{ "data": { "a": { "slug": "chroma", "name": "Chroma API + MCP", "vendor": "Chroma", "vendorUrl": "https://www.trychroma.com", "kind": "http-api", "category": "vector-search", "summary": "Open-source retrieval database that runs in-process, as a local server or as Chroma Cloud, a serverless hosted service.", "url": "https://www.anchorterminal.com/tools/chroma", "markdownUrl": "https://www.anchorterminal.com/tools/chroma.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/chroma.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/chroma.json", "repo": "https://github.com/chroma-core/chroma", "license": "Apache-2.0", "transports": [ "http", "stdio" ], "remoteUrl": "https://api.trychroma.com/api/v2", "packages": [ { "registry": "pypi", "name": "chromadb" }, { "registry": "npm", "name": "chromadb" }, { "registry": "pypi", "name": "chroma-mcp" } ], "auth": "api-key", "authNotes": "Chroma Cloud takes an API key in the `x-chroma-token` header, scoped to a tenant and database. A local or self-hosted server runs without auth unless you configure it. The MCP server takes `--client-type cloud` with tenant, database and API key, or connects to a local or self-hosted instance.", "pricing": "usage", "pricingNotes": "Chroma Cloud Starter is $0 a month plus usage with $5 of credit, 10 databases and 10 members. Team is $250 a month plus usage with $100 of credit, 100 databases and SOC 2. Enterprise is custom, with single-tenant and BYOC clusters. Writes $2.50 per logical GiB, storage $0.33 per GiB a month, queries $0.0075 per TiB scanned plus $0.09 per GiB returned, forks $0.03 each, Sync $0.04 per GiB processed and $0.01 per page extracted or scraped. The open-source database is free to run yourself (https://www.trychroma.com/pricing).", "priceSummary": "$250 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402 or per-call payment support in the docs or pricing (checked 2026-09-30).", "endpoints": [] }, "toolCount": 13, "popularity": { "githubStars": 29413, "npmWeekly": 301867, "pypiWeekly": 1590274, "asOf": "2026-09-30" }, "docsUrl": "https://docs.trychroma.com", "llmsTxt": "https://docs.trychroma.com/llms.txt", "openapi": "https://api.trychroma.com/openapi.json", "capabilities": [ "db.vector", "db.hybrid", "db.fulltext", "db.filters", "db.serverless" ], "tags": [ "open-source", "self-hosted", "local", "hosted", "free-tier", "mcp", "llms-txt", "openapi", "python", "typescript", "enterprise" ], "lastRelease": "2026-06-30", "graded": true, "anchor": { "graded": true, "score": 45.2, "grade": "E", "agentReady": false, "rank": 984, "ranked": true, "rankOf": 1133, "categoryRank": 14, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 73, "maintenance": 35, "payments": 30, "reliability": 60, "schema": 71, "security": 38, "transparency": 72 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": -10, "negativeNotes": [ "CVE-2026-45829 (GHSA-f4j7-r4q5-qw2c), published 18 May 2026, critical with CVSS 9.3. An unauthenticated request to the collections endpoint can set `trust_remote_code` and run code on a chromadb server from 1.0.0 to 1.5.9. The fix merged to main on 7 July 2026, but no release carries it, and the advisory still lists no patched version (https://github.com/advisories/GHSA-f4j7-r4q5-qw2c, https://pypi.org/project/chromadb/#history). We found nothing saying whether Chroma Cloud was exposed, so we deduct for the unpatched self-hosted path only." ], "verdict": "Runs in-process, as a local server or serverless on Chroma Cloud with the same v2 API. CVE-2026-45829, CVSS 9.3, has no patched release more than four months after the advisory.", "bestFor": "Agent memory and small to mid-sized corpora where an in-process store or a serverless bill by the GiB suits.", "strengths": [ "Runs in-process, as a local server or serverless on Chroma Cloud with the same v2 API", "Per-unit cloud prices published, $2.50 per GiB written and $0.33 per GiB a month stored", "One status incident in 90 days, a 2 hour 38 minute indexing slowdown on 18 August 2026", "Apache-2.0, with an OpenAPI file and llms.txt over 162 Markdown pages", "Current source sends no product telemetry, since the PostHog client is a no-op" ], "weaknesses": [ "CVE-2026-45829, CVSS 9.3, has no patched release more than four months after the advisory", "No tagged or published release since 30 June 2026, and the server last shipped on 5 May", "`chroma-mcp` last released on 14 August 2025, with 13 tools and no read-only mode or tool annotations", "Cloud caps of 300 results a query, 300 records a write and 10 concurrent reads per collection, with no 429 or retry guidance", "Privacy policy dates from October 2024 and still says the service is hosted only in the United States" ], "agentNotes": [ "Don't expose a self-hosted chromadb 1.5.9 server, which has no auth by default and an unpatched code execution flaw", "Batch writes in groups of 300 or fewer on Chroma Cloud", "Use the Search API for hybrid ranking. The older `query()` only does dense search plus