{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-04", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "tool": { "slug": "onshape", "name": "Onshape", "vendor": "PTC", "vendorUrl": "https://www.onshape.com", "kind": "http-api", "category": "cad", "summary": "Onshape is PTC's cloud CAD platform. Its REST API reads and changes documents, Part Studios, assemblies and drawings with API keys or OAuth 2.0, and the FeatureScript MCP Server in Onshape Labs lets an assistant write FeatureScript into a document.", "url": "https://www.anchorterminal.com/tools/onshape", "markdownUrl": "https://www.anchorterminal.com/tools/onshape.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/onshape.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/onshape.json", "dns": "onshape.grade.anchorterminal.com", "repo": "https://github.com/onshape-public/go-client", "transports": [ "streamable-http" ], "remoteUrl": "https://fs-mcp.labs.onshape.app/mcp", "packages": [], "auth": "mixed", "authNotes": "API keys (an access key and a secret) created under My Account \u003e Developer, at most two active per individual account, scoped to permissions and revocable; each request carries a Date header, a 16-character On-Nonce and an HMAC-SHA256 signature in the Authorization header. OAuth 2.0 authorisation code for apps, with 60-minute access tokens and refresh tokens tied to the user's grant; App Store apps must use OAuth. The FeatureScript MCP Server is authorised in a browser after subscribing to it in the App Store. Keys work only on the stack where they were created.", "pricing": "freemium", "pricingNotes": "Free plan at $0 for non-commercial use with every document public; Standard $1,500 and Professional $2,500 per user per year, billed annually; Enterprise by quote. API calls are capped per year by plan, at 2,500 per user on Free, Standard and EDU Student, 5,000 per user on Professional, 10,000 per full user on Enterprise, with 402 Payment Required once spent and more calls sold by sales. Only 2xx and 3xx responses from keys and private OAuth apps count. A Professional trial of up to six months needs no card.", "priceSummary": "$125 / seat-mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the developer docs, the API limits page or the terms (checked 2026-11-03). Onshape's 402 response means the annual API call quota is spent, not a machine payment challenge.", "endpoints": [] }, "toolCount": 0, "popularity": { "githubStars": 13, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://onshape-public.github.io/docs/", "openapi": "https://cad.onshape.com/glassworks/explorer", "capabilities": [ "cad.edit", "cad.generate", "cad.export" ], "tags": [ "hosted", "official", "closed-source", "freemium", "free-tier", "api-key", "oauth", "mcp", "remote-mcp", "beta", "status-page", "soc2", "webhooks", "go", "typescript", "enterprise" ], "lastRelease": "2026-10-30", "graded": true, "anchor": { "graded": true, "score": 55.7, "grade": "C", "agentReady": false, "rank": 820, "ranked": true, "rankOf": 1349, "categoryRank": 3, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 46, "maintenance": 79, "payments": 22, "reliability": 60, "schema": 63, "security": 63, "transparency": 60 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 60, "points": 12, "reason": "Read with the hosted lines on cad.onshape.com. Atlassian Statuspage at status.onshape.com with regional CAD service components and history feeds (20). The feed holds 18 incidents from 15 August to 30 October 2026, all degraded performance, delayed imports and exports or partial signup blocks, the longest 2 hours 42 minutes of export degradation on 15 September and imports, exports and notifications not working for 1 hour 42 minutes on 11 September; no full outage of the CAD service (18 of 30). Annual API call quotas are published per plan with numbers, while per-endpoint rate limits are said to vary by endpoint with no figure (8 of 15). 429 is documented without a header or backoff timing, 402 marks a spent quota, and no idempotency guidance was found (6 of 15). The terms promise commercially reasonable efforts and no SLA (0). The REST API is generally available; the FeatureScript MCP Server is an early-access Labs feature (8 of 10). 