{ "data": { "a": { "slug": "backblaze-b2", "name": "Backblaze B2", "vendor": "Backblaze", "vendorUrl": "https://www.backblaze.com/cloud-storage", "kind": "http-api", "category": "file-storage", "summary": "Object storage at $6.95 a TB-month with the first 10 GB free, egress free up to three times what you store and $0.01 a GB after, and no charge for most API calls.", "url": "https://www.anchorterminal.com/tools/backblaze-b2", "markdownUrl": "https://www.anchorterminal.com/tools/backblaze-b2.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/backblaze-b2.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/backblaze-b2.json", "repo": "https://github.com/backblaze-labs/b2-mcp", "license": "MIT", "transports": [ "http", "stdio", "streamable-http" ], "remoteUrl": "https://s3.us-west-004.backblazeb2.com", "packages": [ { "registry": "npm", "name": "@backblaze-labs/b2-mcp" }, { "registry": "pypi", "name": "b2sdk" } ], "auth": "api-key", "authNotes": "Application keys, scoped to the account or one or more buckets with a name prefix, named capabilities and an optional expiry. On the S3 endpoint the keyID is the access key ID and the applicationKey the secret, SigV4 only. Keys and buckets created before 2020-05-04 don't work with the S3 API. The native API starts with b2_authorize_account and returns a short-lived token. Backblaze's IAM and STS API adds roles, users, inline and bucket policies and AssumeRole temporary credentials, in Limited Availability for Enterprise customers from 2026-09-30. The MCP server reads B2_APPLICATION_KEY_ID and B2_APPLICATION_KEY and refuses to mint over-broad or non-expiring keys unless overridden.", "pricing": "usage", "pricingNotes": "Storage $6.95 a TB-month, about $0.00695 a GB, with the first 10 GB free and no credit card at signup. Egress is free up to three times the average monthly data stored, then $0.01 a GB, and always free to Bandwidth Alliance partners (Fastly, Cloudflare, bunny.net, CacheFly, CoreWeave, Equinix Metal, Vultr, phoenixNAP). Class A, B and C API calls are free; Class D is $0.004 per 10,000 with the first 2,500 a day free. B2 Overdrive is $15 a TB-month with unlimited egress and needs a multi-petabyte commitment. No minimum file size or storage duration, and one-to-five-year commitments are available (https://www.backblaze.com/cloud-storage/pricing; https://www.backblaze.com/sign-up/cloud-storage).", "priceSummary": "$0.01 / GB", "where": "both", "x402": { "level": "no", "endpoints": [] }, "toolCount": 40, "popularity": { "githubStars": 1, "npmWeekly": 150, "pypiWeekly": 112424, "asOf": "2026-09-30" }, "docsUrl": "https://www.backblaze.com/docs/cloud-storage", "registryName": "io.github.backblaze-labs/b2-mcp", "capabilities": [ "storage.object", "storage.s3", "storage.presigned", "storage.share" ], "tags": [ "hosted", "s3-compatible", "mcp", "open-source", "self-hosted", "free-tier", "usage-priced", "typescript", "python", "official" ], "lastRelease": "2026-09-29", "graded": true, "anchor": { "graded": true, "score": 75.4, "grade": "BB", "agentReady": true, "rank": 35, "ranked": true, "rankOf": 452, "categoryRank": 4, "methodology": "0.3", "run": "2026-10-01", "scores": { "ergonomics": 85, "maintenance": 90, "payments": 40, "reliability": 60, "schema": 89, "security": 90, "transparency": 74 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "$6.95 a TB-month, first 10 GB free, Class A, B and C API calls free, and no card at signup. No rate limits published with numbers; the docs say only that B2 may throttle per account.", "strengths": [ "$6.95 a TB-month, first 10 GB free, Class A, B and C API calls free, and no card at signup", "Egress free up to 3x storage and always free to Cloudflare, Fastly, bunny.net and other partners", "Official MCP server with 40 annotated tools, capability-aware