{ "data": { "a": { "slug": "flagsmith", "name": "Flagsmith", "vendor": "Bullet Train Ltd", "vendorUrl": "https://www.flagsmith.com", "kind": "http-api", "category": "product-analytics", "summary": "Flagsmith is an open-source feature flag, remote config and experimentation service from Bullet Train Ltd. Teams use it on Flagsmith Cloud or self-hosted, through SDKs, a Management API and a remote MCP server.", "url": "https://www.anchorterminal.com/tools/flagsmith", "markdownUrl": "https://www.anchorterminal.com/tools/flagsmith.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/flagsmith.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/flagsmith.json", "dns": "flagsmith.grade.anchorterminal.com", "repo": "https://github.com/Flagsmith/flagsmith", "license": "BSD-3-Clause", "transports": [ "http", "streamable-http", "stdio" ], "remoteUrl": "https://mcp.flagsmith.com", "packages": [ { "registry": "pypi", "name": "flagsmith" }, { "registry": "npm", "name": "flagsmith" } ], "auth": "mixed", "authNotes": "The hosted MCP server takes OAuth (the client discovers Flagsmith as the authorisation server and a person signs in) or an Organisation API key sent as `Authorization: Api-Key \u003ckey\u003e`. Organisation keys act as full organisation admin or with chosen RBAC roles; granular roles need Scale-Up or Enterprise. OIDC trust relationships let CI workloads such as GitHub Actions exchange their token for a short-lived one. SDK environment keys are separate.", "pricing": "freemium", "pricingNotes": "Free plan at $0 with 50,000 requests a month and one team member. Start-Up is $45 a month ($40 billed yearly) for 1,000,000 requests and three members, Scale-Up $300 a month ($250 yearly) for 5,000,000. Enterprise by quote. Extra API calls from $50 per million; the page also quotes $7 per 100,000 for Start-Up. The self-hosted edition is free under BSD-3-Clause.", "priceSummary": "$45 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the OpenAPI spec or the pricing page (checked 2026-11-06).", "endpoints": [] }, "toolCount": 54, "popularity": { "githubStars": 6639, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://docs.flagsmith.com/", "openapi": "https://github.com/Flagsmith/flagsmith/blob/main/openapi.yaml", "capabilities": [ "analytics.flags", "analytics.experiments", "analytics.events" ], "tags": [ "official", "hosted", "open-source", "self-hosted", "mcp", "remote-mcp", "oauth", "openapi", "free-tier", "status-page", "soc2", "sla", "python", "typescript" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 61.2, "grade": "C", "agentReady": false, "rank": 623, "ranked": true, "rankOf": 1510, "categoryRank": 12, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 55, "maintenance": 83, "payments": 40, "reliability": 65, "schema": 67, "security": 65, "transparency": 77 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": -2, "negativeNotes": [ "6 November 2026. The self-hosted API sends a heartbeat to https://api.flagsmith.com/api/v1/analytics/telemetry/ with counts of organisations, projects, environments, feature flags, segments and users, on by default (`ENABLE_TELEMETRY = env.bool(\"ENABLE_TELEMETRY\", default=True)`). The flag isn't in the environment-variable reference or anywhere else in the docs we read. Counts only, self-hosted only, so the minimum deduction (https://github.com/Flagsmith/flagsmith/blob/main/api/app/settings/common.py ; https://github.com/Flagsmith/flagsmith/blob/main/api/telemetry/telemetry.py)." ], "verdict": "Flagsmith pairs a BSD-licensed core with a hosted MCP server whose 54 tools come from its OpenAPI spec and carry read and destructive hints. A public 99.95 per cent SLA and SOC 2 report back the Cloud service. The MCP server is still an early release, and fine-grained key roles need a paid Scale-Up or Enterprise plan.", "bestFor": "Feature flags and experiments for teams that want open source or self-hosting, managed by an agent through MCP.", "strengths": [ "Hosted MCP server at mcp.flagsmith.com with OAuth or an Organisation API key, and a stdio option for local use", "Each of the 54 MCP tools has readOnlyHint, destructiveHint and idempotentHint set from its HTTP method", "Public SLA of 99.95 per cent monthly uptime with service credits, and a status page with component history", "BSD-3-Clause source with a free self-hosted edition and 34 tagged releases in the last 90 days", "OIDC trust relationships let CI jobs get short-lived Management API tokens without stored secrets" ], "weaknesses": [ "The MCP docs call the server an early release, and experiment tools are marked beta", "54 tools load at once, with no toolsets or read-only mode on the server", "Granular API key roles, change requests and audit logs need Scale-Up or Enterprise", "No llms.txt, no documented 429 handling, and few documented error responses in the spec", "Self-hosted installs send a usage heartbeat by default through a flag the docs don't mention" ], "agentNotes": [ "Send the key as `Authorization: Api-Key \u003ckey\u003e`; the `Api-Key ` prefix is required and a bare key fails", "Check whether the environment uses v2 feature versioning before choosing between segment-override and version-state tools", "Use a key with a read-only RBAC role for analysis tasks, since a Free plan key has organisation admin rights", "Pace Management API calls under 500 a minute; no Retry-After guidance is documented", "Treat experiment results as possibly null until Flagsmith has computed them" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 61.2 } ], "editorialScores": { "ergonomics": 55, "maintenance": 83, "payments": 40, "reliability": 65, "schema": 67, "security": 65, "transparency": 67 }, "provenanceScore": 86, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl -H \"Authorization: Api-Key $FLAGSMITH_ORG_KEY\" https://api.flagsmith.com/api/v1/projects/", "claudeCode": "claude mcp add --transport http flagsmith https://mcp.flagsmith.com", "config": { "mcpServers": { "flagsmith": { "headers": { "Authorization": "Api-Key \u003cyour-api-key\u003e" }, "url": "https://mcp.flagsmith.com" } } } }, "letme": { "capability": "https://letme.dev/analytics.flags", "tool": "https://letme.dev/flagsmith" }, "area": "business", "unitPrices": [ { "item": "Start-Up plan", "unit": "month", "usd": 45, "note": "1,000,000 requests and 3 team members; $40 a month billed yearly" }, { "item": "Scale-Up plan", "unit": "month", "usd": 300, "note": "5,000,000 requests and 5 team members; $250 a month billed yearly" }, { "item": "Extra API calls", "unit": "1k-requests", "usd": 0.05, "note": "From $50 per million, lower with volume" }, { "item": "Extra Scale-Up team member", "unit": "seat-month", "usd": 50, "note": "Up to 20 members" } ], "provenance": { "legalEntity": "Bullet Train Ltd", "domain": "flagsmith.com", "domainRegistered": "2018-03-01", "endpointOnVendorDomain": true, "terms": "https://www.flagsmith.com/terms-of-service", "privacy": "https://www.flagsmith.com/privacy-policy", "statusPage": "https://status.flagsmith.com", "changelog": "https://github.com/Flagsmith/flagsmith/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The terms of service name Bullet Train Limited trading as Flagsmith, company number 12353266, registered at 66 Paul St, London, under the laws of England and Wales. Companies House lists the company with five active officers.", "The privacy policy was last updated in October 2023; the GDPR sub-processor list is dated 13 October 2025.", "www.flagsmith.com/robots.txt disallows only sign-up, login and similar paths. docs.flagsmith.com has no robots.txt. The terms contain no clause on automated access that we found.", "www.flagsmith.com/.well-known/security.txt returned 404. SECURITY.md in the repository asks for reports to support@flagsmith.com.", "RDAP gives flagsmith.com a registration date of 1 March 2018." ], "score": 86 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/flagsmith.json", "live": { "slug": "flagsmith", "probe": { "target": "https://mcp.flagsmith.com", "method": "get", "lastAt": "2026-11-07T19:22:07.592270034Z", "lastOk": true, "lastStatus": 401, "lastMs": 34, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 27, "p95ms24h": 101, "samples24h": 210, "samples30d": 210, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 13 }, { "date": "2026-11-07", "probes": 197, "ok": 197 } ] }, "vendorStatus": { "page": "https://status.flagsmith.