{ "data": { "a": { "slug": "doola-mcp", "name": "doola MCP", "vendor": "doola", "vendorUrl": "https://doola.com", "kind": "mcp", "category": "commerce", "summary": "doola's hosted MCP server lets an agent form a US LLC or C-Corp in any state or DC from a conversation, covering entity type, name, members, ownership and the state filing, and check on existing doola companies.", "url": "https://www.anchorterminal.com/tools/doola-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/doola-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/doola-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/doola-mcp.json", "dns": "doola-mcp.grade.anchorterminal.com", "repo": "https://github.com/doolahq/plugins", "license": "Proprietary service. The plugin repository's MIT licence covers the manifests", "transports": [ "streamable-http" ], "remoteUrl": "https://mcp.doola.com", "packages": [], "auth": "oauth", "authNotes": "OAuth with a doola account on the first tool call; tokens are held by the client and can be revoked in doola's account settings.", "pricing": "paid", "pricingNotes": "Formation plans from $297 a year plus state fees (renewing at $300), up to $1,999 a year plus state fees. The MCP server itself is free to connect (checked 2026-11-07).", "priceSummary": "Paid", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on the MCP docs or pricing page (checked 2026-11-07).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-07" }, "docsUrl": "https://doola.com", "registryName": "io.github.doolahq/doola", "capabilities": [ "legal.company-formation", "commerce.checkout" ], "tags": [ "official", "hosted", "mcp", "remote-mcp", "oauth", "paid", "mcp-registry" ], "graded": true, "anchor": { "graded": true, "score": 28, "grade": "F", "agentReady": false, "rank": 1430, "ranked": true, "rankOf": 1510, "categoryRank": 20, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 23, "maintenance": 70, "payments": 10, "reliability": 15, "schema": 26, "security": 36, "transparency": 38 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "low", "date": "2026-11-07" }, "negative": 0, "verdict": "doola's MCP server takes on a real legal task, forming a US company end to end from a chat, behind OAuth. Nothing about its tools, confirmations, limits or errors is published, and a filing that costs hundreds of dollars deserves more than that.", "bestFor": "Founders, including non-US founders, who want an agent to form a US company for them.", "strengths": [ "Forms a US LLC or C-Corp in any state from a conversation", "OAuth with revocation in account settings", "Plugins for Claude Code, Grok Build and Cursor", "Official registry entry and a public plugin repository" ], "weaknesses": [ "No published tool list, schemas or errors", "No documented confirmation before a paid filing", "No free tier; formation from $297 a year plus state fees", "Status page unreachable and no llms.txt" ], "agentNotes": [ "Confirm the entity type, state, name, members and price with the user before filing", "A filing is a paid legal act; never retry one without checking its status first", "Use the status tools on existing companies before starting a new formation" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "F", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 28 } ], "editorialScores": { "ergonomics": 23, "maintenance": 70, "payments": 10, "reliability": 15, "schema": 26, "security": 36, "transparency": 30 }, "provenanceScore": 46, "checked": { "categories": { "ergonomics": "2026-11-07", "maintenance": "2026-11-07", "payments": "2026-11-07", "reliability": "2026-11-07", "schema": "2026-11-07", "security": "2026-11-07", "transparency": "2026-11-07" }, "last": "2026-11-07", "oldest": "2026-11-07", "stale": false, "staleAfterDays": 90 } }, "connect": { "claudeCode": "claude plugin marketplace add doolahq/plugins \u0026\u0026 claude plugin install doola@doola", "config": { "mcpServers": { "doola": { "url": "https://mcp.doola.com" } } } }, "letme": { "capability": "https://letme.dev/legal.company-formation", "tool": "https://letme.dev/doola-mcp" }, "area": "business", "provenance": { "legalEntity": "doola", "domain": "doola.com", "domainRegistered": "", "domainNote": "Not looked up: RDAP isn't requested under the 1 November 2026 rules.", "endpointOnVendorDomain": true, "terms": "https://doola.com/terms-of-service", "privacy": "https://doola.com/privacy-policy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-11-07", "notes": [ "Terms last updated July 2026. The plugin repository's licence names doola." ], "score": 46 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/doola-mcp.json", "live": { "slug": "doola-mcp", "probe": { "target": "https://mcp.doola.com", "method": "mcp-initialize", "lastAt": "2026-11-08T00:55:37.012153631Z", "lastOk": true, "lastStatus": 401, "lastMs": 176, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 113, "p95ms24h": 201, "samples24h": 63, "samples30d": 63, "days": [ { "date": "2026-11-07", "probes": 53, "ok": 53 }, { "date": "2026-11-08", "probes": 10, "ok": 10 } ] }, "githubStars": 0, "updatedAt": "2026-11-08T00:55:37.012153631Z" } }, "answer": "WooCommerce API + MCP scores 71 (BB) on agent readiness against doola MCP's 28 (F), and leads in every scored category.", "b": { "slug": "woocommerce", "name": "WooCommerce API + MCP", "vendor": "WooCommerce (Automattic)", "vendorUrl": "https://woocommerce.com", "kind": "http-api", "category": "commerce", "summary": "Open-source commerce plugin for WordPress that you host yourself.", "url": "https://www.anchorterminal.com/tools/woocommerce", "markdownUrl": "https://www.anchorterminal.com/tools/woocommerce.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/woocommerce.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/woocommerce.json", "dns": "woocommerce.grade.anchorterminal.com", "repo": "https://github.com/woocommerce/woocommerce", "license": "GPL-3.0", "transports": [ "http", "streamable-http", "stdio" ], "packages": [ { "registry": "npm", "name": "@woocommerce/woocommerce-rest-api" }, { "registry": "pypi", "name": "woocommerce" }, { "registry": "npm", "name": "@automattic/mcp-wordpress-remote" } ], "auth": "mixed", "authNotes": "REST API keys (consumer key and secret) with read, write or read_write permission, sent as HTTP Basic over HTTPS. The Store API needs no key for browsing and uses a nonce or Cart-Token for cart and checkout calls. The MCP adapter takes a WordPress Application Password and acts with that user's capabilities. The deprecated /wp-json/woocommerce/mcp endpoint used REST keys.", "pricing": "free", "pricingNotes": "The plugin is free under GPL with no platform fee or revenue share. You pay for hosting, which Woo puts at $25 to $350 a month for most stores, extensions at $29 to $299 a year each, and card processing, about 2.9% + 30 cents per US transaction with WooPayments (https://woocommerce.com/pricing/).