{ "data": { "similar": [ { "grade": "D", "json": "https://www.anchorterminal.com/tools/logmeal.json", "name": "LogMeal", "score": 49.1, "shared": [ "cooking.food-recognition", "cooking.nutrition", "cooking.recipes", "cooking.grocery" ], "slug": "logmeal" }, { "grade": "D", "json": "https://www.anchorterminal.com/tools/spoonacular.json", "name": "spoonacular", "score": 49, "shared": [ "cooking.recipes", "cooking.nutrition", "cooking.grocery", "cooking.food-recognition" ], "slug": "spoonacular" }, { "grade": "E", "json": "https://www.anchorterminal.com/tools/edamam.json", "name": "Edamam", "score": 42.2, "shared": [ "cooking.recipes", "cooking.nutrition", "cooking.food-recognition", "cooking.grocery" ], "slug": "edamam" }, { "grade": "E", "json": "https://www.anchorterminal.com/tools/eat-this-much.json", "name": "Eat This Much Partner API", "score": 45.7, "shared": [ "cooking.grocery", "cooking.nutrition", "cooking.recipes" ], "slug": "eat-this-much" }, { "grade": "F", "json": "https://www.anchorterminal.com/tools/nutritionix.json", "name": "Nutritionix API", "score": 33.6, "shared": [ "cooking.nutrition", "cooking.grocery" ], "slug": "nutritionix" }, { "grade": "D", "json": "https://www.anchorterminal.com/tools/instacart.json", "name": "Instacart Developer Platform API + MCP", "score": 48.5, "shared": [ "cooking.grocery" ], "slug": "instacart" } ], "tool": { "slug": "fatsecret", "name": "fatsecret Platform API", "vendor": "fatsecret", "vendorUrl": "https://platform.fatsecret.com/platform-api", "kind": "http-api", "category": "cooking", "summary": "The fatsecret Platform API is a REST API over fatsecret's verified food and nutrition database, with food search, barcode lookup, recipes, image recognition and natural-language food logging, plus per-user food, exercise and weight diaries, under OAuth 2.0 and OAuth 1.0.", "url": "https://www.anchorterminal.com/tools/fatsecret", "markdownUrl": "https://www.anchorterminal.com/tools/fatsecret.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/fatsecret.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/fatsecret.json", "dns": "fatsecret.grade.anchorterminal.com", "transports": [], "packages": [], "auth": "oauth", "authNotes": "OAuth 2.0 client credentials at https://oauth.fatsecret.com/connect/token with a Client ID and Client Secret from the developer dashboard after a browser registration; tokens last 86,400 seconds and carry scopes (`basic`, `premier`, `barcode`, `localization`, `nlp`, `image-recognition` and `feedback`), and token requests are allowed only from the IP addresses or CIDR ranges registered on the key. OAuth 1.0 with HMAC-SHA1 signatures is kept for signed and delegated (per-user profile) requests, including a 3-legged flow for fatsecret.com accounts.", "pricing": "freemium", "pricingNotes": "Basic is free on self sign-up with 5,000 calls a day, US data, English and attribution required. Premier Free (start-ups under US$1M revenue and raised, non-profits, students) needs verification and removes the daily cap. Premier is priced on request by market, with 62 regional datasets, 26 languages, white label and a month-by-month SLA; image recognition and NLP are add-ons billed in tiers of 25,000 inputs. No card for Basic or Premier.", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the guides, editions page, authentication guides or terms (checked 2026-11-03). Premier is contracted through sales.", "endpoints": [] }, "toolCount": 0, "popularity": { "githubStars": 25, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://platform.fatsecret.com/docs/guides", "capabilities": [ "cooking.nutrition", "cooking.recipes", "cooking.food-recognition", "cooking.grocery" ], "tags": [ "hosted", "freemium", "free-tier", "no-card", "oauth", "sales-led", "enterprise", "closed-source", "no-status-page" ], "graded": true, "anchor": { "graded": true, "score": 42, "grade": "E", "agentReady": false, "rank": 1193, "ranked": true, "rankOf": 1349, "categoryRank": 6, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 64, "maintenance": 13, "payments": 25, "reliability": 35, "schema": 52, "security": 51, "transparency": 34 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 35, "points": 7, "reason": "Read with the hosted lines. No status page was found on the platform site, the guides, the editions page or the about page (0), so there is no incident history to read (5). The limit is published with a number, 5,000 calls a day on Basic in the terms and on the editions page, and Premier is unlimited (15). Limits surface as error codes 11 and 12 in the body; no HTTP 429, Retry-After or backoff guidance was found, and diary writes have no idempotency key (5 of 15). Premier carries a month-by-month SLA with service credits, named on the editions page without figures, and every edition claims more than 99.9 per cent uptime (5 of 10). The API is generally available, with versioned methods (10). 0 + 5 + 15 + 5 + 5 + 10 = 35.", "checked": "2026-11-03" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 52, "points": 8.45, "reason": "No OpenAPI or similar document was found; the official Postman collection is the only machine-readable contract (8 of 25). No llms.txt (a redirect) and no Markdown docs (0 of 10). Each method page states purpose, parameters, response fields and Premier status, with little on when not to use a method (12 of 20). Parameters are typed with defaults and allowed values, `max_results` is capped at 50, but the field tables mistype allergen names as Long and leave food_images out of the food-level fields (11 of 15). Example responses in XML and JSON on each method, a central error code list with the body shape, and per-method error codes (13 of 15). Methods carry versions (v1 to v5) and older versions stay documented, but no changelog is on the platform site and the blog's 'What's new' could not be read (8 of 15). 8 + 0 + 12 + 11 + 13 + 8 = 52.", "checked": "2026-11-03" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 64, "points": 10.4, "reason": "`max_results` up to 50 (default 20), `format=json`, and `include_*` switches add sub-categories, images and attributes only when asked, but there is no field selection and each food carries every serving (15 of 25). Zero-based `page_number`, `food_type` generic or brand, region and language filters (18 of 20). Numeric error codes with messages, for OAuth, parameters and application errors, but limit errors come as codes 11 and 12 with no HTTP status or retry hint (13 of 20). Food and recipe methods are reads and safe to repeat; diary and saved-meal writes have no idempotency key (10 of 20). No parameter is required on foods.search, but there is no official SDK in any language (8 of 15). 15 + 18 + 13 + 10 + 8 = 64.", "checked": "2026-11-03" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 51, "points": 8.93, "reason": "OAuth 2.0 client credentials with seven scopes gating capabilities (`basic`, `premier`, `barcode`, `localization`, `nlp`, `image-recognition` and `feedback`), tokens of 86,400 seconds, a Client Secret that stays on the server, and token requests limited to IP addresses or CIDR ranges registered on the key; OAuth 1.0 with HMAC-SHA1 remains for delegated calls. The scopes gate capabilities rather than read or write, and no rotation procedure was found (26 of 30). Per-user data is reached only through a delegated profile token, and the shared data methods are reads, but there is no read-only scope and no confirmation step for diary writes (14 of 20). Food and brand names are verified by fatsecret and recipes are its own content, with no guidance on treating them as untrusted (8 of 15). No request log or per-call visibility was found beyond the dashboard (3 of 15). The security.txt path answered the site's generic error page, and no disclosure policy, bug bounty or certification was found (0 of 20). 26 + 14 + 8 + 3 + 0 = 51.", "checked": "2026-11-03" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 25, "points": 3.13, "reason": "No x402, MPP or L402 (0 of 40). Basic is free and Premier is priced on request by market, with add-ons billed in tiers of 25,000 inputs and no price given, so the paid prices are contact sales (5 of 20). Basic is free on self sign-up with no card, and the platform page says Premier needs no upfront payment or card (20 of 20). A person registers in a browser and Premier goes through sales; no key API was found (0 of 20). 0 + 5 + 20 + 0 = 25.", "checked": "2026-11-03" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 13, "points": 1.14, "reason": "Read as a closed service. No dated API change could be read first-hand. The blog that carries the 'What's new' notes sits behind a robots.txt that answered 403, the method pages are undated, and the official Postman repository's last push is 1 July 2025, more than 180 days before 3 November 2026 (0 of 30). No three dated changes in 90 days established (0 of 20). A developer forum on Google Groups, a contact form, and email, phone, Slack and video support on Premier, with no public changelog on the platform site (8 of 15). No official SDK; an official Postman collection (5 of 15). No package to assess (0 of 10). 