{ "data": { "a": { "slug": "mapbox", "name": "Mapbox APIs + MCP", "vendor": "Mapbox", "vendorUrl": "https://www.mapbox.com", "kind": "http-api", "category": "maps", "summary": "Geocoding v6 with batch, Search Box for places and categories, Directions, Matrix, Isochrone, Map Matching, route optimisation, static images and map tiles.", "url": "https://www.anchorterminal.com/tools/mapbox", "markdownUrl": "https://www.anchorterminal.com/tools/mapbox.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/mapbox.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/mapbox.json", "dns": "mapbox.grade.anchorterminal.com", "repo": "https://github.com/mapbox/mcp-server", "license": "MIT (MCP server)", "transports": [ "http", "streamable-http", "stdio" ], "remoteUrl": "https://api.mapbox.com", "packages": [ { "registry": "npm", "name": "@mapbox/mcp-server" } ], "auth": "mixed", "authNotes": "Access tokens (public pk. or secret sk.) passed as the access_token query parameter on every REST call. The hosted MCP at mcp.mapbox.com signs in with an OAuth flow in the browser. The local server reads MAPBOX_ACCESS_TOKEN.", "pricing": "freemium", "pricingNotes": "Free monthly allowance per API, then tiered pay as you go. A sign-up without a card gets a trial with lower monthly limits (for example 10,000 temporary geocodes, 10,000 directions requests, 5,000 map loads) and no permanent geocoding until a card is added. Temporary Geocoding 100,000 free, then $0.75 per 1,000 down to $0.45 above 1 million. Permanent Geocoding (results you may store) has no free allowance and costs $5 per 1,000, then $4 above 500,000. Search Box is on introductory preview pricing, 500 free sessions then $3 per 1,000 sessions, or 50,000 free requests then $1 per 1,000. The page also lists standard rates of $11.50 per 1,000 sessions after 2,500 and $1.70 per 1,000 requests after 25,000. Directions, Matrix (by element), Isochrone, Map Matching and route optimisation 100,000 free each, then $2 per 1,000 down to $1.20. Static Images 50,000 free then $1 per 1,000. Vector tiles 200,000 free then $0.25 per 1,000. GL JS map loads 50,000 free then $5 per 1,000 (https://www.mapbox.com/pricing, https://docs.mapbox.com/accounts/guides/signup/).", "priceSummary": "$0.75 / 1k req", "where": "both", "x402": { "level": "no", "endpoints": [] }, "toolCount": 29, "popularity": { "githubStars": 353, "npmWeekly": 1974, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://docs.mapbox.com/api/", "llmsTxt": "https://docs.mapbox.com/llms.txt", "registryName": "io.github.mapbox/mcp-server", "capabilities": [ "geo.geocode", "geo.reverse", "geo.places", "geo.routing", "geo.tiles" ], "tags": [ "hosted", "mcp", "llms-txt", "official", "oauth", "typescript", "free-tier", "no-card", "enterprise", "closed-source" ], "lastRelease": "2026-10-15", "graded": true, "anchor": { "graded": true, "score": 77.2, "grade": "BB", "agentReady": true, "rank": 35, "ranked": true, "rankOf": 1486, "categoryRank": 1, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 88, "maintenance": 90, "payments": 40, "reliability": 82, "schema": 85, "security": 71, "transparency": 84 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": 0, "verdict": "Official MCP server, hosted at mcp.mapbox.com with OAuth or run locally, listed in the MCP registry. Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate.", "bestFor": "An agent that needs search, routing, isochrones, map matching and route optimisation from one vendor with a hosted, OAuth-protected MCP.", "strengths": [ "Official MCP server, hosted at mcp.mapbox.com with OAuth or run locally, listed in the MCP registry", "Every MCP tool annotated read-only and idempotent, with typed Zod input and output schemas", "Scoped public and secret tokens, URL restrictions and one-hour temporary tokens", "SOC 2 Type II, a HackerOne bug bounty and a published 99.9 per cent SLA with service credits for customers with an order", "A sign-up without a card, with trial limits such as 10,000 temporary geocodes a month" ], "weaknesses": [ "Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate, and a card on file", "REST calls take the token as the access_token query parameter", "29 MCP tools load at once on the hosted endpoint, with filtering documented only for the local server", "Routing in US-East was disrupted on 19 and 20 October 2026, and there's no security.txt", "Card-free trial accounts get one token that can't be rotated or deleted until a payment method is added" ], "agentNotes": [ "Set permanent=true only when the result goes into a database, since it moves the call to the $5 per 1,000 rate", "Keep search_and_geocode_tool queries under 200 characters, the live limit, not the 256 the API docs state", "On 429, wait until the X-Rate-Limit-Reset timestamp, since no Retry-After is sent", "Run the local server with --enable-tools to load only the tools the task needs", "On a trial account without a card, expect lower limits and no permanent geocoding; check the Console usage before batch work" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 8, "avgRating": 3.6, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 77.2 } ], "editorialScores": { "ergonomics": 88, "maintenance": 90, "payments": 40, "reliability": 82, "schema": 85, "security": 71, "transparency": 82 }, "provenanceScore": 86, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-10-17", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl \"https://api.mapbox.com/search/geocode/v6/forward?q=10%20Downing%20Street%2C%20London\u0026limit=1\u0026access_token=$MAPBOX_ACCESS_TOKEN\"", "claudeCode": "claude mcp add --transport http mapbox https://mcp.mapbox.com/mcp", "config": { "mcpServers": { "mapbox": { "args": [ "-y", "@mapbox/mcp-server" ], "command": "npx", "env": { "MAPBOX_ACCESS_TOKEN": "${MAPBOX_ACCESS_TOKEN}" } } } } }, "letme": { "capability": "https://letme.dev/geo.geocode", "tool": "https://letme.dev/mapbox" }, "area": "everyday", "unitPrices": [ { "item": "Temporary Geocoding", "unit": "1k-requests", "usd": 0.75, "note": "After 100,000 free a month, $0.45 above 1 million" }, { "item": "Permanent Geocoding", "unit": "1k-requests", "usd": 5, "note": "No free allowance, $4 above 500,000" }, { "item": "Search Box sessions", "unit": "1k-requests", "usd": 3, "note": "Per 1,000 sessions after 500 free, introductory preview pricing. Standard rate $11.50 after 2,500" }, { "item": "Directions", "unit": "1k-requests", "usd": 2, "note": "After 100,000 free a month, $1.20 above 1 million" }, { "item": "Matrix", "unit": "1k-requests", "usd": 2, "note": "Per 1,000 elements after 100,000 free" }, { "item": "Static Images", "unit": "1k-requests", "usd": 1, "note": "After 50,000 free a month" }, { "item": "Vector tiles", "unit": "1k-requests", "usd": 0.25, "note": "After 200,000 free a month" } ], "provenance": { "legalEntity": "Mapbox, Inc.", "domain": "mapbox.com", "domainRegistered": "2003-11-27", "domainNote": "mapbox.com was registered in 2003, years before Mapbox started, so the domain was bought later.", "endpointOnVendorDomain": true, "terms": "https://www.mapbox.com/legal/tos", "privacy": "https://www.mapbox.com/legal/privacy", "statusPage": "https://status.mapbox.com", "changelog": "https://docs.mapbox.com/api/changelog/", "securityTxt": "none", "checked": "2026-11-01", "notes": [ "The terms of service were last updated 31 March 2024 and point to separate product terms for per-API rules.", "The terms let Mapbox create de-identified aggregated data from customer