{ "data": { "similar": [ { "grade": "B", "json": "https://www.anchorterminal.com/tools/wikimedia.json", "name": "Wikimedia REST API", "score": 66.5, "shared": [ "data.knowledge" ], "slug": "wikimedia" }, { "grade": "C", "json": "https://www.anchorterminal.com/tools/diffbot.json", "name": "Diffbot", "score": 54.3, "shared": [ "data.knowledge" ], "slug": "diffbot" }, { "grade": "BB", "json": "https://www.anchorterminal.com/tools/coingecko-x402-api.json", "name": "CoinGecko x402 API", "score": 71.7, "shared": null, "slug": "coingecko-x402-api" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/massive.json", "name": "Massive (formerly Polygon.io)", "score": 69.8, "shared": null, "slug": "massive" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/open-meteo.json", "name": "Open-Meteo", "score": 63.4, "shared": null, "slug": "open-meteo" }, { "grade": "C", "json": "https://www.anchorterminal.com/tools/openbb.json", "name": "OpenBB", "score": 60.3, "shared": null, "slug": "openbb" } ], "tool": { "slug": "getty-images-mcp", "name": "Getty Images MCP Server", "vendor": "Getty Images", "vendorUrl": "https://www.gettyimages.com", "kind": "mcp", "category": "data-providers", "summary": "The Getty Images MCP Server is a remote MCP server from Getty Images that lets AI assistants and agents search, read metadata for and download the creative, editorial and archival images and video in a customer's Getty Images agreement.", "url": "https://www.anchorterminal.com/tools/getty-images-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/getty-images-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/getty-images-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/getty-images-mcp.json", "license": "Proprietary hosted service, available under a Getty Images agreement and Getty's Web Service Terms, which aren't published. Content is licensed under the Getty Images content licence agreement (last updated April 2026) unless the customer's agreement says otherwise", "transports": [], "remoteUrl": "https://mcp.gettyimages.com/v1", "packages": [], "auth": "oauth", "authNotes": "Needs an API key and secret tied to a Getty Images agreement, issued by the customer's Getty account representative after the Web Service Terms are accepted; there is no self-serve key. The developer page says the agent uses the OAuth 2.0 client credentials or authorisation code grant to get a token. The authorisation server metadata at mcp.gettyimages.com gives the authorisation code, client credentials and refresh token grants, PKCE S256, client_secret_basic and client_secret_post, and no scopes, dynamic client registration or revocation endpoint. Getty's API docs say access tokens last at most 30 minutes, refresh tokens are long-lived and revocable, and token requests count against the rate limit. Unauthenticated calls to the MCP endpoint answer 401 with no WWW-Authenticate header; the protected-resource metadata sits at /.well-known/oauth-protected-resource/v1 (https://developer.gettyimages.com/mcp/, https://mcp.gettyimages.com/.well-known/oauth-authorization-server, https://developer.gettyimages.com/docs/authorization/, checked 2026-10-27).", "pricing": "paid", "pricingNotes": "No price is published. The MCP server needs an active Getty Images agreement such as Premium Access or an Editorial Subscription, which are priced through sales, and the MCP page's only route in is a contact-sales form. Search and downloads draw on the customer's agreement. Getty's API page says prospective customers can contact Getty for a test account; no self-serve trial or free tier for the MCP server was found (https://www.gettyimages.com/ai/mcp, https://www.gettyimages.com/enterprise/premium-access, https://www.gettyimages.com/api, checked 2026-10-27).", "priceSummary": "Paid", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on the MCP page, the developer MCP page, the API docs or the OAuth metadata. Unauthenticated MCP calls answer 401 with `{\"message\":\"Unauthorized\"}`, not a payment request (checked 2026-10-27).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-27" }, "docsUrl": "https://developer.gettyimages.com/mcp/", "capabilities": [ "data.knowledge" ], "tags": [ "official", "hosted", "remote-mcp", "mcp", "closed-source", "oauth", "paid", "sales-led", "enterprise", "status-page", "images", "new" ], "lastRelease": "2026-08-12", "graded": true, "anchor": { "graded": true, "score": 32.4, "grade": "F", "agentReady": false, "rank": 1136, "ranked": true, "rankOf": 1217, "categoryRank": 13, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 24, "maintenance": 28, "payments": 0, "reliability": 50, "schema": 19, "security": 40, "transparency": 68 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 50, "points": 10, "reason": "Graded with the hosted lines, on the remote MCP server. Getty keeps a dated status and notifications page on