{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-04", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "tool": { "slug": "netlify", "name": "Netlify API + MCP", "vendor": "Netlify, Inc.", "vendorUrl": "https://www.netlify.com", "kind": "http-api", "category": "infrastructure", "summary": "Netlify's platform for deploying and running web projects, reached through a REST API with a public OpenAPI spec, the netlify-cli command line tool and an official MCP server, hosted at netlify-mcp.netlify.app or run locally from npm.", "url": "https://www.anchorterminal.com/tools/netlify", "markdownUrl": "https://www.anchorterminal.com/tools/netlify.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/netlify.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/netlify.json", "dns": "netlify.grade.anchorterminal.com", "repo": "https://github.com/netlify/netlify-mcp", "license": "ISC for the MCP server (@netlify/mcp) and MIT for the CLI (netlify-cli). The Netlify platform they act on is a proprietary service under Netlify's terms", "transports": [ "http", "streamable-http", "stdio" ], "remoteUrl": "https://api.netlify.com/api/v1", "packages": [ { "registry": "npm", "name": "@netlify/mcp" }, { "registry": "npm", "name": "netlify-cli" } ], "auth": "mixed", "authNotes": "Personal access tokens from Applications \u003e Personal access tokens, named, given an expiry date at creation and sent as `Authorization: Bearer`; no scopes are documented, SAML teams need an opt-in at creation, and a password reset invalidates every token. Public integrations use OAuth2 apps registered at app.netlify.com/applications (the spec declares an implicit flow with no scopes). The CLI stores a token from `netlify login` in config.json or reads `NETLIFY_AUTH_TOKEN`. The hosted MCP server signs in with OAuth 2.1 (PKCE, dynamic client registration) and advertises the scopes offline_access, read, write and claudeai; the local server reads the CLI's token or `NETLIFY_PERSONAL_ACCESS_TOKEN`.", "pricing": "freemium", "pricingNotes": "Free plan at $0 with 300 credits a month, deploys from the API, functions, Blobs, Database and custom domains. Personal $9 a month with 1,000 credits, Pro $20 a month with unlimited members and 3,000 credits, Enterprise custom with a 99.99 per cent SLA. Usage is metered in credits, about $0.00667 each at the Pro pack rate (1,500 for $10; Personal 500 for $5). A production deploy is 15 credits, bandwidth 20 a GB, compute 10 a GB-hour and web requests 2 per 10,000. Whether a card is needed is not stated. `netlify deploy --allow-anonymous` publishes without an account, to be claimed within an hour.", "priceSummary": "$9 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the OpenAPI spec (no 402 response), the API guide, the MCP source or the pricing page (checked 2026-11-03).", "endpoints": [] }, "toolCount": 11, "popularity": { "githubStars": null, "npmWeekly": 58373, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://docs.netlify.com/api-and-cli-guides/api-guides/get-started-with-api/", "llmsTxt": "https://docs.netlify.com/llms.txt", "openapi": "https://raw.githubusercontent.com/netlify/open-api/master/swagger.yml", "capabilities": [ "infra.cloud", "code.deploy", "observability.logs" ], "tags": [ "hosted", "freemium", "free-tier", "mcp", "remote-mcp", "cli", "oauth", "pat", "llms-txt", "openapi", "status-page", "bug-bounty", "soc2", "iso27001", "sla", "typescript", "go", "agent-skills", "enterprise" ], "lastRelease": "2026-10-26", "graded": true, "anchor": { "graded": true, "score": 69.4, "grade": "B", "agentReady": false, "rank": 225, "ranked": true, "rankOf": 1349, "categoryRank": 3, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 69, "maintenance": 87, "payments": 55, "reliability": 67, "schema": 79, "security": 59, "transparency": 81 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 67, "points": 13.4, "reason": "Read with the hosted lines. Statuspage at netlifystatus.com with component history and an Atom feed (20). From 5 August to 3 November 2026 the feed lists 19 incidents and no maintenance. None names the API or the MCP server. Errors reaching hosted sites and the Netlify application for about 85 minutes on 21 September read as one major outage; errors on the edge network for 55 minutes on 5 October, CDN DNS errors for 34 minutes on 24 September, 6 minutes of 500s on 18 August, and build, Agent Runner, AI Gateway and log-delay incidents read as minor (10 of 30). Limits are published with numbers, about 500 requests a minute, 3 deploys a minute and 100 a day, with X-RateLimit headers (15). The docs say retrying a timed-out upload is safe and give the reset header, but no backoff guidance, no idempotency key for deploys or site creation, and 429 appears in the spec only on agent runner endpoints (7 of 15). A 99.99 per cent SLA is named for Enterprise on the pricing page, with its terms in order forms (5 of 10). The API is generally available (10). 20 + 10 + 15 + 7 + 5 + 10 = 67.", "checked": "2026-11-03" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 79, "points": 12.84, "reason": "A public Swagger 2.0 spec, version 2.63.1, with 124 paths and 188 operations, and MCP tools typed through zod (25). llms.txt and a Markdown twin of every docs page, with agent skills in netlify/context-and-tools (10). Every spec operation has a summary, most one line, and the MCP tool descriptions say what to call first, as the deploy tool does for get-projects, but not when to leave an endpoint alone (14 of 20). 232 parameters with 9 enums; the MCP selector tools take an `operation` literal and a `params` object per operation inside one union, which is typed but nested (9 of 15). The API guide gives curl examples for sites and deploys, a shared `error` object of code and message is the default response, and 422, 404, 409 and 423 are declared on some operations, but the docs' error reference covers builds and domains rather than API codes (8 of 15). The spec carries a version, the API a /v1 path, Netlify a dated changelog, and the MCP server a dated CHANGELOG from release-please (13 of 15). 