{ "data": { "a": { "slug": "karrio", "name": "Karrio", "vendor": "Karrio, Inc.", "vendorUrl": "https://www.karrio.io", "kind": "http-api", "category": "shipping", "summary": "Karrio is an open-source multi-carrier shipping server from Karrio, Inc. Its REST API quotes rates, buys labels, tracks parcels and books pickups through the owner's own carrier accounts, self-hosted with Docker or run by Karrio as a paid platform.", "url": "https://www.anchorterminal.com/tools/karrio", "markdownUrl": "https://www.anchorterminal.com/tools/karrio.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/karrio.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/karrio.json", "repo": "https://github.com/karrioapi/karrio", "license": "LGPL-3.0 for the server, SDK and modules. Code under `ee/` is under the Karrio Enterprise licence and needs a subscription for production use. The MCP package in `packages/mcp` is Apache-2.0", "transports": [ "http" ], "packages": [ { "registry": "pypi", "name": "karrio" }, { "registry": "pypi", "name": "karrio-server" }, { "registry": "oci", "name": "karrio/server" } ], "auth": "api-key", "authNotes": "A private API key from the instance's dashboard, sent as the HTTP Basic username with no password or as `Authorization: Token key_...`. Keys carry a label and are bound to test or live mode, and the docs say a private key can perform any request without restriction. A JWT pair is also issued by `POST /api/token` for an email and password. On a self-hosted instance the owner creates the first account, so no approval from Karrio is involved. The managed platform is reached through a demo booking.", "pricing": "freemium", "pricingNotes": "Free when self-hosted under LGPL-3.0, with carrier postage billed by the owner's own carrier accounts. The platform page says the managed Scale platform starts at $499 a month with pay-as-you-go pricing and a commercial licence for embedding starts at $50,000 a year, with no unit prices published. An agent can start on a self-hosted instance in test mode with no contract. The managed platform has no self-serve signup, only a demo booking (checked 2026-10-08).", "priceSummary": "$499 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the repository, the OpenAPI file, the docs or the platform page (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 799, "npmWeekly": null, "pypiWeekly": 338, "asOf": "2026-10-08" }, "docsUrl": "https://www.karrio.io/docs", "openapi": "https://raw.githubusercontent.com/karrioapi/karrio/main/schemas/openapi.yml", "capabilities": [ "shipping.rates", "shipping.labels", "shipping.tracking", "shipping.returns" ], "tags": [ "open-source", "self-hosted", "api-key", "openapi", "graphql", "webhooks", "sandbox", "docker", "python", "mcp" ], "lastRelease": "2026-06-23", "graded": true, "anchor": { "graded": true, "score": 48.7, "grade": "D", "agentReady": false, "rank": 617, "ranked": true, "rankOf": 722, "categoryRank": 8, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 57, "maintenance": 29, "payments": 40, "reliability": 76, "schema": 68, "security": 44, "transparency": 56 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -7, "negativeNotes": [ "12 March to 23 June 2026. Versions 2026.1.22 to 2026.1.31 applied an MD5 `PASSWORD_HASHERS` override outside the test runner, so production instances stored MD5 password hashes. Fixed in 2026.1.32 and described in the changelog, with no published advisory, so 4 of a possible 15 (https://github.com/karrioapi/karrio/blob/main/CHANGELOG.md).", "8 October 2026. The README and the MCP guide tell users to run `npx karrio-mcp` and `npx -y @karrio/mcp`, and the npm registry answers 404 for both. The examples' API host `api.karrio.io` didn't resolve the same day. 3 for a claim the listing can't meet (https://registry.npmjs.org/@karrio%2fmcp, https://www.karrio.io/docs/developing/mcp-server)." ], "verdict": "A current OpenAPI 3.0.3 contract with 65 paths, a free LGPL-3.0 server and 30 carrier connectors suit a team that hosts it. The last release was 23 June 2026, the `@karrio/mcp` package the docs install is absent from npm, and `api.karrio.io` didn't resolve on 8 October 2026.", "bestFor": "A team that wants to host its own multi-carrier API with its own carrier contracts and can maintain a Django and PostgreSQL stack.", "strengths": [ "OpenAPI 3.0.3 contract in the repository at version 2026.1.32, with 65 paths covering rates, shipments, trackers, pickups, manifests, orders, documents and webhooks", "The core