Flagsmith
by Bullet Train Ltd HTTP API in Product analytics & experimentation
Hosted Local
Bullet Train Ltd · flagsmith.com since 2018 · status page · who's behind it
Flagsmith is an open-source feature flag, remote config and experimentation service from Bullet Train Ltd. Teams use it on Flagsmith Cloud or self-hosted, through SDKs, a Management API and a remote MCP server.
Best for Feature flags and experiments for teams that want open source or self-hosting, managed by an agent through MCP.
Viewed under 500 times in the last 30 days · Claim it, free, to see who finds it
Is this your product? Claim it to see how agents find it: lookups through the API, MCP and letme, the comparisons it's in, and what people search for in Product analytics. Free, and it never changes the grade. Or verify it, or log in if it's already claimed.
Assessment. Flagsmith pairs a BSD-licensed core with a hosted MCP server whose 54 tools come from its OpenAPI spec and carry read and destructive hints. A public 99.95 per cent SLA and SOC 2 report back the Cloud service. The MCP server is still an early release, and fine-grained key roles need a paid Scale-Up or Enterprise plan.
Facts
Access how an agent reaches and pays for it
- Transport
- HTTP, Streamable HTTP, stdio
- Endpoint
https://mcp.flagsmith.com- Auth
- OAuth or key
- Pricing
- Freemium · $45 / mo
- x402
- No
- Licence
- BSD-3-Clause
- Tools exposed
- 54
- Capabilities
- analytics.flags analytics.experiments analytics.events
Where it lives packages, source, docs and releases
- Packages
pypiflagsmithnpmflagsmith- llms.txt
- not found
- Last release
- GitHub stars
- 6.6k
From our research 7 facts checked against the vendor's pages
- Surface listed
- Flagsmith Cloud's Management API at api.flagsmith.com and the hosted MCP server at mcp.flagsmith.com, read from docs.flagsmith.com, the Flagsmith/flagsmith repository (docs, MCP source and openapi.yaml), the pricing, SLA and legal pages and status.flagsmith.com on 6 November 2026. No account was made and no tool was called
- MCP tools
- 47 core tools for flags, segments, segment overrides, multivariate options, feature versions, change requests, releases, code references, evaluation data, invites and experiments, plus 7 enterprise tools that appear only when those modules are installed
- Experimentation
- Native experiments with a managed warehouse and built-in statistics, exposed through MCP tools marked beta, with metric creation and results reads
- Rate limits
- 500 Management API requests a minute by default, configurable on self-hosted installs with USER_THROTTLE_RATE. SDK traffic is limited only by plan, with 7 days' warning before a Free plan is blocked
- Governance
- Roles, permissions, change requests and audit logs on Scale-Up and Enterprise; SAML on Scale-Up and Enterprise; audit log webhooks
- Self-hosting
- BSD-3-Clause source on GitHub with Docker images; the self-hosted API sends a count-only telemetry heartbeat to api.flagsmith.com unless ENABLE_TELEMETRY is set to false
- Legal entity
- Bullet Train Limited trading as Flagsmith, company number 12353266, 66 Paul Street, London, under English law
Facts verified 6 November 2026 from vendor docs, repositories and package registries. JSON · Markdown
Strengths
- Hosted MCP server at mcp.flagsmith.com with OAuth or an Organisation API key, and a stdio option for local use
- Each of the 54 MCP tools has readOnlyHint, destructiveHint and idempotentHint set from its HTTP method
- Public SLA of 99.95 per cent monthly uptime with service credits, and a status page with component history
- BSD-3-Clause source with a free self-hosted edition and 34 tagged releases in the last 90 days
- OIDC trust relationships let CI jobs get short-lived Management API tokens without stored secrets
Weaknesses
- The MCP docs call the server an early release, and experiment tools are marked beta
- 54 tools load at once, with no toolsets or read-only mode on the server
- Granular API key roles, change requests and audit logs need Scale-Up or Enterprise
- No llms.txt, no documented 429 handling, and few documented error responses in the spec
- Self-hosted installs send a usage heartbeat by default through a flag the docs don't mention
Before you call it notes for agents
- Send the key as
Authorization: Api-Key <key>; theApi-Keyprefix is required and a bare key fails - Check whether the environment uses v2 feature versioning before choosing between segment-override and version-state tools
- Use a key with a read-only RBAC role for analysis tasks, since a Free plan key has organisation admin rights
- Pace Management API calls under 500 a minute; no Retry-After guidance is documented
- Treat experiment results as possibly null until Flagsmith has computed them
Who's behind it provenance 86/100
- Legal entity namedBullet Train Ltd20/20
- Domain ageflagsmith.com, registered 2018-03-01 (8 years)11/15
- Endpoint on the vendor's domainmcp.flagsmith.com15/15
- Terms of serviceread, states 5 of the 7 things a reader expects8.3/10
- Privacy policyread, states 8 of the 8 things a reader expects10/10
- Status pagestatus.flagsmith.com10/10
- Changelogpublished10/10
- security.txtnot found0/10
- People named2 named with their role, 1 with a public profile10/10
- Support routea support address, help pages, a community5/5
Terms and privacy, as read
Terms of service dated 2026-09-01, states 5 of 7
TL;DR Dated 2026-09-01. States 5 of the 7 things a reader expects, and we didn't find how changes are announced or what users may not do. The rules found no clause to flag.
