{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "zamp", "name": "Zamp", "vendor": "Zamp Inc.", "vendorUrl": "https://zamp.com", "kind": "http-api", "category": "tax", "summary": "Zamp is a managed sales tax service for US and Canadian sellers. Its REST API calculates tax by address, records transactions for filing and reads registrations and filings, while Zamp's team registers, files and remits.", "url": "https://www.anchorterminal.com/tools/zamp", "markdownUrl": "https://www.anchorterminal.com/tools/zamp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/zamp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/zamp.json", "license": "Proprietary service under Zamp's Standard Terms and Conditions, which form part of a signed Order Form. The sandbox has its own Developer trial terms", "transports": [ "http" ], "remoteUrl": "https://api.zamp.com", "packages": [], "auth": "api-key", "authNotes": "Every request carries an API key as a Bearer token in the `Authorization` header. A 30-day sandbox key is emailed after a form that asks for a business email, with no card or sales call. A production key is copied from the Integrations page of app.zamp.com or issued by Zamp's account team, and a Zamp account comes through a demo and an Order Form. No scopes, read-only keys or expiry settings were found in the reviewed documentation. The docs tell users to rotate or reset an exposed key without describing how.", "pricing": "paid", "pricingNotes": "No price is published. The pricing page names three plans, Free, U.S. and U.S. + Canada, and the two paid plans read \"Contact sales\". Free includes a rate-limited 30-day API sandbox with no card. Zamp says API calls are never metered and that usage is counted in committed transactions. The terms count ten calculation calls as one transaction for customers who use calculation only (https://zamp.com/pricing, https://zamp.com/terms-conditions section 6.2, checked 2026-10-08).", "priceSummary": "Paid", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the developer docs, the pricing page or the terms (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://developer.zamp.com", "llmsTxt": "https://developer.zamp.com/llms.txt", "capabilities": [ "tax.calculate", "tax.transactions", "tax.filing", "tax.exemptions", "shipping.address-validation" ], "tags": [ "hosted", "paid", "closed-source", "api-key", "llms-txt", "sandbox", "free-trial", "no-card", "sales-led", "status-page" ], "lastRelease": "2026-08-31", "graded": true, "anchor": { "graded": true, "score": 49.5, "grade": "D", "agentReady": false, "rank": 609, "ranked": true, "rankOf": 722, "categoryRank": 9, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 64, "maintenance": 42, "payments": 20, "reliability": 72, "schema": 44, "security": 40, "transparency": 50 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 72, "points": 14.4, "reason": "Graded on the public REST API at api.zamp.com with the hosted lines. Statuspage at zamp.statuspage.io, reached from status.zamp.com, with four components (Calculations API, Transactions API, Zamp API, Zamp Dashboard) (20). The incident feed is empty and the page record was last changed on 29 June 2024. A clean record earns 30, and we took 10 off because no entry of any kind has been posted in over two years, so a monitored page can't be told from an unused one (20). The FAQ gives a limit of 1,000 requests a minute (15). 429 is documented with the code `TOO_MANY_REQUESTS`, and a live response carried `x-zamp-rate-limit-remaining` and `x-zamp-rate-limit-reset`. No Retry-After, backoff guidance or idempotency keys were found. A repeated `POST /transactions` with the same id returns 409 (7). No SLA found. The Accuracy Guarantee in the terms covers penalties and interest, not availability (0). No beta or preview label on the API (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 44, "points": 7.15, "reason": "No machine-readable contract for the API. The one OpenAPI file on the docs host, `api-reference/openapi.json`, is the documentation platform's plant store sample (0). `llms.txt`, `llms-full.txt` and a Markdown copy of every page at the page address plus `.md` (10). Guides say when to calculate and when to post, the refund guide shows invalid and correct requests side by side, and the FAQ states what the API can't do (14). Parameters are listed with types, required flags, length limits and enumerated values for `entity`, `purpose`, `marketplace` and filing frequency. There is no schema, `isResale` appears in examples but not in the property list, and the update call is listed as `PUT /transactions` while its example uses `/transactions/123` (8). cURL, Node.js and Python examples in the quickstart, full response examples, and an error table of 14 codes with two example bodies (12). No version in the path and no API changelog found. `subtotal` is marked deprecated with no date (0)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 64, "points": 10.4, "reason": "List endpoints take `limit` from 1 to 100, default 10, with no field selection. A calculation returns one entry per jurisdiction for each line item and a second where shipping is taxed, and `GET /tax-codes` returns every code in one response (12). Cursor paging on lists, with filters by transaction date on `/transactions` and by state, due date and completion on `/filings` (17). Errors carry a named code and message, and validation errors add an `issues` array with the path of each field. No recovery advice per code (16). The caller sets the transaction id, a duplicate create returns 409, `PUT` replaces by id and `/calculations` saves nothing, so retries are safe. No idempotency keys (12). Few required fields, a default tax code of `R_TPP` and a default country of US. No official SDK found (7)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 40, "points": 7, "reason": "One Bearer API key per account or integration, emailed for the sandbox and copied from the Integrations page for production. The docs say to rotate or reset an exposed key without describing how, and no scopes or expiry were found (17). No read-only key or approval step found. `DELETE /transactions/:id` deletes permanently, though updates and deletes are refused for closed filing periods, and the API can't start registrations or file returns (5). Responses hold the caller's own transaction data and Zamp's tax codes, with no injection guidance found (8). The API product page says customers can \"access detailed logs, transaction histories, and calculation outputs\". No description of an audit log of key use was found (5). A trust centre exists at trust.zamp.com but is drawn by script and we couldn't read it. The site footer reads \"Compliance in progress for AICPA SOC2\". No security.txt, disclosure policy or bug bounty found (5)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 20, "points": 2.5, "reason": "No x402, MPP or L402 (0). No price is published. The pricing page names Free, U.S. and U.S. + Canada plans, and the paid plans read \"Contact sales\" (0). A free 30-day sandbox key with no card, per the trial page (20). The key is emailed after a web form that asks for a business email, and a production account goes through a demo and an Order Form (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 42, "points": 3.68, "reason": "Closed service with no API changelog. The newest dated entry in the docs is the QuickBooks connector's release notes of 31 August 2026, 38 days before the check (20). Three dated entries in the last 90 days, QuickBooks on 30 July and 31 August and WooCommerce plugin 3.4.0 on 4 August 2026. All three are connectors, not the API, so we scored this in part (12). No public changelog for the API. Support by email and telephone (5). No official SDK on npm, PyPI or GitHub, and no entry in the official MCP registry (0). The Adobe Commerce extension on GitHub is at 1.0.13 with a last commit on 22 April 2026 that added a CI check (5)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 50, "points": 4.38, "note": "editorial 27, provenance 73", "reason": "Closed service. The Standard Terms and Conditions are public, cover the API in section 2.2 and are governed by Delaware law. They carry no date and name the company only as ZAMP (13). The terms give 30 days to retrieve Customer Data after termination and let Zamp use data derived from Customer Data to improve its services. The privacy policy, last updated 11 February 2025, gives no retention periods and says Zamp does not support calculations outside the US, which disagrees with the countries guide. The Data Processing Agreement the terms refer to isn't linked (10). No deprecation policy found. The terms let Zamp discontinue the service in whole or in part at any time (2). No subprocessor list or data location found on the pages we could read (2)." } ], "assessment": { "date": "2026-10-08", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "List endpoints take `limit` from 1 to 100, default 10, with no field selection. A calculation returns one entry per jurisdiction for each line item and a second where shipping is taxed, and `GET /tax-codes` returns every code in one response (12). Cursor paging on lists, with filters by transaction date on `/transactions` and by state, due date and completion on `/filings` (17). Errors carry a named code and message, and validation errors add an `issues` array with the path of each field. No recovery advice per code (16). The caller sets the transaction id, a duplicate create returns 409, `PUT` replaces by id and `/calculations` saves nothing, so retries are safe. No idempotency keys (12). Few required fields, a default tax code of `R_TPP` and a default country of US. No official SDK found (7).", "maintenance": "Closed service with no API changelog. The newest dated entry in the docs is the QuickBooks connector's release notes of 31 August 2026, 38 days before the check (20). Three dated entries in the last 90 days, QuickBooks on 30 July and 31 August and WooCommerce plugin 3.4.0 on 4 August 2026. All three are connectors, not the API, so we scored this in part (12). No public changelog for the API. Support by email and telephone (5). No official SDK on npm, PyPI or GitHub, and no entry in the official MCP registry (0). The Adobe Commerce extension on GitHub is at 1.0.13 with a last commit on 22 April 2026 that added a CI check (5).", "payments": "No x402, MPP or L402 (0). No price is published. The pricing page names Free, U.S. and U.S. + Canada plans, and the paid plans read \"Contact sales\" (0). A free 30-day sandbox key with no card, per the trial page (20). The key is emailed after a web form that asks for a business email, and a production account goes through a demo and an Order Form (0).", "reliability": "Graded on the public REST API at api.zamp.com with the hosted lines. Statuspage at zamp.statuspage.io, reached from status.zamp.com, with four components (Calculations API, Transactions API, Zamp API, Zamp Dashboard) (20). The incident feed is empty and the page record was last changed on 29 June 2024. A clean record earns 30, and we took 10 off because no entry of any kind has been posted in over two years, so a monitored page can't be told from an unused one (20). The FAQ gives a limit of 1,000 requests a minute (15). 429 is documented with the code `TOO_MANY_REQUESTS`, and a live response carried `x-zamp-rate-limit-remaining` and `x-zamp-rate-limit-reset`. No Retry-After, backoff guidance or idempotency keys were found. A repeated `POST /transactions` with the same id returns 409 (7). No SLA found. The Accuracy Guarantee in the terms covers penalties and interest, not availability (0). No beta or preview label on the API (10).", "schema": "No machine-readable contract for the API. The one OpenAPI file on the docs host, `api-reference/openapi.json`, is the documentation platform's plant store sample (0). `llms.txt`, `llms-full.txt` and a Markdown copy of every page at the page address plus `.md` (10). Guides say when to calculate and when to post, the refund guide shows invalid and correct requests side by side, and the FAQ states what the API can't do (14). Parameters are listed with types, required flags, length limits and enumerated values for `entity`, `purpose`, `marketplace` and filing frequency. There is no schema, `isResale` appears in examples but not in the property list, and the update call is listed as `PUT /transactions` while its example uses `/transactions/123` (8). cURL, Node.js and Python examples in the quickstart, full response examples, and an error table of 14 codes with two example bodies (12). No version in the path and no API changelog found. `subtotal` is marked deprecated with no date (0).", "security": "One Bearer API key per account or integration, emailed for the sandbox and copied from the Integrations page for production. The docs say to rotate or reset an exposed key without describing how, and no scopes or expiry were found (17). No read-only key or approval step found. `DELETE /transactions/:id` deletes permanently, though updates and deletes are refused for closed filing periods, and the API can't start registrations or file returns (5). Responses hold the caller's own transaction data and Zamp's tax codes, with