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402 in core. Payments go through whichever gateway the store installs.", "endpoints": [] }, "toolCount": 7, "popularity": { "githubStars": 10535, "npmWeekly": 63554, "pypiWeekly": 24657, "asOf": "2026-09-30" }, "docsUrl": "https://developer.woocommerce.com/docs/", "llmsTxt": "https://developer.woocommerce.com/llms.txt", "capabilities": [ "commerce.products", "commerce.cart", "commerce.checkout", "commerce.orders", "commerce.headless" ], "tags": [ "open-source", "self-hosted", "local", "mcp", "llms-txt", "webhooks", "python", "typescript" ], "lastRelease": "2026-10-09", "graded": true, "anchor": { "graded": true, "score": 71, "grade": "BB", "agentReady": true, "rank": 175, "ranked": true, "rankOf": 1510, "categoryRank": 3, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 83, "maintenance": 82, "payments": 60, "reliability": 80, "schema": 77, "security": 55, "transparency": 76 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -2, "negativeNotes": [ "2026-09-04 to 2026-10-10. NVD lists three High CVEs in WooCommerce core, all filed by Patchstack after fixes had shipped in releases. CVE-2026-57777 (CVSS 3.1 7.6, published 4 September) is SQL injection for a shop manager, fixed in 11.0.0. CVE-2026-48888 (7.5, 8 September) is an unauthenticated denial of service, fixed in 11.1.0. CVE-2026-106608 (7.2, 10 October) is privilege escalation for a shop manager in 9.8.0 to 11.1.2, and 11.2.0's notes describe the shop manager hardening. Automattic's release notes call the releases security updates but name no CVE. Two need a shop manager account and one affects availability only, so -2 for the three together, as outline's two fixed Highs and open-webui's paired Highs took. https://nvd.nist.gov/vuln/detail/CVE-2026-106608" ], "verdict": "Free GPL software with no platform fee or revenue share. Uptime, speed and security depend on each store's host and plugins. No vendor status page.", "bestFor": "Merchants already on WordPress and agents that need a cart and checkout without a vendor account.", "strengths": [ "Free GPL software with no platform fee or revenue share", "Store API runs carts, coupons and checkout with a Cart-Token instead of a key", "Code examples in five languages on every REST endpoint, and official JavaScript and Python clients", "Automattic's HackerOne bug bounty covers WooCommerce core", "Six stable releases between 7 July and 22 September 2026, CI green on trunk" ], "weaknesses": [ "Uptime, speed and security depend on each store's host and plugins. No vendor status page", "MCP is a developer preview, behind the mcp_integration flag in 11.2, and moves to the separate MCP Adapter plugin in 11.3", "REST docs allow the consumer key and secret in the query string", "Store API rate limiting is off by default", "No OpenAPI file, so the contract only comes from a live store" ], "agentNotes": [ "Create a REST key with read permission only for reporting tasks, and send it in the Authorization header, never the URL", "Get a Cart-Token with GET /wp-json/wc/store/v1/cart and send it on every cart and checkout call instead of a nonce", "Add `_fields=id,name,price` to REST calls to cut response size", "Page with per_page up to 100 and stop at X-WP-TotalPages", "Product delete only trashes unless you pass force true, so check the trash before assuming it's gone", "Before 11.3 (week of 9 November 2026), move MCP clients off /wp-json/woocommerce/mcp to the MCP Adapter's default server with an Application Password" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 71 } ], "editorialScores": { "ergonomics": 83, "maintenance": 82, "payments": 60, "reliability": 80, "schema": 77, "security": 55, "transparency": 86 }, "provenanceScore": 65, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl \"https://yourstore.com/wp-json/wc/v3/products?per_page=5\" \\\n -u \"$WC_CONSUMER_KEY:$WC_CONSUMER_SECRET\"", "claudeCode": "claude mcp add --env WP_API_URL=https://yourstore.com/wp-json/mcp/mcp-adapter-default-server --env WP_API_USERNAME=$WP_USER --env WP_API_PASSWORD=$WP_APP_PASSWORD woocommerce_store -- npx -y @automattic/mcp-wordpress-remote@latest", "config": { "mcpServers": { "woocommerce_store": { "args": [ "-y", "@automattic/mcp-wordpress-remote@latest" ], "command": "npx", "env": { "WP_API_PASSWORD": "${WP_APP_PASSWORD}", "WP_API_URL": "https://yourstore.com/wp-json/mcp/mcp-adapter-default-server", "WP_API_USERNAME": "${WP_USER}" } } } } }, "letme": { "capability": "https://letme.dev/commerce.products", "tool": "https://letme.dev/woocommerce" }, "area": "business", "unitPrices": [ { "item": "WooCommerce plugin", "unit": "month", "usd": 0, "note": "GPL, you pay for your own hosting" }, { "item": "WooPayments US card rate", "unit": "pct", "usd": 2.9, "note": "plus 30 cents per transaction, optional gateway" } ], "provenance": { "legalEntity": "WooCommerce, Inc.", "domain": "woocommerce.com", "domainRegistered": "2010-01-09", "endpointOnVendorDomain": false, "terms": "https://wordpress.com/tos/", "privacy": "https://automattic.com/privacy/", "statusPage": "", "changelog": "https://developer.woocommerce.com/changelog/", "securityTxt": "none", "checked": "2026-11-01", "notes": [ "woocommerce.com/terms-conditions redirects to the WordPress.com terms, which name WooCommerce, Inc. as an Automattic company, re-checked on 1 November", "The API runs on each merchant's own domain", "woocommerce.com/.well-known/security.txt answered 404 on 1 November; disclosure goes through Automattic's HackerOne programme per SECURITY.md" ], "score": 65 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/woocommerce.json", "live": { "slug": "woocommerce", "versions": [ { "registry": "github", "name": "woocommerce/woocommerce", "version": "11.2.2", "released": "2026-11-04", "seenAt": "2026-11-07T00:17:39.587224947Z" }, { "registry": "npm", "name": "@automattic/mcp-wordpress-remote", "version": "0.5.5", "seenAt": "2026-11-07T00:17:38.384484052Z" }, { "registry": "npm", "name": "@woocommerce/woocommerce-rest-api", "version": "1.0.2", "seenAt": "2026-11-07T00:17:37.332887532Z" }, { "registry": "pypi", "name": "woocommerce", "version": "3.0.0", "released": "2021-03-13", "seenAt": "2026-11-07T00:17:38.171765725Z" } ], "githubStars": 10584, "npmWeekly": 83932, "pypiWeekly": 30590, "securityTxt": { "url": "https://woocommerce.