server and SDK are LGPL-3.0 and run on the owner's infrastructure with Docker Compose, with no fee to Karrio", "30 carrier connectors in `modules/connectors`, among them UPS, FedEx, USPS, DHL Express, Canada Post, DPD and Australia Post, used with the owner's own carrier accounts", "API keys are bound to test or live mode, and test mode runs rates, labels, trackers and pickups against carrier sandboxes", "Default throttles are in the settings file with numbers (600 requests a minute per user, 300 for carrier calls) and can be changed by environment variable" ], "weaknesses": [ "No release since 2026.1.32 on 23 June 2026, 107 days before this check, and fix pull requests opened in September 2026 were still open", "Neither `@karrio/mcp` nor `karrio-mcp` exists on npm, though the README and the MCP guide give `npx` commands for them", "`api.karrio.io` didn't resolve and `app.karrio.io` answered 503 with a paused deployment on 8 October 2026, and the managed platform starts with a demo booking", "Versions 2026.1.22 to 2026.1.31 stored passwords as MD5 hashes in production, fixed in 2026.1.32 with a changelog line and no published advisory", "No idempotency keys were found, and a private API key can perform any request. Team permissions and audit logging sit in the paid `ee/` code" ], "agentNotes": [ "Run your own instance with Docker Compose and call it at `http://localhost:5002`. Don't rely on `api.karrio.io`, which didn't resolve on 8 October 2026", "Don't run `npx karrio-mcp` or `npx -y @karrio/mcp`. Neither name is published on npm, so build the server from `packages/mcp` in the repository", "Change the default `admin@example.com` and `demo` login before the instance is reachable, and upgrade to 2026.1.32 or later so passwords aren't stored as MD5", "Don't blind-retry `POST /v1/shipments` with a `service` set or `POST /v1/shipments/{id}/purchase`. Fetch the shipment and check its status first, since no idempotency key exists", "Use a test-mode API key while building. Send it as the HTTP Basic username or as `Authorization: Token key_...`" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 48.7 } ], "editorialScores": { "ergonomics": 57, "maintenance": 29, "payments": 40, "reliability": 76, "schema": 68, "security": 44, "transparency": 59 }, "provenanceScore": 53 }, "connect": { "install": "git clone --depth 1 https://github.com/karrioapi/karrio\ncd karrio\ngit submodule update --init community\ncd docker\ndocker compose up", "http": "curl http://localhost:5002/v1/shipments \\\n -u key_xxxxxx:" }, "letme": { "capability": "https://letme.dev/shipping.rates", "tool": "https://letme.dev/karrio" }, "area": "business", "unitPrices": [ { "item": "Open-source edition, self-hosted", "unit": "month", "usd": 0, "note": "LGPL-3.0, you pay for your own hosting and carrier postage" }, { "item": "Scale managed platform, starting price", "unit": "month", "usd": 499, "note": "plus pay-as-you-go usage with no published unit price, by demo booking" } ], "provenance": { "legalEntity": "Karrio, Inc.", "domain": "karrio.io", "domainRegistered": "2022-01-20", "endpointOnVendorDomain": false, "terms": "https://www.karrio.io/terms-of-service", "privacy": "https://www.karrio.io/privacy-policy", "statusPage": "", "changelog": "https://github.com/karrioapi/karrio/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The Customer Terms and Conditions (last modified 8 April 2025) name Karrio, Inc., a Delaware corporation at 760 Chemin Marie-Le Ber, Verdun, Quebec, Canada, and govern the hosted platform. The self-hosted open-source edition is governed by LGPL-3.0, and `LICENSE_EE` points `ee/` users to the subscription terms at docs.karrio.io/product/resources/terms, an older copy dated 19 April 2022.", "The privacy policy (last modified 8 April 2025) covers karrio.io and associated services and excludes customer data processed on a customer's behalf. No data processing addendum was found.", "The graded surface is an instance on the owner's own host, so the endpoint isn't on the vendor's domain. `api.karrio.io` didn't resolve and `app.karrio.io` returned 503 on 8 October 2026.", "No status page was found. `status.karrio.io` didn't resolve and the site links none.", "www.karrio.io/.well-known/security.txt returns 404. `SECURITY.md` in the repository sends reports to hello@karrio.io.", "The changelog page on www.karrio.io stops at 2024.12.6. `CHANGELOG.md` in the repository is current to 2026.1.32.", "RDAP for karrio.io gives a registration date of 2022-01-20." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/karrio.json" }, "answer": "Shippo scores 61.9 (C) on agent readiness against Karrio's 48.7 (D), and leads in 5 of 7 scored categories. Karrio leads on reliability.", "b": { "slug": "shippo", "name": "Shippo", "vendor": "Shippo", "vendorUrl": "https://goshippo.com", "kind": "http-api", "category": "shipping", "summary": "Multi-carrier shipping API from Shippo. It quotes rates, buys labels, validates addresses, tracks parcels and creates return labels across the carriers it connects, through a REST API, official SDKs and a hosted MCP server.", "url": "https://www.anchorterminal.com/tools/shippo", "markdownUrl": "https://www.anchorterminal.com/tools/shippo.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/shippo.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/shippo.json", "repo": "https://github.com/goshippo/ai", "license": "Proprietary service under Shippo's terms of use. The SDKs and the goshippo/ai repository (skills and MCP bridge) are MIT", "transports": [ "http" ], "remoteUrl": "https://api.goshippo.com", "packages": [ { "registry": "npm", "name": "shippo" }, { "registry": "pypi", "name": "shippo" }, { "registry": "npm", "name": "@shippo/shippo-mcp" } ], "auth": "mixed", "authNotes": "Self-serve API key. A person signs up at apps.goshippo.com/join and creates live (shippo_live_) and test (shippo_test_) keys in the API portal, with no review. Calls send `Authorization: ShippoToken \u003ckey\u003e`. Keys are shown once, can be deleted and replaced, and have no scopes. The hosted MCP server at mcp.shippo.com uses per-user OAuth against the live account, with one scope (\"*\"). OAuth credentials for a platform acting for other Shippo accounts come from the sales team. Client-side apps can use a 12-hour JWT from POST /embedded/authz.", "pricing": "freemium", "pricingNotes": "API Starter has no monthly fee. The first 30 labels a month are free, then 7 cents a label, on top of postage. Calls not tied to a Shippo label are charged per unit (see the price table). API Premier is custom, with volume discounts, through sales. Test mode is free with a test key, so an agent can start without a contract, and billing details are needed for live labels (https://goshippo.com/pricing/api).", "priceSummary": "$0.07 / tx", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API docs, the OpenAPI spec or the pricing page (checked 2026-10-07).", "endpoints": [] }, "toolCount": 4, "popularity": { "githubStars": 3, "npmWeekly": 73114, "pypiWeekly": 20036, "asOf": "2026-10-07" }, "docsUrl": "https://docs.goshippo.com", "llmsTxt": "https://docs.goshippo.com/llms.txt", "openapi": "https://docs.goshippo.com/spec/shippoapi/public-api.yaml", "registryName": "com.shippo/shippo-mcp", "capabilities": [ "shipping.rates", "shipping.labels", "shipping.tracking", "shipping.address-validation", "shipping.returns" ], "tags": [ "hosted", "freemium", "free-tier", "api-key", "oauth", "mcp", "openapi", "llms-txt", "python", "typescript", "java", "webhooks", "sandbox", "status-page", "soc2" ], "lastRelease": "2026-10-01", "graded": true, "anchor": { "graded": true, "score": 61.9, "grade": "C", "agentReady": false, "rank": 355, "ranked": true, "rankOf": 722, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 64, "maintenance": 77, "payments": 40, "reliability": 59, "schema": 83, "security": 52, "transparency": 61 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-07" }, "negative": 0, "verdict": "Per-label and per-call prices are public, test keys are self-serve, and the OpenAPI spec, llms.txt and Markdown docs are open to a fetch. Label purchase has no idempotency key, API keys carry no scopes, and the status page logged carrier-side incidents on most days between July and October 2026.", "bestFor": "An agent that quotes and buys parcel labels across USPS, UPS, FedEx and DHL Express for a small or mid-size shipper, with a free test mode and public unit prices.", "strengths": [ "Public prices per unit, 7 cents a label after 30 free a month, 1 cent a rate request and 2 cents a tracking request", "Test keys (shippo_test_) create free test labels and mock tracking, with data kept apart from live", "OpenAPI 3.1 spec with 71 operations, plus llms.txt and a Markdown copy of each docs page", "Hosted MCP server at mcp.shippo.com with four tools, reads and writes split so a client can require approval for writes", "Rate limits published per endpoint, with separate live and test figures", "SOC 2 Type II