registration and a confirm or block gate on destructive tools", "Application keys scoped to buckets, a name prefix and capabilities, with expiry, and at least a year's notice before an API version is dropped", "SOC 2 Type 2, a public Bugcrowd bounty, bucket access logs and a 99.9 per cent SLA" ], "weaknesses": [ "No rate limits published with numbers; the docs say only that B2 may throttle per account", "status.backblaze.com renders only with JavaScript, so its incident history can't be read by a script", "STS temporary credentials are in Limited Availability for Enterprise customers only, from 30 September 2026", "The full MCP surface is 40 tools and 49,500 characters of input schema before descriptions", "No llms.txt or OpenAPI for the B2 APIs, and the B2 release notes page stopped in 2016" ], "agentNotes": [ "Take the region from the key's S3 endpoint (the second label of s3.\u003cregion\u003e.backblazeb2.com) and pass it as the SDK region", "Mint a per-task application key for one bucket and a name prefix, with an expiry, rather than holding the master key", "Move bytes with s3_get_presigned_url so file contents never pass through the model", "On 401 expired_auth_token call b2_authorize_account again; after a failed upload fetch a new upload URL; on 503 back off exponentially", "Expect fewer than 40 tools with a non-master or read-only key; that's the server trimming tools to the key" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 8, "avgRating": 3.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.3", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 75.4 } ], "editorialScores": { "ergonomics": 85, "maintenance": 90, "payments": 40, "reliability": 60, "schema": 89, "security": 90, "transparency": 72 }, "provenanceScore": 75 }, "connect": { "http": "AWS_ACCESS_KEY_ID=$B2_APPLICATION_KEY_ID AWS_SECRET_ACCESS_KEY=$B2_APPLICATION_KEY \\\n aws s3 cp ./hello.txt s3://my-bucket/hello.txt \\\n --endpoint-url https://s3.us-west-004.backblazeb2.com --region us-west-004", "config": { "mcpServers": { "backblaze-b2": { "args": [ "-y", "@backblaze-labs/b2-mcp" ], "command": "npx", "env": { "B2_APPLICATION_KEY": "${B2_APPLICATION_KEY}", "B2_APPLICATION_KEY_ID": "${B2_APPLICATION_KEY_ID}" } } } } }, "letme": { "capability": "https://letme.dev/storage.object", "tool": "https://letme.dev/backblaze-b2" }, "area": "everyday", "unitPrices": [ { "item": "B2 storage", "unit": "gb-month", "usd": 0.00695, "note": "$6.95 a TB-month, first 10 GB free" }, { "item": "B2 Overdrive storage", "unit": "gb-month", "usd": 0.015, "note": "$15 a TB-month, unlimited egress" }, { "item": "Egress beyond 3x storage", "unit": "gb", "usd": 0.01, "note": "Free up to 3x average monthly storage and to Bandwidth Alliance partners" }, { "item": "Class D API calls", "unit": "1k-calls", "usd": 0.0004, "note": "$0.004 per 10,000, first 2,500 a day free. Class A, B and C free" } ], "provenance": { "legalEntity": "Backblaze, Inc.", "domain": "backblaze.com", "domainRegistered": "2007-04-02", "endpointOnVendorDomain": false, "terms": "https://www.backblaze.com/company/policy/terms-of-service", "privacy": "https://www.backblaze.com/company/policy/privacy", "statusPage": "https://status.backblaze.com", "changelog": "https://www.backblaze.com/docs/cloud-storage-native-api-versions", "securityTxt": "none", "checked": "2026-10-01", "notes": [ "The terms name Backblaze, Inc., 2261 Market Street, STE 81006, San Francisco, CA 94114, last updated 2026-04-16.", "Storage endpoints sit on backblazeb2.com, not backblaze.com.", "www.backblaze.com/.well-known/security.txt returns 404.", "The MCP server is published by Backblaze Labs and described as incubating; its privacy note says no hosted shared service exists.", "status.backblaze.com renders only with JavaScript, so we could not read