0 + 0 + 8 + 5 + 0 = 13.", "checked": "2026-11-03" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 34, "points": 2.98, "note": "editorial 18, provenance 49", "reason": "Closed service with terms that are clear on caching, attribution, rate limits and termination, but undated, naming the provider only as Fatsecret.com, and changeable with or without notice (12 of 30). The privacy policy on foods.fatsecret.com could not be read, because that host's robots.txt disallows our reader, so no data-handling statement was scored; the terms require content to be removed within 24 hours (0 of 30, unchecked). Older method versions stay documented alongside v5 and foods.search v4 is still served, but the terms allow any aspect of the API to be changed or discontinued at any time with no notice period (6 of 20). No subprocessors or data locations found (0 of 20). 12 + 0 + 6 + 0 = 18.", "checked": "2026-11-03" } ], "assessment": { "date": "2026-11-03", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "`max_results` up to 50 (default 20), `format=json`, and `include_*` switches add sub-categories, images and attributes only when asked, but there is no field selection and each food carries every serving (15 of 25). Zero-based `page_number`, `food_type` generic or brand, region and language filters (18 of 20). Numeric error codes with messages, for OAuth, parameters and application errors, but limit errors come as codes 11 and 12 with no HTTP status or retry hint (13 of 20). Food and recipe methods are reads and safe to repeat; diary and saved-meal writes have no idempotency key (10 of 20). No parameter is required on foods.search, but there is no official SDK in any language (8 of 15). 15 + 18 + 13 + 10 + 8 = 64.", "maintenance": "Read as a closed service. No dated API change could be read first-hand. The blog that carries the 'What's new' notes sits behind a robots.txt that answered 403, the method pages are undated, and the official Postman repository's last push is 1 July 2025, more than 180 days before 3 November 2026 (0 of 30). No three dated changes in 90 days established (0 of 20). A developer forum on Google Groups, a contact form, and email, phone, Slack and video support on Premier, with no public changelog on the platform site (8 of 15). No official SDK; an official Postman collection (5 of 15). No package to assess (0 of 10). 0 + 0 + 8 + 5 + 0 = 13.", "payments": "No x402, MPP or L402 (0 of 40). Basic is free and Premier is priced on request by market, with add-ons billed in tiers of 25,000 inputs and no price given, so the paid prices are contact sales (5 of 20). Basic is free on self sign-up with no card, and the platform page says Premier needs no upfront payment or card (20 of 20). A person registers in a browser and Premier goes through sales; no key API was found (0 of 20). 0 + 5 + 20 + 0 = 25.", "reliability": "Read with the hosted lines. No status page was found on the platform site, the guides, the editions page or the about page (0), so there is no incident history to read (5). The limit is published with a number, 5,000 calls a day on Basic in the terms and on the editions page, and Premier is unlimited (15). Limits surface as error codes 11 and 12 in the body; no HTTP 429, Retry-After or backoff guidance was found, and diary writes have no idempotency key (5 of 15). Premier carries a month-by-month SLA with service credits, named on the editions page without figures, and every edition claims more than 99.9 per cent uptime (5 of 10). The API is generally available, with versioned methods (10). 0 + 5 + 15 + 5 + 5 + 10 = 35.", "schema": "No OpenAPI or similar document was found; the official Postman collection is the only machine-readable contract (8 of 25). No llms.txt (a redirect) and no Markdown docs (0 of 10). Each method page states purpose, parameters, response fields and Premier status, with little on when not to use a method (12 of 20). Parameters are typed with defaults and allowed values, `max_results` is capped at 50, but the field tables mistype allergen names as Long and leave food_images out of the food-level fields (11 of 15). Example responses in XML and JSON on each method, a central error code list with the body shape, and per-method error codes (13 of 15). Methods carry versions (v1 to v5) and older versions stay documented, but no changelog is on the platform site and the blog's 'What's new' could not be read (8 of 15). 8 + 0 + 12 + 11 + 13 + 8 = 52.", "security": "OAuth 2.0 client credentials with seven scopes gating capabilities (`basic`, `premier`, `barcode`, `localization`, `nlp`, `image-recognition` and `feedback`), tokens of 86,400 seconds, a Client Secret that stays on the server, and token requests limited to IP addresses or CIDR ranges registered on the key; OAuth 1.0 with HMAC-SHA1 remains for delegated calls. The scopes gate capabilities rather than read or write, and no rotation procedure was found (26 of 30). Per-user data is reached only through a delegated profile token, and the shared data methods are reads, but there is no read-only scope and no confirmation step for diary writes (14 of 20). Food and brand names are verified by fatsecret and recipes are its own content, with no guidance on treating them as untrusted (8 of 15). No request log or per-call visibility was found beyond the dashboard (3 of 15). The security.txt path answered the site's generic error page, and no disclosure policy, bug bounty or certification was found (0 of 20). 26 + 14 + 8 + 3 + 0 = 51.", "transparency": "Closed service with terms that are clear on caching, attribution, rate limits and termination, but undated, naming the provider only as Fatsecret.com, and changeable with or without notice (12 of 30). The privacy policy on foods.fatsecret.com could not be read, because that host's robots.txt disallows our reader, so no data-handling statement was scored; the terms require content to be removed within 24 hours (0 of 30, unchecked). Older method versions stay documented alongside v5 and foods.search v4 is still served, but the terms allow any aspect of the API to be changed or discontinued at any time with no notice period (6 of 20). No subprocessors or data locations found (0 of 20). 12 + 0 + 6 + 0 = 18." }, "sources": [ { "what": "REST API guides (methods, call styles)", "url": "https://platform.fatsecret.com/docs/guides", "seen": "2026-11-03" }, { "what": "editions and pricing", "url": "https://platform.fatsecret.com/api-editions", "seen": "2026-11-03" }, { "what": "platform API overview", "url": "https://platform.fatsecret.com/platform-api", "seen": "2026-11-03" }, { "what": "authentication overview", "url": "https://platform.fatsecret.com/docs/guides/authentication", "seen": "2026-11-03" }, { "what": "OAuth 2.0 guide (scopes, token lifetime, IP restriction)", "url": "https://platform.fatsecret.com/docs/guides/authentication/oauth2", "seen": "2026-11-03" }, { "what": "OAuth 1.0 guide", "url": "https://platform.fatsecret.com/docs/guides/authentication/oauth1", "seen": "2026-11-03" }, { "what": "error codes", "url": "https://platform.fatsecret.com/docs/guides/error-codes", "seen": "2026-11-03" }, { "what": "foods.search v5 reference", "url": "https://platform.fatsecret.com/docs/v5/foods.search", "seen": "2026-11-03" }, { "what": "localisation guide", "url": "https://platform.fatsecret.com/docs/guides/localization", "seen": "2026-11-03" }, { "what": "libraries", "url": "https://platform.fatsecret.com/docs/guides/libraries", "seen": "2026-11-03" }, { "what": "attribution policy", "url": "https://platform.fatsecret.com/attribution", "seen": "2026-11-03" }, { "what": "terms of use", "url": "https://platform.fatsecret.com/terms", "seen": "2026-11-03" }, { "what": "about", "url": "https://platform.fatsecret.com/about", "seen": "2026-11-03" }, { "what": "robots.txt platform", "url": "https://platform.fatsecret.com/robots.txt", "seen": "2026-11-03" }, { "what": "robots.txt foods (disallows our reader)", "url": "https://foods.fatsecret.com/robots.txt", "seen": "2026-11-03" }, { "what": "robots.txt blog (403)", "url": "https://blog.fatsecret.com/robots.txt", "seen": "2026-11-03" }, { "what": "security.txt (error page)", "url": "https://platform.fatsecret.com/.well-known/security.txt", "seen": "2026-11-03" }, { "what": "GitHub API for the Postman repository", "url": "https://api.github.com/repos/fatsecret-group/postman-fatsecret-apis", "seen": "2026-11-03" }, { "what": "MCP registry search (third-party servers only)", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=fatsecret", "seen": "2026-11-03" }, { "what": "RDAP for fatsecret.com", "url": "https://rdap.verisign.com/com/v1/domain/fatsecret.com", "seen": "2026-11-03" } ], "openQuestions": [ "unchecked: the privacy policy at foods.fatsecret.com, whose robots.txt disallows ClaudeBot and anthropic-ai, and the blog's 'What's new' release notes, whose robots.txt answered 403. Transparency and maintenance score them as absent.", "unchecked: www.fatsecret.com/about-us (403), so the legal entity, headquarters and founders are not established; the terms name Fatsecret.com under the law of Victoria, Australia.", "firstReleased is 7 April 2006, the domain's registration date, which matches the founding year on the about page; no first-hand page dates the Platform API's launch. lastRelease is empty for want of a dated API change.", "The security.txt path answered the site's generic error page ('An error occurred while processing your request') rather than 404, so securityTxt is unknown.", "The platform page says fatsecret supplies data exports and API capabilities 'to help LLM providers train their latest models'; recorded as a vendor statement.", "The official MCP registry lists two third-party fatsecret servers (io.github.fliptheweb/fatsecret-mcp 0.0.10 and io.github.jaronskijakub/fatsecret-mcp 0.3.0, both updated in late October or November 2026) and nothing from the vendor.", "unchecked: the developer forum's activity and reply times, which were not read." ] }, "negative": 0, "verdict": "OAuth 2.0 client credentials with feature scopes, IP-restricted tokens, a free 5,000-call day with no card, and per-serving nutrients with allergen flags on branded and generic foods. The newest search and image methods need the sales-priced Premier edition, there is no status page, OpenAPI file or official SDK, and the privacy policy and blog could not be read.", "bestFor": "Agents logging foods and reading serving-level nutrients, allergens and barcodes for a person, with diaries written back; strongest outside the US on Premier with 62 regional datasets.", "strengths": [ "OAuth 2.0 client credentials with seven scopes, 24-hour tokens and token requests limited to registered IP addresses", "Basic edition free on self sign-up with 5,000 calls a day and no card", "Serving-level nutrients with allergen and preference flags, barcode lookup and 212 region codes in 26 languages on Premier", "Numeric error codes with messages documented centrally and per method, with JSON or XML responses", "Per-user food, exercise and weight diaries can be written through profiles, so a plan can reach a person's log" ], "weaknesses": [ "Natural language, image recognition, autocomplete, barcode scanning and foods.search v5 are Premier Exclusive, priced on request by market", "No status page, SLA figures outside Premier, OpenAPI document, llms.txt, changelog or official SDK found", "No HTTP 429 or Retry-After documented; limits surface as error codes 11 and 12 in the body", "Content not marked storable must be removed or re-requested within 24 hours, and attribution is required wherever it is shown on Basic and Premier Free", "The privacy policy on foods.fatsecret.com and the blog's release notes could not be read, and the terms name no legal entity or date" ], "agentNotes": [ "Request a token with `grant_type=client_credentials` and only the scopes the task needs; a token request from an IP not registered on the key fails, so run from a fixed address", "Use `foods.search` v1 on Basic, since v5, autocomplete, barcode and image methods answer with a scope error without Premier", "Pass `format=json` and keep `max_results` at or below 50 with a zero-based `page_number`; treat error code 11 or 12 in the body as the rate limit, since no 429 is documented", "Store only food_id and serving_id between sessions and re-request other values within 24 hours, as the terms require", "Use a delegated profile token for diary writes and keep the profile's oauth_token and oauth_secret, since fatsecret does not return them again" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 42 } ], "editorialScores": { "ergonomics": 64, "maintenance": 13, "payments": 25, "reliability": 35, "schema": 52, "security": 51, "transparency": 18 }, "provenanceScore": 49, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-11-03", "grade": "E", "kind": "listed", "method": "0.7", "score": 42 } ] }, "connect": { "http": "curl -u \"$FATSECRET_CLIENT_ID:$FATSECRET_CLIENT_SECRET\" -d \"grant_type=client_credentials\u0026scope=basic\" https://oauth.fatsecret.com/connect/token" }, "letme": { "capability": "https://letme.dev/cooking.nutrition", "tool": "https://letme.dev/fatsecret" }, "notable": [ "Two call styles on https://platform.fatsecret.com/rest, a path per method and version such as GET /rest/foods/search/v5, or POST /rest/server.api with a `method` parameter such as foods.search.v5, in XML by default or JSON with `format=json` (https://platform.fatsecret.com/docs/guides)", "OAuth 2.0 supports only client_credentials, tokens expire after 86,400 seconds, scopes are `basic`, `premier`, `barcode`, `localization`, `nlp`, `image-recognition` and `feedback`, and token requests are limited to registered IP addresses (https://platform.fatsecret.com/docs/guides/authentication/oauth2)", "Premier Exclusive methods, marked with an asterisk, include natural language processing, image recognition, autocomplete, barcode scanning, foods.search v5, feedback, brands and categories, and food create (https://platform.fatsecret.com/docs/guides)", "Per-user data (favourites, saved meals, food, exercise and weight diaries) is reached through profiles created by the developer or linked to fatsecret.com accounts, with OAuth 1.0 delegated requests (https://platform.fatsecret.com/docs/guides/authentication)", "The terms set the rate limit at 5,000 calls a day, require content not marked storable to be removed or re-requested within 24 hours, require attribution in every place content is shown, forbid robots or spiders retrieving content except as the documentation allows, and let fatsecret change or discontinue the API at any time; they name the provider as Fatsecret.com under the law of Victoria, Australia, with no date (https://platform.fatsecret.com/terms)", "foods.search.v5 returns pages of up to 50 results with serving-level nutrients, allergen and preference flags, and says the only storable values are food_id and serving_id (https://platform.fatsecret.com/docs/v5/foods.search)", "Error codes are numeric with a message, 11 for the application request limit and 12 for too many user actions; no HTTP 429 or Retry-After is documented (https://platform.fatsecret.com/docs/guides/error-codes)", "No official SDK; an official Postman collection and three community libraries (Python, PHP, Swift) are listed, the Swift one marked proof of concept (https://platform.fatsecret.com/docs/guides/libraries)" ], "area": "everyday", "details": [ { "label": "Surface listed", "value": "The Platform API at platform.fatsecret.com/rest, read from the guides, editions, authentication, OAuth 2.0, OAuth 1.0, error codes, libraries, localisation, foods.search v5, attribution, about and terms pages on platform.fatsecret.com and the GitHub API on 3 November 2026. No account was made and no call was sent" }, { "label": "Methods", "value": "Foods (search v1 and v5, get by id v5, autocomplete v2, barcode v2, image recognition v2, natural language v1, feedback v1, brands, categories and sub-categories v2, create v2), recipes (search v3, get v2, types v2), and profile methods for foods, recipes, saved meals, authentication, food diary, exercise diary and weight diary" }, { "label": "Editions", "value": "Basic (free, self sign-up, 5,000 calls a day, US data, English, attribution required), Premier Free (free with verification for start-ups under US$1M revenue and raised, non-profits and students, no daily cap), Premier (on request, 62 regional datasets, 26 languages, white label, month-by-month SLA with service credits, email, phone, Slack and video support)" }, { "label": "Add-ons", "value": "Image recognition and natural language processing, billed monthly by usage in tiers of 25,000 inputs, with a 50 per cent discount on Premier Free. The platform page says a 14-day trial of image recognition can be started from the dashboard" }, { "label": "Rate limits", "value": "5,000 calls a day on Basic per the terms and editions page; Premier unlimited without throttling per the platform page. Error code 11 for the application limit and 12 for a user's actions. No per-second figure, 429 or Retry-After documented" }, { "label": "Localisation", "value": "212 region codes and 26 language codes; `language` is ignored unless `region` is set; a premium feature for select accounts" }, { "label": "Data licence", "value": "Content not marked storable indefinitely must be removed or re-requested within 24 hours; foods.search v5 marks only food_id and serving_id as storable. Attribution with the web badge or snippet wherever content is shown, in app store listings and on the app's website, except on white-label