{ "data": { "similar": [ { "grade": "BB", "json": "https://www.anchorterminal.com/tools/easyship.json", "name": "Easyship", "score": 70.6, "shared": [ "shipping.rates", "shipping.labels", "shipping.tracking", "shipping.address-validation" ], "slug": "easyship" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/sendcloud.json", "name": "Sendcloud", "score": 64.5, "shared": [ "shipping.rates", "shipping.labels", "shipping.tracking", "shipping.address-validation" ], "slug": "sendcloud" }, { "grade": "C", "json": "https://www.anchorterminal.com/tools/shippo.json", "name": "Shippo", "score": 61.9, "shared": [ "shipping.rates", "shipping.labels", "shipping.tracking", "shipping.address-validation" ], "slug": "shippo" }, { "grade": "C", "json": "https://www.anchorterminal.com/tools/easypost.json", "name": "EasyPost", "score": 57.4, "shared": [ "shipping.rates", "shipping.labels", "shipping.tracking", "shipping.address-validation" ], "slug": "easypost" }, { "grade": "D", "json": "https://www.anchorterminal.com/tools/shipstation.json", "name": "ShipStation API", "score": 51, "shared": [ "shipping.rates", "shipping.labels", "shipping.tracking", "shipping.address-validation" ], "slug": "shipstation" }, { "grade": "E", "json": "https://www.anchorterminal.com/tools/atoship.json", "name": "atoship", "score": 43, "shared": [ "shipping.rates", "shipping.labels", "shipping.tracking", "shipping.address-validation" ], "slug": "atoship" } ], "tool": { "slug": "envia", "name": "Envia", "vendor": "Envia Shipping", "vendorUrl": "https://envia.com", "kind": "http-api", "category": "shipping", "summary": "Envia is a multi-carrier shipping platform, strongest in Latin America, with REST APIs for rates, labels, tracking, pickups, commercial invoices and address data. An official stdio MCP server exposes ten of those operations to agents.", "url": "https://www.anchorterminal.com/tools/envia", "markdownUrl": "https://www.anchorterminal.com/tools/envia.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/envia.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/envia.json", "dns": "envia.grade.anchorterminal.com", "transports": [ "stdio" ], "packages": [ { "registry": "npm", "name": "@envia/envia-mcp" } ], "auth": "api-key", "authNotes": "Bearer API tokens created in the dashboard under `Desarrolladores \u003e Acceso de API`, one environment each: sandbox tokens work only against api-test.envia.com and production tokens only against api.envia.com. Several tokens can exist and each can be deleted to revoke it. No scopes were found. The MCP server reads the token from `ENVIA_API_KEY` and defaults to sandbox.", "pricing": "usage", "pricingNotes": "Prepaid balance: labels, notifications, insurance and add-ons draw on money added to the Envia account, and each price is shown when quoting. There is no public price list; volume plans go through sales. A free sandbox account returns simulated rates and creates test labels with no charges.", "priceSummary": "Pay per use", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the MCP package or the pricing page (checked 2026-11-06). Charges come from a prepaid balance.", "endpoints": [] }, "toolCount": 10, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://docs.envia.com/docs/getting-started", "llmsTxt": "https://docs.envia.com/llms.txt", "openapi": "https://docs.envia.com/reference/shipping-rates.md", "capabilities": [ "shipping.rates", "shipping.labels", "shipping.tracking", "shipping.address-validation" ], "tags": [ "official", "hosted", "mcp", "llms-txt", "openapi", "sandbox", "prepaid", "webhooks", "latam", "typescript" ], "lastRelease": "2026-03-06", "graded": true, "anchor": { "graded": true, "score": 36.5, "grade": "F", "agentReady": false, "rank": 1362, "ranked": true, "rankOf": 1486, "categoryRank": 12, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 53, "maintenance": 10, "payments": 20, "reliability": 20, "schema": 80, "security": 35, "transparency": 16 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 20, "points": 4, "reason": "Graded as a hosted service on Envia's REST APIs, with the local MCP server noted. No status page is linked and status.envia.com did not connect (0). No readable incident history (5). No rate limits found in the docs index, FAQs, integration guide or production checklist (0). The production checklist asks for 5xx retry logic and webhook deduplication, with no 429 or idempotency guidance for label creation (5 of 15). No SLA found (0). Neither the APIs nor the MCP server is labelled beta (10). 0 + 5 + 0 + 5 + 0 + 10 = 20.", "checked": "2026-11-06" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 80, "points": 13, "reason": "Each reference page's Markdown copy embeds an OpenAPI definition with sandbox and production servers (25). llms.txt and a Markdown copy of each page (10). Endpoint descriptions say what each is for and which call comes next in the workflow, and the rate tool warns that sandbox rates are simulated (15 of 20). The quote definition has 17 enums and required lists (11 of 15). Workflow examples and an error-formats guide named in the changelog, though its Markdown address answered 404 and the quote definition documents only 200 (9 of 15). A dated docs changelog by month, the latest March 2026 (10 of 15). 