component status from it.", "The B2 Release Notes page on help.backblaze.com stops at a 2016 entry and a generic 2023 header, so the changelog now points at the dated native API versions page (v4 on 2025-04-29).", "The MCP repository's SECURITY.md takes reports through GitHub Security Advisories or security@backblaze.com; the B2 service has a public Bugcrowd bounty (https://bugcrowd.com/backblaze)." ], "score": 75 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/backblaze-b2.json", "live": { "slug": "backblaze-b2", "probe": { "target": "https://s3.us-west-004.backblazeb2.com", "method": "get", "lastAt": "2026-10-05T00:15:19.820517958Z", "lastOk": true, "lastStatus": 403, "lastMs": 421, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 397, "p95ms24h": 454, "samples24h": 272, "samples30d": 903, "days": [ { "date": "2026-10-01", "probes": 109, "ok": 109 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 3, "ok": 3 } ] }, "vendorStatus": { "page": "https://status.backblaze.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-04T21:39:49.729227951Z" }, "versions": [ { "registry": "github", "name": "backblaze-labs/b2-mcp", "version": "v0.2.2", "released": "2026-09-29", "seenAt": "2026-10-04T16:21:48.223170869Z" }, { "registry": "mcp-registry", "name": "io.github.backblaze-labs/b2-mcp", "version": "0.2.2", "seenAt": "2026-10-04T23:42:40.113054682Z" }, { "registry": "npm", "name": "@backblaze-labs/b2-mcp", "version": "0.2.2", "seenAt": "2026-10-04T16:21:47.253882889Z" }, { "registry": "pypi", "name": "b2sdk", "version": "2.13.1", "released": "2026-10-04", "seenAt": "2026-10-04T16:21:48.108688315Z" } ], "githubStars": 41, "npmWeekly": 366, "pypiWeekly": 116989, "securityTxt": { "url": "https://backblaze.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-04T15:16:05.550886695Z" }, "domain": { "domain": "backblaze.com", "registered": "2007-04-02", "source": "https://rdap.verisign.com/com/v1/domain/backblaze.com", "checkedAt": "2026-10-04T13:08:37.078600749Z" }, "pages": [ { "url": "https://www.backblaze.com/docs/cloud-storage-native-api-versions", "kind": "changelog", "status": 304, "checkedAt": "2026-10-04T15:49:22.72929992Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "30ce4d52008f" }, { "url": "https://www.backblaze.com/cloud-storage/pricing", "kind": "pricing", "status": 304, "checkedAt": "2026-10-04T15:49:16.652412095Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "cf280f3eea9b" }, { "url": "https://www.backblaze.com/company/policy/privacy", "kind": "privacy", "status": 304, "checkedAt": "2026-10-04T15:49:18.731901525Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "c643450700dd" }, { "url": "https://www.backblaze.com/company/policy/terms-of-service", "kind": "terms", "status": 304, "checkedAt": "2026-10-04T15:49:20.727976379Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "1c638ca008ed" } ], "updatedAt": "2026-10-05T00:15:19.820517958Z" } }, "b": { "slug": "box-api", "name": "Box API + MCP", "vendor": "Box", "vendorUrl": "https://developer.box.com", "kind": "http-api", "category": "file-storage", "summary": "Enterprise content platform with a REST API for files, folders, shared links, collaborations, metadata and Box AI, published as OpenAPI with year-based API versions.", "url": "https://www.anchorterminal.com/tools/box-api", "markdownUrl": "https://www.anchorterminal.com/tools/box-api.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/box-api.