{ "data": { "a": { "slug": "mapbox", "name": "Mapbox APIs + MCP", "vendor": "Mapbox", "vendorUrl": "https://www.mapbox.com", "kind": "http-api", "category": "maps", "summary": "Geocoding v6 with batch, Search Box for places and categories, Directions, Matrix, Isochrone, Map Matching, route optimisation, static images and map tiles.", "url": "https://www.anchorterminal.com/tools/mapbox", "markdownUrl": "https://www.anchorterminal.com/tools/mapbox.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/mapbox.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/mapbox.json", "dns": "mapbox.grade.anchorterminal.com", "repo": "https://github.com/mapbox/mcp-server", "license": "MIT (MCP server)", "transports": [ "http", "streamable-http", "stdio" ], "remoteUrl": "https://api.mapbox.com", "packages": [ { "registry": "npm", "name": "@mapbox/mcp-server" } ], "auth": "mixed", "authNotes": "Access tokens (public pk. or secret sk.) passed as the access_token query parameter on every REST call. The hosted MCP at mcp.mapbox.com signs in with an OAuth flow in the browser. The local server reads MAPBOX_ACCESS_TOKEN.", "pricing": "freemium", "pricingNotes": "Free monthly allowance per API, then tiered pay as you go. A sign-up without a card gets a trial with lower monthly limits (for example 10,000 temporary geocodes, 10,000 directions requests, 5,000 map loads) and no permanent geocoding until a card is added. Temporary Geocoding 100,000 free, then $0.75 per 1,000 down to $0.45 above 1 million. Permanent Geocoding (results you may store) has no free allowance and costs $5 per 1,000, then $4 above 500,000. Search Box is on introductory preview pricing, 500 free sessions then $3 per 1,000 sessions, or 50,000 free requests then $1 per 1,000. The page also lists standard rates of $11.50 per 1,000 sessions after 2,500 and $1.70 per 1,000 requests after 25,000. Directions, Matrix (by element), Isochrone, Map Matching and route optimisation 100,000 free each, then $2 per 1,000 down to $1.20. Static Images 50,000 free then $1 per 1,000. Vector tiles 200,000 free then $0.25 per 1,000. GL JS map loads 50,000 free then $5 per 1,000 (https://www.mapbox.com/pricing, https://docs.mapbox.com/accounts/guides/signup/).", "priceSummary": "$0.75 / 1k req", "where": "both", "x402": { "level": "no", "endpoints": [] }, "toolCount": 29, "popularity": { "githubStars": 353, "npmWeekly": 1974, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://docs.mapbox.com/api/", "llmsTxt": "https://docs.mapbox.com/llms.txt", "registryName": "io.github.mapbox/mcp-server", "capabilities": [ "geo.geocode", "geo.reverse", "geo.places", "geo.routing", "geo.tiles" ], "tags": [ "hosted", "mcp", "llms-txt", "official", "oauth", "typescript", "free-tier", "no-card", "enterprise", "closed-source" ], "lastRelease": "2026-10-15", "graded": true, "anchor": { "graded": true, "score": 77.2, "grade": "BB", "agentReady": true, "rank": 35, "ranked": true, "rankOf": 1486, "categoryRank": 1, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 88, "maintenance": 90, "payments": 40, "reliability": 82, "schema": 85, "security": 71, "transparency": 84 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": 0, "verdict": "Official MCP server, hosted at mcp.mapbox.com with OAuth or run locally, listed in the MCP registry. Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate.", "bestFor": "An agent that needs search, routing, isochrones, map matching and route optimisation from one vendor with a hosted, OAuth-protected MCP.", "strengths": [ "Official MCP server, hosted at mcp.mapbox.com with OAuth or run locally, listed in the MCP registry", "Every MCP tool annotated read-only and idempotent, with typed Zod input and output schemas", "Scoped public and secret tokens, URL restrictions and one-hour temporary tokens", "SOC 2 Type II, a HackerOne bug bounty and a published 99.9 per cent SLA with service credits for customers with an order", "A sign-up without a card, with trial limits such as 10,000 temporary geocodes a month" ], "weaknesses": [ "Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate, and a card on file", "REST calls take the token as the access_token query parameter", "29 MCP tools load at once on the hosted endpoint, with filtering documented only for the local server", "Routing in US-East was disrupted on 19 and 20 October 2026, and there's no security.txt", "Card-free trial accounts get one token that can't be rotated or deleted until a payment method is added" ], "agentNotes": [ "Set permanent=true only when the result goes into a database, since it moves the call to the $5 per 1,000 rate", "Keep search_and_geocode_tool queries under 200 characters, the live limit, not the 256 the API docs state", "On 429, wait until the X-Rate-Limit-Reset timestamp, since no Retry-After is sent", "Run the local server with --enable-tools to load only the tools the task needs", "On a trial account without a card, expect lower limits and no permanent geocoding; check the Console usage before batch work" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 8, "avgRating": 3.6, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 77.2 } ], "editorialScores": { "ergonomics": 88, "maintenance": 90, "payments": 40, "reliability": 82, "schema": 85, "security": 71, "transparency": 82 }, "provenanceScore": 86, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-10-17", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl \"https://api.mapbox.com/search/geocode/v6/forward?q=10%20Downing%20Street%2C%20London\u0026limit=1\u0026access_token=$MAPBOX_ACCESS_TOKEN\"", "claudeCode": "claude mcp add --transport http mapbox https://mcp.mapbox.com/mcp", "config": { "mcpServers": { "mapbox": { "args": [ "-y", "@mapbox/mcp-server" ], "command": "npx", "env": { "MAPBOX_ACCESS_TOKEN": "${MAPBOX_ACCESS_TOKEN}" } } } } }, "letme": { "capability": "https://letme.dev/geo.geocode", "tool": "https://letme.dev/mapbox" }, "area": "everyday", "unitPrices": [ { "item": "Temporary Geocoding", "unit": "1k-requests", "usd": 0.75, "note": "After 100,000 free a month, $0.45 above 1 million" }, { "item": "Permanent Geocoding", "unit": "1k-requests", "usd": 5, "note": "No free allowance, $4 above 500,000" }, { "item": "Search Box sessions", "unit": "1k-requests", "usd": 3, "note": "Per 1,000 sessions after 500 free, introductory preview pricing. Standard rate $11.50 after 2,500" }, { "item": "Directions", "unit": "1k-requests", "usd": 2, "note": "After 100,000 free a month, $1.20 above 1 million" }, { "item": "Matrix", "unit": "1k-requests", "usd": 2, "note": "Per 1,000 elements after 100,000 free" }, { "item": "Static Images", "unit": "1k-requests", "usd": 1, "note": "After 50,000 free a month" }, { "item": "Vector tiles", "unit": "1k-requests", "usd": 0.25, "note": "After 200,000 free a month" } ], "provenance": { "legalEntity": "Mapbox, Inc.", "domain": "mapbox.com", "domainRegistered": "2003-11-27", "domainNote": "mapbox.com was registered in 2003, years before Mapbox started, so the domain was bought