usage.", "www.mapbox.com/.well-known/security.txt returns 404 (re-checked 1 November 2026).", "The top-level API changelog's newest entry is 5 November 2021. Current changes are in per-service changelogs and the MCP server's CHANGELOG.md on GitHub.", "Subprocessor list (22 entries with locations) last updated 4 June 2026.", "A Service Level Agreement (last updated 15 April 2024) at https://www.mapbox.com/legal/sla covers customers with an executed order." ], "score": 86 }, "requirements": { "setupChecked": true, "complianceChecked": true, "card": "paid-only", "freeTier": true, "minutes": 5, "credential": "mixed", "hosting": [ "US" ], "euResidency": "no", "trainsOnData": "unknown", "zeroRetention": "unknown", "certifications": [ "SOC 2 Type II", "GDPR" ], "dpa": true, "selfHost": "no" }, "pageJsonUrl": "https://www.anchorterminal.com/tools/mapbox.json", "live": { "slug": "mapbox", "probe": { "target": "https://api.mapbox.com", "method": "get", "lastAt": "2026-11-07T18:20:37.607928507Z", "lastOk": true, "lastStatus": 200, "lastMs": 23, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 25, "p95ms24h": 95, "samples24h": 239, "samples30d": 7910, "days": [ { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 248, "ok": 248 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 187, "ok": 187 } ] }, "vendorStatus": { "page": "https://status.mapbox.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T18:21:21.890017027Z" }, "versions": [ { "registry": "github", "name": "mapbox/mcp-server", "version": "v0.17.0", "released": "2026-11-06", "seenAt": "2026-11-06T23:42:32.729365912Z" }, { "registry": "mcp-registry", "name": "io.github.mapbox/mcp-server", "version": "0.17.0", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "@mapbox/mcp-server", "version": "0.17.0", "seenAt": "2026-11-06T23:42:32.515191584Z" } ], "githubStars": 367, "npmWeekly": 5677, "securityTxt": { "url": "https://mapbox.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:43.742734359Z" }, "llmsTxt": { "url": "https://docs.mapbox.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:56.968988795Z" }, "domain": { "domain": "mapbox.com", "registered": "2003-11-27", "source": "https://rdap.verisign.com/com/v1/domain/mapbox.com", "checkedAt": "2026-11-01T14:12:09.671089153Z" }, "pages": [ { "url": "https://docs.mapbox.com/api/changelog/", "kind": "changelog", "status": 304, "checkedAt": "2026-11-07T14:06:56.328551059Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "395e3e05bd01" }, { "url": "https://www.mapbox.com/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:31:22.645906851Z", "changedAt": "2026-11-06T13:52:01.730958354Z", "fingerprint": "7345758914cc" }, { "url": "https://www.mapbox.com/legal/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:31:18.159504751Z", "changedAt": "2026-11-06T13:51:56.60150451Z", "fingerprint": "6ac6d7ded402" }, { "url": "https://www.mapbox.com/legal/tos", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:31:20.794072453Z", "changedAt": "2026-11-06T13:52:00.000498024Z", "fingerprint": "1a66e57c3d21" } ], "mcpTools": { "url": "https://mcp.mapbox.com/mcp", "checkedAt": "2026-11-07T01:46:10.747728338Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:46:10.747728338Z" }, "github": { "repo": "mapbox/mcp-server", "checkedAt": "2026-11-02T09:03:27.007357966Z", "stars": 363, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-30T13:51:34Z", "openIssues": 13, "openPRs": 8, "issuesOpened90d": 19, "issuesClosed90d": 6, "prsMerged90d": 37, "ci": { "branch": "main", "runs": 50, "success": 50, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-10-30T13:48:31Z" }, "replies": { "sampled": 25, "unanswered": 12, "medianDays": 0.3 } }, "updatedAt": "2026-11-07T18:21:21.890017027Z" } }, "answer": "Mapbox APIs + MCP scores 77.2 (BB) on agent readiness against MapTiler Cloud's 62.1 (B), and leads in 6 of 7 scored categories.", "b": { "slug": "maptiler", "name": "MapTiler Cloud", "vendor": "MapTiler AG", "vendorUrl": "https://www.maptiler.com", "kind": "http-api", "category": "maps", "summary": "MapTiler Cloud is a hosted maps platform from MapTiler AG in Switzerland. Its read-only REST APIs serve map styles, vector and raster tiles, static maps, forward and reverse geocoding, IP geolocation, elevation, coordinate transforms and weather data.", "url": "https://www.anchorterminal.com/tools/maptiler", "markdownUrl": "https://www.anchorterminal.com/tools/maptiler.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/maptiler.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/maptiler.json", "dns": "maptiler.grade.anchorterminal.com", "repo": "https://github.com/maptiler/maptiler-client-js", "transports": [ "http" ], "packages": [ { "registry": "npm", "name": "@maptiler/client" }, { "registry": "npm", "name": "@maptiler/sdk" } ], "auth": "api-key", "authNotes": "API key from the MapTiler Cloud account after a browser signup, always passed as the `key` query parameter. Keys can be limited to HTTP origins and a User-Agent substring and are managed through the Service API. From a backend, a service token can sign each request with a `signature` parameter instead. The Service API (uploads, tilesets, keys, analytics) needs a service token.", "pricing": "freemium", "pricingNotes": "Free plan with 100,000 API requests, 5,000 sessions and 1,000 search sessions a month, no card, for testing and non-commercial use; service pauses at the limit. Flex is $30 a month with 500,000 requests, then $0.15 per 1,000 requests and $2.50 per 1,000 search sessions. Custom contracts carry a 99.9% SLA.", "priceSummary": "$0.15 / 1k req", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API reference, OpenAPI spec, llms.txt or pricing page (checked 2026-11-06). Paid plans are billed by FastSpring.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 114682, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://docs.maptiler.com/cloud/api/", "llmsTxt": "https://docs.maptiler.com/llms.txt", "openapi": "https://docs.maptiler.com/_data/cloud/api/openapi.yml", "capabilities": [ "geo.geocode", "geo.reverse", "geo.places", "geo.tiles", "data.weather" ], "tags": [ "hosted", "api-key", "freemium", "free-tier", "no-card", "llms-txt", "openapi", "official", "agent-skills", "typescript", "status-page", "security-txt", "iso27001", "eu", "eu-region", "sla", "closed-source" ], "lastRelease": "2026-10-02", "graded": true, "anchor": { "graded": true, "score": 62.1, "grade": "B", "agentReady": false, "rank": 574, "ranked": true, "rankOf": 1486, "categoryRank": 10, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 70, "payments": 40, "reliability": 43, "schema": 79, "security": 64, "transparency": 80 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "MapTiler Cloud has an OpenAPI 3.1 reference, llms.txt with Markdown pages, an agent skill and ISO 27001 certification, and allows geocoding results to be stored. The key always travels in the query string, there's no routing API, no documented rate limit or 429 handling, and the free plan excludes commercial use.", "bestFor": "Map tiles, static maps and worldwide geocoding with storable results for apps that also show a map, with EU data residency.", "strengths": [ "OpenAPI 3.1.0 spec, llms.txt, llms-full.txt and a Markdown version of every docs page", "Geocoding results may be bulk downloaded and used outside the service with attribution", "Keys can be restricted by origin and User-Agent, and service tokens can sign requests instead", "ISO/IEC 27001:2022 certification, security.txt and a vulnerability disclosure