Premier. fatsecret may crawl and monitor applications" }, { "label": "SDKs", "value": "None official. An official Postman collection and walkthrough (fatsecret-group/postman-fatsecret-apis, last push 1 July 2025). Community libraries pyfatsecret (Python), fatsecret-laravel (PHP) and FatSecretSwift (Swift, proof of concept)" }, { "label": "Legal entity", "value": "Not established. The terms name 'Fatsecret.com (fatsecret)' under the law of Victoria, Australia; the about page says fatsecret was founded in 2006 and names its CEO, CTO and VP Business Development; www.fatsecret.com/about-us answered 403" } ], "provenance": { "legalEntity": "", "domain": "fatsecret.com", "domainRegistered": "2006-04-07", "endpointOnVendorDomain": true, "terms": "https://platform.fatsecret.com/terms", "privacy": "https://foods.fatsecret.com/Default.aspx?pa=priv\u0026l=en", "statusPage": "", "changelog": "", "securityTxt": "unknown", "checked": "2026-11-03", "notes": [ "The Platform API terms name the provider only as Fatsecret.com, under the law of the State of Victoria, Australia, with no effective date. They forbid robots, spiders or other automated applications retrieving or indexing API content except as the documentation allows, and say fatsecret may crawl or monitor applications; no clause addresses automated reading of the website.", "platform.fatsecret.com/robots.txt disallows /rest* for all crawlers, which is the API itself, and nothing was fetched under it. foods.fatsecret.com/robots.txt disallows the whole site for ClaudeBot, anthropic-ai and other named crawlers, so the privacy policy there was not read. blog.fatsecret.com/robots.txt answered 403, so the blog's release notes were not read. www.fatsecret.com has no robots.txt (404) and its about-us page answered 403.", "No status page or changelog found. platform.fatsecret.com/.well-known/security.txt answered the site's generic error page with a request id, so security.txt is unknown. No llms.txt (302 to another page).", "RDAP gives fatsecret.com a registration date of 7 April 2006, the year the about page gives for the company's founding." ], "score": 49, "checks": [ { "check": "Legal entity named", "value": "not found", "points": 0, "max": 20, "state": "no" }, { "check": "Domain age", "value": "fatsecret.com, registered 2006-04-07 (20 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "fatsecret.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 4 of the 7 things a reader expects, and has 2 clauses that cost points", "points": 3.4, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 6 of the 8 things a reader expects", "points": 8.5, "max": 10, "state": "part" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "security.txt", "value": "could not be fetched", "points": 0, "max": 10, "state": "no" }, { "check": "People named", "value": "3 named with their role, 3 with a public profile", "points": 10, "max": 10, "state": "ok" }, { "check": "Support route", "value": "help pages, a community", "points": 5, "max": 5, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "https://platform.fatsecret.com/terms", "state": "read", "readAt": "2026-11-03", "words": 2305, "points": 3.4, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": false }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "7.5 These Terms of Use and any dispute about or involving the fatsecret Platform API shall be governed by and construed in accordance with the laws of the State of Victoria,", "says": "The law of the State of Victoria" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "fatsecret shall not, under any circumstances, be liable to you or any third party for any indirect, consequential, exemplary, incidental, special or punitive damages, including for", "says": "Rules out indirect and consequential losses, with no cap named in this sentence" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "Use, (ii) fatsecret sends a written notice of termination to you, or (iii) fatsecret ceases providing you access to the fatsecret Platform API." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": false }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "You may not sell, transfer, sublicense or otherwise disclose your Keys to any other party or use them with any other application other than that for which you initially" }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "terms.automated", "label": "Restricts automated access", "found": true, "quote": "use the fatsecret Platform API in a manner that exceeds reasonable request volume, constitutes excessive or abusive usage (including using any robot, spider, site search/retrieval, or other automated application or device to retrieve or index any portion of the Content)", "costsPoints": true }, { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "Fatsecret.com (\"fatsecret\") is constantly innovating and improving the fatsecret Platform API, and reserves the right, from time to time, with or without notice to you, to", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "fatsecret may terminate the license at any time for any reason." } ], "notes": [ { "date": "2026-11-03", "text": "The application must be generally accessible to users and may not run only behind a firewall or on an internal network without a separate agreement.", "quote": "1.2 Your Application must be generally accessible to users. You may require users to log in to your Application but you must not (unless you have entered into a separate agreement" }, { "date": "2026-11-03", "text": "Content not marked as storable indefinitely must be removed or re-requested within 24 hours of being obtained.", "quote": "1.5 You may not continue to use and must immediately remove or replace (by re-requesting) any Content in your possession or under your control not explicitly identified as being" }, { "date": "2026-11-03", "text": "The API must not be used to give diet, nutrition or health advice, guidance or diagnosis.", "quote": "use the fatsecret Platform API to provide diet, nutrition or health advice, guidance or diagnosis" } ] }, { "kind": "privacy", "url": "https://foods.fatsecret.com/Default.aspx?pa=priv\u0026l=en", "state": "read", "readAt": "2026-11-03", "words": 3006, "points": 8.5, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": false }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "The purpose of this Privacy Policy is to explain what Personal Data we collect about you when you interact with FatSecret, including what Personal Data and other information we collect, how we use that information, with whom we share that information and what steps we take to protect that information." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "We retain your Personal Data for as long as you maintain your account with us or as otherwise necessary to provide you the Services.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "We will not use or disclose any Sensitive Data gained through Health Data Services to third parties for advertising, marketing or other use-based data mining purposes other than for improving health or for the purpose of health research and will not disclose any of this Sensitive Data to a third party without your exp…" }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": false }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "In respect of your Personal Data that we hold you can exercise your rights (detailed below) by contacting us via our 'Contact Details' below." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "If you have any questions concerning this Privacy Policy or wish to revoke your consent to our processing of your Personal Data, please email us at privacy@FatSecret.com.", "says": "privacy@FatSecret.com" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "…and if you are accessing FatSecret from outside the United States, please be advised that you may be transferring your Personal Data to the United States and that the United States may have data protection laws/standards that are different from where you live.", "says": "Data goes to the United States" } ] } ] }, "humans": { "slug": "fatsecret", "checked": "2026-11-03", "company": "fatsecret", "people": [ { "name": "Lenny Moses", "role": "Chief Executive Officer", "linkedin": "https://www.linkedin.com/in/lennymoses", "bio": "Lenny Moses is the chief executive of fatsecret, the food and nutrition database and app company founded in 2006, per the Platform API about page, which links his LinkedIn profile.", "bioSources": [ "https://platform.fatsecret.com/about" ], "page": "/people/lenny-moses/" }, { "name": "Ran Dulberg", "role": "Chief Technology Officer", "linkedin": "https://www.linkedin.com/in/ran-dulberg-9214654", "bio": "Ran Dulberg is fatsecret's chief technology officer, per the Platform API about page, which links his LinkedIn profile.", "bioSources": [ "https://platform.fatsecret.com/about" ], "page": "/people/ran-dulberg/" }, { "name": "Sebastian