later.", "endpointOnVendorDomain": true, "terms": "https://www.mapbox.com/legal/tos", "privacy": "https://www.mapbox.com/legal/privacy", "statusPage": "https://status.mapbox.com", "changelog": "https://docs.mapbox.com/api/changelog/", "securityTxt": "none", "checked": "2026-11-01", "notes": [ "The terms of service were last updated 31 March 2024 and point to separate product terms for per-API rules.", "The terms let Mapbox create de-identified aggregated data from customer usage.", "www.mapbox.com/.well-known/security.txt returns 404 (re-checked 1 November 2026).", "The top-level API changelog's newest entry is 5 November 2021. Current changes are in per-service changelogs and the MCP server's CHANGELOG.md on GitHub.", "Subprocessor list (22 entries with locations) last updated 4 June 2026.", "A Service Level Agreement (last updated 15 April 2024) at https://www.mapbox.com/legal/sla covers customers with an executed order." ], "score": 86 }, "requirements": { "setupChecked": true, "complianceChecked": true, "card": "paid-only", "freeTier": true, "minutes": 5, "credential": "mixed", "hosting": [ "US" ], "euResidency": "no", "trainsOnData": "unknown", "zeroRetention": "unknown", "certifications": [ "SOC 2 Type II", "GDPR" ], "dpa": true, "selfHost": "no" }, "pageJsonUrl": "https://www.anchorterminal.com/tools/mapbox.json", "live": { "slug": "mapbox", "probe": { "target": "https://api.mapbox.com", "method": "get", "lastAt": "2026-11-07T18:20:37.607928507Z", "lastOk": true, "lastStatus": 200, "lastMs": 23, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 25, "p95ms24h": 95, "samples24h": 239, "samples30d": 7910, "days": [ { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 248, "ok": 248 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 187, "ok": 187 } ] }, "vendorStatus": { "page": "https://status.mapbox.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T18:21:21.890017027Z" }, "versions": [ { "registry": "github", "name": "mapbox/mcp-server", "version": "v0.17.0", "released": "2026-11-06", "seenAt": "2026-11-06T23:42:32.729365912Z" }, { "registry": "mcp-registry", "name": "io.github.mapbox/mcp-server", "version": "0.17.0", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "@mapbox/mcp-server", "version": "0.17.0", "seenAt": "2026-11-06T23:42:32.515191584Z" } ], "githubStars": 367, "npmWeekly": 5677, "securityTxt": { "url": "https://mapbox.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:43.742734359Z" }, "llmsTxt": { "url": "https://docs.mapbox.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:56.968988795Z" }, "domain": { "domain": "mapbox.com", "registered": "2003-11-27", "source": "https://rdap.verisign.com/com/v1/domain/mapbox.com", "checkedAt": "2026-11-01T14:12:09.671089153Z" }, "pages": [ { "url": "https://docs.mapbox.com/api/changelog/", "kind": "changelog", "status": 304, "checkedAt": "2026-11-07T14:06:56.328551059Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "395e3e05bd01" }, { "url": "https://www.mapbox.com/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:31:22.645906851Z", "changedAt": "2026-11-06T13:52:01.730958354Z", "fingerprint": "7345758914cc" }, { "url": "https://www.mapbox.com/legal/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:31:18.159504751Z", "changedAt": "2026-11-06T13:51:56.60150451Z", "fingerprint": "6ac6d7ded402" }, { "url": "https://www.mapbox.com/legal/tos", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:31:20.794072453Z", "changedAt": "2026-11-06T13:52:00.000498024Z", "fingerprint": "1a66e57c3d21" } ], "mcpTools": { "url": "https://mcp.mapbox.com/mcp", "checkedAt": "2026-11-07T01:46:10.747728338Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:46:10.747728338Z" }, "github": { "repo": "mapbox/mcp-server", "checkedAt": "2026-11-02T09:03:27.007357966Z", "stars": 363, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-30T13:51:34Z", "openIssues": 13, "openPRs": 8, "issuesOpened90d": 19, "issuesClosed90d": 6, "prsMerged90d": 37, "ci": { "branch": "main", "runs": 50, "success": 50, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-10-30T13:48:31Z" }, "replies": { "sampled": 25, "unanswered": 12, "medianDays": 0.3 } }, "updatedAt": "2026-11-07T18:21:21.890017027Z" } }, "answer": "Mapbox APIs + MCP scores 77.2 (BB) on agent readiness against Woosmap's 59.4 (C), and leads in every scored category.", "b": { "slug": "woosmap", "name": "Woosmap", "vendor": "WOOSMAP SAS", "vendorUrl": "https://www.woosmap.com", "kind": "http-api", "category": "maps", "summary": "Woosmap is a French location platform with REST APIs for address autocomplete and geocoding (Localities), store search, distance and routing, geolocation, indoor maps and map display, plus a hosted MCP server for AI assistants.", "url": "https://www.anchorterminal.com/tools/woosmap", "markdownUrl": "https://www.anchorterminal.com/tools/woosmap.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/woosmap.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/woosmap.json", "dns": "woosmap.grade.anchorterminal.com", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.woosmap.com/mcp", "packages": [], "auth": "api-key", "authNotes": "Keys from the Woosmap Console after a browser signup. Public keys (woos-...) are read-only and must be restricted to domains or IPs. Private keys are read-only or read and write, fixed at creation, restricted by IP, iOS or Android, and sent as the X-Api-Key header or the private_key query parameter. The MCP server takes a private key in the X-Api-Key header.", "pricing": "freemium", "pricingNotes": "Free plan up to 10,000 API requests a month with no credit card. Pro uses public volume tiers per API, shown in a calculator, and can be bought through AWS Marketplace. Enterprise is by quote with volume discounts, data caching options and a 99.9% SLA.", "priceSummary": "Freemium", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the OpenAPI spec, llms.txt or pricing page (checked 2026-11-06). The spec documents a 402 response for billing, not a payment protocol.", "endpoints": [] }, "toolCount": 9, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://developers.woosmap.com/", "llmsTxt": "https://developers.woosmap.com/llms.txt", "openapi": "https://developers.woosmap.com/assets/woosmap-openapi3.json", "capabilities": [ "geo.geocode", "geo.reverse", "geo.places", "geo.routing", "geo.tiles" ], "tags": [ "hosted", "mcp", "remote-mcp", "api-key", "freemium", "free-tier", "no-card", "llms-txt", "openapi", "official", "status-page", "enterprise", "sla", "eu", "android", "ios", "closed-source" ], "graded": true, "anchor": { "graded": true, "score": 59.4, "grade": "C", "agentReady": false, "rank": 704, "ranked": true, "rankOf": 1486, "categoryRank": 12, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 76, "maintenance": 26, "payments": 30, "reliability": 78, "schema": 81, "security": 43, "transparency": 54 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "Woosmap publishes an OpenAPI 3.1 spec, llms.txt with Markdown pages, per-endpoint rate limits and 429 