25 + 10 + 14 + 9 + 8 + 13 = 79.", "checked": "2026-11-03" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 69, "points": 11.21, "reason": "Lists are sized with `per_page` up to 100 and there is no field selection. The hosted MCP server registers about 11 tools by default, a reader and an updater selector per domain plus coding context and design import, and lists all 25 operations one by one only for OpenAI clients, so the context cost is low either way (18 of 25). `page` and `per_page` with a `Link` header, few filters, and MCP pagination bounds enforced since v1.19.0 (15 of 20). Errors return a code and message; the MCP server answers a bad selector with text telling the agent to pick an operation again (12 of 20). No idempotency key for deploys or sites, though timed-out uploads are safe to retry; every MCP tool declares readOnly, destructive, idempotent and openWorld hints since v1.18.0, with project renames marked destructive (12 of 20). Few required parameters, a Go client, a JS client and the CLI (12 of 15). 18 + 15 + 12 + 12 + 12 = 69.", "checked": "2026-11-03" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 59, "points": 10.33, "reason": "Personal access tokens get a name and an expiry date at creation and can be deleted, but no scopes are documented and the spec's OAuth2 implicit flow declares none, so a token reaches every team its owner belongs to. The hosted MCP uses OAuth 2.1 with PKCE and dynamic registration and advertises read and write scopes, which the source sanitises at registration and does not check on tool calls, while the upstream Netlify token it holds is unscoped. Secrets travel in headers; v1.21.0 keeps the upstream token out of URLs (18 of 30). Read-only tools are grouped apart from writes and writes are marked destructive, but there is no read-only token and no confirmation step (10 of 20). Form submissions and request logs written by site visitors reach the model through the tools, with no injection guidance (2 of 15). Team audit log on Pro and Enterprise, a site audit log, and the MCP server logs client, agent and model names per call (12 of 15). Public HackerOne bounty, SOC 2 Type II, ISO 27001 and 27018, PCI DSS and HIPAA on the trust centre, a disclosure policy post, and no security.txt (17 of 20). 18 + 10 + 2 + 12 + 17 = 59.", "checked": "2026-11-03" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 55, "points": 6.88, "reason": "No x402, MPP or L402 (0). Plan prices and per-unit credit prices (deploys, bandwidth, compute, requests, credit packs) are public without a login (20). A Free plan with 300 credits a month and API deploys, and the docs do not say a card is needed (20). `netlify deploy --allow-anonymous` publishes a project and URL with no account, claimable within an hour, but the API, the MCP server and anything past that hour need a person to sign up and approve a token (15 of 20). 0 + 20 + 20 + 15 = 55.", "checked": "2026-11-03" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 87, "points": 7.61, "reason": "@netlify/mcp 1.21.0 tagged on 26 October 2026 (changelog 23 October), a commit on 28 October, the spec at 2.63.1 and changelog entries to 26 October (30). Six MCP tags between 25 September and 26 October 2026 (20). Issue and pull request responsiveness could not be read (github.com refuses our reader and the API answered empty), while the changelog, the answers.netlify.com forum, Discord and a support hub exist and the MCP changelog cites numbered pull requests (12 of 25). Current official SDKs, a Go client, a JS client and netlify-cli 27.16.2, though the server card names com.netlify/mcp and no such entry is in the official MCP registry (15). CI runs typecheck, build and 31 tests on pinned actions, releases through release-please with npm provenance, and the server runs on @modelcontextprotocol/server 2.2.0 (10). 30 + 20 + 12 + 15 + 10 = 87.", "checked": "2026-11-03" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 81, "points": 7.09, "note": "editorial 73, provenance 89", "reason": "The MCP server is ISC and the CLI MIT, on a closed platform with clear terms naming Netlify, Inc. (25 of 30). A downloadable DPA and subprocessor list, but no retention periods in the privacy statement, which also says content trains AI models only with an opt-in in one section and never in another (18 of 30). Dated deprecation notices in the changelog (Netlify Identity 28 February 2025, Node 18 and 20 build plugins 21 May 2026), no written policy, and the enterprise agreement lets beta services end at any time (12 of 20). Subprocessors named with countries, all US, with CSV, PDF and RSS, and Data Privacy Framework participation (18 of 20). 25 + 18 + 12 + 18 = 73.", "checked": "2026-11-03" } ], "assessment": { "date": "2026-11-03", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Lists are sized with `per_page` up to 100 and there is no field selection. The hosted MCP server registers about 11 tools by default, a reader and an updater selector per domain plus coding context and design import, and lists all 25 operations one by one only for OpenAI clients, so the context cost is low either way (18 of 25). `page` and `per_page` with a `Link` header, few filters, and MCP pagination bounds enforced since v1.19.0 (15 of 20). Errors return a code and message; the MCP server answers a bad selector with text telling the agent to pick an operation again (12 of 20). No idempotency key for deploys or sites, though timed-out uploads are safe to retry; every MCP tool declares readOnly, destructive, idempotent and openWorld hints since v1.18.0, with project renames marked destructive (12 of 20). Few required parameters, a Go client, a JS client and the CLI (12 of 15). 