the developer site for the API and websites, with posts back to 2023 but no components and no mention of the MCP server. Judgement call, 10 of 20 for a page that doesn't name the surface graded, as for Functionize. From 29 July to 27 October 2026 it records one incident, 500 errors across the API and websites from about 05.45 to 08.20 Pacific time on 27 August, which is a major outage by the checklist (10). The developer page gives 20 queries a second for the MCP server (15). The API docs show the 429 response and its error detail for the per-second limit, with no Retry-After, backoff or idempotency guidance; downloads are POST calls (5 of 15). No SLA found (0). The release of 12 August 2026 calls it launched and nothing labels it beta, though the developer page says tools will change in the coming months (10). Total 50.", "checked": "2026-10-27" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 19, "points": 3.09, "reason": "No machine-readable contract for the MCP tools could be read. `tools/list` answers 401 without credentials and no tool list, server card or source is published. The REST API the catalogue also sits behind has a public OpenAPI 3.0.4 file of 66 paths covering search, metadata and downloads, but how the tools map to it isn't documented. Judgement call, 8 of 25. No llms.txt (404 on both hosts) and no Markdown docs (0). The developer page names four jobs (authentication, search, metadata, download) with no per-tool descriptions or guidance on when not to use them (3 of 20). Typed inputs unread (0 of 15). No MCP examples; the API docs show the 401 and 429 responses (3 of 15). The endpoint carries /v1 and the API has dated release notes, with no MCP entry (5 of 15). Total 19.", "checked": "2026-10-27" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 24, "points": 3.9, "reason": "Graded on the MCP server without reading its tools. The tool count isn't published; the developer page names four jobs, which suggests a small set, but neither count nor size was checked, so 10 of 25. The REST API has field selection (summary_set, detail_set, named fields), paging and many search filters, but whether the tools expose them is unchecked (5 of 20). The MCP endpoint's 401 carries no WWW-Authenticate header, and the API's documented errors are the 401 body and the 429 message (4 of 20). No idempotency guidance and annotations unread; downloads draw on the customer's agreement, so a repeated download isn't free of consequence (0 of 20). Official SDKs and samples exist for the REST API, none for the MCP server, and a token must be fetched with a key and secret first (5 of 15). Total 24.", "checked": "2026-10-27" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 40, "points": 7, "reason": "OAuth 2.0 with an API key and secret per customer, tied to the agreement and issued by Getty. The metadata lists the authorisation code grant with PKCE S256, client credentials and refresh tokens, with tokens of at most 30 minutes per the API docs and refresh tokens Getty or the user can revoke. No scopes, dynamic client registration or revocation endpoint are published, and the client credentials token reaches the whole agreement. Secrets go in the body or a Basic header, not a URL (20 of 30). The jobs are search, metadata and download; no read-only mode or confirmation for downloads was found (5 of 20). Results carry captions, titles and keywords written by contributors, and Getty says AI may help draft captions with human review. No prompt-injection guidance (5 of 15). The API exposes download and purchase history per account, which gives some per-call visibility; no MCP audit log found (5 of 15). security.txt is valid with a contact and expiry only; no bug bounty, certification or public advisories found (5 of 20). Total 40.", "checked": "2026-10-27" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 0, "points": 0, "reason": "No x402, MPP or L402 (0). No price is published for the MCP server or for the Premium Access and Editorial Subscription agreements it needs; the route in is a contact-sales form (0). No free tier or self-serve trial; the API page says a test account is available on request (0). A person has to hold a Getty agreement and get credentials from an account representative (0). Total 0.", "checked": "2026-10-27" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "note": "data quality 56, half of this category once the task suite runs", "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 28, "points": 2.45, "reason": "Read as a closed hosted service. The MCP server launched on 12 August 2026, 76 days ago, and the developer page's sitemap date is the same day (20). No dated MCP change since the launch; the API release notes' newest entry is 2 March 2026 (0 of 20). The API has a public release notes page, Getty says sales and technical support teams work around the clock, and