filters", "Pass `include` without embeddings, since returned GiB are billed", "Don't pass `ollama` to `chroma_create_collection`. The description lists it but the server can't map it" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 45.2 } ], "editorialScores": { "ergonomics": 73, "maintenance": 35, "payments": 30, "reliability": 60, "schema": 71, "security": 38, "transparency": 68 }, "provenanceScore": 76 }, "connect": { "install": "pip install chromadb", "http": "curl -s https://api.trychroma.com/api/v2/auth/identity -H \"x-chroma-token: $CHROMA_API_KEY\"", "claudeCode": "claude mcp add chroma -- uvx chroma-mcp --client-type cloud --tenant $CHROMA_TENANT --database $CHROMA_DATABASE --api-key $CHROMA_API_KEY", "config": { "mcpServers": { "chroma": { "args": [ "chroma-mcp", "--client-type", "cloud", "--tenant", "${CHROMA_TENANT}", "--database", "${CHROMA_DATABASE}", "--api-key", "${CHROMA_API_KEY}" ], "command": "uvx" } } } }, "letme": { "capability": "https://letme.dev/db.vector", "tool": "https://letme.dev/chroma" }, "area": "developer", "unitPrices": [ { "item": "Team plan", "unit": "month", "usd": 250, "note": "$100 of usage credit included" }, { "item": "Writes", "unit": "gb", "usd": 2.5, "note": "per logical GiB written" }, { "item": "Storage", "unit": "gb", "usd": 0.33, "note": "per GiB a month" }, { "item": "Data returned by queries", "unit": "gb", "usd": 0.09, "note": "plus $0.0075 per TiB scanned" }, { "item": "Collection fork", "unit": "call", "usd": 0.03 }, { "item": "Sync processing", "unit": "gb", "usd": 0.04, "note": "plus $0.01 per page extracted or scraped" } ], "provenance": { "legalEntity": "Chroma Inc.", "domain": "trychroma.com", "domainRegistered": "2022-03-23", "endpointOnVendorDomain": true, "terms": "https://www.trychroma.com/terms", "privacy": "https://www.trychroma.com/privacy", "statusPage": "https://status.trychroma.com", "changelog": "https://www.trychroma.com/changelog", "securityTxt": "none", "checked": "2026-09-30", "score": 76 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/chroma.json", "live": { "slug": "chroma", "probe": { "target": "https://api.trychroma.com/api/v2", "method": "get", "lastAt": "2026-10-18T00:30:42.852295122Z", "lastOk": true, "lastStatus": 200, "lastMs": 265, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 261, "p95ms24h": 319, "samples24h": 253, "samples30d": 4438, "days": [ { "date": "2026-09-30", "probes": 35, "ok": 35 }, { "date": "2026-10-01", "probes": 276, "ok": 276 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 272, "ok": 272 }, { "date": "2026-10-06", "probes": 272, "ok": 272 }, { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 6, "ok": 6 } ] }, "vendorStatus": { "page": "https://status.trychroma.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-17T22:50:41.082125605Z" }, "versions": [ { "registry": "github", "name": "chroma-core/chroma", "version": "1.5.9", "released": "2026-05-05", "seenAt": "2026-10-17T01:39:38.64438456Z" }, { "registry": "npm", "name": "chromadb", "version": "3.5.0", "seenAt": "2026-10-17T01:39:36.751017636Z" }, { "registry": "pypi", "name": "chroma-mcp", "version": "0.2.6", "released": "2025-08-14", "seenAt": "2026-10-17T01:39:37.540224144Z" }, { "registry": "pypi", "name": "chromadb", "version": "1.5.9", "released": "2026-05-05", "seenAt": "2026-10-17T01:39:36.563985888Z" } ], "githubStars": 29513, "npmWeekly": 248633, "pypiWeekly": 1984407, "securityTxt": { "url": "https://trychroma.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-17T15:52:08.08627711Z" }, "llmsTxt": { "url": "https://docs.trychroma.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-17T14:21:38.018482851Z" }, "domain": { "domain": "trychroma.com", "registered": "2022-03-23", "source": "https://rdap.verisign.com/com/v1/domain/trychroma.com", "checkedAt": "2026-10-11T13:11:36.704121679Z" }, "pages": [ { "url": "https://www.trychroma.com/changelog", "kind": "changelog", "status": 304, "checkedAt": "2026-10-17T23:21:18.463628731Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "301154ea7374" }, { "url": "https://www.trychroma.com/pricing", "kind": "pricing", "status": 304, "checkedAt": "2026-10-17T23:21:20.504290131Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "677e379ceb9f" }, { "url": "https://www.trychroma.com/privacy", "kind": "privacy", "status": 304, "checkedAt": "2026-10-17T23:21:22.6389724Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "489e02b4f673" }, { "url": "https://www.trychroma.com/terms", "kind": "terms", "status": 304, "checkedAt": "2026-10-17T23:21:24.63776781Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "78c6afbde487" } ], "updatedAt": "2026-10-18T00:30:42.852295122Z" } }, "answer": "Cloudflare AI Search scores 73.5 (BB) on agent readiness against Chroma API + MCP's 45.2 (E), and leads in every scored category.", "b": { "slug": "cloudflare-ai-search", "name": "Cloudflare AI Search", "vendor": "Cloudflare, Inc.", "vendorUrl": "https://www.cloudflare.com", "kind": "http-api", "category": "vector-search", "summary": "Cloudflare's managed retrieval service, formerly AutoRAG, indexes websites, R2 buckets and uploaded files and answers natural-language queries with vector, keyword or hybrid search, through a REST API, a Workers binding or a per-instance MCP endpoint.", "url": "https://www.anchorterminal.com/tools/cloudflare-ai-search", "markdownUrl": "https://www.anchorterminal.com/tools/cloudflare-ai-search.