{ "data": { "a": { "slug": "geocodio", "name": "Geocodio", "vendor": "Dotsquare LLC", "vendorUrl": "https://www.geocod.io", "kind": "http-api", "category": "maps", "summary": "Geocodio is a hosted geocoding API from Dotsquare LLC for addresses in the US, Canada, Mexico, the UK, Australia and New Zealand. It does forward, reverse and batch geocoding, distance matrices and census, district and timezone data appends.", "url": "https://www.anchorterminal.com/tools/geocodio", "markdownUrl": "https://www.anchorterminal.com/tools/geocodio.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/geocodio.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/geocodio.json", "dns": "geocodio.grade.anchorterminal.com", "repo": "https://github.com/Geocodio/geocodio-cli", "transports": [ "http" ], "packages": [ { "registry": "pypi", "name": "geocodio-library-python" }, { "registry": "npm", "name": "geocodio-library-node" } ], "auth": "api-key", "authNotes": "API key from the dashboard at dash.geocod.io after a browser signup, sent as `Authorization: Bearer` (since March 2025) or the `api_key` query parameter, which the docs and the OpenAPI spec still lead with. Five keys on pay-as-you-go. A new key reaches single and batch geocoding only; the Lists and Distance APIs must be enabled per key.", "pricing": "freemium", "pricingNotes": "2,500 lookups a day free on pay-as-you-go with no card until usage passes the free tier, then $1 per 1,000 lookups billed on the 1st of the next month. Each data append is one more lookup. Flex plans from $315 a month for 350,000 credits, Unlimited from $1,600 a month per dedicated instance.", "priceSummary": "$1 / 1k req", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in llms.txt, AGENTS.md, the docs or the OpenAPI spec (checked 2026-11-06). Billing is by card on file, monthly in arrears on pay-as-you-go.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 20984, "pypiWeekly": 921, "asOf": "2026-11-06" }, "docsUrl": "https://www.geocod.io/docs/", "llmsTxt": "https://www.geocod.io/llms.txt", "openapi": "https://api.geocod.io/openapi-spec.json", "capabilities": [ "geo.geocode", "geo.reverse", "geo.routing" ], "tags": [ "hosted", "api-key", "freemium", "free-tier", "no-card", "llms-txt", "openapi", "official", "cli", "agent-skills", "python", "typescript", "php", "ruby", "batch", "async-jobs", "status-page", "security-txt", "enterprise", "soc2", "closed-source" ], "lastRelease": "2026-11-03", "graded": true, "anchor": { "graded": true, "score": 72.2, "grade": "BB", "agentReady": true, "rank": 138, "ranked": true, "rankOf": 1510, "categoryRank": 4, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 80, "maintenance": 86, "payments": 40, "reliability": 70, "schema": 92, "security": 58, "transparency": 87 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "high", "date": "2026-11-06" }, "negative": 0, "verdict": "Geocodio publishes llms.txt, an AGENTS.md on cost and retries, an OpenAPI spec and a dated changelog, and its results may be stored permanently. Coverage stops at six countries, there's no MCP server or published SLA for self-serve plans, and the docs still put the key in the query string by default.", "bestFor": "Batch geocoding and district or census enrichment of addresses in the US, Canada, Mexico, the UK, Australia and New Zealand, where results must be stored.", "strengths": [ "llms.txt and AGENTS.md cover billing arithmetic, retry rules, idempotency on the client and when not to use the API", "2,500 free lookups a day with no card, then $1 per 1,000, and zero-result lookups aren't billed", "Results may be stored and reused permanently, except UK reverse geocoding addresses", "Dated API changelog with versioned paths, and replaced versions kept for at least 12 months", "Official Python, Node, PHP and Ruby libraries and a CLI with an agent output mode, all MIT" ], "weaknesses": [ "Covers only the US, Canada, Mexico, the UK, Australia and New Zealand, and UK needs a Flex or Unlimited plan", "The docs lead with the api_key query parameter, and the OpenAPI spec defines only that scheme", "No idempotency key on batch or list creation, so a retried upload is billed again", "No MCP server, and no published SLA on self-serve plans", "SOC 2 Type II and penetration tests apply to the separate Enterprise platform only" ], "agentNotes": [ "Always set `country`, because an address with none falls back to the US and is billed even when it's wrong", "Send the key as `Authorization: Bearer`, not in the query string, so it stays out of logs", "Use batch POST /geocode (up to 10,000 lookups) or the Lists API rather than looping single requests", "Treat accuracy_type place, county or state as not found, and check `_warnings` for appends that were billed but skipped", "Don't retry 403 or 422. On 429 read X-RateLimit headers and back off, and never re-upload a list sitting in ENQUEUED" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "high", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 72.2 } ], "editorialScores": { "ergonomics": 80, "maintenance": 86, "payments": 40, "reliability": 70, "schema": 92, "security": 58, "transparency": 80 }, "provenanceScore": 93, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install geocodio-library-python", "http": "curl -H \"Authorization: Bearer $GEOCODIO_API_KEY\" \"https://api.geocod.io/v2.1/geocode?q=1109+N+Highland+St,+Arlington+VA\u0026country=USA\"" }, "letme": { "capability": "https://letme.dev/geo.geocode", "tool": "https://letme.dev/geocodio" }, "area": "everyday", "unitPrices": [ { "item": "Lookup after the free tier, pay-as-you-go", "unit": "1k-requests", "usd": 1, "note": "2,500 lookups a day free. A lookup is one address or coordinate, and each data append is one more" }, { "item": "Flex 350 plan", "unit": "month", "usd": 315, "note": "350,000 credits a month ($0.90 per 1,000), rolling over while subscribed" }, { "item": "Unlimited Geocoding plan", "unit": "month", "usd": 1600, "note": "One dedicated instance, up to 5 million lookups a day; distance credits extra at $1 per 1,000" } ], "provenance": { "legalEntity": "Dotsquare LLC", "domain": "geocod.io", "domainRegistered": "2013-06-05", "endpointOnVendorDomain": true, "terms": "https://www.geocod.io/terms-of-use", "privacy": "https://www.geocod.io/privacy-policy", "statusPage": "https://status.geocod.io", "changelog": "https://www.geocod.io/docs/#changelog", "securityTxt": "valid", "checked": "2026-11-06", "notes": [ "The terms name Dotsquare LLC, dba Geocodio, 440 Monticello Ave Ste 1802 #43146, Norfolk, Virginia, and choose Virginia law.", "The terms' acceptable use section bars customers from 'web scraping or data scraping on or related to the System, including ... any bot or web crawler'. Recorded as a fact; robots.txt on www.geocod.io allows all agents.", "security.txt at www.geocod.io/security.txt names security@geocod.io, a PGP key and a responsible disclosure policy, and expires 30 January 2030.", "RDAP gives geocod.io a registration date of 5 June 2013. The about page says Geocodio launched in 2014.", "llms.txt links https://www.geocod.io/pricing.md as the current pricing in Markdown, but that URL returned a 404 page on 6 November 2026, so prices come from the HTML pricing page." ], "score": 93 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/geocodio.json", "live": { "slug": "geocodio", "vendorStatus": { "page": "https://status.geocod.io", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T19:22:12.77760537Z" }, "versions": [ { "registry": "github", "name": "Geocodio/geocodio-cli", "version": "v3.3.0", "released": "2026-08-31", "seenAt": "2026-11-06T23:28:00.884456202Z" }, { "registry": "npm", "name": "geocodio-library-node", "version": "2.2.0", "seenAt": "2026-11-06T23:28:00.414999469Z" }, { "registry": "pypi", "name": "geocodio-library-python", "version": "1.6.0", "released": "2026-10-16", "seenAt": "2026-11-06T23:27:57.978816079Z" } ], "githubStars": 3, "npmWeekly": 20984, "pypiWeekly": 921, "securityTxt": { "url": "https://geocod.io/.well-known/security.txt", "state": "valid", "expires": "2030-01-30T00:00:00.000Z", "checkedAt": "2026-11-07T16:01:17.012285777Z" }, "llmsTxt": { "url": "https://www.geocod.io/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:35.723551581Z" }, "pages": [ { "url": "https://www.geocod.io/docs/", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:29:02.899876797Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "9bcdba9ab6f4" }, { "url": "https://www.geocod.io/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:29:05.843886759Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "712b2145deac" }, { "url": "https://www.geocod.io/terms-of-use", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:29:07.288294893Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "ff5d2a37483d" } ], "updatedAt": "2026-11-07T19:22:12.77760537Z" } }, "answer": "Mapbox APIs + MCP scores 77.2 (BB) on agent readiness against Geocodio's 72.2 (BB), and leads in 4 of 7 scored categories. Geocodio leads on schema \u0026 documentation.", "b": { "slug": "mapbox", "name": "Mapbox APIs + MCP", "vendor": "Mapbox", "vendorUrl": "https://www.mapbox.com", "kind": "http-api", "category": "maps", "summary": "Geocoding v6 with batch, Search Box for places and categories, Directions, Matrix, Isochrone, Map Matching, route optimisation, static images and map tiles.", "url": "https://www.anchorterminal.com/tools/mapbox", "markdownUrl": "https://www.anchorterminal.com/tools/mapbox.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/mapbox.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/mapbox.json", "dns": "mapbox.grade.anchorterminal.com", "repo": "https://github.com/mapbox/mcp-server", "license": "MIT (MCP server)", "transports": [ "http", "streamable-http", "stdio" ], "remoteUrl": "https://api.mapbox.com", "packages": [ { "registry": "npm", "name": "@mapbox/mcp-server" } ], "auth": "mixed", "authNotes": "Access tokens (public pk. or secret sk.) passed as the access_token query parameter on every REST call. The hosted MCP at mcp.mapbox.com signs in with an OAuth flow in the browser. The local server reads MAPBOX_ACCESS_TOKEN.", "pricing": "freemium", "pricingNotes": "Free monthly allowance per API, then tiered pay as you go. A sign-up without a card gets a trial with lower monthly limits (for example 10,000 temporary geocodes, 10,000 directions requests, 5,000 map loads) and no permanent geocoding until a card is added. Temporary Geocoding 100,000 free, then $0.75 per 1,000 down to $0.45 above 1 million. Permanent Geocoding (results you may store) has no free allowance and costs $5 per 1,000, then $4 above 500,000. Search Box is on introductory preview pricing, 500 free sessions then $3 per 1,000 sessions, or 50,000 free requests then $1 per 1,000. The page also lists standard rates of $11.50 per 1,000 sessions after 2,500 and $1.70 per 1,000 requests after 25,000. Directions, Matrix (by element), Isochrone, Map Matching and route optimisation 100,000 free each, then $2 per 1,000 down to $1.20. Static Images 50,000 free then $1 per 1,000. Vector tiles 200,000 free then $0.25 per 1,000. GL JS map loads 50,000 free then $5 per 1,000 (https://www.mapbox.com/pricing, https://docs.mapbox.com/accounts/guides/signup/).", "priceSummary": "$0.75 / 1k req", "where": "both", "x402": { "level": "no", "endpoints": [] }, "toolCount": 29, "popularity": { "githubStars": 353, "npmWeekly": 1974, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://docs.mapbox.com/api/", "llmsTxt": "https://docs.mapbox.com/llms.txt", "registryName": "io.github.mapbox/mcp-server", "capabilities": [ "geo.geocode", "geo.reverse", "geo.places", "geo.routing", "geo.tiles" ], "tags": [ "hosted", "mcp", "llms-txt", "official", "oauth", "typescript", "free-tier", "no-card", "enterprise", "closed-source" ], "lastRelease": "2026-10-15", "graded": true, "anchor": { "graded": true, "score": 77.2, "grade": "BB", "agentReady": true, "rank": 35, "ranked": true, "rankOf": 1510, "categoryRank": 1, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 88, "maintenance": 90, "payments": 40, "reliability": 82, "schema": 85, "security": 71, "transparency": 84 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": 0, "verdict": "Official MCP server, hosted at mcp.mapbox.com with OAuth or run locally, listed in the MCP registry. Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate.", "bestFor": "An agent that needs search, routing, isochrones, map matching and route optimisation from one vendor with a hosted, OAuth-protected MCP.", "strengths": [ "Official MCP server, hosted at mcp.mapbox.com with OAuth or run locally, listed in the MCP registry", "Every MCP tool annotated read-only and idempotent, with typed Zod input and output schemas", "Scoped public and secret tokens, URL restrictions and one-hour temporary tokens", "SOC 2 Type II, a HackerOne bug bounty and a published 99.9 per cent SLA with service credits for customers with an order", "A sign-up without a card, with trial limits such as 10,000 temporary geocodes a month" ], "weaknesses": [ "Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate, and a card on file", "REST calls take the token as the access_token query parameter", "29 MCP tools load at once on the hosted endpoint, with filtering documented only for the local server", "Routing in US-East was disrupted on 19 and 20 October 2026, and there's no security.txt", "Card-free trial accounts get one token that can't be rotated or deleted until a payment method is added" ], "agentNotes": [ "Set permanent=true only when the result goes into a database, since it moves the call to the $5 per 1,000 rate", "Keep search_and_geocode_tool queries under 200 characters, the live limit, not the 256 the API docs state", "On 429, wait until the X-Rate-Limit-Reset timestamp, since no Retry-After is sent", "Run the local server with --enable-tools to load only the tools the task needs", "On a trial account without a card, expect lower limits and no permanent geocoding; check the Console usage before batch work" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 8, "avgRating": 3.6, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 77.2 } ], "editorialScores": { "ergonomics": 88, "maintenance": 90, "payments": 40, "reliability": 82, "schema": 85, "security": 71, "transparency": 82 }, "provenanceScore": 86, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-10-17", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl \"https://api.mapbox.com/search/geocode/v6/forward?q=10%20Downing%20Street%2C%20London\u0026limit=1\u0026access_token=$MAPBOX_ACCESS_TOKEN\"", "claudeCode": "claude mcp add --transport http mapbox https://mcp.mapbox.com/mcp", "config": { "mcpServers": { "mapbox": { "args": [ "-y", "@mapbox/mcp-server" ], "command": "npx", "env": { "MAPBOX_ACCESS_TOKEN": "${MAPBOX_ACCESS_TOKEN}" } } } } }, "letme": { "capability": "https://letme.dev/geo.geocode", "tool": "https://letme.dev/mapbox" }, "area": "everyday", "unitPrices": [ { "item": "Temporary Geocoding", "unit": "1k-requests", "usd": 0.75, "note": "After 100,000 free a month, $0.45 above 1 million" }, { "item": "Permanent Geocoding", "unit": "1k-requests", "usd": 5, "note": "No free allowance, $4 above 500,000" }, { "item": "Search Box sessions", "unit": "1k-requests", "usd": 3, "note": "Per 1,000 sessions after 500 free, introductory preview pricing. Standard rate $11.50 after 2,500" }, { "item": "Directions", "unit": "1k-requests", "usd": 2, "note": "After 100,000 free a month, $1.20 above 1 million" }, { "item": "Matrix", "unit": "1k-requests", "usd": 2, "note": "Per 1,000 elements after 100,000 free" }, { "item": "Static Images", "unit": "1k-requests", "usd": 1, "note": "After 50,000 free a month" }, { "item": "Vector tiles", "unit": "1k-requests", "usd": 0.25, "note": "After 200,000 free a month" } ], "provenance": { "legalEntity": "Mapbox, Inc.", "domain": "mapbox.com", "domainRegistered": "2003-11-27", "domainNote": "mapbox.com was registered in 2003, years before Mapbox started, so the domain was bought later.", "endpointOnVendorDomain": true, "terms": "https://www.mapbox.com/legal/tos", "privacy": "https://www.mapbox.com/legal/privacy", "statusPage": "https://status.mapbox.com", "changelog": "https://docs.mapbox.com/api/changelog/", "securityTxt": "none", "checked": "2026-11-01", "notes": [ "The terms of service were last updated 31 March 2024 and point to separate product terms for per-API rules.", "The terms let Mapbox create de-identified aggregated data from customer usage.", "www.mapbox.com/.well-known/security.txt returns 404 (re-checked 1 November 2026).", "The top-level API changelog's newest entry is 5 November 2021. Current changes are in per-service changelogs and the MCP server's CHANGELOG.md on GitHub.", "Subprocessor list (22 entries with locations) last updated 4 June 2026.", "A Service Level Agreement (last updated 15 April 2024) at https://www.mapbox.com/legal/sla covers customers with an executed order." ], "score": 86 }, "requirements": { "setupChecked": true, "complianceChecked": true, "card": "paid-only", "freeTier": true, "minutes": 5, "credential": "mixed", "hosting": [ "US" ], "euResidency": "no", "trainsOnData": "unknown", "zeroRetention": "unknown", "certifications": [ "SOC 2 Type II", "GDPR" ], "dpa": true, "selfHost": "no" }, "pageJsonUrl": "https://www.anchorterminal.com/tools/mapbox.json", "live": { "slug": "mapbox", "probe": { "target": "https://api.mapbox.com", "method": "get", "lastAt": "2026-11-07T19:22:18.200369408Z", "lastOk": true, "lastStatus": 200, "lastMs": 21, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 24, "p95ms24h": 88, "samples24h": 238, "samples30d": 7920, "days": [ { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 248, "ok": 248 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 197, "ok": 197 } ] }, "vendorStatus": { "page": "https://status.mapbox.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T19:22:27.188694899Z" }, "versions": [ { "registry": "github", "name": "mapbox/mcp-server", "version": "v0.17.0", "released": "2026-11-06", "seenAt": "2026-11-06T23:42:32.729365912Z" }, { "registry": "mcp-registry", "name": "io.github.mapbox/mcp-server", "version": "0.17.0", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "@mapbox/mcp-server", "version": "0.17.0", "seenAt": "2026-11-06T23:42:32.515191584Z" } ], "githubStars": 367, "npmWeekly": 5677, "securityTxt": { "url": "https://mapbox.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:43.742734359Z" }, "llmsTxt": { "url": "https://docs.mapbox.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:56.968988795Z" }, "domain": { "domain": "mapbox.com", "registered": "2003-11-27", "source": "https://rdap.verisign.com/com/v1/domain/mapbox.com", "checkedAt": "2026-11-01T14:12:09.671089153Z" }, "pages": [ { "url": "https://docs.mapbox.com/api/changelog/", "kind": "changelog", "status": 304, "checkedAt": "2026-11-07T14:06:56.328551059Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "395e3e05bd01" }, { "url": "https://www.mapbox.com/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:31:22.645906851Z", "changedAt": "2026-11-06T13:52:01.730958354Z", "fingerprint": "7345758914cc" }, { "url": "https://www.mapbox.com/legal/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:31:18.159504751Z", "changedAt": "2026-11-06T13:51:56.60150451Z", "fingerprint": "6ac6d7ded402" }, { "url": "https://www.mapbox.com/legal/tos", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:31:20.794072453Z", "changedAt": "2026-11-06T13:52:00.000498024Z", "fingerprint": "1a66e57c3d21" } ], "mcpTools": { "url": "https://mcp.mapbox.com/mcp", "checkedAt": "2026-11-07T01:46:10.747728338Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:46:10.747728338Z" }, "github": { "repo": "mapbox/mcp-server", "checkedAt": "2026-11-02T09:03:27.007357966Z", "stars": 363, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-30T13:51:34Z", "openIssues": 13, "openPRs": 8, "issuesOpened90d": 19, "issuesClosed90d": 6, "prsMerged90d": 37, "ci": { "branch": "main", "runs": 50, "success": 50, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-10-30T13:48:31Z" }, "replies": { "sampled": 25, "unanswered": 12, "medianDays": 0.3 } }, "updatedAt": "2026-11-07T19:22:18.200369408Z" } }, "edges": [ { "by": 13, "category": "security", "leads": "mapbox", "name": "Security \u0026 auth", "reasons": { "a": "Revocable keys, five on pay-as-you-go, each with permissions (Lists and Distance off by default), which earns 25. Less 10 because the docs say 'All requests require \u0026api_key=YOUR_API_KEY' and the OpenAPI spec defines only the query scheme, though an Authorization header has worked since March 2025 (15). Per-key permissions limit what a key can reach. DELETE on lists and distance jobs needs no confirmation (13). Results are addresses and government district, census and legislator data rather than user-written text. No prompt-injection guidance found (9). Usage per API key in the dashboard, downloadable as CSV, and billable-lookup headers on every response (8). Valid security.txt to 30 January 2030 with a PGP key and a responsible disclosure policy. SOC 2 Type II and annual penetration tests apply to the Enterprise platform only. No bug bounty found (13). 15+13+9+8+13 = 58.", "b": "Public and secret tokens with scopes, URL restrictions, one-hour temporary tokens and documented rotation, which earns 30. Less 10 because the REST APIs take the token as the access_token query parameter, and that's the documented way in. The hosted MCP signs in with OAuth instead. Accounts on the card-free trial get a single token they can't rotate or delete until a payment method is added (20). Public-scope tokens can't change the account, and every MCP tool is read-only (18). Responses are structured place data, partly third-party POI names and attributes, and we found no prompt-injection guidance (7). The local MCP emits OpenTelemetry traces per tool call tagged with the client name. We didn't check per-token usage reporting in the account (8). SOC 2 Type II and SOC 3, a HackerOne bug bounty and a disclosure programme, re-read on 1 November. MCP 0.13.0 on 30 July 2026 fixed a query-parameter injection through directions_tool's exclude field, and 0.15.0 on 8 October shipped the fix for reads of cached tool results by anyone who knew a resource URI and could forge the owner's username claim, with a narrowed map CSP. 0.16.0 on 15 October replaced those cached refs for directions and isochrones with refs that re-run the request under the reader's token, and fetches place photos server-side only from public https hosts. All were stated in the public changelog. On 21 October the URL check for custom marker images and place photos was fixed to strip every trailing dot (`localhost..