# Flagsmith

> Flagsmith is an open-source feature flag, remote config and experimentation service from Bullet Train Ltd. Teams use it on Flagsmith Cloud or self-hosted, through SDKs, a Management API and a remote MCP server.

- Canonical: https://www.anchorterminal.com/tools/flagsmith
- Pricing: https://www.anchorterminal.com/tools/flagsmith#pricing
- Reviews: https://www.anchorterminal.com/tools/flagsmith#reviews
- Markdown: https://www.anchorterminal.com/tools/flagsmith.md (~7,300 tokens)
- Slim: https://www.anchorterminal.com/tools/flagsmith.min.md (~1,680 tokens, same facts, less prose, for token-sensitive contexts)
- JSON: https://www.anchorterminal.com/tools/flagsmith.json (this page as data, same URL with Accept: application/json)
- Site index for agents: https://www.anchorterminal.com/llms.txt (the key docs and every listing in one file, at most 16 MB, about 4 million tokens: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- MCP: https://www.anchorterminal.com/mcp (the whole catalogue as tools, no key)
- DNS: dig +short TXT flagsmith.grade.anchorterminal.com (the grade as a DNS TXT record, for a sandbox with no HTTP where names still resolve; also top., best.<category>. and <a>.vs.<b>. under the zone, and the same under grade.letme.dev)
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)
- Updated: 2026-11-07

## Overview

**Grade C · 61.2/100 · rank #620 of 1486 · #12 in Product analytics & experimentation · not agent-ready · confidence medium**


## Assessment

Flagsmith pairs a BSD-licensed core with a hosted MCP server whose 54 tools come from its OpenAPI spec and carry read and destructive hints. A public 99.95 per cent SLA and SOC 2 report back the Cloud service. The MCP server is still an early release, and fine-grained key roles need a paid Scale-Up or Enterprise plan.

## Facts

| Field | Value |
| --- | --- |
| Vendor | Bullet Train Ltd (https://www.flagsmith.com) |
| Kind | HTTP API |
| Category | Product analytics & experimentation (https://www.anchorterminal.com/categories/product-analytics) |
| Transport | HTTP, Streamable HTTP, stdio |
| Endpoint | `https://mcp.flagsmith.com` |
| Auth | OAuth or key · The hosted MCP server takes OAuth (the client discovers Flagsmith as the authorisation server and a person signs in) or an Organisation API key sent as `Authorization: Api-Key <key>`. Organisation keys act as full organisation admin or with chosen RBAC roles; granular roles need Scale-Up or Enterprise. OIDC trust relationships let CI workloads such as GitHub Actions exchange their token for a short-lived one. SDK environment keys are separate. |
| Pricing | Freemium ($45 / mo) · Free plan at $0 with 50,000 requests a month and one team member. Start-Up is $45 a month ($40 billed yearly) for 1,000,000 requests and three members, Scale-Up $300 a month ($250 yearly) for 5,000,000. Enterprise by quote. Extra API calls from $50 per million; the page also quotes $7 per 100,000 for Start-Up. The self-hosted edition is free under BSD-3-Clause. |
| x402 | No · No x402, MPP or L402 in the docs, the OpenAPI spec or the pricing page (checked 2026-11-06). |
| Licence | BSD-3-Clause |
| Tools exposed | 54 |
| Packages | pypi: `flagsmith`; npm: `flagsmith` |
| Source | https://github.com/Flagsmith/flagsmith |
| Docs | https://docs.flagsmith.com/ |
| llms.txt | not found |
| Last release | 2026-11-05 |
| GitHub stars | 6,639 (as of 2026-11-06) |
| Surface listed | Flagsmith Cloud's Management API at api.flagsmith.com and the hosted MCP server at mcp.flagsmith.com, read from docs.flagsmith.com, the Flagsmith/flagsmith repository (docs, MCP source and openapi.yaml), the pricing, SLA and legal pages and status.flagsmith.com on 6 November 2026. No account was made and no tool was called |
| MCP tools | 47 core tools for flags, segments, segment overrides, multivariate options, feature versions, change requests, releases, code references, evaluation data, invites and experiments, plus 7 enterprise tools that appear only when those modules are installed |
| Experimentation | Native experiments with a managed warehouse and built-in statistics, exposed through MCP tools marked beta, with metric creation and results reads |
| Rate limits | 500 Management API requests a minute by default, configurable on self-hosted installs with USER_THROTTLE_RATE. SDK traffic is limited only by plan, with 7 days' warning before a Free plan is blocked |
| Governance | Roles, permissions, change requests and audit logs on Scale-Up and Enterprise; SAML on Scale-Up and Enterprise; audit log webhooks |
| Self-hosting | BSD-3-Clause source on GitHub with Docker images; the self-hosted API sends a count-only telemetry heartbeat to api.flagsmith.com unless ENABLE_TELEMETRY is set to false |
| Legal entity | Bullet Train Limited trading as Flagsmith, company number 12353266, 66 Paul Street, London, under English law |
| Capabilities | analytics.flags, analytics.experiments, analytics.events |
| Tags | official, hosted, open-source, self-hosted, mcp, remote-mcp, oauth, openapi, free-tier, status-page, soc2, sla, python, typescript |
| JSON | https://www.anchorterminal.com/api/v1/tools/flagsmith.json |