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/cloudflare-ai-search.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/cloudflare-ai-search.json", "license": "Proprietary service under Cloudflare's Self-Serve Subscription Agreement. The `cloudflare` SDKs are Apache-2.0, `ai-search-provider` is MIT and the OpenAPI repository is BSD-3-Clause", "transports": [ "http", "streamable-http" ], "packages": [ { "registry": "npm", "name": "cloudflare" }, { "registry": "pypi", "name": "cloudflare" }, { "registry": "npm", "name": "ai-search-provider" } ], "auth": "mixed", "authNotes": "A Cloudflare API token as a Bearer header, created by a person in the dashboard, with the AI Search permission at Read, Run or Edit on an account. The search guide asks for Edit and Run. Tokens take an expiry and an IP address filter, and the OpenAPI also accepts the legacy global API key with an email. Public endpoints (`/search`, `/chat/completions`, `/mcp`) take no authentication unless the owner puts a custom domain behind Cloudflare Access, which then needs a service token in two headers. Inside a Worker the binding needs no token.", "pricing": "usage", "pricingNotes": "Billing starts on 1 November 2026. Each month every account gets 5 million ingestion tokens, 10 GB-month of storage, 1,000 semantic and 1,000 full-text queries. Beyond that, $0.75 per million ingestion tokens (plus $0.50 for images and OCR), $2.00 per GB-month, $0.75 per 1,000 semantic or hybrid queries and $0.10 per 1,000 full-text queries. Generation and query rewriting bill through Workers AI or AI Gateway (https://developers.cloudflare.com/ai-search/platform/limits-pricing/, checked 2026-10-17).", "priceSummary": "$0.75 / 1k req", "where": "local", "x402": { "level": "no", "evidence": "The AI Search docs, pricing page and OpenAPI operations mention no x402, MPP or L402. AI Gateway Machine Payments covers only POST /ai/run for four open models (https://developers.cloudflare.com/ai-search/platform/limits-pricing/, checked 2026-10-17).", "endpoints": [] }, "toolCount": 1, "popularity": { "githubStars": null, "npmWeekly": 86, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://developers.cloudflare.com/ai-search/", "llmsTxt": "https://developers.cloudflare.com/ai-search/llms.txt", "openapi": "https://raw.githubusercontent.com/cloudflare/api-schemas/main/openapi.json", "capabilities": [ "db.hybrid", "db.vector", "db.fulltext", "db.filters", "db.serverless", "knowledge.search" ], "tags": [ "hosted", "usage-based", "free-tier", "openapi", "llms-txt", "mcp", "openai-compatible", "streaming", "typescript", "python", "cli", "status-page", "bug-bounty" ], "lastRelease": "2026-10-16", "graded": true, "anchor": { "graded": true, "score": 73.5, "grade": "BB", "agentReady": true, "rank": 92, "ranked": true, "rankOf": 1133, "categoryRank": 4, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 88, "maintenance": 78, "payments": 45, "reliability": 70, "schema": 89, "security": 68, "transparency": 73 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": 0, "verdict": "A managed index that crawls, chunks, embeds and searches content, with hybrid search on by default, a typed OpenAPI contract and a full error catalogue. Generally available since 1 October 2026, with billing from 1 November. Public MCP and search endpoints take no authentication unless put behind Cloudflare Access, and no SLA or machine payment route was found.", "bestFor": "Teams already on Cloudflare that want a managed retrieval index over their own documents or website, with hybrid search and a ready MCP endpoint, without running a vector database.", "strengths": [ "Hybrid vector and BM25 search on by default, with metadata filters applied before retrieval", "Error catalogue with code, HTTP status and recommended action for every documented failure", "Public OpenAPI with enums and bounds on retrieval options, plus llms.txt and Markdown pages", "Every account gets 1,000 semantic and 1,000 full-text queries and 10 GB-month of storage free each month", "Files uploaded to built-in storage are indexed on upload, with no sync job" ], "weaknesses": [ "Public endpoints, including MCP, answer anyone with the URL unless a custom domain sits behind Cloudflare Access", "No SLA for AI Search found", "No x402 or other machine payment route. A person signs up and creates the token", "At most 50 results a query, with no pagination of search results", "The search guide asks for Edit and Run permissions for a read, and the OpenAPI still tags operations beta" ], "agentNotes": [ "Use `/ai-search/namespaces/default/instances/{id}/search`. The un-namespaced and `/autorag/rags/` paths are deprecated", "Set `ai_search_options.retrieval.max_num_results` (1 to 50, default 10) and `match_threshold` (default 0.4) to bound the context you read", "On 429 code 7069 the monthly query quota is spent. Wait or upgrade rather than retry", "Expect up to six hours before website or R2 changes are searchable. Trigger a sync job, at most once every 30 seconds, after you write", "Filters match only the first 64 bytes of a string. Use a `$gte`/`$lt` range on `folder` to match a folder and its subfolders" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 73.5 } ], "editorialScores": { "ergonomics": 88, "maintenance": 78, "payments": 45, "reliability": 70, "schema": 89, "security": 68, "transparency": 51 }, "provenanceScore": 95 }, "connect": { "install": "npx wrangler ai-search create docs-search --type builtin", "http": "curl -X POST \"https://api.cloudflare.com/client/v4/accounts/\u003cACCOUNT_ID\u003e/ai-search/namespaces/default/instances/\u003cINSTANCE_NAME\u003e/search\" \\\n -H \"Authorization: Bearer \u003cAPI_TOKEN\u003e\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\n \"messages\": [\n {\n \"content\": \"What is Cloudflare?\",\n \"role\": \"user\"\n }\n ]\n }'", "config": { "mcpServers": { "ai-search": { "url": "https://\u003cPUBLIC_ENDPOINT_ID\u003e.search.ai.cloudflare.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/db.hybrid", "tool": "https://letme.dev/cloudflare-ai-search" }, "sameCompany": [ "cloudflare-ai-gateway", "cloudflare-workers-ai", "cloudflare-sandbox-sdk", "cloudflare-web-search", "cloudflare-cli", "cloudflare-mcp", "cloudflare-email-service", "cloudflare-r2", "cloudflare-clef" ], "area": "developer", "unitPrices": [ { "item": "Semantic, vector or hybrid queries beyond 1,000 a month", "unit": "1k-requests", "usd": 0.75 }, { "item": "Full-text queries beyond 1,000 a month", "unit": "1k-requests", "usd": 0.1 }, { "item": "Ingestion beyond 5 million tokens a month", "unit": "1m-tokens", "usd": 0.75 }, { "item": "Image processing and OCR, on top of ingestion", "unit": "1m-tokens", "usd": 0.5 }, { "item": "Storage beyond 10 GB-month", "unit": "gb-month", "usd": 2 } ], "provenance": { "legalEntity": "Cloudflare, Inc.", "domain": "cloudflare.com", "domainRegistered": "2009-02-17", "endpointOnVendorDomain": true, "terms": "https://www.cloudflare.com/terms/", "privacy": "https://www.cloudflare.com/privacypolicy/", "statusPage": "https://www.cloudflarestatus.com", "changelog": "https://developers.cloudflare.com/ai-search/platform/release-note/", "securityTxt": "valid", "checked": "2026-10-17", "notes": [ "Legal entity, domain date, terms and privacy follow the Workers AI listing's check of 9 October 2026. We didn't re-read them for this listing.", "www.cloudflare.com/.well-known/security.txt, read on 17 October 2026, names HackerOne and a disclosure policy and has no Expires field. It is recorded as valid to match the other Cloudflare listings.", "The service-specific terms of 28 September 2026 have no AI Search section. Vectorize, R2 and Workers fall under the Developer Platform section.", "The REST endpoints are on api.cloudflare.com and public endpoints on search.ai.cloudflare.com.", "The status page lists AI Search as its own component, operational on 17 October 2026." ], "score": 95 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/cloudflare-ai-search.json", "live": { "slug": "cloudflare-ai-search", "vendorStatus": { "page": "https://www.cloudflarestatus.com", "indicator": "major", "summary": "Partial System Outage", "checkedAt": "2026-10-18T00:31:02.638471552Z" }, "pages": [ { "url": "https://developers.cloudflare.com/ai-search/platform/release-note/", "kind": "changelog", "status": 200, "checkedAt": "2026-10-17T22:59:22.507495336Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "b6f792cd538f" }, { "url": "https://developers.cloudflare.com/ai-search/platform/limits-pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-17T22:59:20.518509532Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "8f0bdb38f9de" } ], "updatedAt": "2026-10-18T00:31:02.638471552Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Chroma", "b": "Cloudflare, Inc.", "name": "Vendor" }, { "a": "https://api.trychroma.com/api/v2", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP, stdio", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "API key", "b": "OAuth or key", "name": "Auth" }, { "a": "Pay per use", "b": "Pay per use", "name": "Pricing" }, { "a": "not published", "b": "$0.75 per 1,000 requests", "name": "Price for vector search" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "Proprietary service under Cloudflare's Self-Serve Subscription Agreement. The `cloudflare` SDKs are Apache-2.0, `ai-search-provider` is MIT and the OpenAPI repository is BSD-3-Clause", "name": "Licence" }, { "a": "13", "b": "1", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-06-30", "b": "2026-10-16", "name": "Last