20 + 18 + 8 + 6 + 0 + 8 = 60.", "checked": "2026-11-03" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 63, "points": 10.24, "reason": "An OpenAPI document backs the Glassworks API Explorer and the generated Go and TypeScript clients, but cad.onshape.com/robots.txt closes the explorer and the document to readers, so the contract was seen only through the clients (18 of 25). No llms.txt and no Markdown twin of the docs (0). Guides per area state what each API does and the API intro explains documents, workspaces, versions and elements; the MCP server's tools are not listed anywhere public (12 of 20). The Go client's breaking-change list shows typed models with BTType mandatory; enums and constraints were not read in the spec itself (10 of 15). Guides carry examples; the response codes page linked from the docs answered 404 and the API limits page gives 429 and 402 meanings (8 of 15). Numbered API versions (v17), dated release notes every three weeks, deprecations marked and an x-deprecated header (15). 18 + 0 + 12 + 10 + 8 + 15 = 63.", "checked": "2026-11-03" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 46, "points": 7.48, "reason": "Document and element endpoints take ids and the list endpoints take limit and offset, with no field selection documented in what we read; the MCP server's tool count is unknown (12 of 25). Pagination and filters on document lists, and revisions page (a paging loop was fixed in rel-1.219) (14 of 20). HTTP codes with 401, 402 and 429 meanings; the error body shape was on the unread response codes page (10 of 20). No idempotency keys; POSTs create microversions on every edit; no readOnlyHint or destructiveHint published for the MCP tools (2 of 20). Every API key request needs a Date header, a nonce and an HMAC-SHA256 signature, and 307 redirects need a new signature; official Go and TypeScript clients handle it (8 of 15). 12 + 14 + 10 + 2 + 8 = 46.", "checked": "2026-11-03" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 63, "points": 11.03, "reason": "API keys scoped to permissions, revocable, two per individual account, with a signed request scheme; OAuth 2.0 authorisation code with 60-minute access tokens and refresh tokens revoked with the user's grant; no key expiry documented (26 of 30). Permission scopes allow read-only keys; no confirmation step before destructive calls and no approval gate on the MCP server beyond the App Store subscription (12 of 20). The MCP server reads FeatureScript errors and geometry from the document and no prompt-injection guidance was found (5 of 15). API usage counts are visible under Developer settings per company or user; no per-call audit log was found (6 of 15). SOC 2 Type 2 audited annually, AES-256 and TLS 1.2 with HSTS, paid researcher testing and security@onshape.com, but no security.txt (404), no public bug bounty and no advisories page (14 of 20). 26 + 12 + 5 + 6 + 14 = 63.", "checked": "2026-11-03" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 22, "points": 2.75, "reason": "No x402, MPP or L402 (0). Plan prices are public per user per year, with no per-call price; extra API calls are sold by sales at an unpublished rate (10). The Free plan costs nothing for non-commercial use with public documents and a Professional trial needs no card; whether the Free plan asks for a card was not stated (12 of 20). A person signs up in a browser and creates the key or OAuth app (0). 0 + 10 + 12 + 0 = 22.", "checked": "2026-11-03" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 79, "points": 6.91, "reason": "Read for a closed service. API release notes rel-1.223 dated 30 October 2026 (30). Six dated releases from 17 July to 30 October, three weeks apart (20). A public changelog, forum.onshape.com and api-support@onshape.com; response times were not tested (12 of 15). No Onshape-owned server in the official MCP registry, where the only match is io.github.gpambrozio/onshape; the official Go client was pushed on 31 October 2026 and the TypeScript clients in June and September 2025 (12 of 15). The Go client is generated and its CI was not read; the multi-language onshape-clients repository is archived (5 of 10). 30 + 20 + 12 + 12 + 5 = 79.", "checked": "2026-11-03" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 60, "points": 5.25, "note": "editorial 53, provenance 66", "reason": "Closed service with clear terms of 15 July 2020 naming PTC Inc. and Massachusetts law (15). The privacy policy has moved to ptc.com, which our reader could not fetch; the data disclosures page names subprocessors (AWS, Salesforce, SendGrid, Zendesk, Vanilla Forums, Crownpeak, Thought Industries, Stripe, Zuora) without retention periods, and neither the terms nor the disclosures say whether customer content trains AI (12 of 30). Deprecations are marked in dated release notes and flagged with an x-deprecated header, but no notice period is stated (12 of 20). Subprocessors are named and the status page lists hosting regions by continent; no formal data location statement was read (14 of 20). 