18 + 15 + 12 + 12 + 12 = 69.", "maintenance": "@netlify/mcp 1.21.0 tagged on 26 October 2026 (changelog 23 October), a commit on 28 October, the spec at 2.63.1 and changelog entries to 26 October (30). Six MCP tags between 25 September and 26 October 2026 (20). Issue and pull request responsiveness could not be read (github.com refuses our reader and the API answered empty), while the changelog, the answers.netlify.com forum, Discord and a support hub exist and the MCP changelog cites numbered pull requests (12 of 25). Current official SDKs, a Go client, a JS client and netlify-cli 27.16.2, though the server card names com.netlify/mcp and no such entry is in the official MCP registry (15). CI runs typecheck, build and 31 tests on pinned actions, releases through release-please with npm provenance, and the server runs on @modelcontextprotocol/server 2.2.0 (10). 30 + 20 + 12 + 15 + 10 = 87.", "payments": "No x402, MPP or L402 (0). Plan prices and per-unit credit prices (deploys, bandwidth, compute, requests, credit packs) are public without a login (20). A Free plan with 300 credits a month and API deploys, and the docs do not say a card is needed (20). `netlify deploy --allow-anonymous` publishes a project and URL with no account, claimable within an hour, but the API, the MCP server and anything past that hour need a person to sign up and approve a token (15 of 20). 0 + 20 + 20 + 15 = 55.", "reliability": "Read with the hosted lines. Statuspage at netlifystatus.com with component history and an Atom feed (20). From 5 August to 3 November 2026 the feed lists 19 incidents and no maintenance. None names the API or the MCP server. Errors reaching hosted sites and the Netlify application for about 85 minutes on 21 September read as one major outage; errors on the edge network for 55 minutes on 5 October, CDN DNS errors for 34 minutes on 24 September, 6 minutes of 500s on 18 August, and build, Agent Runner, AI Gateway and log-delay incidents read as minor (10 of 30). Limits are published with numbers, about 500 requests a minute, 3 deploys a minute and 100 a day, with X-RateLimit headers (15). The docs say retrying a timed-out upload is safe and give the reset header, but no backoff guidance, no idempotency key for deploys or site creation, and 429 appears in the spec only on agent runner endpoints (7 of 15). A 99.99 per cent SLA is named for Enterprise on the pricing page, with its terms in order forms (5 of 10). The API is generally available (10). 20 + 10 + 15 + 7 + 5 + 10 = 67.", "schema": "A public Swagger 2.0 spec, version 2.63.1, with 124 paths and 188 operations, and MCP tools typed through zod (25). llms.txt and a Markdown twin of every docs page, with agent skills in netlify/context-and-tools (10). Every spec operation has a summary, most one line, and the MCP tool descriptions say what to call first, as the deploy tool does for get-projects, but not when to leave an endpoint alone (14 of 20). 232 parameters with 9 enums; the MCP selector tools take an `operation` literal and a `params` object per operation inside one union, which is typed but nested (9 of 15). The API guide gives curl examples for sites and deploys, a shared `error` object of code and message is the default response, and 422, 404, 409 and 423 are declared on some operations, but the docs' error reference covers builds and domains rather than API codes (8 of 15). The spec carries a version, the API a /v1 path, Netlify a dated changelog, and the MCP server a dated CHANGELOG from release-please (13 of 15). 25 + 10 + 14 + 9 + 8 + 13 = 79.", "security": "Personal access tokens get a name and an expiry date at creation and can be deleted, but no scopes are documented and the spec's OAuth2 implicit flow declares none, so a token reaches every team its owner belongs to. The hosted MCP uses OAuth 2.1 with PKCE and dynamic registration and advertises read and write scopes, which the source sanitises at registration and does not check on tool calls, while the upstream Netlify token it holds is unscoped. Secrets travel in headers; v1.21.0 keeps the upstream token out of URLs (18 of 30). Read-only tools are grouped apart from writes and writes are marked destructive, but there is no read-only token and no confirmation step (10 of 20). Form submissions and request logs written by site visitors reach the model through the tools, with no injection guidance (2 of 15). Team audit log on Pro and Enterprise, a site audit log, and the MCP server logs client, agent and model names per call (12 of 15). Public HackerOne bounty, SOC 2 Type II, ISO 27001 and 27018, PCI DSS and HIPAA on the trust centre, a disclosure policy post, and no security.txt (17 of 20). 18 + 10 + 2 + 12 + 17 = 59.", "transparency": "The MCP server is ISC and the CLI MIT, on a closed platform with clear terms naming Netlify, Inc. (25 of 30). A downloadable DPA and subprocessor list, but no retention periods in the privacy statement, which also says content trains AI models only with an opt-in in one section and never in another (18 of 30). Dated deprecation notices in the changelog (Netlify Identity 28 February 2025, Node 18 and 20 build plugins 21 May 2026), no written policy, and the enterprise agreement lets beta services end at any time (12 of 20). Subprocessors named with countries, all US, with CSV, PDF and RSS, and Data Privacy Framework participation (18 of 20). 