policy", "EU-only endpoint at api.maptiler.eu and hosting mainly in Switzerland and the EEA" ], "weaknesses": [ "The API key is always sent as a query parameter", "No routing, directions or matrix API", "No per-second rate limit, 429 behaviour or retry guidance found in the documentation", "The free plan is for testing and non-commercial use only, and pauses at its monthly limit", "Official clients are JavaScript and TypeScript only" ], "agentNotes": [ "Restrict the key to an origin or User-Agent, or sign requests with a service token from a backend, since the key appears in every URL", "Use the batch geocoding path (up to 50 semicolon-separated queries) rather than one call per address", "Use api.maptiler.eu when the user's requests must stay in the EU", "Read docs pages as Markdown by appending .md, starting from https://docs.maptiler.com/llms.txt", "Don't cache map tiles server-side; the Cloud terms forbid it, though geocoding results may be stored with attribution" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.1 } ], "editorialScores": { "ergonomics": 70, "maintenance": 70, "payments": 40, "reliability": 43, "schema": 79, "security": 64, "transparency": 64 }, "provenanceScore": 96, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install @maptiler/client", "http": "curl \"https://api.maptiler.com/geocoding/Zurich.json?language=en\u0026limit=3\u0026key=$MAPTILER_API_KEY\"" }, "letme": { "capability": "https://letme.dev/geo.geocode", "tool": "https://letme.dev/maptiler" }, "area": "everyday", "unitPrices": [ { "item": "API requests over the Flex allowance", "unit": "1k-requests", "usd": 0.15, "note": "Flex includes 500,000 a month" }, { "item": "Search sessions over the Flex allowance", "unit": "1k-requests", "usd": 2.5, "note": "Priced per 1,000 search sessions through MapTiler SDK JS" }, { "item": "Flex plan", "unit": "month", "usd": 30, "note": "Extra usage billed monthly" } ], "provenance": { "legalEntity": "MapTiler AG", "domain": "maptiler.com", "domainRegistered": "2008-08-08", "endpointOnVendorDomain": true, "terms": "https://www.maptiler.com/terms/", "privacy": "https://www.maptiler.com/privacy-policy/", "statusPage": "https://status.maptiler.com", "changelog": "https://docs.maptiler.com/updates/", "securityTxt": "valid", "checked": "2026-11-06", "notes": [ "The general terms name MapTiler AG, Zugerstrasse 22, 6314 Unterägeri, Switzerland, under Swiss law with courts in Zug.", "security.txt at www.maptiler.com/.well-known/security.txt names sysadmin@maptiler.com, a PGP key and a signature, and has no Expires field.", "status.maptiler.com is a StatusCake public report whose data loads from app.statuscake.com. That host's robots.txt answered with a redirect, so it wasn't fetched and no uptime or incident history was read.", "RDAP gives maptiler.com a registration date of 8 August 2008.", "No clause on automated access to the website was found in the general terms. robots.txt on www.maptiler.com and docs.maptiler.com allows all agents apart from a few paths." ], "score": 96 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/maptiler.json", "live": { "slug": "maptiler", "vendorStatus": { "page": "https://status.maptiler.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-07T04:48:02.124798696Z" }, "versions": [ { "registry": "github", "name": "maptiler/maptiler-client-js", "version": "v3.1.0", "released": "2026-10-02", "seenAt": "2026-11-06T23:42:38.646681081Z" }, { "registry": "npm", "name": "@maptiler/client", "version": "3.1.0", "seenAt": "2026-11-06T23:42:36.419318643Z" }, { "registry": "npm", "name": "@maptiler/sdk", "version": "4.2.1", "seenAt": "2026-11-06T23:42:37.315182633Z" } ], "githubStars": 25, "npmWeekly": 114682, "securityTxt": { "url": "https://maptiler.com/.well-known/security.txt", "state": "valid", "checkedAt": "2026-11-07T15:59:35.51300876Z" }, "llmsTxt": { "url": "https://docs.maptiler.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:57.151624353Z" }, "pages": [ { "url": "https://docs.maptiler.com/updates/", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:06:56.724195464Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "1152e8fe8b9d" }, { "url": "https://www.maptiler.com/privacy-policy/", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:31:21.154658791Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "46d3f1544780" }, { "url": "https://www.maptiler.com/terms/", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:31:23.29013826Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "fc740f21aa9f" } ], "updatedAt": "2026-11-07T15:59:35.51300876Z" } }, "edges": [ { "by": 39, "category": "reliability", "leads": "mapbox", "name": "Reliability", "reasons": { "a": "Atlassian Statuspage at status.mapbox.com with an uptime view (20). The history page renders client-side and robots.txt disallows the incidents API, so on 1 November we read the history RSS feed and the incident pages. Two incidents on Navigation (API) fall in the 90 days from 3 August. On 19 October, 19:18 to 19:41 UTC, the Directions and Map Matching APIs in US-East had \"elevated latency and missing route data for a significant portion of regional traffic\" (23 minutes). On 20 October, 14:45 to 15:47 UTC, \"brief, recurring periods of elevated latency and missing route results\" in US-East (62 minutes of intermittent disruption). Neither was a core API down, or wide errors, for an hour or more, so minor only (20, was 30 with nothing after 29 June). Rate limits with numbers, 1,000 geocoding requests a minute by default, and X-Rate-Limit-Interval, -Limit and -Reset headers on responses, re-read on 1 November (15). A 429 on overrun with a reset timestamp to wait for, but no Retry-After and no backoff guidance (10). A published Service Level Agreement (last updated 15 April 2024) at mapbox.com/legal/sla gives customers with an executed order 99.9 per cent monthly availability per API, with service credits of 10 and 25 per cent. The 1 October to 17 October checks looked only at the pricing page and the API docs (10, was 0). The REST APIs are GA, but the MCP server is at 0.16 and its place_details_tool calls the Places API Details endpoint, which Mapbox still labels Public Preview with a contract subject to change (7). 20+20+15+10+10+7 = 82.", "b": "Hosted lines. status.maptiler.com is a StatusCake public uptime report rather than a component incident page (15). Its data loads from app.statuscake.com, whose robots.txt answered with a redirect, so we didn't fetch it and read no history. That's our limit, not a finding, and the rubric gives 5 (5). Monthly request and session quotas are published per plan, but no per-second limit (5). No 429, Retry-After or backoff guidance found in the API reference, the OpenAPI spec or llms-full.txt (0). The pricing page lists a 99.9% SLA on the Custom plan, while the Cloud terms call availability best effort and point to a custom SLA (8). The public APIs are GA (10). 