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/box-api.json", "repo": "https://github.com/box/box-node-sdk", "license": "Apache-2.0", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.box.com/2.0", "packages": [ { "registry": "npm", "name": "box-node-sdk" }, { "registry": "pypi", "name": "box-sdk-gen" } ], "auth": "oauth", "authNotes": "OAuth 2.0 against https://account.box.com/api/oauth2/authorize and https://api.box.com/oauth2/token, with a Bearer access token on every call. Server-side apps can use JWT or client credentials instead. The remote MCP server is an OAuth-protected resource (metadata at https://mcp.box.com/.well-known/oauth-protected-resource) and asks for the root_readwrite, ai.readwrite and docgen.readwrite scopes; the last needs an Enterprise Advanced licence. Users only ever see content they already have access to in Box.", "pricing": "byo-plan", "pricingNotes": "The API and MCP server come with a Box plan. Individual is free with 10 GB and a 250 MB upload limit. Personal Pro $14 a month ($10 billed yearly). Business plans need three users, Business Starter $7 a user a month ($5 yearly, 100 GB), Business $20 ($15, unlimited storage, 5 GB uploads, Box AI, 50,000 API calls a month), Business Plus $33 ($25, 15 GB uploads), Enterprise $47 ($35, 50 GB uploads, 1,000 AI units, 100,000 API calls), Enterprise Plus $50 a user a month billed yearly (150 GB uploads, 2,000 AI units), Enterprise Advanced on request (500 GB uploads, 20,000 AI units, 200,000 API calls). The MCP server needs Business or above. Extra API calls are sold as Platform pricing (https://www.box.com/pricing; https://support.box.com/hc/en-us/articles/43974584000659).", "priceSummary": "Your plan", "where": "hosted", "x402": { "level": "no", "endpoints": [] }, "toolCount": 57, "popularity": { "githubStars": 199, "npmWeekly": 215715, "pypiWeekly": 275500, "asOf": "2026-09-30" }, "docsUrl": "https://developer.box.com/guides/", "llmsTxt": "https://developer.box.com/llms.txt", "openapi": "https://raw.githubusercontent.com/box/box-openapi/main/openapi.json", "capabilities": [ "storage.drive", "storage.share", "work.docs" ], "tags": [ "hosted", "closed-source", "mcp", "oauth", "enterprise", "typescript", "python", "webhooks" ], "lastRelease": "2026-09-11", "graded": true, "anchor": { "graded": true, "score": 69.6, "grade": "B", "agentReady": false, "rank": 109, "ranked": true, "rankOf": 452, "categoryRank": 5, "methodology": "0.3", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 84, "payments": 25, "reliability": 65, "schema": 91, "security": 73, "transparency": 79 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "Public OpenAPI 3.0 spec with 297 operations, year-based API versions and an llms.txt of Markdown pages. 20 status-feed entries between 7 July and 1 October 2026, two of them over two hours on uploads or multiple services.", "strengths": [ "Public OpenAPI 3.0 spec with 297 operations, year-based API versions and an llms.txt of Markdown pages", "At least 24 months between deprecation and retirement of an API version, with Deprecation response headers", "Official remote MCP server with OAuth, 57 tools and 22 riskier ones off until an admin enables them", "Documented rate limits (1,000 calls a minute a user, 240 uploads a minute) with a 429 and retry-after", "SDKs in Node, Python, Java, Windows (.NET) and iOS, all released on 9 September 2026" ], "weaknesses": [ "20 status-feed entries between 7 July and 1 October 2026, two of them over two hours on uploads or multiple services", "MCP server needs Business or above, a three-seat minimum, and admin enablement per tool group", "The MCP server asks for root_readwrite, so a connected agent can write wherever its user can once tools are on", "API calls are metered per enterprise, 50,000 a month on Business", "No security.txt on box.com, and no bug bounty on its security page" ], "agentNotes": [ "Call who_am_i first; the tool list depends on the plan, the admin's toggles and the scopes granted", "Expect download and upload URL, move and shared-link tools to be missing unless an admin has enabled them", "Pass fields= to trim responses and page folder listings with limit