{
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-10-14",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.4",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run"
  },
  "tool": {
    "slug": "scribeup",
    "name": "ScribeUp",
    "vendor": "ScribeUp Technologies, Inc.",
    "vendorUrl": "https://scribeup.io",
    "kind": "http-api",
    "category": "personal-finance",
    "summary": "ScribeUp is an embedded subscription and recurring-bill management service that banks, credit unions and fintechs put inside their own apps. It finds subscriptions and cancels them or updates the card on file, by SDK, iFrame or API.",
    "url": "https://www.anchorterminal.com/tools/scribeup",
    "markdownUrl": "https://www.anchorterminal.com/tools/scribeup.md",
    "slimMarkdownUrl": "https://www.anchorterminal.com/tools/scribeup.min.md",
    "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/scribeup.json",
    "license": "Closed service under the ScribeUp Terms of Service (ScribeUp Technologies, Inc.).",
    "transports": [],
    "packages": [],
    "auth": "mixed",
    "authNotes": "Partners initialise the SDK with client credentials, per scribeup.io/developer, but the developer docs are locked and access starts with a demo request. End users reach ScribeUp only inside a partner's app, and it temporarily stores merchant logins and session tokens, encrypted, for automated tasks (https://scribeup.io/privacy).",
    "pricing": "paid",
    "pricingNotes": "No public prices. Access for banks, credit unions and fintechs starts with a demo request on scribeup.io, checked 14 October 2026. No free tier or sandbox was found.",
    "priceSummary": "Paid",
    "where": "local",
    "x402": {
      "level": "no",
      "evidence": "No x402, MPP or L402 found on scribeup.io or its terms, checked 14 October 2026.",
      "endpoints": []
    },
    "toolCount": null,
    "popularity": {
      "githubStars": null,
      "npmWeekly": null,
      "pypiWeekly": null,
      "asOf": "2026-10-14"
    },
    "capabilities": [
      "finance.subscriptions",
      "finance.cancellation",
      "finance.bills"
    ],
    "tags": [
      "hosted",
      "official",
      "closed-source",
      "paid",
      "enterprise",
      "not-for-agents",
      "sales-led"
    ],
    "graded": true,
    "anchor": {
      "graded": true,
      "score": 7.9,
      "grade": "F",
      "agentReady": false,
      "rank": 1071,
      "ranked": true,
      "rankOf": 1076,
      "categoryRank": 10,
      "methodology": "0.4",
      "run": "2026-10-01",
      "scores": {
        "ergonomics": 0,
        "maintenance": 2,
        "payments": 0,
        "reliability": 15,
        "schema": 0,
        "security": 6,
        "transparency": 42
      },
      "pending": [
        "performance",
        "tasks"
      ],
      "breakdown": [
        {
          "key": "reliability",
          "name": "Reliability",
          "weight": 16,
          "effectiveWeight": 20,
          "score": 15,
          "points": 3,
          "reason": "Read with the hosted lines. No status page found, and status.scribeup.io has no DNS record (0). No readable incident history (5). No limits published (0). No overload or retry guidance (0). No SLA published (0). The service is sold to partners and isn't labelled beta (10)."
        },
        {
          "key": "performance",
          "name": "Performance",
          "weight": 10,
          "effectiveWeight": 0,
          "pending": true,
          "points": 0,
          "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes."
        },
        {
          "key": "schema",
          "name": "Schema \u0026 documentation",
          "weight": 13,
          "effectiveWeight": 16.25,
          "score": 0,
          "points": 0,
          "reason": "Graded on the interface an outside agent can use. The partner API's docs are locked, so the contract, description, typed-input and example lines score nothing (0 of 25, 0 of 20, 0 of 15, 0 of 15). No llms.txt (0 of 10). No public changelog (0 of 15)."
        },
        {
          "key": "ergonomics",
          "name": "Agent ergonomics",
          "weight": 13,
          "effectiveWeight": 16.25,
          "score": 0,
          "points": 0,
          "reason": "Graded on the interface an outside agent can use. With no public reference, context cost, pagination, errors, retries and defaults have nothing to score (0 on each line)."