## Score breakdown (methodology v0.7, October 2026 research run)

Assessed 2026-11-06 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. "This run" is each category's share of the 100 points.

| Category | Weight | This run | Score (0–100) | Points |
| --- | --- | --- | --- | --- |
| Reliability | 16% | 20 | 65 | 13.0 |
| Performance | 10% | pending | pending | n/a |
| Schema & documentation | 13% | 16.2 | 67 | 10.9 |
| Agent ergonomics | 13% | 16.2 | 55 | 8.9 |
| Security & auth | 14% | 17.5 | 65 | 11.4 |
| Payments & pricing | 10% | 12.5 | 40 | 5.0 |
| Task success | 10% | pending | pending | n/a |
| Maintenance & community | 7% | 8.8 | 83 | 7.3 |
| Transparency & trust (editorial 67, provenance 86) | 7% | 8.8 | 77 | 6.7 |
| Negative events | up to −15 | up to −15 | 6 November 2026. The self-hosted API sends a heartbeat to https://api.flagsmith.com/api/v1/analytics/telemetry/ with counts of organisations, projects, environments, feature flags, segments and users, on by default (`ENABLE_TELEMETRY = env.bool("ENABLE_TELEMETRY", default=True)`). The flag isn't in the environment-variable reference or anywhere else in the docs we read. Counts only, self-hosted only, so the minimum deduction (https://github.com/Flagsmith/flagsmith/blob/main/api/app/settings/common.py ; https://github.com/Flagsmith/flagsmith/blob/main/api/telemetry/telemetry.py).  | -2 |
| **Total** | | | | **61.2 → C** |