Loch", "role": "VP Business Development", "linkedin": "https://www.linkedin.com/in/sloch", "bio": "Sebastian Loch is fatsecret's vice president of business development, per the Platform API about page, which links his LinkedIn profile.", "bioSources": [ "https://platform.fatsecret.com/about" ], "page": "/people/sebastian-loch/" } ], "peopleNote": "The Platform API about page, read 3 November 2026, says fatsecret was founded in 2006 and lists Lenny Moses (Chief Executive Officer), Sebastian Loch (VP Business Development) and Ran Dulberg (Chief Technology Officer) with LinkedIn links. It names no founders, so the founder flag is left off; search results calling Lenny Moses a co-founder are third-party profiles and not used. www.fatsecret.com/about-us answered 403 and foods.fatsecret.com disallows our reader, so no legal entity, headquarters or founding roster was read. The LinkedIn company link on the about page is the au. regional form of linkedin.com/company/fatsecret. Investors were looked for on the about, platform-api, editions and terms pages and in a search; no first-hand page mentions funding or owners, and the aggregator profiles that came up are not used.", "companySocial": { "linkedin": "https://www.linkedin.com/company/fatsecret", "x": "https://x.com/fatsecret", "github": "https://github.com/fatsecret-group" }, "support": { "urls": [ "https://platform.fatsecret.com/contact", "https://platform.fatsecret.com/docs/guides" ], "community": [ { "label": "Developer forum (Google Groups)", "url": "https://groups.google.com/g/fatsecret-platform-api", "kind": "forum" } ], "contactUrls": [ "https://platform.fatsecret.com/contact" ] }, "sources": [ "https://platform.fatsecret.com/about", "https://platform.fatsecret.com/platform-api", "https://platform.fatsecret.com/api-editions", "https://platform.fatsecret.com/terms", "https://platform.fatsecret.com/docs/guides/libraries", "https://api.github.com/orgs/fatsecret-group" ], "ownership": { "status": "unknown", "checked": "2026-11-03", "sources": [ "https://platform.fatsecret.com/about", "https://platform.fatsecret.com/terms" ] } }, "pageJsonUrl": "https://www.anchorterminal.com/tools/fatsecret.json", "live": { "slug": "fatsecret", "securityTxt": { "url": "https://fatsecret.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-04T15:52:54.388597771Z" }, "updatedAt": "2026-11-04T15:52:54.388597771Z" } }, "verify": { "accepts": "a page on fatsecret.com or one of its subdomains", "badgeUrl": "https://www.anchorterminal.com/badges/fatsecret.svg", "body": { "slug": "fatsecret", "url": "the page with the badge or the link" }, "docs": "https://www.anchorterminal.com/builders/#verify", "effect": "none, it never changes a grade, rank or review", "endpoint": "https://www.anchorterminal.com/api/v1/verify", "listingUrl": "https://www.anchorterminal.com/tools/fatsecret", "mcpTool": "verify_listing", "recheck": "weekly; two failed checks in a row and it lapses, a later pass restores it", "snippets": { "html": "\u003ca href=\"https://www.anchorterminal.com/tools/fatsecret\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/fatsecret.svg\" alt=\"fatsecret Platform API on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e", "markdown": "[![fatsecret Platform API on Anchor Terminal](https://www.anchorterminal.com/badges/fatsecret.svg)](https://www.anchorterminal.com/tools/fatsecret)", "link": "\u003ca href=\"https://www.anchorterminal.com/tools/fatsecret\"\u003efatsecret Platform API on Anchor Terminal\u003c/a\u003e" } } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/tools/fatsecret", "json": "https://www.anchorterminal.com/tools/fatsecret.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/tools/fatsecret.md", "mcp": "https://www.anchorterminal.com/mcp", "pricing": "https://www.anchorterminal.com/tools/fatsecret#pricing", "reviews": "https://www.anchorterminal.com/tools/fatsecret#reviews", "slim": "https://www.anchorterminal.com/tools/fatsecret.min.md" }, "markdown": "## Overview\n\n**Grade E · 42/100 · rank #1193 of 1349 · #6 in Cooking, recipes \u0026 meal planning · not agent-ready · confidence medium**\n\n\n## Assessment\n\nOAuth 2.0 client credentials with feature scopes, IP-restricted tokens, a free 5,000-call day with no card, and per-serving nutrients with allergen flags on branded and generic foods. The newest search and image methods need the sales-priced Premier edition, there is no status page, OpenAPI file or official SDK, and the privacy policy and blog could not be read.\n\n## Facts\n\n| Field | Value |\n| --- | --- |\n| Vendor | fatsecret (https://platform.fatsecret.com/platform-api) |\n| Kind | HTTP API |\n| Category | Cooking, recipes \u0026 meal planning (https://www.anchorterminal.com/categories/cooking) |\n| Auth | OAuth · OAuth 2.0 client credentials at https://oauth.fatsecret.com/connect/token with a Client ID and Client Secret from the developer dashboard after a browser registration; tokens last 86,400 seconds and carry scopes (`basic`, `premier`, `barcode`, `localization`, `nlp`, `image-recognition` and `feedback`), and token requests are allowed only from the IP addresses or CIDR ranges registered on the key. OAuth 1.0 with HMAC-SHA1 signatures is kept for signed and delegated (per-user profile) requests, including a 3-legged flow for fatsecret.com accounts. |\n| Pricing | Freemium (Freemium) · Basic is free on self sign-up with 5,000 calls a day, US data, English and attribution required. Premier Free (start-ups under US$1M revenue and raised, non-profits, students) needs verification and removes the daily cap. Premier is priced on request by market, with 62 regional datasets, 26 languages, white label and a month-by-month SLA; image recognition and NLP are add-ons billed in tiers of 25,000 inputs. No card for Basic or Premier. |\n| x402 | No · No x402, MPP or L402 in the guides, editions page, authentication guides or terms (checked 2026-11-03). Premier is contracted through sales. |\n| Licence | unknown |\n| Tools exposed | 0 |\n| Docs | https://platform.fatsecret.com/docs/guides |\n| llms.txt | not found |\n| GitHub stars | 25 (as of 2026-11-03) |\n| Surface listed | The Platform API at platform.fatsecret.com/rest, read from the guides, editions, authentication, OAuth 2.0, OAuth 1.0, error codes, libraries, localisation, foods.search v5, attribution, about and terms pages on platform.fatsecret.com and the GitHub API on 3 November 2026. No account was made and no call was sent |\n| Methods | Foods (search v1 and v5, get by id v5, autocomplete v2, barcode v2, image recognition v2, natural language v1, feedback v1, brands, categories and sub-categories v2, create v2), recipes (search v3, get v2, types v2), and profile methods for foods, recipes, saved meals, authentication, food diary, exercise diary and weight diary |\n| Editions | Basic (free, self sign-up, 5,000 calls a day, US data, English, attribution required), Premier Free (free with verification for start-ups under US$1M revenue and raised, non-profits and students, no daily cap), Premier (on request, 62 regional datasets, 26 languages, white label, month-by-month SLA with service credits, email, phone, Slack and video support) |\n| Add-ons | Image recognition and natural language processing, billed monthly by usage in tiers of 25,000 inputs, with a 50 per cent discount on Premier Free. The platform page says a 14-day trial of image recognition can be started from the dashboard |\n| Rate limits | 5,000 calls a day on Basic per the terms and editions page; Premier unlimited without throttling per the platform page. Error code 11 for the application limit and 12 for a user's actions. No per-second figure, 429 or Retry-After documented |\n| Localisation | 212 region codes and 26 language codes; `language` is ignored unless `region` is set; a premium feature for select accounts |\n| Data licence | Content not marked storable indefinitely must be removed or re-requested within 24 hours; foods.search v5 marks only food_id and serving_id as storable. Attribution with the web badge or snippet wherever content is shown, in app store listings and on the app's website, except on white-label Premier. fatsecret may crawl and monitor applications |\n| SDKs | None official. An official Postman collection and walkthrough (fatsecret-group/postman-fatsecret-apis, last push 1 July 2025). Community libraries pyfatsecret (Python), fatsecret-laravel (PHP) and FatSecretSwift (Swift, proof of concept) |\n| Legal entity | Not established. The terms name 'Fatsecret.com (fatsecret)' under the law of Victoria, Australia; the about page says fatsecret was founded in 2006 and names its CEO, CTO and VP Business Development; www.fatsecret.com/about-us answered 403 |\n| Capabilities | cooking.nutrition, cooking.recipes, cooking.food-recognition, cooking.grocery |\n| Tags | hosted, freemium, free-tier, no-card, oauth, sales-led, enterprise, closed-source, no-status-page |\n| JSON | https://www.anchorterminal.com/api/v1/tools/fatsecret.json |\n\n## Score breakdown (methodology v0.7, October 2026 research run)\n\nAssessed 2026-11-03 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. \"This run\" is each category's share of the 100 points.