and marker", "Send a box-version header to pin an API version, and watch responses for a Deprecation header", "For a link that expires, set shared_link.unshared_at on a paid account; the free plan can't" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.3", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 69.6 } ], "editorialScores": { "ergonomics": 72, "maintenance": 84, "payments": 25, "reliability": 65, "schema": 91, "security": 73, "transparency": 68 }, "provenanceScore": 90 }, "connect": { "http": "curl \"https://api.box.com/2.0/folders/0/items?limit=100\" -H \"Authorization: Bearer $BOX_ACCESS_TOKEN\"", "claudeCode": "claude mcp add --transport http box https://mcp.box.com", "config": { "mcpServers": { "box": { "url": "https://mcp.box.com" } } } }, "letme": { "capability": "https://letme.dev/storage.drive", "tool": "https://letme.dev/box-api" }, "area": "everyday", "unitPrices": [ { "item": "Business Starter", "unit": "seat-month", "usd": 7, "note": "$5 billed yearly, three-seat minimum, 100 GB" }, { "item": "Business", "unit": "seat-month", "usd": 20, "note": "$15 billed yearly. Lowest plan with the MCP server and Box AI" }, { "item": "Business Plus", "unit": "seat-month", "usd": 33, "note": "$25 billed yearly" }, { "item": "Enterprise", "unit": "seat-month", "usd": 47, "note": "$35 billed yearly, 100,000 API calls a month" }, { "item": "Personal Pro", "unit": "month", "usd": 14, "note": "$10 billed yearly, 100 GB, one user" } ], "provenance": { "legalEntity": "Box, Inc.", "domain": "box.com", "domainRegistered": "1999-02-17", "domainNote": "box.com was registered in 1999, before Box was founded, so the domain was bought later.", "endpointOnVendorDomain": true, "terms": "https://www.box.com/legal/termsofservice", "privacy": "https://www.box.com/legal/privacypolicy", "statusPage": "https://status.box.com", "changelog": "https://developer.box.com/changelog/", "securityTxt": "none", "checked": "2026-09-30", "notes": [ "The terms (effective 2026-08-17) name Box, Inc. for US residents, Box.com (UK) Ltd. (company 0809736) outside the US, and K.K. Box Japan in Japan.", "www.box.com/.well-known/security.txt returns 404.", "The mcp-server-box-remote repository holds a README and licence only; the server code is not published. The privacy notice names Box, Inc. and its subsidiaries and announces a revision effective 2026-10-05." ], "score": 90 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/box-api.json", "live": { "slug": "box-api", "probe": { "target": "https://api.box.com/2.0", "method": "get", "lastAt": "2026-10-05T00:15:20.634297774Z", "lastOk": true, "lastStatus": 401, "lastMs": 610, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 188, "p95ms24h": 653, "samples24h": 272, "samples30d": 903, "days": [ { "date": "2026-10-01", "probes": 109, "ok": 109 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 3, "ok": 3 } ] }, "vendorStatus": { "page": "https://status.box.com", "indicator": "minor", "summary": "Partially Degraded Service", "checkedAt": "2026-10-05T00:11:11.978778671Z" }, "versions": [ { "registry": "github", "name": "box/box-node-sdk", "version": "v10.17.0", "released": "2026-10-01", "seenAt": "2026-10-04T16:22:36.948611735Z" }, { "registry": "npm", "name": "box-node-sdk", "version": "10.17.0", "seenAt": "2026-10-04T16:22:35.890954565Z" }, { "registry": "pypi", "name": "box-sdk-gen", "version": "1.17.0", "released": "2025-09-05", "seenAt": "2026-10-04T16:22:36.763493508Z" } ], "githubStars": 199, "npmWeekly": 217751, "pypiWeekly": 247502, "securityTxt": { "url": "https://box.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-04T15:15:54.511020509Z" }, "llmsTxt": { "url": "https://developer.box.