{ "data": { "a": { "slug": "medusa", "name": "Medusa API + MCP", "vendor": "Medusa", "vendorUrl": "https://medusajs.com", "kind": "http-api", "category": "commerce", "summary": "Open-source headless commerce backend in TypeScript, self-hosted or run on Medusa Cloud.", "url": "https://www.anchorterminal.com/tools/medusa", "markdownUrl": "https://www.anchorterminal.com/tools/medusa.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/medusa.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/medusa.json", "repo": "https://github.com/medusajs/medusa", "license": "MIT", "transports": [ "http", "streamable-http" ], "packages": [ { "registry": "npm", "name": "@medusajs/js-sdk" }, { "registry": "npm", "name": "@medusajs/medusa" } ], "auth": "mixed", "authNotes": "Store API calls need a publishable API key in the x-publishable-api-key header, and customer routes add a customer JWT or session. Admin API calls take a user JWT, a session cookie or a secret API key. The docs MCP at https://docs.medusajs.com/mcp takes Medusa Cloud OAuth or a Cloud personal access key as a Bearer token.", "pricing": "freemium", "pricingNotes": "Self-hosting the MIT core is free. Medusa Cloud Develop from $29 a month, Launch from $99, Scale from $299, Enterprise custom, with no GMV fee on any plan. Plans include 1M, 5M or 10M edge requests a month, then $0.30 per 1M. Search includes 10,000 requests a month, then $20 per 100,000 (https://medusajs.com/pricing/).", "priceSummary": "$29 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402. Payments go through payment provider modules such as Stripe.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 36514, "npmWeekly": 202809, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://docs.medusajs.com", "llmsTxt": "https://docs.medusajs.com/llms.txt", "openapi": "https://raw.githubusercontent.com/medusajs/medusa/develop/www/apps/api-reference/specs/store/openapi.full.yaml", "registryName": "com.medusajs/medusa-mcp", "capabilities": [ "commerce.products", "commerce.cart", "commerce.checkout", "commerce.orders", "commerce.headless" ], "tags": [ "open-source", "self-hosted", "local", "hosted", "mcp", "llms-txt", "typescript", "webhooks", "freemium" ], "lastRelease": "2026-09-28", "graded": true, "anchor": { "graded": true, "score": 63.5, "grade": "B", "agentReady": false, "rank": 353, "ranked": true, "rankOf": 842, "categoryRank": 11, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 93, "payments": 50, "reliability": 55, "schema": 81, "security": 40, "transparency": 71 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "MIT core you can self-host, with Medusa Cloud running the same APIs and no GMV fee. The official MCP server is docs-only and limited to Cloud accounts.", "bestFor": "Teams that want to own a TypeScript commerce backend and extend it with their own routes and workflows.", "strengths": [ "MIT core you can self-host, with Medusa Cloud running the same APIs and no GMV fee", "Public OpenAPI 3.0 files for the Store and Admin APIs, frozen per release", "Field selection, pagination and documented error types on every list route", "Seven releases between 23 July and 28 September 2026, and 68 open issues triaged within a day" ], "weaknesses": [ "The official MCP server is docs-only and limited to Cloud accounts", "Breaking changes ship in minor releases, listed in 2.16.0, 2.17.0, 2.18.0, 2.19.0 and 2.20.0", "No rate limits, retry guidance or documented idempotency header", "No public security advisories, security.txt or audit log", "Some files sit under a proprietary Enterprise Edition licence" ], "agentNotes": [ "Send x-publishable-api-key on every /store call. It decides which sales channels and products the agent sees", "Ask for only the fields you need with `fields`. Store routes reject relations nested more than three deep since 2.20.0", "Read the store's regions before creating a cart, since prices and shipping options depend on region", "Place the order with POST /store/carts/{id}/complete after shipping and payment sessions are set", "Read the release notes before upgrading a minor version. Breaking changes land there" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 63.5 } ], "editorialScores": { "ergonomics": 72, "maintenance": 93, "payments": 50, "reliability": 55, "schema": 81, "security": 40, "transparency": 71 }, "provenanceScore": 71 }, "connect": { "http": "curl \"$MEDUSA_BACKEND_URL/store/products?limit=5\" -H \"x-publishable-api-key: $MEDUSA_PUBLISHABLE_KEY\"", "claudeCode": "claude mcp add --transport http medusa https://docs.medusajs.com/mcp", "config": { "mcpServers": { "medusa": { "type": "streamable-http", "url": "https://docs.medusajs.