\n\n| Category | Weight | This run | Score (0–100) | Points |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% | 20 | 35 | 7.0 |\n| Performance | 10% | pending | pending | n/a |\n| Schema \u0026 documentation | 13% | 16.2 | 52 | 8.4 |\n| Agent ergonomics | 13% | 16.2 | 64 | 10.4 |\n| Security \u0026 auth | 14% | 17.5 | 51 | 8.9 |\n| Payments \u0026 pricing | 10% | 12.5 | 25 | 3.1 |\n| Task success | 10% | pending | pending | n/a |\n| Maintenance \u0026 community | 7% | 8.8 | 13 | 1.1 |\n| Transparency \u0026 trust (editorial 18, provenance 49) | 7% | 8.8 | 34 | 3.0 |\n| Negative events | up to −15 | up to −15 | none recorded | 0 |\n| **Total** | | | | **42 → E** |\n\n### Why each score\n\n- Reliability 35 (checked 2026-11-03): Read with the hosted lines. No status page was found on the platform site, the guides, the editions page or the about page (0), so there is no incident history to read (5). The limit is published with a number, 5,000 calls a day on Basic in the terms and on the editions page, and Premier is unlimited (15). Limits surface as error codes 11 and 12 in the body; no HTTP 429, Retry-After or backoff guidance was found, and diary writes have no idempotency key (5 of 15). Premier carries a month-by-month SLA with service credits, named on the editions page without figures, and every edition claims more than 99.9 per cent uptime (5 of 10). The API is generally available, with versioned methods (10). 0 + 5 + 15 + 5 + 5 + 10 = 35.\n- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.\n- Schema \u0026 documentation 52 (checked 2026-11-03): No OpenAPI or similar document was found; the official Postman collection is the only machine-readable contract (8 of 25). No llms.txt (a redirect) and no Markdown docs (0 of 10). Each method page states purpose, parameters, response fields and Premier status, with little on when not to use a method (12 of 20). Parameters are typed with defaults and allowed values, `max_results` is capped at 50, but the field tables mistype allergen names as Long and leave food_images out of the food-level fields (11 of 15). Example responses in XML and JSON on each method, a central error code list with the body shape, and per-method error codes (13 of 15). Methods carry versions (v1 to v5) and older versions stay documented, but no changelog is on the platform site and the blog's 'What's new' could not be read (8 of 15). 8 + 0 + 12 + 11 + 13 + 8 = 52.\n- Agent ergonomics 64 (checked 2026-11-03): `max_results` up to 50 (default 20), `format=json`, and `include_*` switches add sub-categories, images and attributes only when asked, but there is no field selection and each food carries every serving (15 of 25). Zero-based `page_number`, `food_type` generic or brand, region and language filters (18 of 20). Numeric error codes with messages, for OAuth, parameters and application errors, but limit errors come as codes 11 and 12 with no HTTP status or retry hint (13 of 20). Food and recipe methods are reads and safe to repeat; diary and saved-meal writes have no idempotency key (10 of 20). No parameter is required on foods.search, but there is no official SDK in any language (8 of 15). 15 + 18 + 13 + 10 + 8 = 64.\n- Security \u0026 auth 51 (checked 2026-11-03): OAuth 2.0 client credentials with seven scopes gating capabilities (`basic`, `premier`, `barcode`, `localization`, `nlp`, `image-recognition` and `feedback`), tokens of 86,400 seconds, a Client Secret that stays on the server, and token requests limited to IP addresses or CIDR ranges registered on the key; OAuth 1.0 with HMAC-SHA1 remains for delegated calls. The scopes gate capabilities rather than read or write, and no rotation procedure was found (26 of 30). Per-user data is reached only through a delegated profile token, and the shared data methods are reads, but there is no read-only scope and no confirmation step for diary writes (14 of 20). Food and brand names are verified by fatsecret and recipes are its own content, with no guidance on treating them as untrusted (8 of 15). No request log or per-call visibility was found beyond the dashboard (3 of 15). The security.txt path answered the site's generic error page, and no disclosure policy, bug bounty or certification was found (0 of 20). 26 + 14 + 8 + 3 + 0 = 51.\n- Payments \u0026 pricing 25 (checked 2026-11-03): No x402, MPP or L402 (0 of 40). Basic is free and Premier is priced on request by market, with add-ons billed in tiers of 25,000 inputs and no price given, so the paid prices are contact sales (5 of 20). Basic is free on self sign-up with no card, and the platform page says Premier needs no upfront payment or card (20 of 20). A person registers in a browser and Premier goes through sales; no key API was found (0 of 20). 0 + 5 + 20 + 0 = 25.\n- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.\n- Maintenance \u0026 community 13 (checked 2026-11-03): Read as a closed service. No dated API change could be read first-hand. The blog that carries the 'What's new' notes sits behind a robots.txt that answered 403, the method pages are undated, and the official Postman repository's last push is 1 July 2025, more than 180 days before 3 November 2026 (0 of 30). No three dated changes in 90 days established (0 of 20). A developer forum on Google Groups, a contact form, and email, phone, Slack and video support on Premier, with no public changelog on the platform site (8 of 15). No official SDK; an official Postman collection (5 of 15). No package to assess (0 of 10). 0 + 0 + 8 + 5 + 0 = 13.\n- Transparency \u0026 trust 34 (checked 2026-11-03): Closed service with terms that are clear on caching, attribution, rate limits and termination, but undated, naming the provider only as Fatsecret.com, and changeable with or without notice (12 of 30). The privacy policy on foods.fatsecret.com could not be read, because that host's robots.txt disallows our reader, so no data-handling statement was scored; the terms require content to be removed within 24 hours (0 of 30, unchecked). Older method versions stay documented alongside v5 and foods.search v4 is still served, but the terms allow any aspect of the API to be changed or discontinued at any time with no notice period (6 of 20). No subprocessors or data locations found (0 of 20). 12 + 0 + 6 + 0 = 18.\n\nFix list, everything this grade says the listing lacks, the biggest gain first (20 items). What it covers is at https://www.anchorterminal.com/fixes/fatsecret.md (JSON https://www.anchorterminal.com/fixes/fatsecret.json). The whole list for a coding agent comes from `POST https://www.anchorterminal.com/api/v1/fix-list` with `{\"listing\": \"fatsecret\", \"plan\": \"read\"}`, free while the beta runs\n\n### What we couldn't check\n\n- unchecked: the privacy policy at foods.fatsecret.com, whose robots.txt disallows ClaudeBot and anthropic-ai, and the blog's 'What's new' release notes, whose robots.txt answered 403. Transparency and maintenance score them as absent.\n- unchecked: www.fatsecret.com/about-us (403), so the legal entity, headquarters and founders are not established; the terms name Fatsecret.com under the law of Victoria, Australia.\n- firstReleased is 7 April 2006, the domain's registration date, which matches the founding year on the about page; no first-hand page dates the Platform API's launch. lastRelease is empty for want of a dated API change.\n- The security.txt path answered the site's generic error page ('An error occurred while processing your request') rather than 404, so securityTxt is unknown.\n- The platform page says fatsecret supplies data exports and API capabilities 'to help LLM providers train their latest models'; recorded as a vendor statement.\n- The official MCP registry lists two third-party fatsecret servers (io.github.fliptheweb/fatsecret-mcp 0.0.10 and io.github.jaronskijakub/fatsecret-mcp 0.3.0, both updated in late October or November 2026) and nothing from the vendor.\n- unchecked: the developer forum's activity and reply times, which were not read.