25 + 10 + 15 + 11 + 9 + 10 = 80.", "checked": "2026-11-06" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 53, "points": 8.61, "reason": "Ten compact MCP tools (25). Rates take one carrier per request, and the Queries API filters carriers by country and shipment type; no paging or field selection was found (10 of 20). The FAQ maps common errors to fixes, but the changelog says the three APIs return different error formats that need a normalisation helper (10 of 20). No idempotency key for labels; an unscanned label can be cancelled for an automatic refund, and the MCP tools carry no annotations (3 of 20). The MCP server defaults to sandbox, with no official API SDK (5 of 15). 25 + 10 + 10 + 3 + 5 = 53.", "checked": "2026-11-06" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 35, "points": 6.13, "reason": "Bearer tokens bound to one environment, several per account, revocable by deleting them, with no scopes (20). No read-only token; the MCP server's sandbox default keeps test calls from spending money (5 of 20). Responses carry carrier and address data rather than free text from strangers (10). No audit log found (0). No security page, certification, security.txt or disclosure policy found (0). 20 + 5 + 10 + 0 + 0 = 35.", "checked": "2026-11-06" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 20, "points": 2.5, "reason": "No x402, MPP or L402 (0). No public price list: each cost is shown when quoting, and volume plans go through sales (0). A free sandbox account creates test labels with no charges (20). A person signs up in a browser and tops up a balance for live labels (0). 0 + 0 + 20 + 0 = 20.", "checked": "2026-11-06" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 10, "points": 0.88, "reason": "The latest dated change found is the docs changelog for March 2026 and @envia/envia-mcp 0.1.0 on 4 March 2026, more than 180 days ago; doc pages show later `updatedAt` stamps (28 October for the FAQ) that record no change (0). No dated entries in the 90 days from 8 August (0). Support through the dashboard and docs, with no public tracker; the MCP repository named on npm could not be cloned (5 of 15). The MCP package is official, with no API SDK and no registry entry (5 of 15). No public CI to read (0). 0 + 0 + 5 + 5 + 0 = 10.", "checked": "2026-11-06" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 16, "points": 1.4, "note": "editorial 0, provenance 32", "reason": "Every terms URL tried answered 500 and the privacy policy is drawn by script, so no terms, entity or data-handling statement was read (0 of 30, 0 of 30). No deprecation policy or dated notices (0). No subprocessors or data locations found (0). 0 + 0 + 0 + 0 = 0, as unread rather than absent where the pages exist.", "checked": "2026-11-06" } ], "assessment": { "date": "2026-11-06", "basis": "public evidence", "confidence": "low", "notes": { "ergonomics": "Ten compact MCP tools (25). Rates take one carrier per request, and the Queries API filters carriers by country and shipment type; no paging or field selection was found (10 of 20). The FAQ maps common errors to fixes, but the changelog says the three APIs return different error formats that need a normalisation helper (10 of 20). No idempotency key for labels; an unscanned label can be cancelled for an automatic refund, and the MCP tools carry no annotations (3 of 20). The MCP server defaults to sandbox, with no official API SDK (5 of 15). 25 + 10 + 10 + 3 + 5 = 53.", "maintenance": "The latest dated change found is the docs changelog for March 2026 and @envia/envia-mcp 0.1.0 on 4 March 2026, more than 180 days ago; doc pages show later `updatedAt` stamps (28 October for the FAQ) that record no change (0). No dated entries in the 90 days from 8 August (0). Support through the dashboard and docs, with no public tracker; the MCP repository named on npm could not be cloned (5 of 15). The MCP package is official, with no API SDK and no registry entry (5 of 15). No public CI to read (0). 0 + 0 + 5 + 5 + 0 = 10.", "payments": "No x402, MPP or L402 (0). No public price list: each cost is shown when quoting, and volume plans go through sales (0). A free sandbox account creates test labels with no charges (20). A person signs up in a browser and tops up a balance for live labels (0). 0 + 0 + 20 + 0 = 20.", "reliability": "Graded as a hosted service on Envia's REST APIs, with the local MCP server noted. No status page is linked and status.envia.com did not connect (0). No readable incident history (5). No rate limits found in the docs index, FAQs, integration guide or production checklist (0). The production checklist asks for 5xx retry logic and webhook deduplication, with no 429 or idempotency guidance for label creation (5 of 15). No SLA found (0). Neither the APIs nor the MCP server is labelled beta (10). 0 + 5 + 0 + 5 + 0 + 10 = 20.", "schema": "Each reference page's Markdown copy embeds an OpenAPI definition with sandbox and production servers (25). llms.txt and a Markdown copy of each page (10). Endpoint descriptions say what each is for and which call comes next in the workflow, and the rate tool warns that sandbox rates are simulated (15 of 20). The quote definition has 17 enums and required lists (11 of 15). Workflow examples and an error-formats guide named in the changelog, though its Markdown address answered 404 and the quote definition documents only 200 (9 of 15). A dated docs changelog by month, the latest March 2026 (10 of 15). 25 + 10 + 15 + 11 + 9 + 10 = 80.", "security": "Bearer tokens bound to one environment, several per account, revocable by deleting them, with no scopes (20). No read-only token; the MCP server's sandbox default keeps test calls from spending money (5 of 20). Responses carry carrier and address data rather than free text from strangers (10). No audit log found (0). No security page, certification, security.txt or disclosure policy found (0). 