retry rules, plus a hosted nine-tool MCP server. No changelog, security.txt, API data retention statement or readable per-request price was found, and private keys can travel in the query string.", "bestFor": "Store locators, address autocomplete and distance for retail and logistics teams that keep their own location data in the platform, with an MCP server for agents.", "strengths": [ "OpenAPI 3.1 spec with 47 paths, llms.txt routing index and Markdown twins of every page", "Per-endpoint rate limits with RateLimit headers and explicit 429 retry rules and sample code", "Hosted MCP server at api.woosmap.com/mcp with nine tools, including search over the customer's own store data", "Read-only and read/write private keys with IP, iOS or Android restrictions and an X-Api-Key header", "Free plan of 10,000 requests a month with no card" ], "weaknesses": [ "No public changelog or release notes for the APIs", "No security.txt, disclosure policy or certification found", "The privacy policy covers the website only, with nothing on API data retention", "Per-request prices aren't readable without the script-driven calculator", "`private_key` in the query string is documented and is the spec's default scheme" ], "agentNotes": [ "Send the private key in the X-Api-Key header, not the private_key query parameter", "Use a read-only private key for the MCP server unless the task writes stores or datasets", "On 429 wait the `t` seconds from the RateLimit header, retry at most three times, and pause batches when `r` reaches 0", "Use find_stores_nearby for the customer's own locations and find_nearby for public POIs", "Read endpoint parameters from the /api-reference/ Markdown pages, which llms.txt marks as authoritative" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59.4 } ], "editorialScores": { "ergonomics": 76, "maintenance": 26, "payments": 30, "reliability": 78, "schema": 81, "security": 43, "transparency": 31 }, "provenanceScore": 76, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl -H \"X-Api-Key: $WOOSMAP_PRIVATE_KEY\" \"https://api.woosmap.com/localities/geocode?address=Place+de+la+Comedie+Montpellier\"", "config": { "mcpServers": { "woosmap": { "args": [ "mcp-remote", "https://api.woosmap.com/mcp", "--header", "X-Api-Key: PRIVATE_KEY" ], "command": "npx" } } } }, "letme": { "capability": "https://letme.dev/geo.geocode", "tool": "https://letme.dev/woosmap" }, "area": "everyday", "provenance": { "legalEntity": "WOOSMAP SAS", "domain": "woosmap.com", "domainRegistered": "2010-06-04", "endpointOnVendorDomain": true, "terms": "https://www.woosmap.com/policies/terms-online", "privacy": "https://www.woosmap.com/policies/privacy", "statusPage": "https://status.woosmap.com", "changelog": "", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The online terms name WOOSMAP, a French SAS at 5 rue du Plan du Palais, 34000 Montpellier, RCS Montpellier 983 770 405, represented by its CEO Jean-Thomas Rouzin. The legal notice (effective 1 July 2024) gives SAS capital of €10,821,200 and AWS as the site host.", "status.woosmap.com's robots.txt disallows /api/ and /embed/. A request to /api/v2/incidents.json was sent by mistake on 6 November 2026 before robots.txt was read; its contents are not used anywhere in this listing.", "www.woosmap.com/.well-known/security.txt returns 404.", "No public API changelog was found. developers.woosmap.com/changelog/ and /release-notes/ return 404.", "RDAP gives woosmap.com a registration date of 4 June 2010. robots.txt on www.woosmap.com and developers.woosmap.com allows these pages, and the developer site's robots.txt allows llms.txt by name." ], "score": 76 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/woosmap.json", "live": { "slug": "woosmap", "probe": { "target": "https://api.woosmap.com/mcp", "method": "get", "lastAt": "2026-11-07T18:21:05.894098339Z", "lastOk": true, "lastStatus": 401, "lastMs": 219, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 48, "p95ms24h": 118, "samples24h": 200, "samples30d": 200, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 13 }, { "date": "2026-11-07", "probes": 187, "ok": 187 } ] }, "vendorStatus": { "page": "https://status.woosmap.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T18:22:11.709282208Z" }, "securityTxt": { "url": "https://woosmap.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:21.81706489Z" }, "llmsTxt": { "url": "https://developers.woosmap.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:34:23.501072242Z" }, "pages": [ { "url": "https://www.woosmap.com/policies/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:37:14.116262014Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "99523833ae5e" }, { "url": "https://www.woosmap.com/policies/terms-online", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:37:19.402817389Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "6252e1bc3d91" } ], "updatedAt": "2026-11-07T18:22:11.709282208Z" } }, "edges": [ { "by": 64, "category": "maintenance", "leads": "mapbox", "name": "Maintenance \u0026 community", "reasons": { "a": "MCP server v0.16.0 on 15 October 2026, after v0.15.0 and v0.15.1 on 8 and 9 October (30). Three stable releases in the 90 days from 3 August, v0.15.0, v0.15.1 and v0.16.0, plus the v0.16.1-dev, v0.17.0-dev and v0.17.0-dev.1 pre-releases (20). Commits reference user-reported issues and fixes land within weeks. We couldn't see issue reply times from git (15). Listed in the official MCP registry as io.github.mapbox/mcp-server, active, with 0.16.0 the latest, published 15 October (15). CI builds and runs the test suite on every push and pull request, and since 0.17.0-dev also typechecks the tests (10).", "b": "No dated API release, changelog or release note found. The newest dated activity we saw is the public woosmap-samples repository on 16 September 2026, which isn't an API release (10). No dated changes to count in the last 90 days (0). Support by email and a support centre, with no public changelog (5). Official JavaScript, iOS and Android SDKs exist, but we couldn't check their versions because the GitHub API was rate-limited and two SDK repository names didn't resolve; the MCP server isn't in the official MCP registry (8). The samples carry tests, per the rate-limits page (3). 10+0+5+8+3 = 26." }, "scores": { "a": 90, "b": 26 } }, { "by": 30, "category": "transparency", "leads": "mapbox", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed service with published terms and product terms, plus an MIT-licensed MCP server (20). A DPA, a privacy FAQ that says IP addresses are kept 30 days, and geocoding storage rules that are plain about what can be cached. The terms also let Mapbox build de-identified aggregated data from customer usage (24). An API policy of at least 90 days' emailed notice before an endpoint is deprecated, with dated removals in the changelog, though that changelog stopped in 2021 (18). 