15 + 12 + 12 + 14 = 53.", "checked": "2026-11-03" } ], "assessment": { "date": "2026-11-03", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Document and element endpoints take ids and the list endpoints take limit and offset, with no field selection documented in what we read; the MCP server's tool count is unknown (12 of 25). Pagination and filters on document lists, and revisions page (a paging loop was fixed in rel-1.219) (14 of 20). HTTP codes with 401, 402 and 429 meanings; the error body shape was on the unread response codes page (10 of 20). No idempotency keys; POSTs create microversions on every edit; no readOnlyHint or destructiveHint published for the MCP tools (2 of 20). Every API key request needs a Date header, a nonce and an HMAC-SHA256 signature, and 307 redirects need a new signature; official Go and TypeScript clients handle it (8 of 15). 12 + 14 + 10 + 2 + 8 = 46.", "maintenance": "Read for a closed service. API release notes rel-1.223 dated 30 October 2026 (30). Six dated releases from 17 July to 30 October, three weeks apart (20). A public changelog, forum.onshape.com and api-support@onshape.com; response times were not tested (12 of 15). No Onshape-owned server in the official MCP registry, where the only match is io.github.gpambrozio/onshape; the official Go client was pushed on 31 October 2026 and the TypeScript clients in June and September 2025 (12 of 15). The Go client is generated and its CI was not read; the multi-language onshape-clients repository is archived (5 of 10). 30 + 20 + 12 + 12 + 5 = 79.", "payments": "No x402, MPP or L402 (0). Plan prices are public per user per year, with no per-call price; extra API calls are sold by sales at an unpublished rate (10). The Free plan costs nothing for non-commercial use with public documents and a Professional trial needs no card; whether the Free plan asks for a card was not stated (12 of 20). A person signs up in a browser and creates the key or OAuth app (0). 0 + 10 + 12 + 0 = 22.", "reliability": "Read with the hosted lines on cad.onshape.com. Atlassian Statuspage at status.onshape.com with regional CAD service components and history feeds (20). The feed holds 18 incidents from 15 August to 30 October 2026, all degraded performance, delayed imports and exports or partial signup blocks, the longest 2 hours 42 minutes of export degradation on 15 September and imports, exports and notifications not working for 1 hour 42 minutes on 11 September; no full outage of the CAD service (18 of 30). Annual API call quotas are published per plan with numbers, while per-endpoint rate limits are said to vary by endpoint with no figure (8 of 15). 429 is documented without a header or backoff timing, 402 marks a spent quota, and no idempotency guidance was found (6 of 15). The terms promise commercially reasonable efforts and no SLA (0). The REST API is generally available; the FeatureScript MCP Server is an early-access Labs feature (8 of 10). 20 + 18 + 8 + 6 + 0 + 8 = 60.", "schema": "An OpenAPI document backs the Glassworks API Explorer and the generated Go and TypeScript clients, but cad.onshape.com/robots.txt closes the explorer and the document to readers, so the contract was seen only through the clients (18 of 25). No llms.txt and no Markdown twin of the docs (0). Guides per area state what each API does and the API intro explains documents, workspaces, versions and elements; the MCP server's tools are not listed anywhere public (12 of 20). The Go client's breaking-change list shows typed models with BTType mandatory; enums and constraints were not read in the spec itself (10 of 15). Guides carry examples; the response codes page linked from the docs answered 404 and the API limits page gives 429 and 402 meanings (8 of 15). Numbered API versions (v17), dated release notes every three weeks, deprecations marked and an x-deprecated header (15). 18 + 0 + 12 + 10 + 8 + 15 = 63.", "security": "API keys scoped to permissions, revocable, two per individual account, with a signed request scheme; OAuth 2.0 authorisation code with 60-minute access tokens and refresh tokens revoked with the user's grant; no key expiry documented (26 of 30). Permission scopes allow read-only keys; no confirmation step before destructive calls and no approval gate on the MCP server beyond the App Store subscription (12 of 20). The MCP server reads FeatureScript errors and geometry from the document and no prompt-injection guidance was found (5 of 15). API usage counts are visible under Developer settings per company or user; no per-call audit log was found (6 of 15). SOC 2 Type 2 audited annually, AES-256 and TLS 1.2 with HSTS, paid researcher testing and security@onshape.com, but no security.txt (404), no public bug bounty and no advisories page (14 of 20). 