20 + 5 + 10 + 0 + 0 = 35.", "transparency": "Every terms URL tried answered 500 and the privacy policy is drawn by script, so no terms, entity or data-handling statement was read (0 of 30, 0 of 30). No deprecation policy or dated notices (0). No subprocessors or data locations found (0). 0 + 0 + 0 + 0 = 0, as unread rather than absent where the pages exist." }, "sources": [ { "what": "docs index", "url": "https://docs.envia.com/llms.txt", "seen": "2026-11-06" }, { "what": "MCP overview", "url": "https://docs.envia.com/docs/mcp-overview.md", "seen": "2026-11-06" }, { "what": "API token guide", "url": "https://docs.envia.com/docs/authentication.md", "seen": "2026-11-06" }, { "what": "FAQs", "url": "https://docs.envia.com/docs/faqs.md", "seen": "2026-11-06" }, { "what": "changelog", "url": "https://docs.envia.com/docs/changelog.md", "seen": "2026-11-06" }, { "what": "Shipping API introduction", "url": "https://docs.envia.com/docs/envia-shipping-api-introduction.md", "seen": "2026-11-06" }, { "what": "quote reference with OpenAPI definition", "url": "https://docs.envia.com/reference/shipping-rates.md", "seen": "2026-11-06" }, { "what": "webhooks guide and production checklist", "url": "https://docs.envia.com/docs/production-checklist.md", "seen": "2026-11-06" }, { "what": "MCP package on npm", "url": "https://registry.npmjs.org/@envia/envia-mcp", "seen": "2026-11-06" }, { "what": "pricing", "url": "https://envia.com/en-US/pricing", "seen": "2026-11-06" }, { "what": "privacy policy page", "url": "https://envia.com/en-US/legal/privacy-policy?n=privacy_policy", "seen": "2026-11-06" } ], "openQuestions": [ "unchecked: the terms (every URL tried answered 500) and the privacy policy text (drawn by script)", "unchecked: the legal entity behind Envia; the footer says only \"Envia Shipping\"", "Rate limits for the Shipping, Queries and Geocodes APIs", "Whether github.com/envia-ep/envia-mcp-server is public; it could not be cloned", "Whether a status page exists; status.envia.com did not connect", "The MCP package's code was read from its published npm tarball as text and not run" ] }, "negative": 0, "verdict": "Envia's shipping APIs are documented for agents, with llms.txt, OpenAPI definitions on every reference page, a free sandbox and a compact ten-tool MCP server that defaults to test mode. No status page, rate limits, public price list or readable terms were found, and the MCP package has had one release.", "bestFor": "Shops and platforms shipping in Mexico and Latin America that want rates and labels from many local carriers.", "strengths": [ "Free sandbox with simulated rates and test labels, kept apart from production by separate tokens", "OpenAPI definitions embedded in every reference page, plus llms.txt and Markdown docs", "Ten MCP tools that default to the sandbox environment", "Labels cancelled before the first carrier scan are refunded to the balance automatically", "Postal code and address-structure lookups work without a token" ], "weaknesses": [ "No status page or rate limits found", "No public price list; costs appear only when quoting", "Terms and privacy text could not be read, and no legal entity was found", "MCP tools carry no readOnly or destructive annotations, and the package has one release, 0.1.0", "The docs changelog stops at March 2026" ], "agentNotes": [ "Leave `ENVIA_ENVIRONMENT` unset until the user confirms live shipping; the default is sandbox", "Ask the user before `envia_create_label` in production, since it spends the account balance", "Validate the postal code at geocodes.envia.com before quoting to avoid no-coverage errors", "Cancel an unwanted label before the carrier scans it to get the automatic refund", "Use a sandbox token with sandbox hosts and a production token with production hosts; they are not interchangeable" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "F", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 36.5 } ], "editorialScores": { "ergonomics": 53, "maintenance": 10, "payments": 20, "reliability": 20, "schema": 80, "security": 35, "transparency": 0 }, "provenanceScore": 32, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-11-06", "grade": "F", "kind": "listed", "method": "0.7", "score": 36.5 } ] }, "connect": { "install": "npx -y @envia/envia-mcp@latest", "config": { "mcpServers": { "envia": { "args": [ "-y", "@envia/envia-mcp@latest" ], "command": "npx", "env": { "ENVIA_API_KEY": "your_api_key_here" } } } } }, "letme": { "capability": "https://letme.dev/shipping.rates", "tool": "https://letme.dev/envia" }, "notable": [ "@envia/envia-mcp 0.1.0 (MIT, published 4 March 2026) registers ten tools: rates, label creation, pickups, cancellation, shipment history, commercial invoices, tracking, carriers, address validation and HS code classification (https://registry.npmjs.org/@envia/envia-mcp)", "The MCP server connects to sandbox unless `ENVIA_ENVIRONMENT` is set to production, so shipments are simulated by default (https://docs.envia.com/docs/mcp-overview)", "Each API reference page's Markdown copy embeds its OpenAPI definition, with sandbox and production servers (https://docs.envia.com/reference/shipping-rates.md)", "Cancelling a label before the carrier scans it refunds the account balance automatically, per the FAQ (https://docs.envia.com/docs/faqs)", "Several lookups need no token, such as postal code validation at geocodes.envia.com (https://docs.envia.com/docs/faqs)", "The docs changelog's latest month is March 2026 (https://docs.envia.com/docs/changelog)" ], "area": "business", "details": [ { "label": "Surface listed", "value": "The Envia Shipping, Queries and Geocodes REST APIs and the @envia/envia-mcp server, read from docs.envia.com, envia.com and the npm package's published files on 6 November 2026. No account was made, nothing was installed or run, and no API was called" }, { "label": "MCP server", "value": "Local stdio server started with npx, ten tools, MIT on npm. The repository named in package.json (github.com/envia-ep/envia-mcp-server) could not be cloned and may be private" }, { "label": "APIs", "value": "Shipping API (quotes, labels, cancel, pickups, tracking, manifest, commercial invoice, webhooks), Queries API (carriers, services, additional services, states, address structure) and Geocodes API" }, { "label": "Carriers", "value": "The docs claim more than 100 carriers, compared through one request per carrier" }, { "label": "Company", "value": "The site footer reads \"Envia Shipping\". The terms page answered 500 and the privacy policy is drawn by script, so no legal entity was read" } ], "provenance": { "legalEntity": "", "domain": "envia.com", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "", "privacy": "https://envia.com/en-US/legal/privacy-policy?n=privacy_policy", "statusPage": "", "changelog": "https://docs.envia.com/docs/changelog", "securityTxt": "unknown", "checked": "2026-11-06", "notes": [ "envia.com/robots.txt allows all but language-change paths; docs.envia.com disallows edit, login and api-next paths and links llms.txt.", "The privacy policy page renders only a heading without script, and every terms URL tried answered 500, so neither text was read.", "status.envia.com did not connect and no status page is linked. security.txt was not checked." ], "score": 32, "checks": [ { "check": "Legal entity named", "value": "not found", "points": 0, "max": 20, "state": "no" }, { "check": "Domain age", "value": "envia.com, no registry record we could read", "points": 0, "max": 15, "state": "no" }, { "check": "Endpoint on the vendor's domain", "value": "envia.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Privacy policy", "value": "read, states 0 of the 8 things a reader expects", "points": 4, "max": 10, "state": "part" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "could not be fetched", "points": 0, "max": 10, "state": "no" }, { "check": "People named", "value": "not researched yet", "points": 0, "max": 0, "state": "na" }, { "check": "Support route", "value": "help pages", "points": 5, "max": 5, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "", "state": "none-found", "points": 0, "max": 10 }, { "kind": "privacy", "url": "https://envia.com/en-US/legal/privacy-policy?n=privacy_policy", "state": "read", "readAt": "2026-11-06", "words": 1073, "points": 4, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": false }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": false }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": false }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": false }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": false }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": false }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": false }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": false } ] } ] }, "humans": { "slug": "envia", "checked": "2026-11-06", "company": "Envia (Tendencys Innovations)", "peopleNote": "envia.com's about page text and the pricing, privacy and docs pages read name no founder or executive, and the terms could not be read (500). On 6 November 2026 envia.com's about pages answered 404 to a plain request. Tendencys Innovations' about page, read 6 November 2026, says Tendencys was born in 2016 and that Envia Paquetería, born in 2017, later became envia.com; it and the Tendencys home page name nobody. The npm package lists an envia.com maintainer account, which is not a public role page, so nobody is listed. No investors are named on the Envia or Tendencys pages, and a news search found none, so ownership stays unknown.", "companySocial": {}, "support": { "urls": [ "https://docs.envia.com/docs/faqs", "https://envia.com/en-US/developers" ] }, "sources": [ "https://envia.com/en-US/about-us", "https://docs.envia.com/docs/faqs", "https://registry.npmjs.org/@envia/envia-mcp", "https://tendencys.com/about-us", "https://tendencys.com/" ], "ownership": { "status": "unknown", "checked": "2026-11-06", "sources": [ "https://envia.com/en-US/about-us", "https://tendencys.com/about-us" ] } }, "pageJsonUrl": "https://www.anchorterminal.com/tools/envia.json", "live": { "slug": "envia", "versions": [ { "registry": "npm", "name": "@envia/envia-mcp", "version": "0.1.0", "seenAt": "2026-11-06T23:24:27.893485506Z" } ], "npmWeekly": 81, "securityTxt": { "url": "https://envia.com/.well-known/security.txt", "state": "unknown", "checkedAt": "2026-11-07T16:01:23.154161694Z" }, "llmsTxt": { "url": "https://docs.envia.