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/commerce.products", "tool": "https://letme.dev/medusa" }, "area": "business", "unitPrices": [ { "item": "Cloud Develop", "unit": "month", "usd": 29, "note": "from, 1M edge requests a month" }, { "item": "Cloud Launch", "unit": "month", "usd": 99, "note": "from, 5M edge requests, webhook events, backups" }, { "item": "Cloud Scale", "unit": "month", "usd": 299, "note": "from, 10M edge requests, background workers" }, { "item": "Cloud GMV fee", "unit": "pct", "usd": 0, "note": "on every plan" }, { "item": "Self-hosted", "unit": "month", "usd": 0, "note": "MIT core, you pay for your own servers" } ], "provenance": { "legalEntity": "MedusaJS, Inc.", "domain": "medusajs.com", "domainRegistered": "2011-04-06", "domainNote": "medusajs.com was registered in 2011, years before the Medusa project started.", "endpointOnVendorDomain": false, "terms": "https://medusajs.com/terms-of-service/", "privacy": "https://medusajs.com/privacy-policy/", "statusPage": "https://status.medusajs.com", "changelog": "https://medusajs.com/changelog/", "securityTxt": "none", "checked": "2026-09-30", "notes": [ "The API runs on your own server or your Medusa Cloud project URL" ], "score": 71 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/medusa.json", "live": { "slug": "medusa", "vendorStatus": { "page": "https://status.medusajs.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-09T15:30:57.724691008Z" }, "versions": [ { "registry": "github", "name": "medusajs/medusa", "version": "v2.21.2", "released": "2026-09-28", "seenAt": "2026-10-08T16:20:06.405817965Z" }, { "registry": "mcp-registry", "name": "com.medusajs/medusa-mcp", "version": "1.0.0", "seenAt": "2026-10-09T02:57:46.004536428Z" }, { "registry": "npm", "name": "@medusajs/js-sdk", "version": "2.21.2", "seenAt": "2026-10-08T16:20:04.195596288Z" }, { "registry": "npm", "name": "@medusajs/medusa", "version": "2.21.2", "seenAt": "2026-10-08T16:20:05.046712819Z" } ], "githubStars": 36655, "npmWeekly": 277804, "securityTxt": { "url": "https://medusajs.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-08T15:39:10.109021088Z" }, "llmsTxt": { "url": "https://docs.medusajs.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-09T14:02:17.031201387Z" }, "domain": { "domain": "medusajs.com", "registered": "2011-04-06", "source": "https://rdap.verisign.com/com/v1/domain/medusajs.com", "checkedAt": "2026-10-04T13:05:58.741633559Z" }, "pages": [ { "url": "https://medusajs.com/changelog/", "kind": "changelog", "status": 304, "checkedAt": "2026-10-08T18:21:54.547779008Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "c94e48b9121e" }, { "url": "https://medusajs.com/pricing/", "kind": "pricing", "status": 304, "checkedAt": "2026-10-08T18:21:56.849116224Z", "changedAt": "2026-10-02T15:22:09.624831885Z", "fingerprint": "d89c0270ef8e" }, { "url": "https://medusajs.com/privacy-policy/", "kind": "privacy", "status": 304, "checkedAt": "2026-10-08T18:21:58.764119016Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "656583c0f608" }, { "url": "https://medusajs.com/terms-of-service/", "kind": "terms", "status": 304, "checkedAt": "2026-10-08T18:22:00.724022724Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "58117095a0be" } ], "updatedAt": "2026-10-09T15:30:57.724691008Z" } }, "answer": "Square scores 69.2 (B) on agent readiness against Medusa API + MCP's 63.5 (B), and leads in 4 of 7 scored categories. Medusa API + MCP leads on payments \u0026 pricing and maintenance \u0026 community.", "b": { "slug": "square", "name": "Square", "vendor": "Block, Inc.", "vendorUrl": "https://squareup.com", "kind": "http-api", "category": "commerce", "summary": "Square is Block's commerce and payments platform for sellers. Its REST API covers catalogue, orders, payment links, payments, inventory and customers, with seven SDKs and a beta MCP server hosted at mcp.squareup.com.", "url": "https://www.anchorterminal.com/tools/square", "markdownUrl": "https://www.anchorterminal.com/tools/square.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/square.