MCP feedback goes through account representatives (5 of 15). Not in the official MCP registry (searches for getty and gettyimages returned nothing on 27 October 2026) (0). No package for the server; Getty's public sample-code repository for the REST API was updated to .NET 10 in April 2026 and last changed on 30 September 2026 (3 of 10). Total 28.", "checked": "2026-10-27" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 68, "points": 5.95, "note": "editorial 35, provenance 100", "reason": "The editorial half. A closed service. The website terms (August 2025) and the content licence agreement (April 2026) are public and state the AI limits plainly, but the Web Service Terms that govern MCP access aren't published (10 of 30). The privacy policy (March 2026) states general retention, primary data centres in the United States, the US affiliates data may go to, Data Privacy Framework adherence and Standard Contractual Clauses. Nothing says what the MCP server logs from queries, and the website terms give Getty a licence to use search terms for any business purpose on the site (12 of 30). No deprecation policy. The API release notes give some dated notices, such as the order_id change of 2 March 2026, and the developer page warns tools will change without saying how (5 of 20). Data locations stated in general terms and affiliates named, with no subprocessor list (8 of 20). Total 35.", "checked": "2026-10-27" } ], "assessment": { "date": "2026-10-27", "basis": "public evidence", "confidence": "low", "notes": { "ergonomics": "Graded on the MCP server without reading its tools. The tool count isn't published; the developer page names four jobs, which suggests a small set, but neither count nor size was checked, so 10 of 25. The REST API has field selection (summary_set, detail_set, named fields), paging and many search filters, but whether the tools expose them is unchecked (5 of 20). The MCP endpoint's 401 carries no WWW-Authenticate header, and the API's documented errors are the 401 body and the 429 message (4 of 20). No idempotency guidance and annotations unread; downloads draw on the customer's agreement, so a repeated download isn't free of consequence (0 of 20). Official SDKs and samples exist for the REST API, none for the MCP server, and a token must be fetched with a key and secret first (5 of 15). Total 24.", "maintenance": "Read as a closed hosted service. The MCP server launched on 12 August 2026, 76 days ago, and the developer page's sitemap date is the same day (20). No dated MCP change since the launch; the API release notes' newest entry is 2 March 2026 (0 of 20). The API has a public release notes page, Getty says sales and technical support teams work around the clock, and MCP feedback goes through account representatives (5 of 15). Not in the official MCP registry (searches for getty and gettyimages returned nothing on 27 October 2026) (0). No package for the server; Getty's public sample-code repository for the REST API was updated to .NET 10 in April 2026 and last changed on 30 September 2026 (3 of 10). Total 28.", "payments": "No x402, MPP or L402 (0). No price is published for the MCP server or for the Premium Access and Editorial Subscription agreements it needs; the route in is a contact-sales form (0). No free tier or self-serve trial; the API page says a test account is available on request (0). A person has to hold a Getty agreement and get credentials from an account representative (0). Total 0.", "reliability": "Graded with the hosted lines, on the remote MCP server. Getty keeps a dated status and notifications page on the developer site for the API and websites, with posts back to 2023 but no components and no mention of the MCP server. Judgement call, 10 of 20 for a page that doesn't name the surface graded, as for Functionize. From 29 July to 27 October 2026 it records one incident, 500 errors across the API and websites from about 05.45 to 08.20 Pacific time on 27 August, which is a major outage by the checklist (10). The developer page gives 20 queries a second for the MCP server (15). The API docs show the 429 response and its error detail for the per-second limit, with no Retry-After, backoff or idempotency guidance; downloads are POST calls (5 of 15). No SLA found (0). The release of 12 August 2026 calls it launched and nothing labels it beta, though the developer page says tools will change in the coming months (10). Total 50.", "schema": "No machine-readable contract for the MCP tools could be read. `tools/list` answers 401 without credentials and no tool list, server card or source is published. The REST API the catalogue also sits behind has a public OpenAPI 3.0.4 file of 66 paths covering search, metadata and downloads, but how the tools map to it isn't documented. Judgement call, 8 of 25. No llms.txt (404 on both hosts) and no Markdown docs (0). The developer page names four jobs (authentication, search, metadata, download) with no per-tool descriptions or guidance on when not to use them (3 of 20). Typed inputs unread (0 of 15). No MCP examples; the API docs show the 401 and 429 responses (3 of 15). The endpoint carries /v1 and the API has dated release notes, with no MCP entry (5 of 15). Total 19.", "security": "OAuth 2.0 with an API key and secret per customer, tied to the agreement and issued by Getty. The metadata lists the authorisation code grant with PKCE S256, client credentials and refresh tokens, with tokens of at most 30 minutes per the API docs and refresh tokens Getty or the user can revoke. No scopes, dynamic client registration or revocation endpoint are published, and the client credentials token reaches the whole agreement. Secrets go in the body or a Basic header, not a URL (20 of 30). The jobs are search, metadata and download; no read-only mode or confirmation for downloads was found (5 of 20). Results carry captions, titles and keywords written by contributors, and Getty says AI may help draft captions with human review. No prompt-injection guidance (5 of 15). The API exposes download and purchase history per account, which gives some per-call visibility; no MCP audit log found (5 of 15). security.txt is valid with a contact and expiry only; no bug bounty, certification or public advisories found (5 of 20). Total 40.", "transparency": "The editorial half. A closed service. The website terms (August 2025) and the content licence agreement (April 2026) are public and state the AI limits plainly, but the Web Service Terms that govern MCP access aren't published (10 of 30). The privacy policy (March 2026) states general retention, primary data centres in the United States, the US affiliates data may go to, Data Privacy Framework adherence and Standard Contractual Clauses. Nothing says what the MCP server logs from queries, and the website terms give Getty a licence to use search terms for any business purpose on the site (12 of 30). No deprecation policy. The API release notes give some dated notices, such as the order_id change of 2 March 2026, and the developer page warns tools will change without saying how (5 of 20). Data locations stated in general terms and affiliates named, with no subprocessor list (8 of 20). Total 35." }, "sources": [ { "what": "robots.txt (www.gettyimages.com; developer, mcp and api hosts serve none)", "url": "https://www.gettyimages.com/robots.txt", "seen": "2026-10-27" }, { "what": "MCP product page and FAQ", "url": "https://www.gettyimages.com/ai/mcp", "seen": "2026-10-27" }, { "what": "launch release, 12 August 2026", "url": "https://newsroom.gettyimages.com/en/getty-images/getty-images-launches-mcp-server-to-connect-creative-and-editorial-content-to-ai-workflows-and-products", "seen": "2026-10-27" }, { "what": "developer MCP page", "url": "https://developer.gettyimages.com/mcp/", "seen": "2026-10-27" }, { "what": "developer sitemap with page dates", "url": "https://developer.gettyimages.com/sitemap.xml", "seen": "2026-10-27" }, { "what": "MCP initialize and tools/list without credentials (401)", "url": "https://mcp.gettyimages.com/v1", "seen": "2026-10-27" }, { "what": "OAuth protected-resource metadata", "url": "https://mcp.gettyimages.com/.well-known/oauth-protected-resource/v1", "seen": "2026-10-27" }, { "what": "OAuth authorisation server metadata", "url": "https://mcp.gettyimages.com/.well-known/oauth-authorization-server", "seen": "2026-10-27" }, { "what": "API technical documentation (keys, throttling, fields)", "url": "https://developer.gettyimages.com/docs/", "seen": "2026-10-27" }, { "what": "API authorisation docs", "url": "https://developer.gettyimages.com/docs/authorization/", "seen": "2026-10-27" }, { "what": "API getting started", "url": "https://developer.gettyimages.com/docs/gettingstarted/", "seen": "2026-10-27" }, { "what": "API release notes", "url": "https://developer.gettyimages.com/release-notes/", "seen": "2026-10-27" }, { "what": "status and notifications", "url": "https://developer.gettyimages.com/status/", "seen": "2026-10-27" }, { "what": "REST API OpenAPI file", "url": "https://api.gettyimages.com/swagger/v3/swagger.json", "seen": "2026-10-27" }, { "what": "API integration page and FAQ", "url": "https://www.gettyimages.com/api", "seen": "2026-10-27" }, { "what": "Premium Access page", "url": "https://www.gettyimages.com/enterprise/premium-access", "seen": "2026-10-27" }, { "what": "content licence agreement, April 2026", "url": "https://www.gettyimages.com/eula", "seen": "2026-10-27" }, { "what": "website terms, August 2025", "url": "https://www.gettyimages.com/company/terms", "seen": "2026-10-27" }, { "what": "privacy policy, March 2026", "url": "https://www.gettyimages.com/company/privacy-policy", "seen": "2026-10-27" }, { "what": "editorial