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T19:22:07.103164793Z" }, "versions": [ { "registry": "github", "name": "Flagsmith/flagsmith", "version": "v2.290.0", "released": "2026-11-05", "seenAt": "2026-11-06T23:26:24.068130998Z" }, { "registry": "npm", "name": "flagsmith", "version": "10.0.0", "seenAt": "2026-11-06T23:26:23.147625706Z" }, { "registry": "pypi", "name": "flagsmith", "version": "6.5.0", "released": "2026-11-06", "seenAt": "2026-11-06T23:26:23.005711379Z" } ], "githubStars": 6642, "npmWeekly": 156837, "pypiWeekly": 401488, "securityTxt": { "url": "https://flagsmith.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:18.95883898Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/Flagsmith/flagsmith/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:18:21.223652009Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "34b306151856" }, { "url": "https://www.flagsmith.com/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:28:36.671052285Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "ba6cc5c7a64f" }, { "url": "https://www.flagsmith.com/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:28:38.746283857Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "6ada20e0c356" } ], "mcpTools": { "url": "https://mcp.flagsmith.com", "checkedAt": "2026-11-07T01:44:38.567136868Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:44:38.567136868Z" }, "updatedAt": "2026-11-07T19:22:07.592270034Z" } }, "answer": "GrowthBook scores 68.6 (B) on agent readiness against Flagsmith's 61.2 (C), and leads in 5 of 7 scored categories.", "b": { "slug": "growthbook", "name": "GrowthBook", "vendor": "GrowthBook, Inc.", "vendorUrl": "https://www.growthbook.io", "kind": "http-api", "category": "product-analytics", "summary": "GrowthBook is an open-source platform for feature flags, experiments and product analytics, sold as GrowthBook Cloud or run self-hosted. Agents reach it through a REST API with a public OpenAPI spec and an official MCP server.", "url": "https://www.anchorterminal.com/tools/growthbook", "markdownUrl": "https://www.anchorterminal.com/tools/growthbook.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/growthbook.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/growthbook.json", "dns": "growthbook.grade.anchorterminal.com", "repo": "https://github.com/growthbook/growthbook", "license": "MIT for the core and for the MCP server. Three enterprise directories in the main repository are under GrowthBook's enterprise licence. GrowthBook Cloud is a hosted service under the Customer Agreement", "transports": [ "http", "streamable-http", "stdio" ], "remoteUrl": "https://mcp.growthbook.io/mcp", "packages": [ { "registry": "npm", "name": "@growthbook/mcp" }, { "registry": "npm", "name": "@growthbook/growthbook" }, { "registry": "pypi", "name": "growthbook" } ], "auth": "mixed", "authNotes": "The hosted MCP server uses OAuth with PKCE, dynamic client registration, refresh tokens and a revocation endpoint, with api.growthbook.io as the authorisation server. A person signs in and consents in a browser. The only scopes are openid, profile, email and offline_access, so the token carries the user's own permissions. The REST API takes a Personal Access Token or a Secret Key as a Bearer token or as the HTTP Basic username. Both are self-serve in the app. A Secret Key can hold any built-in or custom role with per-project overrides and environment limits, and both key types can expire. On the Free plan members can only hold the Admin role.", "pricing": "freemium", "pricingNotes": "Starter is free with no card, for up to 3 users and 1 project, so an agent's owner can start without a contract. Pro is $40 a seat a month for up to 30 users. Enterprise is by contract. Flags, experiments and traffic are unlimited on every plan, and API and MCP calls are not billed. Pro meters CDN requests, CDN bandwidth and Managed Warehouse events above its allowance. Self-hosting the open-source edition is free (https://www.growthbook.io/pricing, checked 2026-10-08).", "priceSummary": "$40 / seat-mo", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs index, the OpenAPI spec, the MCP server source or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": 4, "popularity": { "githubStars": 8484, "npmWeekly": 1290544, "pypiWeekly": 432892, "asOf": "2026-10-08" }, "docsUrl": "https://docs.growthbook.io", "llmsTxt": "https://docs.growthbook.io/llms.txt", "openapi": "https://api.growthbook.io/api/v1/openapi.yaml", "registryName": "io.github.growthbook/growthbook-mcp", "capabilities": [ "analytics.experiments", "analytics.flags", "analytics.query", "analytics.events" ], "tags": [ "official", "hosted", "open-source", "self-hosted", "mcp", "oauth", "openapi", "llms-txt", "free-tier", "no-card", "status-page", "soc2" ], "lastRelease": "2026-10-06", "graded": true, "anchor": { "graded": true, "score": 68.6, "grade": "B", "agentReady": false, "rank": 279, "ranked": true, "rankOf": 1510, "categoryRank": 5, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 76, "maintenance": 89, "payments": 40, "reliability": 86, "schema": 76, "security": 76, "transparency": 75 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -6, "negativeNotes": [ "10 August 2026. MCP server 2.1.0 replaced `growthbook_call_api` with two tools in a minor version, eleven days after 2.0.0 removed every 1.x tool, while the docs tell users to install `@growthbook/mcp@latest`. Both are marked breaking in the changelog with migration steps, and we found no advance notice, so the deduction is the minimum (https://github.com/growthbook/growthbook-mcp/blob/main/CHANGELOG.md).", "13 to 30 October 2026. Security fixes merged into the main repository after GrowthBook 5.1.0 (21 September), the newest release, and in no release on 1 November. Commit 900a546b (#7172, 13 October) says the OAuth consent page's Deny button \"redirected to the raw redirect_uri query param with no server check\", so a `javascript:` redirect URI \"ran attacker script on the app origin after one click\", and dynamic client registration accepted `javascript:` and `data:` redirect URIs. Commit 106fc6a7 (#7519, 30 October) says `PUT /organization` let any org admin use `ownerEmail` as \"a regex oracle over every user's email across tenants\". `git tag --contains` finds neither in a release, and the consent page and the user lookup they fix are both in v5.1.0. One term at the floor for fixes in no release, as composio-rube and microsoft-execution-containers took, whatever their age. The repository's deploy workflow builds every push to main that touches `packages/` and rolls it to GrowthBook Cloud's production API services, so Cloud probably runs both fixes, though its run history wasn't readable. That doesn't lower the term. On Cloud they read as fixed, vendor-described flaws with no advisory, a script redirect on the app origin and a cross-tenant lookup, which this run deducts at -3 (terraform-mcp, spree-commerce). The two fold into one term, as claude-code's and claude-agent-sdk's repeated changelog-only security fixes fold into one. https://github.com/growthbook/growthbook/commit/900a546b1abbb3ed6d867146aa7ce8eed59af0e2 and https://github.com/growthbook/growthbook/commit/106fc6a75a749bb7234b705aa2ad43c2f28cc532 and https://github.com/growthbook/growthbook/blob/main/.github/workflows/deploy.yml" ], "verdict": "GrowthBook Cloud's MCP server has four annotated tools, OAuth whose consent page can grant read-only or confirmation-gated access, and a 442-operation OpenAPI spec behind it. The free plan needs no card. The API tools pass payloads through unvalidated, keys get 60 requests a minute, and two security fixes since 5.1.0 are unreleased.", "bestFor": "Teams that want flags and experiments analysed against their own warehouse, with an open-source core and a self-hosted option.", "strengths": [ "The MCP server has four tools, each with readOnlyHint and destructiveHint, and a second endpoint with only the two API tools", "OAuth consent can grant Read only, Human-in-the-Loop or custom permissions, and keys and tokens expire and rotate in place", "Human-in-the-Loop holds risky REST writes, MCP ones included, until a person confirms them, with each decision in the audit log", "Public OpenAPI 3.1 spec with 324 paths and 442 operations, plus llms.txt and a