15+5+5+0+8+10 = 43." }, "scores": { "a": 82, "b": 43 } }, { "by": 20, "category": "maintenance", "leads": "mapbox", "name": "Maintenance \u0026 community", "reasons": { "a": "MCP server v0.16.0 on 15 October 2026, after v0.15.0 and v0.15.1 on 8 and 9 October (30). Three stable releases in the 90 days from 3 August, v0.15.0, v0.15.1 and v0.16.0, plus the v0.16.1-dev, v0.17.0-dev and v0.17.0-dev.1 pre-releases (20). Commits reference user-reported issues and fixes land within weeks. We couldn't see issue reply times from git (15). Listed in the official MCP registry as io.github.mapbox/mcp-server, active, with 0.16.0 the latest, published 15 October (15). CI builds and runs the test suite on every push and pull request, and since 0.17.0-dev also typechecks the tests (10).", "b": "@maptiler/client 3.1.0 and @maptiler/sdk 4.2.0 on 2 October 2026, 35 days before this check, with the agent skill updated on 21 October (20). Platform updates entries for August (EU endpoint, key security) and September 2026 (terrain blending) plus the two October releases (20). A Discord community and support answered on a best-effort basis within two business days, per the Cloud terms. We didn't read GitHub issues (10). Official JavaScript client and SDK current, no Python client (12). The SDK repository runs unit and end-to-end tests in CI; we didn't check results (8). 20+20+10+12+8 = 70." }, "scores": { "a": 90, "b": 70 } }, { "by": 18, "category": "ergonomics", "leads": "mapbox", "name": "Agent ergonomics", "reasons": { "a": "29 core MCP tools in 0.16.0, still the latest stable release on 1 November, so 15, plus 5 back for --enable-tools and --disable-tools on the local server. The docs don't say the hosted endpoint can filter tools (20). limit, types, bbox and proximity on geocoding, and a v6 batch endpoint (18). Documented status codes with messages an agent can act on, such as 'Query exceeded character limit of 200' (17). Every tool carries readOnlyHint true, destructiveHint false and idempotentHint, and 17 offline geometry tools set openWorldHint false (20). Few required parameters and the server elicits a route choice when the client supports it. Since 0.16.0 large directions and isochrone results return a short ref that any server process can answer, and descriptions no longer tell the model to avoid other tools or web search. Official SDKs are JavaScript and the mobile SDKs, with no current official Python client that we found (13).", "b": "API reading. limit, types, bbox, proximity, country, language and fuzzyMatch size geocoding results, and the batch endpoint takes up to 50 queries (20). Country, bbox and type filters, no pagination (geocoding rarely needs it) (16). Errors are documented as 400 and 403 with no recovery guidance (10). Every public API reads and is safe to retry (12). Few required parameters, but official clients are JavaScript and TypeScript only, plus native mobile SDKs (12). 20+16+10+12+12 = 70." }, "scores": { "a": 88, "b": 70 } }, { "by": 7, "category": "security", "leads": "mapbox", "name": "Security \u0026 auth", "reasons": { "a": "Public and secret tokens with scopes, URL restrictions, one-hour temporary tokens and documented rotation, which earns 30. Less 10 because the REST APIs take the token as the access_token query parameter, and that's the documented way in. The hosted MCP signs in with OAuth instead. Accounts on the card-free trial get a single token they can't rotate or delete until a payment method is added (20). Public-scope tokens can't change the account, and every MCP tool is read-only (18). Responses are structured place data, partly third-party POI names and attributes, and we found no prompt-injection guidance (7). The local MCP emits OpenTelemetry traces per tool call tagged with the client name. We didn't check per-token usage reporting in the account (8). SOC 2 Type II and SOC 3, a HackerOne bug bounty and a disclosure programme, re-read on 1 November. MCP 0.13.0 on 30 July 2026 fixed a query-parameter injection through directions_tool's exclude field, and 0.15.0 on 8 October shipped the fix for reads of cached tool results by anyone who knew a resource URI and could forge the owner's username claim, with a narrowed map CSP. 0.16.0 on 15 October replaced those cached refs for directions and isochrones with refs that re-run the request under the reader's token, and fetches place photos server-side only from public https hosts. All were stated in the public changelog. On 21 October the URL check for custom marker images and place photos was fixed to strip every trailing dot (`localhost..` had passed), released in the v0.17.0-dev pre-releases of 30 October and not yet in a stable release. The photo fetch also resolves the host and refuses private addresses, and marker URLs are fetched by Mapbox's Static Images API, so we read it as hardening and don't deduct. No security.txt, still 404 on 1 November (18).", "b": "Revocable keys that can be limited to origins and a User-Agent substring and managed by the API keys API, and service tokens that sign requests so the token itself never travels, which earns 27. Less 10 because the key is 'always passed as a query parameter' (17). The public APIs are read-only, and account changes need a separate service token (16). Geocoding returns OpenStreetMap names and addresses, community-edited text, with no prompt-injection guidance (7). An Analytics API and account usage statistics (8). security.txt, a vulnerability disclosure policy and ISO/IEC 27001:2022 certification per the security page. No bug bounty found (16). 17+16+7+8+16 = 64." }, "scores": { "a": 71, "b": 64 } }, { "by": 6, "category": "schema", "leads": "mapbox", "name": "Schema \u0026 documentation", "reasons": { "a": "No public OpenAPI for the REST APIs, but every MCP tool has a typed Zod input and output schema, published as JSON Schema 2020-12 since 0.15.0 (8 October) (20). llms.txt at docs.mapbox.com, re-read on 1 November (10). MCP descriptions say when not to use a tool, for example search_and_geocode_tool sends generic place types to category_search_tool and warns that big-box brand plus address queries are unreliable (17). Zod limits and enums, such as q capped at 200 characters after the team found the API rejects 201 (13). An error table per API with 401, 403, 404, 422 and 429 messages, and curl examples throughout (13). Versioned paths (geocode v6) and a dated MCP CHANGELOG.md, but the top-level API changelog's newest entry is still 5 November 2021, current changes sit in per-service pages, and the MCP guide on docs.mapbox.com still says v0.12.0 on 1 November (12).", "b": "OpenAPI 3.1.0 document with 32 paths for the public APIs (25). llms.txt, llms-full.txt and a Markdown twin of every page (10). Each API page says what it's for and when to use the SDK instead (session billing), with little on when not to call it (13). Parameters are typed with defaults, such as limit (default 5 forward, 1 reverse) and a types enum, but bbox and proximity are strings (11). Examples on every endpoint, and the spec documents 400, 403, 404 and 414, without an error reference page (10). A dated platform updates page and a geocoding index changelog, but no version in the API path and the spec is version '1.0' (10). 