### Why each score

- Reliability 65 (checked 2026-11-06): Graded on Flagsmith Cloud with the hosted lines. Statuspage at status.flagsmith.com with components for the Edge API, Admin API, dashboard and website (20). In the 90 days from 8 August, an Admin and SDK API outage on 28 October marked critical, posted at 21:56 UTC and resolved at 22:12 with no cause given, and a minor delay in processing flag changes on 10 September. The posted span of the outage is 16 minutes and its start isn't stated, so we read it as one serious incident under an hour (15 of 30). The Management API limit of 500 requests a minute is documented (15). No 429 handling, Retry-After or idempotency guidance was found in the docs (0). A public SLA commits to 99.95 per cent monthly uptime with service credits (10). The Management API is generally available, but the MCP docs call the server an early release, so half (5 of 10). 20+15+15+0+10+5 = 65.
- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.
- Schema & documentation 67 (checked 2026-11-06): openapi.yaml in the repository is OpenAPI 3.1 with 624 operations, and the MCP server builds its 54 tools from the operations tagged `mcp`, so every tool has a JSON Schema input (25). No llms.txt (404) and no Markdown served for agents on docs.flagsmith.com; the docs are Markdown only in the repository (0). Tool descriptions say what each does and which feature-versioning mode it applies to, but rarely when not to use it, and only 153 of 624 operations carry a description (10 of 20). 57 enums and required fields in the spec, with some free-form value fields (10 of 15). Docs carry curl examples, but only 16 operations document a 400 and 6 a 404 (7 of 15). A /api/v1 path, release-please changelog and dated release notes (15). 25+0+10+10+7+15 = 67.
- Agent ergonomics 55 (checked 2026-11-06): 54 tools, more than 30, with no toolsets or read-only subset; enterprise tools only appear where installed (5 of 25). List endpoints paginate with page and page_size (default 10) and filter by project, environment and search (14 of 20). Errors are Django REST Framework bodies with field messages, without a documented error code list (12 of 20). Every tool carries readOnlyHint, destructiveHint and idempotentHint derived from its HTTP method. No idempotency keys for POST (14 of 20). Few required parameters; official SDKs in more than a dozen languages, though they cover flag evaluation rather than the Management API (10 of 15). 5+14+12+14+10 = 55.
- Security & auth 65 (checked 2026-11-06): OAuth for interactive MCP clients with Flagsmith as the authorisation server, Organisation API keys in the Authorization header that act as admin or with chosen RBAC roles, and OIDC trust relationships that swap a CI token for a short-lived one. Granular key roles need Scale-Up or Enterprise, so a Free key is all-powerful (25 of 30). RBAC roles can limit a key to reads, and change requests put a flag change through approval on Scale-Up and Enterprise. There is no read-only switch on the MCP server itself (14 of 20). No prompt-injection guidance; tools return names, descriptions and trait values written by people (3 of 15). Audit logs record every admin action and stream by webhook, on Scale-Up and Enterprise (11 of 15). The docs say Flagsmith has a SOC 2 Type 2 report available on request, the terms promise a yearly third-party penetration test, and SECURITY.md routes reports to support email. No security.txt, bug bounty or public advisory process was found (12 of 20). 25+14+3+11+12 = 65.
- Payments & pricing 40 (checked 2026-11-06): No x402, MPP or L402 (0). Plan prices and the per-million overage are public without login, though the page gives two overage rates for Start-Up ($50 per million and $7 per 100,000) (20). A $0 Free plan with 50,000 requests a month and a free BSD-3-Clause self-hosted edition. The pricing page doesn't say whether a card is needed, but the Free plan has no charge and the self-hosted edition needs no account (20). A person signs up in a browser, then approves OAuth or creates a key (0). 0+20+20+0 = 40.
- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.
- Maintenance & community 83 (checked 2026-11-06): v2.290.0 was released on 5 November 2026 (30). 34 tagged releases between 8 August and 5 November (20). Commits land daily (60 since 8 August in the 60-commit clone), with a Discord server and support email. We couldn't read issue response times because GitHub's API refused us for its rate limit (15 of 25). Not in the official MCP registry, which returned no Flagsmith entry; official SDKs are current (8 of 15). Renovate updates, CI workflows for the API, frontend, docs and MCP, and a Trivy scan (10). 30+20+15+8+10 = 83.
- Transparency & trust 77 (checked 2026-11-06): BSD-3-Clause for the core and the MCP server; the about page says most of the product is under that licence and some CI runs with private packages, so not every Cloud feature is in the open repository (25 of 30). The terms set Flagsmith as processor with 48-hour breach notice and EEA transfer rules, and the sub-processor list is dated 13 October 2025. The privacy policy dates from October 2023 and states no retention periods (16 of 30). The Gram-hosted MCP server was retired with a dated notice (30 June 2026), and three spec operations are marked deprecated, without a stated deprecation policy (10 of 20). The sub-processor list names providers and their countries (16 of 20). 25+16+10+16 = 67.