and PCI DSS listed on the trust centre, with an annual third-party penetration test" ], "weaknesses": [ "No idempotency key on label purchase or other writes. Only the Reporting API accepts one", "API keys have no scopes or read-only mode, and the OAuth flow has one scope, \"*\"", "The hosted MCP server runs on the live account only, with no test mode", "Carrier-side incidents on the status page on most days from July to October 2026, many marked major or critical", "Terms of use and privacy notice load only with JavaScript, and no SLA or subprocessor list was found", "The Python SDK on PyPI is 3.9.0 from 26 November 2024" ], "agentNotes": [ "Build and test with a shippo_test_ key. Test and live object IDs are separate, and the hosted MCP server has no test mode", "Send `Authorization: ShippoToken \u003ckey\u003e`, not Bearer, and pin `Shippo-API-Version: 2018-02-08`", "Before retrying a failed POST /transactions, list recent transactions. There is no idempotency key, and a second purchase is a second charge", "Pass `async: false` on shipments and transactions, or poll the object until its status leaves QUEUED", "Set `results` on list calls (under 200). Defaults vary by resource, and list calls are limited to 50 a minute on live keys" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 61.9 } ], "editorialScores": { "ergonomics": 64, "maintenance": 77, "payments": 40, "reliability": 59, "schema": 83, "security": 52, "transparency": 38 }, "provenanceScore": 84 }, "connect": { "install": "npm install shippo", "http": "curl https://api.goshippo.com/shipments/ \\\n -H \"Authorization: ShippoToken \u003cAPI_TOKEN\u003e\" \\\n -H \"Content-Type: application/json\" \\\n -d '{...}'", "claudeCode": "claude mcp add --transport http shippo https://mcp.shippo.com", "config": { "mcpServers": { "shippo": { "url": "https://mcp.shippo.com" } } } }, "letme": { "capability": "https://letme.dev/shipping.rates", "tool": "https://letme.dev/shippo" }, "area": "business", "unitPrices": [ { "item": "Label, API Starter, after 30 free a month, plus postage", "unit": "tx", "usd": 0.07 }, { "item": "Rate request not tied to a Shippo label", "unit": "call", "usd": 0.01 }, { "item": "Tracking request not tied to a Shippo label", "unit": "call", "usd": 0.02 }, { "item": "Delivery date estimate", "unit": "call", "usd": 0.03 }, { "item": "US address validation", "unit": "call", "usd": 0.02 }, { "item": "Non-US address validation", "unit": "call", "usd": 0.08 } ], "provenance": { "legalEntity": "Shippo", "domain": "goshippo.com", "domainRegistered": "2013-09-21", "endpointOnVendorDomain": true, "terms": "https://privacy.goshippo.com/policies?name=terms-of-use", "privacy": "https://privacy.goshippo.com/policies?name=privacy-notice", "statusPage": "https://status.goshippo.com", "changelog": "https://docs.goshippo.com/api-concepts/api-change-log", "securityTxt": "none", "checked": "2026-10-07", "notes": [ "The registered legal entity wasn't confirmed. goshippo.com/terms and /privacy redirect to a privacy centre that returns no policy text without JavaScript. The SDK licences name \"Shippo\" as copyright holder.", "RDAP for goshippo.com gives a registration date of 2013-09-21.", "The API answers at api.goshippo.com and the MCP server at mcp.shippo.com, whose OAuth metadata names https://goshippo.com as the authorisation server.", "goshippo.com/.well-known/security.txt and goshippo.com/security both return 404. The trust centre gives security@shippo.com and the AI repository's SECURITY.md gives security@goshippo.com.", "The trust centre at trust.goshippo.com lists a SOC 2 Type II report (November 2024 to November 2025), a 2026 bridge letter and a PCI SAQ-A attestation, each on request." ], "score": 84 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/shippo.json", "live": { "slug": "shippo", "probe": { "target": "https://api.goshippo.com", "method": "get", "lastAt": "2026-10-08T21:12:21.427776141Z", "lastOk": true, "lastStatus": 401, "lastMs": 128, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 148, "p95ms24h": 384, "samples24h": 64, "samples30d": 64, "days": [ { "date": "2026-10-08", "probes": 64, "ok": 64 } ] }, "vendorStatus": { "page": "https://status.goshippo.