policy", "url": "https://www.gettyimages.com/company/editorial-policy", "seen": "2026-10-27" }, { "what": "security.txt", "url": "https://www.gettyimages.com/.well-known/security.txt", "seen": "2026-10-27" }, { "what": "sample-code repository", "url": "https://github.com/gettyimages/gettyimages-api", "seen": "2026-10-27" }, { "what": "official MCP registry search", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=getty", "seen": "2026-10-27" }, { "what": "RDAP for gettyimages.com", "url": "https://rdap.verisign.com/com/v1/domain/gettyimages.com", "seen": "2026-10-27" } ], "openQuestions": [ "unchecked: the tools as served, because `initialize` and `tools/list` answered 401 without credentials and no tool list, schema or source is published. Names, count, descriptions, inputs and annotations are unread, and so is the transport.", "unchecked: the Web Service Terms, which the MCP FAQ says must be accepted before access. No public copy was found on gettyimages.com, the developer site or by search.", "unchecked: whether the MCP server also needs the `Api-Key` header the REST API requires, or only a bearer token. The developer page says the agent finds authentication details at the endpoint, which answers 401 without a body to read.", "unchecked: whether customers on self-serve Getty subscriptions, rather than Premium Access or an Editorial Subscription, can get MCP credentials. The pages name an agreement and an account representative.", "Listed rather than held. Access runs through a Getty agreement and an account representative, but the server is generally available to existing customers and partners, with a public developer page, a live endpoint and public OAuth metadata. That is more than an announcement, by the rule for limited rollouts to customers of a product companies can buy.", "firstReleased is 12 August 2026, the release date, matching the developer page's sitemap date (12 August 2026, 08.20 Pacific). That agrees with the lead.", "Category. data-providers, the closest fit, because Getty licenses a catalogue of content and metadata behind an API and the data-quality fields record coverage, licence and reuse, which matter most here. No category or capability covers stock images and video; capability data.knowledge, as for Wikimedia, is a poor fit. search was the alternative and covers web search. Judgement call.", "Getty's claims that its library doesn't allow AI-generated content and that the server isn't a generative AI service are recorded as claims. Getty's own AI generator output is licensed separately and wasn't checked against the library.", "Getty's website terms forbid data mining and robots on the site. Recorded as a fact; only public pages that robots.txt allows were read, one request each.", "Our own products. The Getty Images MCP Server doesn't do LocalGhost's job or letme's. It reaches one vendor's licensed catalogue and chooses no tools. Graded the normal way." ] }, "negative": 0, "verdict": "The server reaches Getty Images' licensed creative and editorial catalogue through OAuth client credentials, with a published limit of 20 queries a second. Access needs a Getty agreement and credentials from an account representative, the Web Service Terms aren't public, the tools can't be read without a key, and the content licence bars AI use unless the agreement allows it.", "bestFor": "Companies that already license Getty content and want assistants or internal agents to search and download within that agreement, and for partners building Getty search into their own products.", "strengths": [ "OAuth 2.0 client credentials and authorisation code grants with PKCE S256 and 30-minute tokens, with protected-resource and authorisation server metadata published", "A published limit of 20 queries a second for the MCP server", "Search, metadata and download across creative, editorial and archival images and video, limited to what the customer's agreement covers", "A dated status and notifications page for the API with posts back to 2023, and a security.txt valid until October 2027", "The content licence states in writing what AI use is barred and what is allowed, including AI search and sorting of creative content" ], "weaknesses": [ "Access needs a Getty agreement such as Premium Access and credentials from an account representative; no self-serve sign-up, trial or published price", "Tool names, schemas and annotations aren't public; `initialize` and `tools/list` answer 401 without credentials", "The Web Service Terms a customer must accept before access aren't published", "No scopes, dynamic client registration or revocation endpoint in the authorisation server metadata", "API and websites returned 500 errors for about 2 hours 35 minutes on 27 August 2026, per Getty's status page" ], "agentNotes": [ "Ask the person for the Getty API key and secret, which only their Getty account