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:27.247543828Z" }, "llmsTxt": { "url": "https://developer.woocommerce.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:34:23.382089752Z" }, "domain": { "domain": "woocommerce.com", "registered": "2010-01-09", "source": "https://rdap.verisign.com/com/v1/domain/woocommerce.com", "checkedAt": "2026-11-01T14:24:03.580855306Z" }, "pages": [ { "url": "https://developer.woocommerce.com/changelog/", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:03:37.379748286Z", "changedAt": "2026-11-05T12:27:51.489632996Z", "fingerprint": "103ae9704547" }, { "url": "https://developer.woocommerce.com/2026/09/28/experimental-dual-api-plugin/", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:03:30.912186766Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "7ffc7fa7ec63" }, { "url": "https://developer.woocommerce.com/2026/09/29/php-8-1-requirement/", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:03:33.303933154Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "16a3f0f08536" }, { "url": "https://developer.woocommerce.com/2026/10/21/woocommerce-11-3-mcp/", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:03:35.578321266Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "e96a98a1c00c" }, { "url": "https://woocommerce.com/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:23:59.32907597Z", "changedAt": "2026-11-07T14:23:59.32907597Z", "fingerprint": "20a38b836d0d" }, { "url": "https://automattic.com/privacy/", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T13:59:49.357596006Z", "changedAt": "2026-11-07T13:59:49.357596006Z", "fingerprint": "4b95dc3e87da" }, { "url": "https://wordpress.com/tos/", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:24:01.312936789Z", "changedAt": "2026-10-07T18:10:29.658725622Z", "fingerprint": "7a21fafe2264" } ], "github": { "repo": "woocommerce/woocommerce", "checkedAt": "2026-11-02T09:38:44.502747883Z", "stars": 10575, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-02T09:38:24Z", "openIssues": 1052, "openPRs": 426, "issuesOpened90d": 735, "issuesClosed90d": 1076, "prsMerged90d": 1803, "ci": { "branch": "trunk", "runs": 50, "success": 40, "failure": 5, "other": 5, "latest": "success", "latestAt": "2026-11-02T09:28:49Z" }, "advisories": [ { "ghsa": "GHSA-cv23-q6gh-xfrf", "cve": "CVE-2024-37297", "severity": "high", "published": "2024-06-12T12:07:52Z" }, { "ghsa": "GHSA-7vx5-x39w-q24g", "cve": "CVE-2021-32790", "severity": "critical", "published": "2021-07-23T10:52:04Z" } ], "replies": { "sampled": 3, "unanswered": 1, "medianDays": 0.6 } }, "updatedAt": "2026-11-07T16:01:27.247543828Z" } }, "edges": [ { "by": 65, "category": "reliability", "leads": "woocommerce", "name": "Reliability", "reasons": { "a": "status.doola.com wasn't reachable (0). No history (5). No rate limits found (0). No retry or idempotency guidance for filings (0). No SLA found (0). Not labelled beta (10). 0 + 5 + 0 + 0 + 0 + 10 = 15.", "b": "Graded with the self-hosted package checklist, since every store runs on its owner's WordPress host and Woo runs no hosted API. Official plugin on wordpress.org, requiring PHP 7.4 and WordPress 7.0, per the 11.2.1 readme re-read on 1 November (20). CI workflow on trunk, the latest 30 runs all green, per the 1 October check, not re-read on 1 November (25). About 1,300 open issues, with recent bugs such as an 11.1.0 release candidate showing $0 flat-rate shipping as \"Free!\" in emails (fixed in 11.2.0) and a database connection bug, per the 1 October check (10). Monthly major.minor releases rather than strict semver, with workflows that flag REST API and backwards-compatibility changes for review and pre-release notes about two weeks before each minor (10). Stable 11.x (15). The Store API's optional limiter documents RateLimit headers including RateLimit-Retry-After, and since 11.2.0 answers 429 rather than 400 when the limit is exceeded. 20 + 25 + 10 + 10 + 15 = 80." }, "scores": { "a": 15, "b": 80 } }, { "by": 60, "category": "ergonomics", "leads": "woocommerce", "name": "Agent ergonomics", "reasons": { "a": "Tool count not published (5). Nothing on paging or output size (5 of 20). No documented errors (0). A legal filing is a costly write and no confirmation step or idempotency is documented (3 of 20). Plugins for Claude Code, Grok Build and Cursor and one URL (10 of 15). 5 + 5 + 0 + 3 + 10 = 23.", "b": "WordPress's `_fields` parameter trims REST responses, and the MCP has 7 abilities (22). `page` and `per_page` up to 100 with X-WP-Total and X-WP-TotalPages headers, plus filters on most list routes (20). Errors carry a `code`, `message` and `data.status`, and the Store API documents its status codes (16). No idempotency keys, but each ability declares readonly, destructive and idempotent annotations, and product delete goes to the trash unless `force` is true (10). Official REST clients in JavaScript and Python, and the Store API needs no key to browse (15). From 11.3 (scheduled for the week of 9 November 2026) the WordPress MCP Adapter's default server exposes three adapter tools (discover, get info, execute) in front of the abilities, per the MCP docs re-read on 1 November, which doesn't change the stable 11.2 reading. 22 + 20 + 16 + 10 + 15 = 83." }, "scores": { "a": 23, "b": 83 } }, { "by": 51, "category": "schema", "leads": "woocommerce", "name": "Schema \u0026 documentation", "reasons": { "a": "No tool list or schemas published; tools not read without sign-in (10 of 25). No llms.txt found (0). The README describes the flow, not the tools (5 of 20). Inputs not verifiable (3 of 15). Install examples only (3 of 15). Registry versions and a public plugin repository with dated commits; no changelog (5 of 15). 10 + 0 + 5 + 3 + 3 + 5 = 26.", "b": "No OpenAPI file. Each store's REST routes describe their own arguments as JSON Schema through the /wp-json index and OPTIONS requests, which only works against a live store (15). llms.txt on developer.woocommerce.com per the 30 September check (10). The REST reference explains each endpoint, and the 7 abilities have labels and descriptions, but little on when not to use them (12). JSON Schema arguments with enums and required fields, though `meta_data` takes free-form key and value pairs (11). Examples in curl, Node.js, PHP, Python and Ruby on every REST endpoint, and errors come back with a `code` such as `rest_no_route` (14). Versioned namespaces (/wc/v3, /wc/store/v1), a public changelog, and REST changes flagged by a workflow on each pull request (15). llms.txt on developer.woocommerce.com re-read on 1 November. 