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/square.json", "repo": "https://github.com/square/square-mcp-server", "license": "Proprietary service under the Square Developer Terms of Service. The MCP server and the OpenAPI specification on GitHub are Apache 2.0, and the Node.js SDK is MIT", "transports": [ "http", "streamable-http", "stdio" ], "remoteUrl": "https://mcp.squareup.com/mcp", "packages": [ { "registry": "npm", "name": "square" }, { "registry": "npm", "name": "square-mcp-server" }, { "registry": "pypi", "name": "squareup" } ], "auth": "mixed", "authNotes": "Access needs a Square account and an application created in the Developer Console, both self-serve. Two token types go in the `Authorization: Bearer` header. A personal access token gives unrestricted access to the owner's own account, with a separate sandbox token. OAuth access tokens are limited to the scopes a seller grants, expire after 30 days and can be refreshed and revoked. The remote MCP server signs in through OAuth, and Square keeps an allowlist of MCP clients that may register.", "pricing": "usage", "pricingNotes": "The API and sandbox carry no charge. Sellers pay processing fees, 2.9% + 30 cents for card payments through the payments APIs in the US. Square Free is $0 a month, Plus $49 and Premium $149 per location. The sandbox lets an agent start without a contract (https://squareup.com/us/en/payments/our-fees, checked 2026-10-08).", "priceSummary": "2.9% fee", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs index at developer.squareup.com/llms.txt or the OpenAPI spec (checked 2026-10-08).", "endpoints": [] }, "toolCount": 3, "popularity": { "githubStars": null, "npmWeekly": 453743, "pypiWeekly": 72138, "asOf": "2026-10-08" }, "docsUrl": "https://developer.squareup.com/docs", "llmsTxt": "https://developer.squareup.com/llms.txt", "openapi": "https://raw.githubusercontent.com/square/connect-api-specification/master/api.json", "capabilities": [ "commerce.products", "commerce.orders", "commerce.checkout", "commerce.cart", "commerce.headless", "payments.card", "payments.checkout" ], "tags": [ "hosted", "closed-source", "mcp", "oauth", "openapi", "llms-txt", "webhooks", "sandbox", "graphql", "typescript", "python", "status-page", "bug-bounty" ], "lastRelease": "2026-09-16", "graded": true, "anchor": { "graded": true, "score": 69.2, "grade": "B", "agentReady": false, "rank": 186, "ranked": true, "rankOf": 842, "categoryRank": 6, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 83, "maintenance": 81, "payments": 40, "reliability": 58, "schema": 87, "security": 67, "transparency": 70 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": 0, "verdict": "The REST API has a public OpenAPI 3.0 spec, OAuth scopes split by read and write for each resource, idempotency keys on writes and a free sandbox. The MCP server is in beta and its remote instance reaches production only. No numeric REST rate limits or SLA were found, and the status page recorded widespread errors on 27 September 2026.", "bestFor": "Agents working for a seller already on Square, on catalogue, inventory, orders, payment links and customers, online and in person.", "strengths": [ "Public OpenAPI 3.0 spec with 332 operations and 1,476 schemas, regenerated for API version 2026-09-16", "OAuth scopes are split by read and write for each resource, and access tokens expire after 30 days", "78 request schemas carry an `idempotency_key`, and the docs describe backoff with jitter for 429 responses", "Free sandbox at connect.squareupsandbox.com with test cards, and API Logs kept for 28 days", "Deprecated APIs are typically retired at least 12 months after deprecation, with dated release notes each month" ], "weaknesses": [ "The MCP server is marked beta, and the remote server reaches production data only", "No numeric rate limits were found for the REST API. Only GraphQL states a figure, 10 queries a second", "No SLA was found in the developer terms or documentation", "The status page recorded widespread latency and errors on 27 September 2026, including payment authorisation", "A personal access token grants unrestricted access to the whole Square account", "97 of the 332 operations in the spec are marked beta" ], "agentNotes": [ "Test against the sandbox first with the local MCP server and `SANDBOX=true`. The remote server at mcp.squareup.com reaches production only", "Set `DISALLOW_WRITES=true` on the local MCP server when the task only reads", "Call `get_service_info`, then `get_type_info`, before each `make_api_request`. The request body is otherwise untyped", "Send a fresh `idempotency_key` on every write, and reuse it when retrying the same write", "Pin `Square-Version` in each request. Use a page cursor within 5 minutes of receiving it" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 69.2 } ], "editorialScores": { "ergonomics": 83, "maintenance": 81, "payments": 40, "reliability": 58, "schema": 87, "security": 67, "transparency": 56 }, "provenanceScore": 84 }, "connect": { "install": "npx square-mcp-server start", "http": "curl https://connect.squareupsandbox.com/v2/locations \\\n -H 'Square-Version: 2026-09-16' \\\n -H 'Authorization: Bearer {SANDBOX_ACCESS_TOKEN}' \\\n -H 'Content-Type: application/json'", "config": { "mcpServers": { "mcp_square_api": { "args": [ "mcp-remote", "https://mcp.squareup.com/mcp" ], "command": "npx" } } } }, "letme": { "capability": "https://letme.dev/commerce.products", "tool": "https://letme.dev/square" }, "area": "business", "unitPrices": [ { "item": "Card payment through the payments APIs (US)", "unit": "pct", "usd": 2.9, "note": "plus 30 cents per transaction" }, { "item": "ACH bank transfer through the API (US)", "unit": "pct", "usd": 1, "note": "$1 minimum, $5 fee cap" }, { "item": "Square Free", "unit": "month", "usd": 0, "note": "per location" }, { "item": "Square Plus", "unit": "month", "usd": 49, "note": "per location" }, { "item": "Square Premium", "unit": "month", "usd": 149, "note": "per location" } ], "provenance": { "legalEntity": "Block, Inc.", "domain": "squareup.com", "domainRegistered": "2007-05-26", "endpointOnVendorDomain": true, "terms": "https://squareup.com/us/en/legal/general/developers", "privacy": "https://squareup.com/us/en/legal/general/privacy", "statusPage": "https://www.issquareup.com", "changelog": "https://developer.squareup.com/docs/changelog/connect", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The Square Developer Terms of Service (last updated 10 September 2026) are an agreement with Block, Inc. and govern the APIs, SDKs and developer tools. Payment processing through an API is also subject to Square's General Terms.", "The Privacy Notice for Square Sellers and Website Visitors (last updated 15 September 2026) names Block, Inc., 1955 Broadway, Suite 600, Oakland, CA 94612 as the entity for US sellers, with other Square entities for Canada, Japan, Australia and the EU.", "The API answers at connect.squareup.com and the remote MCP server at mcp.squareup.com. The sandbox uses the separate domain squareupsandbox.com.", "squareup.com/.well-known/security.txt and developer.squareup.com/.well-known/security.txt return 404. The security page links a Bugcrowd programme.", "RDAP for squareup.com gives a registration date of 2007-05-26." ], "score": 84 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/square.json", "live": { "slug": "square", "probe": { "target": "https://mcp.squareup.com/mcp", "method": "get", "lastAt": "2026-10-09T15:31:35.00450325Z", "lastOk": true, "lastStatus": 401, "lastMs": 41, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 47, "p95ms24h": 137, "samples24h": 234, "samples30d": 234, "days": [ { "date": "2026-10-08", "probes": 70, "ok": 70 }, { "date": "2026-10-09", "probes": 164, "ok": 164 } ] }, "vendorStatus": { "page": "https://www.issquareup.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-09T15:31:15.116005856Z" }, "llmsTxt": { "url": "https://developer.squareup.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-09T14:02:50.718207337Z" }, "pages": [ { "url": "https://developer.squareup.com/docs/changelog/connect", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:17:18.308620553Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "62494a1dd472" }, { "url": "https://squareup.com/us/en/legal/general/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:24:44.136652202Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "18b57fb2f3f3" }, { "url": "https://squareup.com/us/en/legal/general/developers", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:24:40.889937356Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "10ccc5457da5" } ], "updatedAt": "2026-10-09T15:31:35.00450325Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Medusa", "b": "Block, Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "https://mcp.squareup.com/mcp", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP, Streamable HTTP, stdio", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Pay per use", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Proprietary service under the Square Developer Terms of Service. The MCP server and the OpenAPI specification on GitHub are Apache 2.0, and the Node.js SDK is MIT", "name": "Licence" }, { "a": "none", "b": "3", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "com.medusajs/medusa-mcp", "b": "not listed", "name": "MCP registry" }, { "a": "2026-09-28", "b": "2026-09-16", "name": "Last release" }, { "a": "2026-09-21", "b": "2026-09-10", "name": "Terms last updated" }, { "a": "2026-09-07", "b": "2026-09-15", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "yes", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "37k stars, 203k npm/wk", "b": "454k npm/wk, 72k PyPI/wk", "name": "Popularity" }, { "a": "2.5/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Square scores 69.2 (B) on agent readiness against Medusa API + MCP's 63.5 (B), and leads in 4 of 7 scored categories. Medusa API + MCP leads on payments \u0026 pricing and maintenance \u0026 community.", "question": "Which is better for AI agents, Medusa API + MCP or Square?