Markdown copy of every docs page", "Starter plan is free with no card, with unlimited flags, experiments and traffic for up to 3 users" ], "weaknesses": [ "The API tools take a path and a JSON string and don't validate payloads, so correct calls depend on the bundled skills", "Two security fixes merged in October 2026, an OAuth consent-page script redirect and a cross-tenant email oracle, are in no release", "API keys are limited to 60 requests a minute on Cloud, and no idempotency keys were found", "Confirmation and audit logs are on Enterprise only, and Free plan connections can only take Full access", "MCP 2.0.0 and 2.1.0 replaced the whole tool surface in July and August 2026, the second in a minor version" ], "agentNotes": [ "Connect to https://mcp.growthbook.io/mcp and complete OAuth in a browser. Ask for Read only at consent unless the task needs writes", "Call `growthbook_list_skills` and `growthbook_read_skill` before writing. The API tools don't validate payloads, so use the paths the skill names", "Expect a 202 with a confirmation link when Human-in-the-Loop holds a write. Tell the user and wait; a held request expires after an hour", "Stay under 60 requests a minute per key. On 429 wait for the `RateLimit-Reset` seconds before retrying", "List calls return 10 items by default. Pass `limit` up to 100 and `offset` to page" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3.3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 68.6 } ], "editorialScores": { "ergonomics": 76, "maintenance": 89, "payments": 40, "reliability": 86, "schema": 76, "security": 76, "transparency": 66 }, "provenanceScore": 84, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npx -y @growthbook/mcp@latest", "http": "curl https://api.growthbook.io/api/v1/features -H \"Authorization: Bearer secret_abc123DEF456\"", "claudeCode": "claude mcp add --transport http growthbook https://mcp.growthbook.io/mcp", "config": { "mcpServers": { "growthbook": { "url": "https://mcp.growthbook.io/mcp" } } } }, "letme": { "capability": "https://letme.dev/analytics.experiments", "tool": "https://letme.dev/growthbook" }, "area": "business", "unitPrices": [ { "item": "Pro plan seat", "unit": "seat-month", "usd": 40, "note": "Up to 30 users and 3 projects" }, { "item": "CDN requests", "unit": "1k-requests", "usd": 0.01, "note": "Pro plan, above 2 million a month ($10 per million)" }, { "item": "Managed Warehouse event", "unit": "tx", "usd": 0.00003, "note": "Pro plan, above 2 million a month ($30 per million)" }, { "item": "CDN bandwidth", "unit": "gb", "usd": 1, "note": "Pro plan, above 20 GB a month" } ], "provenance": { "legalEntity": "GrowthBook, Inc.", "domain": "growthbook.io", "domainRegistered": "2020-05-19", "endpointOnVendorDomain": true, "terms": "https://www.growthbook.io/legal/customer-agreement", "privacy": "https://www.growthbook.io/legal/privacy-notice", "statusPage": "https://status.growthbook.io", "changelog": "https://github.com/growthbook/growthbook/releases", "securityTxt": "none", "checked": "2026-11-01", "notes": [ "The Customer Agreement (effective 19 June 2025) is between the customer and GrowthBook, Inc., with notices to 1950 W Corporate Way #34560, Anaheim, CA 92801, under California law.", "The Privacy Notice (effective 8 June 2026) covers the website and related services and names GrowthBook, Inc. at the same address. The Customer Agreement refers to it for Customer Data.", "The MCP server answers at mcp.growthbook.io and the REST API at api.growthbook.io. OAuth metadata names https://api.growthbook.io as issuer.", "www.growthbook.io/.well-known/security.txt and growthbook.io/.well-known/security.txt return 404 (re-read 1 November 2026). Reports go to a form on the disclosure page or to security@growthbook.io.", "RDAP for growthbook.io gives a registration date of 2020-05-19.", "The MCP server keeps its own changelog at https://github.com/growthbook/growthbook-mcp/blob/main/CHANGELOG.md." ], "score": 84 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/growthbook.json", "live": { "slug": "growthbook", "probe": { "target": "https://mcp.growthbook.io/mcp", "method": "get", "lastAt": "2026-11-07T19:22:10.546299675Z", "lastOk": true, "lastStatus": 401, "lastMs": 368, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 267, "p95ms24h": 368, "samples24h": 238, "samples30d": 7450, "days": [ { "date": "2026-10-08", "probes": 70, "ok": 70 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 248, "ok": 248 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 197, "ok": 197 } ] }, "vendorStatus": { "page": "https://status.growthbook.io", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-07T04:47:53.006708259Z" }, "versions": [ { "registry": "github", "name": "growthbook/growthbook", "version": "v5.2.0", "released": "2026-11-03", "seenAt": "2026-11-06T23:31:45.349646939Z" }, { "registry": "mcp-registry", "name": "io.github.growthbook/growthbook-mcp", "version": "2.2.0", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "@growthbook/growthbook", "version": "2.0.0", "seenAt": "2026-11-06T23:31:43.632815176Z" }, { "registry": "npm", "name": "@growthbook/mcp", "version": "2.2.0", "seenAt": "2026-11-06T23:31:42.874342993Z" }, { "registry": "pypi", "name": "growthbook", "version": "4.0.0", "released": "2026-11-02", "seenAt": "2026-11-06T23:31:45.155880521Z" } ], "githubStars": 8572, "npmWeekly": 9185, "pypiWeekly": 479785, "securityTxt": { "url": "https://growthbook.io/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:40.20454516Z" }, "llmsTxt": { "url": "https://docs.growthbook.io/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:39.975912104Z" }, "domain": { "domain": "growthbook.io", "checkedAt": "2026-11-01T14:23:41.368538454Z" }, "pages": [ { "url": "https://www.growthbook.io/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:29:29.272041513Z", "changedAt": "2026-11-04T08:40:45.015836681Z", "fingerprint": "18a31fd99466" }, { "url": "https://www.growthbook.io/legal/privacy-notice", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:29:27.3205356Z", "changedAt": "2026-11-06T13:50:11.648366307Z", "fingerprint": "2862dd2e25f5" }, { "url": "https://www.growthbook.io/legal/customer-agreement", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:29:25.188738505Z", "changedAt": "2026-11-04T08:40:40.81521479Z", "fingerprint": "84ab8480f2bd" } ], "mcpTools": { "url": "https://mcp.growthbook.io/mcp", "checkedAt": "2026-11-07T01:45:18.456947997Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:45:18.456947997Z" }, "github": { "repo": "growthbook/growthbook", "checkedAt": "2026-11-02T08:53:22.52476929Z", "stars": 8556, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-02T08:46:13Z", "openIssues": 524, "openPRs": 356, "issuesOpened90d": 59, "issuesClosed90d": 158, "prsMerged90d": 662, "ci": { "branch": "main", "runs": 50, "success": 49, "failure": 1, "other": 0, "latest": "success", "latestAt": "2026-10-30T21:20:54Z" }, "advisories": [ { "ghsa": "GHSA-c4m3-8cgx-p88g", "severity": "critical", "published": "2026-08-19T19:38:41Z" }, { "ghsa": "GHSA-j24q-55xh-wm4r", "cve": "CVE-2022-36065", "severity": "high", "published": "2022-08-30T17:05:17Z" } ], "replies": { "sampled": 25, "unanswered": 17, "medianDays": 0.6 } }, "updatedAt": "2026-11-07T19:22:10.546299675Z" } }, "edges": [ { "by": 21, "category": "reliability", "leads": "growthbook", "name": "Reliability", "reasons": { "a": "Graded on Flagsmith Cloud with the hosted lines. Statuspage at status.flagsmith.com with components for the Edge API, Admin API, dashboard and website (20). In the 90 days from 8 August, an Admin and SDK API outage on 28 October marked critical, posted at 21:56 UTC and resolved at 22:12 with no cause given, and a minor delay in processing flag changes on 10 September. The posted span of the outage is 16 minutes and its start isn't stated, so we read it as one serious incident under an hour (15 of 30). The Management API limit of 500 requests a minute is documented (15). No 429 handling, Retry-After or idempotency guidance was found in the docs (0). A public SLA commits to 99.95 per cent monthly uptime with service credits (10). The Management API is generally available, but the MCP docs call the server an early release, so half (5 of 10). 