{ "data": { "a": { "slug": "doola-mcp", "name": "doola MCP", "vendor": "doola", "vendorUrl": "https://doola.com", "kind": "mcp", "category": "commerce", "summary": "doola's hosted MCP server lets an agent form a US LLC or C-Corp in any state or DC from a conversation, covering entity type, name, members, ownership and the state filing, and check on existing doola companies.", "url": "https://www.anchorterminal.com/tools/doola-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/doola-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/doola-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/doola-mcp.json", "dns": "doola-mcp.grade.anchorterminal.com", "repo": "https://github.com/doolahq/plugins", "license": "Proprietary service. The plugin repository's MIT licence covers the manifests", "transports": [ "streamable-http" ], "remoteUrl": "https://mcp.doola.com", "packages": [], "auth": "oauth", "authNotes": "OAuth with a doola account on the first tool call; tokens are held by the client and can be revoked in doola's account settings.", "pricing": "paid", "pricingNotes": "Formation plans from $297 a year plus state fees (renewing at $300), up to $1,999 a year plus state fees. The MCP server itself is free to connect (checked 2026-11-07).", "priceSummary": "Paid", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on the MCP docs or pricing page (checked 2026-11-07).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-07" }, "docsUrl": "https://doola.com", "registryName": "io.github.doolahq/doola", "capabilities": [ "legal.company-formation", "commerce.checkout" ], "tags": [ "official", "hosted", "mcp", "remote-mcp", "oauth", "paid", "mcp-registry" ], "graded": true, "anchor": { "graded": true, "score": 28, "grade": "F", "agentReady": false, "rank": 1430, "ranked": true, "rankOf": 1510, "categoryRank": 20, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 23, "maintenance": 70, "payments": 10, "reliability": 15, "schema": 26, "security": 36, "transparency": 38 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "low", "date": "2026-11-07" }, "negative": 0, "verdict": "doola's MCP server takes on a real legal task, forming a US company end to end from a chat, behind OAuth. Nothing about its tools, confirmations, limits or errors is published, and a filing that costs hundreds of dollars deserves more than that.", "bestFor": "Founders, including non-US founders, who want an agent to form a US company for them.", "strengths": [ "Forms a US LLC or C-Corp in any state from a conversation", "OAuth with revocation in account settings", "Plugins for Claude Code, Grok Build and Cursor", "Official registry entry and a public plugin repository" ], "weaknesses": [ "No published tool list, schemas or errors", "No documented confirmation before a paid filing", "No free tier; formation from $297 a year plus state fees", "Status page unreachable and no llms.txt" ], "agentNotes": [ "Confirm the entity type, state, name, members and price with the user before filing", "A filing is a paid legal act; never retry one without checking its status first", "Use the status tools on existing companies before starting a new formation" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "F", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 28 } ], "editorialScores": { "ergonomics": 23, "maintenance": 70, "payments": 10, "reliability": 15, "schema": 26, "security": 36, "transparency": 30 }, "provenanceScore": 46, "checked": { "categories": { "ergonomics": "2026-11-07", "maintenance": "2026-11-07", "payments": "2026-11-07", "reliability": "2026-11-07", "schema": "2026-11-07", "security": "2026-11-07", "transparency": "2026-11-07" }, "last": "2026-11-07", "oldest": "2026-11-07", "stale": false, "staleAfterDays": 90 } }, "connect": { "claudeCode": "claude plugin marketplace add doolahq/plugins \u0026\u0026 claude plugin install doola@doola", "config": { "mcpServers": { "doola": { "url": "https://mcp.doola.com" } } } }, "letme": { "capability": "https://letme.dev/legal.company-formation", "tool": "https://letme.dev/doola-mcp" }, "area": "business", "provenance": { "legalEntity": "doola", "domain": "doola.com", "domainRegistered": "", "domainNote": "Not looked up: RDAP isn't requested under the 1 November 2026 rules.", "endpointOnVendorDomain": true, "terms": "https://doola.com/terms-of-service", "privacy": "https://doola.com/privacy-policy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-11-07", "notes": [ "Terms last updated July 2026. The plugin repository's licence names doola." ], "score": 46 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/doola-mcp.json", "live": { "slug": "doola-mcp", "probe": { "target": "https://mcp.doola.com", "method": "mcp-initialize", "lastAt": "2026-11-08T00:55:37.012153631Z", "lastOk": true, "lastStatus": 401, "lastMs": 176, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 113, "p95ms24h": 201, "samples24h": 63, "samples30d": 63, "days": [ { "date": "2026-11-07", "probes": 53, "ok": 53 }, { "date": "2026-11-08", "probes": 10, "ok": 10 } ] }, "githubStars": 0, "updatedAt": "2026-11-08T00:55:37.012153631Z" } }, "answer": "Medusa API + MCP scores 57.1 (C) on agent readiness against doola MCP's 28 (F), and leads in every scored category.", "b": { "slug": "medusa", "name": "Medusa API + MCP", "vendor": "Medusa", "vendorUrl": "https://medusajs.com", "kind": "http-api", "category": "commerce", "summary": "Open-source headless commerce backend in TypeScript, self-hosted or run on Medusa Cloud, where a read-only MCP server lets AI tools query a store's data.", "url": "https://www.anchorterminal.com/tools/medusa", "markdownUrl": "https://www.anchorterminal.com/tools/medusa.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/medusa.