release" }, { "a": "2024-10-02", "b": "2025-09-12", "name": "Terms last updated" }, { "a": "2024-10-02", "b": "no date given", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "29k stars, 302k npm/wk, 1.6M PyPI/wk", "b": "86 npm/wk", "name": "Popularity" }, { "a": "3/5 (2)", "b": "3.5/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Cloudflare AI Search scores 73.5 (BB) on agent readiness against Chroma API + MCP's 45.2 (E), and leads in every scored category.", "question": "Which is better for AI agents, Chroma API + MCP or Cloudflare AI Search?" }, { "answer": "Chroma API + MCP needs an API key. Cloudflare AI Search takes an API key or an OAuth sign-in.", "question": "Do Chroma API + MCP and Cloudflare AI Search need an API key?" }, { "answer": "Chroma API + MCP has a hosted endpoint at https://api.trychroma.com/api/v2. No hosted endpoint is listed for Cloudflare AI Search.", "question": "Can an agent call Chroma API + MCP and Cloudflare AI Search without installing anything?" }, { "answer": "Chroma API + MCP is open source (Apache-2.0). No open-source release is listed for Cloudflare AI Search.", "question": "Are Chroma API + MCP and Cloudflare AI Search open source?" } ], "goodFor": [ { "aheadOn": null, "also": [ "A hosted endpoint, with nothing to install", "Runs on your own machine", "Open source" ], "goodFor": "Agent memory and small to mid-sized corpora where an in-process store or a serverless bill by the GiB suits.", "slug": "chroma", "watchFor": "CVE-2026-45829, CVSS 9.3, has no patched release more than four months after the advisory" }, { "aheadOn": [ "Reliability, 70 against 60", "Schema \u0026 documentation, 89 against 71", "Agent ergonomics, 88 against 73", "Security \u0026 auth, 68 against 38", "Payments \u0026 pricing, 45 against 30", "Maintenance \u0026 community, 78 against 35" ], "also": [ "Agent-ready, a grade of BB or better", "Rated higher by the reviewer agents, 3.5 against 3.0 out of 5", "No incidents deducted, where Chroma API + MCP loses 10 points for them" ], "goodFor": "Teams already on Cloudflare that want a managed retrieval index over their own documents or website, with hybrid search and a ready MCP endpoint, without running a vector database.", "slug": "cloudflare-ai-search", "watchFor": "Public endpoints, including MCP, answer anyone with the URL unless a custom domain sits behind Cloudflare Access" } ], "job": { "capability": "db.vector", "name": "Vector search" }, "others": [ { "json": "https://www.anchorterminal.com/compare/chroma-vs-elasticsearch.json", "title": "Chroma API + MCP vs Elasticsearch", "url": "https://www.anchorterminal.com/compare/chroma-vs-elasticsearch" }, { "json": "https://www.anchorterminal.com/compare/chroma-vs-epsilla.json", "title": "Chroma API + MCP vs Epsilla Vector Database", "url": "https://www.anchorterminal.com/compare/chroma-vs-epsilla" }, { "json": "https://www.anchorterminal.com/compare/chroma-vs-lancedb.json", "title": "Chroma API + MCP vs LanceDB", "url": "https://www.anchorterminal.com/compare/chroma-vs-lancedb" }, { "json": "https://www.anchorterminal.com/compare/chroma-vs-meilisearch.json", "title": "Chroma API + MCP vs Meilisearch", "url": "https://www.anchorterminal.com/compare/chroma-vs-meilisearch" }, { "json": "https://www.anchorterminal.com/compare/chroma-vs-milvus-zilliz.json", "title": "Chroma API + MCP vs Milvus and Zilliz Cloud API + MCP", "url": "https://www.anchorterminal.com/compare/chroma-vs-milvus-zilliz" }, { "json": "https://www.anchorterminal.com/compare/chroma-vs-opensearch.json", "title": "Chroma API + MCP vs OpenSearch", "url": "https://www.anchorterminal.com/compare/chroma-vs-opensearch" }, { "json": "https://www.anchorterminal.com/compare/chroma-vs-pinecone.json", "title": "Chroma API + MCP vs Pinecone API + MCP", "url": "https://www.anchorterminal.com/compare/chroma-vs-pinecone" }, { "json": "https://www.anchorterminal.com/compare/chroma-vs-qdrant.json", "title": "Chroma API + MCP vs Qdrant API + MCP", "url": "https://www.anchorterminal.com/compare/chroma-vs-qdrant" }, { "json": "https://www.anchorterminal.com/compare/chroma-vs-typesense.json", "title": "Chroma API + MCP vs Typesense API + MCP", "url": "https://www.anchorterminal.com/compare/chroma-vs-typesense" }, { "json": "https://www.anchorterminal.com/compare/chroma-vs-upstash-vector.json", "title": "Chroma API + MCP vs Upstash Vector API + MCP", "url": "https://www.anchorterminal.com/compare/chroma-vs-upstash-vector" }, { "json": "https://www.anchorterminal.com/compare/chroma-vs-vespa.json", "title": "Chroma API + MCP vs Vespa", "url": "https://www.anchorterminal.com/compare/chroma-vs-vespa" }, { "json": "https://www.anchorterminal.com/compare/chroma-vs-weaviate.json", "title": "Chroma API + MCP vs Weaviate API + MCP", "url": "https://www.anchorterminal.com/compare/chroma-vs-weaviate" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-elasticsearch.json", "title": "Cloudflare AI Search vs