20+15+15+0+10+5 = 65.", "b": "Graded on GrowthBook Cloud with the hosted lines. Instatus page at status.growthbook.io with three components (GrowthBook Cloud App, Api, CDN) and a notice history (20). No notices from August to October 2026, and the newest entry in the feed, re-read on 1 November, is still dated 21 August 2025. The MCP server is not a listed component, and the 2.2.0 changelog fixes intermittent 502s in HTTP mode that were not posted, so 25 of 30. API keys are limited to 60 requests a minute on Cloud, re-read in the API introduction and the OpenAPI spec on 1 November; since 19 October self-hosted servers can set per-key limits (15). The docs say only to try again later on 429. The server source sends standard RateLimit headers and the MCP server waits for `RateLimit-Reset` and retries three times, but no backoff guidance or idempotency keys were found in the docs (8 of 15). The pricing page lists a 99.99 per cent uptime SLA on Enterprise, re-read on 1 November. The SLA document itself was not found in public (8 of 10). The REST API's /v1 is described as stable and the MCP docs carry no beta label (10). 20+25+15+8+8+10 = 86." }, "scores": { "a": 65, "b": 86 } }, { "by": 21, "category": "ergonomics", "leads": "growthbook", "name": "Agent ergonomics", "reasons": { "a": "54 tools, more than 30, with no toolsets or read-only subset; enterprise tools only appear where installed (5 of 25). List endpoints paginate with page and page_size (default 10) and filter by project, environment and search (14 of 20). Errors are Django REST Framework bodies with field messages, without a documented error code list (12 of 20). Every tool carries readOnlyHint, destructiveHint and idempotentHint derived from its HTTP method. No idempotency keys for POST (14 of 20). Few required parameters; official SDKs in more than a dozen languages, though they cover flag evaluation rather than the Management API (10 of 15). 5+14+12+14+10 = 55.", "b": "Four compact MCP tools, with skills loaded on demand and a /mcp/api endpoint that drops the skill tools (25). `limit` (default 10, maximum 100) and `offset` on 40 list operations, with filters by project, data source and status. No field selection was found, and the API tools return the raw response body (15 of 20). Errors are a status code and a `message` with no machine code. 422 marks a soft warning that can be resubmitted with `ignoreWarnings`, and the MCP server adds recovery hints for 401, 403, 404 and 429 (13 of 20). All four tools carry readOnlyHint and destructiveHint, and reads and writes are separate tools. Every write is marked destructive, and no idempotency keys were found (13 of 20). The API tools need one to three parameters. The SDKs cover flag evaluation in many languages, not the REST API (10 of 15). 25+15+13+13+10 = 76. Not re-read on 1 November beyond the MCP page and the spec, which still support each line." }, "scores": { "a": 55, "b": 76 } }, { "by": 11, "category": "security", "leads": "growthbook", "name": "Security \u0026 auth", "reasons": { "a": "OAuth for interactive MCP clients with Flagsmith as the authorisation server, Organisation API keys in the Authorization header that act as admin or with chosen RBAC roles, and OIDC trust relationships that swap a CI token for a short-lived one. Granular key roles need Scale-Up or Enterprise, so a Free key is all-powerful (25 of 30). RBAC roles can limit a key to reads, and change requests put a flag change through approval on Scale-Up and Enterprise. There is no read-only switch on the MCP server itself (14 of 20). No prompt-injection guidance; tools return names, descriptions and trait values written by people (3 of 15). Audit logs record every admin action and stream by webhook, on Scale-Up and Enterprise (11 of 15). The docs say Flagsmith has a SOC 2 Type 2 report available on request, the terms promise a yearly third-party penetration test, and SECURITY.md routes reports to support email. No security.txt, bug bounty or public advisory process was found (12 of 20). 25+14+3+11+12 = 65.", "b": "OAuth with PKCE, dynamic client registration, refresh tokens and a revocation endpoint for the hosted MCP server. Since October the consent page asks what the connection may do, Read only, Human-in-the-Loop, Full access or a custom base role limited by project or environment, so a token no longer has to carry the user's full permissions. Secret Keys take any built-in or custom role with per-project overrides, environment limits and expiry, Personal Access Tokens can be scoped below their user (7 October), and since 21 October keys and tokens rotate in place with a grace period for the old secret. Secrets travel in headers only (30). A Read Only option, an endpoint with the API tools alone, and read and write tools with annotations. Since 16 October Human-in-the-Loop holds risky or destructive REST writes, including those from the hosted MCP endpoint, until a person confirms them on a linked page, and each decision goes to the audit log. Human-in-the-Loop is an Enterprise preset, and on a plan with only the admin role, which includes Free, Full access is the only option (18 of 20). No guidance on prompt injection was found, though the tools return names and descriptions that people wrote (3 of 15). Audit logging, with export, is on Enterprise only. Personal tokens attribute actions to a user, Secret Keys can name the member behind a request with `X-GrowthBook-Requested-By` (13 October), and the MCP server labels its API calls with `X-GB-MCP-*` headers (10 of 15). SOC 2 Type II, a disclosure process with a form and SECURITY.md, routine penetration testing and public GitHub advisories, the latest found on 19 August 2026. Rewards are merchandise only and www.growthbook.io/.well-known/security.txt still answered 404 on 1 November (15 of 20). 30+18+3+10+15 = 76. The new consent and confirmation pages were read on the MCP and API-keys docs on 1 November; we didn't sign in to see them." }, "scores": { "a": 65, "b": 76 } }, { "by": 9, "category": "schema", "leads": "growthbook", "name": "Schema \u0026 documentation", "reasons": { "a": "openapi.yaml in the repository is OpenAPI 3.1 with 624 operations, and the MCP server builds its 54 tools from the operations tagged `mcp`, so every tool has a JSON Schema input (25). No llms.txt (404) and no Markdown served for agents on docs.flagsmith.com; the docs are Markdown only in the repository (0). Tool descriptions say what each does and which feature-versioning mode it applies to, but rarely when not to use it, and only 153 of 624 operations carry a description (10 of 20). 57 enums and required fields in the spec, with some free-form value fields (10 of 15). Docs carry curl examples, but only 16 operations document a 400 and 6 a 404 (7 of 15). A /api/v1 path, release-please changelog and dated release notes (15). 25+0+10+10+7+15 = 67.", "b": "Public OpenAPI 3.1 spec, version 5.1.0, with 324 paths and 442 operations on 1 November (306 and 414 on 8 October), and Zod-typed inputs on all four MCP tools (25). llms.txt and a Markdown copy of each docs page (10). 441 of 442 operations have a summary and 205 have a description. The MCP tool descriptions say when to use each tool, and the bundled skills carry the workflows (13 of 20). The spec has 1,445 enums and marks required fields, but `growthbook_api_write` takes the path as a string and the body as a JSON string, and the docs still say the API tools do not validate payloads (9 of 15). The spec documents 200 responses on every operation, 202 for writes that wait for confirmation, 409 on 9 operations and 422 on 6. The introduction lists eight status codes and a `message` body (6 of 15). Path versions /v1 and /v2, 34 operations marked deprecated, GitHub releases, and an MCP changelog with breaking changes called out (13 of 15). 25+10+13+9+6+13 = 76." }, "scores": { "a": 67, "b": 76 } }, { "by": 6, "category": "maintenance", "leads": "growthbook", "name": "Maintenance \u0026 community", "reasons": { "a": "v2.290.0 was released on 5 November 2026 (30). 34 tagged releases between 8 August and 5 November (20). Commits land daily (60 since 8 August in the 60-commit clone), with a Discord server and support email. We couldn't read issue response times because GitHub's API refused us for its rate limit (15 of 25). Not in the official MCP registry, which returned no Flagsmith entry; official SDKs are current (8 of 15). Renovate updates, CI workflows for the API, frontend, docs and MCP, and a Trivy scan (10). 