        },
        {
          "key": "security",
          "name": "Security \u0026 auth",
          "weight": 14,
          "effectiveWeight": 17.5,
          "score": 6,
          "points": 1.05,
          "reason": "Graded on the interface an outside agent can use. With none public, the credential, least-privilege, injection and audit lines score nothing (0 of 30, 0 of 20, 0 of 15, 0 of 15). Security programme. SOC 2 Type II and PCI DSS are claimed on scribeup.io with a Vanta trust centre, whose report we didn't read, and an enterprise DPA is mentioned. No security.txt, disclosure policy or bug bounty found (6 of 20). For the record, ScribeUp temporarily stores merchant logins and session tokens, encrypted."
        },
        {
          "key": "payments",
          "name": "Payments \u0026 pricing",
          "weight": 10,
          "effectiveWeight": 12.5,
          "score": 0,
          "points": 0,
          "reason": "Read with the hosted rule. No x402, MPP or L402 (0). No public prices, access by demo request (0). No free tier or sandbox found (0). A business has to request a demo (0)."
        },
        {
          "key": "tasks",
          "name": "Task success",
          "weight": 10,
          "effectiveWeight": 0,
          "pending": true,
          "points": 0,
          "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored."
        },
        {
          "key": "maintenance",
          "name": "Maintenance \u0026 community",
          "weight": 7,
          "effectiveWeight": 8.75,
          "score": 2,
          "points": 0.18,
          "reason": "Read for a closed service. No release notes, changelog or dated product change found (0). None in the last 90 days either (0). Contact addresses only, untested (2 of 15). No public SDK package (0). Nothing to judge for package health (0)."
        },
        {
          "key": "transparency",
          "name": "Transparency \u0026 trust",
          "weight": 7,
          "effectiveWeight": 8.75,
          "score": 42,
          "points": 3.68,
          "note": "editorial 31, provenance 53",
          "reason": "Closed service under terms naming ScribeUp Technologies, Inc., effective 1 October 2026 (15). The privacy policy, same date, gives retention criteria without periods, names Plaid and explains merchant credential storage (12 of 30). No deprecation policy or notices found (0 of 20). Only Plaid named among processors, with no regions (4 of 20)."
        }
      ],
      "assessment": {
        "date": "2026-10-14",
        "basis": "public evidence",
        "confidence": "medium",
        "notes": {
          "ergonomics": "Graded on the interface an outside agent can use. With no public reference, context cost, pagination, errors, retries and defaults have nothing to score (0 on each line).",
          "maintenance": "Read for a closed service. No release notes, changelog or dated product change found (0). None in the last 90 days either (0). Contact addresses only, untested (2 of 15). No public SDK package (0). Nothing to judge for package health (0).",
          "payments": "Read with the hosted rule. No x402, MPP or L402 (0). No public prices, access by demo request (0). No free tier or sandbox found (0). A business has to request a demo (0).",
          "reliability": "Read with the hosted lines. No status page found, and status.scribeup.io has no DNS record (0). No readable incident history (5). No limits published (0). No overload or retry guidance (0). No SLA published (0). The service is sold to partners and isn't labelled beta (10).",
          "schema": "Graded on the interface an outside agent can use. The partner API's docs are locked, so the contract, description, typed-input and example lines score nothing (0 of 25, 0 of 20, 0 of 15, 0 of 15). No llms.txt (0 of 10). No public changelog (0 of 15).",
          "security": "Graded on the interface an outside agent can use. With none public, the credential, least-privilege, injection and audit lines score nothing (0 of 30, 0 of 20, 0 of 15, 0 of 15). Security programme. SOC 2 Type II and PCI DSS are claimed on scribeup.io with a Vanta trust centre, whose report we didn't read, and an enterprise DPA is mentioned. No security.txt, disclosure policy or bug bounty found (6 of 20). For the record, ScribeUp temporarily stores merchant logins and session tokens, encrypted.",
          "transparency": "Closed service under terms naming ScribeUp Technologies, Inc., effective 1 October 2026 (15). The privacy policy, same date, gives retention criteria without periods, names Plaid and explains merchant credential storage (12 of 30). No deprecation policy or notices found (0 of 20). Only Plaid named among processors, with no regions (4 of 20)."