22 subprocessors with locations, 14 third-party and 8 affiliates, still last updated 4 June 2026 on 1 November (20).", "b": "Editorial half only. Closed service under online terms that name WOOSMAP SAS of Montpellier and the Commercial Court of Paris (15). The privacy policy covers website visitors only, and we found no statement on how long API request data is kept (5). The pricing page says the Address API is 'being deprecated for Pro Plan subscriptions', with no date (5). The legal notice says the site is hosted by Amazon Web Services; no sub-processor list or data location for the APIs was found (6). 15+5+5+6 = 31." }, "scores": { "a": 84, "b": 54 } }, { "by": 28, "category": "security", "leads": "mapbox", "name": "Security \u0026 auth", "reasons": { "a": "Public and secret tokens with scopes, URL restrictions, one-hour temporary tokens and documented rotation, which earns 30. Less 10 because the REST APIs take the token as the access_token query parameter, and that's the documented way in. The hosted MCP signs in with OAuth instead. Accounts on the card-free trial get a single token they can't rotate or delete until a payment method is added (20). Public-scope tokens can't change the account, and every MCP tool is read-only (18). Responses are structured place data, partly third-party POI names and attributes, and we found no prompt-injection guidance (7). The local MCP emits OpenTelemetry traces per tool call tagged with the client name. We didn't check per-token usage reporting in the account (8). SOC 2 Type II and SOC 3, a HackerOne bug bounty and a disclosure programme, re-read on 1 November. MCP 0.13.0 on 30 July 2026 fixed a query-parameter injection through directions_tool's exclude field, and 0.15.0 on 8 October shipped the fix for reads of cached tool results by anyone who knew a resource URI and could forge the owner's username claim, with a narrowed map CSP. 0.16.0 on 15 October replaced those cached refs for directions and isochrones with refs that re-run the request under the reader's token, and fetches place photos server-side only from public https hosts. All were stated in the public changelog. On 21 October the URL check for custom marker images and place photos was fixed to strip every trailing dot (`localhost..` had passed), released in the v0.17.0-dev pre-releases of 30 October and not yet in a stable release. The photo fetch also resolves the host and refuses private addresses, and marker URLs are fetched by Mapbox's Static Images API, so we read it as hardening and don't deduct. No security.txt, still 404 on 1 November (18).", "b": "Public keys are read-only and must carry a domain or IP restriction. Private keys are read-only or read and write (fixed at creation), restricted by IP, iOS or Android, and can go in an X-Api-Key header. Less 10 because `private_key` in the query string is a documented option and the default in the spec (17). Read-only keys and the read/write split give least privilege; no confirmation step on dataset deletes was found (16). find_nearby and get_place_details return public POI data, ratings and opening hours, with no prompt-injection guidance (7). Console usage per project wasn't checked (3). www.woosmap.com/.well-known/security.txt returns 404, and we found no disclosure policy, bug bounty or certification (0). 17+16+7+3+0 = 43." }, "scores": { "a": 71, "b": 43 } }, { "by": 12, "category": "ergonomics", "leads": "mapbox", "name": "Agent ergonomics", "reasons": { "a": "29 core MCP tools in 0.16.0, still the latest stable release on 1 November, so 15, plus 5 back for --enable-tools and --disable-tools on the local server. The docs don't say the hosted endpoint can filter tools (20). limit, types, bbox and proximity on geocoding, and a v6 batch endpoint (18). Documented status codes with messages an agent can act on, such as 'Query exceeded character limit of 200' (17). Every tool carries readOnlyHint true, destructiveHint false and idempotentHint, and 17 offline geometry tools set openWorldHint false (20). Few required parameters and the server elicits a route choice when the client supports it. Since 0.16.0 large directions and isochrone results return a short ref that any server process can answer, and descriptions no longer tell the model to avoid other tools or web search. Official SDKs are JavaScript and the mobile SDKs, with no current official Python client that we found (13).", "b": "API reading, with the hosted MCP server's nine tools as a second surface. Localities and Stores responses can be narrowed by type, components and fields, and the MCP set is small (20). Store search takes query filters, radius and paging, and the Distance Matrix has an async mode for large jobs (17). Documented error codes including 402 for billing and 429 with reset timing (17). Reads are safe to retry, but no idempotency key was found for the Datasets and Stores write endpoints, and the MCP docs don't mention tool annotations (10). Official JavaScript, iOS and Android SDKs and samples in Python and JavaScript, with few required parameters (12). 20+17+17+10+12 = 76." }, "scores": { "a": 88, "b": 76 } }, { "by": 10, "category": "payments", "leads": "mapbox", "name": "Payments \u0026 pricing", "reasons": { "a": "No x402, MPP or L402 (0). Per-1,000 prices for every API published without login, $0.75 temporary geocoding, $5 permanent, $2 directions, re-read on 1 November (20). The sign-up guide has a 'Start without a credit card' option, a trial with monthly limits such as 10,000 temporary geocodes, 10,000 directions requests and 5,000 map loads, and lower rate limits. Adding a card unlocks the full free allowances, permanent geocoding and raster tiles. Re-read on 1 November (20). Signup is a browser flow with email confirmation, and the hosted MCP needs a browser OAuth step (0).", "b": "No x402, MPP or L402 (0). Plans and per-API tier breakpoints are public, but per-request prices sit in a script-driven calculator we couldn't read, so plan-only credit (10). Free plan up to 10,000 requests a month with 'No Credit Card Required' (20). A person signs up and creates a key in the console (0). 