30+20+15+8+10 = 83.", "b": "MCP server 2.2.0 is dated 5 October 2026 and published to the registry on 6 October, GrowthBook 5.1.0 was tagged on 21 September 2026, and the main repository's commit releasing the JavaScript and React SDKs 2.0.0 landed on 30 October (npm not readable from here) (30). In the 90 days from 3 August, GrowthBook 5.0.1 (19 August) and 5.1.0, MCP 2.1.0 (10 August) and 2.2.0, and the SDK 2.0.0 release commit (20). The main repository's 200 newest commits run from 5 to 30 October 2026, and there is a community Slack. We did not read how quickly issues are answered (15 of 25). `io.github.growthbook/growthbook-mcp` is in the official MCP registry at 2.2.0, published 6 October 2026 and still latest on 1 November (15). The MCP repository runs CI on Node 22 and 26 and took dependency updates on 8 and 27 October 2026, both still unreleased. The package states Node 18 or later, which CI does not test (9 of 10). 30+20+15+15+9 = 89." }, "scores": { "a": 83, "b": 89 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Bullet Train Ltd", "b": "GrowthBook, Inc.", "name": "Vendor" }, { "a": "https://mcp.flagsmith.com", "b": "https://mcp.growthbook.io/mcp", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP, stdio", "b": "HTTP, Streamable HTTP, stdio", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "BSD-3-Clause", "b": "MIT for the core and for the MCP server. Three enterprise directories in the main repository are under GrowthBook's enterprise licence. GrowthBook Cloud is a hosted service under the Customer Agreement", "name": "Licence" }, { "a": "54", "b": "4", "name": "Tools exposed" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "io.github.growthbook/growthbook-mcp", "name": "MCP registry" }, { "a": "2026-11-05", "b": "2026-10-06", "name": "Last release" }, { "a": "2026-09-01", "b": "2025-06-19", "name": "Terms last updated" }, { "a": "2023-10-01", "b": "2026-06-08", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "yes", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "6.6k stars", "b": "8.5k stars, 1.3M npm/wk, 433k PyPI/wk", "name": "Popularity" }, { "a": "none", "b": "3.3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "GrowthBook scores 68.6 (B) on agent readiness against Flagsmith's 61.2 (C), and leads in 5 of 7 scored categories.", "question": "Which is better for AI agents, Flagsmith or GrowthBook?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do Flagsmith and GrowthBook need an API key?" }, { "answer": "Yes. Flagsmith has a hosted endpoint at https://mcp.flagsmith.com and GrowthBook at https://mcp.growthbook.io/mcp.", "question": "Can an agent call Flagsmith and GrowthBook without installing anything?" }, { "answer": "Yes. Flagsmith is open source (BSD-3-Clause). GrowthBook is open source (MIT for the core and for the MCP server. Three enterprise directories in the main repository are under GrowthBook's enterprise licence. GrowthBook Cloud is a hosted service under the Customer Agreement).", "question": "Are Flagsmith and GrowthBook open source?" } ], "goodFor": [ { "aheadOn": null, "also": null, "goodFor": "Feature flags and experiments for teams that want open source or self-hosting, managed by an agent through MCP.", "slug": "flagsmith", "watchFor": "The MCP docs call the server an early release, and experiment tools are marked beta" }, { "aheadOn": [ "Reliability, 86 against 65", "Schema \u0026 documentation, 76 against 67", "Agent ergonomics, 76 against 55", "Security \u0026 auth, 76 against 65", "Maintenance \u0026 community, 89 against 83" ], "also": [ "Free to start without a card" ], "goodFor": "Teams that want flags and experiments analysed against their own warehouse, with an open-source core and a self-hosted option.", "slug": "growthbook", "watchFor": "The API tools take a path and a JSON string and don't validate payloads, so correct calls depend on the bundled skills" } ], "history": { "flagsmith": null, "growthbook": [ { "causes": [ "product", "event" ], "date": "2026-11-01", "delta": -1.5, "from": 70.1, "fromGrade": "BB", "to": 68.6, "toGrade": "B" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0, "from": 70.1, "fromGrade": "BB", "to": 70.1, "toGrade": "BB" } ] }, "job": { "capability": "analytics.flags", "name": "Feature flags" }, "others": [ { "json": "https://www.anchorterminal.com/compare/amplitude-vs-growthbook.json", "title": "Amplitude vs GrowthBook", "url": "https://www.anchorterminal.com/compare/amplitude-vs-growthbook" }, { "json": "https://www.anchorterminal.com/compare/countly-vs-growthbook.json", "title": "Countly vs GrowthBook", "url": "https://www.anchorterminal.com/compare/countly-vs-growthbook" }, { "json": "https://www.anchorterminal.com/compare/fullstory-vs-growthbook.json", "title": "Fullstory vs GrowthBook", "url": "https://www.anchorterminal.com/compare/fullstory-vs-growthbook" }, { "json": "https://www.anchorterminal.com/compare/growthbook-vs-openpanel.json", "title": "GrowthBook vs OpenPanel", "url": "https://www.anchorterminal.com/compare/growthbook-vs-openpanel" }, { "json": "https://www.anchorterminal.com/compare/growthbook-vs-pendo.json", "title": "GrowthBook vs Pendo", "url": "https://www.anchorterminal.com/compare/growthbook-vs-pendo" }, { "json": "https://www.anchorterminal.com/compare/growthbook-vs-userpilot.json", "title": "GrowthBook vs Userpilot", "url": "https://www.anchorterminal.com/compare/growthbook-vs-userpilot" }, { "json": "https://www.anchorterminal.com/compare/growthbook-vs-woopra.json", "title": "GrowthBook vs Woopra", "url": "https://www.anchorterminal.com/compare/growthbook-vs-woopra" }, { "json": "https://www.anchorterminal.com/compare/flagsmith-vs-fullstory.json", "title": "Flagsmith vs Fullstory", "url": "https://www.anchorterminal.com/compare/flagsmith-vs-fullstory" }, { "json": "https://www.anchorterminal.com/compare/flagsmith-vs-heap.json", "title": "Flagsmith vs Heap", "url": "https://www.anchorterminal.com/compare/flagsmith-vs-heap" }, { "json": "https://www.anchorterminal.com/compare/flagsmith-vs-openpanel.json", "title": "Flagsmith vs OpenPanel", "url": "https://www.anchorterminal.com/compare/flagsmith-vs-openpanel" }, { "json": "https://www.anchorterminal.com/compare/flagsmith-vs-rudderstack-mcp.json", "title": "Flagsmith vs RudderStack MCP", "url": "https://www.anchorterminal.com/compare/flagsmith-vs-rudderstack-mcp" }, { "json": "https://www.anchorterminal.com/compare/flagsmith-vs-woopra.json", "title": "Flagsmith vs Woopra", "url": "https://www.anchorterminal.com/compare/flagsmith-vs-woopra" }, { "json": "https://www.anchorterminal.com/compare/growthbook-vs-heap.json", "title": "GrowthBook vs Heap", "url": "https://www.anchorterminal.com/compare/growthbook-vs-heap" }, { "json": "https://www.anchorterminal.com/compare/growthbook-vs-rudderstack-mcp.json", "title": "GrowthBook vs RudderStack MCP", "url": "https://www.anchorterminal.com/compare/growthbook-vs-rudderstack-mcp" }, { "json": "https://www.anchorterminal.com/compare/amplitude-vs-flagsmith.json", "title": "Amplitude vs Flagsmith", "url": "https://www.anchorterminal.com/compare/amplitude-vs-flagsmith" }, { "json": "https://www.anchorterminal.com/compare/countly-vs-flagsmith.json", "title": "Countly vs Flagsmith", "url": "https://www.anchorterminal.com/compare/countly-vs-flagsmith" }, { "json": "https://www.anchorterminal.com/compare/flagsmith-vs-harness-fme.json", "title": "Flagsmith vs Harness Feature Management \u0026 Experimentation", "url": "https://www.anchorterminal.com/compare/flagsmith-vs-harness-fme" }, { "json": "https://www.anchorterminal.com/compare/flagsmith-vs-launchdarkly.json", "title": "Flagsmith vs LaunchDarkly", "url": "https://www.anchorterminal.com/compare/flagsmith-vs-launchdarkly" }, { "json": "https://www.anchorterminal.com/compare/flagsmith-vs-mixpanel.json", "title": "Flagsmith vs Mixpanel", "url": "https://www.anchorterminal.com/compare/flagsmith-vs-mixpanel" }, { "json": "https://www.anchorterminal.com/compare/flagsmith-vs-optimizely.json", "title": "Flagsmith vs Optimizely Experimentation", "url": "https://www.anchorterminal.com/compare/flagsmith-vs-optimizely" }, { "json": "https://www.anchorterminal.com/compare/flagsmith-vs-posthog.json", "title": "Flagsmith vs