no injection guidance found (8). The API product page says customers can \"access detailed logs, transaction histories, and calculation outputs\". No description of an audit log of key use was found (5). A trust centre exists at trust.zamp.com but is drawn by script and we couldn't read it. The site footer reads \"Compliance in progress for AICPA SOC2\". No security.txt, disclosure policy or bug bounty found (5).", "transparency": "Closed service. The Standard Terms and Conditions are public, cover the API in section 2.2 and are governed by Delaware law. They carry no date and name the company only as ZAMP (13). The terms give 30 days to retrieve Customer Data after termination and let Zamp use data derived from Customer Data to improve its services. The privacy policy, last updated 11 February 2025, gives no retention periods and says Zamp does not support calculations outside the US, which disagrees with the countries guide. The Data Processing Agreement the terms refer to isn't linked (10). No deprecation policy found. The terms let Zamp discontinue the service in whole or in part at any time (2). No subprocessor list or data location found on the pages we could read (2)." }, "sources": [ { "what": "developer docs home", "url": "https://developer.zamp.com/index.md", "seen": "2026-10-08" }, { "what": "docs index for agents", "url": "https://developer.zamp.com/llms.txt", "seen": "2026-10-08" }, { "what": "full docs in one file", "url": "https://developer.zamp.com/llms-full.txt", "seen": "2026-10-08" }, { "what": "API reference introduction", "url": "https://developer.zamp.com/api-reference/introduction.md", "seen": "2026-10-08" }, { "what": "calculations reference", "url": "https://developer.zamp.com/api-reference/calculations.md", "seen": "2026-10-08" }, { "what": "transactions reference", "url": "https://developer.zamp.com/api-reference/transactions.md", "seen": "2026-10-08" }, { "what": "addresses, filings, registrations, companies and tax codes reference", "url": "https://developer.zamp.com/api-reference/filings.md", "seen": "2026-10-08" }, { "what": "sample OpenAPI file on the docs host", "url": "https://developer.zamp.com/api-reference/openapi.json", "seen": "2026-10-08" }, { "what": "authentication", "url": "https://developer.zamp.com/guides/authentication.md", "seen": "2026-10-08" }, { "what": "trial key", "url": "https://developer.zamp.com/guides/trial.md", "seen": "2026-10-08" }, { "what": "developer trial terms and conditions", "url": "https://developer.zamp.com/guides/developer-trial-terms-and-conditions.md", "seen": "2026-10-08" }, { "what": "production API access", "url": "https://developer.zamp.com/guides/production-api-access.md", "seen": "2026-10-08" }, { "what": "quickstart", "url": "https://developer.zamp.com/guides/quickstart.md", "seen": "2026-10-08" }, { "what": "errors", "url": "https://developer.zamp.com/guides/errors.md", "seen": "2026-10-08" }, { "what": "pagination", "url": "https://developer.zamp.com/guides/pagination.md", "seen": "2026-10-08" }, { "what": "FAQ, rate limit, webhooks and environments", "url": "https://developer.zamp.com/guides/common-faqs.md", "seen": "2026-10-08" }, { "what": "refunds guide", "url": "https://developer.zamp.com/guides/handling-refunds.md", "seen": "2026-10-08" }, { "what": "countries guide", "url": "https://developer.zamp.com/guides/countries.md", "seen": "2026-10-08" }, { "what": "QuickBooks connector release notes", "url": "https://developer.zamp.com/quickbooks-release-notes.md", "seen": "2026-10-08" }, { "what": "WooCommerce plugin downloads and release notes", "url": "https://developer.zamp.com/woo-commerce-plugin-downloads.md", "seen": "2026-10-08" }, { "what": "unauthenticated API response and headers", "url": "https://api.zamp.com/tax-codes", "seen": "2026-10-08" }, { "what": "pricing", "url": "https://zamp.com/pricing", "seen": "2026-10-08" }, { "what": "API product page", "url": "https://zamp.com/integrations/api", "seen": "2026-10-08" }, { "what": "Standard Terms and Conditions", "url": "https://zamp.com/terms-conditions", "seen": "2026-10-08" }, { "what": "privacy policy", "url": "https://zamp.com/privacy-policy", "seen": "2026-10-08" }, { "what": "status page summary", "url": "https://zamp.statuspage.io/api/v2/summary.json", "seen": "2026-10-08" }, { "what": "status incident history", "url": "https://zamp.statuspage.io/api/v2/incidents.json", "seen": "2026-10-08" }, { "what": "trust