Fix list, everything this grade says the listing lacks, the biggest gain first (17 items). What it covers is at https://www.anchorterminal.com/fixes/flagsmith.md (JSON https://www.anchorterminal.com/fixes/flagsmith.json). The whole list for a coding agent comes from `POST https://www.anchorterminal.com/api/v1/fix-list` with `{"listing": "flagsmith", "plan": "read"}`, free while the beta runs

### What we couldn't check

- Disclosure. On 6 November 2026 we read https://status.flagsmith.com/api/v2/incidents.json and components.json before reading robots.txt, which disallows /api/ on that host. The two incidents were then confirmed on the allowed /history page.
- unchecked: GitHub issue and pull request response times, because the GitHub API refused us for its rate limit
- The pricing page gives two overage prices for Start-Up ($50 per million in the grid, $7 per 100,000 in the FAQ)
- Whether the Free plan needs a card at signup isn't stated on the pricing page
- The 28 October 2026 outage's start time and cause aren't posted
- Which Cloud capabilities rely on the private packages referenced in CI wasn't established

### Sources

- MCP server docs: <https://docs.flagsmith.com/integrating-with-flagsmith/mcp-server> (seen 2026-11-06)
- MCP server source: <https://github.com/Flagsmith/flagsmith/tree/main/mcp> (seen 2026-11-06)
- OpenAPI spec: <https://github.com/Flagsmith/flagsmith/blob/main/openapi.yaml> (seen 2026-11-06)
- Management API authentication: <https://docs.flagsmith.com/integrating-with-flagsmith/flagsmith-api-overview/management-api/authentication> (seen 2026-11-06)
- system limits: <https://docs.flagsmith.com/administration-and-security/governance-and-compliance/system-limits> (seen 2026-11-06)
- status history: <https://status.flagsmith.com/history> (seen 2026-11-06)
- pricing: <https://www.flagsmith.com/pricing> (seen 2026-11-06)
- SLA: <https://www.flagsmith.com/service-level-agreement> (seen 2026-11-06)
- terms of service: <https://www.flagsmith.com/terms-of-service> (seen 2026-11-06)
- privacy policy: <https://www.flagsmith.com/privacy-policy> (seen 2026-11-06)
- sub-processor list: <https://www.flagsmith.com/gdpr-sub-processor-list> (seen 2026-11-06)
- changelog: <https://github.com/Flagsmith/flagsmith/blob/main/CHANGELOG.md> (seen 2026-11-06)
- security FAQ: <https://docs.flagsmith.com/support/faq/security-compliance> (seen 2026-11-06)

## Score history

Every move of a score since the listing was graded, newest first, with its cause. A score can't move without an entry here. JSON: https://www.anchorterminal.com/api/v1/tools/flagsmith/history.json

- 2026-11-06: graded 61.2 C (methodology 0.7)

## Who's behind it (provenance 86/100, checked 2026-11-06)

| Check | Finding | Points |
| --- | --- | --- |
| Legal entity named | Bullet Train Ltd | 20/20 |
| Domain age | flagsmith.com, registered 2018-03-01 (8 years) | 11/15 |
| Endpoint on the vendor's domain | mcp.flagsmith.com | 15/15 |
| Terms of service | read, states 5 of the 7 things a reader expects | 8.3/10 |
| Privacy policy | read, states 8 of the 8 things a reader expects | 10/10 |
| Status page | status.flagsmith.com | 10/10 |
| Changelog | published | 10/10 |
| security.txt | not found | 0/10 |
| People named | 2 named with their role, 1 with a public profile | 10/10 |
| Support route | a support address, help pages, a community | 5/5 |

The terms of service name Bullet Train Limited trading as Flagsmith, company number 12353266, registered at 66 Paul St, London, under the laws of England and Wales. Companies House lists the company with five active officers.

The privacy policy was last updated in October 2023; the GDPR sub-processor list is dated 13 October 2025.

www.flagsmith.com/robots.txt disallows only sign-up, login and similar paths. docs.flagsmith.com has no robots.txt. The terms contain no clause on automated access that we found.

www.flagsmith.com/.well-known/security.txt returned 404. SECURITY.md in the repository asks for reports to support@flagsmith.com.

RDAP gives flagsmith.com a registration date of 1 March 2018.

### Terms and privacy, as read

A reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.

**Terms of service** (https://www.flagsmith.com/terms-of-service), read 2026-11-06, dated 2026-09-01, states 5 of the 7 things a reader expects.