PostHog", "url": "https://www.anchorterminal.com/compare/flagsmith-vs-posthog" }, { "json": "https://www.anchorterminal.com/compare/flagsmith-vs-statsig.json", "title": "Flagsmith vs Statsig", "url": "https://www.anchorterminal.com/compare/flagsmith-vs-statsig" }, { "json": "https://www.anchorterminal.com/compare/flagsmith-vs-matomo.json", "title": "Flagsmith vs Matomo", "url": "https://www.anchorterminal.com/compare/flagsmith-vs-matomo" }, { "json": "https://www.anchorterminal.com/compare/flagsmith-vs-mostly-good-metrics.json", "title": "Flagsmith vs Mostly Good Metrics", "url": "https://www.anchorterminal.com/compare/flagsmith-vs-mostly-good-metrics" }, { "json": "https://www.anchorterminal.com/compare/growthbook-vs-harness-fme.json", "title": "GrowthBook vs Harness Feature Management \u0026 Experimentation", "url": "https://www.anchorterminal.com/compare/growthbook-vs-harness-fme" }, { "json": "https://www.anchorterminal.com/compare/growthbook-vs-launchdarkly.json", "title": "GrowthBook vs LaunchDarkly", "url": "https://www.anchorterminal.com/compare/growthbook-vs-launchdarkly" }, { "json": "https://www.anchorterminal.com/compare/growthbook-vs-matomo.json", "title": "GrowthBook vs Matomo", "url": "https://www.anchorterminal.com/compare/growthbook-vs-matomo" }, { "json": "https://www.anchorterminal.com/compare/growthbook-vs-mixpanel.json", "title": "GrowthBook vs Mixpanel", "url": "https://www.anchorterminal.com/compare/growthbook-vs-mixpanel" }, { "json": "https://www.anchorterminal.com/compare/growthbook-vs-mostly-good-metrics.json", "title": "GrowthBook vs Mostly Good Metrics", "url": "https://www.anchorterminal.com/compare/growthbook-vs-mostly-good-metrics" }, { "json": "https://www.anchorterminal.com/compare/growthbook-vs-optimizely.json", "title": "GrowthBook vs Optimizely Experimentation", "url": "https://www.anchorterminal.com/compare/growthbook-vs-optimizely" }, { "json": "https://www.anchorterminal.com/compare/growthbook-vs-posthog.json", "title": "GrowthBook vs PostHog", "url": "https://www.anchorterminal.com/compare/growthbook-vs-posthog" }, { "json": "https://www.anchorterminal.com/compare/growthbook-vs-statsig.json", "title": "GrowthBook vs Statsig", "url": "https://www.anchorterminal.com/compare/growthbook-vs-statsig" } ], "panel": null, "scores": [ { "by": 21, "edge": "growthbook", "flagsmith": 65, "growthbook": 86, "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 9, "edge": "growthbook", "flagsmith": 67, "growthbook": 76, "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 21, "edge": "growthbook", "flagsmith": 55, "growthbook": 76, "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "by": 11, "edge": "growthbook", "flagsmith": 65, "growthbook": 76, "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "by": 0, "edge": "", "flagsmith": 40, "growthbook": 40, "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 6, "edge": "growthbook", "flagsmith": 83, "growthbook": 89, "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 2, "edge": "flagsmith", "flagsmith": 77, "growthbook": 75, "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "GrowthBook scores 68.6 (B) on agent readiness against Flagsmith's 61.2 (C), and leads in 5 of 7 scored categories. Both do feature flags.", "tasks": null, "tutorials": [], "verdicts": { "flagsmith": "Flagsmith pairs a BSD-licensed core with a hosted MCP server whose 54 tools come from its OpenAPI spec and carry read and destructive hints. A public 99.95 per cent SLA and SOC 2 report back the Cloud service. The MCP server is still an early release, and fine-grained key roles need a paid Scale-Up or Enterprise plan.", "growthbook": "GrowthBook Cloud's MCP server has four annotated tools, OAuth whose consent page can grant read-only or confirmation-gated access, and a 442-operation OpenAPI spec behind it. The free plan needs no card. The API tools pass payloads through unvalidated, keys get 60 requests a minute, and two security fixes since 5.1.0 are unreleased." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/flagsmith-vs-growthbook", "json": "https://www.anchorterminal.com/compare/flagsmith-vs-growthbook.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/flagsmith-vs-growthbook.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/flagsmith-vs-growthbook.min.md" }, "markdown": "GrowthBook scores 68.6 (B) on agent readiness against Flagsmith's 61.2 (C), and leads in 5 of 7 scored categories. Both do feature flags.\n\n- Flagsmith: grade C, 61.2/100, rank #623 of 1510. Markdown https://www.anchorterminal.com/tools/flagsmith.md · JSON https://www.anchorterminal.com/api/v1/tools/flagsmith.json\n- GrowthBook: grade B, 68.6/100, rank #279 of 1510. Markdown https://www.anchorterminal.com/tools/growthbook.md · JSON https://www.anchorterminal.com/api/v1/tools/growthbook.json\n- Best product analytics and experimentation tools for AI agents: https://www.anchorterminal.com/best/product-analytics/index.md\n- All 170 product analytics comparisons: https://www.anchorterminal.com/compare/product-analytics/index.md\n\n## Which one, for what\n\n### Flagsmith (C)\n\nGood for: Feature flags and experiments for teams that want open source or self-hosting, managed by an agent through MCP.\n\nWatch for: The MCP docs call the server an early release, and experiment tools are marked beta\n\n### GrowthBook (B)\n\nGood for: Teams that want flags and experiments analysed against their own warehouse, with an open-source core and a self-hosted option.\n\nAhead on:\n- Reliability, 86 against 65\n- Schema \u0026 documentation, 76 against 67\n- Agent ergonomics, 76 against 55\n- Security \u0026 auth, 76 against 65\n- Maintenance \u0026 community, 89 against 83\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: The API tools take a path and a JSON string and don't validate payloads, so correct calls depend on the bundled skills\n\n\n## Why the edge\n\n### Reliability: GrowthBook +21\n\n- Flagsmith (65): Graded on Flagsmith Cloud with the hosted lines. Statuspage at status.flagsmith.com with components for the Edge API, Admin API, dashboard and website (20). In the 90 days from 8 August, an Admin and SDK API outage on 28 October marked critical, posted at 21:56 UTC and resolved at 22:12 with no cause given, and a minor delay in processing flag changes on 10 September. The posted span of the outage is 16 minutes and its start isn't stated, so we read it as one serious incident under an hour (15 of 30). The Management API limit of 500 requests a minute is documented (15). No 429 handling, Retry-After or idempotency guidance was found in the docs (0). A public SLA commits to 99.95 per cent monthly uptime with service credits (10). The Management API is generally available, but the MCP docs call the server an early release, so half (5 of 10). 20+15+15+0+10+5 = 65.\n- GrowthBook (86): Graded on GrowthBook Cloud with the hosted lines. Instatus page at status.growthbook.io with three components (GrowthBook Cloud App, Api, CDN) and a notice history (20). No notices from August to October 2026, and the newest entry in the feed, re-read on 1 November, is still dated 21 August 2025. The MCP server is not a listed component, and the 2.2.0 changelog fixes intermittent 502s in HTTP mode that were not posted, so 25 of 30. API keys are limited to 60 requests a minute on Cloud, re-read in the API introduction and the OpenAPI spec on 1 November; since 19 October self-hosted servers can set per-key limits (15). The docs say only to try again later on 429. The server source sends standard RateLimit headers and the MCP server waits for `RateLimit-Reset` and retries three times, but no backoff guidance or idempotency keys were found in the docs (8 of 15). The pricing page lists a 99.99 per cent uptime SLA on Enterprise, re-read on 1 November. The SLA document itself was not found in public (8 of 10). The REST API's /v1 is described as stable and the MCP docs carry no beta label (10). 20+25+15+8+8+10 = 86.\n\n### Agent ergonomics: GrowthBook +21\n\n- Flagsmith (55): 54 tools, more than 30, with no toolsets or read-only subset; enterprise tools only appear where installed (5 of 25). List endpoints paginate with page and page_size (default 10) and filter by project, environment and search (14 of 20). Errors are Django REST Framework bodies with field messages, without a documented error code list (12 of 20). Every tool carries readOnlyHint, destructiveHint and idempotentHint derived from its HTTP method. No idempotency keys for POST (14 of 20). Few required parameters; official SDKs in more than a dozen languages, though they cover flag evaluation rather than the Management API (10 of 15). 