{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "morph-cloud", "name": "Morph Cloud", "vendor": "Morph Labs", "vendorUrl": "https://cloud.morph.so", "kind": "http-api", "category": "code-sandboxes", "summary": "Cloud virtual machines for AI agents from Morph Labs. Instances boot from snapshots and can be paused with memory intact, branched into copies, and driven through a REST API, Python and TypeScript SDKs and a CLI.", "url": "https://www.anchorterminal.com/tools/morph-cloud", "markdownUrl": "https://www.anchorterminal.com/tools/morph-cloud.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/morph-cloud.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/morph-cloud.json", "repo": "https://github.com/morph-labs/morph-python-sdk", "license": "Proprietary hosted service with no published terms found. The Python and TypeScript SDKs are Apache-2.0", "transports": [ "http" ], "remoteUrl": "https://cloud.morph.so/api", "packages": [ { "registry": "pypi", "name": "morphcloud" }, { "registry": "npm", "name": "morphcloud" } ], "auth": "api-key", "authNotes": "Bearer API key on https://cloud.morph.so/api, created in the dashboard at cloud.morph.so/web/keys after a browser signup. The SDKs and CLI read `MORPH_API_KEY`. Keys are bound to an organisation and can be listed and deleted through the API. An agent inside a devbox can use a devbox agent token limited to that devbox and to named scopes.", "pricing": "usage", "pricingNotes": "Billed in Morph Compute Units. 1 MCU is 1 vCPU-hour with 4 GB RAM-hours and 16 GB disk-hours, or 5 TB snapshot-hours, at a stated standard rate of $0.05. The Free plan is $0 a month with 0 MCUs, so compute needs a purchase. Developer is $40 a month with 1,000 MCUs and Team is $250 a month with 7,500, with more billed as used (https://cloud.morph.so/web/pricing, checked 2026-10-08). No sandbox or free credit was found that lets an agent start without paying.", "priceSummary": "$0.05 / unit", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the OpenAPI file or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 3, "npmWeekly": 339, "pypiWeekly": 13199, "asOf": "2026-10-08" }, "docsUrl": "https://cloud.morph.so/docs", "llmsTxt": "https://cloud.morph.so/docs/llms.txt", "openapi": "https://cloud.morph.so/api/openapi.json", "capabilities": [ "sandbox.code", "sandbox.fs", "sandbox.persist" ], "tags": [ "hosted", "openapi", "llms-txt", "python", "typescript", "cli", "status-page" ], "lastRelease": "2026-09-01", "graded": true, "anchor": { "graded": true, "score": 50.8, "grade": "D", "agentReady": false, "rank": 515, "ranked": true, "rankOf": 629, "categoryRank": 9, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 61, "maintenance": 58, "payments": 20, "reliability": 63, "schema": 72, "security": 39, "transparency": 25 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 63, "points": 12.6, "reason": "Graded on the hosted lines. Status page at status.cloud.morph.so on Better Stack with one component, Morph Cloud API, and 90 days of daily history (20). The 90 days to 8 October 2026 show no downtime and the incidents page lists none for August to October 2026. The last incident in the feed is dated 5 December 2025. We gave 25 of 30 because the page has a single monitor and its JSON marks that monitor `not_monitored` (25). No request rate limits found. The pricing page publishes plan caps, such as 64, 256 or 1,024 vCPUs and 8, 32 or 128 concurrent devboxes (5). The OpenAPI file documents a 503 with `Retry-After: 1` on snapshot, branch, pause and reboot, a 429 on one token route and an `Idempotency-Key` header on key creation only. The Python SDK retries exec with exponential backoff. No general retry guidance found (8). No SLA found (0). The docs carry no beta label, but the only changelog entry is the beta release of 19 November 2024, the API is version 0.1.0 and no stability statement was found (5)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 72, "points": 11.7, "reason": "Public OpenAPI 3.1 file at cloud.morph.so/api/openapi.json with 52 paths and 69 operations (25). llms.txt and llms-full.txt under /docs (10). 67 of 69 operations have a description, many of one line, while the guides explain pause against stop and devboxes against instances (14). Enums for TTL action, HTTP auth mode and instance status, with patterns and ranges on names, ports and page sizes. Metadata is a free string map (12). Guides give Python, TypeScript and CLI examples. 