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:25.501362093Z" }, "pages": [ { "url": "https://docs.envia.com/docs/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:06:16.542743112Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "b3c01b7da2e7" }, { "url": "https://envia.com/en-US/legal/privacy-policy?n=privacy_policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:09:20.480053366Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "52e5d34d2a62" } ], "updatedAt": "2026-11-07T16:01:23.154161694Z" } }, "verify": { "accepts": "a page on envia.com or one of its subdomains", "badgeUrl": "https://www.anchorterminal.com/badges/envia.svg", "body": { "slug": "envia", "url": "the page with the badge or the link" }, "docs": "https://www.anchorterminal.com/builders/#verify", "effect": "none, it never changes a grade, rank or review", "endpoint": "https://www.anchorterminal.com/api/v1/verify", "listingUrl": "https://www.anchorterminal.com/tools/envia", "mcpTool": "verify_listing", "recheck": "weekly; two failed checks in a row and it lapses, a later pass restores it", "snippets": { "html": "\u003ca href=\"https://www.anchorterminal.com/tools/envia\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/envia.svg\" alt=\"Envia on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e", "markdown": "[![Envia on Anchor Terminal](https://www.anchorterminal.com/badges/envia.svg)](https://www.anchorterminal.com/tools/envia)", "link": "\u003ca href=\"https://www.anchorterminal.com/tools/envia\"\u003eEnvia on Anchor Terminal\u003c/a\u003e" } } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/tools/envia", "json": "https://www.anchorterminal.com/tools/envia.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/tools/envia.md", "mcp": "https://www.anchorterminal.com/mcp", "pricing": "https://www.anchorterminal.com/tools/envia#pricing", "reviews": "https://www.anchorterminal.com/tools/envia#reviews", "slim": "https://www.anchorterminal.com/tools/envia.min.md" }, "markdown": "## Overview\n\n**Grade F · 36.5/100 · rank #1362 of 1486 · #12 in Shipping \u0026 fulfilment · not agent-ready · confidence low**\n\n\n## Assessment\n\nEnvia's shipping APIs are documented for agents, with llms.txt, OpenAPI definitions on every reference page, a free sandbox and a compact ten-tool MCP server that defaults to test mode. No status page, rate limits, public price list or readable terms were found, and the MCP package has had one release.\n\n## Facts\n\n| Field | Value |\n| --- | --- |\n| Vendor | Envia Shipping (https://envia.com) |\n| Kind | HTTP API |\n| Category | Shipping \u0026 fulfilment (https://www.anchorterminal.com/categories/shipping) |\n| Transport | stdio |\n| Auth | API key · Bearer API tokens created in the dashboard under `Desarrolladores \u003e Acceso de API`, one environment each: sandbox tokens work only against api-test.envia.com and production tokens only against api.envia.com. Several tokens can exist and each can be deleted to revoke it. No scopes were found. The MCP server reads the token from `ENVIA_API_KEY` and defaults to sandbox. |\n| Pricing | Pay per use (Pay per use) · Prepaid balance: labels, notifications, insurance and add-ons draw on money added to the Envia account, and each price is shown when quoting. There is no public price list; volume plans go through sales. A free sandbox account returns simulated rates and creates test labels with no charges. |\n| x402 | No · No x402, MPP or L402 in the docs, the MCP package or the pricing page (checked 2026-11-06). Charges come from a prepaid balance. |\n| Licence | unknown |\n| Tools exposed | 10 |\n| Packages | npm: `@envia/envia-mcp` |\n| Docs | https://docs.envia.com/docs/getting-started |\n| llms.txt | https://docs.envia.com/llms.txt |\n| Last release | 2026-03-06 |\n| Surface listed | The Envia Shipping, Queries and Geocodes REST APIs and the @envia/envia-mcp server, read from docs.envia.com, envia.com and the npm package's published files on 6 November 2026. No account was made, nothing was installed or run, and no API was called |\n| MCP server | Local stdio server started with npx, ten tools, MIT on npm. The repository named in package.json (github.com/envia-ep/envia-mcp-server) could not be cloned and may be private |\n| APIs | Shipping API (quotes, labels, cancel, pickups, tracking, manifest, commercial invoice, webhooks), Queries API (carriers, services, additional services, states, address structure) and Geocodes API |\n| Carriers | The docs claim more than 100 carriers, compared through one request per carrier |\n| Company | The site footer reads \"Envia Shipping\". The terms page answered 500 and the privacy policy is drawn by script, so no legal entity was read |\n| Capabilities | shipping.rates, shipping.labels, shipping.tracking, shipping.address-validation |\n| Tags | official, hosted, mcp, llms-txt, openapi, sandbox, prepaid, webhooks, latam, typescript |\n| JSON | https://www.anchorterminal.com/api/v1/tools/envia.json |\n\n## Score breakdown (methodology v0.7, October 2026 research run)\n\nAssessed 2026-11-06 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: low. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. \"This run\" is each category's share of the 100 points.\n\n| Category | Weight | This run | Score (0–100) | Points |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% | 20 | 20 | 4.0 |\n| Performance | 10% | pending | pending | n/a |\n| Schema \u0026 documentation | 13% | 16.2 | 80 | 13.0 |\n| Agent ergonomics | 13% | 16.2 | 53 | 8.6 |\n| Security \u0026 auth | 14% | 17.5 | 35 | 6.1 |\n| Payments \u0026 pricing | 10% | 12.5 | 20 | 2.5 |\n| Task success | 10% | pending | pending | n/a |\n| Maintenance \u0026 community | 7% | 8.8 | 10 | 0.9 |\n| Transparency \u0026 trust (editorial 0, provenance 32) | 7% | 8.8 | 16 | 1.4 |\n| Negative events | up to −15 | up to −15 | none recorded | 0 |\n| **Total** | | | | **36.5 → F** |\n\n### Why each score\n\n- Reliability 20 (checked 2026-11-06): Graded as a hosted service on Envia's REST APIs, with the local MCP server noted. No status page is linked and status.envia.com did not connect (0). No readable incident history (5). No rate limits found in the docs index, FAQs, integration guide or production checklist (0). The production checklist asks for 5xx retry logic and webhook deduplication, with no 429 or idempotency guidance for label creation (5 of 15). No SLA found (0). Neither the APIs nor the MCP server is labelled beta (10). 