` had passed), released in the v0.17.0-dev pre-releases of 30 October and not yet in a stable release. The photo fetch also resolves the host and refuses private addresses, and marker URLs are fetched by Mapbox's Static Images API, so we read it as hardening and don't deduct. No security.txt, still 404 on 1 November (18)." }, "scores": { "a": 58, "b": 71 } }, { "by": 12, "category": "reliability", "leads": "mapbox", "name": "Reliability", "reasons": { "a": "Hosted lines. incident.io status page at status.geocod.io with five components (Geocodio API, Dashboard, Enterprise API, Enterprise Dashboard, Website) and an incidents feed at /api/v2/incidents.json (20). In the 90 days to 6 November 2026 the feed lists one incident marked major, 'Spreadsheet geocoding jobs are failing' on 27 October from 12:35 to 15:15 UTC, and a PHP security patch on 21 October marked no impact, so one major outage of a core feature (10). 1,000 requests a minute on single geocoding for pay-as-you-go and Flex, 100 on Enterprise Flex (15). 429 carries X-RateLimit-Remaining, -Limit and -Period, and llms.txt and AGENTS.md give a retry rule per status code with capped backoff, plus client-side idempotency guidance for the non-idempotent list and batch writes (15). The pricing page lists custom SLAs as an add-on on Unlimited and Enterprise plans, with no published terms, so no SLA (0). GA (10). 20+10+15+15+0+10 = 70.", "b": "Atlassian Statuspage at status.mapbox.com with an uptime view (20). The history page renders client-side and robots.txt disallows the incidents API, so on 1 November we read the history RSS feed and the incident pages. Two incidents on Navigation (API) fall in the 90 days from 3 August. On 19 October, 19:18 to 19:41 UTC, the Directions and Map Matching APIs in US-East had \"elevated latency and missing route data for a significant portion of regional traffic\" (23 minutes). On 20 October, 14:45 to 15:47 UTC, \"brief, recurring periods of elevated latency and missing route results\" in US-East (62 minutes of intermittent disruption). Neither was a core API down, or wide errors, for an hour or more, so minor only (20, was 30 with nothing after 29 June). Rate limits with numbers, 1,000 geocoding requests a minute by default, and X-Rate-Limit-Interval, -Limit and -Reset headers on responses, re-read on 1 November (15). A 429 on overrun with a reset timestamp to wait for, but no Retry-After and no backoff guidance (10). A published Service Level Agreement (last updated 15 April 2024) at mapbox.com/legal/sla gives customers with an executed order 99.9 per cent monthly availability per API, with service credits of 10 and 25 per cent. The 1 October to 17 October checks looked only at the pricing page and the API docs (10, was 0). The REST APIs are GA, but the MCP server is at 0.16 and its place_details_tool calls the Places API Details endpoint, which Mapbox still labels Public Preview with a contract subject to change (7). 20+20+15+10+10+7 = 82." }, "scores": { "a": 70, "b": 82 } }, { "by": 8, "category": "ergonomics", "leads": "mapbox", "name": "Agent ergonomics", "reasons": { "a": "API reading. `limit`, opt-in `fields` appends and `stable_address_key` re-lookups size responses and cost, and results are ordered best first (20). Batches of 10,000 lookups, Lists for 10 million, distance filters (max_distance, max_results, order_by) and paginated list listings (17). Codes 403, 422, 429 and 500 each carry a documented meaning and retry rule, error bodies link a help page, and `_warnings` reports ignored parameters (18). Geocoding reads are safe to retry, but there's no idempotency key on batch or list creation and AGENTS.md says a retried request is billed again (10). One required parameter on a single geocode, and official libraries for Python, Node, PHP and Ruby plus a CLI with `--agent` output (15). 20+17+18+10+15 = 80.", "b": "29 core MCP tools in 0.16.0, still the latest stable release on 1 November, so 15, plus 5 back for --enable-tools and --disable-tools on the local server. The docs don't say the hosted endpoint can filter tools (20). limit, types, bbox and proximity on geocoding, and a v6 batch endpoint (18). Documented status codes with messages an agent can act on, such as 'Query exceeded character limit of 200' (17). Every tool carries readOnlyHint true, destructiveHint false and idempotentHint, and 17 offline geometry tools set openWorldHint false (20). Few required parameters and the server elicits a route choice when the client supports it. Since 0.16.0 large directions and isochrone results return a short ref that any server process can answer, and descriptions no longer tell the model to avoid other tools or web search. Official SDKs are JavaScript and the mobile SDKs, with no current official Python client that we found (13)." }, "scores": { "a": 80, "b": 88 } }, { "by": 7, "category": "schema", "leads": "geocodio", "name": "Schema \u0026 documentation", "reasons": { "a": "OpenAPI 3.0.1 spec, version 2.1.0, with 11 paths (25). llms.txt and an AGENTS.md written for agents (10). llms.txt and AGENTS.md say when to use each endpoint and when not to, such as the Lists API over looping single calls, the upload tool for a one-off spreadsheet and straightline over driving distance unless road distance is needed (19). Typed parameters with country values, component fields and documented limits, though `fields` is a comma-separated string (12). Error table with retry guidance, examples throughout, but the spec documents 200, 400, 403, 404, 422 and 424 and not 429 or 500 (11). Versioned paths from v1 to v2.1 and a dated public changelog with entries back to 2024 (15). 25+10+19+12+11+15 = 92.", "b": "No public OpenAPI for the REST APIs, but every MCP tool has a typed Zod input and output schema, published as JSON Schema 2020-12 since 0.15.0 (8 October) (20). llms.txt at docs.mapbox.com, re-read on 1 November (10). MCP descriptions say when not to use a tool, for example search_and_geocode_tool sends generic place types to category_search_tool and warns that big-box brand plus address queries are unreliable (17). Zod limits and enums, such as q capped at 200 characters after the team found the API rejects 201 (13). An error table per API with 401, 403, 404, 422 and 429 messages, and curl examples throughout (13). Versioned paths (geocode v6) and a dated MCP CHANGELOG.md, but the top-level API changelog's newest entry is still 5 November 2021, current changes sit in per-service pages, and the MCP guide on docs.mapbox.com still says v0.12.0 on 1 November (12)." }, "scores": { "a": 92, "b": 85 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Dotsquare LLC", "b": "Mapbox", "name": "Vendor" }, { "a": "no (local only)", "b": "https://api.mapbox.com", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP, Streamable HTTP, stdio", "name": "Transports" }, { "a": "API key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "$1600 per month (plan)", "b": "$0.75 per 1,000 requests", "name": "Price