26 + 12 + 5 + 6 + 14 = 63.", "transparency": "Closed service with clear terms of 15 July 2020 naming PTC Inc. and Massachusetts law (15). The privacy policy has moved to ptc.com, which our reader could not fetch; the data disclosures page names subprocessors (AWS, Salesforce, SendGrid, Zendesk, Vanilla Forums, Crownpeak, Thought Industries, Stripe, Zuora) without retention periods, and neither the terms nor the disclosures say whether customer content trains AI (12 of 30). Deprecations are marked in dated release notes and flagged with an x-deprecated header, but no notice period is stated (12 of 20). Subprocessors are named and the status page lists hosting regions by continent; no formal data location statement was read (14 of 20). 15 + 12 + 12 + 14 = 53." }, "sources": [ { "what": "developer docs landing page", "url": "https://onshape-public.github.io/docs/", "seen": "2026-11-03" }, { "what": "API intro (base URL, versions, document structure)", "url": "https://onshape-public.github.io/docs/api-intro/", "seen": "2026-11-03" }, { "what": "OAuth2", "url": "https://onshape-public.github.io/docs/auth/oauth/", "seen": "2026-11-03" }, { "what": "API keys", "url": "https://onshape-public.github.io/docs/auth/apikeys/", "seen": "2026-11-03" }, { "what": "API limits (quotas, 429, 402)", "url": "https://onshape-public.github.io/docs/auth/limits/", "seen": "2026-11-03" }, { "what": "changelog (rel-1.218 to rel-1.223)", "url": "https://onshape-public.github.io/docs/changelog/", "seen": "2026-11-03" }, { "what": "get help (api-support@onshape.com)", "url": "https://onshape-public.github.io/docs/help/", "seen": "2026-11-03" }, { "what": "response codes page (404)", "url": "https://onshape-public.github.io/docs/api-adv/responsecodes/", "seen": "2026-11-03" }, { "what": "go-client README", "url": "https://raw.githubusercontent.com/onshape-public/go-client/master/README.md", "seen": "2026-11-03" }, { "what": "onshape-public repositories", "url": "https://api.github.com/orgs/onshape-public/repos?per_page=100\u0026sort=pushed", "seen": "2026-11-03" }, { "what": "FeatureScript MCP Server blog post, 3 September 2026", "url": "https://www.onshape.com/en/blog/get-started-featurescript-mcp-server", "seen": "2026-11-03" }, { "what": "tech tip, connect the MCP server to Claude Code, 8 September 2026", "url": "https://www.onshape.com/en/resource-center/tech-tips/connect-featurescript-mcp-server-claude-code", "seen": "2026-11-03" }, { "what": "Onshape Labs page", "url": "https://www.onshape.com/en/features/onshape-labs", "seen": "2026-11-03" }, { "what": "pricing", "url": "https://www.onshape.com/en/pricing", "seen": "2026-11-03" }, { "what": "terms of use, 15 July 2020", "url": "https://www.onshape.com/en/legal/terms-of-use", "seen": "2026-11-03" }, { "what": "legal index", "url": "https://www.onshape.com/en/legal/", "seen": "2026-11-03" }, { "what": "data disclosures (subprocessors)", "url": "https://www.onshape.com/en/legal/data-disclosures", "seen": "2026-11-03" }, { "what": "privacy centre (policy moved to ptc.com)", "url": "https://www.onshape.com/en/privacy-center/", "seen": "2026-11-03" }, { "what": "security page", "url": "https://www.onshape.com/en/security", "seen": "2026-11-03" }, { "what": "status page", "url": "https://status.onshape.com/", "seen": "2026-11-03" }, { "what": "status history feed (18 incidents)", "url": "https://status.onshape.com/history.rss", "seen": "2026-11-03" }, { "what": "MCP registry search", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=onshape", "seen": "2026-11-03" }, { "what": "robots.txt cad.onshape.com (disallow all but /help, /FsDoc)", "url": "https://cad.onshape.com/robots.txt", "seen": "2026-11-03" }, { "what": "robots.txt www.onshape.com", "url": "https://www.onshape.com/robots.txt", "seen": "2026-11-03" }, { "what": "security.txt (404)", "url": "https://www.onshape.com/.well-known/security.txt", "seen": "2026-11-03" }, { "what": "Onshape on Wikipedia (founding, acquisition)", "url": "https://en.wikipedia.org/wiki/Onshape", "seen": "2026-11-03" } ], "openQuestions": [ "unchecked: the OpenAPI document and Glassworks API Explorer on cad.onshape.com, whose robots.txt disallows every path except /help and /FsDoc; the contract was read through the generated Go and TypeScript clients", "unchecked: the Onshape API agreement on the developer portal, which the terms say governs API use", "unchecked: the privacy policy, which has moved to ptc.com; www.ptc.com/robots.txt answered 403", "unchecked: the FeatureScript MCP Server's tool list, annotations and plan requirements, and its App Store listing; appstore.onshape.com answered a bare 301 to robots.txt", "unchecked: whether the Free plan asks for a card at sign-up, and the price of additional API calls", "firstReleased is left empty. Wikipedia dates the company to 2012 and the PTC purchase to November 2019 for $470 million, but no first-hand