5+14+12+14+10 = 55.\n- GrowthBook (76): Four compact MCP tools, with skills loaded on demand and a /mcp/api endpoint that drops the skill tools (25). `limit` (default 10, maximum 100) and `offset` on 40 list operations, with filters by project, data source and status. No field selection was found, and the API tools return the raw response body (15 of 20). Errors are a status code and a `message` with no machine code. 422 marks a soft warning that can be resubmitted with `ignoreWarnings`, and the MCP server adds recovery hints for 401, 403, 404 and 429 (13 of 20). All four tools carry readOnlyHint and destructiveHint, and reads and writes are separate tools. Every write is marked destructive, and no idempotency keys were found (13 of 20). The API tools need one to three parameters. The SDKs cover flag evaluation in many languages, not the REST API (10 of 15). 25+15+13+13+10 = 76. Not re-read on 1 November beyond the MCP page and the spec, which still support each line.\n\n### Security \u0026 auth: GrowthBook +11\n\n- Flagsmith (65): OAuth for interactive MCP clients with Flagsmith as the authorisation server, Organisation API keys in the Authorization header that act as admin or with chosen RBAC roles, and OIDC trust relationships that swap a CI token for a short-lived one. Granular key roles need Scale-Up or Enterprise, so a Free key is all-powerful (25 of 30). RBAC roles can limit a key to reads, and change requests put a flag change through approval on Scale-Up and Enterprise. There is no read-only switch on the MCP server itself (14 of 20). No prompt-injection guidance; tools return names, descriptions and trait values written by people (3 of 15). Audit logs record every admin action and stream by webhook, on Scale-Up and Enterprise (11 of 15). The docs say Flagsmith has a SOC 2 Type 2 report available on request, the terms promise a yearly third-party penetration test, and SECURITY.md routes reports to support email. No security.txt, bug bounty or public advisory process was found (12 of 20). 25+14+3+11+12 = 65.\n- GrowthBook (76): OAuth with PKCE, dynamic client registration, refresh tokens and a revocation endpoint for the hosted MCP server. Since October the consent page asks what the connection may do, Read only, Human-in-the-Loop, Full access or a custom base role limited by project or environment, so a token no longer has to carry the user's full permissions. Secret Keys take any built-in or custom role with per-project overrides, environment limits and expiry, Personal Access Tokens can be scoped below their user (7 October), and since 21 October keys and tokens rotate in place with a grace period for the old secret. Secrets travel in headers only (30). A Read Only option, an endpoint with the API tools alone, and read and write tools with annotations. Since 16 October Human-in-the-Loop holds risky or destructive REST writes, including those from the hosted MCP endpoint, until a person confirms them on a linked page, and each decision goes to the audit log. Human-in-the-Loop is an Enterprise preset, and on a plan with only the admin role, which includes Free, Full access is the only option (18 of 20). No guidance on prompt injection was found, though the tools return names and descriptions that people wrote (3 of 15). Audit logging, with export, is on Enterprise only. Personal tokens attribute actions to a user, Secret Keys can name the member behind a request with `X-GrowthBook-Requested-By` (13 October), and the MCP server labels its API calls with `X-GB-MCP-*` headers (10 of 15). SOC 2 Type II, a disclosure process with a form and SECURITY.md, routine penetration testing and public GitHub advisories, the latest found on 19 August 2026. Rewards are merchandise only and www.growthbook.io/.well-known/security.txt still answered 404 on 1 November (15 of 20). 30+18+3+10+15 = 76. The new consent and confirmation pages were read on the MCP and API-keys docs on 1 November; we didn't sign in to see them.\n\n### Schema \u0026 documentation: GrowthBook +9\n\n- Flagsmith (67): openapi.yaml in the repository is OpenAPI 3.1 with 624 operations, and the MCP server builds its 54 tools from the operations tagged `mcp`, so every tool has a JSON Schema input (25). No llms.txt (404) and no Markdown served for agents on docs.flagsmith.com; the docs are Markdown only in the repository (0). Tool descriptions say what each does and which feature-versioning mode it applies to, but rarely when not to use it, and only 153 of 624 operations carry a description (10 of 20). 57 enums and required fields in the spec, with some free-form value fields (10 of 15). Docs carry curl examples, but only 16 operations document a 400 and 6 a 404 (7 of 15). A /api/v1 path, release-please changelog and dated release notes (15). 25+0+10+10+7+15 = 67.\n- GrowthBook (76): Public OpenAPI 3.1 spec, version 5.1.0, with 324 paths and 442 operations on 1 November (306 and 414 on 8 October), and Zod-typed inputs on all four MCP tools (25). llms.txt and a Markdown copy of each docs page (10). 441 of 442 operations have a summary and 205 have a description. The MCP tool descriptions say when to use each tool, and the bundled skills carry the workflows (13 of 20). The spec has 1,445 enums and marks required fields, but `growthbook_api_write` takes the path as a string and the body as a JSON string, and the docs still say the API tools do not validate payloads (9 of 15). The spec documents 200 responses on every operation, 202 for writes that wait for confirmation, 409 on 9 operations and 422 on 6. The introduction lists eight status codes and a `message` body (6 of 15). Path versions /v1 and /v2, 34 operations marked deprecated, GitHub releases, and an MCP changelog with breaking changes called out (13 of 15). 25+10+13+9+6+13 = 76.\n\n### Maintenance \u0026 community: GrowthBook +6\n\n- Flagsmith (83): v2.290.0 was released on 5 November 2026 (30). 34 tagged releases between 8 August and 5 November (20). Commits land daily (60 since 8 August in the 60-commit clone), with a Discord server and support email. We couldn't read issue response times because GitHub's API refused us for its rate limit (15 of 25). Not in the official MCP registry, which returned no Flagsmith entry; official SDKs are current (8 of 15). Renovate updates, CI workflows for the API, frontend, docs and MCP, and a Trivy scan (10). 30+20+15+8+10 = 83.\n- GrowthBook (89): MCP server 2.2.0 is dated 5 October 2026 and published to the registry on 6 October, GrowthBook 5.1.0 was tagged on 21 September 2026, and the main repository's commit releasing the JavaScript and React SDKs 2.0.0 landed on 30 October (npm not readable from here) (30). In the 90 days from 3 August, GrowthBook 5.0.1 (19 August) and 5.1.0, MCP 2.1.0 (10 August) and 2.2.0, and the SDK 2.0.0 release commit (20). The main repository's 200 newest commits run from 5 to 30 October 2026, and there is a community Slack. We did not read how quickly issues are answered (15 of 25). `io.github.growthbook/growthbook-mcp` is in the official MCP registry at 2.2.0, published 6 October 2026 and still latest on 1 November (15). The MCP repository runs CI on Node 22 and 26 and took dependency updates on 8 and 27 October 2026, both still unreleased. The package states Node 18 or later, which CI does not test (9 of 10). 30+20+15+15+9 = 89.