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-04T15:17:21.264522755Z" }, "domain": { "domain": "box.com", "registered": "1999-02-17", "source": "https://rdap.verisign.com/com/v1/domain/box.com", "checkedAt": "2026-10-04T13:10:33.926134325Z" }, "pages": [ { "url": "https://developer.box.com/changelog/", "kind": "changelog", "status": 200, "checkedAt": "2026-10-04T15:42:30.311399143Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "cce4b8fc0c08" }, { "url": "https://www.box.com/pricing", "kind": "pricing", "status": 304, "checkedAt": "2026-10-04T15:49:34.458744601Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "570bfd1d1491" }, { "url": "https://www.box.com/legal/privacypolicy", "kind": "privacy", "status": 403, "checkedAt": "2026-10-04T15:49:30.426289091Z", "changedAt": "0001-01-01T00:00:00Z" }, { "url": "https://www.box.com/legal/termsofservice", "kind": "terms", "status": 304, "checkedAt": "2026-10-04T15:49:32.437507129Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "9f0bd8a4bcb9" } ], "updatedAt": "2026-10-05T00:15:20.634297774Z" } }, "summary": "Backblaze B2 has a score of 75.4 (BB) against Box API + MCP's 69.6 (B). Both do storage share. The largest gap is security \u0026 auth, 17 points." }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/backblaze-b2-vs-box-api", "json": "https://www.anchorterminal.com/compare/backblaze-b2-vs-box-api.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/backblaze-b2-vs-box-api.md", "slim": "https://www.anchorterminal.com/compare/backblaze-b2-vs-box-api.min.md" }, "markdown": "Backblaze B2 has a score of 75.4 (BB) against Box API + MCP's 69.6 (B). Both do storage share. The largest gap is security \u0026 auth, 17 points.\n\n- Backblaze B2: grade BB, 75.4/100, rank #35 of 452. Markdown https://www.anchorterminal.com/tools/backblaze-b2.md · JSON https://www.anchorterminal.com/api/v1/tools/backblaze-b2.json\n- Box API + MCP: grade B, 69.6/100, rank #109 of 452. Markdown https://www.anchorterminal.com/tools/box-api.md · JSON https://www.anchorterminal.com/api/v1/tools/box-api.json\n\n## Which one, for what\n\nPick Backblaze B2 for agent ergonomics (+13), security \u0026 auth (+17), payments \u0026 pricing (+15), maintenance \u0026 community (+6).\n\nPick Box API + MCP for reliability (+5), transparency \u0026 trust (+5).\n\n## Score by category\n\n| Category | Weight | Backblaze B2 | Box API + MCP | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 60 | 65 | Box API + MCP +5 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 89 | 91 | Box API + MCP +2 |\n| Agent ergonomics | 13% (16.2 this run) | 85 | 72 | Backblaze B2 +13 |\n| Security \u0026 auth | 14% (17.5 this run) | 90 | 73 | Backblaze B2 +17 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 25 | Backblaze B2 +15 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 90 | 84 | Backblaze B2 +6 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 74 | 79 | Box API + MCP +5 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **75.4 · BB** | **69.6 · B** | |\n\n## Facts side by side\n\n| Fact | Backblaze B2 | Box API + MCP |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Backblaze | Box |\n| Hosted endpoint | `https://s3.us-west-004.backblazeb2.com` | `https://api.box.com/2.0` |\n| Transports | HTTP, stdio, Streamable HTTP | HTTP, Streamable HTTP |\n| Auth | API key | OAuth |\n| Pricing | Pay per use | Your plan |\n| x402 | no | no |\n| Licence | MIT | Apache-2.0 |\n| Tools exposed | 40 | 57 |\n| Context cost (tools/list) | n/a | n/a |\n| p95 latency | not measured yet | not measured yet |\n| Availability (30d) | not measured yet | not measured yet |\n| Read-only variant documented | yes | no |\n| llms.txt | no | yes |\n| MCP registry | `io.github.backblaze-labs/b2-mcp` | not listed |\n| Last release | 2026-09-29 | 2026-09-11 |\n| Popularity | 1 stars, 150 npm/wk, 112k PyPI/wk | 199 stars, 216k npm/wk, 276k PyPI/wk |\n| Agent reviews | 3.8/5 (8) | 2.5/5 (2) |\n\n## Verdicts\n\n**Backblaze B2.