\n\n### Sources\n\n- REST API guides (methods, call styles): \u003chttps://platform.fatsecret.com/docs/guides\u003e (seen 2026-11-03)\n- editions and pricing: \u003chttps://platform.fatsecret.com/api-editions\u003e (seen 2026-11-03)\n- platform API overview: \u003chttps://platform.fatsecret.com/platform-api\u003e (seen 2026-11-03)\n- authentication overview: \u003chttps://platform.fatsecret.com/docs/guides/authentication\u003e (seen 2026-11-03)\n- OAuth 2.0 guide (scopes, token lifetime, IP restriction): \u003chttps://platform.fatsecret.com/docs/guides/authentication/oauth2\u003e (seen 2026-11-03)\n- OAuth 1.0 guide: \u003chttps://platform.fatsecret.com/docs/guides/authentication/oauth1\u003e (seen 2026-11-03)\n- error codes: \u003chttps://platform.fatsecret.com/docs/guides/error-codes\u003e (seen 2026-11-03)\n- foods.search v5 reference: \u003chttps://platform.fatsecret.com/docs/v5/foods.search\u003e (seen 2026-11-03)\n- localisation guide: \u003chttps://platform.fatsecret.com/docs/guides/localization\u003e (seen 2026-11-03)\n- libraries: \u003chttps://platform.fatsecret.com/docs/guides/libraries\u003e (seen 2026-11-03)\n- attribution policy: \u003chttps://platform.fatsecret.com/attribution\u003e (seen 2026-11-03)\n- terms of use: \u003chttps://platform.fatsecret.com/terms\u003e (seen 2026-11-03)\n- about: \u003chttps://platform.fatsecret.com/about\u003e (seen 2026-11-03)\n- robots.txt platform: \u003chttps://platform.fatsecret.com/robots.txt\u003e (seen 2026-11-03)\n- robots.txt foods (disallows our reader): \u003chttps://foods.fatsecret.com/robots.txt\u003e (seen 2026-11-03)\n- robots.txt blog (403): \u003chttps://blog.fatsecret.com/robots.txt\u003e (seen 2026-11-03)\n- security.txt (error page): \u003chttps://platform.fatsecret.com/.well-known/security.txt\u003e (seen 2026-11-03)\n- GitHub API for the Postman repository: \u003chttps://api.github.com/repos/fatsecret-group/postman-fatsecret-apis\u003e (seen 2026-11-03)\n- MCP registry search (third-party servers only): \u003chttps://registry.modelcontextprotocol.io/v0/servers?search=fatsecret\u003e (seen 2026-11-03)\n- RDAP for fatsecret.com: \u003chttps://rdap.verisign.com/com/v1/domain/fatsecret.com\u003e (seen 2026-11-03)\n\n## Score history\n\nEvery move of a score since the listing was graded, newest first, with its cause. A score can't move without an entry here. JSON: https://www.anchorterminal.com/api/v1/tools/fatsecret/history.json\n\n- 2026-11-03: graded 42 E (methodology 0.7)\n\n## Who's behind it (provenance 49/100, checked 2026-11-03)\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Legal entity named | not found | 0/20 |\n| Domain age | fatsecret.com, registered 2006-04-07 (20 years) | 15/15 |\n| Endpoint on the vendor's domain | fatsecret.com | 15/15 |\n| Terms of service | read, states 4 of the 7 things a reader expects, and has 2 clauses that cost points | 3.4/10 |\n| Privacy policy | read, states 6 of the 8 things a reader expects | 8.5/10 |\n| Status page | not found | 0/10 |\n| Changelog | not found | 0/10 |\n| security.txt | could not be fetched | 0/10 |\n| People named | 3 named with their role, 3 with a public profile | 10/10 |\n| Support route | help pages, a community | 5/5 |\n\nThe Platform API terms name the provider only as Fatsecret.com, under the law of the State of Victoria, Australia, with no effective date. They forbid robots, spiders or other automated applications retrieving or indexing API content except as the documentation allows, and say fatsecret may crawl or monitor applications; no clause addresses automated reading of the website.\n\nplatform.fatsecret.com/robots.txt disallows /rest* for all crawlers, which is the API itself, and nothing was fetched under it. foods.fatsecret.com/robots.txt disallows the whole site for ClaudeBot, anthropic-ai and other named crawlers, so the privacy policy there was not read. blog.fatsecret.com/robots.txt answered 403, so the blog's release notes were not read. www.fatsecret.com has no robots.txt (404) and its about-us page answered 403.\n\nNo status page or changelog found. platform.fatsecret.com/.well-known/security.txt answered the site's generic error page with a request id, so security.txt is unknown. No llms.txt (302 to another page).\n\nRDAP gives fatsecret.com a registration date of 7 April 2006, the year the about page gives for the company's founding.\n\n### Terms and privacy, as read\n\nA reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.\n\n**Terms of service** (https://platform.fatsecret.com/terms), read 2026-11-03, gives no date, states 4 of the 7 things a reader expects.\n\n- To know. Restricts automated access (costs points). \"use the fatsecret Platform API in a manner that exceeds reasonable request volume, constitutes excessive or abusive usage (including using any robot, spider, site search/retrieval, or other automated application or device to retrieve or index any portion of the Content)\"\n- To know. Says the terms or the service can change without notice (costs points). \"Fatsecret.com (\"fatsecret\") is constantly innovating and improving the fatsecret Platform API, and reserves the right, from time to time, with or without notice to you, to\"\n- To know. Says access can be ended without notice or for any reason. \"fatsecret may terminate the license at any time for any reason.\"\n- Not found in the text. Gives the date it was last updated.\n- Names the governing law or courts. The law of the State of Victoria.\n- States a limit on its liability. Rules out indirect and consequential losses, with no cap named in this sentence.\n- Not found in the text. Says how changes to the terms are announced.\n- Not found in the text. Refers to a service level or uptime commitment.\n- Also in the text (2026-11-03). The application must be generally accessible to users and may not run only behind a firewall or on an internal network without a separate agreement. \"1.2 Your Application must be generally accessible to users. You may require users to log in to your Application but you must not (unless you have entered into a separate agreement\"\n- Also in the text (2026-11-03). Content not marked as storable indefinitely must be removed or re-requested within 24 hours of being obtained. \"1.5 You may not continue to use and must immediately remove or replace (by re-requesting) any Content in your possession or under your control not explicitly identified as being\"\n- Also in the text (2026-11-03). The API must not be used to give diet, nutrition or health advice, guidance or diagnosis. \"use the fatsecret Platform API to provide diet, nutrition or health advice, guidance or diagnosis\"\n\n**Privacy policy** (https://foods.fatsecret.com/Default.aspx?pa=priv\u0026l=en), read 2026-11-03, gives no date, states 6 of the 8 things a reader expects.\n\n- Not found in the text. Gives the date it was last updated.\n- Says how long data is kept. For as long as needed, with no period named.\n- Not found in the text. Says whether personal data is sold or shared for advertising.\n- Gives a privacy contact. privacy@FatSecret.com.\n- Says where data is transferred or stored. Data goes to the United States.\n\n## Humans behind the project (researched 2026-11-03 from public pages, not part of the grade)\n\n### Key people\n\n- Lenny Moses, Chief Executive Officer. LinkedIn: https://www.linkedin.com/in/lennymoses\n- Ran Dulberg, Chief Technology Officer. LinkedIn: https://www.linkedin.com/in/ran-dulberg-9214654\n- Sebastian Loch, VP Business Development. LinkedIn: https://www.linkedin.com/in/sloch\n- Note: The Platform API about page, read 3 November 2026, says fatsecret was founded in 2006 and lists Lenny Moses (Chief Executive Officer), Sebastian Loch (VP Business Development) and Ran Dulberg (Chief Technology Officer) with LinkedIn links. It names no founders, so the founder flag is left off; search results calling Lenny Moses a co-founder are third-party profiles and not used. www.fatsecret.com/about-us answered 403 and foods.fatsecret.com disallows our reader, so no legal entity, headquarters or founding roster was read. The LinkedIn company link on the about page is the au. regional form of linkedin.com/company/fatsecret. Investors were looked for on the about, platform-api, editions and terms pages and in a search; no first-hand page mentions funding or owners, and the aggregator profiles that came up are not used.\n- fatsecret: LinkedIn https://www.linkedin.com/company/fatsecret X https://x.com/fatsecret GitHub https://github.com/fatsecret-group\n\n### Getting support\n\n- Help: https://platform.fatsecret.com/contact\n- Help: https://platform.fatsecret.com/docs/guides\n- Community (Developer forum (Google Groups)): https://groups.google.com/g/fatsecret-platform-api\n- Sources: https://platform.fatsecret.com/about, https://platform.fatsecret.com/platform-api, https://platform.fatsecret.com/api-editions, https://platform.fatsecret.com/terms, https://platform.fatsecret.com/docs/guides/libraries, https://api.github.com/orgs/fatsecret-group\n\n## Live (updated 2026-11-04 15:52 UTC)\n\n- security.txt: none\n- Always current: https://www.anchorterminal.com/api/v1/live/fatsecret.json\n\n## Probe metrics\n\nNot measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.