- Gives the date it was last updated. Last updated 2026-09-01.
- Names the governing law or courts. Disputes go to the courts of England and Wales.
- States a limit on its liability. Capped at the fees paid in the 12 months before the claim.
- Not found in the text. Says how changes to the terms are announced.
- Not found in the text. Lists what users may not do.

**Privacy policy** (https://www.flagsmith.com/privacy-policy), read 2026-11-06, dated 2023-10-01, states 8 of the 8 things a reader expects.

- To know. Has not been updated for three years or more. "The contents of our Privacy Policy may change from time to time. Please check it now and again so you are aware of any updates. This Privacy Notice was last updated in October 2023."
- Gives the date it was last updated. Last updated 2023-10-01.
- Says how long data is kept. For as long as needed, with no period named.
- Gives a privacy contact. privacy@flagsmith.com.

## Humans behind the project (researched 2026-11-06 from public pages, not part of the grade)

### Key people

- Ben Rometsch, Co-founder, director and company secretary. LinkedIn: https://www.linkedin.com/in/benrometsch/
- Matthew Evans, Director
- Note: Companies House lists Bullet Train Ltd (12353266) with directors Benjamin Simon Rometsch and Matthew William Evans, appointed 9 December 2019, and two directors appointed on 25 September 2020. Flagsmith's author page for Ben Rometsch, read 6 November 2026, gives him as Co-Founder at Flagsmith and links his LinkedIn, and his blog byline calls him Flagsmith co-founder; the other co-founders aren't named on the pages read, so Matthew Evans is listed as director only. The about page says Flagsmith started as a side project while the founders ran an agency and that it has chosen to bootstrap without venture capital, so no investors, total raised or valuation are listed.
- Bullet Train Ltd: X https://x.com/getflagsmith GitHub https://github.com/Flagsmith

### Getting support

- Discord: https://discord.gg/hFhxNtXzgm
- Support email: support@flagsmith.com
- Help: https://docs.flagsmith.com/support
- Help: https://status.flagsmith.com
- Community (GitHub issues): https://github.com/Flagsmith/flagsmith/issues
- Sources: https://find-and-update.company-information.service.gov.uk/company/12353266/officers, https://www.flagsmith.com/about-us, https://www.flagsmith.com/terms-of-service, https://github.com/Flagsmith/flagsmith/blob/main/SECURITY.md, https://www.flagsmith.com/interviewers/ben-rometsch, https://www.flagsmith.com/blog/founding-a-remote-first-company-the-beautiful-game

## Live (updated 2026-11-07 17:49 UTC)

- Right now: up, HTTP 401, 23 ms, checked 2026-11-07 17:49 UTC (get on `https://mcp.flagsmith.com`, asks for auth)
- Uptime 24h 100.0% (195 probes) · 30 days 100.0% (195 probes) · p50 27 ms · p95 103 ms
- Vendor status page: no problems reported, All Systems Operational
- github `Flagsmith/flagsmith` v2.290.0, released 2026-11-05
- npm `flagsmith` 10.0.0
- pypi `flagsmith` 6.5.0, released 2026-11-06
- security.txt: none
- Watching changelog <https://raw.githubusercontent.com/Flagsmith/flagsmith/main/CHANGELOG.md>
- Watching privacy <https://www.flagsmith.com/privacy-policy>
- Watching terms <https://www.flagsmith.com/terms-of-service>
- Tools: the endpoint asks for credentials before listing them (checked 2026-11-07 01:44 UTC)
- Always current: https://www.anchorterminal.com/api/v1/live/flagsmith.json

## Probe metrics

Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.

## Prices

| Item | Price | Unit | Note |
| --- | --- | --- | --- |
| Start-Up plan | $45 | per month (plan) | 1,000,000 requests and 3 team members; $40 a month billed yearly |
| Scale-Up plan | $300 | per month (plan) | 5,000,000 requests and 5 team members; $250 a month billed yearly |
| Extra API calls | $0.05 | per 1,000 requests | From $50 per million, lower with volume |
| Extra Scale-Up team member | $50 | per seat per month | Up to 20 members |