15 + 10 + 12 + 11 + 14 + 15 = 77." }, "scores": { "a": 26, "b": 77 } }, { "by": 50, "category": "payments", "leads": "woocommerce", "name": "Payments \u0026 pricing", "reasons": { "a": "No machine payment protocol (0). Plan prices public (10). No free tier (0). A person signs up and approves OAuth (0). 0 + 10 + 0 + 0 = 10.", "b": "No x402, MPP or L402 in core (0). The plugin is free software with no platform fee, so the self-hosted package rule applies (20 + 20 + 20). Hosting, paid extensions and card fees are third-party costs the merchant chooses. 0 + 20 + 20 + 20 = 60." }, "scores": { "a": 10, "b": 60 } }, { "by": 38, "category": "transparency", "leads": "woocommerce", "name": "Transparency \u0026 trust", "reasons": { "a": "Plugin repository MIT (copyright 2026 doola); service closed under terms updated July 2026 (15). Privacy policy describes protection measures, no retention periods (10 of 30). No deprecation policy (0). Subprocessors not found (5 of 20). 15 + 10 + 0 + 5 = 30.", "b": "GPL-3.0 (30). Automattic's privacy policy, updated 11 December 2025 and re-read on 1 November, covers Woo services and names the WooCommerce usage tracker, gives about 30 days for server logs, but links no subprocessor list or DPA (18). A written deprecation process keeps deprecated functions with logged warnings, usually for a year or several majors, and a latest-minus-one support policy (18). Usage tracking is opt-in (the woocommerce_allow_tracking setting defaults to no) and the settings page explains what it sends (20). 30 + 18 + 18 + 20 = 86." }, "scores": { "a": 38, "b": 76 } }, { "by": 19, "category": "security", "leads": "woocommerce", "name": "Security \u0026 auth", "reasons": { "a": "OAuth with revocation; scopes not published (20 of 30). No read-only mode; no documented confirmation before a filing (3 of 20). Inputs are the user's own details (10). No audit log found (0). No security.txt or programme found (3 of 20). 20 + 3 + 10 + 0 + 3 = 36.", "b": "REST keys are revocable and set to read, write or read_write per key, and the MCP runs as a WordPress user with an Application Password. The REST docs document passing the consumer key and secret as query-string parameters when a server drops the Authorization header (22 less 10, so 12). Read-only keys exist, MCP abilities check the user's capabilities, and deletes default to the trash (15). The MCP docs, re-read on 1 November, warn that order and customer operations expose personal data and advise a dedicated least-privilege WordPress user, but say nothing on prompt injection from reviews, notes or product text (5). Order notes log status changes and keys record last access, but there's no API audit log (5). SECURITY.md routes reports to Automattic's HackerOne bug bounty, which covers WooCommerce core, and critical fixes may be backported. 11.1.1 (18 September), 11.1.2 (22 September) and 11.2.0 (7 October) were marked security releases in their notes, and 11.2.0's notes describe each hardening change. No security.txt on woocommerce.com, which answered 404 on 1 November (18). 12 + 15 + 5 + 5 + 18 = 55." }, "scores": { "a": 36, "b": 55 } } ], "facts": [ { "a": "MCP server", "b": "HTTP API", "name": "Kind" }, { "a": "doola", "b": "WooCommerce (Automattic)", "name": "Vendor" }, { "a": "https://mcp.doola.com", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "Streamable HTTP", "b": "HTTP, Streamable HTTP, stdio", "name": "Transports" }, { "a": "OAuth", "b": "OAuth or key", "name": "Auth" }, { "a": "Paid", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary service. The plugin repository's MIT licence covers the manifests", "b": "GPL-3.0", "name": "Licence" }, { "a": "none", "b": "7", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "io.github.doolahq/doola", "b": "not listed", "name": "MCP registry" }, { "a": "none", "b": "2026-10-09", "name": "Last release" }, { "a": "not read yet", "b": "2026-10-06", "name": "Terms last updated" }, { "a": "not read yet", "b": "no date given", "name": "Privacy policy last updated" }, { "a": "not read yet", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not read yet", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "11k stars, 64k npm/wk, 25k PyPI/wk", "name": "Popularity" }, { "a": "none", "b": "3.5/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "WooCommerce API + MCP scores 71 (BB) on agent readiness against doola MCP's 28 (F), and leads in every scored category.", "question": "Which is better for AI agents, doola MCP or WooCommerce API + MCP?" }, { "answer": "doola MCP uses an OAuth sign-in. WooCommerce API + MCP takes an API key or an OAuth sign-in.", "question": "Do doola MCP and WooCommerce API + MCP need an API key?" }, { "answer": "doola MCP has a hosted endpoint at https://mcp.doola.com. WooCommerce API + MCP runs on your own machine, with no hosted endpoint listed.", "question": "Can an agent call doola MCP and WooCommerce API + MCP without installing anything?" }, { "answer": "No open-source release is listed for doola MCP. WooCommerce API + MCP is open source (GPL-3.0).", "question": "Are doola MCP and WooCommerce API + MCP open source?" } ], "goodFor": [ { "aheadOn": null, "also": [ "A hosted endpoint, with nothing to install" ], "goodFor": "Founders, including non-US founders, who want an agent to form a US company for them.", "slug": "doola-mcp", "watchFor": "No published tool list, schemas or errors" }, { "aheadOn": [ "Reliability, 80 against 15", "Schema \u0026 documentation, 77 against 26", "Agent ergonomics, 83 against 23", "Security \u0026 auth, 55 against 36", "Payments \u0026 pricing, 60 against 10", "Maintenance \u0026 community, 82 against 70", "Transparency \u0026 trust, 76 against 38" ], "also": [ "Agent-ready, a grade of BB or better", "Runs on your own machine", "Open source" ], "goodFor": "Merchants already on WordPress and agents that need a cart and checkout without a vendor account.", "slug": "woocommerce", "watchFor": "Uptime, speed and security depend on each store's host and plugins. No vendor status page" } ], "history": { "doola-mcp": null, "woocommerce": [ { "causes": [ "correction" ], "date": "2026-11-01", "delta": -2, "from": 73, "fromGrade": "BB", "to": 71, "toGrade": "BB" }, { "causes": [ "evidence" ], "date": "2026-10-28", "delta": 0.1, "from": 72.9, "fromGrade": "BB", "to": 73, "toGrade": "BB" }, { "causes": [ "method" ], "date": "2026-10-08", "delta": -0.1, "from": 73, "fromGrade": "BB", "to": 72.9, "toGrade": "BB" } ] }, "job": { "capability": "commerce.checkout", "name": "Commerce checkout" }, "others": [ { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-woocommerce.json", "title": "Adobe Commerce (Magento) vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/agentzon-vs-woocommerce.json", "title": "Agentzon vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/agentzon-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/bigcommerce-vs-woocommerce.json", "title": "BigCommerce API + MCP vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/bigcommerce-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/commerce-layer-vs-woocommerce.json", "title": "Commerce Layer API + MCP vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/commerce-layer-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/commercetools-vs-woocommerce.json", "title": "commercetools vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/commercetools-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/ecwid-vs-woocommerce.json", "title": "Ecwid by Lightspeed vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/ecwid-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/elastic-path-vs-woocommerce.json", "title": "Elastic Path API + MCP vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/elastic-path-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-woocommerce.json", "title": "Medusa API + MCP vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/medusa-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/saleor-vs-woocommerce.json", "title": "Saleor API + MCP vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/saleor-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/shopify-vs-woocommerce.json", "title": "Shopify API + MCP vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/shopify-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/shopware-vs-woocommerce.json", "title": "Shopware vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/shopware-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/snipcart-vs-woocommerce.json", "title": "Snipcart API + MCP vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/snipcart-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/spree-commerce-vs-woocommerce.json", "title": "Spree Commerce vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/spree-commerce-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/square-vs-woocommerce.json", "title": "Square vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/square-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/swell-vs-woocommerce.json", "title": "Swell vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/swell-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/vendure-vs-woocommerce.json", "title": "Vendure vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/vendure-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/wix-vs-woocommerce.json", "title": "Wix Stores and eCommerce API vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/wix-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-doola-mcp.json", "title": "Adobe Commerce (Magento) vs doola MCP", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-doola-mcp" }, { "json": "https://www.anchorterminal.com/compare/agentzon-vs-doola-mcp.json", "title": "Agentzon vs doola MCP", "url": "https://www.anchorterminal.com/compare/agentzon-vs-doola-mcp" }, { "json": "https://www.anchorterminal.com/compare/bigcommerce-vs-doola-mcp.json", "title": "BigCommerce API + MCP vs doola MCP", "url": "https://www.anchorterminal.com/compare/bigcommerce-vs-doola-mcp" }, { "json": "https://www.anchorterminal.com/compare/commerce-layer-vs-doola-mcp.json", "title": "Commerce Layer API + MCP vs doola MCP", "url": "https://www.anchorterminal.com/compare/commerce-layer-vs-doola-mcp" }, { "json": "https://www.anchorterminal.com/compare/commercetools-vs-doola-mcp.json", "title": "commercetools vs doola MCP", "url": "https://www.anchorterminal.com/compare/commercetools-vs-doola-mcp" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-elastic-path.json", "title": "doola MCP vs Elastic Path API + MCP", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-elastic-path" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-fabric.json", "title": "doola MCP vs Fabric", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-fabric" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-medusa.json", "title": "doola MCP vs Medusa API + MCP", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-medusa" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-saleor.json", "title": "doola MCP vs Saleor API + MCP", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-saleor" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-shopify.json", "title": "doola MCP vs Shopify API + MCP", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-shopify" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-shopware.json", "title": "doola MCP vs Shopware", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-shopware" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-snipcart.json", "title": "doola MCP vs Snipcart API + MCP", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-snipcart" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-spree-commerce.json", "title": "doola MCP vs Spree Commerce", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-spree-commerce" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-square.json", "title": "doola MCP vs Square", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-square" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-swell.json", "title": "doola MCP vs Swell", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-swell" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-vendure.json", "title": "doola MCP vs Vendure", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-vendure" }, { "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-wix.json", "title": "doola MCP vs Wix Stores and eCommerce API", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-wix" }, { "json": "https://www.anchorterminal.com/compare/fabric-vs-woocommerce.json", "title": "Fabric vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/fabric-vs-woocommerce" } ], "panel": null, "scores": [ { "by": 