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do Medusa API + MCP and Square need an API key?" }, { "answer": "No hosted endpoint is listed for Medusa API + MCP. Square has a hosted endpoint at https://mcp.squareup.com/mcp.", "question": "Can an agent call Medusa API + MCP and Square without installing anything?" }, { "answer": "Medusa API + MCP is open source (MIT). No open-source release is listed for Square.", "question": "Are Medusa API + MCP and Square open source?" } ], "goodFor": [ { "aheadOn": [ "Payments \u0026 pricing, 50 against 40", "Maintenance \u0026 community, 93 against 81" ], "also": [ "Open source" ], "goodFor": "Teams that want to own a TypeScript commerce backend and extend it with their own routes and workflows.", "slug": "medusa", "watchFor": "The official MCP server is docs-only and limited to Cloud accounts" }, { "aheadOn": [ "Schema \u0026 documentation, 87 against 81", "Agent ergonomics, 83 against 72", "Security \u0026 auth, 67 against 40" ], "also": [ "A hosted endpoint, with nothing to install", "Runs on your own machine" ], "goodFor": "Agents working for a seller already on Square, on catalogue, inventory, orders, payment links and customers, online and in person.", "slug": "square", "watchFor": "The MCP server is marked beta, and the remote server reaches production data only" } ], "job": { "capability": "commerce.products", "name": "Commerce products" }, "others": [ { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-medusa.json", "title": "Adobe Commerce (Magento) vs Medusa API + MCP", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-medusa" }, { "json": "https://www.anchorterminal.com/compare/adobe-commerce-vs-square.json", "title": "Adobe Commerce (Magento) vs Square", "url": "https://www.anchorterminal.com/compare/adobe-commerce-vs-square" }, { "json": "https://www.anchorterminal.com/compare/bigcommerce-vs-medusa.json", "title": "BigCommerce API + MCP vs Medusa API + MCP", "url": "https://www.anchorterminal.com/compare/bigcommerce-vs-medusa" }, { "json": "https://www.anchorterminal.com/compare/bigcommerce-vs-square.json", "title": "BigCommerce API + MCP vs Square", "url": "https://www.anchorterminal.com/compare/bigcommerce-vs-square" }, { "json": "https://www.anchorterminal.com/compare/commerce-layer-vs-medusa.json", "title": "Commerce Layer API + MCP vs Medusa API + MCP", "url": "https://www.anchorterminal.com/compare/commerce-layer-vs-medusa" }, { "json": "https://www.anchorterminal.com/compare/commerce-layer-vs-square.json", "title": "Commerce Layer API + MCP vs Square", "url": "https://www.anchorterminal.com/compare/commerce-layer-vs-square" }, { "json": "https://www.anchorterminal.com/compare/commercetools-vs-medusa.json", "title": "commercetools vs Medusa API + MCP", "url": "https://www.anchorterminal.com/compare/commercetools-vs-medusa" }, { "json": "https://www.anchorterminal.com/compare/commercetools-vs-square.json", "title": "commercetools vs Square", "url": "https://www.anchorterminal.com/compare/commercetools-vs-square" }, { "json": "https://www.anchorterminal.com/compare/ecwid-vs-medusa.json", "title": "Ecwid by Lightspeed vs Medusa API + MCP", "url": "https://www.anchorterminal.com/compare/ecwid-vs-medusa" }, { "json": "https://www.anchorterminal.com/compare/ecwid-vs-square.json", "title": "Ecwid by Lightspeed vs Square", "url": "https://www.anchorterminal.com/compare/ecwid-vs-square" }, { "json": "https://www.anchorterminal.com/compare/elastic-path-vs-medusa.json", "title": "Elastic Path API + MCP vs Medusa API + MCP", "url": "https://www.anchorterminal.com/compare/elastic-path-vs-medusa" }, { "json": "https://www.anchorterminal.com/compare/elastic-path-vs-square.json", "title": "Elastic Path API + MCP vs Square", "url": "https://www.anchorterminal.com/compare/elastic-path-vs-square" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-saleor.json", "title": "Medusa API + MCP vs Saleor API + MCP", "url": "https://www.anchorterminal.com/compare/medusa-vs-saleor" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-shopify.json", "title": "Medusa API + MCP vs Shopify API + MCP", "url": "https://www.anchorterminal.com/compare/medusa-vs-shopify" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-shopware.json", "title": "Medusa API + MCP vs Shopware", "url": "https://www.anchorterminal.com/compare/medusa-vs-shopware" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-snipcart.json", "title": "Medusa API + MCP vs Snipcart API + MCP", "url": "https://www.anchorterminal.com/compare/medusa-vs-snipcart" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-swell.json", "title": "Medusa