit notes record refunds. Creates are idempotent on `externalId` and `source`" }, { "label": "MCP servers", "value": "Docs and API server at https://docs.trykintsugi.com/mcp, Streamable HTTP, 55 tools over v1 with the API key in headers. Account-data server at https://mcp.trykintsugi.com/mcp, OAuth 2.1, 46 read-only tools per Kintsugi" }, { "label": "Credentials", "value": "Organisation API key with optional expiry (one month, six months, one year or never), several keys allowed, no scopes. OAuth 2.1 with PKCE, dynamic client registration and scope `read:user_data` for the account-data MCP server" }, { "label": "Rate limits", "value": "No general limit published. `POST /filings/{filing_id}/enhanced-data/rebuild` allows 10 requests a minute. 429 answers with code `rate_limited`" }, { "label": "Errors", "value": "Tenanted API envelope of `code`, `message`, `requestId` and `errors`, with 20 documented codes and four field-level codes. v1 error shapes vary by endpoint" }, { "label": "Paging", "value": "Keyset cursors with `limit` and `cursor` on the Tenanted API, plus `sort`, `order` and filters. v1 uses `page` and `size`" }, { "label": "Pricing", "value": "Free $0. Starter from $75 per filing or registration. Premium quoted by sales, and the only plan listed with API access, SDKs and coverage outside the US" }, { "label": "SDKs", "value": "Python `kintsugi-tax-platform-sdk` 0.13.0 (15 September 2026), TypeScript `@kintsugi-tax/tax-platform-sdk` 0.10.2 (7 July 2026), Java, PHP and Ruby, generated with Speakeasy, covering v1 only" }, { "label": "Certifications", "value": "SOC 2 Type II per trykintsugi.com/security-and-privacy. AES-256 at rest and TLS 1.2 or later in transit, per the same page" }, { "label": "Status", "value": "Statuspage at https://status.trykintsugi.com with five components, among them API and Filings and Registrations" }, { "label": "Data", "value": "Processed in the United States per the DPA of 26 August 2026. 60 days to retrieve data after termination, and deletion on request, per the terms" } ], "unitPrices": [ { "item": "Starter plan, per filing or registration", "unit": "tx", "usd": 75, "note": "Starting price. API access is not included in Starter and is listed only under Premium, which is quoted by sales" } ], "provenance": { "legalEntity": "Kintsugi AI, Inc.", "domain": "trykintsugi.com", "domainRegistered": "2023-03-10", "endpointOnVendorDomain": true, "terms": "https://trykintsugi.com/terms-of-service", "privacy": "https://trykintsugi.com/privacy-policy", "statusPage": "https://status.trykintsugi.com", "changelog": "https://docs.trykintsugi.com/reference/changelog", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The terms of service (last updated 29 September 2026) name Kintsugi AI, Inc., a Delaware corporation at 2261 Market St, Suite 5931, San Francisco, and cover the platform unless a signed Customer Agreement applies.", "The terms incorporate the privacy policy (last updated 13 April 2025) and the Data Processing Agreement at trykintsugi.com/data-processing-agreement (last updated 26 August 2026).", "The API answers at api.trykintsugi.com and the MCP servers at docs.trykintsugi.com and mcp.trykintsugi.com, all on the vendor's domain.", "trykintsugi.com/.well-known/security.txt returns 404. The security page names no disclosure address or bug bounty.", "RDAP for trykintsugi.com gives a registration date of 2023-03-10 and GoDaddy as registrar." ], "score": 75, "checks": [ { "check": "Legal entity named", "value": "Kintsugi AI, Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "trykintsugi.com, registered 2023-03-10 (3 years)", "points": 7, "max": 15, "state": "part" }, { "check": "Endpoint on the vendor's domain", "value": "api.trykintsugi.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 7 of the 7 things a reader expects, and has 3 clauses that cost points", "points": 4, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 7 of the 8 things a reader expects", "points": 9.3, "max": 10, "state": "part" }, { "check": "Status page", "value": "status.trykintsugi.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ], "policies": [ { "kind": "terms", "url": "https://trykintsugi.com/terms-of-service", "state": "read", "readAt": "2026-10-08", "statedDate": "2026-09-29", "words": 6942, "points": 4, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated: September 29, 2026", "says": "Last updated 2026-09-29" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "THESE TERMS AND ANY DISPUTE ARISING OUT OF OR RELATING TO THEM OR THE SERVICES ARE GOVERNED BY THE INTERNAL SUBSTANTIVE LAWS OF THE STATE OF CALIFORNIA AND THE UNITED STATES OF AMERICA, WITHOUT REGARD TO CHOICE-OF-LAW RULES.", "says": "The law of Internal Substantive Laws" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "Kintsugi's aggregate liability arising out of a free trial, sandbox, or Beta Service will not exceed US$100.", "says": "Capped at US$100" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "Kintsugi may investigate any suspected violation and may suspend or terminate access as provided in Section 10." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "The updated Terms will be posted on the Site with a new \"Last updated\" date, and Kintsugi will notify you of material changes by email or in the Services at least thirty (30) days before they take effect.", "says": "Gives thirty days of notice before a change" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "You may not use the Services if you are located in a country subject to a U.S." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": true, "quote": "are not subject to any service-level, support, or warranty commitment;" } ], "toKnow": [ { "key": "training", "label": "Says it may use customer content to train or improve models, and no opt-out was found", "found": true, "quote": "Kintsugi may also use Customer Data to operate, secure, maintain, troubleshoot, and improve the Services, including to develop and improve the models, algorithms, taxonomies, and automation Kintsugi uses to serve all customers.", "costsPoints": true }, { "key": "terms.automated", "label": "Restricts automated access", "found": true, "quote": "(d) access the Services by any automated means (including scrapers, crawlers, or bots) other than through Kintsugi's documented APIs, or systematically retrieve data to build a database, compilation, or directory;", "costsPoints": true }, { "key": "terms.benchmark", "label": "Restricts benchmarking or competitive use", "found": true, "quote": "Government list of prohibited or restricted parties, or if you are a competitor of Kintsugi accessing the Services to evaluate, benchmark, or build a competing product.", "costsPoints": true }, { "key": "terms.arbitration", "label": "Requires arbitration or waives class actions", "found": true, "quote": "YOU UNDERSTAND THAT BY AGREEING TO ARBITRATION YOU ARE WAIVING THE RIGHT TO A JURY TRIAL AND TO BRING OR PARTICIPATE IN A CLASS ACTION." } ], "notes": [ { "date": "2026-10-08", "text": "Customers may not use the Services or Kintsugi content to train, fine-tune or improve any machine-learning or artificial-intelligence model.", "quote": "(e) use the Services or Kintsugi Content to build, train, benchmark, or support a product or service that competes with the Services, or to train, fine-tune, or improve any machine-learning or artificial-intelligence model;" }, { "date": "2026-10-08", "text": "Kintsugi exports customer data only on a request made within 60 days after the subscription ends.", "quote": "Upon request made within sixty (60) days after your subscription ends, Kintsugi will provide an export of Customer Data stored on its systems in a commonly used format or limited access to the Services to retrieve it, at no additional charge." }, { "date": "2026-10-08", "text": "Kintsugi may name the customer and show its logo as a customer unless the customer objects in writing.", "quote": "Unless you notify us otherwise in writing, Kintsugi may identify you as a customer by name and logo in accordance with any marketing guidelines you provide." } ] }, { "kind": "privacy", "url": "https://trykintsugi.com/privacy-policy", "state": "read", "readAt": "2026-10-08", "statedDate": "2025-04-13", "words": 5889, "points": 9.3, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated April 13, 2025", "says": "Last updated 2025-04-13" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "Want to learn more about what we do with any information we collect?" }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "We may share information in specific situations and with specific third parties." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "We will not sell or share personal information in the future belonging to website visitors, users, and other consumers.", "says": "Says it does not sell personal data" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "In certain circumstances, you may also have the right to object to the processing of your personal information." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "If you have questions or comments about your privacy rights, you may email us at help@trykintsugi.com.", "says": "help@trykintsugi.com" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": false } ], "notes": [ { "date": "2026-10-08", "text": "Inputs, outputs and personal information used with the AI products are shared with third-party AI providers, including OpenAI and Amazon Bedrock.", "quote": "As outlined in this Privacy Notice, your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of our AI Products for purposes outlined in \"WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?\"" } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/kintsugi.json", "live": { "slug": "kintsugi", "probe": { "target": "https://api.trykintsugi.com", "method": "get", "lastAt": "2026-10-08T21:12:12.887517805Z", "lastOk": true, "lastStatus": 404, "lastMs": 596, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 572, "p95ms24h": 658, "samples24h": 21, "samples30d": 21, "days": [ { "date": "2026-10-08", "probes": 21, "ok": 21 } ] }, "vendorStatus": { "page": "https://status.trykintsugi.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-08T21:06:10.4373132Z" }, "updatedAt": "2026-10-08T21:12:12.887517805Z" } } }