25+10+13+11+10+10 = 79." }, "scores": { "a": 85, "b": 79 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Mapbox", "b": "MapTiler AG", "name": "Vendor" }, { "a": "https://api.mapbox.com", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP, stdio", "b": "HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "API key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "$0.75 per 1,000 requests", "b": "not published", "name": "Price for geocoding" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT (MCP server)", "b": "none", "name": "Licence" }, { "a": "29", "b": "none", "name": "Tools exposed" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "io.github.mapbox/mcp-server", "b": "not listed", "name": "MCP registry" }, { "a": "2026-10-15", "b": "2026-10-02", "name": "Last release" }, { "a": "2024-03-31", "b": "no date given", "name": "Terms last updated" }, { "a": "2026-02-11", "b": "no date given", "name": "Privacy policy last updated" }, { "a": "yes", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "353 stars, 2k npm/wk", "b": "115k npm/wk", "name": "Popularity" }, { "a": "3.6/5 (8)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Mapbox APIs + MCP scores 77.2 (BB) on agent readiness against MapTiler Cloud's 62.1 (B), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, Mapbox APIs + MCP or MapTiler Cloud?" }, { "answer": "Mapbox APIs + MCP takes an API key or an OAuth sign-in. MapTiler Cloud needs an API key.", "question": "Do Mapbox APIs + MCP and MapTiler Cloud need an API key?" }, { "answer": "Mapbox APIs + MCP has a hosted endpoint at https://api.mapbox.com. No hosted endpoint is listed for MapTiler Cloud.", "question": "Can an agent call Mapbox APIs + MCP and MapTiler Cloud without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 82 against 43", "Schema \u0026 documentation, 85 against 79", "Agent ergonomics, 88 against 70", "Security \u0026 auth, 71 against 64", "Maintenance \u0026 community, 90 against 70" ], "also": [ "Agent-ready, a grade of BB or better", "A hosted endpoint, with nothing to install", "Runs on your own machine" ], "goodFor": "An agent that needs search, routing, isochrones, map matching and route optimisation from one vendor with a hosted, OAuth-protected MCP.", "slug": "mapbox", "watchFor": "Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate, and a card on file" }, { "aheadOn": null, "also": null, "goodFor": "Map tiles, static maps and worldwide geocoding with storable results for apps that also show a map, with EU data residency.", "slug": "maptiler", "watchFor": "The API key is always sent as a query parameter" } ], "history": { "mapbox": [ { "causes": [ "product", "evidence" ], "date": "2026-10-17", "delta": 2.2, "from": 75, "fromGrade": "BB", "to": 77.2, "toGrade": "BB" }, { "causes": [ "method" ], "date": "2026-10-08", "delta": -0.2, "from": 75.2, "fromGrade": "BB", "to": 75, "toGrade": "BB" } ], "maptiler": null }, "job": { "capability": "geo.geocode", "name": "Geocoding" }, "others": [ { "json": "https://www.anchorterminal.com/compare/amazon-location-vs-mapbox.json", "title": "Amazon Location Service vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/amazon-location-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/amazon-location-vs-maptiler.json", "title": "Amazon Location Service vs MapTiler Cloud", "url": "https://www.anchorterminal.com/compare/amazon-location-vs-maptiler" }, { "json": "https://www.anchorterminal.com/compare/arcgis-vs-mapbox.json", "title": "ArcGIS Location Platform vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/arcgis-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/arcgis-vs-maptiler.json", "title": "ArcGIS Location Platform vs MapTiler Cloud", "url": "https://www.anchorterminal.com/compare/arcgis-vs-maptiler" }, { "json": "https://www.anchorterminal.com/compare/azure-maps-vs-mapbox.json", "title": "Azure Maps vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/azure-maps-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/azure-maps-vs-maptiler.json", "title": "Azure Maps vs MapTiler Cloud", "url": "https://www.anchorterminal.com/compare/azure-maps-vs-maptiler" }, { "json": "https://www.anchorterminal.com/compare/geoapify-vs-mapbox.json", "title": "Geoapify Location Platform + MCP vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/geoapify-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/geoapify-vs-maptiler.json", "title": "Geoapify Location Platform + MCP vs MapTiler Cloud", "url": "https://www.anchorterminal.com/compare/geoapify-vs-maptiler" }, { "json": "https://www.anchorterminal.com/compare/geocodio-vs-mapbox.json", "title": "Geocodio vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/geocodio-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/geocodio-vs-maptiler.json", "title": "Geocodio vs MapTiler Cloud", "url": "https://www.anchorterminal.com/compare/geocodio-vs-maptiler" }, { "json": "https://www.anchorterminal.com/compare/google-maps-platform-vs-mapbox.json", "title": "Google Maps Platform + Grounding Lite MCP vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/google-maps-platform-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/google-maps-platform-vs-maptiler.json", "title": "Google Maps Platform + Grounding Lite MCP vs MapTiler Cloud", "url": "https://www.anchorterminal.com/compare/google-maps-platform-vs-maptiler" }, { "json": "https://www.anchorterminal.com/compare/here-location-services-vs-mapbox.json", "title": "HERE Location Services vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/here-location-services-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/here-location-services-vs-maptiler.json", "title": "HERE Location Services vs MapTiler Cloud", "url": "https://www.anchorterminal.com/compare/here-location-services-vs-maptiler" }, { "json": "https://www.anchorterminal.com/compare/locationiq-vs-mapbox.json", "title": "LocationIQ vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/locationiq-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/locationiq-vs-maptiler.json", "title": "LocationIQ vs MapTiler Cloud", "url": "https://www.anchorterminal.com/compare/locationiq-vs-maptiler" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-mapquest.json", "title": "Mapbox APIs + MCP vs MapQuest", "url": "https://www.anchorterminal.com/compare/mapbox-vs-mapquest" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-nextbillion.json", "title": "Mapbox APIs + MCP vs NextBillion.ai", "url": "https://www.anchorterminal.com/compare/mapbox-vs-nextbillion" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-nominatim.json", "title": "Mapbox APIs + MCP vs Nominatim", "url": "https://www.anchorterminal.com/compare/mapbox-vs-nominatim" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-opencage.json", "title": "Mapbox APIs + MCP vs OpenCage Geocoding API", "url": "https://www.anchorterminal.com/compare/mapbox-vs-opencage" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-radar.json", "title": "Mapbox APIs + MCP vs Radar", "url": "https://www.anchorterminal.com/compare/mapbox-vs-radar" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-stadia-maps.json", "title": "Mapbox APIs + MCP vs Stadia Maps", "url": "https://www.anchorterminal.com/compare/mapbox-vs-stadia-maps" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-tomtom.json", "title": "Mapbox APIs + MCP vs TomTom Maps APIs + MCP", "url": "https://www.anchorterminal.com/compare/mapbox-vs-tomtom" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-woosmap.json", "title": "Mapbox APIs + MCP vs Woosmap", "url": "https://www.anchorterminal.com/compare/mapbox-vs-woosmap" }, { "json": "https://www.anchorterminal.com/compare/mapquest-vs-maptiler.json", "title": "MapQuest vs MapTiler Cloud", "url": "https://www.anchorterminal.com/compare/mapquest-vs-maptiler" }, { "json": "https://www.anchorterminal.com/compare/maptiler-vs-nextbillion.json", "title": "MapTiler Cloud vs NextBillion.ai", "url": "https://www.anchorterminal.com/compare/maptiler-vs-nextbillion" }, { "json": "https://www.anchorterminal.com/compare/maptiler-vs-nominatim.json", "title": "MapTiler Cloud vs Nominatim", "url": "https://www.anchorterminal.com/compare/maptiler-vs-nominatim" }, { "json": "https://www.anchorterminal.com/compare/maptiler-vs-opencage.json", "title": "MapTiler Cloud vs OpenCage Geocoding