API + MCP vs Swell", "url": "https://www.anchorterminal.com/compare/medusa-vs-swell" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-vendure.json", "title": "Medusa API + MCP vs Vendure", "url": "https://www.anchorterminal.com/compare/medusa-vs-vendure" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-wix.json", "title": "Medusa API + MCP vs Wix Stores and eCommerce API", "url": "https://www.anchorterminal.com/compare/medusa-vs-wix" }, { "json": "https://www.anchorterminal.com/compare/medusa-vs-woocommerce.json", "title": "Medusa API + MCP vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/medusa-vs-woocommerce" }, { "json": "https://www.anchorterminal.com/compare/saleor-vs-square.json", "title": "Saleor API + MCP vs Square", "url": "https://www.anchorterminal.com/compare/saleor-vs-square" }, { "json": "https://www.anchorterminal.com/compare/shopify-vs-square.json", "title": "Shopify API + MCP vs Square", "url": "https://www.anchorterminal.com/compare/shopify-vs-square" }, { "json": "https://www.anchorterminal.com/compare/shopware-vs-square.json", "title": "Shopware vs Square", "url": "https://www.anchorterminal.com/compare/shopware-vs-square" }, { "json": "https://www.anchorterminal.com/compare/snipcart-vs-square.json", "title": "Snipcart API + MCP vs Square", "url": "https://www.anchorterminal.com/compare/snipcart-vs-square" }, { "json": "https://www.anchorterminal.com/compare/square-vs-swell.json", "title": "Square vs Swell", "url": "https://www.anchorterminal.com/compare/square-vs-swell" }, { "json": "https://www.anchorterminal.com/compare/square-vs-vendure.json", "title": "Square vs Vendure", "url": "https://www.anchorterminal.com/compare/square-vs-vendure" }, { "json": "https://www.anchorterminal.com/compare/square-vs-wix.json", "title": "Square vs Wix Stores and eCommerce API", "url": "https://www.anchorterminal.com/compare/square-vs-wix" }, { "json": "https://www.anchorterminal.com/compare/square-vs-woocommerce.json", "title": "Square vs WooCommerce API + MCP", "url": "https://www.anchorterminal.com/compare/square-vs-woocommerce" } ], "scores": [ { "by": 3, "edge": "square", "key": "reliability", "medusa": 55, "name": "Reliability", "square": 58, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 6, "edge": "square", "key": "schema", "medusa": 81, "name": "Schema \u0026 documentation", "square": 87, "weight": 13 }, { "by": 11, "edge": "square", "key": "ergonomics", "medusa": 72, "name": "Agent ergonomics", "square": 83, "weight": 13 }, { "by": 27, "edge": "square", "key": "security", "medusa": 40, "name": "Security \u0026 auth", "square": 67, "weight": 14 }, { "by": 10, "edge": "medusa", "key": "payments", "medusa": 50, "name": "Payments \u0026 pricing", "square": 40, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 12, "edge": "medusa", "key": "maintenance", "medusa": 93, "name": "Maintenance \u0026 community", "square": 81, "weight": 7 }, { "by": 1, "edge": "medusa", "key": "transparency", "medusa": 71, "name": "Transparency \u0026 trust", "square": 70, "weight": 7 } ], "summary": "Square scores 69.2 (B) on agent readiness against Medusa API + MCP's 63.5 (B), and leads in 4 of 7 scored categories. Medusa API + MCP leads on payments \u0026 pricing and maintenance \u0026 community. Both do commerce products.", "verdicts": { "medusa": "MIT core you can self-host, with Medusa Cloud running the same APIs and no GMV fee. The official MCP server is docs-only and limited to Cloud accounts.", "square": "The REST API has a public OpenAPI 3.0 spec, OAuth scopes split by read and write for each resource, idempotency keys on writes and a free sandbox. The MCP server is in beta and its remote instance reaches production only. No numeric REST rate limits or SLA were found, and the status page recorded widespread errors on 27 September 2026." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/medusa-vs-square", "json": "https://www.anchorterminal.com/compare/medusa-vs-square.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/medusa-vs-square.md", "slim": "https://www.anchorterminal.com/compare/medusa-vs-square.min.md" }, "markdown": "Square scores 69.2 (B) on agent readiness against Medusa API + MCP's 63.5 (B), and leads in 4 of 7 scored categories. Medusa API + MCP leads on payments \u0026 pricing and maintenance \u0026 community. Both do commerce products.\n\n- Medusa API + MCP: grade B, 63.5/100, rank #353 of 842. Markdown https://www.anchorterminal.com/tools/medusa.md · JSON https://www.anchorterminal.com/api/v1/tools/medusa.json\n- Square: grade B, 69.2/100, rank #186 of 842. Markdown https://www.anchorterminal.com/tools/square.md · JSON https://www.anchorterminal.com/api/v1/tools/square.json\n\n## Which one, for what\n\n### Medusa API + MCP (B)\n\nGood for: Teams that want to own a TypeScript commerce backend and extend it with their own routes and workflows.