{ "data": { "similar": [ { "grade": "A", "json": "https://www.anchorterminal.com/tools/google-drive-api.json", "name": "Google Drive API + MCP", "score": 79.6, "shared": [ "storage.drive", "storage.share" ], "slug": "google-drive-api" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/box-api.json", "name": "Box API + MCP", "score": 69.4, "shared": [ "storage.drive", "storage.share" ], "slug": "box-api" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/dropbox-api.json", "name": "Dropbox API + MCP", "score": 68.2, "shared": [ "storage.drive", "storage.share" ], "slug": "dropbox-api" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/onedrive-sharepoint.json", "name": "OneDrive and SharePoint files (Microsoft Graph)", "score": 65.3, "shared": [ "storage.drive", "storage.share" ], "slug": "onedrive-sharepoint" }, { "grade": "BB", "json": "https://www.anchorterminal.com/tools/amazon-s3.json", "name": "Amazon S3", "score": 77.9, "shared": [ "storage.share" ], "slug": "amazon-s3" }, { "grade": "BB", "json": "https://www.anchorterminal.com/tools/cloudflare-r2.json", "name": "Cloudflare R2", "score": 77.1, "shared": [ "storage.share" ], "slug": "cloudflare-r2" } ], "tool": { "slug": "fast-io", "name": "Fastio", "vendor": "VividEngine, LLC", "vendorUrl": "https://fast.io", "kind": "http-api", "category": "file-storage", "summary": "Fastio is hosted file storage with workspaces, share links and document search for teams and AI agents, from VividEngine, LLC. Agents reach it through a REST API, a hosted MCP server and an open-source CLI.", "url": "https://www.anchorterminal.com/tools/fast-io", "markdownUrl": "https://www.anchorterminal.com/tools/fast-io.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/fast-io.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/fast-io.json", "repo": "https://github.com/MediaFire/fastio_cli", "license": "Proprietary service under Fast's terms of service. The CLI, which includes a local MCP server, is Apache-2.0", "transports": [ "http", "streamable-http", "stdio" ], "remoteUrl": "https://mcp.fast.io/mcp/tools", "packages": [ { "registry": "npm", "name": "@vividengine/fastio-cli" } ], "auth": "mixed", "authNotes": "Self-serve. The REST API takes a Bearer token, either an OAuth 2.0 access token (PKCE with S256, dynamic client registration) or an API key created in the web app or with `POST /current/user/auth/key/`. Keys and grants are scoped as `entity_type:entity_id:access_mode` with `r`, `rw` and `rwa` modes, and keys can expire. A key made without scopes carries `user:*:rw`. The hosted MCP server signs in with OAuth in a browser and takes no passwords or key secrets.", "pricing": "paid", "pricingNotes": "From $9.99 a month (Starter, 250 GB, 100,000 credits, 3 seats). Business is $49.99 and Enterprise $199.99. No free tier. Monthly plans start with a 30-day trial that needs a credit card and converts when the trial or its credits end. Usage past the allowance is billed at $0.0001 a credit, extra storage at 1.5 cents a GB-month and extra bandwidth at 4 cents a GB (https://fast.io/pricing/).", "priceSummary": "$9.99 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the pricing page, the API reference or the agent guide. HTTP 402 is used for a missing plan or spent credits (checked 2026-10-09).", "endpoints": [] }, "toolCount": 35, "popularity": { "githubStars": 1, "npmWeekly": 653, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://docs.fast.io/", "llmsTxt": "https://api.fast.io/llms.txt", "capabilities": [ "storage.drive", "storage.share", "knowledge.search" ], "tags": [ "hosted", "closed-source", "mcp", "oauth", "api-key", "cli", "llms-txt", "paid", "trial" ], "lastRelease": "2026-10-08", "graded": true, "anchor": { "graded": true, "score": 55.2, "grade": "C", "agentReady": false, "rank": 663, "ranked": true, "rankOf": 950, "categoryRank": 12, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 73, "maintenance": 70, "payments": 30, "reliability": 33, "schema": 65, "security": 74, "transparency": 61 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 33, "points": 6.6, "reason": "No status page or incident history found on fast.io, the docs or the Trust Centre (0 + 5 for no readable history). An unauthenticated `GET /current/system/status/` reports scheduled maintenance only. Rate limits are exposed in `x-ve-limit-avail`, `x-ve-limit-max` and `x-ve-limit-expires` headers, with no published numbers (5). 429 handling is documented with `Retry-After`, backoff, a retryable 503 and `if_version_id` compare-and-swap on uploads. Idempotency keys exist only on bug reports (13). No SLA. Section 12 of the terms gives no guarantee of API availability (0). The API and MCP server are sold as generally available (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 65, "points": 10.56, "reason": "No OpenAPI file. `OPTIONS` introspection returns parameter types and constraints on about 40 per cent of endpoints, and MCP tools answer `action=\"describe\"`. The hosted tool definitions were not read, because mcp.fast.io's robots.txt disallows `/mcp` (10). llms.txt on fast.io and api.fast.io, a Markdown twin for each reference section, agents.md and skill.md (10). Descriptions say when to use each tool and name the traps (17). Constraint tables and enums are documented, but MCP inputs route through one `action` parameter (9). Request and response examples and per-endpoint error tables (13). The API is version 1.0 under `/current/`, guides carry version numbers and dates, and no changelog was found (6)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 73, "points": 11.86, "reason": "35 tools in named mode, 39 with import and signing (5). Added back 10 for the 8-tool code mode, read-only sessions that list no write tools and the CLI's `--tools` filter (15). Offset and cursor pagination, `page_size` of 100 to 500, filters and `output=terse` or `markdown` (20). Errors carry an HTTP status, a code, per-parameter messages and a recovery hint (18). The docs say every tool sets readOnlyHint, destructiveHint and idempotentHint, and uploads accept `if_version_id`. No general idempotency key (14). No SDK in any language, only the CLI, and workspace creation needs four required fields with literal permission strings (6)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 74, "points": 12.95, "reason": "OAuth 2.0 with PKCE (S256), dynamic client registration and consent to scopes, or revocable API keys scoped by entity and access mode with optional expiry (30). Read-only scopes, read and write tools kept apart, and `confirm='true'` on irreversible actions (18). Stored files are untrusted content. The docs flag intent text as untrusted and say AI works within the caller's permissions, with no wider guidance (6). An activity log on every plan, kept 30 to 365 days, with an actor on each record. CSV export and SIEM streaming are Enterprise only (13). security@fast.io, a SECURITY.md for the CLI and Google CASA Assurance Level 1. No SOC 2 report, no bug bounty and no security.txt (7)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 30, "points": 3.75, "reason": "No x402, MPP or L402. HTTP 402 signals a missing plan or spent credits and carries no payment terms (0). Plan prices and per-unit rates are public, $0.0001 a credit, 1.5 cents a GB-month of extra storage and 4 cents a GB of extra bandwidth (20). No free tier, and the 30-day trial needs a credit card (0). An agent can create an account with `POST /current/user/` and no browser, but must verify an email address and select a paid plan before any work (10)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 70, "points": 6.13, "reason": "CLI v0.2.93 on 8 October 2026 and MCP guide 2.92 on 7 October (30). Twelve CLI tags between 1 September and 8 October 2026 (20). No public changelog. Support runs through a contact page, Discord and a bug-report endpoint, and the CLI repository has no open issues and one star (7). The official CLI is current, there are no SDKs, and a search of the MCP registry for fastio and fast.io returned nothing (5). CI runs check, format and clippy, and Cargo.lock is committed (8)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 61, "points": 5.34, "note": "editorial 70, provenance 51", "reason": "Closed service under clear terms dated 2 October 2026. The CLI is Apache-2.0 (18). Privacy policy, a published DPA and a deletion policy with matching periods of 15, 30, 60 and 90 days, and a no-training statement. The DPA binds only once signed (26). Deprecations are flagged in the docs (Basic sign-in, QuickShare, 410 Gone for retired paths) without dates, and the terms disclaim backward compatibility (6). Sub-processor list with purposes and locations, and 15 days' notice of additions (20)." } ], "assessment": { "date": "2026-10-09", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "35 tools in named mode, 39 with import and signing (5). Added back 10 for the 8-tool code mode, read-only sessions that list no write tools and the CLI's `--tools` filter (15). Offset and cursor pagination, `page_size` of 100 to 500, filters and `output=terse` or `markdown` (20). Errors carry an HTTP status, a code, per-parameter messages and a recovery hint (18). The docs say every tool sets readOnlyHint, destructiveHint and idempotentHint, and uploads accept `if_version_id`. No general idempotency key (14). No SDK in any language, only the CLI, and workspace creation needs four required fields with literal permission strings (6).", "maintenance": "CLI v0.2.93 on 8 October 2026 and MCP guide 2.92 on 7 October (30). Twelve CLI tags between 1 September and 8 October 2026 (20). No public changelog. Support runs through a contact page, Discord and a bug-report endpoint, and the CLI repository has no open issues and one star (7). The official CLI is current, there are no SDKs, and a search of the MCP registry for fastio and fast.io returned nothing (5). CI runs check, format and clippy, and Cargo.lock is committed (8).", "payments": "No x402, MPP or L402. HTTP 402 signals a missing plan or spent credits and carries no payment terms (0). Plan prices and per-unit rates are public, $0.0001 a credit, 1.5 cents a GB-month of extra storage and 4 cents a GB of extra bandwidth (20). No free tier, and the 30-day trial needs a credit card (0). An agent can create an account with `POST /current/user/` and no browser, but must verify an email address and select a paid plan before any work (10).", "reliability": "No status page or incident history found on fast.io, the docs or the Trust Centre (0 + 5 for no readable history). An unauthenticated `GET /current/system/status/` reports scheduled maintenance only. Rate limits are exposed in `x-ve-limit-avail`, `x-ve-limit-max` and `x-ve-limit-expires` headers, with no published numbers (5). 429 handling is documented with `Retry-After`, backoff, a retryable 503 and `if_version_id` compare-and-swap on uploads. Idempotency keys exist only on bug reports (13). No SLA. Section 12 of the terms gives no guarantee of API availability (0). The API and MCP server are sold as generally available (10).", "schema": "No OpenAPI file. `OPTIONS` introspection returns parameter types and constraints on about 40 per cent of endpoints, and MCP tools answer `action=\"describe\"`. The hosted tool definitions were not read, because mcp.fast.io's robots.txt disallows `/mcp` (10). llms.txt on fast.io and api.fast.io, a Markdown twin for each reference section, agents.md and skill.md (10). Descriptions say when to use each tool and name the traps (17). Constraint tables and enums are documented, but MCP inputs route through one `action` parameter (9). Request and response examples and per-endpoint error tables (13). The API is version 1.0 under `/current/`, guides carry version numbers and dates, and no changelog was found (6).", "security": "OAuth 2.0 with PKCE (S256), dynamic client registration and consent to scopes, or revocable API keys scoped by entity and access mode with optional expiry (30). Read-only scopes, read and write tools kept apart, and `confirm='true'` on irreversible actions (18). Stored files are untrusted content. The docs flag intent text as untrusted and say AI works within the caller's permissions, with no wider guidance (6). An activity log on every plan, kept 30 to 365 days, with an actor on each record. CSV export and SIEM streaming are Enterprise only (13). security@fast.io, a SECURITY.md for the CLI and Google CASA Assurance Level 1. No SOC 2 report, no bug bounty and no security.txt (7).", "transparency": "Closed service under clear terms dated 2 October 2026. The CLI is Apache-2.0 (18). Privacy policy, a published DPA and a deletion policy with matching periods of 15, 30, 60 and 90 days, and a no-training statement. The DPA binds only once signed (26). Deprecations are flagged in the docs (Basic sign-in, QuickShare, 410 Gone for retired paths) without dates, and the terms disclaim backward compatibility (6). Sub-processor list with purposes and locations, and 15 days' notice of additions (20)." }, "sources": [ { "what": "home page", "url": "https://fast.io/", "seen": "2026-10-09" }, { "what": "llms.txt", "url": "https://fast.io/llms.txt", "seen": "2026-10-09" }, { "what": "pricing", "url": "https://fast.io/pricing/", "seen": "2026-10-09" }, { "what": "terms of service", "url": "https://fast.io/terms/", "seen": "2026-10-09" }, { "what": "privacy policy", "url": "https://fast.io/privacy/", "seen": "2026-10-09" }, { "what": "DPA", "url": "https://fast.io/dpa/", "seen": "2026-10-09" }, { "what": "sub-processors", "url": "https://fast.io/legal/subprocessors/", "seen": "2026-10-09" }, { "what": "security page", "url": "https://fast.io/security/", "seen": "2026-10-09" }, { "what": "Trust Centre", "url": "https://fast.io/trust/", "seen": "2026-10-09" }, { "what": "fair use policy", "url": "https://fast.io/fair-use/", "seen": "2026-10-09" }, { "what": "developer hub", "url": "https://fast.io/developers/", "seen": "2026-10-09" }, { "what": "agent guide", "url": "https://fast.io/agents.md", "seen": "2026-10-09" }, { "what": "API docs home", "url": "https://docs.fast.io/", "seen": "2026-10-09" }, { "what": "API reference (llms.txt)", "url": "https://api.fast.io/llms.txt", "seen": "2026-10-09" }, { "what": "shares reference", "url": "https://api.fast.io/current/llms/shares/", "seen": "2026-10-09" }, { "what": "upload reference", "url": "https://api.fast.io/current/llms/upload/", "seen": "2026-10-09" }, { "what": "MCP server guide", "url": "https://mcp.fast.io/skill.md", "seen": "2026-10-09" }, { "what": "mcp.fast.io robots.txt, which disallows /mcp", "url": "https://mcp.fast.io/robots.txt", "seen": "2026-10-09" }, { "what": "CLI repository, tags, CI and SECURITY.md (shallow clone)", "url": "https://github.com/MediaFire/fastio_cli", "seen": "2026-10-09" }, { "what": "npm package", "url": "https://registry.npmjs.org/@vividengine%2Ffastio-cli/latest", "seen": "2026-10-09" }, { "what": "MCP registry search", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=fastio", "seen": "2026-10-09" } ], "openQuestions": [ "unchecked: the hosted MCP server's tool definitions, input schemas and annotations. mcp.fast.io/robots.txt disallows `/mcp`, so no `initialize` or `tools/list` was sent, and the tool count and annotations come from skill.md and agents.md", "unchecked: the domain registration date. rdap.org answered that no RDAP service exists for fast.io", "unchecked: the auth, OAuth, storage and organisations reference pages, the data deletion policy page and the help centre, left unread to keep to the page budget", "The terms (Section 3) forbid any robot or spider retrieving the Services except through the programmatic access of Section 12 or by public search engines. Recorded as a fact with no deduction. It matters before any probe is run", "robots.txt answers. fast.io 200 and allows all, mcp.fast.io 200 and disallows `/mcp`, `/sse`, `/blob`, `/file`, api.fast.io 404, docs.fast.io 404, registry.npmjs.org and api.npmjs.org no rules, registry.modelcontextprotocol.io 404, rdap.org 400", "fast.io/llms.txt and api.fast.io/llms.txt carry lines addressed to AI models (read in full, do not summarise). They were treated as data", "The lead was wrong on three points. The product is now written Fastio, the