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/medusa.json", "dns": "medusa.grade.anchorterminal.com", "repo": "https://github.com/medusajs/medusa", "license": "MIT", "transports": [ "http", "streamable-http" ], "packages": [ { "registry": "npm", "name": "@medusajs/js-sdk" }, { "registry": "npm", "name": "@medusajs/medusa" } ], "auth": "mixed", "authNotes": "Store API calls need a publishable API key in the x-publishable-api-key header, and customer routes add a customer JWT or session. Admin API calls take a user JWT, a session cookie or a secret API key. The Medusa MCP server at https://cloud.medusajs.com/mcp uses OAuth 2.1 with PKCE and a Cloud login, scoped on the consent page to the environments the person picks. The docs MCP at https://docs.medusajs.com/mcp takes Medusa Cloud OAuth or a Cloud personal access key.", "pricing": "freemium", "pricingNotes": "Self-hosting the MIT core is free. Medusa Cloud Develop from $29 a month, Launch from $99, Scale from $299, Enterprise custom, with no GMV fee on any plan. New organisations start a free trial without payment details (since 30 September 2026). Plans include 1M, 5M or 10M edge requests a month, then $0.30 per 1M. Search includes 10,000 requests a month, then $20 per 100,000. The Medusa MCP server is on every Cloud plan (https://medusajs.com/pricing/).", "priceSummary": "$29 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402. Payments go through payment provider modules such as Stripe.", "endpoints": [] }, "toolCount": 18, "popularity": { "githubStars": 36514, "npmWeekly": 202809, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://docs.medusajs.com", "llmsTxt": "https://docs.medusajs.com/llms.txt", "openapi": "https://raw.githubusercontent.com/medusajs/medusa/develop/www/apps/api-reference/specs/store/openapi.full.yaml", "registryName": "com.medusajs/cloud", "capabilities": [ "commerce.products", "commerce.cart", "commerce.checkout", "commerce.orders", "commerce.headless" ], "tags": [ "open-source", "self-hosted", "local", "hosted", "mcp", "llms-txt", "typescript", "webhooks", "freemium" ], "lastRelease": "2026-10-30", "graded": true, "anchor": { "graded": true, "score": 57.1, "grade": "C", "agentReady": false, "rank": 810, "ranked": true, "rankOf": 1510, "categoryRank": 13, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 93, "payments": 50, "reliability": 55, "schema": 81, "security": 49, "transparency": 72 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-02" }, "negative": -8, "negativeNotes": [ "24 November 2025 (about 11 months ago). Two scheduled preview builds of @medusajs/medusa, 2.11.4-preview-20251124060135 and 2.11.4-preview-20251124090208, are listed as malicious code by GitHub's malware database (GHSA-w66q-hw37-2234) and Amazon Inspector, and the GHSA text says any computer that installed them should be considered fully compromised. They were published on the `preview` dist-tag, not `latest`, are no longer in the registry, and no other @medusajs package we queried is listed. We found no Medusa advisory or post-mortem in the repository history. -2, below browserbase's -4 for the same wave because only two preview builds of one package were affected; a reading at -4 is defensible. https://osv.dev/vulnerability/MAL-2025-191457", "2 September to 21 October 2026. Released fixes of Medusa's own described flaws with no advisory. 2.20.0 \"require a completed MFA challenge on MFA routes\" and \"block field expansion pivots on the store order routes\", 2.20.1 \"always strip fields that a field filter doesn't allow\", 2.21.0 \"return published products only\" on four store routes, 2.22.0 \"stop exporting sensitive HTTP headers in spans\" and 2.22.1 \"reject deleting a variant through a product it doesn't belong to\". None cites a GHSA, and OSV holds no Medusa advisory. One folded -3, as spree-commerce's unadvised fixes. https://github.com/medusajs/medusa/blob/develop/packages/medusa/CHANGELOG.md", "2 and 11 September 2026. Breaking changes in minor releases with no advance notice. 2.20.0's minor change sets a relations limit for store routes (depth three), and 2.21.0's sets a strict allowed list for store API routes, so existing storefront queries outside it are refused. The 1 October check read breaking sections in the 2.16.0 to 2.20.0 release notes. Medusa's update guide says minors may break, a general policy not read as notice (box-api), and its preview builds of every commit are an edge channel (aidbox). One folded -3. https://docs.medusajs.com/learn/update" ], "verdict": "MIT core you can self-host, with Medusa Cloud running the same APIs and no GMV fee. The Cloud MCP server reads store and Cloud data but can't write. Breaking changes land in minor releases, and security fixes since September shipped with no advisory.", "bestFor": "Teams that want to own a TypeScript commerce backend and extend it with their own routes and workflows, and for Cloud merchants who want an assistant to answer questions over store data.", "strengths": [ "MIT core you can self-host, with Medusa Cloud running the same APIs and no GMV fee", "Public OpenAPI 3.0 files for the Store and Admin APIs, frozen per release", "Read-only Cloud MCP server with 18 tools, scoped per environment on an OAuth consent page, with revocable connections", "Field selection, pagination and documented error types on every list route", "Nine releases between 13 August and 30 October 2026" ], "weaknesses": [ "The MCP server can't write and serves only Cloud stores on v2.12.4 or later, rebuilt on or after 8 October 2026", "Breaking changes ship in minor releases, among them relation limits in 2.20.0 and a strict store query allow-list in 2.21.0, with no advance notice", "No rate limits, retry guidance or documented idempotency header", "Fixes for described flaws (MFA challenge, field filtering, variant deletion) shipped without advisories, and there is no security.txt", "Two November 2025 preview builds are listed as malicious, and some files sit under a proprietary Enterprise Edition licence" ], "agentNotes": [ "Send x-publishable-api-key on every /store call. It decides which sales channels and products the agent sees", "Ask for only the fields you need with `fields`. Store routes reject relations nested more than three deep since 2.20.0", "On the Medusa MCP, call `find_commerce_api` and `describe_commerce_api` before `read_admin_api`, and name the store when several are connected", "Place the order with POST /store/carts/{id}/complete after shipping and payment sessions are set; the MCP server can't", "Read the release notes before upgrading a minor version. Breaking changes land there, and v2.22.0 needs Node.js 22.22.0 or later" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 57.1 } ], "editorialScores": { "ergonomics": 72, "maintenance": 93, "payments": 50, "reliability": 55, "schema": 81, "security": 49, "transparency": 71 }, "provenanceScore": 72, "checked": { "categories": { "ergonomics": "2026-11-02", "maintenance": "2026-11-02", "payments": "2026-11-02", "reliability": "2026-11-02", "schema": "2026-11-02", "security": "2026-11-02", "transparency": "2026-11-02" }, "last": "2026-11-02", "lastMoved": "2026-11-02", "oldest": "2026-11-02", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl \"$MEDUSA_BACKEND_URL/store/products?limit=5\" -H \"x-publishable-api-key: $MEDUSA_PUBLISHABLE_KEY\"", "claudeCode": "claude mcp add --transport http medusa-commerce https://cloud.medusajs.com/mcp", "config": { "mcpServers": { "medusa-commerce": { "type": "streamable-http", "url": "https://cloud.medusajs.