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-08T21:06:25.756522405Z" }, "versions": [ { "registry": "github", "name": "goshippo/ai", "version": "v1.5.4", "released": "2026-07-23", "seenAt": "2026-10-08T16:29:07.821314571Z" }, { "registry": "npm", "name": "@shippo/shippo-mcp", "version": "3.0.4", "seenAt": "2026-10-08T16:29:06.611030249Z" }, { "registry": "npm", "name": "shippo", "version": "2.18.0", "seenAt": "2026-10-08T16:29:05.577126262Z" }, { "registry": "pypi", "name": "shippo", "version": "3.9.0", "released": "2024-11-26", "seenAt": "2026-10-08T16:29:06.416959144Z" } ], "githubStars": 3, "npmWeekly": 73114, "pypiWeekly": 21417, "securityTxt": { "url": "https://goshippo.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-08T15:38:36.985520401Z" }, "pages": [ { "url": "https://docs.goshippo.com/api-concepts/api-change-log", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:18:46.983268522Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "53c17b5a6325" }, { "url": "https://goshippo.com/pricing/api", "kind": "pricing", "status": 200, "checkedAt": "2026-10-08T18:20:41.663895781Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "bd8848b3951b" }, { "url": "https://privacy.goshippo.com/policies?name=privacy-notice", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:23:20.315284167Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "e3b0c44298fc" }, { "url": "https://privacy.goshippo.com/policies?name=terms-of-use", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:23:22.737042316Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "e3b0c44298fc" } ], "updatedAt": "2026-10-08T21:12:21.427776141Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Karrio, Inc.", "b": "Shippo", "name": "Vendor" }, { "a": "no (local only)", "b": "https://api.goshippo.com", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP", "name": "Transports" }, { "a": "API key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "not published", "b": "$0.01 per call", "name": "Price for shipping rates" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "LGPL-3.0 for the server, SDK and modules. Code under `ee/` is under the Karrio Enterprise licence and needs a subscription for production use. The MCP package in `packages/mcp` is Apache-2.0", "b": "Proprietary service under Shippo's terms of use. The SDKs and the goshippo/ai repository (skills and MCP bridge) are MIT", "name": "Licence" }, { "a": "none", "b": "4", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "com.shippo/shippo-mcp", "name": "MCP registry" }, { "a": "2026-06-23", "b": "2026-10-01", "name": "Last release" }, { "a": "2025-04-08", "b": "couldn't be read", "name": "Terms last updated" }, { "a": "2025-04-08", "b": "couldn't be read", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "couldn't be read", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "couldn't be read", "name": "Terms restrict automated access" }, { "a": "yes", "b": "couldn't be read", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "couldn't be read", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "couldn't be read", "name": "Arbitration or class-action waiver" }, { "a": "799 stars, 338 PyPI/wk", "b": "3 stars, 73k npm/wk, 20k PyPI/wk", "name": "Popularity" } ], "faq": [ { "answer": "Shippo scores 61.9 (C) on agent readiness against Karrio's 48.7 (D), and leads in 5 of 7 scored categories. Karrio leads on reliability.", "question": "Which is better for AI agents, Karrio or Shippo?" }, { "answer": "Karrio needs an API key. Shippo takes an API key or an OAuth sign-in.", "question": "Do Karrio and Shippo need an API key?" }, { "answer": "No hosted endpoint is listed for Karrio. Shippo has a hosted endpoint at https://api.goshippo.com.", "question": "Can an agent call Karrio and Shippo without installing anything?" }, { "answer": "Karrio is open source (LGPL-3.0 for the server, SDK and modules. Code under `ee/` is under the Karrio Enterprise licence and needs a subscription for production use. The MCP package in `packages/mcp` is Apache-2.0). No open-source release is listed for Shippo.", "question": "Are Karrio and Shippo open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 76 against 59" ], "also": [ "Open source" ], "goodFor": "A team that wants to host its own multi-carrier API with its own carrier contracts and can maintain a Django and PostgreSQL stack.", "slug": "karrio", "watchFor": "No release since 2026.1.32 on 23 June 2026, 107 days before this check, and fix pull requests opened in September 2026 were still open" }, { "aheadOn": [ "Schema \u0026 documentation, 83 against 68", "Agent ergonomics, 64 against 57", "Security \u0026 auth, 52 against 44", "Maintenance \u0026 community, 77 against 29", "Transparency \u0026 trust, 61 against 56" ], "also": [ "A hosted