37 operations document only a 422 beyond success, the error schema is `detail` with an optional `error_code`, and no error-code reference was found. An unauthenticated call returned plain text `unauthorized` (8). The changelog page has one entry from 19 November 2024 and says it is not a complete history. The API path has no version and the SDK tags have no release notes (3)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 61, "points": 9.91, "reason": "Instance and snapshot objects are bounded, list calls take a limit and a metadata filter, and there is no field selection. Exec returns stdout and stderr whole (15). `/api/instance/list` and `/api/snapshot/list` take `page` and `limit` (default 50, maximum 1,000) and a metadata filter. The older list routes are unpaginated (16). Newer routes document 400, 401, 402, 403, 404, 409 and 503 with a coded error body. Most routes document only 422, and no error reference was found (10). `Idempotency-Key` exists on API key creation only. Snapshot, branch, pause and reboot return `Retry-After` on a 503 refused before dispatch (8). Starting an instance needs only a snapshot id. Python SDK and CLI are current. The TypeScript SDK is 0.0.20 from 6 October 2025, the version the docs pin (12)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 39, "points": 6.83, "reason": "Bearer API keys bound to an organisation, listed with prefix and last-used time and deletable through the API. The docs mention key permissions in the dashboard without describing any. Devbox agent tokens are bound to one devbox with seven named scopes but do not expire. Short-lived delegation tokens exist for services (22). No read-only key for the instance API and no confirmation on stop or delete. Exposed HTTP services default to `auth_mode: none`, and the `api_key` mode asks callers to send the account's Morph API key to the service URL (8). Each instance is a full VM, but the docs name no isolation technology and no egress controls were found (5). Key last-used times, an organisation SSH key audit route and usage routes exist. No audit log of API calls found (4). security.txt returns 404 on cloud.morph.so and www.morph.so. No disclosure policy, bug bounty or certification found (0)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 20, "points": 2.5, "reason": "No x402, MPP or L402 found in the docs or the OpenAPI file (0). The pricing page defines the Morph Compute Unit (1 vCPU-hour with 4 GB RAM-hours and 16 GB disk-hours, or 5 TB snapshot-hours), states a standard rate of $0.05 an MCU and lists plans at $0, $40 and $250 a month without a login (20). The Free plan starts with 0 MCUs and says to purchase MCUs to use compute. The FAQ refers readers to the billing console for any free credits (0). Signup is in a browser, and the key creation route needs an existing session or key (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 58, "points": 5.08, "reason": "morphcloud 0.1.115 on PyPI on 1 September 2026, 37 days before the check (20). Four Python releases in the last 90 days, 0.1.112 on 19 July, 0.1.113 on 29 July, 0.1.114 on 30 August and 0.1.115 on 1 September (20). Scored on the closed-service scale. The changelog is not kept, the status page gives support@morph.so, and the two open pull requests on the Python SDK (1 April and 14 September 2026) have no comments (4). The Python SDK and CLI are current. The TypeScript SDK has had no release since 0.0.20 on 6 October 2025 (10). The Python repository has 18 unit test files but its only workflow is a manual publish job, so no public CI run was found (4)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 25, "points": 2.19, "note": "editorial 14, provenance 35", "reason": "The SDKs are Apache-2.0. The platform is closed, and no terms of service were found on morph.so or cloud.morph.so, where the site map lists only the home page, blog and careers and /terms returns 404 (8). No privacy policy or DPA found. The docs describe snapshot TTLs for retention the customer sets, and say Morph Actions data has no fixed retention period (3). No deprecation policy. The OpenAPI file marks a few fields deprecated and keeps a legacy query alias, without dates (3). No