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/commerce.products", "tool": "https://letme.dev/medusa" }, "area": "business", "unitPrices": [ { "item": "Cloud Develop", "unit": "month", "usd": 29, "note": "from, 1M edge requests a month" }, { "item": "Cloud Launch", "unit": "month", "usd": 99, "note": "from, 5M edge requests, webhook events, backups" }, { "item": "Cloud Scale", "unit": "month", "usd": 299, "note": "from, 10M edge requests, background workers" }, { "item": "Cloud GMV fee", "unit": "pct", "usd": 0, "note": "on every plan" }, { "item": "Self-hosted", "unit": "month", "usd": 0, "note": "MIT core, you pay for your own servers" } ], "provenance": { "legalEntity": "MedusaJS, Inc.", "domain": "medusajs.com", "domainRegistered": "2011-04-06", "domainNote": "medusajs.com was registered in 2011, years before the Medusa project started.", "endpointOnVendorDomain": false, "terms": "https://medusajs.com/terms-of-service/", "privacy": "https://medusajs.com/privacy-policy/", "statusPage": "https://status.medusajs.com", "changelog": "https://medusajs.com/changelog/", "securityTxt": "none", "checked": "2026-09-30", "notes": [ "The API runs on your own server or your Medusa Cloud project URL" ], "score": 72 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/medusa.json", "live": { "slug": "medusa", "vendorStatus": { "page": "https://status.medusajs.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-08T00:54:56.374597071Z" }, "versions": [ { "registry": "github", "name": "medusajs/medusa", "version": "v2.22.4", "released": "2026-11-06", "seenAt": "2026-11-06T23:43:34.669896639Z" }, { "registry": "mcp-registry", "name": "com.medusajs/cloud", "version": "0.1.0", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "mcp-registry", "name": "com.medusajs/medusa-mcp", "version": "1.0.0", "seenAt": "2026-10-17T05:11:56.292414565Z" }, { "registry": "npm", "name": "@medusajs/js-sdk", "version": "2.22.4", "seenAt": "2026-11-06T23:43:32.183685262Z" }, { "registry": "npm", "name": "@medusajs/medusa", "version": "2.22.4", "seenAt": "2026-11-06T23:43:32.504116604Z" } ], "githubStars": 37117, "npmWeekly": 423838, "securityTxt": { "url": "https://medusajs.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:48.535132169Z" }, "llmsTxt": { "url": "https://docs.medusajs.com/llms.txt", "ok": false, "status": 404, "checkedAt": "2026-11-07T15:33:00.104313309Z" }, "domain": { "domain": "medusajs.com", "registered": "2011-04-06", "source": "https://rdap.verisign.com/com/v1/domain/medusajs.com", "checkedAt": "2026-11-01T14:11:03.418359167Z" }, "pages": [ { "url": "https://medusajs.com/changelog/", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:14:04.706173933Z", "changedAt": "2026-11-06T13:36:04.151574814Z", "fingerprint": "774acee3a6c8" }, { "url": "https://medusajs.com/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:14:08.981001601Z", "changedAt": "2026-10-22T01:21:11.514822031Z", "fingerprint": "5824f268ce84" }, { "url": "https://medusajs.com/privacy-policy/", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:14:09.212634559Z", "changedAt": "2026-10-21T00:30:11.935943913Z", "fingerprint": "3cedc30c419c" }, { "url": "https://medusajs.com/terms-of-service/", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:14:11.252982472Z", "changedAt": "2026-10-21T00:30:14.0325354Z", "fingerprint": "f092577b79c9" } ], "mcpTools": { "url": "https://cloud.medusajs.com/mcp", "checkedAt": "2026-11-07T01:46:12.455490954Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:46:12.455490954Z" }, "github": { "repo": "medusajs/medusa", "checkedAt": "2026-11-02T09:04:33.102308237Z", "stars": 37050, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-02T09:03:11Z", "openIssues": 79, "openPRs": 42, "issuesOpened90d": 237, "issuesClosed90d": 197, "prsMerged90d": 580, "ci": { "branch": "develop", "runs": 50, "success": 46, "failure": 2, "other": 2, "latest": "success", "latestAt": "2026-11-02T08:59:37Z" }, "replies": { "sampled": 25, "unanswered": 14, "medianDays": 0.1 } }, "updatedAt": "2026-11-08T00:54:56.374597071Z" } }, "edges": [ { "by": 55, "category": "schema", "leads": "medusa", "name": "Schema \u0026 documentation", "reasons": { "a": "No tool list or schemas published; tools not read without sign-in (10 of 25). No llms.txt found (0). The README describes the flow, not the tools (5 of 20). Inputs not verifiable (3 of 15). Install examples only (3 of 15). Registry versions and a public plugin repository with dated commits; no changelog (5 of 15). 10 + 0 + 5 + 3 + 3 + 5 = 26.", "b": "OpenAPI 3.0 files for the Store API (68 paths, 78 operations at 2.21.2) and the Admin API live in the repo, with a frozen copy per release (25). llms.txt with about 200 entries (10). Reference descriptions state what each route does but rarely when not to use it (12). Typed query and body parameters with required fields, though `fields` takes a free-form expression and filters accept `$and` and `$or` (11). Error responses are documented per route (400, 401, 404, 409, 422, 500) with typed error objects, and the reference carries JS SDK and curl examples (13). Release notes have a breaking changes section, but breaking changes ship in minor 2.x releases, with breaking sections in 2.16.0, 2.17.0, 2.18.0, 2.19.0 and 2.20.0 and even the 2.17.2 patch (10)." }, "scores": { "a": 26, "b": 81 } }, { "by": 49, "category": "ergonomics", "leads": "medusa", "name": "Agent ergonomics", "reasons": { "a": "Tool count not published (5). Nothing on paging or output size (5 of 20). No documented errors (0). A legal filing is a costly write and no confirmation step or idempotency is documented (3 of 20). Plugins for Claude Code, Grok Build and Cursor and one URL (10 of 15). 5 + 5 + 0 + 3 + 10 = 23.", "b": "Responses can be trimmed with `fields`, and store routes cap relation depth at three since 2.20.0 (22). `limit`, `offset`, `order` and per-field filters on list routes (20). Errors carry `type`, `code` and `message`, documented in the spec (15). A 409 example tells the caller to retry with an Idempotency-Key, but no such header is documented on any route (5). Few required parameters and a typed JS SDK, but no second official language (10)." }, "scores": { "a": 23, "b": 72 } }, { "by": 40, "category": "reliability", "leads": "medusa", "name": "Reliability", "reasons": { "a": "status.doola.com wasn't reachable (0). No history (5). No rate limits found (0). No retry or idempotency guidance for filings (0). No SLA found (0). Not labelled beta (10). 