page for the API's first release was read", "Judgement call on slug and name. Kept as onshape, the audit's slug; the vendor is PTC and the listing name is Onshape, the product's own name" ] }, "negative": 0, "verdict": "Scoped API keys, OAuth 2.0 and versioned release notes every three weeks give an agent a stable REST surface over documents, parts, assemblies and drawings, and the Labs MCP server writes FeatureScript. Each request needs an HMAC signature and nonce, annual call quotas end in 402, per-endpoint limits are unpublished, and robots.txt closes the OpenAPI explorer's host to readers.", "bestFor": "Agents that read or change existing cloud CAD documents, run configurations, pull BOMs and drawings, or write FeatureScript for a team already on Onshape.", "strengths": [ "API keys scoped to permissions and revocable, and OAuth 2.0 with 60-minute access tokens and refresh tokens tied to the user's grant", "Versioned API (v17) with dated release notes every three weeks, deprecations marked and an x-deprecated response header", "Official FeatureScript MCP Server over Streamable HTTP, added to Claude Code with one command after an App Store subscription", "Statuspage with regional components and a 90-day record of short degradations, none a full outage", "Free plan for non-commercial use and a Professional trial of up to six months with no card" ], "weaknesses": [ "Every API key request must be signed with HMAC-SHA256 over the method, nonce, date, content type, path and query, and 307 redirects need a fresh signature", "Annual API call quotas (2,500 per user on Free and Standard) answer 402 when spent; per-endpoint rate limits are unpublished and 429 carries no documented header", "The Glassworks explorer and OpenAPI document are on cad.onshape.com, which robots.txt closes, and no llms.txt exists", "The MCP server is an early-access Labs feature with no public tool list, and AI agents are listed as coming soon", "The API agreement that governs programmatic use is on the developer portal and was not read; the privacy policy is PTC's" ], "agentNotes": [ "Sign every API key request with a Date header within 5 minutes, a unique 16-character On-Nonce and `Authorization: On \u003cAccessKey\u003e:HmacSHA256:\u003csignature\u003e`; prefer OAuth 2.0 bearer tokens and refresh on 401", "Count calls against the plan's annual quota (2,500 per user on Free) and treat 402 as quota exhausted, not a payment request; 4xx and 5xx responses do not count", "Put the API version in the path (api/v17) and pin it, since unversioned calls use v0 and unknown versions fall back to the newest", "On 429 back off and reduce redundant calls; no Retry-After or numeric limit is published, and imports and exports were the component most often delayed in the 90-day record", "For FeatureScript work, subscribe to the FeatureScript MCP Server in the App Store first, then `claude mcp add --transport http onshape https://fs-mcp.labs.onshape.app/mcp` and authorise in the browser; use `/mcp` to re-authenticate" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 55.7 } ], "editorialScores": { "ergonomics": 46, "maintenance": 79, "payments": 22, "reliability": 60, "schema": 63, "security": 63, "transparency": 53 }, "provenanceScore": 66, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-11-03", "grade": "C", "kind": "listed", "method": "0.7", "score": 55.7 } ] }, "connect": { "http": "curl -u \"$ONSHAPE_ACCESS_KEY:$ONSHAPE_SECRET_KEY\" https://cad.onshape.com/api/v17/documents?limit=20", "claudeCode": "claude mcp add --transport http onshape https://fs-mcp.labs.onshape.app/mcp", "config": { "mcpServers": { "onshape": { "url": "https://fs-mcp.labs.onshape.app/mcp" } } } }, "letme": { "capability": "https://letme.dev/cad.edit", "tool": "https://letme.dev/onshape" }, "notable": [ "The REST API lives at https://cad.onshape.com/api with a version in the path (api/v17 since rel-1.220 of 28 August 2026); calls without a version use v0, and an unrecognised version falls back to the newest (https://onshape-public.github.io/docs/api-intro/)", "cad.onshape.com/robots.txt disallows every path except /help and /FsDoc, so the Glassworks API Explorer and the OpenAPI document it serves were not read; the generated Go client (v1.206, BTType mandatory) and TypeScript client stand in for it (https://cad.onshape.com/robots.txt)", "Annual API call quotas by plan (2,500 to 10,000 per user) with 402 when spent, and per-endpoint rate limits that \"vary by endpoint\" with 429 and no numbers or headers (https://onshape-public.github.io/docs/auth/limits/)", "The FeatureScript MCP Server launched through Onshape Labs, an early-access program, is subscribed to in the App Store and added with `claude mcp add --transport http