        },
        "sources": [
          {
            "what": "homepage and solution",
            "url": "https://scribeup.io",
            "seen": "2026-10-14"
          },
          {
            "what": "developer page",
            "url": "https://scribeup.io/developer",
            "seen": "2026-10-14"
          },
          {
            "what": "trust centre page",
            "url": "https://scribeup.io/trust-center",
            "seen": "2026-10-14"
          },
          {
            "what": "terms of service",
            "url": "https://scribeup.io/terms-of-service",
            "seen": "2026-10-14"
          },
          {
            "what": "privacy policy",
            "url": "https://scribeup.io/privacy",
            "seen": "2026-10-14"
          },
          {
            "what": "status subdomain DNS lookup",
            "url": "https://dns.google/resolve?name=status.scribeup.io\u0026type=A",
            "seen": "2026-10-14"
          }
        ],
        "openQuestions": [
          "unchecked: the Vanta trust centre at app.vanta.com and any SOC 2 report.",
          "The partner API's contract, authentication and limits, which aren't public.",
          "Whether ScribeUp still runs the consumer Chrome extension that third-party pages mention."
        ]
      },
      "negative": 0,
      "verdict": "ScribeUp sells subscription detection, one-click cancellation and card updating to banks and fintechs, embedded by SDK, iFrame or API, and claims SOC 2 Type II and PCI DSS compliance. There is no public API or MCP server an outside agent can call today. Developer docs are locked and access starts with a demo request.",
      "bestFor": "Banks and fintechs that want subscription management inside their app.",
      "strengths": [
        "Embeds by SDK, iFrame or API, with webhooks and events, per its developer page.",
        "Claims SOC 2 Type II and PCI DSS compliance, with a trust centre run on Vanta.",
        "Terms and privacy policy dated 1 October 2026, explaining how merchant credentials are stored."
      ],
      "weaknesses": [
        "No public API or MCP server an outside agent can call.",
        "The Developer docs link on scribeup.io is locked, and access starts with a demo request.",
        "No public prices, free tier or sandbox.",
        "No changelog, release notes or status page found."
      ],
      "agentNotes": [
        "Don't plan to call ScribeUp from another agent. Send a person to their bank's app if it embeds ScribeUp, or a business to ScribeUp's demo request.",
        "Expect data a partner bank collects to fall under that bank's privacy policy, not ScribeUp's."
      ],
      "metrics": {
        "kind": "remote",
        "measured": false
      },
      "reviewCount": 0,
      "avgRating": 0,
      "history": [
        {
          "basis": "public evidence",
          "confidence": "medium",
          "grade": "F",
          "methodology": "0.4",
          "pending": [
            "performance",
            "tasks"
          ],
          "run": "2026-10-01",
          "runLabel": "October 2026 research run",
          "score": 7.9
        }
      ],
      "editorialScores": {
        "ergonomics": 0,
        "maintenance": 2,
        "payments": 0,
        "reliability": 15,
        "schema": 0,
        "security": 6,
        "transparency": 31
      },
      "provenanceScore": 53
    },
    "connect": {},
    "letme": {
      "capability": "https://letme.dev/finance.subscriptions",
      "tool": "https://letme.dev/scribeup"
    },
    "notable": [
      "scribeup.io/developer describes integration in three steps, SDK install with client credentials, an embedded SDK widget or iFrame, and webhooks and events, with the Developer docs link locked (https://scribeup.io/developer)",
      "The site lists end-to-end subscription management by SDK or iFrame, and one-click cancellation, one-click payment updater and cross-sell by API or in-product (https://scribeup.io/solution)",
      "The privacy policy says ScribeUp temporarily stores encrypted merchant login credentials and session tokens to run automated subscription tasks, and receives transaction data from Plaid (https://scribeup.io/privacy)",
      "The site claims SOC 2 Type II and PCI DSS compliance and links a Vanta trust centre (https://scribeup.io/trust-center)",
      "The terms forbid using the service to spider, crawl or scrape (https://scribeup.io/terms-of-service)"
    ],
    "area": "domain-data",
    "details": [
      {
        "label": "Surface listed",
        "value": "ScribeUp's partner API, SDK and embedded app as described on scribeup.io, its developer, trust centre, terms and privacy pages on 14 October 2026. No demo was requested and the trust centre on app.vanta.com wasn't read."