0+10+20+0 = 30." }, "scores": { "a": 40, "b": 30 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Mapbox", "b": "WOOSMAP SAS", "name": "Vendor" }, { "a": "https://api.mapbox.com", "b": "https://api.woosmap.com/mcp", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP, stdio", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "API key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "$0.75 per 1,000 requests", "b": "not published", "name": "Price for geocoding" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT (MCP server)", "b": "none", "name": "Licence" }, { "a": "29", "b": "9", "name": "Tools exposed" }, { "a": "yes", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "io.github.mapbox/mcp-server", "b": "not listed", "name": "MCP registry" }, { "a": "2026-10-15", "b": "none", "name": "Last release" }, { "a": "2024-03-31", "b": "no date given", "name": "Terms last updated" }, { "a": "2026-02-11", "b": "2024-07-01", "name": "Privacy policy last updated" }, { "a": "yes", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "353 stars, 2k npm/wk", "b": "none", "name": "Popularity" }, { "a": "3.6/5 (8)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Mapbox APIs + MCP scores 77.2 (BB) on agent readiness against Woosmap's 59.4 (C), and leads in every scored category.", "question": "Which is better for AI agents, Mapbox APIs + MCP or Woosmap?" }, { "answer": "Mapbox APIs + MCP takes an API key or an OAuth sign-in. Woosmap needs an API key.", "question": "Do Mapbox APIs + MCP and Woosmap need an API key?" }, { "answer": "Yes. Mapbox APIs + MCP has a hosted endpoint at https://api.mapbox.com and Woosmap at https://api.woosmap.com/mcp.", "question": "Can an agent call Mapbox APIs + MCP and Woosmap without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Agent ergonomics, 88 against 76", "Security \u0026 auth, 71 against 43", "Payments \u0026 pricing, 40 against 30", "Maintenance \u0026 community, 90 against 26", "Transparency \u0026 trust, 84 against 54" ], "also": [ "Agent-ready, a grade of BB or better", "Runs on your own machine" ], "goodFor": "An agent that needs search, routing, isochrones, map matching and route optimisation from one vendor with a hosted, OAuth-protected MCP.", "slug": "mapbox", "watchFor": "Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate, and a card on file" }, { "aheadOn": null, "also": null, "goodFor": "Store locators, address autocomplete and distance for retail and logistics teams that keep their own location data in the platform, with an MCP server for agents.", "slug": "woosmap", "watchFor": "No public changelog or release notes for the APIs" } ], "history": { "mapbox": [ { "causes": [ "product", "evidence" ], "date": "2026-10-17", "delta": 2.2, "from": 75, "fromGrade": "BB", "to": 77.2, "toGrade": "BB" }, { "causes": [ "method" ], "date": "2026-10-08", "delta": -0.2, "from": 75.2, "fromGrade": "BB", "to": 75, "toGrade": "BB" } ], "woosmap": null }, "job": { "capability": "geo.geocode", "name": "Geocoding" }, "others": [ { "json": "https://www.anchorterminal.com/compare/amazon-location-vs-mapbox.json", "title": "Amazon Location Service vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/amazon-location-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/amazon-location-vs-woosmap.json", "title": "Amazon Location Service vs Woosmap", "url": "https://www.anchorterminal.com/compare/amazon-location-vs-woosmap" }, { "json": "https://www.anchorterminal.com/compare/arcgis-vs-mapbox.json", "title": "ArcGIS Location Platform vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/arcgis-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/arcgis-vs-woosmap.json", "title": "ArcGIS Location Platform vs Woosmap", "url": "https://www.anchorterminal.com/compare/arcgis-vs-woosmap" }, { "json": "https://www.anchorterminal.com/compare/azure-maps-vs-mapbox.json", "title": "Azure Maps vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/azure-maps-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/azure-maps-vs-woosmap.json", "title": "Azure Maps vs Woosmap", "url": "https://www.anchorterminal.com/compare/azure-maps-vs-woosmap" }, { "json": "https://www.anchorterminal.com/compare/geoapify-vs-mapbox.json", "title": "Geoapify Location Platform + MCP vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/geoapify-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/geoapify-vs-woosmap.json", "title": "Geoapify Location Platform + MCP vs Woosmap", "url": "https://www.anchorterminal.com/compare/geoapify-vs-woosmap" }, { "json": "https://www.anchorterminal.com/compare/geocodio-vs-mapbox.json", "title": "Geocodio vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/geocodio-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/geocodio-vs-woosmap.json", "title": "Geocodio vs Woosmap", "url": "https://www.anchorterminal.com/compare/geocodio-vs-woosmap" }, { "json": "https://www.anchorterminal.com/compare/google-maps-platform-vs-mapbox.json", "title": "Google Maps Platform + Grounding Lite MCP vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/google-maps-platform-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/google-maps-platform-vs-woosmap.json", "title": "Google Maps Platform + Grounding Lite MCP vs Woosmap", "url": "https://www.anchorterminal.com/compare/google-maps-platform-vs-woosmap" }, { "json": "https://www.anchorterminal.com/compare/here-location-services-vs-mapbox.json", "title": "HERE Location Services vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/here-location-services-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/here-location-services-vs-woosmap.json", "title": "HERE Location Services vs Woosmap", "url": "https://www.anchorterminal.com/compare/here-location-services-vs-woosmap" }, { "json": "https://www.anchorterminal.com/compare/locationiq-vs-mapbox.json", "title": "LocationIQ vs Mapbox APIs + MCP", "url": "https://www.anchorterminal.com/compare/locationiq-vs-mapbox" }, { "json": "https://www.anchorterminal.com/compare/locationiq-vs-woosmap.json", "title": "LocationIQ vs Woosmap", "url": "https://www.anchorterminal.com/compare/locationiq-vs-woosmap" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-mapquest.json", "title": "Mapbox APIs + MCP vs MapQuest", "url": "https://www.anchorterminal.com/compare/mapbox-vs-mapquest" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-maptiler.json", "title": "Mapbox APIs + MCP vs MapTiler Cloud", "url": "https://www.anchorterminal.com/compare/mapbox-vs-maptiler" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-nextbillion.json", "title": "Mapbox APIs + MCP vs NextBillion.ai", "url": "https://www.anchorterminal.com/compare/mapbox-vs-nextbillion" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-nominatim.json", "title": "Mapbox APIs + MCP vs Nominatim", "url": "https://www.anchorterminal.com/compare/mapbox-vs-nominatim" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-opencage.json", "title": "Mapbox APIs + MCP vs OpenCage Geocoding API", "url": "https://www.anchorterminal.com/compare/mapbox-vs-opencage" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-radar.json", "title": "Mapbox APIs + MCP vs Radar", "url": "https://www.anchorterminal.com/compare/mapbox-vs-radar" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-stadia-maps.json", "title": "Mapbox APIs + MCP vs Stadia Maps", "url": "https://www.anchorterminal.com/compare/mapbox-vs-stadia-maps" }, { "json": "https://www.anchorterminal.com/compare/mapbox-vs-tomtom.json", "title": "Mapbox APIs + MCP vs TomTom Maps APIs + MCP", "url": "https://www.anchorterminal.com/compare/mapbox-vs-tomtom" }, { "json": "https://www.anchorterminal.com/compare/mapquest-vs-woosmap.json", "title": "MapQuest vs Woosmap", "url": "https://www.anchorterminal.com/compare/mapquest-vs-woosmap" }, { "json": "https://www.anchorterminal.com/compare/maptiler-vs-woosmap.json", "title": "MapTiler Cloud vs Woosmap", "url": "https://www.anchorterminal.com/compare/maptiler-vs-woosmap" }, { "json": "https://www.anchorterminal.com/compare/nominatim-vs-woosmap.json", "title": "Nominatim