centre, script-drawn and unread", "url": "https://trust.zamp.com/", "seen": "2026-10-08" }, { "what": "security.txt, 404", "url": "https://zamp.com/.well-known/security.txt", "seen": "2026-10-08" }, { "what": "GitHub organisation and Adobe Commerce extension", "url": "https://github.com/zamptax/zamptax-adobe-commerce-extension", "seen": "2026-10-08" }, { "what": "official MCP registry search", "url": "https://registry.modelcontextprotocol.io/v0.1/servers?search=zamp", "seen": "2026-10-08" }, { "what": "domain registration", "url": "https://rdap.verisign.com/com/v1/domain/zamp.com", "seen": "2026-10-08" } ], "openQuestions": [ "unchecked: the trust centre at trust.zamp.com, which is drawn by script. Certifications, subprocessors and data locations listed there were not read", "unchecked: the Accuracy Guarantee the terms refer to. No link to it was found on the pages we read", "unchecked: the certification spreadsheet and the connector release notes held in Google Docs", "Whether SOC 2 is complete. The site footer says compliance is in progress and the developer docs say \"SOC 2 controls\"", "Which countries the API calculates for. The docs home says US and Canada, the countries guide adds the UK, Australia, New Zealand and the EU, and the privacy policy says the US only", "The legal entity. The footer says Zamp Inc., the terms say ZAMP, and the Companies API example shows Zamp Technologies, Inc.", "How a key is rotated or revoked, and whether an account can hold several keys. The docs say to rotate or reset a key without giving steps", "Whether the `x-zamp-rate-limit-reset` header is supported. It was seen on a live 401 response and is not documented", "lastRelease is the date of the newest connector release note (QuickBooks, 31 August 2026), since Zamp publishes no API changelog", "The lead's coverage claim of 12,000+ US jurisdictions and Canada matches the docs home and is Zamp's own statement" ] }, "negative": 0, "verdict": "A free 30-day sandbox key needs no card or sales call, and the docs are served as Markdown with llms.txt and a published limit of 1,000 requests a minute. There is no OpenAPI file, SDK, API changelog or published price, production keys come with a sales-led account, and the site footer says SOC 2 compliance is in progress.", "bestFor": "An agent working for a US or Canadian seller that wants Zamp's team to register, file and remit, and needs calculation and transaction sync through a small API.", "strengths": [ "Free 30-day sandbox key by email with no card or sales call, preloaded with all 47 remote-seller state registrations", "Docs served as Markdown with `llms.txt` and `llms-full.txt`, and cURL, Node.js and Python examples in the quickstart", "Published limit of 1,000 requests a minute, and responses carry `x-zamp-rate-limit-remaining` and `x-zamp-rate-limit-reset` headers", "Errors return a named code and message, and validation failures add an `issues` array with the path of each bad field", "One transaction object is used by `/calculations` and `/transactions`, with a per-jurisdiction breakdown in every response" ], "weaknesses": [ "No OpenAPI file for the API. The one file on the docs host is the documentation platform's plant store sample", "No price is published. The U.S. and U.S. + Canada plans read \"Contact sales\", and production keys come with a Zamp account", "No API changelog, version in the path, deprecation policy or official SDK found in the reviewed documentation", "API keys have no scopes or read-only mode in the reviewed documentation, and `DELETE /transactions/:id` deletes permanently", "No security.txt or disclosure policy found, and the site footer says SOC 2 compliance is in progress", "No webhooks, and registrations can't be started or approved through the API" ], "agentNotes": [ "Call `POST /calculations` for a quote and `POST /transactions` only when the sale is final. Put the returned `taxDue` in `taxCollected` when posting", "Keep transaction and line item ids to 25 characters. A repeated `POST /transactions` with an existing id returns 409 `CONFLICT`, so a retry doesn't create a second record", "For a refund, post a new transaction with `parentId` set to the sale's id and a negative `quantity`. Never send a negative `amount` on a line item", "Send `shipToAddress.state` and `country` set to CA for Canadian orders. `POST /addresses` validates US addresses only", "Page lists with `limit` (1 to 100, default 10) and `cursor` until `nextCursor` is null. `GET /transactions` returns only transactions written with the same key", "Don't store sensitive or personal data in the sandbox. Trial data is deleted after 30 days and the trial terms forbid live customer data" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 49.5 } ], "editorialScores": { "ergonomics": 64, "maintenance": 42, "payments": 20, "reliability": 72, "schema": 44, "security": 40, "transparency": 27 }, "provenanceScore": 73 }, "connect": { "http": "curl -X POST https://api.zamp.com/calculations \\\n -H \"Authorization: Bearer {your-api-key}\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\"id\":\"123\",\"name\":\"INV-123\",\"transactedAt\":\"2023-07-01T00:00:00.000Z\",\"isResale\":false,\"discount\":2,\"subtotal\":18,\"shippingHandling\":5,\"total\":23,\"shipToAddress\":{\"line1\":\"120 SW 10TH AVE\",\"line2\":null,\"state\":\"KS\",\"city\":\"TOPEKA\",\"zip\":\"66612\"},\"lineItems\":[{\"id\":\"LI-123\",\"amount\":10,\"quantity\":2,\"discount\":0,\"shippingHandling\":0,\"productName\":\"The Ultimate Sampler\",\"productSku\":\"SAMPLER-100\",\"productTaxCode\":\"R_TPP_FOOD-BEVERAGE_HOME-CONSUMPTION\"}]}'" }, "letme": { "capability": "https://letme.dev/tax.calculate", "tool": "https://letme.dev/zamp" }, "notable": [ "The API reference documents 11 operations on 7 resources at https://api.zamp.com, covering `/calculations`, `/transactions`, `/addresses`, `/tax-codes`, `/companies`, `/registrations` and `/filings` (https://developer.zamp.com/api-reference/introduction)", "The docs are served as Markdown by adding `.md` to a page address, with an index at `llms.txt` and the whole set in `llms-full.txt` (https://developer.zamp.com/llms.txt)", "The only OpenAPI file on the docs host, `api-reference/openapi.json`, is the documentation platform's sample for a plant store and does not describe Zamp's API (https://developer.zamp.com/api-reference/openapi.json)", "The FAQ gives a rate limit of 1,000 requests a minute, says there are no webhooks, and says registrations can't be started or approved through the API (https://developer.zamp.com/guides/common-faqs)", "The site footer reads \"Compliance in progress for AICPA SOC2\", while the developer docs say \"SOC 2 controls and audit-ready records\" (https://zamp.com/terms-conditions, https://developer.zamp.com/guides/what-is-zamp)", "The countries guide lists the United States, Canada, the United Kingdom, Australia, New Zealand and 27 EU states, while the privacy policy says Zamp does not support calculations outside the US (https://developer.zamp.com/guides/countries, https://zamp.com/privacy-policy)", "The docs host answers MCP requests at `/mcp` with two read-only tools that search the documentation. It is the documentation platform's server and does not reach a Zamp account (https://developer.zamp.com/mcp)", "No Zamp server appears in the official MCP registry (https://registry.modelcontextprotocol.io/v0.1/servers?search=zamp)" ], "area": "domain-data", "details": [ { "label": "API", "value": "11 documented operations under https://api.zamp.com with JSON bodies. No version in the path and no OpenAPI file" }, { "label": "Calculation", "value": "`POST /calculations` returns `taxDue` and a `taxes` array with one entry per jurisdiction (state, county, city, district) for each line item and for shipping. Historical rates from 2023. Nothing is saved" }, { "label": "Transactions", "value": "`POST`, `GET`, `PUT` and `DELETE` on `/transactions`. Refunds are new transactions linked by `parentId`. Updates and deletes are refused for closed filing periods" }, { "label": "Read-only resources", "value": "`GET /filings` (status, due date, confirmation numbers and signed file links that expire after 1 hour), `GET /registrations`, `GET /companies` and `GET /tax-codes`" }, { "label": "Exemptions", "value": "Set on the transaction with `entity` (seven values such as `NON_PROFIT`) and `purpose` (such as `RESALE`). No certificate endpoint is documented" }, { "label": "Coverage", "value": "Zamp says 12,000+ US jurisdictions plus Canada. The countries guide also lists the United Kingdom, Australia, New Zealand and 27 EU states for VAT. Address validation is US only" }, { "label": "Credentials", "value": "API key as a Bearer token. Sandbox key by email, production key from the Integrations page of app.zamp.com. No scopes found" }, { "label": "Rate