API", "url": "https://www.anchorterminal.com/compare/maptiler-vs-opencage" }, { "json": "https://www.anchorterminal.com/compare/maptiler-vs-radar.json", "title": "MapTiler Cloud vs Radar", "url": "https://www.anchorterminal.com/compare/maptiler-vs-radar" }, { "json": "https://www.anchorterminal.com/compare/maptiler-vs-stadia-maps.json", "title": "MapTiler Cloud vs Stadia Maps", "url": "https://www.anchorterminal.com/compare/maptiler-vs-stadia-maps" }, { "json": "https://www.anchorterminal.com/compare/maptiler-vs-tomtom.json", "title": "MapTiler Cloud vs TomTom Maps APIs + MCP", "url": "https://www.anchorterminal.com/compare/maptiler-vs-tomtom" }, { "json": "https://www.anchorterminal.com/compare/maptiler-vs-woosmap.json", "title": "MapTiler Cloud vs Woosmap", "url": "https://www.anchorterminal.com/compare/maptiler-vs-woosmap" } ], "panel": null, "scores": [ { "by": 39, "edge": "mapbox", "key": "reliability", "mapbox": 82, "maptiler": 43, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 6, "edge": "mapbox", "key": "schema", "mapbox": 85, "maptiler": 79, "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 18, "edge": "mapbox", "key": "ergonomics", "mapbox": 88, "maptiler": 70, "name": "Agent ergonomics", "weight": 13 }, { "by": 7, "edge": "mapbox", "key": "security", "mapbox": 71, "maptiler": 64, "name": "Security \u0026 auth", "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "mapbox": 40, "maptiler": 40, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 20, "edge": "mapbox", "key": "maintenance", "mapbox": 90, "maptiler": 70, "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 4, "edge": "mapbox", "key": "transparency", "mapbox": 84, "maptiler": 80, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Mapbox APIs + MCP scores 77.2 (BB) on agent readiness against MapTiler Cloud's 62.1 (B), and leads in 6 of 7 scored categories. Both do geocoding.", "tasks": null, "tutorials": [], "verdicts": { "mapbox": "Official MCP server, hosted at mcp.mapbox.com with OAuth or run locally, listed in the MCP registry. Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate.", "maptiler": "MapTiler Cloud has an OpenAPI 3.1 reference, llms.txt with Markdown pages, an agent skill and ISO 27001 certification, and allows geocoding results to be stored. The key always travels in the query string, there's no routing API, no documented rate limit or 429 handling, and the free plan excludes commercial use." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/mapbox-vs-maptiler", "json": "https://www.anchorterminal.com/compare/mapbox-vs-maptiler.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/mapbox-vs-maptiler.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/mapbox-vs-maptiler.min.md" }, "markdown": "Mapbox APIs + MCP scores 77.2 (BB) on agent readiness against MapTiler Cloud's 62.1 (B), and leads in 6 of 7 scored categories. Both do geocoding.\n\n- Mapbox APIs + MCP: grade BB, 77.2/100, rank #35 of 1486. Markdown https://www.anchorterminal.com/tools/mapbox.md · JSON https://www.anchorterminal.com/api/v1/tools/mapbox.json\n- MapTiler Cloud: grade B, 62.1/100, rank #574 of 1486. Markdown https://www.anchorterminal.com/tools/maptiler.md · JSON https://www.anchorterminal.com/api/v1/tools/maptiler.json\n- Best maps, geocoding and places APIs for AI agents: https://www.anchorterminal.com/best/maps/index.md\n- All 153 maps comparisons: https://www.anchorterminal.com/compare/maps/index.md\n\n## Which one, for what\n\n### Mapbox APIs + MCP (BB)\n\nGood for: An agent that needs search, routing, isochrones, map matching and route optimisation from one vendor with a hosted, OAuth-protected MCP.\n\nAhead on:\n- Reliability, 82 against 43\n- Schema \u0026 documentation, 85 against 79\n- Agent ergonomics, 88 against 70\n- Security \u0026 auth, 71 against 64\n- Maintenance \u0026 community, 90 against 70\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- A hosted endpoint, with nothing to install\n- Runs on your own machine\n\nWatch for: Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate, and a card on file\n\n### MapTiler Cloud (B)\n\nGood for: Map tiles, static maps and worldwide geocoding with storable results for apps that also show a map, with EU data residency.\n\nWatch for: The API key is always sent as a query parameter\n\n\n## Why the edge\n\n### Reliability: Mapbox APIs + MCP +39\n\n- Mapbox APIs + MCP (82): Atlassian Statuspage at status.mapbox.com with an uptime view (20). The history page renders client-side and robots.txt disallows the incidents API, so on 1 November we read the history RSS feed and the incident pages. Two incidents on Navigation (API) fall in the 90 days from 3 August. On 19 October, 19:18 to 19:41 UTC, the Directions and Map Matching APIs in US-East had \"elevated latency and missing route data for a significant portion of regional traffic\" (23 minutes). On 20 October, 14:45 to 15:47 UTC, \"brief, recurring periods of elevated latency and missing route results\" in US-East (62 minutes of intermittent disruption). Neither was a core API down, or wide errors, for an hour or more, so minor only (20, was 30 with nothing after 29 June). Rate limits with numbers, 1,000 geocoding requests a minute by default, and X-Rate-Limit-Interval, -Limit and -Reset headers on responses, re-read on 1 November (15). A 429 on overrun with a reset timestamp to wait for, but no Retry-After and no backoff guidance (10). A published Service Level Agreement (last updated 15 April 2024) at mapbox.com/legal/sla gives customers with an executed order 99.9 per cent monthly availability per API, with service credits of 10 and 25 per cent. The 1 October to 17 October checks looked only at the pricing page and the API docs (10, was 0). The REST APIs are GA, but the MCP server is at 0.16 and its place_details_tool calls the Places API Details endpoint, which Mapbox still labels Public Preview with a contract subject to change (7). 20+20+15+10+10+7 = 82.\n- MapTiler Cloud (43): Hosted lines. status.maptiler.com is a StatusCake public uptime report rather than a component incident page (15). Its data loads from app.statuscake.com, whose robots.txt answered with a redirect, so we didn't fetch it and read no history. That's our limit, not a finding, and the rubric gives 5 (5). Monthly request and session quotas are published per plan, but no per-second limit (5). No 429, Retry-After or backoff guidance found in the API reference, the OpenAPI spec or llms-full.txt (0). The pricing page lists a 99.9% SLA on the Custom plan, while the Cloud terms call availability best effort and point to a custom SLA (8). The public APIs are GA (10). 15+5+5+0+8+10 = 43.\n\n### Maintenance \u0026 community: Mapbox APIs + MCP +20\n\n- Mapbox APIs + MCP (90): MCP server v0.16.0 on 15 October 2026, after v0.15.0 and v0.15.1 on 8 and 9 October (30). Three stable releases in the 90 days from 3 August, v0.15.0, v0.15.1 and v0.16.0, plus the v0.16.1-dev, v0.17.0-dev and v0.17.0-dev.1 pre-releases (20). Commits reference user-reported issues and fixes land within weeks. We couldn't see issue reply times from git (15). Listed in the official MCP registry as io.github.mapbox/mcp-server, active, with 0.16.0 the latest, published 15 October (15). CI builds and runs the test suite on every push and pull request, and since 0.17.0-dev also typechecks the tests (10).