onshape https://fs-mcp.labs.onshape.app/mcp`; the Labs page lists AI agents and automation as coming soon (https://www.onshape.com/en/resource-center/tech-tips/connect-featurescript-mcp-server-claude-code)", "Dated API release notes every three weeks (rel-1.218 of 17 July to rel-1.223 of 30 October 2026), deprecations marked in the notes and an x-deprecated header on calls to deprecated endpoints (https://onshape-public.github.io/docs/changelog/)", "Atlassian Statuspage with 18 incidents between 15 August and 30 October 2026, all degraded performance or delayed imports and exports, the longest 2 hours 42 minutes (https://status.onshape.com/history.rss)", "The terms of 15 July 2020 name PTC Inc. acting through its Onshape business unit, forbid robots, spiders and scrapers, and put API use under a separate API agreement on the developer portal, which was not read (https://www.onshape.com/en/legal/terms-of-use)", "The official MCP registry holds only a third-party server, io.github.gpambrozio/onshape 0.3.0 of 28 October 2026 (https://registry.modelcontextprotocol.io/v0/servers?search=onshape)" ], "area": "design-diagrams", "details": [ { "label": "Surface listed", "value": "The REST API read from onshape-public.github.io (API intro, OAuth2, API keys, API limits, changelog, help), the go-client README, the FeatureScript MCP Server blog post and tech tip, the Labs page, pricing, terms, data disclosures, the security page, status.onshape.com and the MCP registry on 3 November 2026. cad.onshape.com and ptc.com were not fetched because their robots.txt disallow it. No account was made and no call was signed" }, { "label": "Where it runs", "value": "AWS, with CAD service components for North America (us-west-2), Western Europe, Southeast Asia, Australia and Northeast Asia, and Onshape Government on AWS GovCloud. Enterprise accounts use their own subdomain" }, { "label": "API shape", "value": "URLs follow {base}/{endpoint}/d/{documentId}/{w|v|m}/{id}/e/{elementId}; POST always targets a workspace. Guides cover documents, Part Studios, assemblies, drawings, configurations, materials, metadata, import and export, FeatureScript, release management and response codes" }, { "label": "FeatureScript MCP Server", "value": "Streamable HTTP at fs-mcp.labs.onshape.app/mcp, early access through Onshape Labs, subscribed to in the App Store. The assistant writes FeatureScript into a Feature Studio, checks errors, revises and inspects the geometry; an organisation can route it through the company API allocation. No tool list is published" }, { "label": "Clients", "value": "go-client (MIT, pushed 31 October 2026, generated from the API with breaking changes listed), onshape-ts-client and onshape-ts-drawing-client; the onshape-clients multi-language repository is archived since 2023" }, { "label": "Plans and quotas", "value": "Free $0 (public documents), Standard $1,500 and Professional $2,500 per user per year, Enterprise by quote. API calls per year are 2,500 per user (Free, Standard, EDU Student), 5,000 (Professional) and 10,000 per full user (Enterprise), pro-rated when seats change" }, { "label": "Security", "value": "SOC 2 Type 2 audited annually (report under NDA), AES-256 at rest, TLS 1.2 in transit with HSTS, paid third-party researcher testing, reports to security@onshape.com. No security.txt (404)" }, { "label": "Legal entity", "value": "PTC Inc., acting through its Onshape business unit, per the terms of 15 July 2020. Onshape was founded in 2012 and acquired by PTC in November 2019" } ], "unitPrices": [ { "item": "Standard plan", "unit": "seat-month", "usd": 125, "note": "$1,500 per user per year, billed annually; 2,500 API calls per user per year" }, { "item": "Professional plan", "unit": "seat-month", "usd": 208.33, "note": "$2,500 per user per year, billed annually; 5,000 API calls per user per year" } ], "provenance": { "legalEntity": "PTC Inc.", "domain": "onshape.com", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://www.onshape.com/en/legal/terms-of-use", "privacy": "https://www.ptc.com/en/documents/policies/privacy", "statusPage": "https://status.onshape.com/", "changelog": "https://onshape-public.github.io/docs/changelog/", "securityTxt": "none", "checked": "2026-11-03", "notes": [ "PTC Inc., acting through its Onshape business unit, is named in the Onshape Product Terms of Use effective 15 July 2020, under Massachusetts law.", "Section 4(b)(ix) of the terms forbids any robot, spider, scraper or other automated means to access the Service, and section 1 puts API use under a separate API agreement on the developer portal, which was not read. Recorded as facts.", "www.onshape.com/robots.txt disallows many marketing paths (enterprise, landing pages, the free