0 + 5 + 0 + 0 + 0 + 10 = 15.", "b": "Graded on Medusa Cloud, the hosted option, by the hosted lines. Atlassian Statuspage at status.medusajs.com with an incident feed (20). Five incidents in the 90 days from 4 August, all partial and short. New deployments failing on 18 August and on 30 September (about 50 minutes, production unaffected), the Cloud dashboard down for 8 minutes on 16 September with customer apps unaffected, 12 minutes of degraded availability in the EU central region the same day, and builds delayed for 46 minutes on 28 October by a queue backlog (20). No API rate limits published, only monthly edge-request quotas per plan (0). No 429 or backoff guidance found (0). A 99.99% uptime guarantee is listed for Enterprise on the pricing page, with no SLA document published (5). Generally available (10). Self-hosted stores have no vendor status at all. 20+20+0+0+5+10 = 55." }, "scores": { "a": 15, "b": 55 } }, { "by": 40, "category": "payments", "leads": "medusa", "name": "Payments \u0026 pricing", "reasons": { "a": "No machine payment protocol (0). Plan prices public (10). No free tier (0). A person signs up and approves OAuth (0). 0 + 10 + 0 + 0 = 10.", "b": "No x402, MPP or L402 (0). Medusa Cloud plan prices start from $29, $99 and $299 a month with per-unit overage ($0.30 per 1M edge requests, $20 per 100,000 search requests), all public, but each plan is a floor price (15). The MIT core is free to self-host with no card, and since 30 September new Cloud organisations start a free trial without payment details (20). An agent can install and run the core locally with `npx create-medusa-app` and no account, but Cloud and its MCP server need a person to sign up and approve in a browser (15). 0+15+20+15 = 50." }, "scores": { "a": 10, "b": 50 } }, { "by": 34, "category": "transparency", "leads": "medusa", "name": "Transparency \u0026 trust", "reasons": { "a": "Plugin repository MIT (copyright 2026 doola); service closed under terms updated July 2026 (15). Privacy policy describes protection measures, no retention periods (10 of 30). No deprecation policy (0). Subprocessors not found (5 of 20). 15 + 10 + 0 + 5 = 30.", "b": "MIT for the repository except Enterprise Edition files, which a separate proprietary licence covers (25). Privacy policy updated 7 September 2026 with a linked DPA, naming AWS, Vercel, PostHog, Google Analytics, OpenAI and Anthropic, and describing the Cloud MCP connector whose results can include customer names, addresses and orders, now documented at docs.medusajs.com/cloud/medusa-mcp. Retention is \"as long as necessary\" with no periods. The policy is per the 1 October check, not re-read on 17 October (18). No written deprecation policy. Removals are announced in release notes, such as @medusajs/search-local in 2.20.0, and Cloud has a dated changelog (10). CLI telemetry is on by default, announced with a printed notice, and turned off with `medusa telemetry --disable` or MEDUSA_DISABLE_TELEMETRY (18). 25+18+10+18 = 71." }, "scores": { "a": 38, "b": 72 } }, { "by": 23, "category": "maintenance", "leads": "medusa", "name": "Maintenance \u0026 community", "reasons": { "a": "Plugin repository commit and registry update on 3 November and 28 October 2026 (30). Several dated merges in 90 days (20 of 20). Repository issues not read (0). Official registry entry io.github.doolahq/doola (15). Plugin manifests published by a registry workflow (5 of 10). 30 + 20 + 0 + 15 + 5 = 70. Registry presence read from Anchor Terminal's own daily import of the official MCP registry (/api/v1/registry.json, 6 November 2026), not the registry's API.", "b": "v2.22.2 tagged on 30 October 2026, after v2.22.0 (21 October) and v2.22.1 (23 October) (30). Nine releases from 4 August to 2 November, v2.19.0 (13 August) to v2.22.2, read from the repository's tags and the changelog at medusajs.com (20). 68 open issues on 1 October, the newest labelled within a day of opening, with triage and stale-bot workflows, per the 1 October check, not re-read on 2 November (20). Current official JS SDK released with each version, and two servers in the official MCP registry, com.medusajs/medusa-mcp (docs) and com.medusajs/cloud (store data, 0.1.0 on 14 October) (15). CI pipeline on every push to develop and every pull request, plus Dependabot triage. We didn't see run results (8). 30+20+20+15+8 = 93." }, "scores": { "a": 70, "b": 93 } } ], "facts": [ { "a": "MCP server", "b": "HTTP API", "name": "Kind" }, { "a": "doola", "b": "Medusa", "name": "Vendor" }, { "a": "https://mcp.doola.com", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "Streamable HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "OAuth", "b": "OAuth or key", "name": "Auth" }, { "a": "Paid", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary service. The plugin repository's MIT licence covers the manifests", "b": "MIT", "name": "Licence" }, { "a": "none", "b": "18", "name": "Tools exposed" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "io.github.doolahq/doola", "b": "com.medusajs/cloud", "name": "MCP registry" }, { "a": "none", "b": "2026-10-30", "name": "Last release" }, { "a": "not read yet", "b": "2026-09-21", "name": "Terms last updated" }, { "a": "not read yet", "b": "2026-09-07", "name": "Privacy policy last updated" }, { "a": "not read yet", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not read yet", "b": "yes", "name": "Terms restrict automated access" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not read yet", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "37k stars, 203k npm/wk", "name": "Popularity" }, { "a": "none", "b": "2.5/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "Medusa API + MCP scores 57.1 (C) on agent readiness against doola MCP's 28 (F), and leads in every scored category.", "question": "Which is better for AI agents, doola MCP or Medusa API + MCP?" }, { "answer": "doola MCP uses an OAuth sign-in. Medusa API + MCP takes an API key or an OAuth sign-in.", "question": "Do doola MCP and Medusa API + MCP need an API key?" }, { "answer": "doola MCP has a hosted endpoint at https://mcp.doola.com. No hosted endpoint is listed for Medusa API + MCP.", "question": "Can an agent call doola MCP and Medusa API + MCP without installing anything?" }, { "answer": "No open-source release is listed for doola MCP. Medusa API + MCP is open source (MIT).", "question": "Are doola MCP and Medusa API + MCP open source?" } ], "goodFor": [ { "aheadOn": null, "also": [ "A hosted endpoint, with nothing to install", "No incidents deducted, where Medusa API + MCP loses 8 points for them" ], "goodFor": "Founders, including non-US founders, who want an agent to form a US company for them.", "slug": "doola-mcp", "watchFor": "No published tool list, schemas or errors" }, { "aheadOn": [ "Reliability, 55 against 15", "Schema \u0026 documentation, 