subprocessor list or data location statement found (0)." } ], "assessment": { "date": "2026-10-08", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Instance and snapshot objects are bounded, list calls take a limit and a metadata filter, and there is no field selection. Exec returns stdout and stderr whole (15). `/api/instance/list` and `/api/snapshot/list` take `page` and `limit` (default 50, maximum 1,000) and a metadata filter. The older list routes are unpaginated (16). Newer routes document 400, 401, 402, 403, 404, 409 and 503 with a coded error body. Most routes document only 422, and no error reference was found (10). `Idempotency-Key` exists on API key creation only. Snapshot, branch, pause and reboot return `Retry-After` on a 503 refused before dispatch (8). Starting an instance needs only a snapshot id. Python SDK and CLI are current. The TypeScript SDK is 0.0.20 from 6 October 2025, the version the docs pin (12).", "maintenance": "morphcloud 0.1.115 on PyPI on 1 September 2026, 37 days before the check (20). Four Python releases in the last 90 days, 0.1.112 on 19 July, 0.1.113 on 29 July, 0.1.114 on 30 August and 0.1.115 on 1 September (20). Scored on the closed-service scale. The changelog is not kept, the status page gives support@morph.so, and the two open pull requests on the Python SDK (1 April and 14 September 2026) have no comments (4). The Python SDK and CLI are current. The TypeScript SDK has had no release since 0.0.20 on 6 October 2025 (10). The Python repository has 18 unit test files but its only workflow is a manual publish job, so no public CI run was found (4).", "payments": "No x402, MPP or L402 found in the docs or the OpenAPI file (0). The pricing page defines the Morph Compute Unit (1 vCPU-hour with 4 GB RAM-hours and 16 GB disk-hours, or 5 TB snapshot-hours), states a standard rate of $0.05 an MCU and lists plans at $0, $40 and $250 a month without a login (20). The Free plan starts with 0 MCUs and says to purchase MCUs to use compute. The FAQ refers readers to the billing console for any free credits (0). Signup is in a browser, and the key creation route needs an existing session or key (0).", "reliability": "Graded on the hosted lines. Status page at status.cloud.morph.so on Better Stack with one component, Morph Cloud API, and 90 days of daily history (20). The 90 days to 8 October 2026 show no downtime and the incidents page lists none for August to October 2026. The last incident in the feed is dated 5 December 2025. We gave 25 of 30 because the page has a single monitor and its JSON marks that monitor `not_monitored` (25). No request rate limits found. The pricing page publishes plan caps, such as 64, 256 or 1,024 vCPUs and 8, 32 or 128 concurrent devboxes (5). The OpenAPI file documents a 503 with `Retry-After: 1` on snapshot, branch, pause and reboot, a 429 on one token route and an `Idempotency-Key` header on key creation only. The Python SDK retries exec with exponential backoff. No general retry guidance found (8). No SLA found (0). The docs carry no beta label, but the only changelog entry is the beta release of 19 November 2024, the API is version 0.1.0 and no stability statement was found (5).", "schema": "Public OpenAPI 3.1 file at cloud.morph.so/api/openapi.json with 52 paths and 69 operations (25). llms.txt and llms-full.txt under /docs (10). 67 of 69 operations have a description, many of one line, while the guides explain pause against stop and devboxes against instances (14). Enums for TTL action, HTTP auth mode and instance status, with patterns and ranges on names, ports and page sizes. Metadata is a free string map (12). Guides give Python, TypeScript and CLI examples. 