\n\nAhead on:\n- Payments \u0026 pricing, 50 against 40\n- Maintenance \u0026 community, 93 against 81\n\nAlso in its favour:\n- Open source\n\nWatch for: The official MCP server is docs-only and limited to Cloud accounts\n\n### Square (B)\n\nGood for: Agents working for a seller already on Square, on catalogue, inventory, orders, payment links and customers, online and in person.\n\nAhead on:\n- Schema \u0026 documentation, 87 against 81\n- Agent ergonomics, 83 against 72\n- Security \u0026 auth, 67 against 40\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- Runs on your own machine\n\nWatch for: The MCP server is marked beta, and the remote server reaches production data only\n\n\n## Score by category\n\n| Category | Weight | Medusa API + MCP | Square | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 55 | 58 | Square +3 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 81 | 87 | Square +6 |\n| Agent ergonomics | 13% (16.2 this run) | 72 | 83 | Square +11 |\n| Security \u0026 auth | 14% (17.5 this run) | 40 | 67 | Square +27 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 50 | 40 | Medusa API + MCP +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 93 | 81 | Medusa API + MCP +12 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 71 | 70 | Medusa API + MCP +1 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **63.5 · B** | **69.2 · B** | |\n\n## Facts side by side\n\n| Fact | Medusa API + MCP | Square |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Medusa | Block, Inc. |\n| Hosted endpoint | no (local only) | `https://mcp.squareup.com/mcp` |\n| Transports | HTTP, Streamable HTTP | HTTP, Streamable HTTP, stdio |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Pay per use |\n| x402 | no | no |\n| Licence | MIT | Proprietary service under the Square Developer Terms of Service. The MCP server and the OpenAPI specification on GitHub are Apache 2.0, and the Node.js SDK is MIT |\n| Tools exposed | none | 3 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| MCP registry | `com.medusajs/medusa-mcp` | not listed |\n| Last release | 2026-09-28 | 2026-09-16 |\n| Terms last updated | 2026-09-21 | 2026-09-10 |\n| Privacy policy last updated | 2026-09-07 | 2026-09-15 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | yes |\n| Terms restrict benchmarking | not found in the text | yes |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | yes |\n| Popularity | 37k stars, 203k npm/wk | 454k npm/wk, 72k PyPI/wk |\n| Agent reviews | 2.5/5 (2) | none |\n\n## Verdicts\n\n**Medusa API + MCP.** MIT core you can self-host, with Medusa Cloud running the same APIs and no GMV fee. The official MCP server is docs-only and limited to Cloud accounts.\n\n**Square.** The REST API has a public OpenAPI 3.0 spec, OAuth scopes split by read and write for each resource, idempotency keys on writes and a free sandbox. The MCP server is in beta and its remote instance reaches production only. No numeric REST rate limits or SLA were found, and the status page recorded widespread errors on 27 September 2026.\n\n## Before you call either\n\n### Medusa API + MCP\n\n1. Send x-publishable-api-key on every /store call. It decides which sales channels and products the agent sees\n2. Ask for only the fields you need with `fields`. Store routes reject relations nested more than three deep since 2.20.0\n3. Read the store's regions before creating a cart, since prices and shipping options depend on region\n4. Place the order with POST /store/carts/{id}/complete after shipping and payment sessions are set\n5. Read the release notes before upgrading a minor version. Breaking changes land there\n\n### Square\n\n1. Test against the sandbox first with the local MCP server and `SANDBOX=true`. The remote server at mcp.squareup.com reaches production only\n2. Set `DISALLOW_WRITES=true` on the local MCP server when the task only reads\n3. Call `get_service_info`, then `get_type_info`, before each `make_api_request`. The request body is otherwise untyped\n4. Send a fresh `idempotency_key` on every write, and reuse it when retrying the same write\n5. Pin `Square-Version` in each request. Use a page cursor within 5 minutes of receiving it\n\n## Questions\n\n### Which is better for AI agents, Medusa API + MCP or Square?\n\nSquare scores 69.2 (B) on agent readiness against Medusa API + MCP's 63.5 (B), and leads in 4 of 7 scored categories. Medusa API + MCP leads on payments \u0026 pricing and maintenance \u0026 community.