vs Woosmap", "url": "https://www.anchorterminal.com/compare/nominatim-vs-woosmap" }, { "json": "https://www.anchorterminal.com/compare/opencage-vs-woosmap.json", "title": "OpenCage Geocoding API vs Woosmap", "url": "https://www.anchorterminal.com/compare/opencage-vs-woosmap" }, { "json": "https://www.anchorterminal.com/compare/radar-vs-woosmap.json", "title": "Radar vs Woosmap", "url": "https://www.anchorterminal.com/compare/radar-vs-woosmap" }, { "json": "https://www.anchorterminal.com/compare/stadia-maps-vs-woosmap.json", "title": "Stadia Maps vs Woosmap", "url": "https://www.anchorterminal.com/compare/stadia-maps-vs-woosmap" }, { "json": "https://www.anchorterminal.com/compare/tomtom-vs-woosmap.json", "title": "TomTom Maps APIs + MCP vs Woosmap", "url": "https://www.anchorterminal.com/compare/tomtom-vs-woosmap" }, { "json": "https://www.anchorterminal.com/compare/nextbillion-vs-woosmap.json", "title": "NextBillion.ai vs Woosmap", "url": "https://www.anchorterminal.com/compare/nextbillion-vs-woosmap" } ], "panel": null, "scores": [ { "by": 4, "edge": "mapbox", "key": "reliability", "mapbox": 82, "name": "Reliability", "weight": 16, "woosmap": 78 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 4, "edge": "mapbox", "key": "schema", "mapbox": 85, "name": "Schema \u0026 documentation", "weight": 13, "woosmap": 81 }, { "by": 12, "edge": "mapbox", "key": "ergonomics", "mapbox": 88, "name": "Agent ergonomics", "weight": 13, "woosmap": 76 }, { "by": 28, "edge": "mapbox", "key": "security", "mapbox": 71, "name": "Security \u0026 auth", "weight": 14, "woosmap": 43 }, { "by": 10, "edge": "mapbox", "key": "payments", "mapbox": 40, "name": "Payments \u0026 pricing", "weight": 10, "woosmap": 30 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 64, "edge": "mapbox", "key": "maintenance", "mapbox": 90, "name": "Maintenance \u0026 community", "weight": 7, "woosmap": 26 }, { "by": 30, "edge": "mapbox", "key": "transparency", "mapbox": 84, "name": "Transparency \u0026 trust", "weight": 7, "woosmap": 54 } ], "summary": "Mapbox APIs + MCP scores 77.2 (BB) on agent readiness against Woosmap's 59.4 (C), and leads in every scored category. Both do geocoding.", "tasks": null, "tutorials": [], "verdicts": { "mapbox": "Official MCP server, hosted at mcp.mapbox.com with OAuth or run locally, listed in the MCP registry. Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate.", "woosmap": "Woosmap publishes an OpenAPI 3.1 spec, llms.txt with Markdown pages, per-endpoint rate limits and 429 retry rules, plus a hosted nine-tool MCP server. No changelog, security.txt, API data retention statement or readable per-request price was found, and private keys can travel in the query string." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/mapbox-vs-woosmap", "json": "https://www.anchorterminal.com/compare/mapbox-vs-woosmap.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/mapbox-vs-woosmap.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/mapbox-vs-woosmap.min.md" }, "markdown": "Mapbox APIs + MCP scores 77.2 (BB) on agent readiness against Woosmap's 59.4 (C), and leads in every scored category. Both do geocoding.\n\n- Mapbox APIs + MCP: grade BB, 77.2/100, rank #35 of 1486. Markdown https://www.anchorterminal.com/tools/mapbox.md · JSON https://www.anchorterminal.com/api/v1/tools/mapbox.json\n- Woosmap: grade C, 59.4/100, rank #704 of 1486. Markdown https://www.anchorterminal.com/tools/woosmap.md · JSON https://www.anchorterminal.com/api/v1/tools/woosmap.json\n- Best maps, geocoding and places APIs for AI agents: https://www.anchorterminal.com/best/maps/index.md\n- All 153 maps comparisons: https://www.anchorterminal.com/compare/maps/index.md\n\n## Which one, for what\n\n### Mapbox APIs + MCP (BB)\n\nGood for: An agent that needs search, routing, isochrones, map matching and route optimisation from one vendor with a hosted, OAuth-protected MCP.\n\nAhead on:\n- Agent ergonomics, 88 against 76\n- Security \u0026 auth, 71 against 43\n- Payments \u0026 pricing, 40 against 30\n- Maintenance \u0026 community, 90 against 26\n- Transparency \u0026 trust, 84 against 54\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- Runs on your own machine\n\nWatch for: Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate, and a card on file\n\n### Woosmap (C)\n\nGood for: Store locators, address autocomplete and distance for retail and logistics teams that keep their own location data in the platform, with an MCP server for agents.\n\nWatch for: No public changelog or release notes for the APIs\n\n\n## Why the edge\n\n### Maintenance \u0026 community: Mapbox APIs + MCP +64\n\n- Mapbox APIs + MCP (90): MCP server v0.16.0 on 15 October 2026, after v0.15.0 and v0.15.1 on 8 and 9 October (30). Three stable releases in the 90 days from 3 August, v0.15.0, v0.15.1 and v0.16.0, plus the v0.16.1-dev, v0.17.0-dev and v0.17.0-dev.1 pre-releases (20). Commits reference user-reported issues and fixes land within weeks. We couldn't see issue reply times from git (15). Listed in the official MCP registry as io.github.mapbox/mcp-server, active, with 0.16.0 the latest, published 15 October (15). CI builds and runs the test suite on every push and pull request, and since 0.17.0-dev also typechecks the tests (10).\n- Woosmap (26): No dated API release, changelog or release note found. The newest dated activity we saw is the public woosmap-samples repository on 16 September 2026, which isn't an API release (10). No dated changes to count in the last 90 days (0). Support by email and a support centre, with no public changelog (5). Official JavaScript, iOS and Android SDKs exist, but we couldn't check their versions because the GitHub API was rate-limited and two SDK repository names didn't resolve; the MCP server isn't in the official MCP registry (8). The samples carry tests, per the rate-limits page (3). 10+0+5+8+3 = 26.\n\n### Transparency \u0026 trust: Mapbox APIs + MCP +30\n\n- Mapbox APIs + MCP (84): Closed service with published terms and product terms, plus an MIT-licensed MCP server (20). A DPA, a privacy FAQ that says IP addresses are kept 30 days, and geocoding storage rules that are plain about what can be cached. The terms also let Mapbox build de-identified aggregated data from customer usage (24). An API policy of at least 90 days' emailed notice before an endpoint is deprecated, with dated removals in the changelog, though that changelog stopped in 2021 (18). 22 subprocessors with locations, 14 third-party and 8 affiliates, still last updated 4 June 2026 on 1 November (20).\n- Woosmap (54): Editorial half only. Closed service under online terms that name WOOSMAP SAS of Montpellier and the Commercial Court of Paris (15). The privacy policy covers website visitors only, and we found no statement on how long API request data is kept (5). The pricing page says the Address API is 'being deprecated for Pro Plan subscriptions', with no date (5). The legal notice says the site is hosted by Amazon Web Services; no sub-processor list or data location for the APIs was found (6). 