37 operations document only a 422 beyond success, the error schema is `detail` with an optional `error_code`, and no error-code reference was found. An unauthenticated call returned plain text `unauthorized` (8). The changelog page has one entry from 19 November 2024 and says it is not a complete history. The API path has no version and the SDK tags have no release notes (3).", "security": "Bearer API keys bound to an organisation, listed with prefix and last-used time and deletable through the API. The docs mention key permissions in the dashboard without describing any. Devbox agent tokens are bound to one devbox with seven named scopes but do not expire. Short-lived delegation tokens exist for services (22). No read-only key for the instance API and no confirmation on stop or delete. Exposed HTTP services default to `auth_mode: none`, and the `api_key` mode asks callers to send the account's Morph API key to the service URL (8). Each instance is a full VM, but the docs name no isolation technology and no egress controls were found (5). Key last-used times, an organisation SSH key audit route and usage routes exist. No audit log of API calls found (4). security.txt returns 404 on cloud.morph.so and www.morph.so. No disclosure policy, bug bounty or certification found (0).", "transparency": "The SDKs are Apache-2.0. The platform is closed, and no terms of service were found on morph.so or cloud.morph.so, where the site map lists only the home page, blog and careers and /terms returns 404 (8). No privacy policy or DPA found. The docs describe snapshot TTLs for retention the customer sets, and say Morph Actions data has no fixed retention period (3). No deprecation policy. The OpenAPI file marks a few fields deprecated and keeps a legacy query alias, without dates (3). No subprocessor list or data location statement found (0)." }, "sources": [ { "what": "docs index (llms.txt)", "url": "https://cloud.morph.so/docs/llms.txt", "seen": "2026-10-08" }, { "what": "full docs text (llms-full.txt)", "url": "https://cloud.morph.so/docs/llms-full.txt", "seen": "2026-10-08" }, { "what": "OpenAPI spec", "url": "https://cloud.morph.so/api/openapi.json", "seen": "2026-10-08" }, { "what": "pricing page", "url": "https://cloud.morph.so/web/pricing", "seen": "2026-10-08" }, { "what": "plans page", "url": "https://cloud.morph.so/docs/documentation/setup/plans", "seen": "2026-10-08" }, { "what": "FAQ", "url": "https://cloud.morph.so/docs/faq", "seen": "2026-10-08" }, { "what": "API keys", "url": "https://cloud.morph.so/docs/documentation/setup/api-keys", "seen": "2026-10-08" }, { "what": "devbox agent tokens", "url": "https://cloud.morph.so/docs/devboxes/agent-tokens", "seen": "2026-10-08" }, { "what": "pause and resume", "url": "https://cloud.morph.so/docs/documentation/instances/pause-resume", "seen": "2026-10-08" }, { "what": "HTTP services", "url": "https://cloud.morph.so/docs/documentation/instances/http-services", "seen": "2026-10-08" }, { "what": "changelog", "url": "https://cloud.morph.so/docs/changelog", "seen": "2026-10-08" }, { "what": "status page", "url": "https://status.cloud.morph.so/", "seen": "2026-10-08" }, { "what": "status page incidents", "url": "https://status.cloud.morph.so/incidents", "seen": "2026-10-08" }, { "what": "status page data", "url": "https://status.cloud.morph.so/index.json", "seen": "2026-10-08" }, { "what": "status feed", "url": "https://status.cloud.morph.so/feed.atom", "seen": "2026-10-08" }, { "what": "PyPI release history", "url": "https://pypi.org/pypi/morphcloud/json", "seen": "2026-10-08" }, { "what": "npm registry", "url": "https://registry.npmjs.org/morphcloud", "seen": "2026-10-08" }, { "what": "Python SDK repository", "url": "https://github.com/morph-labs/morph-python-sdk", "seen": "2026-10-08" }, { "what": "TypeScript SDK repository", "url": "https://github.com/morph-labs/morph-typescript-sdk", "seen": "2026-10-08" }, { "what": "security.txt (404)", "url": "https://cloud.morph.so/.well-known/security.txt", "seen": "2026-10-08" }, { "what": "vendor site map", "url": "https://www.morph.so/sitemap.xml", "seen": "2026-10-08" } ], "openQuestions": [ "No terms of service or privacy policy was found for Morph Cloud, so `provenance.terms` and `provenance.privacy` are left out. The signup screen is rendered by script and may link documents we could not read", "The registered legal entity. The SDK licence says Copyright 2024 Morph Labs and no company form or address was found", "unchecked: registration date of morph.so. No RDAP service answers for the .so registry", "unchecked: the blog posts on morph.so, which are rendered by script, so the under 250 ms snapshot and branch figure is quoted from the docs as a vendor claim", "Whether signup needs a card and whether new accounts receive any free MCUs. The pricing page shows 0 for the Free plan and the FAQ refers to the billing console", "Request rate limits and whether a 429 carries Retry-After outside