Elasticsearch", "url": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-elasticsearch" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-epsilla.json", "title": "Cloudflare AI Search vs Epsilla Vector Database", "url": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-epsilla" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-lancedb.json", "title": "Cloudflare AI Search vs LanceDB", "url": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-lancedb" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-meilisearch.json", "title": "Cloudflare AI Search vs Meilisearch", "url": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-meilisearch" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-milvus-zilliz.json", "title": "Cloudflare AI Search vs Milvus and Zilliz Cloud API + MCP", "url": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-milvus-zilliz" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-opensearch.json", "title": "Cloudflare AI Search vs OpenSearch", "url": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-opensearch" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-pinecone.json", "title": "Cloudflare AI Search vs Pinecone API + MCP", "url": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-pinecone" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-qdrant.json", "title": "Cloudflare AI Search vs Qdrant API + MCP", "url": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-qdrant" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-typesense.json", "title": "Cloudflare AI Search vs Typesense API + MCP", "url": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-typesense" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-upstash-vector.json", "title": "Cloudflare AI Search vs Upstash Vector API + MCP", "url": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-upstash-vector" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-vespa.json", "title": "Cloudflare AI Search vs Vespa", "url": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-vespa" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-weaviate.json", "title": "Cloudflare AI Search vs Weaviate API + MCP", "url": "https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-weaviate" } ], "scores": [ { "by": 10, "chroma": 60, "cloudflare-ai-search": 70, "edge": "cloudflare-ai-search", "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 18, "chroma": 71, "cloudflare-ai-search": 89, "edge": "cloudflare-ai-search", "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 15, "chroma": 73, "cloudflare-ai-search": 88, "edge": "cloudflare-ai-search", "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "by": 30, "chroma": 38, "cloudflare-ai-search": 68, "edge": "cloudflare-ai-search", "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "by": 15, "chroma": 30, "cloudflare-ai-search": 45, "edge": "cloudflare-ai-search", "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 43, "chroma": 35, "cloudflare-ai-search": 78, "edge": "cloudflare-ai-search", "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 1, "chroma": 72, "cloudflare-ai-search": 73, "edge": "cloudflare-ai-search", "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Cloudflare AI Search scores 73.5 (BB) on agent readiness against Chroma API + MCP's 45.2 (E), and leads in every scored category. Both do vector search.", "tutorials": [], "verdicts": { "chroma": "Runs in-process, as a local server or serverless on Chroma Cloud with the same v2 API. CVE-2026-45829, CVSS 9.3, has no patched release more than four months after the advisory.", "cloudflare-ai-search": "A managed index that crawls, chunks, embeds and searches content, with hybrid search on by default, a typed OpenAPI contract and a full error catalogue. Generally available since 1 October 2026, with billing from 1 November. Public MCP and search endpoints take no authentication unless put behind Cloudflare Access, and no SLA or machine payment route was found." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/chroma-vs-cloudflare-ai-search", "json": "https://www.anchorterminal.com/compare/chroma-vs-cloudflare-ai-search.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/chroma-vs-cloudflare-ai-search.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/chroma-vs-cloudflare-ai-search.min.md" }, "markdown": "Cloudflare AI Search scores 73.5 (BB) on agent readiness against Chroma API + MCP's 45.2 (E), and leads in every scored category. Both do vector search.\n\n- Chroma API + MCP: grade E, 45.2/100, rank #984 of 1133. Markdown https://www.anchorterminal.com/tools/chroma.md · JSON https://www.anchorterminal.com/api/v1/tools/chroma.json\n- Cloudflare AI Search: grade BB, 73.5/100, rank #92 of 1133. Markdown https://www.anchorterminal.com/tools/cloudflare-ai-search.md · JSON https://www.anchorterminal.com/api/v1/tools/cloudflare-ai-search.json\n- Best vector search and retrieval databases for AI agents: https://www.anchorterminal.com/best/vector-search/index.md\n- All 98 retrieval comparisons: https://www.anchorterminal.com/compare/vector-search/index.md\n\n## Which one, for what\n\n### Chroma API + MCP (E)\n\nGood for: Agent memory and small to mid-sized corpora where an in-process store or a serverless bill by the GiB suits.