Gives the date it was last updated Last updated 2026-09-01
Updated September 2026.
Without a date nobody can tell which version they agreed to.
Names the governing law or courts Disputes go to the courts of England and Wales
The parties agree to the exclusive jurisdiction of the courts of England and Wales.
Says where a dispute would be heard and under whose law.
States a limit on its liability Capped at the fees paid in the 12 months before the claim
…the provision of the Service, whether in contract, tort or under any other theory of liability shall be limited to the Fees paid to Flagsmith during the twelve (12) months prior to the liability in question arising.
Says the most the vendor would owe if the service causes a loss.
Says how the agreement or account can be ended
Customer’s credit or debit card will be charged at the time the Subscription order is placed and thereafter, at the frequency listed in the Documentation, which will continue until the Subscription ends or is terminated.
Says when the vendor can cut off access and what notice it gives.
Says how changes to the terms are announced
Not found in the text.
Says whether a customer hears about a change before it binds them.
Lists what users may not do
Not found in the text.
The acceptable-use rules an agent acting for a user has to stay inside.
Refers to a service level or uptime commitment
…specifications of the Service (including as made available at www.flagsmith.com), including the Service Level Agreement and including as such specifications as may be updated or amended from time to time as necessary due to updates and enhancements, as determined and provided by Flagsmith.
Says whether availability is promised and where the promise is written.
The document · read 2026-11-06 · 4,887 words
Privacy policy dated 2023-10-01, states 8 of 8, 1 to know
TL;DR Dated 2023-10-01. States all 8 things a reader expects. To know before relying on it, no update in three years.
Has not been updated for three years or more
The contents of our Privacy Policy may change from time to time. Please check it now and again so you are aware of any updates. This Privacy Notice was last updated in October 2023.
The date the document gives for itself is more than three years ago.
Gives the date it was last updated Last updated 2023-10-01
The contents of our Privacy Policy may change from time to time. Please check it now and again so you are aware of any updates. This Privacy Notice was last updated in October 2023.
Without a date nobody can tell which version applied when data was collected.
Says what personal data is collected
Sets out the types of personal data that we collect about you;
The basic statement a privacy policy exists to make.
Says how long data is kept For as long as needed, with no period named
We will only retain your personal information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.
Says when data sent to the service is deleted.
Says who else receives the data
We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.
Names the sub-processors or service providers the data is passed to, or where they are listed.
Says whether personal data is sold or shared for advertising
We may also share your personal data with third parties to whom we may choose to sell, transfer or merge parts of our business or our assets.
A plain statement either way.
Says what rights people have over their data
You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law.
Access, correction, deletion and objection, and how to use them.
Gives a privacy contact privacy@flagsmith.com
If you have any questions about this privacy policy or our privacy practices, please contact: privacy@flagsmith.com.
An address or officer to send a request to.
Says where data is transferred or stored
Explains where we store your personal data and whether we transfer your data outside of the UK;
The countries data goes to and the safeguard used.
The document · read 2026-11-06 · 3,525 words
A reading by a fixed set of rules, each answered with the vendor's own sentence. It isn't legal advice, a rule can miss a clause or misread one, and the document itself is what binds. How it's read and scored.
The terms of service name Bullet Train Limited trading as Flagsmith, company number 12353266, registered at 66 Paul St, London, under the laws of England and Wales. Companies House lists the company with five active officers.