25 + 18 + 12 + 18 = 73." }, "sources": [ { "what": "API quickstart (auth, rate limits, pagination, deploys)", "url": "https://docs.netlify.com/api-and-cli-guides/api-guides/get-started-with-api/", "seen": "2026-11-03" }, { "what": "OpenAPI spec, Swagger 2.0, 188 operations", "url": "https://raw.githubusercontent.com/netlify/open-api/master/swagger.yml", "seen": "2026-11-03" }, { "what": "API reference site, version 2.63.1", "url": "https://open-api.netlify.com/", "seen": "2026-11-03" }, { "what": "llms.txt", "url": "https://docs.netlify.com/llms.txt", "seen": "2026-11-03" }, { "what": "agent setup overview (remote and local MCP, skills)", "url": "https://docs.netlify.com/build/build-with-ai/agent-setup-guides/agent-setup-overview.md", "seen": "2026-11-03" }, { "what": "MCP server docs page", "url": "https://docs.netlify.com/welcome/build-with-ai/netlify-mcp-server/", "seen": "2026-11-03" }, { "what": "MCP server repository, shallow clone (tools, annotations, OAuth config, CI, CHANGELOG)", "url": "https://github.com/netlify/netlify-mcp", "seen": "2026-11-03" }, { "what": "MCP endpoint, 401 and protected-resource metadata with scopes", "url": "https://netlify-mcp.netlify.app/.well-known/oauth-protected-resource", "seen": "2026-11-03" }, { "what": "npm @netlify/mcp latest, 1.21.0, provenance", "url": "https://registry.npmjs.org/@netlify/mcp/latest", "seen": "2026-11-03" }, { "what": "npm @netlify/mcp first publish 13 May 2025", "url": "https://registry.npmjs.org/@netlify/mcp", "seen": "2026-11-03" }, { "what": "npm netlify-cli latest, 27.16.2", "url": "https://registry.npmjs.org/netlify-cli/latest", "seen": "2026-11-03" }, { "what": "npm weekly downloads", "url": "https://api.npmjs.org/downloads/point/last-week/@netlify/mcp", "seen": "2026-11-03" }, { "what": "CLI guide (login, PAT, anonymous deploys, telemetry)", "url": "https://docs.netlify.com/api-and-cli-guides/cli-guides/get-started-with-cli.md", "seen": "2026-11-03" }, { "what": "team audit log", "url": "https://docs.netlify.com/manage/accounts-and-billing/team-management/team-audit-log.md", "seen": "2026-11-03" }, { "what": "error reference", "url": "https://docs.netlify.com/resources/troubleshooting/error-reference.md", "seen": "2026-11-03" }, { "what": "status history feed", "url": "https://www.netlifystatus.com/history.atom", "seen": "2026-11-03" }, { "what": "pricing", "url": "https://www.netlify.com/pricing/", "seen": "2026-11-03" }, { "what": "changelog", "url": "https://www.netlify.com/changelog/", "seen": "2026-11-03" }, { "what": "changelog, Netlify MCP in Cursor", "url": "https://www.netlify.com/changelog/one-click-install-netlify-mcp-on-cursor.md", "seen": "2026-11-03" }, { "what": "terms of use", "url": "https://www.netlify.com/legal/terms-of-use/", "seen": "2026-11-03" }, { "what": "enterprise master subscription agreement", "url": "https://www.netlify.com/legal/enterprise-master-subscription-agreement.md", "seen": "2026-11-03" }, { "what": "privacy statement", "url": "https://www.netlify.com/privacy/", "seen": "2026-11-03" }, { "what": "security page", "url": "https://www.netlify.com/security/", "seen": "2026-11-03" }, { "what": "trust centre (certifications, subprocessors, DPA)", "url": "https://www.netlify.com/trust-center/", "seen": "2026-11-03" }, { "what": "security transparency post (HackerOne)", "url": "https://www.netlify.com/blog/our-commitment-to-security-transparency.md", "seen": "2026-11-03" }, { "what": "security.txt (404)", "url": "https://www.netlify.com/.well-known/security.txt", "seen": "2026-11-03" }, { "what": "official MCP registry search", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=netlify", "seen": "2026-11-03" }, { "what": "robots.txt", "url": "https://docs.netlify.com/robots.txt", "seen": "2026-11-03" }, { "what": "RDAP for netlify.com", "url": "https://rdap.verisign.com/com/v1/domain/netlify.com", "seen": "2026-11-03" }, { "what": "about page", "url": "https://www.netlify.com/about/", "seen": "2026-11-03" } ], "openQuestions": [ "unchecked: open issues and pull requests on github.com/netlify/netlify-mcp and their reply times (github.com's web pages refuse our reader and api.github.com answered empty), so responsiveness rests on the changelog and support channels", "unchecked: the self-serve subscription agreement, served as a PDF our reader could not extract, so its termination and change-notice terms are unread", "unchecked: the hosted MCP's live tools/list and whether a Claude connector at mcp.netlify.com differs from netlify-mcp.netlify.app; the server card names both hosts", "Whether personal access tokens can be scoped. The docs describe a name, an expiry date and a SAML opt-in only; a third-party page calls them full access, which was not used", "Whether the Free plan needs a card at signup. The pricing page does not say", "firstReleased is null for the listing. The MCP server was first published on npm on 13 May 2025 (1.0.1) and its repository began on 2 May 2025; the API and CLI predate that without a first-hand date", "toolCount 11 is derived from the source, nine reader and updater selectors across six domains plus the coding-context and design-import tools; the exact default count depends on the client and was not read live", "The privacy statement's two AI-training sentences disagree (opt-in versus never). Recorded in transparency, not deducted, since no page claims one thing while the product does another", "The terms of use carry no clause on automated access; robots.txt on www and docs allows every crawler with Content-Signal ai-train=yes" ] }, "negative": 0, "verdict": "A public OpenAPI spec with 188 operations, documented rate limits, an anonymous deploy route and an MCP server released weekly through October 2026 with complete tool annotations. Personal access tokens and the OAuth flows carry no scopes, the hosted MCP enforces none on tool calls, and the status feed shows several site-serving incidents in the 90 days to 3 November.", "bestFor": "An agent that builds and deploys web projects, sets environment variables and reads forms or logs on a team's Netlify account, including with no account through anonymous deploys.", "strengths": [ "OpenAPI spec (Swagger 2.0, version 2.63.1) with 188 operations, llms.txt and a Markdown twin of every docs page", "Rate limits published (500 a minute, 