endpoint, with nothing to install", "No incidents deducted, where Karrio loses 7 points for them" ], "goodFor": "An agent that quotes and buys parcel labels across USPS, UPS, FedEx and DHL Express for a small or mid-size shipper, with a free test mode and public unit prices.", "slug": "shippo", "watchFor": "No idempotency key on label purchase or other writes. Only the Reporting API accepts one" } ], "job": { "capability": "shipping.rates", "name": "Shipping rates" }, "others": [ { "json": "https://www.anchorterminal.com/compare/easypost-vs-karrio.json", "title": "EasyPost vs Karrio", "url": "https://www.anchorterminal.com/compare/easypost-vs-karrio" }, { "json": "https://www.anchorterminal.com/compare/easypost-vs-shippo.json", "title": "EasyPost vs Shippo", "url": "https://www.anchorterminal.com/compare/easypost-vs-shippo" }, { "json": "https://www.anchorterminal.com/compare/easyship-vs-karrio.json", "title": "Easyship vs Karrio", "url": "https://www.anchorterminal.com/compare/easyship-vs-karrio" }, { "json": "https://www.anchorterminal.com/compare/easyship-vs-shippo.json", "title": "Easyship vs Shippo", "url": "https://www.anchorterminal.com/compare/easyship-vs-shippo" }, { "json": "https://www.anchorterminal.com/compare/karrio-vs-sendcloud.json", "title": "Karrio vs Sendcloud", "url": "https://www.anchorterminal.com/compare/karrio-vs-sendcloud" }, { "json": "https://www.anchorterminal.com/compare/karrio-vs-shipbob.json", "title": "Karrio vs ShipBob", "url": "https://www.anchorterminal.com/compare/karrio-vs-shipbob" }, { "json": "https://www.anchorterminal.com/compare/karrio-vs-shipstation.json", "title": "Karrio vs ShipStation API", "url": "https://www.anchorterminal.com/compare/karrio-vs-shipstation" }, { "json": "https://www.anchorterminal.com/compare/sendcloud-vs-shippo.json", "title": "Sendcloud vs Shippo", "url": "https://www.anchorterminal.com/compare/sendcloud-vs-shippo" }, { "json": "https://www.anchorterminal.com/compare/shipbob-vs-shippo.json", "title": "ShipBob vs Shippo", "url": "https://www.anchorterminal.com/compare/shipbob-vs-shippo" }, { "json": "https://www.anchorterminal.com/compare/shippo-vs-shipstation.json", "title": "Shippo vs ShipStation API", "url": "https://www.anchorterminal.com/compare/shippo-vs-shipstation" }, { "json": "https://www.anchorterminal.com/compare/karrio-vs-ship24.json", "title": "Karrio vs Ship24", "url": "https://www.anchorterminal.com/compare/karrio-vs-ship24" }, { "json": "https://www.anchorterminal.com/compare/ship24-vs-shippo.json", "title": "Ship24 vs Shippo", "url": "https://www.anchorterminal.com/compare/ship24-vs-shippo" } ], "scores": [ { "by": 17, "edge": "karrio", "karrio": 76, "key": "reliability", "name": "Reliability", "shippo": 59, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 15, "edge": "shippo", "karrio": 68, "key": "schema", "name": "Schema \u0026 documentation", "shippo": 83, "weight": 13 }, { "by": 7, "edge": "shippo", "karrio": 57, "key": "ergonomics", "name": "Agent ergonomics", "shippo": 64, "weight": 13 }, { "by": 8, "edge": "shippo", "karrio": 44, "key": "security", "name": "Security \u0026 auth", "shippo": 52, "weight": 14 }, { "by": 0, "edge": "", "karrio": 40, "key": "payments", "name": "Payments \u0026 pricing", "shippo": 40, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 48, "edge": "shippo", "karrio": 29, "key": "maintenance", "name": "Maintenance \u0026 community", "shippo": 77, "weight": 7 }, { "by": 5, "edge": "shippo", "karrio": 56, "key": "transparency", "name": "Transparency \u0026 trust", "shippo": 61, "weight": 7 } ], "summary": "Shippo scores 61.9 (C) on agent readiness against Karrio's 48.7 (D), and leads in 5 of 7 scored categories. Karrio leads on reliability. Both do shipping rates.", "verdicts": { "karrio": "A current OpenAPI 3.0.3 contract with 65 paths, a free LGPL-3.0 server and 30 carrier connectors suit a team that hosts it. The last release was 23 June 2026, the `@karrio/mcp` package the docs install is absent from npm, and `api.karrio.io` didn't resolve on 8 October 2026.", "shippo": "Per-label and per-call prices are public, test keys are self-serve, and the OpenAPI spec, llms.txt and Markdown docs are open to a fetch. Label purchase has no idempotency key, API keys carry no scopes, and the status page logged carrier-side incidents on most days between July and October 2026." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/karrio-vs-shippo", "json": "https://www.anchorterminal.com/compare/karrio-vs-shippo.