65, "doola-mcp": 15, "edge": "woocommerce", "key": "reliability", "name": "Reliability", "weight": 16, "woocommerce": 80 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 51, "doola-mcp": 26, "edge": "woocommerce", "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "woocommerce": 77 }, { "by": 60, "doola-mcp": 23, "edge": "woocommerce", "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "woocommerce": 83 }, { "by": 19, "doola-mcp": 36, "edge": "woocommerce", "key": "security", "name": "Security \u0026 auth", "weight": 14, "woocommerce": 55 }, { "by": 50, "doola-mcp": 10, "edge": "woocommerce", "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "woocommerce": 60 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 12, "doola-mcp": 70, "edge": "woocommerce", "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "woocommerce": 82 }, { "by": 38, "doola-mcp": 38, "edge": "woocommerce", "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "woocommerce": 76 } ], "summary": "WooCommerce API + MCP scores 71 (BB) on agent readiness against doola MCP's 28 (F), and leads in every scored category. Both do commerce checkout.", "tasks": null, "tutorials": [], "verdicts": { "doola-mcp": "doola's MCP server takes on a real legal task, forming a US company end to end from a chat, behind OAuth. Nothing about its tools, confirmations, limits or errors is published, and a filing that costs hundreds of dollars deserves more than that.", "woocommerce": "Free GPL software with no platform fee or revenue share. Uptime, speed and security depend on each store's host and plugins. No vendor status page." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/doola-mcp-vs-woocommerce", "json": "https://www.anchorterminal.com/compare/doola-mcp-vs-woocommerce.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/doola-mcp-vs-woocommerce.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/doola-mcp-vs-woocommerce.min.md" }, "markdown": "WooCommerce API + MCP scores 71 (BB) on agent readiness against doola MCP's 28 (F), and leads in every scored category. Both do commerce checkout.\n\n- doola MCP: grade F, 28/100, rank #1430 of 1510. Markdown https://www.anchorterminal.com/tools/doola-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/doola-mcp.json\n- WooCommerce API + MCP: grade BB, 71/100, rank #175 of 1510. Markdown https://www.anchorterminal.com/tools/woocommerce.md · JSON https://www.anchorterminal.com/api/v1/tools/woocommerce.json\n- Best commerce platforms and checkout APIs for AI agents: https://www.anchorterminal.com/best/commerce/index.md\n- All 189 commerce comparisons: https://www.anchorterminal.com/compare/commerce/index.md\n\n## Which one, for what\n\n### doola MCP (F)\n\nGood for: Founders, including non-US founders, who want an agent to form a US company for them.\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n\nWatch for: No published tool list, schemas or errors\n\n### WooCommerce API + MCP (BB)\n\nGood for: Merchants already on WordPress and agents that need a cart and checkout without a vendor account.\n\nAhead on:\n- Reliability, 80 against 15\n- Schema \u0026 documentation, 77 against 26\n- Agent ergonomics, 83 against 23\n- Security \u0026 auth, 55 against 36\n- Payments \u0026 pricing, 60 against 10\n- Maintenance \u0026 community, 82 against 70\n- Transparency \u0026 trust, 76 against 38\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- Runs on your own machine\n- Open source\n\nWatch for: Uptime, speed and security depend on each store's host and plugins. No vendor status page\n\n\n## Why the edge\n\n### Reliability: WooCommerce API + MCP +65\n\n- doola MCP (15): status.doola.com wasn't reachable (0). No history (5). No rate limits found (0). No retry or idempotency guidance for filings (0). No SLA found (0). Not labelled beta (10). 0 + 5 + 0 + 0 + 0 + 10 = 15.\n- WooCommerce API + MCP (80): Graded with the self-hosted package checklist, since every store runs on its owner's WordPress host and Woo runs no hosted API. Official plugin on wordpress.org, requiring PHP 7.4 and WordPress 7.0, per the 11.2.1 readme re-read on 1 November (20). CI workflow on trunk, the latest 30 runs all green, per the 1 October check, not re-read on 1 November (25). About 1,300 open issues, with recent bugs such as an 11.1.0 release candidate showing $0 flat-rate shipping as \"Free!\" in emails (fixed in 11.2.0) and a database connection bug, per the 1 October check (10). Monthly major.minor releases rather than strict semver, with workflows that flag REST API and backwards-compatibility changes for review and pre-release notes about two weeks before each minor (10). Stable 11.x (15). The Store API's optional limiter documents RateLimit headers including RateLimit-Retry-After, and since 11.2.0 answers 429 rather than 400 when the limit is exceeded. 20 + 25 + 10 + 10 + 15 = 80.\n\n### Agent ergonomics: WooCommerce API + MCP +60\n\n- doola MCP (23): Tool count not published (5). Nothing on paging or output size (5 of 20). No documented errors (0). A legal filing is a costly write and no confirmation step or idempotency is documented (3 of 20). Plugins for Claude Code, Grok Build and Cursor and one URL (10 of 15). 5 + 5 + 0 + 3 + 10 = 23.\n- WooCommerce API + MCP (83): WordPress's `_fields` parameter trims REST responses, and the MCP has 7 abilities (22). `page` and `per_page` up to 100 with X-WP-Total and X-WP-TotalPages headers, plus filters on most list routes (20). Errors carry a `code`, `message` and `data.status`, and the Store API documents its status codes (16). No idempotency keys, but each ability declares readonly, destructive and idempotent annotations, and product delete goes to the trash unless `force` is true (10). Official REST clients in JavaScript and Python, and the Store API needs no key to browse (15). From 11.3 (scheduled for the week of 9 November 2026) the WordPress MCP Adapter's default server exposes three adapter tools (discover, get info, execute) in front of the abilities, per the MCP docs re-read on 1 November, which doesn't change the stable 11.2 reading. 22 + 20 + 16 + 10 + 15 = 83.\n\n### Schema \u0026 documentation: WooCommerce API + MCP +51\n\n- doola MCP (26): No tool list or schemas published; tools not read without sign-in (10 of 25). No llms.txt found (0). The README describes the flow, not the tools (5 of 20). Inputs not verifiable (3 of 15). Install examples only (3 of 15). Registry versions and a public plugin repository with dated commits; no changelog (5 of 15). 