for geocoding" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "none", "b": "MIT (MCP server)", "name": "Licence" }, { "a": "none", "b": "29", "name": "Tools exposed" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "io.github.mapbox/mcp-server", "name": "MCP registry" }, { "a": "2026-11-03", "b": "2026-10-15", "name": "Last release" }, { "a": "no date given", "b": "2024-03-31", "name": "Terms last updated" }, { "a": "2018-05-25", "b": "2026-02-11", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "yes", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "21k npm/wk, 921 PyPI/wk", "b": "353 stars, 2k npm/wk", "name": "Popularity" }, { "a": "none", "b": "3.6/5 (8)", "name": "Agent reviews" } ], "faq": [ { "answer": "Mapbox APIs + MCP scores 77.2 (BB) on agent readiness against Geocodio's 72.2 (BB), and leads in 4 of 7 scored categories. Geocodio leads on schema \u0026 documentation.", "question": "Which is better for AI agents, Geocodio or Mapbox APIs + MCP?" }, { "answer": "Geocodio needs an API key. Mapbox APIs + MCP takes an API key or an OAuth sign-in.", "question": "Do Geocodio and Mapbox APIs + MCP need an API key?" }, { "answer": "No hosted endpoint is listed for Geocodio. Mapbox APIs + MCP has a hosted endpoint at https://api.mapbox.com.", "question": "Can an agent call Geocodio and Mapbox APIs + MCP without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 92 against 85" ], "also": null, "goodFor": "Batch geocoding and district or census enrichment of addresses in the US, Canada, Mexico, the UK, Australia and New Zealand, where results must be stored.", "slug": "geocodio", "watchFor": "Covers only the US, Canada, Mexico, the UK, Australia and New Zealand, and UK needs a Flex or Unlimited plan" }, { "aheadOn": [ "Reliability, 82 against 70", "Agent ergonomics, 88 against 80", "Security \u0026 auth, 71 against 58" ], "also": [ "A hosted endpoint, with nothing to install", "Runs on your own machine" ], "goodFor": "An agent that needs search, routing, isochrones, map matching and route optimisation from one vendor with a hosted, OAuth-protected MCP.", "slug": "mapbox", "watchFor": "Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate, and a card on file" } ], "history": { "geocodio": null, "mapbox": [ { "causes": [ "product", "evidence" ], "date": "2026-10-17", "delta": 2.2, "from": 75, "fromGrade": "BB", "to": 77.2, "toGrade": "BB" }, { "causes": [ "method" ], "date": "2026-10-08", "delta": -0.2, "from": 75.2, "fromGrade": "BB", "to": 75, "toGrade": "BB" } ] }, "job": { "capability": "geo.geocode", "name": "Geocoding" }, "others": [ { "json": "https://www.anchorterminal.com/compare/amazon-location-vs-geocodio.json", "title": "Amazon Location Service vs Geocodio", "url": "https://www.anchorterminal.com/compare/amazon-location-vs-geocodio" }, { "json": "https://www.anchorterminal.com/compare/amazon-location-vs-mapbox.json", "title": "Amazon Location Service vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/amazon-location-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/arcgis-vs-geocodio.json", "title": "ArcGIS Location Platform vs Geocodio", "url": "https://www.anchorterminal.com/compare/arcgis-vs-geocodio" }, { "json": "https://www.anchorterminal.com/compare/arcgis-vs-mapbox.json", "title": "ArcGIS Location Platform vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/arcgis-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/azure-maps-vs-geocodio.json", "title": "Azure Maps vs Geocodio", "url": "https://www.anchorterminal.com/compare/azure-maps-vs-geocodio" }, { "json": "https://www.anchorterminal.com/compare/azure-maps-vs-mapbox.json", "title": "Azure Maps vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/azure-maps-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/geoapify-vs-geocodio.json", "title": "Geoapify Location Platform + MCP vs Geocodio", "url": "https://www.anchorterminal.com/compare/geoapify-vs-geocodio" }, { "json": "https://www.anchorterminal.com/compare/geoapify-vs-mapbox.json", "title": "Geoapify Location Platform + MCP vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/geoapify-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/geocodio-vs-google-maps-platform.json", "title": "Geocodio vs Google Maps Platform + Grounding Lite MCP", "url": "https://www.anchorterminal.com/compare/geocodio-vs-google-maps-platform" }, { "json": "https://www.anchorterminal.com/compare/geocodio-vs-here-location-services.json", "title": "Geocodio vs HERE Location Services", "url": "https://www.anchorterminal.com/compare/geocodio-vs-here-location-services" }, { "json": "https://www.anchorterminal.com/compare/geocodio-vs-locationiq.json", "title": "Geocodio vs LocationIQ", "url": "https://www.anchorterminal.com/compare/geocodio-vs-locationiq" }, { "json": "https://www.anchorterminal.com/compare/geocodio-vs-mapquest.json", "title": "Geocodio vs MapQuest", "url": "https://www.anchorterminal.com/compare/geocodio-vs-mapquest" }, { "json": "https://www.anchorterminal.com/compare/geocodio-vs-maptiler.json", "title": "Geocodio vs MapTiler Cloud", "url": "https://www.anchorterminal.com/compare/geocodio-vs-maptiler" }, { "json": "https://www.anchorterminal.com/compare/geocodio-vs-nextbillion.json", "title": "Geocodio vs NextBillion.ai", "url": "https://www.anchorterminal.com/compare/geocodio-vs-nextbillion" }, { "json": "https://www.anchorterminal.com/compare/geocodio-vs-nominatim.json", "title": "Geocodio vs Nominatim", "url": "https://www.anchorterminal.com/compare/geocodio-vs-nominatim" }, { "json": "https://www.anchorterminal.com/compare/geocodio-vs-opencage.json", "title": "Geocodio vs OpenCage Geocoding API", "url": "https://www.anchorterminal.com/compare/geocodio-vs-opencage" }, { "json": "https://www.anchorterminal.com/compare/geocodio-vs-radar.json", "title": "Geocodio vs Radar", "url": "https://www.anchorterminal.com/compare/geocodio-vs-radar" }, { "json": "https://www.anchorterminal.com/compare/geocodio-vs-stadia-maps.json", "title": "Geocodio vs Stadia Maps", "url": "https://www.anchorterminal.com/compare/geocodio-vs-stadia-maps" }, { "json": "https://www.anchorterminal.com/compare/geocodio-vs-tomtom.json", "title": "Geocodio vs TomTom Maps APIs + MCP", "url": "https://www.anchorterminal.com/compare/geocodio-vs-tomtom" }, { "json": "https://www.anchorterminal.com/compare/geocodio-vs-woosmap.json", "title": "Geocodio vs Woosmap", "url": "https://www.anchorterminal.com/compare/geocodio-vs-woosmap" }, { "json": "https://www.anchorterminal.com/compare/google-maps-platform-vs-mapbox.json", "title": "Google Maps Platform + Grounding Lite MCP vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/google-maps-platform-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/here-location-services-vs-mapbox.json", "title": "HERE Location Services vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/here-location-services-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/locationiq-vs-mapbox.json", "title": "LocationIQ vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/locationiq-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-mapquest.json", "title": "Mapbox APIs + MCP vs MapQuest", "url": "https://www.anchorterminal.com/compare/mapbox-vs-mapquest" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-maptiler.json", "title": "Mapbox APIs + MCP vs MapTiler Cloud", "url": "https://www.anchorterminal.com/compare/mapbox-vs-maptiler" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-nextbillion.json", "title": "Mapbox