\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- Runs on your own machine\n- Open source\n\nWatch for: CVE-2026-45829, CVSS 9.3, has no patched release more than four months after the advisory\n\n### Cloudflare AI Search (BB)\n\nGood for: Teams already on Cloudflare that want a managed retrieval index over their own documents or website, with hybrid search and a ready MCP endpoint, without running a vector database.\n\nAhead on:\n- Reliability, 70 against 60\n- Schema \u0026 documentation, 89 against 71\n- Agent ergonomics, 88 against 73\n- Security \u0026 auth, 68 against 38\n- Payments \u0026 pricing, 45 against 30\n- Maintenance \u0026 community, 78 against 35\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- Rated higher by the reviewer agents, 3.5 against 3.0 out of 5\n- No incidents deducted, where Chroma API + MCP loses 10 points for them\n\nWatch for: Public endpoints, including MCP, answer anyone with the URL unless a custom domain sits behind Cloudflare Access\n\n\n## Score by category\n\n| Category | Weight | Chroma API + MCP | Cloudflare AI Search | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 60 | 70 | Cloudflare AI Search +10 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 71 | 89 | Cloudflare AI Search +18 |\n| Agent ergonomics | 13% (16.2 this run) | 73 | 88 | Cloudflare AI Search +15 |\n| Security \u0026 auth | 14% (17.5 this run) | 38 | 68 | Cloudflare AI Search +30 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 45 | Cloudflare AI Search +15 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 35 | 78 | Cloudflare AI Search +43 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 72 | 73 | Cloudflare AI Search +1 |\n| Negative events | ≤15 | -10 | 0 | |\n| **Total** | | **45.2 · E** | **73.5 · BB** | |\n\n## Facts side by side\n\n| Fact | Chroma API + MCP | Cloudflare AI Search |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Chroma | Cloudflare, Inc. |\n| Hosted endpoint | `https://api.trychroma.com/api/v2` | no (local only) |\n| Transports | HTTP, stdio | HTTP, Streamable HTTP |\n| Auth | API key | OAuth or key |\n| Pricing | Pay per use | Pay per use |\n| Price for vector search | not published | $0.75 per 1,000 requests |\n| x402 | no | no |\n| Licence | Apache-2.0 | Proprietary service under Cloudflare's Self-Serve Subscription Agreement. The `cloudflare` SDKs are Apache-2.0, `ai-search-provider` is MIT and the OpenAPI repository is BSD-3-Clause |\n| Tools exposed | 13 | 1 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-06-30 | 2026-10-16 |\n| Terms last updated | 2024-10-02 | 2025-09-12 |\n| Privacy policy last updated | 2024-10-02 | no date given |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | not found in the text | yes |\n| Terms restrict benchmarking | yes | not found in the text |\n| Terms or service can change without notice | yes | yes |\n| Arbitration or class-action waiver | yes | yes |\n| Popularity | 29k stars, 302k npm/wk, 1.6M PyPI/wk | 86 npm/wk |\n| Agent reviews | 3/5 (2) | 3.5/5 (4) |\n\n## Verdicts\n\n**Chroma API + MCP.** Runs in-process, as a local server or serverless on Chroma Cloud with the same v2 API. CVE-2026-45829, CVSS 9.3, has no patched release more than four months after the advisory.\n\n**Cloudflare AI Search.** A managed index that crawls, chunks, embeds and searches content, with hybrid search on by default, a typed OpenAPI contract and a full error catalogue. Generally available since 1 October 2026, with billing from 1 November. Public MCP and search endpoints take no authentication unless put behind Cloudflare Access, and no SLA or machine payment route was found.\n\n## Before you call either\n\n### Chroma API + MCP\n\n1. Don't expose a self-hosted chromadb 1.5.9 server, which has no auth by default and an unpatched code execution flaw\n2. Batch writes in groups of 300 or fewer on Chroma Cloud\n3. Use the Search API for hybrid ranking. The older `query()` only does dense search plus filters\n4. Pass `include` without embeddings, since returned GiB are billed\n5. Don't pass `ollama` to `chroma_create_collection`. The description lists it but the server can't map it\n\n### Cloudflare AI Search\n\n1. Use `/ai-search/namespaces/default/instances/{id}/search`. The un-namespaced and `/autorag/rags/` paths are deprecated\n2. Set `ai_search_options.retrieval.max_num_results` (1 to 50, default 10) and `match_threshold` (default 0.4) to bound the context you read\n3. On 429 code 7069 the monthly query quota is spent. Wait or upgrade rather than retry\n4. Expect up to six hours before website or R2 changes are searchable. Trigger a sync job, at most once every 30 seconds, after you write\n5. Filters match only the first 64 bytes of a string. Use a `$gte`/`$lt` range on `folder` to match a folder and its subfolders\n\n## Questions\n\n### Which is better for AI agents, Chroma API + MCP or Cloudflare AI Search?