the one token route", "The status page was found at status.cloud.morph.so and is not linked from the docs. Its JSON marks the single monitor `not_monitored` while the page shows 100 per cent uptime", "The lead was right about the interface and docs URL. It did not mention that the Free plan includes no compute" ] }, "negative": 0, "verdict": "Pause and snapshot keep memory and running processes, and one call branches an instance into several copies. A public OpenAPI file covers 69 operations. No terms of service, privacy policy or security page was found, the free plan includes no compute credit, and the changelog holds one entry from November 2024.", "bestFor": "Agents that need to checkpoint and fork a running machine with memory intact, for parallel attempts, evaluations or reinforcement learning rollouts.", "strengths": [ "Pause and snapshot preserve memory and running processes, and a paused instance is billed for its snapshot only", "Branch creates a snapshot and starts a chosen number of copies in one call", "Public OpenAPI 3.1 file with 69 operations, plus llms.txt and llms-full.txt", "Devbox agent tokens are bound to one devbox and carry named scopes", "Status page shows 90 days without downtime to 8 October 2026 and no incident since 5 December 2025" ], "weaknesses": [ "No terms of service, privacy policy, DPA or subprocessor list found on morph.so or cloud.morph.so", "The Free plan starts with 0 MCUs, so compute needs a purchase, and signup is in a browser", "No request rate limits, SLA or error-code reference in the reviewed documentation", "The changelog has one entry, the beta release of 19 November 2024", "The TypeScript SDK's last release is 0.0.20 of 6 October 2025", "No security.txt, disclosure policy or certification found, and no isolation technology is named in the docs" ], "agentNotes": [ "Set `ttl_seconds` and `ttl_action` when starting an instance. Nothing in the docs stops an instance with no TTL from billing MCUs", "Pass `auth_mode: api_key` when exposing an HTTP service. The default is `none`, which makes the URL public", "Enable `wake_on_ssh` before calling exec on an instance that may be paused. There is no separate exec wake setting", "Use `/api/instance/list` and `/api/snapshot/list` with `page` and `limit` (default 50, maximum 1,000). The plain list routes return everything", "On a 503 from snapshot, branch, pause or reboot, wait for the `Retry-After` value before repeating the call" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 50.8 } ], "editorialScores": { "ergonomics": 61, "maintenance": 58, "payments": 20, "reliability": 63, "schema": 72, "security": 39, "transparency": 14 }, "provenanceScore": 35 }, "connect": { "install": "pip install morphcloud # or npm install morphcloud@0.0.20", "http": "curl -sS -H \"Authorization: Bearer $MORPH_API_KEY\" \\\n https://cloud.morph.so/api/snapshot/snapshot_your_snapshot_id" }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/morph-cloud" }, "notable": [ "Pausing an instance takes a snapshot and suspends the VM with memory and running processes kept, and only the snapshot is billed while paused (https://cloud.morph.so/docs/documentation/instances/pause-resume)", "Branch creates a snapshot of a running instance and starts a chosen number of copies from it (https://cloud.morph.so/docs/documentation/instances/branch)", "Morph says snapshot, branch and restore take under 250 ms. This is the vendor's figure, not our measurement (https://cloud.morph.so/docs/developers)", "Instances take a TTL with a stop or pause action, and wake-on-request resumes a paused instance on HTTP or SSH traffic, exec included (https://cloud.morph.so/docs/documentation/instances/wake-on)", "Exposed HTTP services are public by default. `auth_mode: api_key` requires the caller's Morph API key as a Bearer token (https://cloud.morph.so/docs/documentation/instances/http-services)", "Devbox agent tokens are bound to one devbox and a scope list, and newly minted tokens do not expire (https://cloud.morph.so/docs/devboxes/agent-tokens)", "The changelog page holds one entry, the beta release of 19 November 2024, and says it is not a complete history (https://cloud.morph.so/docs/changelog)" ], "area": "agent-runtime", "details": [ { "label": "API", "value": "REST at https://cloud.morph.so/api, OpenAPI 3.1 