APIs + MCP vs NextBillion.ai", "url": "https://www.anchorterminal.com/compare/mapbox-vs-nextbillion" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-nominatim.json", "title": "Mapbox APIs + MCP vs Nominatim", "url": "https://www.anchorterminal.com/compare/mapbox-vs-nominatim" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-opencage.json", "title": "Mapbox APIs + MCP vs OpenCage Geocoding API", "url": "https://www.anchorterminal.com/compare/mapbox-vs-opencage" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-radar.json", "title": "Mapbox APIs + MCP vs Radar", "url": "https://www.anchorterminal.com/compare/mapbox-vs-radar" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-stadia-maps.json", "title": "Mapbox APIs + MCP vs Stadia Maps", "url": "https://www.anchorterminal.com/compare/mapbox-vs-stadia-maps" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-tomtom.json", "title": "Mapbox APIs + MCP vs TomTom Maps APIs + MCP", "url": "https://www.anchorterminal.com/compare/mapbox-vs-tomtom" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-woosmap.json", "title": "Mapbox APIs + MCP vs Woosmap", "url": "https://www.anchorterminal.com/compare/mapbox-vs-woosmap" } ], "panel": null, "scores": [ { "by": 12, "edge": "mapbox", "geocodio": 70, "key": "reliability", "mapbox": 82, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 7, "edge": "geocodio", "geocodio": 92, "key": "schema", "mapbox": 85, "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 8, "edge": "mapbox", "geocodio": 80, "key": "ergonomics", "mapbox": 88, "name": "Agent ergonomics", "weight": 13 }, { "by": 13, "edge": "mapbox", "geocodio": 58, "key": "security", "mapbox": 71, "name": "Security \u0026 auth", "weight": 14 }, { "by": 0, "edge": "", "geocodio": 40, "key": "payments", "mapbox": 40, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 4, "edge": "mapbox", "geocodio": 86, "key": "maintenance", "mapbox": 90, "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 3, "edge": "geocodio", "geocodio": 87, "key": "transparency", "mapbox": 84, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Mapbox APIs + MCP scores 77.2 (BB) on agent readiness against Geocodio's 72.2 (BB), and leads in 4 of 7 scored categories. Geocodio leads on schema \u0026 documentation. Both do geocoding.", "tasks": null, "tutorials": [], "verdicts": { "geocodio": "Geocodio publishes llms.txt, an AGENTS.md on cost and retries, an OpenAPI spec and a dated changelog, and its results may be stored permanently. Coverage stops at six countries, there's no MCP server or published SLA for self-serve plans, and the docs still put the key in the query string by default.", "mapbox": "Official MCP server, hosted at mcp.mapbox.com with OAuth or run locally, listed in the MCP registry. Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/geocodio-vs-mapbox", "json": "https://www.anchorterminal.com/compare/geocodio-vs-mapbox.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/geocodio-vs-mapbox.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/geocodio-vs-mapbox.min.md" }, "markdown": "Mapbox APIs + MCP scores 77.2 (BB) on agent readiness against Geocodio's 72.2 (BB), and leads in 4 of 7 scored categories. Geocodio leads on schema \u0026 documentation. Both do geocoding.\n\n- Geocodio: grade BB, 72.2/100, rank #138 of 1510. Markdown https://www.anchorterminal.com/tools/geocodio.md · JSON https://www.anchorterminal.com/api/v1/tools/geocodio.json\n- Mapbox APIs + MCP: grade BB, 77.2/100, rank #35 of 1510. Markdown https://www.anchorterminal.com/tools/mapbox.md · JSON https://www.anchorterminal.com/api/v1/tools/mapbox.json\n- Best maps, geocoding and places APIs for AI agents: https://www.anchorterminal.com/best/maps/index.md\n- All 153 maps comparisons: https://www.anchorterminal.com/compare/maps/index.md\n\n## Which one, for what\n\n### Geocodio (BB)\n\nGood for: Batch geocoding and district or census enrichment of addresses in the US, Canada, Mexico, the UK, Australia and New Zealand, where results must be stored.\n\nAhead on:\n- Schema \u0026 documentation, 92 against 85\n\nWatch for: Covers only the US, Canada, Mexico, the UK, Australia and New Zealand, and UK needs a Flex or Unlimited plan\n\n### Mapbox APIs + MCP (BB)\n\nGood for: An agent that needs search, routing, isochrones, map matching and route optimisation from one vendor with a hosted, OAuth-protected MCP.\n\nAhead on:\n- Reliability, 82 against 70\n- Agent ergonomics, 88 against 80\n- Security \u0026 auth, 71 against 58\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- Runs on your own machine\n\nWatch for: Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate, and a card on file\n\n\n## Why the edge\n\n### Security \u0026 auth: Mapbox APIs + MCP +13\n\n- Geocodio (58): Revocable keys, five on pay-as-you-go, each with permissions (Lists and Distance off by default), which earns 25. Less 10 because the docs say 'All requests require \u0026api_key=YOUR_API_KEY' and the OpenAPI spec defines only the query scheme, though an Authorization header has worked since March 2025 (15). Per-key permissions limit what a key can reach. DELETE on lists and distance jobs needs no confirmation (13). Results are addresses and government district, census and legislator data rather than user-written text. No prompt-injection guidance found (9). Usage per API key in the dashboard, downloadable as CSV, and billable-lookup headers on every response (8). Valid security.txt to 30 January 2030 with a PGP key and a responsible disclosure policy. SOC 2 Type II and annual penetration tests apply to the Enterprise platform only. No bug bounty found (13). 15+13+9+8+13 = 58.\n- Mapbox APIs + MCP (71): Public and secret tokens with scopes, URL restrictions, one-hour temporary tokens and documented rotation, which earns 30. Less 10 because the REST APIs take the token as the access_token query parameter, and that's the documented way in. The hosted MCP signs in with OAuth instead. Accounts on the card-free trial get a single token they can't rotate or delete until a payment method is added (20). Public-scope tokens can't change the account, and every MCP tool is read-only (18). Responses are structured place data, partly third-party POI names and attributes, and we found no prompt-injection guidance (7). The local MCP emits OpenTelemetry traces per tool call tagged with the client name. We didn't check per-token usage reporting in the account (8). SOC 2 Type II and SOC 3, a HackerOne bug bounty and a disclosure programme, re-read on 1 November. MCP 0.13.0 on 30 July 2026 fixed a query-parameter injection through directions_tool's exclude field, and 0.15.0 on 8 October shipped the fix for reads of cached tool results by anyone who knew a resource URI and could forge the owner's username claim, with a narrowed map CSP. 0.16.0 on 15 October replaced those cached refs for directions and isochrones with refs that re-run the request under the reader's token, and fetches place photos server-side only from public https hosts. All were stated in the public changelog. On 21 October the URL check for custom marker images and place photos was fixed to strip every trailing dot (`localhost..` had passed), released in the v0.17.0-dev pre-releases of 30 October and not yet in a stable release. The photo fetch also resolves the host and refuses private addresses, and marker URLs are fetched by Mapbox's Static Images API, so we read it as hardening and don't deduct. No security.txt, still 404 on 1 November (18).