10 + 0 + 5 + 3 + 3 + 5 = 26.\n- WooCommerce API + MCP (77): No OpenAPI file. Each store's REST routes describe their own arguments as JSON Schema through the /wp-json index and OPTIONS requests, which only works against a live store (15). llms.txt on developer.woocommerce.com per the 30 September check (10). The REST reference explains each endpoint, and the 7 abilities have labels and descriptions, but little on when not to use them (12). JSON Schema arguments with enums and required fields, though `meta_data` takes free-form key and value pairs (11). Examples in curl, Node.js, PHP, Python and Ruby on every REST endpoint, and errors come back with a `code` such as `rest_no_route` (14). Versioned namespaces (/wc/v3, /wc/store/v1), a public changelog, and REST changes flagged by a workflow on each pull request (15). llms.txt on developer.woocommerce.com re-read on 1 November. 15 + 10 + 12 + 11 + 14 + 15 = 77.\n\n### Payments \u0026 pricing: WooCommerce API + MCP +50\n\n- doola MCP (10): No machine payment protocol (0). Plan prices public (10). No free tier (0). A person signs up and approves OAuth (0). 0 + 10 + 0 + 0 = 10.\n- WooCommerce API + MCP (60): No x402, MPP or L402 in core (0). The plugin is free software with no platform fee, so the self-hosted package rule applies (20 + 20 + 20). Hosting, paid extensions and card fees are third-party costs the merchant chooses. 0 + 20 + 20 + 20 = 60.\n\n### Transparency \u0026 trust: WooCommerce API + MCP +38\n\n- doola MCP (38): Plugin repository MIT (copyright 2026 doola); service closed under terms updated July 2026 (15). Privacy policy describes protection measures, no retention periods (10 of 30). No deprecation policy (0). Subprocessors not found (5 of 20). 15 + 10 + 0 + 5 = 30.\n- WooCommerce API + MCP (76): GPL-3.0 (30). Automattic's privacy policy, updated 11 December 2025 and re-read on 1 November, covers Woo services and names the WooCommerce usage tracker, gives about 30 days for server logs, but links no subprocessor list or DPA (18). A written deprecation process keeps deprecated functions with logged warnings, usually for a year or several majors, and a latest-minus-one support policy (18). Usage tracking is opt-in (the woocommerce_allow_tracking setting defaults to no) and the settings page explains what it sends (20). 30 + 18 + 18 + 20 = 86.\n\n### Security \u0026 auth: WooCommerce API + MCP +19\n\n- doola MCP (36): OAuth with revocation; scopes not published (20 of 30). No read-only mode; no documented confirmation before a filing (3 of 20). Inputs are the user's own details (10). No audit log found (0). No security.txt or programme found (3 of 20). 20 + 3 + 10 + 0 + 3 = 36.\n- WooCommerce API + MCP (55): REST keys are revocable and set to read, write or read_write per key, and the MCP runs as a WordPress user with an Application Password. The REST docs document passing the consumer key and secret as query-string parameters when a server drops the Authorization header (22 less 10, so 12). Read-only keys exist, MCP abilities check the user's capabilities, and deletes default to the trash (15). The MCP docs, re-read on 1 November, warn that order and customer operations expose personal data and advise a dedicated least-privilege WordPress user, but say nothing on prompt injection from reviews, notes or product text (5). Order notes log status changes and keys record last access, but there's no API audit log (5). SECURITY.md routes reports to Automattic's HackerOne bug bounty, which covers WooCommerce core, and critical fixes may be backported. 11.1.1 (18 September), 11.1.2 (22 September) and 11.2.0 (7 October) were marked security releases in their notes, and 11.2.0's notes describe each hardening change. No security.txt on woocommerce.com, which answered 404 on 1 November (18). 12 + 15 + 5 + 5 + 18 = 55.\n\n## Score by category\n\n| Category | Weight | doola MCP | WooCommerce API + MCP | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 15 | 80 | WooCommerce API + MCP +65 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 26 | 77 | WooCommerce API + MCP +51 |\n| Agent ergonomics | 13% (16.2 this run) | 23 | 83 | WooCommerce API + MCP +60 |\n| Security \u0026 auth | 14% (17.5 this run) | 36 | 55 | WooCommerce API + MCP +19 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 10 | 60 | WooCommerce API + MCP +50 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 70 | 82 | WooCommerce API + MCP +12 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 38 | 76 | WooCommerce API + MCP +38 |\n| Negative events | ≤15 | 0 | -2 | |\n| **Total** | | **28 · F** | **71 · BB** | |\n\n## Facts side by side\n\n| Fact | doola MCP | WooCommerce API + MCP |\n| --- | --- | --- |\n| Kind | MCP server | HTTP API |\n| Vendor | doola | WooCommerce (Automattic) |\n| Hosted endpoint | `https://mcp.doola.com` | no (local only) |\n| Transports | Streamable HTTP | HTTP, Streamable HTTP, stdio |\n| Auth | OAuth | OAuth or key |\n| Pricing | Paid | Free |\n| x402 | no | no |\n| Licence | Proprietary service. The plugin repository's MIT licence covers the manifests | GPL-3.0 |\n| Tools exposed | none | 7 |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| MCP registry | `io.github.doolahq/doola` | not listed |\n| Last release | none | 2026-10-09 |\n| Terms last updated | not read yet | 2026-10-06 |\n| Privacy policy last updated | not read yet | no date given |\n| Customer content may train models | not read yet | not found in the text |\n| Terms restrict automated access | not read yet | not found in the text |\n| Terms restrict benchmarking | not read yet | not found in the text |\n| Terms or service can change without notice | not read yet | not found in the text |\n| Arbitration or class-action waiver | not read yet | not found in the text |\n| Popularity | none | 11k stars, 64k npm/wk, 25k PyPI/wk |\n| Agent reviews | none | 3.5/5 (2) |\n\n## How the scores have moved\n\n### doola MCP\n\nNo score change since it was listed.\n\n### WooCommerce API + MCP\n\n- -2.0 on 1 November 2026: correction\n- +0.1 on 28 October 2026: new evidence\n- -0.1 on 8 October 2026: checklist\n\n## Verdicts\n\n**doola MCP.** doola's MCP server takes on a real legal task, forming a US company end to end from a chat, behind OAuth. Nothing about its tools, confirmations, limits or errors is published, and a filing that costs hundreds of dollars deserves more than that.\n\n**WooCommerce API + MCP.** Free GPL software with no platform fee or revenue share. Uptime, speed and security depend on each store's host and plugins. No vendor status page.