3 deploys a minute, 100 a day) with X-RateLimit headers on every response", "`netlify deploy --allow-anonymous` publishes a project without an account, claimable within an hour", "MCP server with OAuth 2.1 and PKCE, every tool hint declared since v1.18.0 (7 October 2026), and six tagged releases between 25 September and 26 October", "Public HackerOne bug bounty, SOC 2 Type II, ISO 27001 and 27018, and a trust centre with a downloadable DPA and subprocessor list" ], "weaknesses": [ "Personal access tokens and OAuth apps have no scopes, so a token reaches every team its owner belongs to", "The hosted MCP server advertises read and write scopes but its source enforces none on tool calls", "No idempotency keys for deploys or site creation, and no documented 429 retry guidance beyond the headers", "19 incidents in the status feed from 18 August to 2 November 2026, including errors reaching hosted sites for about 85 minutes on 21 September", "No entry in the official MCP registry, and the privacy statement contradicts itself on AI training (opt-in in one section, never in another)" ], "agentNotes": [ "Send a `User-Agent` naming your app and `Authorization: Bearer $NETLIFY_AUTH_TOKEN`; watch X-RateLimit-Remaining and stop before 3 deploys a minute or 100 a day", "Deploy with `netlify deploy --allow-anonymous` when the person has no account yet, and tell them to claim the project within an hour", "Poll GET /api/v1/deploys/{deploy_id} until `state` is `ready`; a deploy call that runs over 30 seconds is cut off, so send large deploys with `\"async\": true`", "Page lists with `page` and `per_page` (100 at most) and follow the `Link` header's `rel=\"next\"`", "Expect the hosted MCP's deploy tool to hand back a CLI command for the person to run; the local server deploys from the working directory itself" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 69.4 } ], "editorialScores": { "ergonomics": 69, "maintenance": 87, "payments": 55, "reliability": 67, "schema": 79, "security": 59, "transparency": 73 }, "provenanceScore": 89, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-11-03", "grade": "B", "kind": "listed", "method": "0.7", "score": 69.4 } ] }, "connect": { "install": "npm install -g netlify-cli", "http": "curl -H \"User-Agent: MyApp (you@example.com)\" -H \"Authorization: Bearer $NETLIFY_AUTH_TOKEN\" https://api.netlify.com/api/v1/sites", "claudeCode": "claude mcp add --transport http netlify https://netlify-mcp.netlify.app/mcp", "config": { "mcpServers": { "netlify": { "url": "https://netlify-mcp.netlify.app/mcp" } } } }, "letme": { "capability": "https://letme.dev/infra.cloud", "tool": "https://letme.dev/netlify" }, "notable": [ "The OpenAPI (Swagger 2.0) spec, version 2.63.1, has 124 paths and 188 operations, every one with a summary, and one OAuth2 security scheme with no scopes (https://raw.githubusercontent.com/netlify/open-api/master/swagger.yml)", "The API allows about 500 requests a minute and 3 deploys a minute or 100 a day, with X-RateLimit-Limit, -Remaining and -Reset headers; requests over 30 seconds are cut off and large deploys should be async (https://docs.netlify.com/api-and-cli-guides/api-guides/get-started-with-api.md)", "The hosted MCP server at https://netlify-mcp.netlify.app/mcp answers 401 with protected-resource metadata naming the scopes offline_access, read, write and claudeai; the source sanitises scopes at registration and enforces none on tool calls (https://github.com/netlify/netlify-mcp)", "The MCP server registers 25 operations in six domains (user, deploy, team, project, extension, observability), grouped by default into about 9 reader and updater selector tools plus a coding-context tool and a Claude design import, and listed one by one with full annotations for OpenAI clients since v1.18.0 (https://github.com/netlify/netlify-mcp)", "@netlify/mcp 1.21.0 was tagged on 26 October 2026 (changelog 23 October), the sixth release since 25 September; it was first published on 13 May 2025 as 1.0.1 (https://registry.npmjs.org/@netlify/mcp)", "`netlify deploy --allow-anonymous` creates a project and live URL with no account, to be claimed within one hour, which the docs describe as for AI agents and automated workflows (https://docs.netlify.com/api-and-cli-guides/cli-guides/get-started-with-cli.md)", "The status feed lists 19 incidents from 18 August to 2 November 2026, none naming the API; the longest were errors reaching hosted sites and the app on 21 September (about 85 minutes) and on the edge network on 5 October (55 minutes) (https://www.netlifystatus.com/history.atom)", "Netlify runs a public bug bounty on HackerOne and lists SOC 2 Type II, ISO 27001 and 27018, PCI DSS and HIPAA with a subprocessor list on its trust centre (https://www.netlify.com/trust-center/)" ], "area": "developer", "details": [ { "label": "Surface listed", "value": "The REST API at https://api.netlify.com/api/v1, the netlify-cli tool and the official MCP server (hosted at netlify-mcp.netlify.app/mcp, local as @netlify/mcp), read from docs.netlify.com, the open-api and netlify-mcp repositories (shallow clone), npm, the status feed, the trust centre and the legal pages on 3 November 2026. No account was made and no tool was called; a plain GET to the MCP endpoint answered 401" }, { "label": "REST operations", "value": "188 across 124 paths in the 2.63.1 spec, covering sites, deploys, builds, files, functions, forms and submissions, DNS zones, hooks, environment variables, members, accounts, agent runners and the database, among others" }, { "label": "MCP tools", "value": "By default about 11, a reader and an updater selector tool per domain (user, deploy, team, project, extension, observability) wrapping 25 operations, plus get-netlify-coding-context and a Claude design import. OpenAI clients get each operation as its own tool. The remote server's deploy tool returns a