81 against 26", "Agent ergonomics, 72 against 23", "Security \u0026 auth, 49 against 36", "Payments \u0026 pricing, 50 against 10", "Maintenance \u0026 community, 93 against 70", "Transparency \u0026 trust, 72 against 38" ], "also": [ "Open source" ], "goodFor": "Teams that want to own a TypeScript commerce backend and extend it with their own routes and workflows, and for Cloud merchants who want an assistant to answer questions over store data.", "slug": "medusa", "watchFor": "The MCP server can't write and serves only Cloud stores on v2.12.4 or later, rebuilt on or after 8 October 2026" } ], "history": { "doola-mcp": null, "medusa": [ { "causes": [ "event" ], "date": "2026-11-02", "delta": -6, "from": 63.1, "fromGrade": "B", "to": 57.1, "toGrade": "C" }, { "causes": [ "correction" ], "date": "2026-10-28", "delta": -0.1, "from": 63.2, "fromGrade": "B", "to": 63.1, "toGrade": "B" }, { "causes": [ "evidence" ], "date": "2026-10-28", "delta": 0.1, "from": 63.1, "fromGrade": "B", "to": 63.2, "toGrade": "B" } ] }, "job": { "capability": "commerce.checkout", "name": "Commerce checkout" }, "others": [ { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-medusa.json", "title": "Adobe Commerce (Magento) vs Medusa API + MCP", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-medusa" }, { "json": "https://www.anchorterminal.com/compare/agentzon-vs-medusa.json", "title": "Agentzon vs Medusa API + MCP", "url": "https://www.anchorterminal.com/compare/agentzon-vs-medusa" }, { "json": "https://www.anchorterminal.com/compare/bigcommerce-vs-medusa.json", "title": "BigCommerce API + MCP vs Medusa API + MCP", "url": "https://www.anchorterminal.com/compare/bigcommerce-vs-medusa" }, { "json": "https://www.anchorterminal.com/compare/commerce-layer-vs-medusa.json", "title": "Commerce Layer API + MCP vs Medusa API + MCP", "url": "https://www.anchorterminal.com/compare/commerce-layer-vs-medusa" }, { "json": "https://www.anchorterminal.com/compare/commercetools-vs-medusa.json", "title": "commercetools vs Medusa API + MCP", "url": "https://www.anchorterminal.com/compare/commercetools-vs-medusa" }, { "json": "https://www.anchorterminal.com/compare/ecwid-vs-medusa.json", "title": "Ecwid by Lightspeed vs Medusa API + MCP", "url": "https://www.anchorterminal.com/compare/ecwid-vs-medusa" }, { "json": "https://www.anchorterminal.com/compare/elastic-path-vs-medusa.json", "title": "Elastic Path API + MCP vs Medusa API + MCP", "url": "https://www.anchorterminal.com/compare/elastic-path-vs-medusa" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-saleor.json", "title": "Medusa API + MCP vs Saleor API + MCP", "url": "https://www.anchorterminal.com/compare/medusa-vs-saleor" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-shopify.json", "title": "Medusa API + MCP vs Shopify API + MCP", "url": "https://www.anchorterminal.com/compare/medusa-vs-shopify" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-shopware.json", "title": "Medusa API + MCP vs Shopware", "url": "https://www.anchorterminal.com/compare/medusa-vs-shopware" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-snipcart.json", "title": "Medusa API + MCP vs Snipcart API + MCP", "url": "https://www.anchorterminal.com/compare/medusa-vs-snipcart" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-spree-commerce.json", "title": "Medusa API + MCP vs Spree Commerce", "url": "https://www.anchorterminal.com/compare/medusa-vs-spree-commerce" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-square.json", "title": "Medusa API + MCP vs Square", "url": "https://www.anchorterminal.com/compare/medusa-vs-square" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-swell.json", "title": "Medusa API + MCP vs Swell", "url": "https://www.anchorterminal.com/compare/medusa-vs-swell" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-vendure.json", "title": "Medusa API + MCP vs Vendure", "url": "https://www.anchorterminal.com/compare/medusa-vs-vendure" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-wix.json", "title": "Medusa API + MCP vs Wix Stores and eCommerce API", "url": "https://www.anchorterminal.com/compare/medusa-vs-wix" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-woocommerce.json", "title": "Medusa API + MCP vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/medusa-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-doola-mcp.json", "title": "Adobe Commerce (Magento) vs doola MCP", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-doola-mcp" }, { "json": "https://www.anchorterminal.com/compare/agentzon-vs-doola-mcp.json", "title": "Agentzon vs doola MCP", "url": "https://www.anchorterminal.com/compare/agentzon-vs-doola-mcp" }, { "json": "https://www.anchorterminal.com/compare/bigcommerce-vs-doola-mcp.json", "title": "BigCommerce API + MCP vs doola MCP", "url": "https://www.anchorterminal.com/compare/bigcommerce-vs-doola-mcp" }, { "json": "https://www.anchorterminal.com/compare/commerce-layer-vs-doola-mcp.json", "title": "Commerce Layer API + MCP vs doola MCP", "url": "https://www.anchorterminal.com/compare/commerce-layer-vs-doola-mcp" }, { "json": "https://www.anchorterminal.com/compare/commercetools-vs-doola-mcp.json", "title": "commercetools vs doola MCP", "url": "https://www.anchorterminal.com/compare/commercetools-vs-doola-mcp" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-elastic-path.json", "title": "doola MCP vs Elastic Path API + MCP", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-elastic-path" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-fabric.json", "title": "doola MCP vs Fabric", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-fabric" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-saleor.json", "title": "doola MCP vs Saleor API + MCP", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-saleor" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-shopify.json", "title": "doola MCP vs Shopify API + MCP", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-shopify" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-shopware.json", "title": "doola MCP vs Shopware", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-shopware" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-snipcart.json", "title": "doola MCP vs Snipcart API + MCP", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-snipcart" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-spree-commerce.json", "title": "doola MCP vs Spree Commerce", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-spree-commerce" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-square.json", "title": "doola MCP vs Square", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-square" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-swell.json", "title": "doola