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/karrio-vs-shippo.md", "slim": "https://www.anchorterminal.com/compare/karrio-vs-shippo.min.md" }, "markdown": "Shippo scores 61.9 (C) on agent readiness against Karrio's 48.7 (D), and leads in 5 of 7 scored categories. Karrio leads on reliability. Both do shipping rates.\n\n- Karrio: grade D, 48.7/100, rank #617 of 722. Markdown https://www.anchorterminal.com/tools/karrio.md · JSON https://www.anchorterminal.com/api/v1/tools/karrio.json\n- Shippo: grade C, 61.9/100, rank #355 of 722. Markdown https://www.anchorterminal.com/tools/shippo.md · JSON https://www.anchorterminal.com/api/v1/tools/shippo.json\n\n## Which one, for what\n\n### Karrio (D)\n\nGood for: A team that wants to host its own multi-carrier API with its own carrier contracts and can maintain a Django and PostgreSQL stack.\n\nAhead on:\n- Reliability, 76 against 59\n\nAlso in its favour:\n- Open source\n\nWatch for: No release since 2026.1.32 on 23 June 2026, 107 days before this check, and fix pull requests opened in September 2026 were still open\n\n### Shippo (C)\n\nGood for: An agent that quotes and buys parcel labels across USPS, UPS, FedEx and DHL Express for a small or mid-size shipper, with a free test mode and public unit prices.\n\nAhead on:\n- Schema \u0026 documentation, 83 against 68\n- Agent ergonomics, 64 against 57\n- Security \u0026 auth, 52 against 44\n- Maintenance \u0026 community, 77 against 29\n- Transparency \u0026 trust, 61 against 56\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- No incidents deducted, where Karrio loses 7 points for them\n\nWatch for: No idempotency key on label purchase or other writes. Only the Reporting API accepts one\n\n\n## Score by category\n\n| Category | Weight | Karrio | Shippo | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 76 | 59 | Karrio +17 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 68 | 83 | Shippo +15 |\n| Agent ergonomics | 13% (16.2 this run) | 57 | 64 | Shippo +7 |\n| Security \u0026 auth | 14% (17.5 this run) | 44 | 52 | Shippo +8 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 40 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 29 | 77 | Shippo +48 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 56 | 61 | Shippo +5 |\n| Negative events | ≤15 | -7 | 0 | |\n| **Total** | | **48.7 · D** | **61.9 · C** | |\n\n## Facts side by side\n\n| Fact | Karrio | Shippo |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Karrio, Inc. | Shippo |\n| Hosted endpoint | no (local only) | `https://api.goshippo.com` |\n| Transports | HTTP | HTTP |\n| Auth | API key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| Price for shipping rates | not published | $0.01 per call |\n| x402 | no | no |\n| Licence | LGPL-3.0 for the server, SDK and modules. Code under `ee/` is under the Karrio Enterprise licence and needs a subscription for production use. The MCP package in `packages/mcp` is Apache-2.0 | Proprietary service under Shippo's terms of use. The SDKs and the goshippo/ai repository (skills and MCP bridge) are MIT |\n| Tools exposed | none | 4 |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| MCP registry | not listed | `com.shippo/shippo-mcp` |\n| Last release | 2026-06-23 | 2026-10-01 |\n| Terms last updated | 2025-04-08 | couldn't be read |\n| Privacy policy last updated | 2025-04-08 | couldn't be read |\n| Customer content may train models | not found in the text | couldn't be read |\n| Terms restrict automated access | not found in the text | couldn't be read |\n| Terms restrict benchmarking | yes | couldn't be read |\n| Terms or service can change without notice | not found in the text | couldn't be read |\n| Arbitration or class-action waiver | not found in the text | couldn't be read |\n| Popularity | 799 stars, 338 PyPI/wk | 3 stars, 73k npm/wk, 20k PyPI/wk |\n\n## Verdicts\n\n**Karrio.** A current OpenAPI 3.0.3 contract with 65 paths, a free LGPL-3.0 server and 30 carrier connectors suit a team that hosts it. The last release was 23 June 2026, the `@karrio/mcp` package the docs install is absent from npm, and `api.karrio.io` didn't resolve on 8 October 2026.\n\n**Shippo.** Per-label and per-call prices are public, test keys are self-serve, and the OpenAPI spec, llms.txt and Markdown docs are open to a fetch. Label purchase has no idempotency key, API keys carry no scopes, and the status page logged carrier-side incidents on most days between July and October 2026.