product pages); the legal, pricing, blog and tech-tip pages read are not among them. cad.onshape.com/robots.txt disallows everything except /help and /FsDoc, and www.ptc.com/robots.txt answered 403, so the privacy policy at the URL above was not read.", "www.onshape.com/.well-known/security.txt answered 404.", "The MCP endpoint is on labs.onshape.app, an Onshape domain; the API is on cad.onshape.com." ], "score": 66, "checks": [ { "check": "Legal entity named", "value": "PTC Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "onshape.com, no registry record we could read", "points": 0, "max": 15, "state": "no" }, { "check": "Endpoint on the vendor's domain", "value": "fs-mcp.labs.onshape.app", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 5 of the 7 things a reader expects, and has 3 clauses that cost points", "points": 2.3, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "published, but our reader couldn't read it", "points": 7, "max": 10, "state": "part" }, { "check": "Status page", "value": "status.onshape.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "People named", "value": "3 named with their role, none with a public profile", "points": 7, "max": 10, "state": "part" }, { "check": "Support route", "value": "a support address, help pages, a community", "points": 5, "max": 5, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "https://www.onshape.com/en/legal/terms-of-use", "state": "read", "readAt": "2026-11-03", "words": 12411, "points": 2.3, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": false }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "Governing Law: This Agreement and any action related thereto will be governed and interpreted by and under the laws of the Commonwealth of Massachusetts, consistent with the Federal Arbitration Act, without giving effect to any principles that provide for the application of the law of another jurisdiction.", "says": "The law of the Commonwealth of Massachusetts" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "THE COLLECTIVE AND AGGREGATE LIABILITY OF APPLICATION DEVELOPER AND ONSHAPE TO YOU FOR ALL CLAIMS ARISING FROM OR RELATED TO THE APPLICATION IS LIMITED TO THE GREATER OF: (A) THE AMOUNT OF FEES ACTUALLY RECEIVED BY SUCH PARTY DURING THE LAST 12 MONTHS FROM YOUR PURCHASE OF SUCH APPLICATION;", "says": "Capped at the fees paid in the 12 months before the claim" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "Suspension of Service: Your access to, and use of, the Service may be suspended temporarily for the duration of any scheduled maintenance or unscheduled downtime or unavailability of any portion, or all, of the Service for any reason, including as a result of power outages, system, or Internet failures or other interr…" }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": false }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "IF YOU DO NOT AGREE TO THE FOREGOING, YOU MAY NOT ACCESS OR USE THE SOFTWARE." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": true, "quote": "In addition, we continually test various aspects of the Service, including Onshape’s website, user interfaces, service levels, plans, promotional features, delivery and pricing." } ], "toKnow": [ { "key": "terms.automated", "label": "Restricts automated access", "found": true, "quote": "Use any robot, spider, scraper or other automated means to access the Service, or use any data mining, data gathering or extraction method;", "costsPoints": true }, { "key": "terms.benchmark", "label": "Restricts benchmarking or competitive use", "found": true, "quote": "Analyze the Service, Software or Documentation for purposes competitive to Onshape, or access or otherwise use the Service, Software or Documentation in order to build a similar or competitive service offering;", "costsPoints": true }, { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "We reserve the right in our sole and absolute discretion to make changes from time to time and without notice in how we offer and operate our service.", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "Onshape shall be entitled to suspend, terminate, or limit your access to the Service at any time, with or without notice, if you breach any term of this Agreement, or if you facilitate or encourage any violation of this Agreement." }, { "key": "terms.arbitration", "label": "Requires arbitration or waives class actions", "found": true, "quote": "THIS AGREEMENT INCLUDES A CLASS ACTION WAIVER AND REQUIRES BINDING ARBITRATION ON AN INDIVIDUAL BASIS TO RESOLVE DISPUTES, RATHER THAN JURY TRIALS." } ], "notes": [ { "date": "2026-11-03", "text": "Access through anything other than an unmodified Onshape web or mobile client is also subject to Onshape's separate