version 0.1.0, 52 paths and 69 operations for images, snapshots, instances, organisations, keys, secrets and usage" }, { "label": "Primitives", "value": "Images, snapshots, instances and branches. Devboxes are workspaces built on them, with templates, tmux sessions and preview URLs" }, { "label": "Persistence", "value": "Pause and snapshot keep memory, processes and disk. Snapshots take a TTL" }, { "label": "Lifetime", "value": "Optional `ttl_seconds` with `ttl_action` stop or pause. Wake-on-request for HTTP and SSH" }, { "label": "Plan limits", "value": "Free up to 64 vCPU, 256 GB RAM, 1,024 GB storage and 8 concurrent devboxes. Developer 256 vCPU and 32 devboxes. Team 1,024 vCPU and 128 devboxes" }, { "label": "Access to an instance", "value": "Exec over REST (with an SSE variant), SSH with managed public keys, SFTP file transfer, exposed HTTP services" }, { "label": "SDKs", "value": "Python morphcloud 0.1.115 (1 September 2026, Python 3.10 or later) with the `morphcloud` CLI. TypeScript morphcloud 0.0.20 (6 October 2025, Node.js 20.18.1 or later). Both Apache-2.0" }, { "label": "Status", "value": "status.cloud.morph.so on Better Stack, one component, no downtime in the 90 days to 8 October 2026" }, { "label": "Other products on the account", "value": "EFS shared filesystems, GitHub Actions runners billed in MCUs, and a Responses Proxy for model routing" } ], "unitPrices": [ { "item": "Morph Compute Unit", "unit": "compute-unit", "usd": 0.05, "note": "1 vCPU-hour with 4 GB RAM-hours and 16 GB disk-hours, or 5 TB snapshot-hours" }, { "item": "Instance compute", "unit": "vcpu-hour", "usd": 0.05, "note": "Includes 4 GB RAM and 16 GB disk per vCPU. MCUs are the largest of the three ratios" }, { "item": "Developer plan", "unit": "month", "usd": 40, "note": "1,000 MCUs included" }, { "item": "Team plan", "unit": "month", "usd": 250, "note": "7,500 MCUs included" } ], "provenance": { "legalEntity": "", "domain": "morph.so", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "https://status.cloud.morph.so", "changelog": "https://cloud.morph.so/docs/changelog", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "No terms of service, service agreement or privacy policy was found. /terms and /privacy return 404 on cloud.morph.so and www.morph.so, and the morph.so site map lists only the home page, blog and careers, so both fields are left out.", "No registered legal entity was found. The SDK licence reads Copyright 2024 Morph Labs.", "The API answers at cloud.morph.so/api and exposed services at morphcloud.io addresses, per the docs.", "security.txt returns 404 on cloud.morph.so and www.morph.so.", "No RDAP service answers for the .so registry, so the registration date is blank.", "The status page's own data names Morph Labs, cloud.morph.so and support@morph.so. The page is not linked from the docs." ], "score": 35, "checks": [ { "check": "Legal entity named", "value": "not found", "points": 0, "max": 20, "state": "no" }, { "check": "Domain age", "value": "morph.so, no registry record we could read", "points": 0, "max": 15, "state": "no" }, { "check": "Endpoint on the vendor's domain", "value": "cloud.morph.so", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Privacy policy", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Status page", "value": "status.cloud.morph.so", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/morph-cloud.json", "live": { "slug": "morph-cloud", "probe": { "target": "https://cloud.morph.so/api", "method": "get", "lastAt": "2026-10-08T19:08:53.519030264Z", "lastOk": true, "lastStatus": 404, "lastMs": 139, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 138, "p95ms24h": 272, "samples24h": 19, "samples30d": 19, "days": [ { "date": "2026-10-08", "probes": 19, "ok": 19 } ] }, "vendorStatus": { "page": "https://status.cloud.morph.so", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-08T17:50:53.2122056Z" }, "pages": [ { "url": "https://cloud.morph.so/docs/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:16:17.092678678Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a911488f7933" }, { "url": "https://cloud.morph.so/web/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-08T18:16:19.269281319Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "4fc791aaa2ac" } ], "updatedAt": "2026-10-08T19:08:53.519030264Z" } } }