0 + 5 + 0 + 5 + 0 + 10 = 20.\n- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.\n- Schema \u0026 documentation 80 (checked 2026-11-06): Each reference page's Markdown copy embeds an OpenAPI definition with sandbox and production servers (25). llms.txt and a Markdown copy of each page (10). Endpoint descriptions say what each is for and which call comes next in the workflow, and the rate tool warns that sandbox rates are simulated (15 of 20). The quote definition has 17 enums and required lists (11 of 15). Workflow examples and an error-formats guide named in the changelog, though its Markdown address answered 404 and the quote definition documents only 200 (9 of 15). A dated docs changelog by month, the latest March 2026 (10 of 15). 25 + 10 + 15 + 11 + 9 + 10 = 80.\n- Agent ergonomics 53 (checked 2026-11-06): Ten compact MCP tools (25). Rates take one carrier per request, and the Queries API filters carriers by country and shipment type; no paging or field selection was found (10 of 20). The FAQ maps common errors to fixes, but the changelog says the three APIs return different error formats that need a normalisation helper (10 of 20). No idempotency key for labels; an unscanned label can be cancelled for an automatic refund, and the MCP tools carry no annotations (3 of 20). The MCP server defaults to sandbox, with no official API SDK (5 of 15). 25 + 10 + 10 + 3 + 5 = 53.\n- Security \u0026 auth 35 (checked 2026-11-06): Bearer tokens bound to one environment, several per account, revocable by deleting them, with no scopes (20). No read-only token; the MCP server's sandbox default keeps test calls from spending money (5 of 20). Responses carry carrier and address data rather than free text from strangers (10). No audit log found (0). No security page, certification, security.txt or disclosure policy found (0). 20 + 5 + 10 + 0 + 0 = 35.\n- Payments \u0026 pricing 20 (checked 2026-11-06): No x402, MPP or L402 (0). No public price list: each cost is shown when quoting, and volume plans go through sales (0). A free sandbox account creates test labels with no charges (20). A person signs up in a browser and tops up a balance for live labels (0). 0 + 0 + 20 + 0 = 20.\n- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.\n- Maintenance \u0026 community 10 (checked 2026-11-06): The latest dated change found is the docs changelog for March 2026 and @envia/envia-mcp 0.1.0 on 4 March 2026, more than 180 days ago; doc pages show later `updatedAt` stamps (28 October for the FAQ) that record no change (0). No dated entries in the 90 days from 8 August (0). Support through the dashboard and docs, with no public tracker; the MCP repository named on npm could not be cloned (5 of 15). The MCP package is official, with no API SDK and no registry entry (5 of 15). No public CI to read (0). 0 + 0 + 5 + 5 + 0 = 10.\n- Transparency \u0026 trust 16 (checked 2026-11-06): Every terms URL tried answered 500 and the privacy policy is drawn by script, so no terms, entity or data-handling statement was read (0 of 30, 0 of 30). No deprecation policy or dated notices (0). No subprocessors or data locations found (0). 0 + 0 + 0 + 0 = 0, as unread rather than absent where the pages exist.\n\nFix list, everything this grade says the listing lacks, the biggest gain first (19 items). What it covers is at https://www.anchorterminal.com/fixes/envia.md (JSON https://www.anchorterminal.com/fixes/envia.json). The whole list for a coding agent comes from `POST https://www.anchorterminal.com/api/v1/fix-list` with `{\"listing\": \"envia\", \"plan\": \"read\"}`, free while the beta runs\n\n### What we couldn't check\n\n- unchecked: the terms (every URL tried answered 500) and the privacy policy text (drawn by script)\n- unchecked: the legal entity behind Envia; the footer says only \"Envia Shipping\"\n- Rate limits for the Shipping, Queries and Geocodes APIs\n- Whether github.com/envia-ep/envia-mcp-server is public; it could not be cloned\n- Whether a status page exists; status.envia.com did not connect\n- The MCP package's code was read from its published npm tarball as text and not run\n\n### Sources\n\n- docs index: \u003chttps://docs.envia.com/llms.txt\u003e (seen 2026-11-06)\n- MCP overview: \u003chttps://docs.envia.com/docs/mcp-overview.md\u003e (seen 2026-11-06)\n- API token guide: \u003chttps://docs.envia.com/docs/authentication.md\u003e (seen 2026-11-06)\n- FAQs: \u003chttps://docs.envia.com/docs/faqs.md\u003e (seen 2026-11-06)\n- changelog: \u003chttps://docs.envia.com/docs/changelog.md\u003e (seen 2026-11-06)\n- Shipping API introduction: \u003chttps://docs.envia.com/docs/envia-shipping-api-introduction.md\u003e (seen 2026-11-06)\n- quote reference with OpenAPI definition: \u003chttps://docs.envia.com/reference/shipping-rates.md\u003e (seen 2026-11-06)\n- webhooks guide and production checklist: \u003chttps://docs.envia.com/docs/production-checklist.md\u003e (seen 2026-11-06)\n- MCP package on npm: \u003chttps://registry.npmjs.org/@envia/envia-mcp\u003e (seen 2026-11-06)\n- pricing: \u003chttps://envia.com/en-US/pricing\u003e (seen 2026-11-06)\n- privacy policy page: \u003chttps://envia.com/en-US/legal/privacy-policy?n=privacy_policy\u003e (seen 2026-11-06)\n\n## Score history\n\nEvery move of a score since the listing was graded, newest first, with