vendor is VividEngine, LLC (doing business as Fast Technologies), and the trial needs a card. The price of $9.99 a month and the MCP address were right", "Whether the billing API lets an agent select a plan and pay with no browser was not established. The Trust Centre says payment runs on a Stripe-hosted checkout", "The CLI repository sits under the MediaFire organisation on GitHub and was created on 5 September 2026. The Trust Centre describes the parent company as founded in 2006 with MediaFire users" ] }, "negative": -2, "negativeNotes": [ "2026-10-09. fast.io/llms.txt states storage at 100 credits a GB and bandwidth at 212, while the pricing page and the agent guide (version 1.40.0, 2 October 2026) give 150 and 400. The same file points to a security.txt that answers 404. An agent reading only llms.txt would understate cost by a third or more (-2). https://fast.io/llms.txt" ], "verdict": "OAuth with PKCE, scoped API keys with read, write and admin modes, and separate read and write MCP tools limit what an agent can touch. There is no free tier, the 30-day trial needs a card, and no status page, SLA, OpenAPI file or public changelog was found.", "bestFor": "A team that wants agents and people in one shared drive with share links, document search and an audit trail.", "strengths": [ "OAuth 2.0 with PKCE and dynamic client registration, plus API keys scoped as `entity_type:entity_id:access_mode` with `r`, `rw` and `rwa` modes and optional expiry", "Named MCP mode splits each area into a read tool and a `_manage` write tool, and a read-only key hides the write tools", "Shares take a password, an expiry date and a `download_security` level, and file links can carry `expires`", "Sub-processor list with locations and 15 days' notice, and deletion periods of 15, 30, 60 and 90 days stated alike in the terms and privacy policy", "The CLI is Apache-2.0 on GitHub with CI, and shipped v0.2.93 on 8 October 2026" ], "weaknesses": [ "No free tier. A new organisation answers HTTP 402 until a paid plan is chosen, and the 30-day trial needs a credit card", "No status page, incident history or SLA found. The terms give no guarantee of API availability or backward compatibility", "No OpenAPI file. `OPTIONS` introspection covers about 40 per cent of endpoints, and rate limits are published as headers without numbers", "fast.io/llms.txt gives 100 credits a GB for storage and 212 for bandwidth. The pricing page and agent guide give 150 and 400", "No SOC 2 report yet (the Trust Centre says an audit is being prepared), no bug bounty, and `/.well-known/security.txt` answers 404", "The terms forbid robots and spiders outside the programmatic access of Section 12. This matters before any probe is run" ], "agentNotes": [ "Connect to `https://mcp.fast.io/mcp/tools` for named tools or `https://mcp.fast.io/mcp/code` for the 8-tool code mode. The URL fixes the tool set for the session", "Call `action=\"describe\"` on a tool before first use. Parameters live there, not in the tool list", "To update a file, upload again with the same parent folder and filename. Deleting first loses the version history", "On 429 wait until `x-ve-limit-expires` or the `Retry-After` value. On 402 the organisation has no plan or no credits, so stop and tell the owner", "Ask the owner for a key scoped to one workspace with `r` or `rw`. A key made without scopes carries `user:*:rw` across the account" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 55.2 } ], "editorialScores": { "ergonomics": 73, "maintenance": 70, "payments": 30, "reliability": 33, "schema": 65, "security": 74, "transparency": 70 }, "provenanceScore": 51 }, "connect": { "install": "npm install -g @vividengine/fastio-cli", "config": { "mcpServers": { "fastio": { "args": [ "mcp" ], "command": "fastio" } } } }, "letme": { "capability": "https://letme.dev/storage.drive", "tool": "https://letme.dev/fast-io" }, "notable": [ "Three hosted MCP addresses fix the tool set. `/mcp/tools` has 35 named tools (39 with import and signing), `/mcp/code` has 8 and `/mcp/operations` has one tool per operation (https://mcp.fast.io/skill.md)", "A new organisation must choose a paid plan before it can work, and until then resource endpoints answer HTTP 402 (https://fast.io/agents.md)", "Shares take a password of 4 to 128 characters, an `expires` date and a `download_security` level of off, medium or high (https://api.fast.io/current/llms/shares/)", "Uploads under 4 MB go in one request. Larger files are chunked with up to 3 chunks in parallel and CRC-32C checks, to a plan limit of 25, 50 or 100 GB (https://api.fast.io/current/llms/upload/)", "Content is stored in the United States on servers the vendor owns. Files uploaded through MCP are staged on Cloudflare, and AI functions send content to Google Cloud, Voyage AI and LangSmith (https://fast.io/legal/subprocessors/)", "The Trust Centre lists Google CASA Assurance Level 1 and says a SOC 2 Type II audit is being prepared (https://fast.io/trust/)", "Section 12 of the terms lets the vendor suspend programmatic access without notice and gives no guarantee of API availability, response times or backward compatibility (https://fast.io/terms/)", "fast.io/llms.txt gives storage at 100 credits a GB and bandwidth at 212. The pricing page and agent guide give 150 and 400 (https://fast.io/llms.txt)" ], "area": "everyday", "details": [ { "label": "Surfaces", "value": "REST API at https://api.fast.io/current/ (version 1.0, form-encoded requests, JSON responses), hosted MCP server over Streamable HTTP, and the `fastio` CLI with a local stdio MCP server" }, { "label": "MCP endpoints", "value": "`https://mcp.fast.io/mcp/tools` (35 named tools), `/mcp/code` (8 tools), `/mcp/operations` (one tool per operation). The earlier `/mcp` and `/sse` addresses still work" }, { "label": "Credentials", "value": "OAuth 2.0 with PKCE and dynamic client registration, or API keys scoped by entity with `r`, `rw` or `rwa` access and optional expiry" }, { "label": "Plans", "value": "Starter $9.99 a month or $99 a year, Business $49.99 or $499, Enterprise $199.99 or $1,999. 250 GB, 5 TB and 25 TB of storage, and 3, 10 and 30 seats" }, { "label": "Credits", "value": "Storage 150 a GB, bandwidth 400 a GB, AI chat 1 per 100 tokens, document indexing 10 a page, file conversion 25 each. Overage $0.0001 a credit" }, { "label": "Rate limits", "value": "Reported in `x-ve-limit-avail`, `x-ve-limit-max` and `x-ve-limit-expires` headers. 429 with error code 10368. No numbers published" }, { "label": "Uploads", "value": "Single request under 4 MB, chunked above, 3 chunks in parallel, CRC-32C recommended, maximum file size 25, 50 or 100 GB by plan" }, { "label": "Sharing", "value": "Send, Receive and Exchange shares with password, expiry and download controls, and single-file links with optional `expires`" }, { "label": "Audit", "value": "Activity log on every plan, kept 30, 180 or 365 days. CSV or JSONL export and a signed SIEM stream on Enterprise" }, { "label": "Deletion", "value": "Grace periods of 15 days for shares, 30 for workspaces, 60 for organisations and 90 for user accounts, 180 days where an organisation had a subscription" }, { "label": "Certifications", "value": "Google CASA Assurance Level 1. No SOC 2 report. The data centre provider holds SOC 2 Type II and ISO 27001 per the Trust Centre" }, { "label": "CLI", "value": "`@vividengine/fastio-cli` 0.2.93 (8 October 2026), Rust, Apache-2.0, for macOS, Linux and Windows" } ], "unitPrices": [ { "item": "Starter plan", "unit": "month", "usd": 9.99, "note": "250 GB, 100,000 credits, 3 seats" }, { "item": "Business plan", "unit": "month", "usd": 49.99, "note": "5 TB, 600,000 credits, 10 seats" }, { "item": "Enterprise plan", "unit": "month", "usd": 199.99, "note": "25 TB, 3,000,000 credits, 30 seats" }, { "item": "Additional storage", "unit": "gb-month", "usd": 0.015 }, { "item": "Additional bandwidth", "unit": "gb", "usd": 0.04 }, { "item": "Credit overage", "unit": "credit", "usd": 0.0001, "note": "$10 per 100,000 credits" } ], "provenance": { "legalEntity": "VividEngine, LLC (doing business as Fast