15+5+5+6 = 31.\n\n### Security \u0026 auth: Mapbox APIs + MCP +28\n\n- Mapbox APIs + MCP (71): Public and secret tokens with scopes, URL restrictions, one-hour temporary tokens and documented rotation, which earns 30. Less 10 because the REST APIs take the token as the access_token query parameter, and that's the documented way in. The hosted MCP signs in with OAuth instead. Accounts on the card-free trial get a single token they can't rotate or delete until a payment method is added (20). Public-scope tokens can't change the account, and every MCP tool is read-only (18). Responses are structured place data, partly third-party POI names and attributes, and we found no prompt-injection guidance (7). The local MCP emits OpenTelemetry traces per tool call tagged with the client name. We didn't check per-token usage reporting in the account (8). SOC 2 Type II and SOC 3, a HackerOne bug bounty and a disclosure programme, re-read on 1 November. MCP 0.13.0 on 30 July 2026 fixed a query-parameter injection through directions_tool's exclude field, and 0.15.0 on 8 October shipped the fix for reads of cached tool results by anyone who knew a resource URI and could forge the owner's username claim, with a narrowed map CSP. 0.16.0 on 15 October replaced those cached refs for directions and isochrones with refs that re-run the request under the reader's token, and fetches place photos server-side only from public https hosts. All were stated in the public changelog. On 21 October the URL check for custom marker images and place photos was fixed to strip every trailing dot (`localhost..` had passed), released in the v0.17.0-dev pre-releases of 30 October and not yet in a stable release. The photo fetch also resolves the host and refuses private addresses, and marker URLs are fetched by Mapbox's Static Images API, so we read it as hardening and don't deduct. No security.txt, still 404 on 1 November (18).\n- Woosmap (43): Public keys are read-only and must carry a domain or IP restriction. Private keys are read-only or read and write (fixed at creation), restricted by IP, iOS or Android, and can go in an X-Api-Key header. Less 10 because `private_key` in the query string is a documented option and the default in the spec (17). Read-only keys and the read/write split give least privilege; no confirmation step on dataset deletes was found (16). find_nearby and get_place_details return public POI data, ratings and opening hours, with no prompt-injection guidance (7). Console usage per project wasn't checked (3). www.woosmap.com/.well-known/security.txt returns 404, and we found no disclosure policy, bug bounty or certification (0). 17+16+7+3+0 = 43.\n\n### Agent ergonomics: Mapbox APIs + MCP +12\n\n- Mapbox APIs + MCP (88): 29 core MCP tools in 0.16.0, still the latest stable release on 1 November, so 15, plus 5 back for --enable-tools and --disable-tools on the local server. The docs don't say the hosted endpoint can filter tools (20). limit, types, bbox and proximity on geocoding, and a v6 batch endpoint (18). Documented status codes with messages an agent can act on, such as 'Query exceeded character limit of 200' (17). Every tool carries readOnlyHint true, destructiveHint false and idempotentHint, and 17 offline geometry tools set openWorldHint false (20). Few required parameters and the server elicits a route choice when the client supports it. Since 0.16.0 large directions and isochrone results return a short ref that any server process can answer, and descriptions no longer tell the model to avoid other tools or web search. Official SDKs are JavaScript and the mobile SDKs, with no current official Python client that we found (13).\n- Woosmap (76): API reading, with the hosted MCP server's nine tools as a second surface. Localities and Stores responses can be narrowed by type, components and fields, and the MCP set is small (20). Store search takes query filters, radius and paging, and the Distance Matrix has an async mode for large jobs (17). Documented error codes including 402 for billing and 429 with reset timing (17). Reads are safe to retry, but no idempotency key was found for the Datasets and Stores write endpoints, and the MCP docs don't mention tool annotations (10). Official JavaScript, iOS and Android SDKs and samples in Python and JavaScript, with few required parameters (12). 20+17+17+10+12 = 76.\n\n### Payments \u0026 pricing: Mapbox APIs + MCP +10\n\n- Mapbox APIs + MCP (40): No x402, MPP or L402 (0). Per-1,000 prices for every API published without login, $0.75 temporary geocoding, $5 permanent, $2 directions, re-read on 1 November (20). The sign-up guide has a 'Start without a credit card' option, a trial with monthly limits such as 10,000 temporary geocodes, 10,000 directions requests and 5,000 map loads, and lower rate limits. Adding a card unlocks the full free allowances, permanent geocoding and raster tiles. Re-read on 1 November (20). Signup is a browser flow with email confirmation, and the hosted MCP needs a browser OAuth step (0).\n- Woosmap (30): No x402, MPP or L402 (0). Plans and per-API tier breakpoints are public, but per-request prices sit in a script-driven calculator we couldn't read, so plan-only credit (10). Free plan up to 10,000 requests a month with 'No Credit Card Required' (20). A person signs up and creates a key in the console (0). 0+10+20+0 = 30.\n\n## Score by category\n\n| Category | Weight | Mapbox APIs + MCP | Woosmap | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 82 | 78 | Mapbox APIs + MCP +4 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 85 | 81 | Mapbox APIs + MCP +4 |\n| Agent ergonomics | 13% (16.2 this run) | 88 | 76 | Mapbox APIs + MCP +12 |\n| Security \u0026 auth | 14% (17.5 this run) | 71 | 43 | Mapbox APIs + MCP +28 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 30 | Mapbox APIs + MCP +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 90 | 26 | Mapbox APIs + MCP +64 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 84 | 54 | Mapbox APIs + MCP +30 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **77.2 · BB** | **59.4 · C** | |\n\n## Facts side by side\n\n| Fact | Mapbox APIs + MCP | Woosmap |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Mapbox | WOOSMAP SAS |\n| Hosted endpoint | `https://api.mapbox.com` | `https://api.woosmap.com/mcp` |\n| Transports | HTTP, Streamable HTTP, stdio | HTTP, Streamable HTTP |\n| Auth | OAuth or key | API key |\n| Pricing | Freemium | Freemium |\n| Price for geocoding | $0.75 per 1,000 requests | not published |\n| x402 | no | no |\n| Licence | MIT (MCP server) | none |\n| Tools exposed | 29 | 9 |\n| Read-only variant documented | yes | yes |\n| llms.txt | yes | yes |\n| MCP registry | `io.github.mapbox/mcp-server` | not listed |\n| Last release | 2026-10-15 | none |\n| Terms last updated | 2024-03-31 | no date given |\n| Privacy policy last updated | 2026-02-11 | 2024-07-01 |\n| Customer content may train models | yes | not found in the text |\n| Terms restrict automated access | not found in the text | not found in the text |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | yes | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 353 stars, 2k npm/wk | none |\n| Agent reviews | 3.6/5 (8) | none |\n\n## How the scores have moved\n\n### Mapbox APIs + MCP\n\n- +2.2 on 17 October 2026: product, new evidence\n- -0.2 on 8 October 2026: checklist\n\n### Woosmap\n\nNo score change since it was listed.