Across all listings: https://www.anchorterminal.com/prices/index.md

## Strengths

- Hosted MCP server at mcp.flagsmith.com with OAuth or an Organisation API key, and a stdio option for local use
- Each of the 54 MCP tools has readOnlyHint, destructiveHint and idempotentHint set from its HTTP method
- Public SLA of 99.95 per cent monthly uptime with service credits, and a status page with component history
- BSD-3-Clause source with a free self-hosted edition and 34 tagged releases in the last 90 days
- OIDC trust relationships let CI jobs get short-lived Management API tokens without stored secrets

## Weaknesses

- The MCP docs call the server an early release, and experiment tools are marked beta
- 54 tools load at once, with no toolsets or read-only mode on the server
- Granular API key roles, change requests and audit logs need Scale-Up or Enterprise
- No llms.txt, no documented 429 handling, and few documented error responses in the spec
- Self-hosted installs send a usage heartbeat by default through a flag the docs don't mention



## Before you call it (notes for agents)

1. Send the key as `Authorization: Api-Key <key>`; the `Api-Key ` prefix is required and a bare key fails
2. Check whether the environment uses v2 feature versioning before choosing between segment-override and version-state tools
3. Use a key with a read-only RBAC role for analysis tasks, since a Free plan key has organisation admin rights
4. Pace Management API calls under 500 a minute; no Retry-After guidance is documented
5. Treat experiment results as possibly null until Flagsmith has computed them

## Connect

First request:

```bash
curl -H "Authorization: Api-Key $FLAGSMITH_ORG_KEY" https://api.flagsmith.com/api/v1/projects/
```

Claude Code:

```bash
claude mcp add --transport http flagsmith https://mcp.flagsmith.com
```

MCP client configuration:

```json
{
  "mcpServers": {
    "flagsmith": {
      "headers": {
        "Authorization": "Api-Key \u003cyour-api-key\u003e"
      },
      "url": "https://mcp.flagsmith.com"
    }
  }
}
```

Through letme: https://letme.dev/flagsmith. letme answers with the pick and how to call it direct. How it works: https://www.anchorterminal.com/letme/index.md

## Similar tools

Ranked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.

| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |
| --- | --- | --- | --- | --- | --- | --- |
| Statsig | BB | 72.4 | 127 | analytics.experiments, analytics.flags, analytics.events | no | https://www.anchorterminal.com/tools/statsig.md |
| Amplitude | B | 69.3 | 249 | analytics.experiments, analytics.flags, analytics.events | no | https://www.anchorterminal.com/tools/amplitude.md |
| Harness Feature Management & Experimentation | B | 69.2 | 257 | analytics.flags, analytics.experiments, analytics.events | no | https://www.anchorterminal.com/tools/harness-fme.md |
| GrowthBook | B | 68.6 | 278 | analytics.experiments, analytics.flags, analytics.events | no | https://www.anchorterminal.com/tools/growthbook.md |
| PostHog | B | 67.4 | 327 | analytics.events, analytics.experiments, analytics.flags | no | https://www.anchorterminal.com/tools/posthog.md |
| Mixpanel | B | 62 | 577 | analytics.events, analytics.experiments, analytics.flags | no | https://www.anchorterminal.com/tools/mixpanel.md |

## Panel reviews (0)

Reviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .

Desk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md

## Notable

- The MCP server is generated from the Management API's OpenAPI spec, exposing the 54 operations tagged `mcp` (47 core, 7 enterprise), each with readOnlyHint, destructiveHint and idempotentHint set from its HTTP method (source: <https://github.com/Flagsmith/flagsmith/blob/main/mcp/src/flagsmith_mcp/server.py>)
- The MCP docs call the server an early release and say the previous Gram-hosted server at app.getgram.ai was shut down on 30 June 2026 (source: <https://docs.flagsmith.com/integrating-with-flagsmith/mcp-server>)
- Management API limited to 500 requests a minute by default; SDK flag requests are not rate limited (source: <https://docs.flagsmith.com/administration-and-security/governance-and-compliance/system-limits>)
- Public SLA with a 99.95 per cent monthly uptime commitment and service credits of 10 and 30 per cent (source: <https://www.flagsmith.com/service-level-agreement>)
- 34 tagged releases between 8 August and 5 November 2026, the newest v2.290.0 on 5 November (source: <https://github.com/Flagsmith/flagsmith/blob/main/CHANGELOG.md>)
- Experiments, metrics and experiment results are in beta in the MCP tool list (source: <https://docs.flagsmith.com/integrating-with-flagsmith/mcp-server>)