\n\n### Reliability: Mapbox APIs + MCP +12\n\n- Geocodio (70): Hosted lines. incident.io status page at status.geocod.io with five components (Geocodio API, Dashboard, Enterprise API, Enterprise Dashboard, Website) and an incidents feed at /api/v2/incidents.json (20). In the 90 days to 6 November 2026 the feed lists one incident marked major, 'Spreadsheet geocoding jobs are failing' on 27 October from 12:35 to 15:15 UTC, and a PHP security patch on 21 October marked no impact, so one major outage of a core feature (10). 1,000 requests a minute on single geocoding for pay-as-you-go and Flex, 100 on Enterprise Flex (15). 429 carries X-RateLimit-Remaining, -Limit and -Period, and llms.txt and AGENTS.md give a retry rule per status code with capped backoff, plus client-side idempotency guidance for the non-idempotent list and batch writes (15). The pricing page lists custom SLAs as an add-on on Unlimited and Enterprise plans, with no published terms, so no SLA (0). GA (10). 20+10+15+15+0+10 = 70.\n- Mapbox APIs + MCP (82): Atlassian Statuspage at status.mapbox.com with an uptime view (20). The history page renders client-side and robots.txt disallows the incidents API, so on 1 November we read the history RSS feed and the incident pages. Two incidents on Navigation (API) fall in the 90 days from 3 August. On 19 October, 19:18 to 19:41 UTC, the Directions and Map Matching APIs in US-East had \"elevated latency and missing route data for a significant portion of regional traffic\" (23 minutes). On 20 October, 14:45 to 15:47 UTC, \"brief, recurring periods of elevated latency and missing route results\" in US-East (62 minutes of intermittent disruption). Neither was a core API down, or wide errors, for an hour or more, so minor only (20, was 30 with nothing after 29 June). Rate limits with numbers, 1,000 geocoding requests a minute by default, and X-Rate-Limit-Interval, -Limit and -Reset headers on responses, re-read on 1 November (15). A 429 on overrun with a reset timestamp to wait for, but no Retry-After and no backoff guidance (10). A published Service Level Agreement (last updated 15 April 2024) at mapbox.com/legal/sla gives customers with an executed order 99.9 per cent monthly availability per API, with service credits of 10 and 25 per cent. The 1 October to 17 October checks looked only at the pricing page and the API docs (10, was 0). The REST APIs are GA, but the MCP server is at 0.16 and its place_details_tool calls the Places API Details endpoint, which Mapbox still labels Public Preview with a contract subject to change (7). 20+20+15+10+10+7 = 82.\n\n### Agent ergonomics: Mapbox APIs + MCP +8\n\n- Geocodio (80): API reading. `limit`, opt-in `fields` appends and `stable_address_key` re-lookups size responses and cost, and results are ordered best first (20). Batches of 10,000 lookups, Lists for 10 million, distance filters (max_distance, max_results, order_by) and paginated list listings (17). Codes 403, 422, 429 and 500 each carry a documented meaning and retry rule, error bodies link a help page, and `_warnings` reports ignored parameters (18). Geocoding reads are safe to retry, but there's no idempotency key on batch or list creation and AGENTS.md says a retried request is billed again (10). One required parameter on a single geocode, and official libraries for Python, Node, PHP and Ruby plus a CLI with `--agent` output (15). 20+17+18+10+15 = 80.\n- Mapbox APIs + MCP (88): 29 core MCP tools in 0.16.0, still the latest stable release on 1 November, so 15, plus 5 back for --enable-tools and --disable-tools on the local server. The docs don't say the hosted endpoint can filter tools (20). limit, types, bbox and proximity on geocoding, and a v6 batch endpoint (18). Documented status codes with messages an agent can act on, such as 'Query exceeded character limit of 200' (17). Every tool carries readOnlyHint true, destructiveHint false and idempotentHint, and 17 offline geometry tools set openWorldHint false (20). Few required parameters and the server elicits a route choice when the client supports it. Since 0.16.0 large directions and isochrone results return a short ref that any server process can answer, and descriptions no longer tell the model to avoid other tools or web search. Official SDKs are JavaScript and the mobile SDKs, with no current official Python client that we found (13).\n\n### Schema \u0026 documentation: Geocodio +7\n\n- Geocodio (92): OpenAPI 3.0.1 spec, version 2.1.0, with 11 paths (25). llms.txt and an AGENTS.md written for agents (10). llms.txt and AGENTS.md say when to use each endpoint and when not to, such as the Lists API over looping single calls, the upload tool for a one-off spreadsheet and straightline over driving distance unless road distance is needed (19). Typed parameters with country values, component fields and documented limits, though `fields` is a comma-separated string (12). Error table with retry guidance, examples throughout, but the spec documents 200, 400, 403, 404, 422 and 424 and not 429 or 500 (11). Versioned paths from v1 to v2.1 and a dated public changelog with entries back to 2024 (15). 25+10+19+12+11+15 = 92.\n- Mapbox APIs + MCP (85): No public OpenAPI for the REST APIs, but every MCP tool has a typed Zod input and output schema, published as JSON Schema 2020-12 since 0.15.0 (8 October) (20). llms.txt at docs.mapbox.com, re-read on 1 November (10). MCP descriptions say when not to use a tool, for example search_and_geocode_tool sends generic place types to category_search_tool and warns that big-box brand plus address queries are unreliable (17). Zod limits and enums, such as q capped at 200 characters after the team found the API rejects 201 (13). An error table per API with 401, 403, 404, 422 and 429 messages, and curl examples throughout (13). Versioned paths (geocode v6) and a dated MCP CHANGELOG.md, but the top-level API changelog's newest entry is still 5 November 2021, current changes sit in per-service pages, and the MCP guide on docs.mapbox.com still says v0.12.0 on 1 November (12).\n\n## Score by category\n\n| Category | Weight | Geocodio | Mapbox APIs + MCP | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 70 | 82 | Mapbox APIs + MCP +12 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 92 | 85 | Geocodio +7 |\n| Agent ergonomics | 13% (16.2 this run) | 80 | 88 | Mapbox APIs + MCP +8 |\n| Security \u0026 auth | 14% (17.5 this run) | 58 | 71 | Mapbox APIs + MCP +13 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 40 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 86 | 90 | Mapbox APIs + MCP +4 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 87 | 84 | Geocodio +3 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **72.2 · BB** | **77.2 · BB** | |\n\n## Facts side by side\n\n| Fact | Geocodio | Mapbox APIs + MCP |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Dotsquare LLC | Mapbox |\n| Hosted endpoint | no (local only) | `https://api.mapbox.com` |\n| Transports | HTTP | HTTP, Streamable HTTP, stdio |\n| Auth | API key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| Price for geocoding | $1600 per month (plan) | $0.75 per 1,000 requests |\n| x402 | no | no |\n| Licence | none | MIT (MCP server) |\n| Tools exposed | none | 29 |\n| Read-only variant documented | no | yes |\n| llms.txt | yes | yes |\n| MCP registry | not listed | `io.github.mapbox/mcp-server` |\n| Last release | 2026-11-03 | 2026-10-15 |\n| Terms last updated | no date given | 2024-03-31 |\n| Privacy policy last updated | 2018-05-25 | 2026-02-11 |\n| Customer content may train models | not found in the text | yes |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | yes | not found in the text |\n| Terms or service can change without notice | yes | yes |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 21k npm/wk, 921 PyPI/wk | 353 stars, 2k npm/wk |\n| Agent reviews | none | 3.6/5 (8) |\n\n## How the scores have moved\n\n### Geocodio\n\nNo score change since it was listed.