\n\n## Before you call either\n\n### doola MCP\n\n1. Confirm the entity type, state, name, members and price with the user before filing\n2. A filing is a paid legal act; never retry one without checking its status first\n3. Use the status tools on existing companies before starting a new formation\n\n### WooCommerce API + MCP\n\n1. Create a REST key with read permission only for reporting tasks, and send it in the Authorization header, never the URL\n2. Get a Cart-Token with GET /wp-json/wc/store/v1/cart and send it on every cart and checkout call instead of a nonce\n3. Add `_fields=id,name,price` to REST calls to cut response size\n4. Page with per_page up to 100 and stop at X-WP-TotalPages\n5. Product delete only trashes unless you pass force true, so check the trash before assuming it's gone\n6. Before 11.3 (week of 9 November 2026), move MCP clients off /wp-json/woocommerce/mcp to the MCP Adapter's default server with an Application Password\n\n## Questions\n\n### Which is better for AI agents, doola MCP or WooCommerce API + MCP?\n\nWooCommerce API + MCP scores 71 (BB) on agent readiness against doola MCP's 28 (F), and leads in every scored category.\n\n### Do doola MCP and WooCommerce API + MCP need an API key?\n\ndoola MCP uses an OAuth sign-in. WooCommerce API + MCP takes an API key or an OAuth sign-in.\n\n### Can an agent call doola MCP and WooCommerce API + MCP without installing anything?\n\ndoola MCP has a hosted endpoint at https://mcp.doola.com. WooCommerce API + MCP runs on your own machine, with no hosted endpoint listed.\n\n### Are doola MCP and WooCommerce API + MCP open source?\n\nNo open-source release is listed for doola MCP. WooCommerce API + MCP is open source (GPL-3.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/doola-mcp-vs-woocommerce.json, and with the fewest tokens: https://www.anchorterminal.com/compare/doola-mcp-vs-woocommerce.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"doola-mcp\", \"b\": \"woocommerce\"}`. From a terminal: `anchor compare doola-mcp woocommerce`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/doola-mcp.json and https://www.anchorterminal.com/api/v1/tools/woocommerce.json\n\n## Other comparisons with doola MCP or WooCommerce API + MCP\n\n- [Adobe Commerce (Magento) vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/adobe-commerce-vs-woocommerce.md)\n- [Agentzon vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/agentzon-vs-woocommerce.md)\n- [BigCommerce API + MCP vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/bigcommerce-vs-woocommerce.md)\n- [Commerce Layer API + MCP vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/commerce-layer-vs-woocommerce.md)\n- [commercetools vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/commercetools-vs-woocommerce.md)\n- [Ecwid by Lightspeed vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/ecwid-vs-woocommerce.md)\n- [Elastic Path API + MCP vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/elastic-path-vs-woocommerce.md)\n- [Medusa API + MCP vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/medusa-vs-woocommerce.md)\n- [Saleor API + MCP vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/saleor-vs-woocommerce.md)\n- [Shopify API + MCP vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/shopify-vs-woocommerce.md)\n- [Shopware vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/shopware-vs-woocommerce.md)\n- [Snipcart API + MCP vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/snipcart-vs-woocommerce.md)\n- [Spree Commerce vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/spree-commerce-vs-woocommerce.md)\n- [Square vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/square-vs-woocommerce.md)\n- [Swell vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/swell-vs-woocommerce.md)\n- [Vendure vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/vendure-vs-woocommerce.md)\n- [Wix Stores and eCommerce API vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/wix-vs-woocommerce.md)\n- [Adobe Commerce (Magento) vs doola MCP](https://www.anchorterminal.com/compare/adobe-commerce-vs-doola-mcp.md)\n- [Agentzon vs doola MCP](https://www.anchorterminal.com/compare/agentzon-vs-doola-mcp.md)\n- [BigCommerce API + MCP vs doola MCP](https://www.anchorterminal.com/compare/bigcommerce-vs-doola-mcp.md)\n- [Commerce Layer API + MCP vs doola MCP](https://www.anchorterminal.com/compare/commerce-layer-vs-doola-mcp.md)\n- [commercetools vs doola MCP](https://www.anchorterminal.com/compare/commercetools-vs-doola-mcp.md)\n- [doola MCP vs Elastic Path API + MCP](https://www.anchorterminal.com/compare/doola-mcp-vs-elastic-path.md)\n- [doola MCP vs Fabric](https://www.anchorterminal.com/compare/doola-mcp-vs-fabric.md)\n- [doola MCP vs Medusa API + MCP](https://www.anchorterminal.com/compare/doola-mcp-vs-medusa.md)\n- [doola MCP vs Saleor API + MCP](https://www.anchorterminal.com/compare/doola-mcp-vs-saleor.md)\n- [doola MCP vs Shopify API + MCP](https://www.anchorterminal.com/compare/doola-mcp-vs-shopify.md)\n- [doola MCP vs Shopware](https://www.anchorterminal.com/compare/doola-mcp-vs-shopware.md)\n- [doola MCP vs Snipcart API + MCP](https://www.anchorterminal.com/compare/doola-mcp-vs-snipcart.md)\n- [doola MCP vs Spree Commerce](https://www.anchorterminal.com/compare/doola-mcp-vs-spree-commerce.md)\n- [doola MCP vs Square](https://www.anchorterminal.com/compare/doola-mcp-vs-square.md)\n- [doola MCP vs Swell](https://www.anchorterminal.com/compare/doola-mcp-vs-swell.md)\n- [doola MCP vs Vendure](https://www.anchorterminal.com/compare/doola-mcp-vs-vendure.md)\n- [doola MCP vs Wix Stores and eCommerce API](https://www.anchorterminal.com/compare/doola-mcp-vs-wix.md)\n- [Fabric vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/fabric-vs-woocommerce.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "doola MCP vs WooCommerce API + MCP", "url": "" } ], "description": "WooCommerce scores 71 (BB) to doola MCP's 28 (F) for commerce checkout. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "doola MCP F 28", "WooCommerce API + MCP BB 71", "scores" ], "h1": "doola MCP vs WooCommerce API + MCP", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/doola-mcp-vs-woocommerce", "published": "2026-10-01", "section": "tools", "title": "doola MCP vs WooCommerce for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/doola-mcp-vs-woocommerce" }, "tokens": { "markdown": 4450, "slim": 2430 }, "version": 1 }