its cause. A score can't move without an entry here. JSON: https://www.anchorterminal.com/api/v1/tools/envia/history.json\n\n- 2026-11-06: graded 36.5 F (methodology 0.7)\n\n## Who's behind it (provenance 32/100, checked 2026-11-06)\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Legal entity named | not found | 0/20 |\n| Domain age | envia.com, no registry record we could read | 0/15 |\n| Endpoint on the vendor's domain | envia.com | 15/15 |\n| Terms of service | not found | 0/10 |\n| Privacy policy | read, states 0 of the 8 things a reader expects | 4/10 |\n| Status page | not found | 0/10 |\n| Changelog | published | 10/10 |\n| security.txt | could not be fetched | 0/10 |\n| People named | not researched yet | n/a |\n| Support route | help pages | 5/5 |\n\nenvia.com/robots.txt allows all but language-change paths; docs.envia.com disallows edit, login and api-next paths and links llms.txt.\n\nThe privacy policy page renders only a heading without script, and every terms URL tried answered 500, so neither text was read.\n\nstatus.envia.com did not connect and no status page is linked. security.txt was not checked.\n\n### Terms and privacy, as read\n\nA reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.\n\n**Terms of service**. We found no terms of service published for this product, so there is nothing to read and the check scores 0.\n\n\n**Privacy policy** (https://envia.com/en-US/legal/privacy-policy?n=privacy_policy), read 2026-11-06, gives no date, states 0 of the 8 things a reader expects.\n\n- Not found in the text. Gives the date it was last updated.\n- Not found in the text. Says what personal data is collected.\n- Not found in the text. Says how long data is kept.\n- Not found in the text. Says who else receives the data.\n- Not found in the text. Says whether personal data is sold or shared for advertising.\n- Not found in the text. Says what rights people have over their data.\n- Not found in the text. Gives a privacy contact.\n- Not found in the text. Says where data is transferred or stored.\n\n## Humans behind the project (researched 2026-11-06 from public pages, not part of the grade)\n\n### Key people\n\n- No people named yet.\n- Note: envia.com's about page text and the pricing, privacy and docs pages read name no founder or executive, and the terms could not be read (500). On 6 November 2026 envia.com's about pages answered 404 to a plain request. Tendencys Innovations' about page, read 6 November 2026, says Tendencys was born in 2016 and that Envia Paquetería, born in 2017, later became envia.com; it and the Tendencys home page name nobody. The npm package lists an envia.com maintainer account, which is not a public role page, so nobody is listed. No investors are named on the Envia or Tendencys pages, and a news search found none, so ownership stays unknown.\n\n### Getting support\n\n- Help: https://docs.envia.com/docs/faqs\n- Help: https://envia.com/en-US/developers\n- Sources: https://envia.com/en-US/about-us, https://docs.envia.com/docs/faqs, https://registry.npmjs.org/@envia/envia-mcp, https://tendencys.com/about-us, https://tendencys.com/\n\n## Live (updated 2026-11-07 16:01 UTC)\n\n- npm `@envia/envia-mcp` 0.1.0\n- security.txt: unknown\n- Watching changelog \u003chttps://docs.envia.com/docs/changelog\u003e\n- Watching privacy \u003chttps://envia.com/en-US/legal/privacy-policy?n=privacy_policy\u003e\n- Always current: https://www.anchorterminal.com/api/v1/live/envia.json\n\n## Probe metrics\n\nNot measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.\n\n## Strengths\n\n- Free sandbox with simulated rates and test labels, kept apart from production by separate tokens\n- OpenAPI definitions embedded in every reference page, plus llms.txt and Markdown docs\n- Ten MCP tools that default to the sandbox environment\n- Labels cancelled before the first carrier scan are refunded to the balance automatically\n- Postal code and address-structure lookups work without a token\n\n## Weaknesses\n\n- No status page or rate limits found\n- No public price list; costs appear only when quoting\n- Terms and privacy text could not be read, and no legal entity was found\n- MCP tools carry no readOnly or destructive annotations, and the package has one release, 0.1.0\n- The docs changelog stops at March 2026\n\n\n\n## Before you call it (notes for agents)\n\n1. Leave `ENVIA_ENVIRONMENT` unset until the user confirms live shipping; the default is sandbox\n2. Ask the user before `envia_create_label` in production, since it spends the account balance\n3. Validate the postal code at geocodes.envia.com before quoting to avoid no-coverage errors\n4. Cancel an unwanted label before the carrier scans it to get the automatic refund\n5. Use a sandbox token with sandbox hosts and a production token with production hosts; they are not interchangeable\n\n## Connect\n\nInstall:\n\n```bash\nnpx -y @envia/envia-mcp@latest\n```\n\nMCP client configuration:\n\n```json\n{\n \"mcpServers\": {\n \"envia\": {\n \"args\": [\n \"-y\",\n \"@envia/envia-mcp@latest\"\n ],\n \"command\": \"npx\",\n \"env\": {\n \"ENVIA_API_KEY\": \"your_api_key_here\"\n }\n }\n }\n}\n```\n\nThrough letme: https://letme.dev/envia. letme answers with the pick and how to call it direct. How it works: https://www.anchorterminal.com/letme/index.md\n\n## Similar tools\n\nRanked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.