API Agreement, shown at the developer portal.", "quote": "IF YOU ACCESS THE SERVICE THROUGH ANY MEANS OTHER THAN AN UNMODIFIED ONSHAPE MOBILE OR WEB CLIENT, THEN IN ADDITION TO THIS AGREEMENT YOU ALSO ARE SUBJECT TO THE TERMS AND CONDITIONS OF ONSHAPE’S API AGREEMENT (AS AMENDED FROM TIME TO TIME)." }, { "date": "2026-11-03", "text": "Every document created on the Free Plan is public, and the customer grants a licence for anyone to use, modify, distribute and sell its contents.", "quote": "All documents created by a Free Plan User, and all Content contained therein, is made public and therefore considered a Public Document." }, { "date": "2026-11-03", "text": "Liability is capped at the greater of 100 US dollars or the amount paid in the past 12 months.", "quote": "ONSHAPE’S LIABILITY, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE) OR OTHERWISE, ARISING OUT OF OR IN CONNECTION WITH THE SERVICE, SOFTWARE OR DOCUMENTATION FURNISHED HEREUNDER SHALL NOT EXCEED THE GREATER OF ONE HUNDRED DOLLARS ($100) OR THE AMOUNT YOU HAVE PAID ONSHAPE IN THE PAST 12 MONTHS." } ] }, { "kind": "privacy", "url": "https://www.ptc.com/en/documents/policies/privacy", "state": "unreadable", "reason": "the page answered HTTP 403 to our reader", "readAt": "2026-11-03", "points": 7, "max": 10 } ] }, "humans": { "slug": "onshape", "checked": "2026-11-03", "company": "PTC Inc. (Onshape business unit)", "people": [ { "name": "Jon Hirschtick", "role": "Co-founder, Onshape", "founder": true, "bio": "Jon Hirschtick co-founded Onshape in 2012 with John McEleney and four others, after founding SolidWorks. Onshape was acquired by PTC in November 2019.", "bioSources": [ "https://en.wikipedia.org/wiki/Onshape" ], "page": "/people/jon-hirschtick/" }, { "name": "John McEleney", "role": "Co-founder, Onshape", "founder": true, "bio": "John McEleney co-founded Onshape in 2012 with Jon Hirschtick. Both had earlier been chief executives of SolidWorks.", "bioSources": [ "https://en.wikipedia.org/wiki/Onshape" ], "page": "/people/john-mceleney/" }, { "name": "Neil Barua", "role": "President and Chief Executive Officer, PTC", "bio": "Neil Barua is president and chief executive of PTC Inc., the Nasdaq-listed company that owns Onshape.", "bioSources": [ "https://en.wikipedia.org/wiki/PTC_(software_company)" ], "page": "/people/neil-barua/" } ], "peopleNote": "Onshape's own site has no company or leadership page our reader could find (/en/company and /en/about-us answered 404), and its about page is on ptc.com, whose robots.txt answered 403. The founders are taken from the Wikipedia article, which names Jon Hirschtick and John McEleney among six co-founders, and PTC's chief executive from the PTC article. No current Onshape leader is named on a first-hand page read. No personal accounts are listed. As a subsidiary of a public company Onshape has no investor list.", "companySocial": { "linkedin": "https://www.linkedin.com/company/onshape-inc", "x": "https://x.com/Onshape", "github": "https://github.com/onshape-public" }, "support": { "emails": [ "api-support@onshape.com" ], "urls": [ "https://onshape-public.github.io/docs/help/", "https://cad.onshape.com/help/Content" ], "community": [ { "label": "Onshape Forum", "url": "https://forum.onshape.com/", "kind": "forum" } ], "contactEmails": [ "security@onshape.com" ] }, "sources": [ "https://onshape-public.github.io/docs/help/", "https://www.onshape.com/en/", "https://www.onshape.com/en/legal/terms-of-use", "https://www.onshape.com/en/security", "https://api.github.com/orgs/onshape-public/repos?per_page=100\u0026sort=pushed", "https://en.wikipedia.org/wiki/Onshape", "https://en.wikipedia.org/wiki/PTC_(software_company)" ], "ownership": { "status": "subsidiary", "parent": "PTC Inc.", "acquiredBy": "PTC Inc.", "acquiredDate": "2019-11", "checked": "2026-11-03", "sources": [ "https://www.onshape.com/en/legal/terms-of-use", "https://en.wikipedia.org/wiki/Onshape", "https://en.wikipedia.org/wiki/PTC_(software_company)" ] } }, "pageJsonUrl": "https://www.anchorterminal.com/tools/onshape.json", "live": { "slug": "onshape", "probe": { "target": "https://fs-mcp.labs.onshape.app/mcp", "method": "get", "lastAt": "2026-11-04T19:34:58.43584383Z", "lastOk": true, "lastStatus": 401, "lastMs": 620, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 605, "p95ms24h": 705, "samples24h": 43, "samples30d": 43, "days": [ { "date": "2026-11-04", "probes": 43, "ok": 43 } ] }, "vendorStatus": { "page": "https://status.onshape.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-04T19:31:54.939960943Z" }, "securityTxt": { "url": "https://onshape.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-04T15:54:18.491201234Z" }, "updatedAt": "2026-11-04T19:34:58.43584383Z" } } }