Technologies)", "domain": "fast.io", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://fast.io/terms/", "privacy": "https://fast.io/privacy/", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The terms of service (effective 2 October 2026) name VividEngine, LLC, doing business as Fast Technologies, 4747 Research Forest Dr., Ste 180-265, The Woodlands, TX 77381-4902.", "The API answers at api.fast.io and the MCP server at mcp.fast.io, both on the vendor's domain.", "fast.io/.well-known/security.txt returns 404, although fast.io/llms.txt lists it as the security contact.", "No status page or changelog is linked from the home page, the developer hub, the docs or the Trust Centre.", "rdap.org answered that no RDAP service is available for fast.io, so the registration date is blank.", "The DPA binds only when signed by both parties, and the Trust Centre says it is executed with Enterprise Plus customers and on request." ], "score": 51, "checks": [ { "check": "Legal entity named", "value": "VividEngine, LLC (doing business as Fast Technologies)", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "fast.io, no registry record we could read", "points": 0, "max": 15, "state": "no" }, { "check": "Endpoint on the vendor's domain", "value": "mcp.fast.io", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 7 of the 7 things a reader expects, and has 2 clauses that cost points", "points": 6, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ], "policies": [ { "kind": "terms", "url": "https://fast.io/terms/", "state": "read", "readAt": "2026-10-09", "statedDate": "2026-10-02", "words": 8432, "points": 6, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated on October 2nd, 2026", "says": "Last updated 2026-10-02" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "The Agreement shall be construed in accordance with the laws of the State of Texas, without reference to principles of choice of law.", "says": "The law of the State of Texas" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "IN STATES, COUNTRIES OR TERRITORIES NOT ALLOWING EXCLUSION OF IMPLIED WARRANTIES OR LIMITATION OF LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES, FAST AND ANY THIRD PARTY PROVIDER SHALL BE LIMITED TO THE GREATEST EXTENT PERMITTED BY LAW.", "says": "Rules out indirect and consequential losses, with no cap named in this sentence" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "Fast may change, suspend or discontinue all or any aspect of the Services at any time, including the availability of any feature, database, or Content, without prior notice or liability." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "Users will be notified of significant changes to the Services or Terms via email or through the platform.", "says": "Says it gives notice of a change" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "You agree, while using Fast Services, that you may not:" }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": true, "quote": "The warranty disclaimers and \"as is\" language in this Section are subject to any express warranties, service level commitments, availability guarantees, or uptime obligations that Fast undertakes in a valid Enterprise Agreement between you and Fast." } ], "toKnow": [ { "key": "terms.automated", "label": "Restricts automated access", "found": true, "quote": "Prohibited Activities: Agent Accounts may not be used to circumvent account limits, create fake or fraudulent accounts, engage in automated abuse, scraping beyond authorized use, spam, or any activity that violates these Terms or the Fair Use Policy.", "costsPoints": true }, { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "Fast may change, suspend or discontinue all or any aspect of the Services at any time, including the availability of any feature, database, or Content, without prior notice or liability.", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "Fast reserves the right to terminate your access to any and/or all parts of the Services at any time for any reason without prior notice or liability." }, { "key": "terms.arbitration", "label": "Requires arbitration or waives class actions", "found": true, "quote": "YOU AND FAST AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN AN INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, COLLECTIVE, CONSOLIDATED, OR REPRESENTATIVE PROCEEDING." } ], "notes": [ { "date": "2026-10-08", "text": "Fast's total liability is zero dollars for a customer who paid no fees in the twelve months before the event behind the claim.", "quote": "IF YOU HAVE NOT PAID ANY FEES TO FAST DURING SUCH PERIOD, FAST'S MAXIMUM AGGREGATE LIABILITY TO YOU SHALL BE ZERO DOLLARS ($0)." }, { "date": "2026-10-08", "text": "The customer is responsible for every action taken through programmatic access or by an agent account it creates, controls or authorises.", "quote": "You are fully responsible for all actions taken through Programmatic Access or by any Agent Account you create, control, or authorize, including any content uploaded, downloaded, modified, or shared." }, { "date": "2026-10-08", "text": "After an account is deleted, closed or terminated, content is permanently purged after 15 days for shares, 30 for workspaces, 60 for organisations and 90 for user accounts.", "quote": "When a share, workspace, organization, or user account is deleted, closed, or terminated, its Content is permanently purged after a grace period of 15 days for shares, 30 days for workspaces, 60 days for organizations, and 90 days for user accounts." } ] }, { "kind": "privacy", "url": "https://fast.io/privacy/", "state": "read", "readAt": "2026-10-09", "statedDate": "2026-10-02", "words": 4051, "points": 10, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated on October 2nd, 2026", "says": "Last updated 2026-10-02" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "We collect minimal information necessary to enable our services, monitor stability and performance, and improve our offerings." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "After a share, workspace, organization, or user account is closed or deleted, its data is kept for a recovery period before it is permanently purged: 15 days for shares, 30 days for workspaces, 60 days for organizations, and 90 days for user accounts.", "says": "Names a period of 15 days" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "When Fast processes personal data contained in a business customer's Content, it acts as that customer's service provider or processor under the Service Provider and Processor Terms in our Terms of Service and, where one has been executed, the DPA." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "In the United States you can opt out at any time with the \"Do Not Sell or Share My Personal Information\" link or the cookie banner, and we honor Global Privacy Control signals.", "says": "Says it does not sell personal data" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "Under the EU General Data Protection Regulation (GDPR), UK GDPR, California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), and other applicable privacy laws, you have the right to access, rectify, delete, restrict processing of, and object to the processing of your PII." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "If you have questions, please contact us at privacy@fast.io.", "says": "privacy@fast.io" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "Where you have executed a DPA with Fast, the Standard Contractual Clauses it incorporates apply to transfers of the personal data it covers.", "says": "Relies on standard contractual clauses" } ], "notes": [ { "date": "2026-10-08", "text": "PostHog product analytics and session replay run in the web application and cannot be turned off there.", "quote": "Our web application uses PostHog product analytics and session replay as part of operating and improving the Service; they cannot be turned off within the application." }, { "date": "2026-10-08", "text": "Data from API, MCP and agent account access may be kept longer than standard user data.", "quote": "Data from programmatic access may be retained longer than standard user data for security analysis, abuse prevention, and legal compliance purposes." }, { "date": "2026-10-08", "text": "LangSmith records AI requests and responses, which may include prompts, AI answers and file excerpts.", "quote": "LangChain, Inc. (LangSmith): Monitoring and debugging of AI features; records AI requests and responses, which may include prompts, AI answers, and file excerpts" } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/fast-io.json", "live": { "slug": "fast-io", "probe": { "target": "https://mcp.fast.io/mcp/tools", "method": "get", "lastAt": "2026-10-10T05:38:50.895801436Z", "lastOk": true, "lastStatus": 400, "lastMs": 50, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 157, "p95ms24h": 596, "samples24h": 143, "samples30d": 143, "days": [ { "date": "2026-10-09", "probes": 85, "ok": 85 }, { "date": "2026-10-10", "probes": 58, "ok": 58 } ] }, "versions": [ { "registry": "github", "name": "MediaFire/fastio_cli", "version": "v0.2.93", "released": "2026-10-08", "seenAt": "2026-10-09T16:52:49.974838832Z" }, { "registry": "npm", "name": "@vividengine/fastio-cli", "version": "0.2.93", "seenAt": "2026-10-09T16:52:47.611452489Z" } ], "githubStars": 1, "npmWeekly": 653, "pages": [ { "url": "https://fast.io/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-09T18:39:18.30204828Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "f3ab609635d0" }, { "url": "https://fast.io/privacy/", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:39:21.559921856Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "dac598e7cd59" }, { "url": "https://fast.io/terms/", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:39:22.401428685Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "8aa657d5df36" } ], "updatedAt": "2026-10-10T05:38:50.895801436Z" } }, "verify": { "accepts": "a page on fast.io or one of its subdomains, or the README of github.com/MediaFire/fastio_cli", "badgeUrl": "https://www.anchorterminal.com/badges/fast-io.svg", "body": { "slug": "fast-io", "url": "the page with the badge or the link" }, "docs": "https://www.anchorterminal.com/builders/#verify", "effect": "none, it never changes a grade, rank or review", "endpoint": "https://www.anchorterminal.com/api/v1/verify", "listingUrl": "https://www.anchorterminal.com/tools/fast-io", "mcpTool": "verify_listing", "recheck": "weekly; two failed checks in a row and it lapses, a later pass restores it", "snippets": { "html": "\u003ca href=\"https://www.anchorterminal.com/tools/fast-io\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/fast-io.svg\" alt=\"Fastio on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e", "markdown": "[![Fastio on Anchor Terminal](https://www.anchorterminal.com/badges/fast-io.svg)](https://www.anchorterminal.com/tools/fast-io)", "link": "\u003ca href=\"https://www.anchorterminal.com/tools/fast-io\"\u003eFastio on Anchor Terminal\u003c/a\u003e" } } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/tools/fast-io", "json": "https://www.anchorterminal.com/tools/fast-io.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/tools/fast-io.md", "slim": "https://www.anchorterminal.com/tools/fast-io.min.md" }, "markdown": "## Overview\n\n**Grade C · 55.2/100 · rank #663 of 950 · #12 in File storage \u0026 sharing · not agent-ready · confidence medium**\n\n\n## Assessment\n\nOAuth with PKCE, scoped API keys with read, write and admin modes, and separate read and write MCP tools limit what an agent can touch. There is no free tier, the 30-day trial needs a card, and no status page, SLA, OpenAPI file or public changelog was found.\n\n## Facts\n\n| Field | Value |\n| --- | --- |\n| Vendor | VividEngine, LLC (https://fast.io) |\n| Kind | HTTP API |\n| Category | File storage \u0026 sharing (https://www.anchorterminal.com/categories/file-storage) |\n| Transport | HTTP, Streamable HTTP, stdio |\n| Endpoint | `https://mcp.fast.io/mcp/tools` |\n| Auth | OAuth or key · Self-serve. The REST API takes a Bearer token, either an OAuth 2.0 access token (PKCE with S256, dynamic client registration) or an API key created in the web app or with `POST /current/user/auth/key/`. Keys and grants are scoped as `entity_type:entity_id:access_mode` with `r`, `rw` and `rwa` modes, and keys can expire. A key made without scopes carries `user:*:rw`. The hosted MCP server signs in with OAuth in a browser and takes no passwords or key secrets. |\n| Pricing | Paid ($9.99 / mo) · From $9.99 a month (Starter, 250 GB, 100,000 credits, 3 seats). Business is $49.99 and Enterprise $199.99. No free tier. Monthly plans start with a 30-day trial that needs a credit card and converts when the trial or its credits end. Usage past the allowance is billed at $0.0001 a credit, extra storage at 1.5 cents a GB-month and extra bandwidth at 4 cents a GB (https://fast.io/pricing/). |\n| x402 | No · No x402, MPP or L402 in the pricing page, the API reference or the agent guide. HTTP 402 is used for a missing plan or spent credits (checked 2026-10-09). |\n| Licence | Proprietary service under Fast's terms of service. The CLI, which includes a local MCP server, is Apache-2.0 |\n| Tools exposed | 35 |\n| Packages | npm: `@vividengine/fastio-cli` |\n| Source | https://github.com/MediaFire/fastio_cli |\n| Docs | https://docs.fast.io/ |\n| llms.txt | https://api.fast.io/llms.txt |\n| Last release | 2026-10-08 |\n| GitHub stars | 1 (as of 2026-10-09) |\n| npm downloads / week | 653 |\n| Surfaces | REST API at https://api.fast.io/current/ (version 1.0, form-encoded requests, JSON responses), hosted MCP server over Streamable HTTP, and the `fastio` CLI with a local stdio MCP server |\n| MCP endpoints | `https://mcp.fast.io/mcp/tools` (35 named tools), `/mcp/code` (8 tools), `/mcp/operations` (one tool per operation). The earlier `/mcp` and `/sse` addresses still work |\n| Credentials | OAuth 2.0 with PKCE and dynamic client registration, or API keys scoped by entity with `r`, `rw` or `rwa` access and optional expiry |\n| Plans | Starter $9.99 a month or $99 a year, Business $49.99 or $499, Enterprise $199.99 or $1,999. 250 GB, 5 TB and 25 TB of storage, and 3, 10 and 30 seats |\n| Credits | Storage 150 a GB, bandwidth 400 a GB, AI chat 1 per 100 tokens, document indexing 10 a page, file conversion 25 each. Overage $0.0001 a credit |\n| Rate limits | Reported in `x-ve-limit-avail`, `x-ve-limit-max` and `x-ve-limit-expires` headers. 429 with error code 10368. No numbers published |\n| Uploads | Single request under 4 MB, chunked above, 3 chunks in parallel, CRC-32C recommended, maximum file size 25, 50 or 100 GB by plan |\n| Sharing | Send, Receive and Exchange shares with password, expiry and download controls, and single-file links with optional `expires` |\n| Audit | Activity log on every plan, kept 30, 180 or 365 days. CSV or JSONL export and a signed SIEM stream on Enterprise |\n| Deletion | Grace periods of 15 days for shares, 30 for workspaces, 60 for organisations and 90 for user accounts, 180 days where an organisation had a subscription |\n| Certifications | Google CASA Assurance Level 1. No SOC 2 report. The data centre provider holds SOC 2 Type II and ISO 27001 per the Trust Centre |\n| CLI | `@vividengine/fastio-cli` 0.2.93 (8 October 2026), Rust, Apache-2.0, for macOS, Linux and Windows |\n| Capabilities | storage.drive, storage.share, knowledge.search |\n| Tags | hosted, closed-source, mcp, oauth, api-key, cli, llms-txt, paid, trial |\n| JSON | https://www.anchorterminal.com/api/v1/tools/fast-io.json |\n\n## Score breakdown (methodology v0.4, October 2026 research run)\n\nAssessed 2026-10-09 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. \"This run\" is each category's share of the 100 points.