\n\n## Verdicts\n\n**Mapbox APIs + MCP.** Official MCP server, hosted at mcp.mapbox.com with OAuth or run locally, listed in the MCP registry. Storing geocodes needs the Permanent tier at $5 per 1,000, about 6.7 times the temporary rate.\n\n**Woosmap.** Woosmap publishes an OpenAPI 3.1 spec, llms.txt with Markdown pages, per-endpoint rate limits and 429 retry rules, plus a hosted nine-tool MCP server. No changelog, security.txt, API data retention statement or readable per-request price was found, and private keys can travel in the query string.\n\n## Before you call either\n\n### Mapbox APIs + MCP\n\n1. Set permanent=true only when the result goes into a database, since it moves the call to the $5 per 1,000 rate\n2. Keep search_and_geocode_tool queries under 200 characters, the live limit, not the 256 the API docs state\n3. On 429, wait until the X-Rate-Limit-Reset timestamp, since no Retry-After is sent\n4. Run the local server with --enable-tools to load only the tools the task needs\n5. On a trial account without a card, expect lower limits and no permanent geocoding; check the Console usage before batch work\n\n### Woosmap\n\n1. Send the private key in the X-Api-Key header, not the private_key query parameter\n2. Use a read-only private key for the MCP server unless the task writes stores or datasets\n3. On 429 wait the `t` seconds from the RateLimit header, retry at most three times, and pause batches when `r` reaches 0\n4. Use find_stores_nearby for the customer's own locations and find_nearby for public POIs\n5. Read endpoint parameters from the /api-reference/ Markdown pages, which llms.txt marks as authoritative\n\n## Questions\n\n### Which is better for AI agents, Mapbox APIs + MCP or Woosmap?\n\nMapbox APIs + MCP scores 77.2 (BB) on agent readiness against Woosmap's 59.4 (C), and leads in every scored category.\n\n### Do Mapbox APIs + MCP and Woosmap need an API key?\n\nMapbox APIs + MCP takes an API key or an OAuth sign-in. Woosmap needs an API key.\n\n### Can an agent call Mapbox APIs + MCP and Woosmap without installing anything?\n\nYes. Mapbox APIs + MCP has a hosted endpoint at https://api.mapbox.com and Woosmap at https://api.woosmap.com/mcp.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/mapbox-vs-woosmap.json, and with the fewest tokens: https://www.anchorterminal.com/compare/mapbox-vs-woosmap.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"mapbox\", \"b\": \"woosmap\"}`. From a terminal: `anchor compare mapbox woosmap`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/mapbox.json and https://www.anchorterminal.com/api/v1/tools/woosmap.json\n\n## Other comparisons with Mapbox APIs + MCP or Woosmap\n\n- [Amazon Location Service vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/amazon-location-vs-mapbox.md)\n- [Amazon Location Service vs Woosmap](https://www.anchorterminal.com/compare/amazon-location-vs-woosmap.md)\n- [ArcGIS Location Platform vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/arcgis-vs-mapbox.md)\n- [ArcGIS Location Platform vs Woosmap](https://www.anchorterminal.com/compare/arcgis-vs-woosmap.md)\n- [Azure Maps vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/azure-maps-vs-mapbox.md)\n- [Azure Maps vs Woosmap](https://www.anchorterminal.com/compare/azure-maps-vs-woosmap.md)\n- [Geoapify Location Platform + MCP vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/geoapify-vs-mapbox.md)\n- [Geoapify Location Platform + MCP vs Woosmap](https://www.anchorterminal.com/compare/geoapify-vs-woosmap.md)\n- [Geocodio vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/geocodio-vs-mapbox.md)\n- [Geocodio vs Woosmap](https://www.anchorterminal.com/compare/geocodio-vs-woosmap.md)\n- [Google Maps Platform + Grounding Lite MCP vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/google-maps-platform-vs-mapbox.md)\n- [Google Maps Platform + Grounding Lite MCP vs Woosmap](https://www.anchorterminal.com/compare/google-maps-platform-vs-woosmap.md)\n- [HERE Location Services vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/here-location-services-vs-mapbox.md)\n- [HERE Location Services vs Woosmap](https://www.anchorterminal.com/compare/here-location-services-vs-woosmap.md)\n- [LocationIQ vs Mapbox APIs + MCP](https://www.anchorterminal.com/compare/locationiq-vs-mapbox.md)\n- [LocationIQ vs Woosmap](https://www.anchorterminal.com/compare/locationiq-vs-woosmap.md)\n- [Mapbox APIs + MCP vs MapQuest](https://www.anchorterminal.com/compare/mapbox-vs-mapquest.md)\n- [Mapbox APIs + MCP vs MapTiler Cloud](https://www.anchorterminal.com/compare/mapbox-vs-maptiler.md)\n- [Mapbox APIs + MCP vs NextBillion.ai](https://www.anchorterminal.com/compare/mapbox-vs-nextbillion.md)\n- [Mapbox APIs + MCP vs Nominatim](https://www.anchorterminal.com/compare/mapbox-vs-nominatim.md)\n- [Mapbox APIs + MCP vs OpenCage Geocoding API](https://www.anchorterminal.com/compare/mapbox-vs-opencage.md)\n- [Mapbox APIs + MCP vs Radar](https://www.anchorterminal.com/compare/mapbox-vs-radar.md)\n- [Mapbox APIs + MCP vs Stadia Maps](https://www.anchorterminal.com/compare/mapbox-vs-stadia-maps.md)\n- [Mapbox APIs + MCP vs TomTom Maps APIs + MCP](https://www.anchorterminal.com/compare/mapbox-vs-tomtom.md)\n- [MapQuest vs Woosmap](https://www.anchorterminal.com/compare/mapquest-vs-woosmap.md)\n- [MapTiler Cloud vs Woosmap](https://www.anchorterminal.com/compare/maptiler-vs-woosmap.md)\n- [Nominatim vs Woosmap](https://www.anchorterminal.com/compare/nominatim-vs-woosmap.md)\n- [OpenCage Geocoding API vs Woosmap](https://www.anchorterminal.com/compare/opencage-vs-woosmap.md)\n- [Radar vs Woosmap](https://www.anchorterminal.com/compare/radar-vs-woosmap.md)\n- [Stadia Maps vs Woosmap](https://www.anchorterminal.com/compare/stadia-maps-vs-woosmap.md)\n- [TomTom Maps APIs + MCP vs Woosmap](https://www.anchorterminal.com/compare/tomtom-vs-woosmap.md)\n- [NextBillion.ai vs Woosmap](https://www.anchorterminal.com/compare/nextbillion-vs-woosmap.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Mapbox APIs + MCP vs Woosmap", "url": "" } ], "description": "Mapbox scores 77.2 (BB) to Woosmap's 59.4 (C) for geocoding. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Mapbox APIs + MCP BB 77.2", "Woosmap C 59.4", "scores" ], "h1": "Mapbox APIs + MCP vs Woosmap", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/mapbox-vs-woosmap", "published": "2026-10-01", "section": "tools", "title": "Mapbox vs Woosmap for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/mapbox-vs-woosmap" }, "tokens": { "markdown": 4600, "slim": 2630 }, "version": 1 }