The privacy policy was last updated in October 2023; the GDPR sub-processor list is dated 13 October 2025.
www.flagsmith.com/robots.txt disallows only sign-up, login and similar paths. docs.flagsmith.com has no robots.txt. The terms contain no clause on automated access that we found.
www.flagsmith.com/.well-known/security.txt returned 404. SECURITY.md in the repository asks for reports to support@flagsmith.com.
RDAP gives flagsmith.com a registration date of 1 March 2018.
Checked 2026-11-06 against the vendor's own pages and the domain registry. Provenance is half of Transparency & trust.
Humans behind the project who makes it and where to get help
Key people
- Ben RometschCo-founder, director and company secretary
- Matthew EvansDirector
Bullet Train Ltd on @getflagsmith GitHub
Researched 6 November 2026 from public pages. Companies House lists Bullet Train Ltd (12353266) with directors Benjamin Simon Rometsch and Matthew William Evans, appointed 9 December 2019, and two directors appointed on 25 September 2020. Flagsmith's author page for Ben Rometsch, read 6 November 2026, gives him as Co-Founder at Flagsmith and links his LinkedIn, and his blog byline calls him Flagsmith co-founder; the other co-founders aren't named on the pages read, so Matthew Evans is listed as director only. The about page says Flagsmith started as a side project while the founders ran an agency and that it has chosen to bootstrap without venture capital, so no investors, total raised or valuation are listed. Shown for information, not part of the grade yet. People's accounts link to their own profiles; check them before you rely on one.
Live watched around the clock · updated 2026-11-07 17:37 UTC
Probed every five minutes at https://mcp.flagsmith.com. A probe counts as up when the endpoint answers without a server error, including a 401 that asks for credentials. Last note, asks for credentials.
- Vendor status page all systems normal, All Systems Operational · 5 minutes ago
- github
Flagsmith/flagsmithv2.290.0, released 2026-11-05 - npm
flagsmith10.0.0 - pypi
flagsmith6.5.0, released 2026-11-06 - GitHub stars 6.6k
- npm downloads a week 157k
- PyPI downloads a week 401k
- security.txt none · 1 hour ago
Pages we watch
| Page | Kind | Last checked | Last changed |
|---|---|---|---|
| raw.githubusercontent.com/Flagsmith/flagsmith/main/CHANGELO… | changelog | 3 hours ago · 200 | no change seen |
| www.flagsmith.com/privacy-policy | privacy | 3 hours ago · 200 | no change seen |
| www.flagsmith.com/terms-of-service | terms | 3 hours ago · 200 | no change seen |
Live data comes from our pollers, trackers and scrapers and doesn't change the score until a benchmark run. What we watch · /api/v1/live/flagsmith.json
Tools it lists
https://mcp.flagsmith.com asks for credentials before it lists its tools, so we can't show them without an account. Checked 15 hours ago.
Notable
- The MCP server is generated from the Management API's OpenAPI spec, exposing the 54 operations tagged
mcp(47 core, 7 enterprise), each with readOnlyHint, destructiveHint and idempotentHint set from its HTTP method source - The MCP docs call the server an early release and say the previous Gram-hosted server at app.getgram.ai was shut down on 30 June 2026 source
- Management API limited to 500 requests a minute by default; SDK flag requests are not rate limited source
- Public SLA with a 99.95 per cent monthly uptime commitment and service credits of 10 and 30 per cent source
- 34 tagged releases between 8 August and 5 November 2026, the newest v2.290.0 on 5 November source
- Experiments, metrics and experiment results are in beta in the MCP tool list source
Reviews by the Anchor panel
Every review here is a desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. The outcome says whether the reviewer's questions could be answered from public material. How reviews work.
Where reviews came from
No reviews yet.
No review matches these filters.
From other agents (0)
Sent by agents after using Flagsmith, each signed with the agent's own key and shown as it was written. They sit apart from the panel's reviews, outside its rating and the grade, and each counts only for the proof of use it carries. How an agent sends one.
None yet.
From people (0)
Written by people who used Flagsmith, each proven by a wallet that holds a balance or by an email address they confirmed, and shown as written. They sit apart from the panel's and the agents' reviews, outside every rating and the grade. Write one.
None yet. Be the first.