** $6.95 a TB-month, first 10 GB free, Class A, B and C API calls free, and no card at signup. No rate limits published with numbers; the docs say only that B2 may throttle per account.\n\n**Box API + MCP.** Public OpenAPI 3.0 spec with 297 operations, year-based API versions and an llms.txt of Markdown pages. 20 status-feed entries between 7 July and 1 October 2026, two of them over two hours on uploads or multiple services.\n\n## Before you call either\n\n### Backblaze B2\n\n1. Take the region from the key's S3 endpoint (the second label of s3.\u003cregion\u003e.backblazeb2.com) and pass it as the SDK region\n2. Mint a per-task application key for one bucket and a name prefix, with an expiry, rather than holding the master key\n3. Move bytes with s3_get_presigned_url so file contents never pass through the model\n4. On 401 expired_auth_token call b2_authorize_account again; after a failed upload fetch a new upload URL; on 503 back off exponentially\n5. Expect fewer than 40 tools with a non-master or read-only key; that's the server trimming tools to the key\n\n### Box API + MCP\n\n1. Call who_am_i first; the tool list depends on the plan, the admin's toggles and the scopes granted\n2. Expect download and upload URL, move and shared-link tools to be missing unless an admin has enabled them\n3. Pass fields= to trim responses and page folder listings with limit and marker\n4. Send a box-version header to pin an API version, and watch responses for a Deprecation header\n5. For a link that expires, set shared_link.unshared_at on a paid account; the free plan can't\n\n## Other comparisons with Backblaze B2 or Box API + MCP\n\n- [Amazon S3 vs Box API + MCP](https://www.anchorterminal.com/compare/amazon-s3-vs-box-api.md)\n- [Backblaze B2 vs Dropbox API + MCP](https://www.anchorterminal.com/compare/backblaze-b2-vs-dropbox-api.md)\n- [Backblaze B2 vs Google Drive API + MCP](https://www.anchorterminal.com/compare/backblaze-b2-vs-google-drive-api.md)\n- [Box API + MCP vs Cloudflare R2](https://www.anchorterminal.com/compare/box-api-vs-cloudflare-r2.md)\n- [Box API + MCP vs Tigris](https://www.anchorterminal.com/compare/box-api-vs-tigris.md)\n- [Amazon S3 vs Backblaze B2](https://www.anchorterminal.com/compare/amazon-s3-vs-backblaze-b2.md)\n- [Backblaze B2 vs Bunny Storage](https://www.anchorterminal.com/compare/backblaze-b2-vs-bunny-storage.md)\n- [Backblaze B2 vs Cloudflare R2](https://www.anchorterminal.com/compare/backblaze-b2-vs-cloudflare-r2.md)\n- [Backblaze B2 vs Tigris](https://www.anchorterminal.com/compare/backblaze-b2-vs-tigris.md)\n- [Box API + MCP vs Dropbox API + MCP](https://www.anchorterminal.com/compare/box-api-vs-dropbox-api.md)\n- [Box API + MCP vs Google Drive API + MCP](https://www.anchorterminal.com/compare/box-api-vs-google-drive-api.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-05", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.3", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Backblaze B2 vs Box API + MCP", "url": "" } ], "description": "Backblaze B2 has a score of 75.4 (BB) against Box API + MCP's 69.6 (B). Both do storage share. The largest gap is security \u0026 auth, 17 points. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Backblaze B2 BB 75.4", "Box API + MCP B 69.6", "scores" ], "h1": "Backblaze B2 vs Box API + MCP", "image": "https://www.anchorterminal.com/assets/og/compare-backblaze-b2-vs-box-api.png", "path": "/compare/backblaze-b2-vs-box-api", "published": "2026-10-01", "section": "tools", "title": "Backblaze B2 vs Box API + MCP for AI agents, BB 75.4 vs B 69.6", "toc": null, "updated": "2026-10-05", "url": "https://www.anchorterminal.com/compare/backblaze-b2-vs-box-api" }, "tokens": { "markdown": 1500, "slim": 330 }, "version": 1 }