MCP vs Swell", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-swell" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-vendure.json", "title": "doola MCP vs Vendure", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-vendure" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-wix.json", "title": "doola MCP vs Wix Stores and eCommerce API", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-wix" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-woocommerce.json", "title": "doola MCP vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/fabric-vs-medusa.json", "title": "Fabric vs Medusa API + MCP", "url": "https://www.anchorterminal.com/compare/fabric-vs-medusa" } ], "panel": null, "scores": [ { "by": 40, "doola-mcp": 15, "edge": "medusa", "key": "reliability", "medusa": 55, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 55, "doola-mcp": 26, "edge": "medusa", "key": "schema", "medusa": 81, "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 49, "doola-mcp": 23, "edge": "medusa", "key": "ergonomics", "medusa": 72, "name": "Agent ergonomics", "weight": 13 }, { "by": 13, "doola-mcp": 36, "edge": "medusa", "key": "security", "medusa": 49, "name": "Security \u0026 auth", "weight": 14 }, { "by": 40, "doola-mcp": 10, "edge": "medusa", "key": "payments", "medusa": 50, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 23, "doola-mcp": 70, "edge": "medusa", "key": "maintenance", "medusa": 93, "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 34, "doola-mcp": 38, "edge": "medusa", "key": "transparency", "medusa": 72, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Medusa API + MCP scores 57.1 (C) on agent readiness against doola MCP's 28 (F), and leads in every scored category. Both do commerce checkout.", "tasks": null, "tutorials": [], "verdicts": { "doola-mcp": "doola's MCP server takes on a real legal task, forming a US company end to end from a chat, behind OAuth. Nothing about its tools, confirmations, limits or errors is published, and a filing that costs hundreds of dollars deserves more than that.", "medusa": "MIT core you can self-host, with Medusa Cloud running the same APIs and no GMV fee. The Cloud MCP server reads store and Cloud data but can't write. Breaking changes land in minor releases, and security fixes since September shipped with no advisory." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/doola-mcp-vs-medusa", "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-medusa.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/doola-mcp-vs-medusa.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/doola-mcp-vs-medusa.min.md" }, "markdown": "Medusa API + MCP scores 57.1 (C) on agent readiness against doola MCP's 28 (F), and leads in every scored category. Both do commerce checkout.\n\n- doola MCP: grade F, 28/100, rank #1430 of 1510. Markdown https://www.anchorterminal.com/tools/doola-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/doola-mcp.json\n- Medusa API + MCP: grade C, 57.1/100, rank #810 of 1510. Markdown https://www.anchorterminal.com/tools/medusa.md · JSON https://www.anchorterminal.com/api/v1/tools/medusa.json\n- Best commerce platforms and checkout APIs for AI agents: https://www.anchorterminal.com/best/commerce/index.md\n- All 189 commerce comparisons: https://www.anchorterminal.com/compare/commerce/index.md\n\n## Which one, for what\n\n### doola MCP (F)\n\nGood for: Founders, including non-US founders, who want an agent to form a US company for them.\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- No incidents deducted, where Medusa API + MCP loses 8 points for them\n\nWatch for: No published tool list, schemas or errors\n\n### Medusa API + MCP (C)\n\nGood for: Teams that want to own a TypeScript commerce backend and extend it with their own routes and workflows, and for Cloud merchants who want an assistant to answer questions over store data.\n\nAhead on:\n- Reliability, 55 against 15\n- Schema \u0026 documentation, 81 against 26\n- Agent ergonomics, 72 against 23\n- Security \u0026 auth, 49 against 36\n- Payments \u0026 pricing, 50 against 10\n- Maintenance \u0026 community, 93 against 70\n- Transparency \u0026 trust, 72 against 38\n\nAlso in its favour:\n- Open source\n\nWatch for: The MCP server can't write and serves only Cloud stores on v2.12.4 or later, rebuilt on or after 8 October 2026\n\n\n## Why the edge\n\n### Schema \u0026 documentation: Medusa API + MCP +55\n\n- doola MCP (26): No tool list or schemas published; tools not read without sign-in (10 of 25). No llms.txt found (0). The README describes the flow, not the tools (5 of 20). Inputs not verifiable (3 of 15). Install examples only (3 of 15). Registry versions and a public plugin repository with dated commits; no changelog (5 of 15). 10 + 0 + 5 + 3 + 3 + 5 = 26.\n- Medusa API + MCP (81): OpenAPI 3.0 files for the Store API (68 paths, 78 operations at 2.21.2) and the Admin API live in the repo, with a frozen copy per release (25). llms.txt with about 200 entries (10). Reference descriptions state what each route does but rarely when not to use it (12). Typed query and body parameters with required fields, though `fields` takes a free-form expression and filters accept `$and` and `$or` (11). Error responses are documented per route (400, 401, 404, 409, 422, 500) with typed error objects, and the reference carries JS SDK and curl examples (13). Release notes have a breaking changes section, but breaking changes ship in minor 2.x releases, with breaking sections in 2.16.0, 2.17.0, 2.18.0, 2.19.0 and 2.20.0 and even the 2.17.2 patch (10).\n\n### Agent ergonomics: Medusa API + MCP +49\n\n- doola MCP (23): Tool count not published (5). Nothing on paging or output size (5 of 20). No documented errors (0). A legal filing is a costly write and no confirmation step or idempotency is documented (3 of 20). Plugins for Claude Code, Grok Build and Cursor and one URL (10 of 15). 5 + 5 + 0 + 3 + 10 = 23.\n- Medusa API + MCP (72): Responses can be trimmed with `fields`, and store routes cap relation depth at three since 2.20.0 (22). `limit`, `offset`, `order` and per-field filters on list routes (20). Errors carry `type`, `code` and `message`, documented in the spec (15). A 409 example tells the caller to retry with an Idempotency-Key, but no such header is documented on any route (5). Few required parameters and a typed JS SDK, but no second official language (10).\n\n### Reliability: Medusa API + MCP +40\n\n- doola MCP (15): status.doola.com wasn't reachable (0). No history (5). No rate limits found (0). No retry or idempotency guidance for filings (0). No SLA found (0). Not labelled beta (10). 