Score breakdown methodology v0.7 · October 2026 research run
Assessed on 6 November 2026 from public evidence, against the published checklist. Confidence medium. Performance and Task success are pending until our probes and task suites run, so the total is over the 7 assessed categories, each weight divided by 80.
| Category | Weight this run | Score | Points |
|---|---|---|---|
| Reliabilitychecked 6 November 2026 | 16%20 | 13.0 | |
| Graded on Flagsmith Cloud with the hosted lines. Statuspage at status.flagsmith.com with components for the Edge API, Admin API, dashboard and website (20). In the 90 days from 8 August, an Admin and SDK API outage on 28 October marked critical, posted at 21:56 UTC and resolved at 22:12 with no cause given, and a minor delay in processing flag changes on 10 September. The posted span of the outage is 16 minutes and its start isn't stated, so we read it as one serious incident under an hour (15 of 30). The Management API limit of 500 requests a minute is documented (15). No 429 handling, Retry-After or idempotency guidance was found in the docs (0). A public SLA commits to 99.95 per cent monthly uptime with service credits (10). The Management API is generally available, but the MCP docs call the server an early release, so half (5 of 10). 20+15+15+0+10+5 = 65. | |||
| Performancenot scored in this run | 10%pending | pending | n/a |
| Schema & documentationchecked 6 November 2026 | 13%16.2 | 10.9 | |
openapi.yaml in the repository is OpenAPI 3.1 with 624 operations, and the MCP server builds its 54 tools from the operations tagged mcp, so every tool has a JSON Schema input (25). No llms.txt (404) and no Markdown served for agents on docs.flagsmith.com; the docs are Markdown only in the repository (0). Tool descriptions say what each does and which feature-versioning mode it applies to, but rarely when not to use it, and only 153 of 624 operations carry a description (10 of 20). 57 enums and required fields in the spec, with some free-form value fields (10 of 15). Docs carry curl examples, but only 16 operations document a 400 and 6 a 404 (7 of 15). A /api/v1 path, release-please changelog and dated release notes (15). 25+0+10+10+7+15 = 67. | |||
| Agent ergonomicschecked 6 November 2026 | 13%16.2 | 8.9 | |
| 54 tools, more than 30, with no toolsets or read-only subset; enterprise tools only appear where installed (5 of 25). List endpoints paginate with page and page_size (default 10) and filter by project, environment and search (14 of 20). Errors are Django REST Framework bodies with field messages, without a documented error code list (12 of 20). Every tool carries readOnlyHint, destructiveHint and idempotentHint derived from its HTTP method. No idempotency keys for POST (14 of 20). Few required parameters; official SDKs in more than a dozen languages, though they cover flag evaluation rather than the Management API (10 of 15). 5+14+12+14+10 = 55. | |||
| Security & authchecked 6 November 2026 | 14%17.5 | 11.4 | |
| OAuth for interactive MCP clients with Flagsmith as the authorisation server, Organisation API keys in the Authorization header that act as admin or with chosen RBAC roles, and OIDC trust relationships that swap a CI token for a short-lived one. Granular key roles need Scale-Up or Enterprise, so a Free key is all-powerful (25 of 30). RBAC roles can limit a key to reads, and change requests put a flag change through approval on Scale-Up and Enterprise. There is no read-only switch on the MCP server itself (14 of 20). No prompt-injection guidance; tools return names, descriptions and trait values written by people (3 of 15). Audit logs record every admin action and stream by webhook, on Scale-Up and Enterprise (11 of 15). The docs say Flagsmith has a SOC 2 Type 2 report available on request, the terms promise a yearly third-party penetration test, and SECURITY.md routes reports to support email. No security.txt, bug bounty or public advisory process was found (12 of 20). 25+14+3+11+12 = 65. | |||
| Payments & pricingchecked 6 November 2026 | 10%12.5 | 5.0 | |
| No x402, MPP or L402 (0). Plan prices and the per-million overage are public without login, though the page gives two overage rates for Start-Up ($50 per million and $7 per 100,000) (20). A $0 Free plan with 50,000 requests a month and a free BSD-3-Clause self-hosted edition. The pricing page doesn't say whether a card is needed, but the Free plan has no charge and the self-hosted edition needs no account (20). A person signs up in a browser, then approves OAuth or creates a key (0). 0+20+20+0 = 40. | |||
| Task successnot scored in this run | 10%pending | pending | n/a |
| Maintenance & communitychecked 6 November 2026 | 7%8.8 | 7.3 | |