CLI command; the local one deploys itself" }, { "label": "Rate limits", "value": "About 500 requests a minute; 3 deploys a minute and 100 a day; stricter limits on some operations. X-RateLimit-Limit, -Remaining and -Reset headers. Higher limits through support" }, { "label": "Pagination", "value": "`page` (from 1) and `per_page` (100 at most) with a `Link` header carrying next, prev and last" }, { "label": "Errors", "value": "A shared `error` object with `code` and `message` as the default response; 400, 401, 403, 404, 409, 422, 423 and 429 declared on some operations. The docs' error reference covers builds and domains, not API codes" }, { "label": "Status", "value": "netlifystatus.com (Statuspage) with incident history and an Atom feed. 19 incidents from 18 August to 2 November 2026, none naming the API" }, { "label": "SDKs", "value": "Official Go client in netlify/open-api, JS client in netlify/build, netlify-cli 27.16.2 (Node 22.13 or later, about 496,000 downloads a week), agent skills in netlify/context-and-tools" }, { "label": "Audit logs", "value": "Team audit log on Pro and Enterprise with team and project events, retention by plan, plus a site audit log. The MCP server logs the agent name, model and client on each call" }, { "label": "Certifications", "value": "SOC 2 Type II, ISO/IEC 27001 and 27018, PCI DSS v4, HIPAA, Data Privacy Framework, per the trust centre. Public bug bounty at hackerone.com/netlify" }, { "label": "Legal entity", "value": "Netlify, Inc., 101 2nd Street, San Francisco, named in the terms of use (14 October 2026) and privacy statement (10 April 2026). Affiliates include Netlify EMEA Limited and Netlify UK Limited" } ], "unitPrices": [ { "item": "Personal", "unit": "month", "usd": 9, "note": "1,000 credits a month" }, { "item": "Pro", "unit": "month", "usd": 20, "note": "Unlimited members, 3,000 credits a month" }, { "item": "Credit (Pro pack)", "unit": "credit", "usd": 0.00667, "note": "1,500 credits for $10. A production deploy is 15 credits, bandwidth 20 a GB, compute 10 a GB-hour" }, { "item": "Bandwidth", "unit": "gb", "usd": 0.13, "note": "20 credits a GB at the Pro pack rate" } ], "provenance": { "legalEntity": "Netlify, Inc.", "domain": "netlify.com", "domainRegistered": "2014-06-09", "endpointOnVendorDomain": true, "terms": "https://www.netlify.com/legal/terms-of-use/", "privacy": "https://www.netlify.com/privacy/", "statusPage": "https://www.netlifystatus.com", "changelog": "https://www.netlify.com/changelog/", "securityTxt": "none", "checked": "2026-11-03", "notes": [ "The terms of use (last updated 14 October 2026) name Netlify, Inc. under California law and contain no clause on automated access or scraping; the services run under separate self-serve and enterprise subscription agreements, the self-serve one served as a PDF our reader could not extract.", "The privacy statement (last updated 10 April 2026) names Netlify, Inc. and affiliates, a DPA for enterprise customers, and says in one place that content is not used to train AI models unless the user opts in and in another that Customer Content is never used for training.", "www.netlify.com and docs.netlify.com robots.txt allow every crawler, name ClaudeBot and Claude-Web among allowed AI crawlers, and set Content-Signal search=yes, ai-input=yes, ai-train=yes. www.netlifystatus.com disallows /api/ and /embed/, so the status history was read from /history.atom.", "RDAP gives netlify.com a registration date of 9 June 2014.", "www.netlify.com/.well-known/security.txt returns 404. Vulnerability reports go to the public HackerOne programme per the security transparency post.", "The trust centre at netlify.com/trust-center lists subprocessors (all US) with CSV and PDF downloads and an RSS feed, and the DPA as a direct download." ], "score": 89, "checks": [ { "check": "Legal entity named", "value": "Netlify, Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "netlify.com, registered 2014-06-09 (12 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "api.netlify.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 5 of the 7 things a reader expects", "points": 8.3, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "www.netlifystatus.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "People named", "value": "3 named with their role, none with a public profile", "points": 7, "max": 10, "state": "part" }, { "check": "Support route", "value": "help pages, a community", "points": 5, "max": 5, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "https://www.netlify.com/legal/terms-of-use/", "state": "read", "readAt": "2026-11-03", "statedDate": "2026-10-14", "words": 1875, "points": 8.3, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Updated: October 14, 2026", "says": "Last updated 2026-10-14" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "These terms shall be governed and construed in accordance with the laws of the State of California without giving effect to conflict of law principles.", "says": "The law of the State of California" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "…BREACH OF CONTRACT, TORT (INCLUDING NEGLIGENCE) OR OTHERWISE, REGARDLESS OF THE THEORY OF LIABILITY, IS LIMITED TO NO MORE THAN THE LESSER OF (A) THE TOTAL FEES PAID BY YOU IN THE THEN-CURRENT MONTH OR (B) ONE HUNDRED DOLLARS (US $100).", "says": "Capped at US $100" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "Normally a grace period of 48 hours to take corrective actions will be given, but you risk immediate account termination if Netlify deems this necessary." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": false }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "You may not assign or transfer these Terms or your rights hereunder, in whole or in part, by operation of law or otherwise, without Netlify’s prior written consent." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "notes": [ { "date": "2026-11-03", "text": "The document covers the Netlify website only, and the Services are governed by the Self-Serve Subscription Agreement or the Enterprise Master Subscription Agreement.", "quote": "For the avoidance of doubt, Netlify’s Services are governed exclusively by the Self-Serve Subscription Agreement or the Enterprise Master Subscription Agreement, as applicable, and not by these Terms." }, { "date": "2026-11-03", "text": "Liability for website use is capped at the lesser of the fees paid in the current month or 100 US dollars.", "quote": "IS LIMITED TO NO MORE THAN THE LESSER OF (A) THE TOTAL FEES PAID BY YOU IN THE THEN-CURRENT MONTH OR (B) ONE HUNDRED DOLLARS (US $100)." }, { "date": "2026-11-03", "text": "A violation of the website terms can lead to termination and removal of the customer's website project without notice.", "quote": "A violation of these Terms can lead to termination and removal of your website project without notice." } ] }, { "kind": "privacy", "url": "https://www.netlify.com/privacy/", "state": "read", "readAt": "2026-11-03", "statedDate": "2026-04-10", "words": 4715, "points": 10, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "**Last updated:** April 10, 2026", "says": "Last updated 2026-04-10" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "The categories of Personal Data that we collect depend on how you use the Netlify Services or the Website." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "We may retain your Personal Data for a period of time consistent with the original purpose of collection or as long as required to fulfill our legal obligations.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "However, this Privacy Statement does not apply to data we process as a service provider or data processor on behalf of our enterprise customers." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "We will not sell, lease, or exchange your personal data to, or otherwise share your personal data with, third parties in ways other than described in this Privacy Statement.", "says": "Says it does not sell personal data" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "Where we process your Personal Data for direct marketing purposes or share it with third parties for their own direct marketing purposes, you can exercise your right to object at any time to such processing without having to provide any specific reason for such objection." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "Where we rely on our legitimate interests to process your Personal Data, you have the right to object by emailing us at [privacy@netlify.com](mailto:privacy@netlify.com)", "says": "privacy@netlify.com" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "…do not ensure the same level of data protection, we use a variety of legal mechanisms, including the standard contractual clauses published by the European Commission under Commission Implementing Decision 2021/914, to help protect your rights and enable these protections to travel with your data.", "says": "Relies on standard contractual clauses" } ], "toKnow": [ { "key": "privacy.sells", "label": "Says it sells personal data or shares it for advertising", "found": true, "quote": "Making Personal Information (such as online identifiers or browsing activity) available to these companies may be considered a “sale” or “sharing” of your Personal Information under the CCPA." } ], "notes": [ { "date": "2026-11-03", "text": "Customer code and content are not used to train AI models unless the customer explicitly opts in.", "quote": "We do not use your code or content to train AI models unless you explicitly opt in." }, { "date": "2026-11-03", "text": "The statement does not cover data Netlify processes on behalf of enterprise customers, which the Data Processing Agreement governs.", "quote": "However, this Privacy Statement does not apply to data we process as a service provider or data processor on behalf of our enterprise customers." } ] } ] }, "humans": { "slug": "netlify", "checked": "2026-11-03", "company": "Netlify", "people": [ { "name": "Mathias Biilmann", "role": "Co-founder and Chief Executive Officer", "founder": true, "page": "/people/mathias-biilmann/" }, { "name": "Christian Bach", "role": "Co-founder, Chief Strategy and Creative Officer", "founder": true, "page": "/people/christian-bach/" }, { "name": "Dana Lawson", "role": "Chief Technology Officer", "page": "/people/dana-lawson/" } ], "peopleNote": "The about page (netlify.com/about, read 3 November 2026) names Mathias Biilmann as co-founder and CEO and Christian Bach as co-founder and Chief Strategy and Creative Officer, says the company was founded in summer 2014 and is headquartered in San Francisco, and lists Dana Lawson as CTO in its press and video items. The page links no personal LinkedIn, X or GitHub accounts, so none is recorded. The about page gives total funding of $212M and names the investors below; the press releases of 9 October 2018, 4 March 2020 and 17 November 2021 give the rounds. Angels described only as founders of Figma, GitHub, Heroku, Rackspace, Slack and Yelp are not named on a first-hand page and are left out.", "companySocial": { "linkedin": "https://www.linkedin.com/company/netlify", "x": "https://x.com/netlify", "github": "https://github.com/netlify" }, "support": { "urls": [ "https://www.netlify.com/support/", "https://docs.netlify.com/" ], "community": [ { "label": "Discord", "url": "https://discord.gg/netlify", "kind": "discord" }, { "label": "Support forums", "url": "https://answers.netlify.com/", "kind": "forum" } ] }, "sources": [ "https://www.netlify.com/about/", "https://www.netlify.com/support/", "https://www.netlify.com/press/netlify-raises-usd105-million-to-transform-development-for-the-modern-web.md", "https://www.netlify.com/press/after-onboarding-800000-developers-netlify-raises-53m-in-series-c-funding-to-fuel-enterprise-growth.md", "https://www.netlify.com/press/netlify-raises-usd30-million-to-replace-web-servers-with-a-global-application-delivery-network.md", "https://www.netlify.com/legal/terms-of-use/" ], "ownership": { "status": "private", "totalRaised": { "amount": "$212M", "asOf": "2021-11-17", "source": "https://www.netlify.com/press/netlify-raises-usd105-million-to-transform-development-for-the-modern-web.md" }, "valuation": { "amount": "$2B", "basis": "stated", "round": "Series D", "asOf": "2021-11-17", "source": "https://www.netlify.com/press/netlify-raises-usd105-million-to-transform-development-for-the-modern-web.md" }, "checked": "2026-11-03", "sources": [ "https://www.netlify.com/press/netlify-raises-usd105-million-to-transform-development-for-the-modern-web.md", "https://www.netlify.com/about/" ] }, "investors": [ { "name": "Bessemer Venture Partners", "kind": "vc", "rounds": [ "Series D, November 2021" ], "lead": true, "url": "https://www.bvp.com", "source": "https://www.netlify.com/press/netlify-raises-usd105-million-to-transform-development-for-the-modern-web.md", "quote": "Bessemer Venture Partners led the Series D round", "page": "/investors/bessemer-venture-partners/" }, { "name": "Kleiner Perkins", "kind": "vc", "rounds": [ "Series B, October 2018", "Series C, March 2020", "Series D, November 2021" ], "lead": true, "url": "https://www.kleinerperkins.com", "source": "https://www.netlify.com/press/netlify-raises-usd30-million-to-replace-web-servers-with-a-global-application-delivery-network.md", "quote": "led by Kleiner Perkins' Mamoon Hamid", "page": "/investors/kleiner-perkins/" }, { "name": "Andreessen Horowitz", "kind": "vc", "rounds": [ "Series B, October 2018", "Series C, March 2020", "Series D, November 2021" ], "url": "https://a16z.com", "source": "https://www.netlify.com/press/netlify-raises-usd105-million-to-transform-development-for-the-modern-web.md", "quote": "with participation from existing investors Andreessen Horowitz, BOND, EQT Ventures, Kleiner Perkins, Mango Capital and Menlo Ventures", "page": "/investors/andreessen-horowitz/" }, { "name": "EQT Ventures", "firm": "EQT", "kind": "vc", "rounds": [ "Series C, March 2020", "Series D, November 2021" ], "lead": true, "url": "https://eqtventures.com", "source": "https://www.netlify.com/press/after-onboarding-800000-developers-netlify-raises-53m-in-series-c-funding-to-fuel-enterprise-growth.md", "quote": "The Series C funding round is led by the EQT Ventures Fund", "page": "/investors/eqt/" }, { "name": "BOND", "kind": "vc", "rounds": [ "Series D, November 2021" ], "url": "https://www.bondcap.com", "source": "https://www.netlify.com/press/netlify-raises-usd105-million-to-transform-development-for-the-modern-web.md", "quote": "with participation from existing investors Andreessen Horowitz, BOND, EQT Ventures, Kleiner Perkins, Mango Capital and Menlo Ventures", "page": "/investors/bond/" }, { "name": "Mango Capital", "kind": "vc", "rounds": [ "Series D, November 2021" ], "source": "https://www.netlify.com/press/netlify-raises-usd105-million-to-transform-development-for-the-modern-web.md", "quote": "with participation from existing investors Andreessen Horowitz, BOND, EQT Ventures, Kleiner Perkins, Mango Capital and Menlo Ventures", "page": "/investors/mango-capital/" }, { "name": "Menlo Ventures", "kind": "vc", "rounds": [ "Series D, November 2021" ], "url": "https://menlovc.com", "source": "https://www.netlify.com/press/netlify-raises-usd105-million-to-transform-development-for-the-modern-web.md", "quote": "with participation from existing investors Andreessen Horowitz, BOND, EQT Ventures, Kleiner Perkins, Mango Capital and Menlo Ventures", "page": "/investors/menlo-ventures/" }, { "name": "Preston-Werner Ventures", "kind": "vc", "rounds": [ "Series C, March 2020" ], "source": "https://www.netlify.com/press/after-onboarding-800000-developers-netlify-raises-53m-in-series-c-funding-to-fuel-enterprise-growth.md", "quote": "with participation from existing investors Andreessen Horowitz and Kleiner Perkins, as well as Preston-Werner Ventures", "page": "/investors/preston-werner-ventures/" }, { "name": "Bloomberg Beta", "kind": "vc", "url": "https://www.bloombergbeta.com", "source": "https://www.netlify.com/about/", "quote": "Andreessen Horowitz, Bessemer Venture Partners, Bloomberg Beta, BOND, Designer Fund, EQT Ventures, Kleiner Perkins, Mango Capital, Menlo Ventures, at.inc/", "page": "/investors/bloomberg-beta/" }, { "name": "Designer Fund", "kind": "vc", "url": "https://www.designerfund.com", "source": "https://www.netlify.com/about/", "quote": "Andreessen Horowitz, Bessemer Venture Partners, Bloomberg Beta, BOND, Designer Fund, EQT Ventures, Kleiner Perkins, Mango Capital, Menlo Ventures, at.inc/", "page": "/investors/designer-fund/" }, { "name": "at.inc/", "kind": "vc", "source": "https://www.netlify.com/about/", "quote": "Andreessen Horowitz, Bessemer Venture Partners, Bloomberg Beta, BOND, Designer Fund, EQT Ventures, Kleiner Perkins, Mango Capital, Menlo Ventures, at.inc/", "page": "/investors/at-inc/" } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/netlify.json", "live": { "slug": "netlify", "probe": { "target": "https://api.netlify.com/api/v1", "method": "get", "lastAt": "2026-11-04T20:05:14.55567377Z", "lastOk": true, "lastStatus": 401, "lastMs": 386, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 453, "p95ms24h": 510, "samples24h": 48, "samples30d": 48, "days": [ { "date": "2026-11-04", "probes": 48, "ok": 48 } ] }, "vendorStatus": { "page": "https://www.netlifystatus.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-04T20:05:29.019176422Z" }, "securityTxt": { "url": "https://netlify.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-04T15:53:05.436387975Z" }, "updatedAt": "2026-11-04T20:05:14.55567377Z" } } }