\n- MapTiler Cloud (70): @maptiler/client 3.1.0 and @maptiler/sdk 4.2.0 on 2 October 2026, 35 days before this check, with the agent skill updated on 21 October (20). Platform updates entries for August (EU endpoint, key security) and September 2026 (terrain blending) plus the two October releases (20). A Discord community and support answered on a best-effort basis within two business days, per the Cloud terms. We didn't read GitHub issues (10). Official JavaScript client and SDK current, no Python client (12). The SDK repository runs unit and end-to-end tests in CI; we didn't check results (8). 20+20+10+12+8 = 70.\n\n### Agent ergonomics: Mapbox APIs + MCP +18\n\n- Mapbox APIs + MCP (88): 29 core MCP tools in 0.16.0, still the latest stable release on 1 November, so 15, plus 5 back for --enable-tools and --disable-tools on the local server. The docs don't say the hosted endpoint can filter tools (20). limit, types, bbox and proximity on geocoding, and a v6 batch endpoint (18). Documented status codes with messages an agent can act on, such as 'Query exceeded character limit of 200' (17). Every tool carries readOnlyHint true, destructiveHint false and idempotentHint, and 17 offline geometry tools set openWorldHint false (20). Few required parameters and the server elicits a route choice when the client supports it. Since 0.16.0 large directions and isochrone results return a short ref that any server process can answer, and descriptions no longer tell the model to avoid other tools or web search. Official SDKs are JavaScript and the mobile SDKs, with no current official Python client that we found (13).\n- MapTiler Cloud (70): API reading. limit, types, bbox, proximity, country, language and fuzzyMatch size geocoding results, and the batch endpoint takes up to 50 queries (20). Country, bbox and type filters, no pagination (geocoding rarely needs it) (16). Errors are documented as 400 and 403 with no recovery guidance (10). Every public API reads and is safe to retry (12). Few required parameters, but official clients are JavaScript and TypeScript only, plus native mobile SDKs (12). 20+16+10+12+12 = 70.\n\n### Security \u0026 auth: Mapbox APIs + MCP +7\n\n- Mapbox APIs + MCP (71): Public and secret tokens with scopes, URL restrictions, one-hour temporary tokens and documented rotation, which earns 30. Less 10 because the REST APIs take the token as the access_token query parameter, and that's the documented way in. The hosted MCP signs in with OAuth instead. Accounts on the card-free trial get a single token they can't rotate or delete until a payment method is added (20). Public-scope tokens can't change the account, and every MCP tool is read-only (18). Responses are structured place data, partly third-party POI names and attributes, and we found no prompt-injection guidance (7). The local MCP emits OpenTelemetry traces per tool call tagged with the client name. We didn't check per-token usage reporting in the account (8). SOC 2 Type II and SOC 3, a HackerOne bug bounty and a disclosure programme, re-read on 1 November. MCP 0.13.0 on 30 July 2026 fixed a query-parameter injection through directions_tool's exclude field, and 0.15.0 on 8 October shipped the fix for reads of cached tool results by anyone who knew a resource URI and could forge the owner's username claim, with a narrowed map CSP. 0.16.0 on 15 October replaced those cached refs for directions and isochrones with refs that re-run the request under the reader's token, and fetches place photos server-side only from public https hosts. All were stated in the public changelog. On 21 October the URL check for custom marker images and place photos was fixed to strip every trailing dot (`localhost..` had passed), released in the v0.17.0-dev pre-releases of 30 October and not yet in a stable release. The photo fetch also resolves the host and refuses private addresses, and marker URLs are fetched by Mapbox's Static Images API, so we read it as hardening and don't deduct. No security.txt, still 404 on 1 November (18).\n- MapTiler Cloud (64): Revocable keys that can be limited to origins and a User-Agent substring and managed by the API keys API, and service tokens that sign requests so the token itself never travels, which earns 27. Less 10 because the key is 'always passed as a query parameter' (17). The public APIs are read-only, and account changes need a separate service token (16). Geocoding returns OpenStreetMap names and addresses, community-edited text, with no prompt-injection guidance (7). An Analytics API and account usage statistics (8). security.txt, a vulnerability disclosure policy and ISO/IEC 27001:2022 certification per the security page. No bug bounty found (16). 17+16+7+8+16 = 64.\n\n### Schema \u0026 documentation: Mapbox APIs + MCP +6\n\n- Mapbox APIs + MCP (85): No public OpenAPI for the REST APIs, but every MCP tool has a typed Zod input and output schema, published as JSON Schema 2020-12 since 0.15.0 (8 October) (20). llms.txt at docs.mapbox.com, re-read on 1 November (10). MCP descriptions say when not to use a tool, for example search_and_geocode_tool sends generic place types to category_search_tool and warns that big-box brand plus address queries are unreliable (17). Zod limits and enums, such as q capped at 200 characters after the team found the API rejects 201 (13). An error table per API with 401, 403, 404, 422 and 429 messages, and curl examples throughout (13). Versioned paths (geocode v6) and a dated MCP CHANGELOG.md, but the top-level API changelog's newest entry is still 5 November 2021, current changes sit in per-service pages, and the MCP guide on docs.mapbox.com still says v0.12.0 on 1 November (12).\n- MapTiler Cloud (79): OpenAPI 3.1.0 document with 32 paths for the public APIs (25). llms.txt, llms-full.txt and a Markdown twin of every page (10). Each API page says what it's for and when to use the SDK instead (session billing), with little on when not to call it (13). Parameters are typed with defaults, such as limit (default 5 forward, 1 reverse) and a types enum, but bbox and proximity are strings (11). Examples on every endpoint, and the spec documents 400, 403, 404 and 414, without an error reference page (10). A dated platform updates page and a geocoding index changelog, but no version in the API path and the spec is version '1.0' (10). 25+10+13+11+10+10 = 79.\n\n## Score by category\n\n| Category | Weight | Mapbox APIs + MCP | MapTiler Cloud | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 82 | 43 | Mapbox APIs + MCP +39 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 85 | 79 | Mapbox APIs + MCP +6 |\n| Agent ergonomics | 13% (16.2 this run) | 88 | 70 | Mapbox APIs + MCP +18 |\n| Security \u0026 auth | 14% (17.5 this run) | 71 | 64 | Mapbox APIs + MCP +7 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 40 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 90 | 70 | Mapbox APIs + MCP +20 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 84 | 80 | Mapbox APIs + MCP +4 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **77.2 · BB** | **62.1 · B** | |\n\n## Facts side by side\n\n| Fact | Mapbox APIs + MCP | MapTiler Cloud |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Mapbox | MapTiler AG |\n| Hosted endpoint | `https://api.mapbox.com` | no (local only) |\n| Transports | HTTP, Streamable HTTP, stdio | HTTP |\n| Auth | OAuth or key | API key |\n| Pricing | Freemium | Freemium |\n| Price for geocoding | $0.75 per 1,000 requests | not published |\n| x402 | no | no |\n| Licence | MIT (MCP server) | none |\n| Tools exposed | 29 | none |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | yes |\n| MCP registry | `io.github.mapbox/mcp-server` | not listed |\n| Last release | 2026-10-15 | 2026-10-02 |\n| Terms last updated | 2024-03-31 | no date given |\n| Privacy policy last updated | 2026-02-11 | no date given |\n| Customer content may train models | yes | not found in the text |\n| Terms restrict automated access | not found in the text | not found in the text |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | yes | not found in the text |\n| Arbitration or class-action waiver | not found in the text | yes |\n| Popularity | 353 stars, 2k npm/wk | 115k npm/wk |\n| Agent reviews | 3.6/5 (8) | none |\n\n## How the scores have moved\n\n### Mapbox APIs + MCP\n\n- +2.2 on 17 October 2026: product, new evidence\n- -0.2 on 8 October 2026: checklist\n\n### MapTiler Cloud\n\nNo score change since it was listed.