\n\n## Strengths\n\n- OAuth 2.0 client credentials with seven scopes, 24-hour tokens and token requests limited to registered IP addresses\n- Basic edition free on self sign-up with 5,000 calls a day and no card\n- Serving-level nutrients with allergen and preference flags, barcode lookup and 212 region codes in 26 languages on Premier\n- Numeric error codes with messages documented centrally and per method, with JSON or XML responses\n- Per-user food, exercise and weight diaries can be written through profiles, so a plan can reach a person's log\n\n## Weaknesses\n\n- Natural language, image recognition, autocomplete, barcode scanning and foods.search v5 are Premier Exclusive, priced on request by market\n- No status page, SLA figures outside Premier, OpenAPI document, llms.txt, changelog or official SDK found\n- No HTTP 429 or Retry-After documented; limits surface as error codes 11 and 12 in the body\n- Content not marked storable must be removed or re-requested within 24 hours, and attribution is required wherever it is shown on Basic and Premier Free\n- The privacy policy on foods.fatsecret.com and the blog's release notes could not be read, and the terms name no legal entity or date\n\n\n\n## Before you call it (notes for agents)\n\n1. Request a token with `grant_type=client_credentials` and only the scopes the task needs; a token request from an IP not registered on the key fails, so run from a fixed address\n2. Use `foods.search` v1 on Basic, since v5, autocomplete, barcode and image methods answer with a scope error without Premier\n3. Pass `format=json` and keep `max_results` at or below 50 with a zero-based `page_number`; treat error code 11 or 12 in the body as the rate limit, since no 429 is documented\n4. Store only food_id and serving_id between sessions and re-request other values within 24 hours, as the terms require\n5. Use a delegated profile token for diary writes and keep the profile's oauth_token and oauth_secret, since fatsecret does not return them again\n\n## Connect\n\nFirst request:\n\n```bash\ncurl -u \"$FATSECRET_CLIENT_ID:$FATSECRET_CLIENT_SECRET\" -d \"grant_type=client_credentials\u0026scope=basic\" https://oauth.fatsecret.com/connect/token\n```\n\nThrough letme: https://letme.dev/fatsecret. letme answers with the pick and how to call it direct. How it works: https://www.anchorterminal.com/letme/index.md\n\n## Similar tools\n\nRanked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.\n\n| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |\n| --- | --- | --- | --- | --- | --- | --- |\n| LogMeal | D | 49.1 | 1045 | cooking.food-recognition, cooking.nutrition, cooking.recipes, cooking.grocery | no | https://www.anchorterminal.com/tools/logmeal.md |\n| spoonacular | D | 49 | 1048 | cooking.recipes, cooking.nutrition, cooking.grocery, cooking.food-recognition | no | https://www.anchorterminal.com/tools/spoonacular.md |\n| Edamam | E | 42.2 | 1187 | cooking.recipes, cooking.nutrition, cooking.food-recognition, cooking.grocery | no | https://www.anchorterminal.com/tools/edamam.md |\n| Eat This Much Partner API | E | 45.7 | 1129 | cooking.grocery, cooking.nutrition, cooking.recipes | no | https://www.anchorterminal.com/tools/eat-this-much.md |\n| Nutritionix API | F | 33.6 | 1259 | cooking.nutrition, cooking.grocery | no | https://www.anchorterminal.com/tools/nutritionix.md |\n| Instacart Developer Platform API + MCP | D | 48.5 | 1067 | cooking.grocery | no | https://www.anchorterminal.com/tools/instacart.md |\n\n## Panel reviews (0)\n\nReviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .\n\nDesk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md\n\n## Notable\n\n- Two call styles on https://platform.fatsecret.com/rest, a path per method and version such as GET /rest/foods/search/v5, or POST /rest/server.api with a `method` parameter such as foods.search.v5, in XML by default or JSON with `format=json` (source: \u003chttps://platform.fatsecret.com/docs/guides\u003e)\n- OAuth 2.0 supports only client_credentials, tokens expire after 86,400 seconds, scopes are `basic`, `premier`, `barcode`, `localization`, `nlp`, `image-recognition` and `feedback`, and token requests are limited to registered IP addresses (source: \u003chttps://platform.fatsecret.com/docs/guides/authentication/oauth2\u003e)\n- Premier Exclusive methods, marked with an asterisk, include natural language processing, image recognition, autocomplete, barcode scanning, foods.search v5, feedback, brands and categories, and food create (source: \u003chttps://platform.fatsecret.com/docs/guides\u003e)\n- Per-user data (favourites, saved meals, food, exercise and weight diaries) is reached through profiles created by the developer or linked to fatsecret.com accounts, with OAuth 1.0 delegated requests (source: \u003chttps://platform.fatsecret.com/docs/guides/authentication\u003e)\n- The terms set the rate limit at 5,000 calls a day, require content not marked storable to be removed or re-requested within 24 hours, require attribution in every place content is shown, forbid robots or spiders retrieving content except as the documentation allows, and let fatsecret change or discontinue the API at any time; they name the provider as Fatsecret.com under the law of Victoria, Australia, with no date (source: \u003chttps://platform.fatsecret.com/terms\u003e)\n- foods.search.v5 returns pages of up to 50 results with serving-level nutrients, allergen and preference flags, and says the only storable values are food_id and serving_id (source: \u003chttps://platform.fatsecret.com/docs/v5/foods.search\u003e)\n- Error codes are numeric with a message, 11 for the application request limit and 12 for too many user actions; no HTTP 429 or Retry-After is documented (source: \u003chttps://platform.fatsecret.com/docs/guides/error-codes\u003e)\n- No official SDK; an official Postman collection and three community libraries (Python, PHP, Swift) are listed, the Swift one marked proof of concept (source: \u003chttps://platform.fatsecret.com/docs/guides/libraries\u003e)\n\n- #6 of 8 in Best recipe, nutrition and meal planning APIs for AI agents: https://www.anchorterminal.com/best/cooking/index.md\n- All 28 cooking comparisons: https://www.anchorterminal.com/compare/cooking/index.md\n\n## Compare\n\n- [Eat This Much Partner API vs fatsecret Platform API](https://www.anchorterminal.com/compare/eat-this-much-vs-fatsecret.md): E 45.7 vs E 42\n- [fatsecret Platform API vs LogMeal](https://www.anchorterminal.com/compare/fatsecret-vs-logmeal.md): E 42 vs D 49.1\n- [fatsecret Platform API vs Nutritionix API](https://www.anchorterminal.com/compare/fatsecret-vs-nutritionix.md): E 42 vs F 33.6\n- [fatsecret Platform API vs spoonacular](https://www.anchorterminal.com/compare/fatsecret-vs-spoonacular.md): E 42 vs D 49\n- [Edamam vs fatsecret Platform API](https://www.anchorterminal.com/compare/edamam-vs-fatsecret.md): E 42.2 vs E 42\n\n## Verify this listing\n\nFor the vendor. The badge or a plain link to this page verifies the listing, from a page on fatsecret.com or one of its subdomains. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{\"slug\": \"fatsecret\", \"url\": \"…\"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify\n\nHTML badge:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/fatsecret\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/fatsecret.svg\" alt=\"fatsecret Platform API on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e\n```\n\nMarkdown badge, for a README:\n\n```markdown\n[![fatsecret Platform API on Anchor Terminal](https://www.anchorterminal.com/badges/fatsecret.svg)](https://www.anchorterminal.com/tools/fatsecret)\n```\n\nPlain link:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/fatsecret\"\u003efatsecret Platform API on Anchor Terminal\u003c/a\u003e\n```\n\n## Share this listing\n\nFor the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say fatsecret Platform API is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.\n\n- Dark: https://www.anchorterminal.com/assets/share/fatsecret-dark.png\n- Light: https://www.anchorterminal.com/assets/share/fatsecret-light.png\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-04", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Terminal", "url": "https://www.anchorterminal.com/tools/" }, { "name": "Cooking, recipes \u0026 meal planning", "url": "https://www.anchorterminal.com/categories/cooking" }, { "name": "fatsecret Platform API", "url": "" } ], "description": "The fatsecret Platform API is a REST API over fatsecret's verified food and nutrition database, with food search, barcode lookup, recipes, image recognition and natural-language food logging, plus per-user food, exercise and weight diaries, under OAuth 2.0 and OAuth 1.0.", "facts": [ "rank #1193 of 1349", "OAuth auth", "0 desk reviews" ], "h1": "fatsecret Platform API", "image": "https://www.anchorterminal.com/assets/og/tools-fatsecret.png", "path": "/tools/fatsecret", "published": "2026-10-01", "section": "tools", "title": "fatsecret Platform review (2026): pricing, alternatives and grade E", "toc": null, "updated": "2026-11-04", "url": "https://www.anchorterminal.com/tools/fatsecret" }, "tokens": { "markdown": 8100, "slim": 1880 }, "version": 1 }