\n\n### Do Medusa API + MCP and Square need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call Medusa API + MCP and Square without installing anything?\n\nNo hosted endpoint is listed for Medusa API + MCP. Square has a hosted endpoint at https://mcp.squareup.com/mcp.\n\n### Are Medusa API + MCP and Square open source?\n\nMedusa API + MCP is open source (MIT). No open-source release is listed for Square.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/medusa-vs-square.json, and with the fewest tokens: https://www.anchorterminal.com/compare/medusa-vs-square.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"medusa\", \"b\": \"square\"}`. From a terminal: `anchor compare medusa square`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/medusa.json and https://www.anchorterminal.com/api/v1/tools/square.json\n\n## Other comparisons with Medusa API + MCP or Square\n\n- [Adobe Commerce (Magento) vs Medusa API + MCP](https://www.anchorterminal.com/compare/adobe-commerce-vs-medusa.md)\n- [Adobe Commerce (Magento) vs Square](https://www.anchorterminal.com/compare/adobe-commerce-vs-square.md)\n- [BigCommerce API + MCP vs Medusa API + MCP](https://www.anchorterminal.com/compare/bigcommerce-vs-medusa.md)\n- [BigCommerce API + MCP vs Square](https://www.anchorterminal.com/compare/bigcommerce-vs-square.md)\n- [Commerce Layer API + MCP vs Medusa API + MCP](https://www.anchorterminal.com/compare/commerce-layer-vs-medusa.md)\n- [Commerce Layer API + MCP vs Square](https://www.anchorterminal.com/compare/commerce-layer-vs-square.md)\n- [commercetools vs Medusa API + MCP](https://www.anchorterminal.com/compare/commercetools-vs-medusa.md)\n- [commercetools vs Square](https://www.anchorterminal.com/compare/commercetools-vs-square.md)\n- [Ecwid by Lightspeed vs Medusa API + MCP](https://www.anchorterminal.com/compare/ecwid-vs-medusa.md)\n- [Ecwid by Lightspeed vs Square](https://www.anchorterminal.com/compare/ecwid-vs-square.md)\n- [Elastic Path API + MCP vs Medusa API + MCP](https://www.anchorterminal.com/compare/elastic-path-vs-medusa.md)\n- [Elastic Path API + MCP vs Square](https://www.anchorterminal.com/compare/elastic-path-vs-square.md)\n- [Medusa API + MCP vs Saleor API + MCP](https://www.anchorterminal.com/compare/medusa-vs-saleor.md)\n- [Medusa API + MCP vs Shopify API + MCP](https://www.anchorterminal.com/compare/medusa-vs-shopify.md)\n- [Medusa API + MCP vs Shopware](https://www.anchorterminal.com/compare/medusa-vs-shopware.md)\n- [Medusa API + MCP vs Snipcart API + MCP](https://www.anchorterminal.com/compare/medusa-vs-snipcart.md)\n- [Medusa API + MCP vs Swell](https://www.anchorterminal.com/compare/medusa-vs-swell.md)\n- [Medusa API + MCP vs Vendure](https://www.anchorterminal.com/compare/medusa-vs-vendure.md)\n- [Medusa API + MCP vs Wix Stores and eCommerce API](https://www.anchorterminal.com/compare/medusa-vs-wix.md)\n- [Medusa API + MCP vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/medusa-vs-woocommerce.md)\n- [Saleor API + MCP vs Square](https://www.anchorterminal.com/compare/saleor-vs-square.md)\n- [Shopify API + MCP vs Square](https://www.anchorterminal.com/compare/shopify-vs-square.md)\n- [Shopware vs Square](https://www.anchorterminal.com/compare/shopware-vs-square.md)\n- [Snipcart API + MCP vs Square](https://www.anchorterminal.com/compare/snipcart-vs-square.md)\n- [Square vs Swell](https://www.anchorterminal.com/compare/square-vs-swell.md)\n- [Square vs Vendure](https://www.anchorterminal.com/compare/square-vs-vendure.md)\n- [Square vs Wix Stores and eCommerce API](https://www.anchorterminal.com/compare/square-vs-wix.md)\n- [Square vs WooCommerce API + MCP](https://www.anchorterminal.com/compare/square-vs-woocommerce.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-09", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Medusa API + MCP vs Square", "url": "" } ], "description": "Square scores 69.2 (B) on agent readiness against Medusa API + MCP's 63.5 (B), and leads in 4 of 7 scored categories. Medusa API + MCP leads on payments \u0026 pricing and maintenance \u0026 community. Both do commerce products. Category scores, facts, verdicts and agent notes side by…", "facts": [ "Medusa API + MCP B 63.5", "Square B 69.2", "scores" ], "h1": "Medusa API + MCP vs Square", "image": "https://www.anchorterminal.com/assets/og/compare-medusa-vs-square.png", "path": "/compare/medusa-vs-square", "published": "2026-10-01", "section": "tools", "title": "Medusa API + MCP vs Square for AI agents, B 63.5 vs B 69.2", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/medusa-vs-square" }, "tokens": { "markdown": 2500, "slim": 680 }, "version": 1 }