\n\n## Score by category\n\n| Category | Weight | Flagsmith | GrowthBook | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 65 | 86 | GrowthBook +21 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 67 | 76 | GrowthBook +9 |\n| Agent ergonomics | 13% (16.2 this run) | 55 | 76 | GrowthBook +21 |\n| Security \u0026 auth | 14% (17.5 this run) | 65 | 76 | GrowthBook +11 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 40 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 83 | 89 | GrowthBook +6 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 77 | 75 | Flagsmith +2 |\n| Negative events | ≤15 | -2 | -6 | |\n| **Total** | | **61.2 · C** | **68.6 · B** | |\n\n## Facts side by side\n\n| Fact | Flagsmith | GrowthBook |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Bullet Train Ltd | GrowthBook, Inc. |\n| Hosted endpoint | `https://mcp.flagsmith.com` | `https://mcp.growthbook.io/mcp` |\n| Transports | HTTP, Streamable HTTP, stdio | HTTP, Streamable HTTP, stdio |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | BSD-3-Clause | MIT for the core and for the MCP server. Three enterprise directories in the main repository are under GrowthBook's enterprise licence. GrowthBook Cloud is a hosted service under the Customer Agreement |\n| Tools exposed | 54 | 4 |\n| Read-only variant documented | yes | no |\n| llms.txt | no | yes |\n| MCP registry | not listed | `io.github.growthbook/growthbook-mcp` |\n| Last release | 2026-11-05 | 2026-10-06 |\n| Terms last updated | 2026-09-01 | 2025-06-19 |\n| Privacy policy last updated | 2023-10-01 | 2026-06-08 |\n| Customer content may train models | not found in the text | yes |\n| Terms restrict automated access | not found in the text | not found in the text |\n| Terms restrict benchmarking | not found in the text | yes |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 6.6k stars | 8.5k stars, 1.3M npm/wk, 433k PyPI/wk |\n| Agent reviews | none | 3.3/5 (4) |\n\n## How the scores have moved\n\n### Flagsmith\n\nNo score change since it was listed.\n\n### GrowthBook\n\n- -1.5 on 1 November 2026 (BB to B): product, negative event\n- no change on 27 October 2026: checklist\n\n## Verdicts\n\n**Flagsmith.** Flagsmith pairs a BSD-licensed core with a hosted MCP server whose 54 tools come from its OpenAPI spec and carry read and destructive hints. A public 99.95 per cent SLA and SOC 2 report back the Cloud service. The MCP server is still an early release, and fine-grained key roles need a paid Scale-Up or Enterprise plan.\n\n**GrowthBook.** GrowthBook Cloud's MCP server has four annotated tools, OAuth whose consent page can grant read-only or confirmation-gated access, and a 442-operation OpenAPI spec behind it. The free plan needs no card. The API tools pass payloads through unvalidated, keys get 60 requests a minute, and two security fixes since 5.1.0 are unreleased.\n\n## Before you call either\n\n### Flagsmith\n\n1. Send the key as `Authorization: Api-Key \u003ckey\u003e`; the `Api-Key ` prefix is required and a bare key fails\n2. Check whether the environment uses v2 feature versioning before choosing between segment-override and version-state tools\n3. Use a key with a read-only RBAC role for analysis tasks, since a Free plan key has organisation admin rights\n4. Pace Management API calls under 500 a minute; no Retry-After guidance is documented\n5. Treat experiment results as possibly null until Flagsmith has computed them\n\n### GrowthBook\n\n1. Connect to https://mcp.growthbook.io/mcp and complete OAuth in a browser. Ask for Read only at consent unless the task needs writes\n2. Call `growthbook_list_skills` and `growthbook_read_skill` before writing. The API tools don't validate payloads, so use the paths the skill names\n3. Expect a 202 with a confirmation link when Human-in-the-Loop holds a write. Tell the user and wait; a held request expires after an hour\n4. Stay under 60 requests a minute per key. On 429 wait for the `RateLimit-Reset` seconds before retrying\n5. List calls return 10 items by default. Pass `limit` up to 100 and `offset` to page\n\n## Questions\n\n### Which is better for AI agents, Flagsmith or GrowthBook?\n\nGrowthBook scores 68.6 (B) on agent readiness against Flagsmith's 61.2 (C), and leads in 5 of 7 scored categories.\n\n### Do Flagsmith and GrowthBook need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call Flagsmith and GrowthBook without installing anything?\n\nYes. Flagsmith has a hosted endpoint at https://mcp.flagsmith.com and GrowthBook at https://mcp.growthbook.io/mcp.\n\n### Are Flagsmith and GrowthBook open source?\n\nYes. Flagsmith is open source (BSD-3-Clause). GrowthBook is open source (MIT for the core and for the MCP server. Three enterprise directories in the main repository are under GrowthBook's enterprise licence. GrowthBook Cloud is a hosted service under the Customer Agreement).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/flagsmith-vs-growthbook.json, and with the fewest tokens: https://www.anchorterminal.com/compare/flagsmith-vs-growthbook.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"flagsmith\", \"b\": \"growthbook\"}`. From a terminal: `anchor compare flagsmith growthbook`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/flagsmith.json and https://www.anchorterminal.com/api/v1/tools/growthbook.json\n\n## Other comparisons with Flagsmith or GrowthBook\n\n- [Amplitude vs GrowthBook](https://www.anchorterminal.com/compare/amplitude-vs-growthbook.md)\n- [Countly vs GrowthBook](https://www.anchorterminal.com/compare/countly-vs-growthbook.md)\n- [Fullstory vs GrowthBook](https://www.anchorterminal.com/compare/fullstory-vs-growthbook.md)\n- [GrowthBook vs OpenPanel](https://www.anchorterminal.com/compare/growthbook-vs-openpanel.md)\n- [GrowthBook vs Pendo](https://www.anchorterminal.com/compare/growthbook-vs-pendo.md)\n- [GrowthBook vs Userpilot](https://www.anchorterminal.com/compare/growthbook-vs-userpilot.md)\n- [GrowthBook vs Woopra](https://www.anchorterminal.com/compare/growthbook-vs-woopra.md)\n- [Flagsmith vs Fullstory](https://www.anchorterminal.com/compare/flagsmith-vs-fullstory.md)\n- [Flagsmith vs Heap](https://www.anchorterminal.com/compare/flagsmith-vs-heap.md)\n- [Flagsmith vs OpenPanel](https://www.anchorterminal.com/compare/flagsmith-vs-openpanel.md)\n- [Flagsmith vs RudderStack MCP](https://www.anchorterminal.com/compare/flagsmith-vs-rudderstack-mcp.md)\n- [Flagsmith vs Woopra](https://www.anchorterminal.com/compare/flagsmith-vs-woopra.md)\n- [GrowthBook vs Heap](https://www.anchorterminal.com/compare/growthbook-vs-heap.md)\n- [GrowthBook vs RudderStack MCP](https://www.anchorterminal.com/compare/growthbook-vs-rudderstack-mcp.md)\n- [Amplitude vs Flagsmith](https://www.anchorterminal.com/compare/amplitude-vs-flagsmith.md)\n- [Countly vs Flagsmith](https://www.anchorterminal.com/compare/countly-vs-flagsmith.md)\n- [Flagsmith vs Harness Feature Management \u0026 Experimentation](https://www.anchorterminal.com/compare/flagsmith-vs-harness-fme.md)\n- [Flagsmith vs LaunchDarkly](https://www.anchorterminal.com/compare/flagsmith-vs-launchdarkly.md)\n- [Flagsmith vs Mixpanel](https://www.anchorterminal.com/compare/flagsmith-vs-mixpanel.md)\n- [Flagsmith vs Optimizely Experimentation](https://www.anchorterminal.com/compare/flagsmith-vs-optimizely.md)\n- [Flagsmith vs PostHog](https://www.anchorterminal.com/compare/flagsmith-vs-posthog.md)\n- [Flagsmith vs Statsig](https://www.anchorterminal.com/compare/flagsmith-vs-statsig.md)\n- [Flagsmith vs Matomo](https://www.anchorterminal.com/compare/flagsmith-vs-matomo.md)\n- [Flagsmith vs Mostly Good Metrics](https://www.anchorterminal.com/compare/flagsmith-vs-mostly-good-metrics.md)\n- [GrowthBook vs Harness Feature Management \u0026 Experimentation](https://www.anchorterminal.com/compare/growthbook-vs-harness-fme.md)\n- [GrowthBook vs LaunchDarkly](https://www.anchorterminal.com/compare/growthbook-vs-launchdarkly.md)\n- [GrowthBook vs Matomo](https://www.anchorterminal.com/compare/growthbook-vs-matomo.md)\n- [GrowthBook vs Mixpanel](https://www.anchorterminal.com/compare/growthbook-vs-mixpanel.md)\n- [GrowthBook vs Mostly Good Metrics](https://www.anchorterminal.com/compare/growthbook-vs-mostly-good-metrics.md)\n- [GrowthBook vs Optimizely Experimentation](https://www.anchorterminal.com/compare/growthbook-vs-optimizely.md)\n- [GrowthBook vs PostHog](https://www.anchorterminal.com/compare/growthbook-vs-posthog.md)\n- [GrowthBook vs Statsig](https://www.anchorterminal.com/compare/growthbook-vs-statsig.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Flagsmith vs GrowthBook", "url": "" } ], "description": "GrowthBook scores 68.6 (B) to Flagsmith's 61.2 (C) for feature flags. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Flagsmith C 61.2", "GrowthBook B 68.6", "scores" ], "h1": "Flagsmith vs GrowthBook", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/flagsmith-vs-growthbook", "published": "2026-10-01", "section": "tools", "title": "Flagsmith vs GrowthBook for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/flagsmith-vs-growthbook" }, "tokens": { "markdown": 5300, "slim": 3180 }, "version": 1 }