      },
      {
        "label": "Outside agent access",
        "value": "None. The API and SDK are for partner banks and fintechs, the developer docs are locked, and access starts with a demo request."
      },
      {
        "label": "What it acts on",
        "value": "Subscriptions and recurring bills found in a partner's card and account data, merchant cancellations and card-on-file updates (https://scribeup.io)."
      },
      {
        "label": "Where end users meet it",
        "value": "Inside partner banking apps. The site shows partner logos for Q2, Alkami, Banno, Candescent and Lumin."
      },
      {
        "label": "Company",
        "value": "ScribeUp Technologies, Inc. Contact support@scribeup.io and info@scribeup.io (https://scribeup.io/terms-of-service)."
      }
    ],
    "provenance": {
      "legalEntity": "ScribeUp Technologies, Inc.",
      "domain": "scribeup.io",
      "domainRegistered": "2020-10-23",
      "endpointOnVendorDomain": null,
      "terms": "https://scribeup.io/terms-of-service",
      "privacy": "https://scribeup.io/privacy",
      "statusPage": "",
      "changelog": "",
      "securityTxt": "none",
      "checked": "2026-10-14",
      "notes": [
        "The terms and privacy policy are effective 1 October 2026.",
        "scribeup.io/.well-known/security.txt returns the site's HTML page, not a security.txt. status.scribeup.io has no DNS record.",
        "The site's inquiry form posts to production.api.scribeup.co.",
        "RDAP gives a registration date of 2020-10-23 for scribeup.io."
      ],
      "score": 53,
      "checks": [
        {
          "check": "Legal entity named",
          "value": "ScribeUp Technologies, Inc.",
          "points": 20,
          "max": 20,
          "state": "ok"
        },
        {
          "check": "Domain age",
          "value": "scribeup.io, registered 2020-10-23 (5 years)",
          "points": 11,
          "max": 15,
          "state": "part"
        },
        {
          "check": "Endpoint on the vendor's domain",
          "value": "no hosted endpoint",
          "points": 0,
          "max": 0,
          "state": "na"
        },
        {
          "check": "Terms of service",
          "value": "published, but our reader couldn't read it",
          "points": 7,
          "max": 10,
          "state": "part"
        },
        {
          "check": "Privacy policy",
          "value": "published, but our reader couldn't read it",
          "points": 7,
          "max": 10,
          "state": "part"
        },
        {
          "check": "Status page",
          "value": "not found",
          "points": 0,
          "max": 10,
          "state": "no"
        },
        {
          "check": "Changelog",
          "value": "not found",
          "points": 0,
          "max": 10,
          "state": "no"
        },
        {
          "check": "security.txt",
          "value": "not found",
          "points": 0,
          "max": 10,
          "state": "no"
        }
      ],
      "policies": [
        {
          "kind": "terms",
          "url": "https://scribeup.io/terms-of-service",
          "state": "unreadable",
          "reason": "the page has 1 words of text without a browser, so the document is drawn by script or sits elsewhere",
          "readAt": "2026-10-14",
          "points": 7,
          "max": 10
        },
        {
          "kind": "privacy",
          "url": "https://scribeup.io/privacy",
          "state": "unreadable",
          "reason": "the page has 1 words of text without a browser, so the document is drawn by script or sits elsewhere",
          "readAt": "2026-10-14",
          "points": 7,
          "max": 10
        }
      ]
    },
    "pageJsonUrl": "https://www.anchorterminal.com/tools/scribeup.json"
  }
}