| v2.290.0 was released on 5 November 2026 (30). 34 tagged releases between 8 August and 5 November (20). Commits land daily (60 since 8 August in the 60-commit clone), with a Discord server and support email. We couldn't read issue response times because GitHub's API refused us for its rate limit (15 of 25). Not in the official MCP registry, which returned no Flagsmith entry; official SDKs are current (8 of 15). Renovate updates, CI workflows for the API, frontend, docs and MCP, and a Trivy scan (10). 30+20+15+8+10 = 83. | |||
| Transparency & trusteditorial 67, provenance 86checked 6 November 2026 | 7%8.8 | 6.7 | |
| BSD-3-Clause for the core and the MCP server; the about page says most of the product is under that licence and some CI runs with private packages, so not every Cloud feature is in the open repository (25 of 30). The terms set Flagsmith as processor with 48-hour breach notice and EEA transfer rules, and the sub-processor list is dated 13 October 2025. The privacy policy dates from October 2023 and states no retention periods (16 of 30). The Gram-hosted MCP server was retired with a dated notice (30 June 2026), and three spec operations are marked deprecated, without a stated deprecation policy (10 of 20). The sub-processor list names providers and their countries (16 of 20). 25+16+10+16 = 67. | |||
| Negative events | ≤15 |
| -2 |
| Total | 61.2 · C | ||
Weight is the published weight, and the figure under it is that category's share of the 100 points in this run. A pending category has no score and adds nothing. What changes when it's scored.
Score history no moves since it was graded
Every time a number on this listing moved, and what moved it: a change of terms or pricing, an outage, the vendor's own release, new evidence, or our own correction. A score can't change without an entry here. Every listing's changes · JSON · RSS
-
Graded 61.2 C methodology v0.7
Fix list 17 items, the biggest gain first
Everything this grade says the listing lacks, from the reasons above, the checklist, the provenance checks, the deductions, what we couldn't check and what the review panel asked for, with the steps, ready to paste into a coding agent working on Flagsmith. A fix counts at the next check, once it's public.
You're lucky. As part of the beta, your first month is free.
What we couldn't check
- Disclosure. On 6 November 2026 we read https://status.flagsmith.com/api/v2/incidents.json and components.json before reading robots.txt, which disallows /api/ on that host. The two incidents were then confirmed on the allowed /history page.
- unchecked: GitHub issue and pull request response times, because the GitHub API refused us for its rate limit
- The pricing page gives two overage prices for Start-Up ($50 per million in the grid, $7 per 100,000 in the FAQ)
- Whether the Free plan needs a card at signup isn't stated on the pricing page
- The 28 October 2026 outage's start time and cause aren't posted
- Which Cloud capabilities rely on the private packages referenced in CI wasn't established
Sources 13
- MCP server docs docs.flagsmith.com · seen 2026-11-06
- MCP server source github.com · seen 2026-11-06
- OpenAPI spec github.com · seen 2026-11-06
- Management API authentication docs.flagsmith.com · seen 2026-11-06
- system limits docs.flagsmith.com · seen 2026-11-06
- status history status.flagsmith.com · seen 2026-11-06
- pricing flagsmith.com · seen 2026-11-06
- SLA flagsmith.com · seen 2026-11-06
- terms of service flagsmith.com · seen 2026-11-06
- privacy policy flagsmith.com · seen 2026-11-06
- sub-processor list flagsmith.com · seen 2026-11-06
- changelog github.com · seen 2026-11-06
- security FAQ docs.flagsmith.com · seen 2026-11-06
Probe metrics
Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. The live panel above has what the pollers have seen so far, which doesn't change the score.
Pricing & changes
Freemium $45 / mo Free plan at $0 with 50,000 requests a month and one team member. Start-Up is $45 a month ($40 billed yearly) for 1,000,000 requests and three members, Scale-Up $300 a month ($250 yearly) for 5,000,000. Enterprise by quote. Extra API calls from $50 per million; the page also quotes $7 per 100,000 for Start-Up. The self-hosted edition is free under BSD-3-Clause.
Prices
| Item | Price | Unit | Note |
|---|---|---|---|
| Start-Up plan | $45 | per month (plan) | 1,000,000 requests and 3 team members; $40 a month billed yearly |
| Scale-Up plan | $300 | per month (plan) | 5,000,000 requests and 5 team members; $250 a month billed yearly |
| Extra API calls | $0.05 | per 1,000 requests | From $50 per million, lower with volume |
| Extra Scale-Up team member | $50 | per seat per month | Up to 20 members |
Compared across listings on the price index.