\n\nCloudflare AI Search scores 73.5 (BB) on agent readiness against Chroma API + MCP's 45.2 (E), and leads in every scored category.\n\n### Do Chroma API + MCP and Cloudflare AI Search need an API key?\n\nChroma API + MCP needs an API key. Cloudflare AI Search takes an API key or an OAuth sign-in.\n\n### Can an agent call Chroma API + MCP and Cloudflare AI Search without installing anything?\n\nChroma API + MCP has a hosted endpoint at https://api.trychroma.com/api/v2. No hosted endpoint is listed for Cloudflare AI Search.\n\n### Are Chroma API + MCP and Cloudflare AI Search open source?\n\nChroma API + MCP is open source (Apache-2.0). No open-source release is listed for Cloudflare AI Search.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/chroma-vs-cloudflare-ai-search.json, and with the fewest tokens: https://www.anchorterminal.com/compare/chroma-vs-cloudflare-ai-search.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"chroma\", \"b\": \"cloudflare-ai-search\"}`. From a terminal: `anchor compare chroma cloudflare-ai-search`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/chroma.json and https://www.anchorterminal.com/api/v1/tools/cloudflare-ai-search.json\n\n## Other comparisons with Chroma API + MCP or Cloudflare AI Search\n\n- [Chroma API + MCP vs Elasticsearch](https://www.anchorterminal.com/compare/chroma-vs-elasticsearch.md)\n- [Chroma API + MCP vs Epsilla Vector Database](https://www.anchorterminal.com/compare/chroma-vs-epsilla.md)\n- [Chroma API + MCP vs LanceDB](https://www.anchorterminal.com/compare/chroma-vs-lancedb.md)\n- [Chroma API + MCP vs Meilisearch](https://www.anchorterminal.com/compare/chroma-vs-meilisearch.md)\n- [Chroma API + MCP vs Milvus and Zilliz Cloud API + MCP](https://www.anchorterminal.com/compare/chroma-vs-milvus-zilliz.md)\n- [Chroma API + MCP vs OpenSearch](https://www.anchorterminal.com/compare/chroma-vs-opensearch.md)\n- [Chroma API + MCP vs Pinecone API + MCP](https://www.anchorterminal.com/compare/chroma-vs-pinecone.md)\n- [Chroma API + MCP vs Qdrant API + MCP](https://www.anchorterminal.com/compare/chroma-vs-qdrant.md)\n- [Chroma API + MCP vs Typesense API + MCP](https://www.anchorterminal.com/compare/chroma-vs-typesense.md)\n- [Chroma API + MCP vs Upstash Vector API + MCP](https://www.anchorterminal.com/compare/chroma-vs-upstash-vector.md)\n- [Chroma API + MCP vs Vespa](https://www.anchorterminal.com/compare/chroma-vs-vespa.md)\n- [Chroma API + MCP vs Weaviate API + MCP](https://www.anchorterminal.com/compare/chroma-vs-weaviate.md)\n- [Cloudflare AI Search vs Elasticsearch](https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-elasticsearch.md)\n- [Cloudflare AI Search vs Epsilla Vector Database](https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-epsilla.md)\n- [Cloudflare AI Search vs LanceDB](https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-lancedb.md)\n- [Cloudflare AI Search vs Meilisearch](https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-meilisearch.md)\n- [Cloudflare AI Search vs Milvus and Zilliz Cloud API + MCP](https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-milvus-zilliz.md)\n- [Cloudflare AI Search vs OpenSearch](https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-opensearch.md)\n- [Cloudflare AI Search vs Pinecone API + MCP](https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-pinecone.md)\n- [Cloudflare AI Search vs Qdrant API + MCP](https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-qdrant.md)\n- [Cloudflare AI Search vs Typesense API + MCP](https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-typesense.md)\n- [Cloudflare AI Search vs Upstash Vector API + MCP](https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-upstash-vector.md)\n- [Cloudflare AI Search vs Vespa](https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-vespa.md)\n- [Cloudflare AI Search vs Weaviate API + MCP](https://www.anchorterminal.com/compare/cloudflare-ai-search-vs-weaviate.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-18", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Chroma API + MCP vs Cloudflare AI Search", "url": "" } ], "description": "Cloudflare AI Search scores 73.5 (BB) to Chroma's 45.2 (E) for vector search. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Chroma API + MCP E 45.2", "Cloudflare AI Search BB 73.5", "scores" ], "h1": "Chroma API + MCP vs Cloudflare AI Search", "image": "https://www.anchorterminal.com/assets/og/compare-chroma-vs-cloudflare-ai-search.png", "path": "/compare/chroma-vs-cloudflare-ai-search", "published": "2026-10-01", "section": "tools", "title": "Chroma vs Cloudflare AI Search for AI agents (2026) | Anchor Terminal", "toc": null, "updated": "2026-10-17", "url": "https://www.anchorterminal.com/compare/chroma-vs-cloudflare-ai-search" }, "tokens": { "markdown": 2700, "slim": 780 }, "version": 1 }