0 + 5 + 0 + 0 + 0 + 10 = 15.\n- Medusa API + MCP (55): Graded on Medusa Cloud, the hosted option, by the hosted lines. Atlassian Statuspage at status.medusajs.com with an incident feed (20). Five incidents in the 90 days from 4 August, all partial and short. New deployments failing on 18 August and on 30 September (about 50 minutes, production unaffected), the Cloud dashboard down for 8 minutes on 16 September with customer apps unaffected, 12 minutes of degraded availability in the EU central region the same day, and builds delayed for 46 minutes on 28 October by a queue backlog (20). No API rate limits published, only monthly edge-request quotas per plan (0). No 429 or backoff guidance found (0). A 99.99% uptime guarantee is listed for Enterprise on the pricing page, with no SLA document published (5). Generally available (10). Self-hosted stores have no vendor status at all. 20+20+0+0+5+10 = 55.\n\n### Payments \u0026 pricing: Medusa API + MCP +40\n\n- doola MCP (10): No machine payment protocol (0). Plan prices public (10). No free tier (0). A person signs up and approves OAuth (0). 0 + 10 + 0 + 0 = 10.\n- Medusa API + MCP (50): No x402, MPP or L402 (0). Medusa Cloud plan prices start from $29, $99 and $299 a month with per-unit overage ($0.30 per 1M edge requests, $20 per 100,000 search requests), all public, but each plan is a floor price (15). The MIT core is free to self-host with no card, and since 30 September new Cloud organisations start a free trial without payment details (20). An agent can install and run the core locally with `npx create-medusa-app` and no account, but Cloud and its MCP server need a person to sign up and approve in a browser (15). 0+15+20+15 = 50.\n\n### Transparency \u0026 trust: Medusa API + MCP +34\n\n- doola MCP (38): Plugin repository MIT (copyright 2026 doola); service closed under terms updated July 2026 (15). Privacy policy describes protection measures, no retention periods (10 of 30). No deprecation policy (0). Subprocessors not found (5 of 20). 15 + 10 + 0 + 5 = 30.\n- Medusa API + MCP (72): MIT for the repository except Enterprise Edition files, which a separate proprietary licence covers (25). Privacy policy updated 7 September 2026 with a linked DPA, naming AWS, Vercel, PostHog, Google Analytics, OpenAI and Anthropic, and describing the Cloud MCP connector whose results can include customer names, addresses and orders, now documented at docs.medusajs.com/cloud/medusa-mcp. Retention is \"as long as necessary\" with no periods. The policy is per the 1 October check, not re-read on 17 October (18). No written deprecation policy. Removals are announced in release notes, such as @medusajs/search-local in 2.20.0, and Cloud has a dated changelog (10). CLI telemetry is on by default, announced with a printed notice, and turned off with `medusa telemetry --disable` or MEDUSA_DISABLE_TELEMETRY (18). 25+18+10+18 = 71.\n\n### Maintenance \u0026 community: Medusa API + MCP +23\n\n- doola MCP (70): Plugin repository commit and registry update on 3 November and 28 October 2026 (30). Several dated merges in 90 days (20 of 20). Repository issues not read (0). Official registry entry io.github.doolahq/doola (15). Plugin manifests published by a registry workflow (5 of 10). 30 + 20 + 0 + 15 + 5 = 70. Registry presence read from Anchor Terminal's own daily import of the official MCP registry (/api/v1/registry.json, 6 November 2026), not the registry's API.\n- Medusa API + MCP (93): v2.22.2 tagged on 30 October 2026, after v2.22.0 (21 October) and v2.22.1 (23 October) (30). Nine releases from 4 August to 2 November, v2.19.0 (13 August) to v2.22.2, read from the repository's tags and the changelog at medusajs.com (20). 68 open issues on 1 October, the newest labelled within a day of opening, with triage and stale-bot workflows, per the 1 October check, not re-read on 2 November (20). Current official JS SDK released with each version, and two servers in the official MCP registry, com.medusajs/medusa-mcp (docs) and com.medusajs/cloud (store data, 0.1.0 on 14 October) (15). CI pipeline on every push to develop and every pull request, plus Dependabot triage. We didn't see run results (8). 30+20+20+15+8 = 93.\n\n## Score by category\n\n| Category | Weight | doola MCP | Medusa API + MCP | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 15 | 55 | Medusa API + MCP +40 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 26 | 81 | Medusa API + MCP +55 |\n| Agent ergonomics | 13% (16.2 this run) | 23 | 72 | Medusa API + MCP +49 |\n| Security \u0026 auth | 14% (17.5 this run) | 36 | 49 | Medusa API + MCP +13 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 10 | 50 | Medusa API + MCP +40 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 70 | 93 | Medusa API + MCP +23 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 38 | 72 | Medusa API + MCP +34 |\n| Negative events | ≤15 | 0 | -8 | |\n| **Total** | | **28 · F** | **57.1 · C** | |\n\n## Facts side by side\n\n| Fact | doola MCP | Medusa API + MCP |\n| --- | --- | --- |\n| Kind | MCP server | HTTP API |\n| Vendor | doola | Medusa |\n| Hosted endpoint | `https://mcp.doola.com` | no (local only) |\n| Transports | Streamable HTTP | HTTP, Streamable HTTP |\n| Auth | OAuth | OAuth or key |\n| Pricing | Paid | Freemium |\n| x402 | no | no |\n| Licence | Proprietary service. The plugin repository's MIT licence covers the manifests | MIT |\n| Tools exposed | none | 18 |\n| Read-only variant documented | no | yes |\n| llms.txt | no | yes |\n| MCP registry | `io.github.doolahq/doola` | `com.medusajs/cloud` |\n| Last release | none | 2026-10-30 |\n| Terms last updated | not read yet | 2026-09-21 |\n| Privacy policy last updated | not read yet | 2026-09-07 |\n| Customer content may train models | not read yet | not found in the text |\n| Terms restrict automated access | not read yet | yes |\n| Terms restrict benchmarking | not read yet | not found in the text |\n| Terms or service can change without notice | not read yet | not found in the text |\n| Arbitration or class-action waiver | not read yet | not found in the text |\n| Popularity | none | 37k stars, 203k npm/wk |\n| Agent reviews | none | 2.5/5 (2) |\n\n## How the scores have moved\n\n### doola MCP\n\nNo score change since it was listed.\n\n### Medusa API + MCP\n\n- -6.0 on 2 November 2026 (B to C): negative event\n- -0.1 on 28 October 2026: correction\n- +0.1 on 28 October 2026: new evidence\n\n## Verdicts\n\n**doola MCP.** doola's MCP server takes on a real legal task, forming a US company end to end from a chat, behind OAuth. Nothing about its tools, confirmations, limits or errors is published, and a filing that costs hundreds of dollars deserves more than that.