\n\n| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |\n| --- | --- | --- | --- | --- | --- | --- |\n| Easyship | BB | 70.6 | 190 | shipping.rates, shipping.labels, shipping.tracking, shipping.address-validation | no | https://www.anchorterminal.com/tools/easyship.md |\n| Sendcloud | B | 64.5 | 461 | shipping.rates, shipping.labels, shipping.tracking, shipping.address-validation | no | https://www.anchorterminal.com/tools/sendcloud.md |\n| Shippo | C | 61.9 | 581 | shipping.rates, shipping.labels, shipping.tracking, shipping.address-validation | no | https://www.anchorterminal.com/tools/shippo.md |\n| EasyPost | C | 57.4 | 790 | shipping.rates, shipping.labels, shipping.tracking, shipping.address-validation | no | https://www.anchorterminal.com/tools/easypost.md |\n| ShipStation API | D | 51 | 1038 | shipping.rates, shipping.labels, shipping.tracking, shipping.address-validation | no | https://www.anchorterminal.com/tools/shipstation.md |\n| atoship | E | 43 | 1247 | shipping.rates, shipping.labels, shipping.tracking, shipping.address-validation | no | https://www.anchorterminal.com/tools/atoship.md |\n\n## Panel reviews (0)\n\nReviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .\n\nDesk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md\n\n## Notable\n\n- @envia/envia-mcp 0.1.0 (MIT, published 4 March 2026) registers ten tools: rates, label creation, pickups, cancellation, shipment history, commercial invoices, tracking, carriers, address validation and HS code classification (source: \u003chttps://registry.npmjs.org/@envia/envia-mcp\u003e)\n- The MCP server connects to sandbox unless `ENVIA_ENVIRONMENT` is set to production, so shipments are simulated by default (source: \u003chttps://docs.envia.com/docs/mcp-overview\u003e)\n- Each API reference page's Markdown copy embeds its OpenAPI definition, with sandbox and production servers (source: \u003chttps://docs.envia.com/reference/shipping-rates.md\u003e)\n- Cancelling a label before the carrier scans it refunds the account balance automatically, per the FAQ (source: \u003chttps://docs.envia.com/docs/faqs\u003e)\n- Several lookups need no token, such as postal code validation at geocodes.envia.com (source: \u003chttps://docs.envia.com/docs/faqs\u003e)\n- The docs changelog's latest month is March 2026 (source: \u003chttps://docs.envia.com/docs/changelog\u003e)\n\n- #12 of 12 in Best shipping and fulfilment APIs for AI agents: https://www.anchorterminal.com/best/shipping/index.md\n- All 66 shipping comparisons: https://www.anchorterminal.com/compare/shipping/index.md\n\n## Compare\n\n- [atoship vs Envia](https://www.anchorterminal.com/compare/atoship-vs-envia.md): E 43 vs F 36.5\n- [EasyPost vs Envia](https://www.anchorterminal.com/compare/easypost-vs-envia.md): C 57.4 vs F 36.5\n- [Easyship vs Envia](https://www.anchorterminal.com/compare/easyship-vs-envia.md): BB 70.6 vs F 36.5\n- [Envia vs Karrio](https://www.anchorterminal.com/compare/envia-vs-karrio.md): F 36.5 vs D 46.4\n- [Envia vs Sendcloud](https://www.anchorterminal.com/compare/envia-vs-sendcloud.md): F 36.5 vs B 64.5\n- [Envia vs ShipBob](https://www.anchorterminal.com/compare/envia-vs-shipbob.md): F 36.5 vs C 61.3\n- [Envia vs Shippo](https://www.anchorterminal.com/compare/envia-vs-shippo.md): F 36.5 vs C 61.9\n- [Envia vs ShippyPro](https://www.anchorterminal.com/compare/envia-vs-shippypro.md): F 36.5 vs F 37\n- [Envia vs ShipStation API](https://www.anchorterminal.com/compare/envia-vs-shipstation.md): F 36.5 vs D 51\n- [Envia vs Ship24](https://www.anchorterminal.com/compare/envia-vs-ship24.md): F 36.5 vs D 52.4\n- [Envia vs TrackingMore](https://www.anchorterminal.com/compare/envia-vs-trackingmore.md): F 36.5 vs E 41.8\n\n## Verify this listing\n\nFor the vendor. The badge or a plain link to this page verifies the listing, from a page on envia.com or one of its subdomains. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{\"slug\": \"envia\", \"url\": \"…\"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify\n\nHTML badge:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/envia\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/envia.svg\" alt=\"Envia on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e\n```\n\nMarkdown badge, for a README:\n\n```markdown\n[![Envia on Anchor Terminal](https://www.anchorterminal.com/badges/envia.svg)](https://www.anchorterminal.com/tools/envia)\n```\n\nPlain link:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/envia\"\u003eEnvia on Anchor Terminal\u003c/a\u003e\n```\n\n## Share this listing\n\nFor the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Envia is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.\n\n- Dark: https://www.anchorterminal.com/assets/share/envia-dark.png\n- Light: https://www.anchorterminal.com/assets/share/envia-light.png\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Terminal", "url": "https://www.anchorterminal.com/tools/" }, { "name": "Shipping \u0026 fulfilment", "url": "https://www.anchorterminal.com/categories/shipping" }, { "name": "Envia", "url": "" } ], "description": "Envia is a multi-carrier shipping platform, strongest in Latin America, with REST APIs for rates, labels, tracking, pickups, commercial invoices and address data. An official stdio MCP server exposes ten of those operations to agents.", "facts": [ "rank #1362 of 1486", "API key auth", "0 desk reviews" ], "h1": "Envia", "image": "https://www.anchorterminal.com/assets/og/tools-envia.png", "path": "/tools/envia", "published": "2026-10-01", "section": "tools", "title": "Envia review (2026): pricing, alternatives and grade F", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/tools/envia" }, "tokens": { "markdown": 5450, "slim": 1380 }, "version": 1 }