\n\n### Mapbox APIs + MCP\n\n- +2.2 on 17 October 2026: product, new evidence\n- -0.2 on 8 October 2026: checklist\n\n## Verdicts\n\n**Geocodio.** Geocodio publishes llms.txt, an AGENTS.md on cost and retries, an OpenAPI spec and a dated changelog, and its results may be stored permanently. Coverage stops at six countries, there's no MCP server or published SLA for self-serve plans, and the docs still put the key in the query string by default.\n\n**Mapbox APIs + MCP.** Official MCP server, hosted at mcp.mapbox.com with OAuth or run locally, listed in the MCP registry. Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate.\n\n## Before you call either\n\n### Geocodio\n\n1. Always set `country`, because an address with none falls back to the US and is billed even when it's wrong\n2. Send the key as `Authorization: Bearer`, not in the query string, so it stays out of logs\n3. Use batch POST /geocode (up to 10,000 lookups) or the Lists API rather than looping single requests\n4. Treat accuracy_type place, county or state as not found, and check `_warnings` for appends that were billed but skipped\n5. Don't retry 403 or 422. On 429 read X-RateLimit headers and back off, and never re-upload a list sitting in ENQUEUED\n\n### Mapbox APIs + MCP\n\n1. Set permanent=true only when the result goes into a database, since it moves the call to the $5 per 1,000 rate\n2. Keep search_and_geocode_tool queries under 200 characters, the live limit, not the 256 the API docs state\n3. On 429, wait until the X-Rate-Limit-Reset timestamp, since no Retry-After is sent\n4. Run the local server with --enable-tools to load only the tools the task needs\n5. On a trial account without a card, expect lower limits and no permanent geocoding; check the Console usage before batch work\n\n## Questions\n\n### Which is better for AI agents, Geocodio or Mapbox APIs + MCP?\n\nMapbox APIs + MCP scores 77.2 (BB) on agent readiness against Geocodio's 72.2 (BB), and leads in 4 of 7 scored categories. Geocodio leads on schema \u0026 documentation.\n\n### Do Geocodio and Mapbox APIs + MCP need an API key?\n\nGeocodio needs an API key. Mapbox APIs + MCP takes an API key or an OAuth sign-in.\n\n### Can an agent call Geocodio and Mapbox APIs + MCP without installing anything?\n\nNo hosted endpoint is listed for Geocodio. Mapbox APIs + MCP has a hosted endpoint at https://api.mapbox.com.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/geocodio-vs-mapbox.json, and with the fewest tokens: https://www.anchorterminal.com/compare/geocodio-vs-mapbox.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"geocodio\", \"b\": \"mapbox\"}`. From a terminal: `anchor compare geocodio mapbox`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/geocodio.json and https://www.anchorterminal.com/api/v1/tools/mapbox.json\n\n## Other comparisons with Geocodio or Mapbox APIs + MCP\n\n- [Amazon Location Service vs Geocodio](https://www.anchorterminal.com/compare/amazon-location-vs-geocodio.md)\n- [Amazon Location Service vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/amazon-location-vs-mapbox.md)\n- [ArcGIS Location Platform vs Geocodio](https://www.anchorterminal.com/compare/arcgis-vs-geocodio.md)\n- [ArcGIS Location Platform vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/arcgis-vs-mapbox.md)\n- [Azure Maps vs Geocodio](https://www.anchorterminal.com/compare/azure-maps-vs-geocodio.md)\n- [Azure Maps vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/azure-maps-vs-mapbox.md)\n- [Geoapify Location Platform + MCP vs Geocodio](https://www.anchorterminal.com/compare/geoapify-vs-geocodio.md)\n- [Geoapify Location Platform + MCP vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/geoapify-vs-mapbox.md)\n- [Geocodio vs Google Maps Platform + Grounding Lite MCP](https://www.anchorterminal.com/compare/geocodio-vs-google-maps-platform.md)\n- [Geocodio vs HERE Location Services](https://www.anchorterminal.com/compare/geocodio-vs-here-location-services.md)\n- [Geocodio vs LocationIQ](https://www.anchorterminal.com/compare/geocodio-vs-locationiq.md)\n- [Geocodio vs MapQuest](https://www.anchorterminal.com/compare/geocodio-vs-mapquest.md)\n- [Geocodio vs MapTiler Cloud](https://www.anchorterminal.com/compare/geocodio-vs-maptiler.md)\n- [Geocodio vs NextBillion.ai](https://www.anchorterminal.com/compare/geocodio-vs-nextbillion.md)\n- [Geocodio vs Nominatim](https://www.anchorterminal.com/compare/geocodio-vs-nominatim.md)\n- [Geocodio vs OpenCage Geocoding API](https://www.anchorterminal.com/compare/geocodio-vs-opencage.md)\n- [Geocodio vs Radar](https://www.anchorterminal.com/compare/geocodio-vs-radar.md)\n- [Geocodio vs Stadia Maps](https://www.anchorterminal.com/compare/geocodio-vs-stadia-maps.md)\n- [Geocodio vs TomTom Maps APIs + MCP](https://www.anchorterminal.com/compare/geocodio-vs-tomtom.md)\n- [Geocodio vs Woosmap](https://www.anchorterminal.com/compare/geocodio-vs-woosmap.md)\n- [Google Maps Platform + Grounding Lite MCP vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/google-maps-platform-vs-mapbox.md)\n- [HERE Location Services vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/here-location-services-vs-mapbox.md)\n- [LocationIQ vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/locationiq-vs-mapbox.md)\n- [Mapbox APIs + MCP vs MapQuest](https://www.anchorterminal.com/compare/mapbox-vs-mapquest.md)\n- [Mapbox APIs + MCP vs MapTiler Cloud](https://www.anchorterminal.com/compare/mapbox-vs-maptiler.md)\n- [Mapbox APIs + MCP vs NextBillion.ai](https://www.anchorterminal.com/compare/mapbox-vs-nextbillion.md)\n- [Mapbox APIs + MCP vs Nominatim](https://www.anchorterminal.com/compare/mapbox-vs-nominatim.md)\n- [Mapbox APIs + MCP vs OpenCage Geocoding API](https://www.anchorterminal.com/compare/mapbox-vs-opencage.md)\n- [Mapbox APIs + MCP vs Radar](https://www.anchorterminal.com/compare/mapbox-vs-radar.md)\n- [Mapbox APIs + MCP vs Stadia Maps](https://www.anchorterminal.com/compare/mapbox-vs-stadia-maps.md)\n- [Mapbox APIs + MCP vs TomTom Maps APIs + MCP](https://www.anchorterminal.com/compare/mapbox-vs-tomtom.md)\n- [Mapbox APIs + MCP vs Woosmap](https://www.anchorterminal.com/compare/mapbox-vs-woosmap.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Geocodio vs Mapbox APIs + MCP", "url": "" } ], "description": "Mapbox scores 77.2 (BB) to Geocodio's 72.2 (BB) for geocoding. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Geocodio BB 72.2", "Mapbox APIs + MCP BB 77.2", "scores" ], "h1": "Geocodio vs Mapbox APIs + MCP", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/geocodio-vs-mapbox", "published": "2026-10-01", "section": "tools", "title": "Geocodio vs Mapbox for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/geocodio-vs-mapbox" }, "tokens": { "markdown": 4900, "slim": 2880 }, "version": 1 }