\n\n## Before you call either\n\n### Karrio\n\n1. Run your own instance with Docker Compose and call it at `http://localhost:5002`. Don't rely on `api.karrio.io`, which didn't resolve on 8 October 2026\n2. Don't run `npx karrio-mcp` or `npx -y @karrio/mcp`. Neither name is published on npm, so build the server from `packages/mcp` in the repository\n3. Change the default `admin@example.com` and `demo` login before the instance is reachable, and upgrade to 2026.1.32 or later so passwords aren't stored as MD5\n4. Don't blind-retry `POST /v1/shipments` with a `service` set or `POST /v1/shipments/{id}/purchase`. Fetch the shipment and check its status first, since no idempotency key exists\n5. Use a test-mode API key while building. Send it as the HTTP Basic username or as `Authorization: Token key_...`\n\n### Shippo\n\n1. Build and test with a shippo_test_ key. Test and live object IDs are separate, and the hosted MCP server has no test mode\n2. Send `Authorization: ShippoToken \u003ckey\u003e`, not Bearer, and pin `Shippo-API-Version: 2018-02-08`\n3. Before retrying a failed POST /transactions, list recent transactions. There is no idempotency key, and a second purchase is a second charge\n4. Pass `async: false` on shipments and transactions, or poll the object until its status leaves QUEUED\n5. Set `results` on list calls (under 200). Defaults vary by resource, and list calls are limited to 50 a minute on live keys\n\n## Questions\n\n### Which is better for AI agents, Karrio or Shippo?\n\nShippo scores 61.9 (C) on agent readiness against Karrio's 48.7 (D), and leads in 5 of 7 scored categories. Karrio leads on reliability.\n\n### Do Karrio and Shippo need an API key?\n\nKarrio needs an API key. Shippo takes an API key or an OAuth sign-in.\n\n### Can an agent call Karrio and Shippo without installing anything?\n\nNo hosted endpoint is listed for Karrio. Shippo has a hosted endpoint at https://api.goshippo.com.\n\n### Are Karrio and Shippo open source?\n\nKarrio is open source (LGPL-3.0 for the server, SDK and modules. Code under `ee/` is under the Karrio Enterprise licence and needs a subscription for production use. The MCP package in `packages/mcp` is Apache-2.0). No open-source release is listed for Shippo.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/karrio-vs-shippo.json, and with the fewest tokens: https://www.anchorterminal.com/compare/karrio-vs-shippo.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"karrio\", \"b\": \"shippo\"}`. From a terminal: `anchor compare karrio shippo`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/karrio.json and https://www.anchorterminal.com/api/v1/tools/shippo.json\n\n## Other comparisons with Karrio or Shippo\n\n- [EasyPost vs Karrio](https://www.anchorterminal.com/compare/easypost-vs-karrio.md)\n- [EasyPost vs Shippo](https://www.anchorterminal.com/compare/easypost-vs-shippo.md)\n- [Easyship vs Karrio](https://www.anchorterminal.com/compare/easyship-vs-karrio.md)\n- [Easyship vs Shippo](https://www.anchorterminal.com/compare/easyship-vs-shippo.md)\n- [Karrio vs Sendcloud](https://www.anchorterminal.com/compare/karrio-vs-sendcloud.md)\n- [Karrio vs ShipBob](https://www.anchorterminal.com/compare/karrio-vs-shipbob.md)\n- [Karrio vs ShipStation API](https://www.anchorterminal.com/compare/karrio-vs-shipstation.md)\n- [Sendcloud vs Shippo](https://www.anchorterminal.com/compare/sendcloud-vs-shippo.md)\n- [ShipBob vs Shippo](https://www.anchorterminal.com/compare/shipbob-vs-shippo.md)\n- [Shippo vs ShipStation API](https://www.anchorterminal.com/compare/shippo-vs-shipstation.md)\n- [Karrio vs Ship24](https://www.anchorterminal.com/compare/karrio-vs-ship24.md)\n- [Ship24 vs Shippo](https://www.anchorterminal.com/compare/ship24-vs-shippo.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Karrio vs Shippo", "url": "" } ], "description": "Shippo scores 61.9 (C) on agent readiness against Karrio's 48.7 (D), and leads in 5 of 7 scored categories. Karrio leads on reliability. Both do shipping rates. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Karrio D 48.7", "Shippo C 61.9", "scores" ], "h1": "Karrio vs Shippo", "image": "https://www.anchorterminal.com/assets/og/compare-karrio-vs-shippo.png", "path": "/compare/karrio-vs-shippo", "published": "2026-10-01", "section": "tools", "title": "Karrio vs Shippo for AI agents, D 48.7 vs C 61.9 | Anchor Terminal", "toc": null, "updated": "2026-10-08", "url": "https://www.anchorterminal.com/compare/karrio-vs-shippo" }, "tokens": { "markdown": 2200, "slim": 780 }, "version": 1 }