\n\n## Verdicts\n\n**Mapbox APIs + MCP.** Official MCP server, hosted at mcp.mapbox.com with OAuth or run locally, listed in the MCP registry. Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate.\n\n**MapTiler Cloud.** MapTiler Cloud has an OpenAPI 3.1 reference, llms.txt with Markdown pages, an agent skill and ISO 27001 certification, and allows geocoding results to be stored. The key always travels in the query string, there's no routing API, no documented rate limit or 429 handling, and the free plan excludes commercial use.\n\n## Before you call either\n\n### Mapbox APIs + MCP\n\n1. Set permanent=true only when the result goes into a database, since it moves the call to the $5 per 1,000 rate\n2. Keep search_and_geocode_tool queries under 200 characters, the live limit, not the 256 the API docs state\n3. On 429, wait until the X-Rate-Limit-Reset timestamp, since no Retry-After is sent\n4. Run the local server with --enable-tools to load only the tools the task needs\n5. On a trial account without a card, expect lower limits and no permanent geocoding; check the Console usage before batch work\n\n### MapTiler Cloud\n\n1. Restrict the key to an origin or User-Agent, or sign requests with a service token from a backend, since the key appears in every URL\n2. Use the batch geocoding path (up to 50 semicolon-separated queries) rather than one call per address\n3. Use api.maptiler.eu when the user's requests must stay in the EU\n4. Read docs pages as Markdown by appending .md, starting from https://docs.maptiler.com/llms.txt\n5. Don't cache map tiles server-side; the Cloud terms forbid it, though geocoding results may be stored with attribution\n\n## Questions\n\n### Which is better for AI agents, Mapbox APIs + MCP or MapTiler Cloud?\n\nMapbox APIs + MCP scores 77.2 (BB) on agent readiness against MapTiler Cloud's 62.1 (B), and leads in 6 of 7 scored categories.\n\n### Do Mapbox APIs + MCP and MapTiler Cloud need an API key?\n\nMapbox APIs + MCP takes an API key or an OAuth sign-in. MapTiler Cloud needs an API key.\n\n### Can an agent call Mapbox APIs + MCP and MapTiler Cloud without installing anything?\n\nMapbox APIs + MCP has a hosted endpoint at https://api.mapbox.com. No hosted endpoint is listed for MapTiler Cloud.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/mapbox-vs-maptiler.json, and with the fewest tokens: https://www.anchorterminal.com/compare/mapbox-vs-maptiler.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"mapbox\", \"b\": \"maptiler\"}`. From a terminal: `anchor compare mapbox maptiler`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/mapbox.json and https://www.anchorterminal.com/api/v1/tools/maptiler.json\n\n## Other comparisons with Mapbox APIs + MCP or MapTiler Cloud\n\n- [Amazon Location Service vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/amazon-location-vs-mapbox.md)\n- [Amazon Location Service vs MapTiler Cloud](https://www.anchorterminal.com/compare/amazon-location-vs-maptiler.md)\n- [ArcGIS Location Platform vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/arcgis-vs-mapbox.md)\n- [ArcGIS Location Platform vs MapTiler Cloud](https://www.anchorterminal.com/compare/arcgis-vs-maptiler.md)\n- [Azure Maps vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/azure-maps-vs-mapbox.md)\n- [Azure Maps vs MapTiler Cloud](https://www.anchorterminal.com/compare/azure-maps-vs-maptiler.md)\n- [Geoapify Location Platform + MCP vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/geoapify-vs-mapbox.md)\n- [Geoapify Location Platform + MCP vs MapTiler Cloud](https://www.anchorterminal.com/compare/geoapify-vs-maptiler.md)\n- [Geocodio vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/geocodio-vs-mapbox.md)\n- [Geocodio vs MapTiler Cloud](https://www.anchorterminal.com/compare/geocodio-vs-maptiler.md)\n- [Google Maps Platform + Grounding Lite MCP vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/google-maps-platform-vs-mapbox.md)\n- [Google Maps Platform + Grounding Lite MCP vs MapTiler Cloud](https://www.anchorterminal.com/compare/google-maps-platform-vs-maptiler.md)\n- [HERE Location Services vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/here-location-services-vs-mapbox.md)\n- [HERE Location Services vs MapTiler Cloud](https://www.anchorterminal.com/compare/here-location-services-vs-maptiler.md)\n- [LocationIQ vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/locationiq-vs-mapbox.md)\n- [LocationIQ vs MapTiler Cloud](https://www.anchorterminal.com/compare/locationiq-vs-maptiler.md)\n- [Mapbox APIs + MCP vs MapQuest](https://www.anchorterminal.com/compare/mapbox-vs-mapquest.md)\n- [Mapbox APIs + MCP vs NextBillion.ai](https://www.anchorterminal.com/compare/mapbox-vs-nextbillion.md)\n- [Mapbox APIs + MCP vs Nominatim](https://www.anchorterminal.com/compare/mapbox-vs-nominatim.md)\n- [Mapbox APIs + MCP vs OpenCage Geocoding API](https://www.anchorterminal.com/compare/mapbox-vs-opencage.md)\n- [Mapbox APIs + MCP vs Radar](https://www.anchorterminal.com/compare/mapbox-vs-radar.md)\n- [Mapbox APIs + MCP vs Stadia Maps](https://www.anchorterminal.com/compare/mapbox-vs-stadia-maps.md)\n- [Mapbox APIs + MCP vs TomTom Maps APIs + MCP](https://www.anchorterminal.com/compare/mapbox-vs-tomtom.md)\n- [Mapbox APIs + MCP vs Woosmap](https://www.anchorterminal.com/compare/mapbox-vs-woosmap.md)\n- [MapQuest vs MapTiler Cloud](https://www.anchorterminal.com/compare/mapquest-vs-maptiler.md)\n- [MapTiler Cloud vs NextBillion.ai](https://www.anchorterminal.com/compare/maptiler-vs-nextbillion.md)\n- [MapTiler Cloud vs Nominatim](https://www.anchorterminal.com/compare/maptiler-vs-nominatim.md)\n- [MapTiler Cloud vs OpenCage Geocoding API](https://www.anchorterminal.com/compare/maptiler-vs-opencage.md)\n- [MapTiler Cloud vs Radar](https://www.anchorterminal.com/compare/maptiler-vs-radar.md)\n- [MapTiler Cloud vs Stadia Maps](https://www.anchorterminal.com/compare/maptiler-vs-stadia-maps.md)\n- [MapTiler Cloud vs TomTom Maps APIs + MCP](https://www.anchorterminal.com/compare/maptiler-vs-tomtom.md)\n- [MapTiler Cloud vs Woosmap](https://www.anchorterminal.com/compare/maptiler-vs-woosmap.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Mapbox APIs + MCP vs MapTiler Cloud", "url": "" } ], "description": "Mapbox scores 77.2 (BB) to MapTiler Cloud's 62.1 (B) for geocoding. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Mapbox APIs + MCP BB 77.2", "MapTiler Cloud B 62.1", "scores" ], "h1": "Mapbox APIs + MCP vs MapTiler Cloud", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/mapbox-vs-maptiler", "published": "2026-10-01", "section": "tools", "title": "Mapbox vs MapTiler Cloud for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/mapbox-vs-maptiler" }, "tokens": { "markdown": 5050, "slim": 3030 }, "version": 1 }