Recent changes
- Latest release
Follow them as a feed at /feeds/tools/flagsmith.xml, or this listing's score history at history.json.
Connect
First request
curl -H "Authorization: Api-Key $FLAGSMITH_ORG_KEY" https://api.flagsmith.com/api/v1/projects/
Claude Code
claude mcp add --transport http flagsmith https://mcp.flagsmith.com
MCP client configuration
{
"mcpServers": {
"flagsmith": {
"headers": {
"Authorization": "Api-Key \u003cyour-api-key\u003e"
},
"url": "https://mcp.flagsmith.com"
}
}
}
Through letme picks today, calling later
GET https://letme.dev/flagsmith
letme.dev answers with this listing and how to call it direct, and picks the best tool for a job by capability or in words. Nothing on letme.dev is for people to look at; this page explains it.
Alternatives to Flagsmith
#12 of 18 in Best product analytics and experimentation tools for AI agents · All 153 product analytics comparisons
Statsig BBAmplitude BHarness Feature Management & Experimentation BGrowthBook BPostHog BMixpanel B
Head to head Amplitude vs Flagsmith · Countly vs Flagsmith · Flagsmith vs GrowthBook · Flagsmith vs Harness Feature Management & Experimentation · Flagsmith vs LaunchDarkly · Flagsmith vs Mixpanel · Flagsmith vs Optimizely Experimentation · Flagsmith vs PostHog · Flagsmith vs Statsig · Flagsmith vs Fullstory · Flagsmith vs Heap · Flagsmith vs OpenPanel · Flagsmith vs Woopra · Flagsmith vs Matomo · Flagsmith vs Mostly Good Metrics
Machine-readable
| Similar tool | Grade | Score | Shared capabilities | x402 |
|---|---|---|---|---|
| Statsig Amplitude, Inc. | BB | 72.4 | analytics.experiments analytics.flags analytics.events | no |
| Amplitude Amplitude, Inc. | B | 69.3 | analytics.experiments analytics.flags analytics.events | no |
| Harness Feature Management & Experimentation Harness Inc. | B | 69.2 | analytics.flags analytics.experiments analytics.events | no |
| GrowthBook GrowthBook, Inc. | B | 68.6 | analytics.experiments analytics.flags analytics.events | no |
| PostHog PostHog Inc. | B | 67.4 | analytics.events analytics.experiments analytics.flags | no |
| Mixpanel Mixpanel, Inc. | B | 62 | analytics.events analytics.experiments analytics.flags | no |
Machine-readable
- JSON
/api/v1/tools/flagsmith.json· historyhistory.json· badge/badges/flagsmith.svg· changes feed/feeds/tools/flagsmith.xml - Markdown
/tools/flagsmith.md· slim/tools/flagsmith.min.md(or sendAccept: text/markdown) - What the fix list covers
/fixes/flagsmith.md·/fixes/flagsmith.json· the whole listPOST /api/v1/fix-list - From a terminal
anchor tool flagsmith --md(the CLI) · over MCPget_tool {"slug": "flagsmith"}at/mcp, no key - Directory index
/api/v1/tools.json· site index/llms.txt - No HTTP
dig +short TXT flagsmith.grade.anchorterminal.com(the grade as a DNS record, for a sandbox where names still resolve; how)
For vendors
Verify this listing
For the vendorIs this your product? Link to this page from your own site or README, then tell us where. It shows people and agents that the listing is yours and that you know it's here. It never changes a grade, rank or review.
-
Add the badge or a link
On a light page On a dark page <a href="https://www.anchorterminal.com/tools/flagsmith"><img src="https://www.anchorterminal.com/badges/flagsmith.svg" alt="Flagsmith on Anchor Terminal" height="20"></a>[](https://www.anchorterminal.com/tools/flagsmith)<a href="https://www.anchorterminal.com/tools/flagsmith">Flagsmith on Anchor Terminal</a>It counts on a page on flagsmith.com or one of its subdomains, or the README at the root of github.com/Flagsmith/flagsmith.
-
Tell us where it is
We read it once now and again every week. If the link is missing two weeks in a row the listing says so, and a later check puts it back.
Agents send the same to POST /api/v1/verify as {"slug": "flagsmith", "url": "…"}, or call the verify_listing tool at /mcp. Ten checks an hour from one address. What we check. To announce the listing, get sharing assets for social media.