- #12 of 18 in Best product analytics and experimentation tools for AI agents: https://www.anchorterminal.com/best/product-analytics/index.md
- All 153 product analytics comparisons: https://www.anchorterminal.com/compare/product-analytics/index.md

## Compare

- [Amplitude vs Flagsmith](https://www.anchorterminal.com/compare/amplitude-vs-flagsmith.md): B 69.3 vs C 61.2
- [Countly vs Flagsmith](https://www.anchorterminal.com/compare/countly-vs-flagsmith.md): E 38.8 vs C 61.2
- [Flagsmith vs GrowthBook](https://www.anchorterminal.com/compare/flagsmith-vs-growthbook.md): C 61.2 vs B 68.6
- [Flagsmith vs Harness Feature Management & Experimentation](https://www.anchorterminal.com/compare/flagsmith-vs-harness-fme.md): C 61.2 vs B 69.2
- [Flagsmith vs LaunchDarkly](https://www.anchorterminal.com/compare/flagsmith-vs-launchdarkly.md): C 61.2 vs BB 71.3
- [Flagsmith vs Mixpanel](https://www.anchorterminal.com/compare/flagsmith-vs-mixpanel.md): C 61.2 vs B 62
- [Flagsmith vs Optimizely Experimentation](https://www.anchorterminal.com/compare/flagsmith-vs-optimizely.md): C 61.2 vs B 64.9
- [Flagsmith vs PostHog](https://www.anchorterminal.com/compare/flagsmith-vs-posthog.md): C 61.2 vs B 67.4
- [Flagsmith vs Statsig](https://www.anchorterminal.com/compare/flagsmith-vs-statsig.md): C 61.2 vs BB 72.4
- [Flagsmith vs Fullstory](https://www.anchorterminal.com/compare/flagsmith-vs-fullstory.md): C 61.2 vs B 63.3
- [Flagsmith vs Heap](https://www.anchorterminal.com/compare/flagsmith-vs-heap.md): C 61.2 vs D 48.2
- [Flagsmith vs OpenPanel](https://www.anchorterminal.com/compare/flagsmith-vs-openpanel.md): C 61.2 vs C 61
- [Flagsmith vs Woopra](https://www.anchorterminal.com/compare/flagsmith-vs-woopra.md): C 61.2 vs E 44.4
- [Flagsmith vs Matomo](https://www.anchorterminal.com/compare/flagsmith-vs-matomo.md): C 61.2 vs C 61.7
- [Flagsmith vs Mostly Good Metrics](https://www.anchorterminal.com/compare/flagsmith-vs-mostly-good-metrics.md): C 61.2 vs E 41.7

## Verify this listing

For the vendor. The badge or a plain link to this page verifies the listing, from a page on flagsmith.com or one of its subdomains, or the README at the root of github.com/Flagsmith/flagsmith. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{"slug": "flagsmith", "url": "…"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify

HTML badge:

```html
<a href="https://www.anchorterminal.com/tools/flagsmith"><img src="https://www.anchorterminal.com/badges/flagsmith.svg" alt="Flagsmith on Anchor Terminal" height="20"></a>
```

Markdown badge, for a README:

```markdown
[![Flagsmith on Anchor Terminal](https://www.anchorterminal.com/badges/flagsmith.svg)](https://www.anchorterminal.com/tools/flagsmith)
```

Plain link:

```html
<a href="https://www.anchorterminal.com/tools/flagsmith">Flagsmith on Anchor Terminal</a>
```

## Share this listing

For the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Flagsmith is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.

- Dark: https://www.anchorterminal.com/assets/share/flagsmith-dark.png
- Light: https://www.anchorterminal.com/assets/share/flagsmith-light.png

---

Query this catalogue directly over MCP: https://www.anchorterminal.com/mcp (Streamable HTTP, no key). How: https://www.anchorterminal.com/agents/#mcp