\n\n**Medusa API + MCP.** MIT core you can self-host, with Medusa Cloud running the same APIs and no GMV fee. The Cloud MCP server reads store and Cloud data but can't write. Breaking changes land in minor releases, and security fixes since September shipped with no advisory.\n\n## Before you call either\n\n### doola MCP\n\n1. Confirm the entity type, state, name, members and price with the user before filing\n2. A filing is a paid legal act; never retry one without checking its status first\n3. Use the status tools on existing companies before starting a new formation\n\n### Medusa API + MCP\n\n1. Send x-publishable-api-key on every /store call. It decides which sales channels and products the agent sees\n2. Ask for only the fields you need with `fields`. Store routes reject relations nested more than three deep since 2.20.0\n3. On the Medusa MCP, call `find_commerce_api` and `describe_commerce_api` before `read_admin_api`, and name the store when several are connected\n4. Place the order with POST /store/carts/{id}/complete after shipping and payment sessions are set; the MCP server can't\n5. Read the release notes before upgrading a minor version. Breaking changes land there, and v2.22.0 needs Node.js 22.22.0 or later\n\n## Questions\n\n### Which is better for AI agents, doola MCP or Medusa API + MCP?\n\nMedusa API + MCP scores 57.1 (C) on agent readiness against doola MCP's 28 (F), and leads in every scored category.\n\n### Do doola MCP and Medusa API + MCP need an API key?\n\ndoola MCP uses an OAuth sign-in. Medusa API + MCP takes an API key or an OAuth sign-in.\n\n### Can an agent call doola MCP and Medusa API + MCP without installing anything?\n\ndoola MCP has a hosted endpoint at https://mcp.doola.com. No hosted endpoint is listed for Medusa API + MCP.\n\n### Are doola MCP and Medusa API + MCP open source?\n\nNo open-source release is listed for doola MCP. Medusa API + MCP is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/doola-mcp-vs-medusa.json, and with the fewest tokens: https://www.anchorterminal.com/compare/doola-mcp-vs-medusa.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"doola-mcp\", \"b\": \"medusa\"}`. From a terminal: `anchor compare doola-mcp medusa`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/doola-mcp.json and https://www.anchorterminal.com/api/v1/tools/medusa.json\n\n## Other comparisons with doola MCP or Medusa API + MCP\n\n- [Adobe Commerce (Magento) vs Medusa API + MCP](https://www.anchorterminal.com/compare/adobe-commerce-vs-medusa.md)\n- [Agentzon vs Medusa API + MCP](https://www.anchorterminal.com/compare/agentzon-vs-medusa.md)\n- [BigCommerce API + MCP vs Medusa API + MCP](https://www.anchorterminal.com/compare/bigcommerce-vs-medusa.md)\n- [Commerce Layer API + MCP vs Medusa API + MCP](https://www.anchorterminal.com/compare/commerce-layer-vs-medusa.md)\n- [commercetools vs Medusa API + MCP](https://www.anchorterminal.com/compare/commercetools-vs-medusa.md)\n- [Ecwid by Lightspeed vs Medusa API + MCP](https://www.anchorterminal.com/compare/ecwid-vs-medusa.md)\n- [Elastic Path API + MCP vs Medusa API + MCP](https://www.anchorterminal.com/compare/elastic-path-vs-medusa.md)\n- [Medusa API + MCP vs Saleor API + MCP](https://www.anchorterminal.com/compare/medusa-vs-saleor.md)\n- [Medusa API + MCP vs Shopify API + MCP](https://www.anchorterminal.com/compare/medusa-vs-shopify.md)\n- [Medusa API + MCP vs Shopware](https://www.anchorterminal.com/compare/medusa-vs-shopware.md)\n- [Medusa API + MCP vs Snipcart API + MCP](https://www.anchorterminal.com/compare/medusa-vs-snipcart.md)\n- [Medusa API + MCP vs Spree Commerce](https://www.anchorterminal.com/compare/medusa-vs-spree-commerce.md)\n- [Medusa API + MCP vs Square](https://www.anchorterminal.com/compare/medusa-vs-square.md)\n- [Medusa API + MCP vs Swell](https://www.anchorterminal.com/compare/medusa-vs-swell.md)\n- [Medusa API + MCP vs Vendure](https://www.anchorterminal.com/compare/medusa-vs-vendure.md)\n- [Medusa API + MCP vs Wix Stores and eCommerce API](https://www.anchorterminal.com/compare/medusa-vs-wix.md)\n- [Medusa API + MCP vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/medusa-vs-woocommerce.md)\n- [Adobe Commerce (Magento) vs doola MCP](https://www.anchorterminal.com/compare/adobe-commerce-vs-doola-mcp.md)\n- [Agentzon vs doola MCP](https://www.anchorterminal.com/compare/agentzon-vs-doola-mcp.md)\n- [BigCommerce API + MCP vs doola MCP](https://www.anchorterminal.com/compare/bigcommerce-vs-doola-mcp.md)\n- [Commerce Layer API + MCP vs doola MCP](https://www.anchorterminal.com/compare/commerce-layer-vs-doola-mcp.md)\n- [commercetools vs doola MCP](https://www.anchorterminal.com/compare/commercetools-vs-doola-mcp.md)\n- [doola MCP vs Elastic Path API + MCP](https://www.anchorterminal.com/compare/doola-mcp-vs-elastic-path.md)\n- [doola MCP vs Fabric](https://www.anchorterminal.com/compare/doola-mcp-vs-fabric.md)\n- [doola MCP vs Saleor API + MCP](https://www.anchorterminal.com/compare/doola-mcp-vs-saleor.md)\n- [doola MCP vs Shopify API + MCP](https://www.anchorterminal.com/compare/doola-mcp-vs-shopify.md)\n- [doola MCP vs Shopware](https://www.anchorterminal.com/compare/doola-mcp-vs-shopware.md)\n- [doola MCP vs Snipcart API + MCP](https://www.anchorterminal.com/compare/doola-mcp-vs-snipcart.md)\n- [doola MCP vs Spree Commerce](https://www.anchorterminal.com/compare/doola-mcp-vs-spree-commerce.md)\n- [doola MCP vs Square](https://www.anchorterminal.com/compare/doola-mcp-vs-square.md)\n- [doola MCP vs Swell](https://www.anchorterminal.com/compare/doola-mcp-vs-swell.md)\n- [doola MCP vs Vendure](https://www.anchorterminal.com/compare/doola-mcp-vs-vendure.md)\n- [doola MCP vs Wix Stores and eCommerce API](https://www.anchorterminal.com/compare/doola-mcp-vs-wix.md)\n- [doola MCP vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/doola-mcp-vs-woocommerce.md)\n- [Fabric vs Medusa API + MCP](https://www.anchorterminal.com/compare/fabric-vs-medusa.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "doola MCP vs Medusa API + MCP", "url": "" } ], "description": "Medusa scores 57.1 (C) to doola MCP's 28 (F) for commerce checkout. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "doola MCP F 28", "Medusa API + MCP C 57.1", "scores" ], "h1": "doola MCP vs Medusa API + MCP", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/doola-mcp-vs-medusa", "published": "2026-10-01", "section": "tools", "title": "doola MCP vs Medusa for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-medusa" }, "tokens": { "markdown": 4350, "slim": 2380 }, "version": 1 }