limits", "value": "1,000 requests a minute per the FAQ. 429 returns the code `TOO_MANY_REQUESTS`. Responses carry `x-zamp-rate-limit-remaining` and `x-zamp-rate-limit-reset`, seen on a live response and not documented" }, { "label": "Errors", "value": "14 named codes from `PARSE_ERROR` to `INTERNAL_SERVER_ERROR`, each with a message. Validation errors add an `issues` array with `code`, `message` and `path`" }, { "label": "Paging", "value": "Cursor paging with `limit` 1 to 100, default 10, newest first. `GET /tax-codes` returns every code in one response" }, { "label": "Sandbox", "value": "30-day trial key with all 47 remote-seller state registrations preset. Same base URL as production. Data is deleted after 30 days and nothing is filed" }, { "label": "Pricing", "value": "Not published. Free plan with sandbox, U.S. and U.S. + Canada plans through sales" }, { "label": "SDKs", "value": "No official SDK found on npm, PyPI or Zamp's GitHub organisation, which holds one Adobe Commerce extension" }, { "label": "Webhooks", "value": "None, per the FAQ" }, { "label": "Status", "value": "Statuspage at https://zamp.statuspage.io (status.zamp.com redirects there) with four components. No incident has been posted" } ], "provenance": { "legalEntity": "Zamp Inc.", "domain": "zamp.com", "domainRegistered": "2001-08-01", "endpointOnVendorDomain": true, "terms": "https://zamp.com/terms-conditions", "privacy": "https://zamp.com/privacy-policy", "statusPage": "https://zamp.statuspage.io", "changelog": "", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The site footer reads \"© 2026 Zamp Inc.\" with an address in Miami, Florida. The terms name the company only as ZAMP, and the Companies API example shows \"Zamp Technologies, Inc.\" trading as Zamp Tax.", "The Standard Terms and Conditions at zamp.com/terms-conditions form part of the customer's Order Form and are governed by Delaware law. Section 2.2 covers the API. The page carries no date.", "Sandbox use is governed by the Developer trial terms and conditions at developer.zamp.com/guides/developer-trial-terms-and-conditions, effective 1 October 2025.", "The privacy policy, last updated 11 February 2025, defines the Service as the website and adds a Global Privacy Statement on data sent through the API. It is the only privacy document found.", "The terms refer to a Data Processing Agreement. No link to it was found on the pages we read.", "The API answers at api.zamp.com, on the vendor's domain. Its response headers name Vercel as the server.", "status.zamp.com redirects to zamp.statuspage.io. The page lists four components and its incident feed is empty.", "zamp.com, developer.zamp.com and api.zamp.com all return 404 for /.well-known/security.txt.", "No API changelog was found. The docs carry dated release notes for the QuickBooks, WooCommerce and NetSuite connectors only.", "RDAP for zamp.com gives a registration date of 2001-08-01, which predates the company's use of the name." ], "score": 73, "checks": [ { "check": "Legal entity named", "value": "Zamp Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "zamp.com, registered 2001-08-01 (25 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "api.zamp.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 4 of the 7 things a reader expects, and has 2 clauses that cost points", "points": 3.4, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "zamp.statuspage.io", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ], "policies": [ { "kind": "terms", "url": "https://zamp.com/terms-conditions", "state": "read", "readAt": "2026-10-08", "words": 4458, "points": 3.4, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": false }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "This Agreement shall be governed by the laws of the State of Delaware without regard to its conflict of law’s provisions.", "says": "The law of the State of Delaware" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "8.2 Customer’s sole and exclusive remedies and Company’s entire liability for breach of the warranty under Section 8.1 will be: (i) the re-performance of the deficient Service;" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "…discontinuation that has a material, adverse impact on Customer’s ability to use the Service, Customer shall be entitled, as its sole and exclusive remedy, to terminate its subscription(s) to the affected Service, and receive a prorated refund