\n\n| Category | Weight | This run | Score (0–100) | Points |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% | 20 | 33 | 6.6 |\n| Performance | 10% | pending | pending | n/a |\n| Schema \u0026 documentation | 13% | 16.2 | 65 | 10.6 |\n| Agent ergonomics | 13% | 16.2 | 73 | 11.9 |\n| Security \u0026 auth | 14% | 17.5 | 74 | 12.9 |\n| Payments \u0026 pricing | 10% | 12.5 | 30 | 3.8 |\n| Task success | 10% | pending | pending | n/a |\n| Maintenance \u0026 community | 7% | 8.8 | 70 | 6.1 |\n| Transparency \u0026 trust (editorial 70, provenance 51) | 7% | 8.8 | 61 | 5.3 |\n| Negative events | up to −15 | up to −15 | 2026-10-09. fast.io/llms.txt states storage at 100 credits a GB and bandwidth at 212, while the pricing page and the agent guide (version 1.40.0, 2 October 2026) give 150 and 400. The same file points to a security.txt that answers 404. An agent reading only llms.txt would understate cost by a third or more (-2). https://fast.io/llms.txt | -2 |\n| **Total** | | | | **55.2 → C** |\n\n### Why each score\n\n- Reliability 33: No status page or incident history found on fast.io, the docs or the Trust Centre (0 + 5 for no readable history). An unauthenticated `GET /current/system/status/` reports scheduled maintenance only. Rate limits are exposed in `x-ve-limit-avail`, `x-ve-limit-max` and `x-ve-limit-expires` headers, with no published numbers (5). 429 handling is documented with `Retry-After`, backoff, a retryable 503 and `if_version_id` compare-and-swap on uploads. Idempotency keys exist only on bug reports (13). No SLA. Section 12 of the terms gives no guarantee of API availability (0). The API and MCP server are sold as generally available (10).\n- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.\n- Schema \u0026 documentation 65: No OpenAPI file. `OPTIONS` introspection returns parameter types and constraints on about 40 per cent of endpoints, and MCP tools answer `action=\"describe\"`. The hosted tool definitions were not read, because mcp.fast.io's robots.txt disallows `/mcp` (10). llms.txt on fast.io and api.fast.io, a Markdown twin for each reference section, agents.md and skill.md (10). Descriptions say when to use each tool and name the traps (17). Constraint tables and enums are documented, but MCP inputs route through one `action` parameter (9). Request and response examples and per-endpoint error tables (13). The API is version 1.0 under `/current/`, guides carry version numbers and dates, and no changelog was found (6).\n- Agent ergonomics 73: 35 tools in named mode, 39 with import and signing (5). Added back 10 for the 8-tool code mode, read-only sessions that list no write tools and the CLI's `--tools` filter (15). Offset and cursor pagination, `page_size` of 100 to 500, filters and `output=terse` or `markdown` (20). Errors carry an HTTP status, a code, per-parameter messages and a recovery hint (18). The docs say every tool sets readOnlyHint, destructiveHint and idempotentHint, and uploads accept `if_version_id`. No general idempotency key (14). No SDK in any language, only the CLI, and workspace creation needs four required fields with literal permission strings (6).\n- Security \u0026 auth 74: OAuth 2.0 with PKCE (S256), dynamic client registration and consent to scopes, or revocable API keys scoped by entity and access mode with optional expiry (30). Read-only scopes, read and write tools kept apart, and `confirm='true'` on irreversible actions (18). Stored files are untrusted content. The docs flag intent text as untrusted and say AI works within the caller's permissions, with no wider guidance (6). An activity log on every plan, kept 30 to 365 days, with an actor on each record. CSV export and SIEM streaming are Enterprise only (13). security@fast.io, a SECURITY.md for the CLI and Google CASA Assurance Level 1. No SOC 2 report, no bug bounty and no security.txt (7).\n- Payments \u0026 pricing 30: No x402, MPP or L402. HTTP 402 signals a missing plan or spent credits and carries no payment terms (0). Plan prices and per-unit rates are public, $0.0001 a credit, 1.5 cents a GB-month of extra storage and 4 cents a GB of extra bandwidth (20). No free tier, and the 30-day trial needs a credit card (0). An agent can create an account with `POST /current/user/` and no browser, but must verify an email address and select a paid plan before any work (10).\n- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.\n- Maintenance \u0026 community 70: CLI v0.2.93 on 8 October 2026 and MCP guide 2.92 on 7 October (30). Twelve CLI tags between 1 September and 8 October 2026 (20). No public changelog. Support runs through a contact page, Discord and a bug-report endpoint, and the CLI repository has no open issues and one star (7). The official CLI is current, there are no SDKs, and a search of the MCP registry for fastio and fast.io returned nothing (5). CI runs check, format and clippy, and Cargo.lock is committed (8).\n- Transparency \u0026 trust 61: Closed service under clear terms dated 2 October 2026. The CLI is Apache-2.0 (18). Privacy policy, a published DPA and a deletion policy with matching periods of 15, 30, 60 and 90 days, and a no-training statement. The DPA binds only once signed (26). Deprecations are flagged in the docs (Basic sign-in, QuickShare, 410 Gone for retired paths) without dates, and the terms disclaim backward compatibility (6). Sub-processor list with purposes and locations, and 15 days' notice of additions (20).\n\nFix list for a coding agent, everything this grade says the listing lacks, the biggest gain first (22 items): https://www.anchorterminal.com/fixes/fast-io.md (JSON https://www.anchorterminal.com/fixes/fast-io.json)\n\n### What we couldn't check\n\n- unchecked: the hosted MCP server's tool definitions, input schemas and annotations. mcp.fast.io/robots.txt disallows `/mcp`, so no `initialize` or `tools/list` was sent, and the tool count and annotations come from skill.md and agents.md\n- unchecked: the domain registration date. rdap.org answered that no RDAP service exists for fast.io\n- unchecked: the auth, OAuth, storage and organisations reference pages, the data deletion policy page and the help centre, left unread to keep to the page budget\n- The terms (Section 3) forbid any robot or spider retrieving the Services except through the programmatic access of Section 12 or by public search engines. Recorded as a fact with no deduction. It matters before any probe is run\n- robots.txt answers. fast.io 200 and allows all, mcp.fast.io 200 and disallows `/mcp`, `/sse`, `/blob`, `/file`, api.fast.io 404, docs.fast.io 404, registry.npmjs.org and api.npmjs.org no rules, registry.modelcontextprotocol.io 404, rdap.org 400\n- fast.io/llms.txt and api.fast.io/llms.txt carry lines addressed to AI models (read in full, do not summarise). They were treated as data\n- The lead was wrong on three points. The product is now written Fastio, the vendor is VividEngine, LLC (doing business as Fast Technologies), and the trial needs a card. The price of $9.99 a month and the MCP address were right\n- Whether the billing API lets an agent select a plan and pay with no browser was not established. The Trust Centre says payment runs on a Stripe-hosted checkout\n- The CLI repository sits under the MediaFire organisation on GitHub and was created on 5 September 2026. The Trust Centre describes the parent company as founded in 2006 with MediaFire users\n\n### Sources\n\n- home page: \u003chttps://fast.io/\u003e (seen 2026-10-09)\n- llms.txt: \u003chttps://fast.io/llms.txt\u003e (seen 2026-10-09)\n- pricing: \u003chttps://fast.io/pricing/\u003e (seen 2026-10-09)\n- terms of service: \u003chttps://fast.io/terms/\u003e (seen 2026-10-09)\n- privacy policy: \u003chttps://fast.io/privacy/\u003e (seen 2026-10-09)\n- DPA: \u003chttps://fast.io/dpa/\u003e (seen 2026-10-09)\n- sub-processors: \u003chttps://fast.io/legal/subprocessors/\u003e (seen 2026-10-09)\n- security page: \u003chttps://fast.io/security/\u003e (seen 2026-10-09)\n- Trust Centre: \u003chttps://fast.io/trust/\u003e (seen 2026-10-09)\n- fair use policy: \u003chttps://fast.io/fair-use/\u003e (seen 2026-10-09)\n- developer hub: \u003chttps://fast.io/developers/\u003e (seen 2026-10-09)\n- agent guide: \u003chttps://fast.io/agents.md\u003e (seen 2026-10-09)\n- API docs home: \u003chttps://docs.fast.io/\u003e (seen 2026-10-09)\n- API reference (llms.txt): \u003chttps://api.fast.io/llms.txt\u003e (seen 2026-10-09)\n- shares reference: \u003chttps://api.fast.io/current/llms/shares/\u003e (seen 2026-10-09)\n- upload reference: \u003chttps://api.fast.io/current/llms/upload/\u003e (seen 2026-10-09)\n- MCP server guide: \u003chttps://mcp.fast.io/skill.md\u003e (seen 2026-10-09)\n- mcp.fast.io robots.txt, which disallows /mcp: \u003chttps://mcp.fast.io/robots.txt\u003e (seen 2026-10-09)\n- CLI repository, tags, CI and SECURITY.md (shallow clone): \u003chttps://github.com/MediaFire/fastio_cli\u003e (seen 2026-10-09)\n- npm package: \u003chttps://registry.npmjs.org/@vividengine%2Ffastio-cli/latest\u003e (seen 2026-10-09)\n- MCP registry search: \u003chttps://registry.modelcontextprotocol.io/v0/servers?search=fastio\u003e (seen 2026-10-09)\n\n## Who's behind it (provenance 51/100, checked 2026-10-09)\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Legal entity named | VividEngine, LLC (doing business as Fast Technologies) | 20/20 |\n| Domain age | fast.io, no registry record we could read | 0/15 |\n| Endpoint on the vendor's domain | mcp.fast.io | 15/15 |\n| Terms of service | read, states 7 of the 7 things a reader expects, and has 2 clauses that cost points | 6/10 |\n| Privacy policy | read, states 8 of the 8 things a reader expects | 10/10 |\n| Status page | not found | 0/10 |\n| Changelog | not found | 0/10 |\n| security.txt | not found | 0/10 |\n\nThe terms of service (effective 2 October 2026) name VividEngine, LLC, doing business as Fast Technologies, 4747 Research Forest Dr., Ste 180-265, The Woodlands, TX 77381-4902.\n\nThe API answers at api.fast.io and the MCP server at mcp.fast.io, both on the vendor's domain.\n\nfast.io/.well-known/security.txt returns 404, although fast.io/llms.txt lists it as the security contact.\n\nNo status page or changelog is linked from the home page, the developer hub, the docs or the Trust Centre.\n\nrdap.org answered that no RDAP service is available for fast.io, so the registration date is blank.\n\nThe DPA binds only when signed by both parties, and the Trust Centre says it is executed with Enterprise Plus customers and on request.\n\n### Terms and privacy, as read\n\nA reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.\n\n**Terms of service** (https://fast.io/terms/), read 2026-10-09, dated 2026-10-02, states 7 of the 7 things a reader expects.\n\n- To know. Restricts automated access (costs points). \"Prohibited Activities: Agent Accounts may not be used to circumvent account limits, create fake or fraudulent accounts, engage in automated abuse, scraping beyond authorized use, spam, or any activity that violates these Terms or the Fair Use Policy.\"\n- To know. Says the terms or the service can change without notice (costs points). \"Fast may change, suspend or discontinue all or any aspect of the Services at any time, including the availability of any feature, database, or Content, without prior notice or liability.\"\n- To know. Says access can be ended without notice or for any reason. \"Fast reserves the right to terminate your access to any and/or all parts of the Services at any time for any reason without prior notice or liability.\"\n- To know. Requires arbitration or waives class actions. \"YOU AND FAST AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN AN INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, COLLECTIVE, CONSOLIDATED, OR REPRESENTATIVE PROCEEDING.\"\n- Gives the date it was last updated. Last updated 2026-10-02.\n- Names the governing law or courts. The law of the State of Texas.\n- States a limit on its liability. Rules out indirect and consequential losses, with no cap named in this sentence.\n- Says how changes to the terms are announced. Says it gives notice of a change.\n- Also in the text (2026-10-08). Fast's total liability is zero dollars for a customer who paid no fees in the twelve months before the event behind the claim. \"IF YOU HAVE NOT PAID ANY FEES TO FAST DURING SUCH PERIOD, FAST'S MAXIMUM AGGREGATE LIABILITY TO YOU SHALL BE ZERO DOLLARS ($0).\"\n- Also in the text (2026-10-08). The customer is responsible for every action taken through programmatic access or by an agent account it creates, controls or authorises. \"You are fully responsible for all actions taken through Programmatic Access or by any Agent Account you create, control, or authorize, including any content uploaded, downloaded, modified, or shared.\"\n- Also in the text (2026-10-08). After an account is deleted, closed or terminated, content is permanently purged after 15 days for shares, 30 for workspaces, 60 for organisations and 90 for user accounts. \"When a share, workspace, organization, or user account is deleted, closed, or terminated, its Content is permanently purged after a grace period of 15 days for shares, 30 days for workspaces, 60 days for organizations, and 90 days for user accounts.\"\n\n**Privacy policy** (https://fast.io/privacy/), read 2026-10-09, dated 2026-10-02, states 8 of the 8 things a reader expects.\n\n- Gives the date it was last updated. Last updated 2026-10-02.\n- Says how long data is kept. Names a period of 15 days.\n- Says whether personal data is sold or shared for advertising. Says it does not sell personal data.\n- Gives a privacy contact. privacy@fast.io.\n- Says where data is transferred or stored. Relies on standard contractual clauses.\n- Also in the text (2026-10-08). PostHog product analytics and session replay run in the web application and cannot be turned off there. \"Our web application uses PostHog product analytics and session replay as part of operating and improving the Service; they cannot be turned off within the application.\"\n- Also in the text (2026-10-08). Data from API, MCP and agent account access may be kept longer than standard user data. \"Data from programmatic access may be retained longer than standard user data for security analysis, abuse prevention, and legal compliance purposes.\"\n- Also in the text (2026-10-08). LangSmith records AI requests and responses, which may include prompts, AI answers and file excerpts. \"LangChain, Inc. (LangSmith): Monitoring and debugging of AI features; records AI requests and responses, which may include prompts, AI answers, and file excerpts\"\n\n## Live (updated 2026-10-10 05:38 UTC)\n\n- Right now: up, HTTP 400, 50 ms, checked 2026-10-10 05:38 UTC (get on `https://mcp.fast.io/mcp/tools`)\n- Uptime 24h 100.0% (143 probes) · 30 days 100.0% (143 probes) · p50 157 ms · p95 596 ms\n- github `MediaFire/fastio_cli` v0.2.93, released 2026-10-08\n- npm `@vividengine/fastio-cli` 0.2.93\n- Watching pricing \u003chttps://fast.io/pricing/\u003e\n- Watching privacy \u003chttps://fast.io/privacy/\u003e\n- Watching terms \u003chttps://fast.io/terms/\u003e\n- Always current: https://www.anchorterminal.com/api/v1/live/fast-io.json\n\n## Probe metrics\n\nNot measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.\n\n## Prices\n\n| Item | Price | Unit | Note |\n| --- | --- | --- | --- |\n| Starter plan | $9.99 | per month (plan) | 250 GB, 100,000 credits, 3 seats |\n| Business plan | $49.99 | per month (plan) | 5 TB, 600,000 credits, 10 seats |\n| Enterprise plan | $199.99 | per month (plan) | 25 TB, 3,000,000 credits, 30 seats |\n| Additional storage | $0.015 | per GB per month | |\n| Additional bandwidth | $0.04 | per GB of traffic | |\n| Credit overage | $0.0001 | per credit | $10 per 100,000 credits |\n\nAcross all listings: https://www.anchorterminal.com/prices/index.md\n\n## Strengths\n\n- OAuth 2.0 with PKCE and dynamic client registration, plus API keys scoped as `entity_type:entity_id:access_mode` with `r`, `rw` and `rwa` modes and optional expiry\n- Named MCP mode splits each area into a read tool and a `_manage` write tool, and a read-only key hides the write tools\n- Shares take a password, an expiry date and a `download_security` level, and file links can carry `expires`\n- Sub-processor list with locations and 15 days' notice, and deletion periods of 15, 30, 60 and 90 days stated alike in the terms and privacy policy\n- The CLI is Apache-2.0 on GitHub with CI, and shipped v0.2.93 on 8 October 2026\n\n## Weaknesses\n\n- No free tier. A new organisation answers HTTP 402 until a paid plan is chosen, and the 30-day trial needs a credit card\n- No status page, incident