of the subscription fees pre-paid by Customer for the affected Service for…" }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": false }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "2.1 Customer will not, directly or indirectly: reverse engineer, decompile, disassemble or otherwise attempt to discover the source code, object code or underlying structure, ideas, know-how or algorithms relevant to the Services or any software, documentation or data related to the Services (“Software”);" }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "terms.automated", "label": "Restricts automated access", "found": true, "quote": "attempt or provide a means to execute any “bulk download” operations, including without limitation by “crawling” the API or Content;", "costsPoints": true }, { "key": "terms.benchmark", "label": "Restricts benchmarking or competitive use", "found": true, "quote": "(F) use the API to create a product or service that is competitive with any Zamp Service.", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "In addition to any other remedies it may have, either party may also terminate this Agreement upon thirty (30) days’ notice (or without notice in the case of nonpayment), if the other party materially breaches any of the terms or conditions of this Agreement." } ], "notes": [ { "date": "2026-10-08", "text": "Zamp may use information concerning customer data to improve its services and for development of other Zamp offerings, during and after the term.", "quote": "Company will be free (during and after the term hereof) to (i) use such information and data to improve and enhance the Services and for other development, diagnostic and corrective purposes in connection with the Services and other Company offerings" }, { "date": "2026-10-08", "text": "API customers may not cache, store or modify the sales tax content returned by the API unless Zamp authorises it.", "quote": "cache or otherwise store any Content and/or modify any Content;" }, { "date": "2026-10-08", "text": "Zamp upgrades a customer to a higher tier automatically after three consecutive months above the tier's monthly transactions or when the supported states are exceeded.", "quote": "if Customer exceeds the monthly transactions for three (3) consecutive months or exceeds the states supported which includes a one (1) state buffer for each tier, Company will automatically upgrade Customer to a tier that aligns with either the monthly transactions achieved over that time period" } ] }, { "kind": "privacy", "url": "https://zamp.com/privacy-policy", "state": "read", "readAt": "2026-10-08", "statedDate": "2025-02-11", "words": 3023, "points": 10, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Update: February 11, 2025", "says": "Last updated 2025-02-11" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, u…" }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "Service Provider means any natural or legal person who processes the data on behalf of the Company." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company." }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "If you have any questions about this Privacy Policy, You can contact us:" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction." } ], "notes": [ { "date": "2026-10-08", "text": "Data partners may use cookies to link website visits and logins to a person's email or home address, and marketing may then be sent there.", "quote": "When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or home address." }, { "date": "2026-10-08", "text": "Zamp may share personal information with business partners to offer products, services or promotions.", "quote": "With business partners: We may share Your information with Our business partners to offer You certain products, services or promotions." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/zamp.json", "live": { "slug": "zamp", "probe": { "target": "https://api.zamp.com", "method": "get", "lastAt": "2026-10-08T21:12:26.350754243Z", "lastOk": true, "lastStatus": 418, "lastMs": 255, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 269, "p95ms24h": 815, "samples24h": 21, "samples30d": 21, "days": [ { "date": "2026-10-08", "probes": 21, "ok": 21 } ] }, "vendorStatus": { "page": "https://zamp.statuspage.io", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-08T21:06:31.517422774Z" }, "updatedAt": "2026-10-08T21:12:26.350754243Z" } } }