history or SLA found. The terms give no guarantee of API availability or backward compatibility\n- No OpenAPI file. `OPTIONS` introspection covers about 40 per cent of endpoints, and rate limits are published as headers without numbers\n- fast.io/llms.txt gives 100 credits a GB for storage and 212 for bandwidth. The pricing page and agent guide give 150 and 400\n- No SOC 2 report yet (the Trust Centre says an audit is being prepared), no bug bounty, and `/.well-known/security.txt` answers 404\n- The terms forbid robots and spiders outside the programmatic access of Section 12. This matters before any probe is run\n\n## Before you call it (notes for agents)\n\n1. Connect to `https://mcp.fast.io/mcp/tools` for named tools or `https://mcp.fast.io/mcp/code` for the 8-tool code mode. The URL fixes the tool set for the session\n2. Call `action=\"describe\"` on a tool before first use. Parameters live there, not in the tool list\n3. To update a file, upload again with the same parent folder and filename. Deleting first loses the version history\n4. On 429 wait until `x-ve-limit-expires` or the `Retry-After` value. On 402 the organisation has no plan or no credits, so stop and tell the owner\n5. Ask the owner for a key scoped to one workspace with `r` or `rw`. A key made without scopes carries `user:*:rw` across the account\n\n## Connect\n\nInstall:\n\n```bash\nnpm install -g @vividengine/fastio-cli\n```\n\nMCP client configuration:\n\n```json\n{\n \"mcpServers\": {\n \"fastio\": {\n \"args\": [\n \"mcp\"\n ],\n \"command\": \"fastio\"\n }\n }\n}\n```\n\nThrough letme (picks today, calling later): https://letme.dev/fast-io. letme answers with the pick and how to call it direct; calling through letme (one key, the vendor's own price) comes later. How it works: https://www.anchorterminal.com/letme/index.md\n\n## Similar tools\n\nRanked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.\n\n| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |\n| --- | --- | --- | --- | --- | --- | --- |\n| Google Drive API + MCP | A | 79.6 | 11 | storage.drive, storage.share | no | https://www.anchorterminal.com/tools/google-drive-api.md |\n| Box API + MCP | B | 69.4 | 186 | storage.drive, storage.share | no | https://www.anchorterminal.com/tools/box-api.md |\n| Dropbox API + MCP | B | 68.2 | 226 | storage.drive, storage.share | no | https://www.anchorterminal.com/tools/dropbox-api.md |\n| OneDrive and SharePoint files (Microsoft Graph) | B | 65.3 | 323 | storage.drive, storage.share | no | https://www.anchorterminal.com/tools/onedrive-sharepoint.md |\n| Amazon S3 | BB | 77.9 | 16 | storage.share | no | https://www.anchorterminal.com/tools/amazon-s3.md |\n| Cloudflare R2 | BB | 77.1 | 23 | storage.share | no | https://www.anchorterminal.com/tools/cloudflare-r2.md |\n\n## Panel reviews (0)\n\nReviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .\n\nDesk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md\n\n## Notable\n\n- Three hosted MCP addresses fix the tool set. `/mcp/tools` has 35 named tools (39 with import and signing), `/mcp/code` has 8 and `/mcp/operations` has one tool per operation (source: \u003chttps://mcp.fast.io/skill.md\u003e)\n- A new organisation must choose a paid plan before it can work, and until then resource endpoints answer HTTP 402 (source: \u003chttps://fast.io/agents.md\u003e)\n- Shares take a password of 4 to 128 characters, an `expires` date and a `download_security` level of off, medium or high (source: \u003chttps://api.fast.io/current/llms/shares/\u003e)\n- Uploads under 4 MB go in one request. Larger files are chunked with up to 3 chunks in parallel and CRC-32C checks, to a plan limit of 25, 50 or 100 GB (source: \u003chttps://api.fast.io/current/llms/upload/\u003e)\n- Content is stored in the United States on servers the vendor owns. Files uploaded through MCP are staged on Cloudflare, and AI functions send content to Google Cloud, Voyage AI and LangSmith (source: \u003chttps://fast.io/legal/subprocessors/\u003e)\n- The Trust Centre lists Google CASA Assurance Level 1 and says a SOC 2 Type II audit is being prepared (source: \u003chttps://fast.io/trust/\u003e)\n- Section 12 of the terms lets the vendor suspend programmatic access without notice and gives no guarantee of API availability, response times or backward compatibility (source: \u003chttps://fast.io/terms/\u003e)\n- fast.io/llms.txt gives storage at 100 credits a GB and bandwidth at 212. The pricing page and agent guide give 150 and 400 (source: \u003chttps://fast.io/llms.txt\u003e)\n\n- #13 of 14 in Best file storage and sharing APIs for AI agents: https://www.anchorterminal.com/best/file-storage/index.md\n- All 75 storage comparisons: https://www.anchorterminal.com/compare/file-storage/index.md\n\n## Compare\n\n- [Amazon S3 vs Fastio](https://www.anchorterminal.com/compare/amazon-s3-vs-fast-io.md): BB 77.9 vs C 55.2\n- [Azure Blob Storage vs Fastio](https://www.anchorterminal.com/compare/azure-blob-storage-vs-fast-io.md): BB 75.7 vs C 55.2\n- [Backblaze B2 vs Fastio](https://www.anchorterminal.com/compare/backblaze-b2-vs-fast-io.md): BB 75.3 vs C 55.2\n- [Cloudflare R2 vs Fastio](https://www.anchorterminal.com/compare/cloudflare-r2-vs-fast-io.md): BB 77.1 vs C 55.2\n- [DigitalOcean Spaces vs Fastio](https://www.anchorterminal.com/compare/digitalocean-spaces-vs-fast-io.md): B 63.2 vs C 55.2\n- [Fastio vs Tigris](https://www.anchorterminal.com/compare/fast-io-vs-tigris.md): C 55.2 vs E 44.4\n- [Box API + MCP vs Fastio](https://www.anchorterminal.com/compare/box-api-vs-fast-io.md): B 69.4 vs C 55.2\n- [Dropbox API + MCP vs Fastio](https://www.anchorterminal.com/compare/dropbox-api-vs-fast-io.md): B 68.2 vs C 55.2\n- [Fastio vs Google Drive API + MCP](https://www.anchorterminal.com/compare/fast-io-vs-google-drive-api.md): C 55.2 vs A 79.6\n- [Fastio vs OneDrive and SharePoint files (Microsoft Graph)](https://www.anchorterminal.com/compare/fast-io-vs-onedrive-sharepoint.md): C 55.2 vs B 65.3\n\n## Verify this listing\n\nFor the vendor. The badge or a plain link to this page verifies the listing, from a page on fast.io or one of its subdomains, or the README of github.com/MediaFire/fastio_cli. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{\"slug\": \"fast-io\", \"url\": \"…\"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify\n\nHTML badge:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/fast-io\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/fast-io.svg\" alt=\"Fastio on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e\n```\n\nMarkdown badge, for a README:\n\n```markdown\n[![Fastio on Anchor Terminal](https://www.anchorterminal.com/badges/fast-io.svg)](https://www.anchorterminal.com/tools/fast-io)\n```\n\nPlain link:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/fast-io\"\u003eFastio on Anchor Terminal\u003c/a\u003e\n```\n\n## Share this listing\n\nFor the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Fastio is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.\n\n- Dark: https://www.anchorterminal.com/assets/share/fast-io-dark.png\n- Light: https://www.anchorterminal.com/assets/share/fast-io-light.png\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-10", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Terminal", "url": "https://www.anchorterminal.com/tools/" }, { "name": "File storage \u0026 sharing", "url": "https://www.anchorterminal.com/categories/file-storage" }, { "name": "Fastio", "url": "" } ], "description": "Fastio is hosted file storage with workspaces, share links and document search for teams and AI agents, from VividEngine, LLC. Agents reach it through a REST API, a hosted MCP server and an open-source CLI.", "facts": [ "rank #663 of 950", "OAuth or key auth", "0 desk reviews" ], "h1": "Fastio", "image": "https://www.anchorterminal.com/assets/og/tools-fast-io.png", "path": "/tools/fast-io", "published": "2026-10-01", "section": "tools", "title": "Fastio review (2026): pricing, alternatives and grade C", "toc": null, "updated": "2026-10-10", "url": "https://www.anchorterminal.com/tools/fast-io" }, "tokens": { "markdown": 7500, "slim": 1680 }, "version": 1 }