representative can issue after the Web Service Terms are accepted", "Exchange the key and secret for a bearer token at authentication.gettyimages.com and reuse it until it expires, since token requests count against the rate limit", "Read `tools/list` at the start of each session rather than hard-coding tool names, because Getty says tools and parameters will change", "Check whether an asset is editorial before suggesting commercial use, since editorial content isn't licensed for advertising or promotion", "Don't pass downloaded images or their metadata to a model or tool that trains on inputs; the licence bars training and ends rights if an AI tool uses content for itself" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "F", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 32.4 } ], "editorialScores": { "ergonomics": 24, "maintenance": 28, "payments": 0, "reliability": 50, "schema": 19, "security": 40, "transparency": 35 }, "provenanceScore": 100, "dataQualityScore": 56, "checked": { "categories": { "ergonomics": "2026-10-27", "maintenance": "2026-10-27", "payments": "2026-10-27", "reliability": "2026-10-27", "schema": "2026-10-27", "security": "2026-10-27", "transparency": "2026-10-27" }, "last": "2026-10-27", "oldest": "2026-10-27", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-10-27", "grade": "F", "kind": "listed", "method": "0.6", "score": 32.4 } ] }, "connect": {}, "letme": { "capability": "https://letme.dev/data.knowledge", "tool": "https://letme.dev/getty-images-mcp" }, "notable": [ "Getty Images announced the MCP server on 12 August 2026 for enterprise customers, media organisations and technology partners, for image and video search and content download across creative, editorial and archival content (https://newsroom.gettyimages.com/en/getty-images/getty-images-launches-mcp-server-to-connect-creative-and-editorial-content-to-ai-workflows-and-products)", "The developer page names four jobs. Authentication by the OAuth client credentials or authorisation code grant, search for images and videos in the organisation's agreement, asset metadata, and download of image and video files. It asks agents not to hard-code tools or parameters because Getty will add and change them (https://developer.gettyimages.com/mcp/)", "Who can use it, per the developer page. Getty subscription customers, such as Premium Access and Editorial Subscription, and business partners serving their own customers from the Getty catalogue. The MCP FAQ says an active agreement and acceptance of the Web Service Terms come before access (https://www.gettyimages.com/ai/mcp)", "The MCP server is throttled at 20 queries a second (https://developer.gettyimages.com/mcp/)", "MCP `initialize` and `tools/list` sent without credentials on 27 October 2026 both answered 401 with `{\"message\":\"Unauthorized\"}` from Amazon API Gateway and no WWW-Authenticate header, so no tool was read (https://mcp.gettyimages.com/v1)", "Licensing for AI use. The Getty Images content licence agreement (last updated April 2026) bars using content, captions, keywords or other metadata for any machine learning or artificial intelligence purpose, or for identifying people, unless a Getty invoice, sales order or licence agreement authorises it. AI may be used with creative (not editorial) content only for internal archiving, searching, indexing or sorting and for permitted editing, never for training, fine-tuning or evaluating a model, including by uploading to a third-party AI tool that acquires rights. Rights end if an AI tool or platform uses the content for its own purposes. Metadata may not be used apart from the content (https://www.gettyimages.com/eula)", "Editorial content isn't licensed for commercial, promotional or advertising use unless the agreement says so, and Getty's editorial policy bars AI post-production tools in editorial content except limited retouching of staged portraits. AI may help write captions with human review (https://www.gettyimages.com/company/editorial-policy)", "Getty says the server isn't a generative AI service and that its library doesn't allow AI-generated images or video. Getty's claim, not checked (https://www.gettyimages.com/ai/mcp)", "Getty's website terms forbid data mining, robots and similar data gathering on the site. This listing read only public pages that robots.txt allows (https://www.gettyimages.com/company/terms)", "The Getty Images MCP Server doesn't do LocalGhost's job or letme's. It reaches one vendor's licensed catalogue and picks no tools" ], "area": "web-data", "details": [ { "label": "MCP endpoint", "value": "`https://mcp.gettyimages.com/v1`, behind Amazon API Gateway and CloudFront. Unauthenticated `initialize` and `tools/list` answer 401. Transport not stated in the docs" }, { "label": "OAuth", "value": "Issuer `https://authentication.gettyimages.com`. Grants authorisation code (PKCE S256), client credentials and refresh token. Client authentication by secret only. No scopes, dynamic client registration or revocation endpoint listed" }, { "label": "Tools", "value": "Not published. The developer page names search for images and videos, asset metadata and download, and asks agents to discover tools at run time" }, { "label": "Rate limit", "value": "20 queries a second on the MCP server. The REST API's limits are set per API key, and overruns answer 429 `Account Over Queries Per Second Limit`" }, { "label": "Who can use it", "value": "Customers with an active Getty agreement, such as Premium Access or an Editorial Subscription, and business partners. Key and secret from the account representative after accepting the Web Service Terms" }, { "label": "Content", "value": "Creative, editorial (news, sport, entertainment) and archival images and video, limited to the customer's agreement. Getty says 50,000 to 80,000 new images a week, mostly editorial, reach the API when they reach its websites" }, { "label": "AI use of content", "value": "Barred for machine learning or AI purposes, including metadata, unless the agreement authorises it. Creative content may be searched, indexed, sorted and edited with AI internally. No training, fine-tuning or evaluation. Rights end if an AI tool uses content for its own purposes" }, { "label": "REST API", "value": "The Getty Images API v3 at `https://api.gettyimages.com/v3/`, with an OpenAPI 3.0.4 file of 66 paths at `https://api.gettyimages.com/swagger/v3/swagger.json`. It is the older route to the same catalogue; how the MCP tools map to it isn't documented" }, { "label": "Status", "value": "Posts on developer.gettyimages.com/status/ for the API and websites, back to 2023. Last 90 days, one incident, 500 errors from about 05.45 to 08.20 Pacific time on 27 August 2026" } ], "provenance": { "legalEntity": "Getty Images Holdings, Inc.", "domain": "gettyimages.com", "domainRegistered": "1999-01-05", "endpointOnVendorDomain": true, "terms": "https://www.gettyimages.com/company/terms", "privacy": "https://www.gettyimages.com/company/privacy-policy", "statusPage": "https://developer.gettyimages.com/status/", "changelog": "https://developer.gettyimages.com/release-notes/", "securityTxt": "valid", "checked": "2026-10-27", "notes": [ "The release names Getty Images (NYSE GETY), whose listed parent is Getty Images Holdings, Inc. The privacy policy names Getty Images (US), Inc. in Seattle for privacy requests. The website terms (last updated August 2025) send disputes to arbitration in Seattle; the content licence agreement (April 2026) is under New York law.", "The Web Service Terms that the MCP FAQ requires before access weren't found on any public page, so the terms that govern the MCP server itself are unread.", "The privacy policy was last updated in March 2026.", "/.well-known/security.txt on www.gettyimages.com gives security@gettyimages.com and expires on 1 October 2027. mcp.gettyimages.com has none.", "The status page is a hand-posted notifications page on the developer site, covering the API and websites, with no components and no MCP entry.", "The release notes page has no MCP entry; its newest entry is dated 2 March 2026.", "RDAP gives a registration date of 5 January 1999 for gettyimages.com." ], "score": 100, "checks": [ { "check": "Legal entity named", "value": "Getty Images Holdings, Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "gettyimages.com, registered 1999-01-05 (27 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "mcp.gettyimages.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "Privacy policy", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "developer.gettyimages.com/status", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "valid", "points": 10, "max": 10, "state": "ok" } ] }, "dataQuality": { "coverage": "Getty Images' creative, editorial (news, sport, entertainment) and archival images and video. An agent sees only the content in the customer's agreement. Getty publishes no catalogue size for the MCP server; its pages say millions of images and videos", "coverageRating": 4, "freshness": "Getty says 50,000 to 80,000 new images are added a week, mostly editorial, and that new content reaches the API when it reaches its websites. Time from capture to publication isn't stated", "freshnessClass": "daily", "history": "Getty describes its archive as the largest digital archive of news, sport and entertainment photos. How far back the archive reaches isn't stated in the reviewed pages", "historyYears": 0, "methodology": "https://www.gettyimages.com/company/editorial-policy", "sourcesDisclosed": true, "licence": "Proprietary. Content under the Getty Images content licence agreement (April 2026) and the customer's agreement; the MCP server under Web Service Terms that aren't published", "licenceClass": "unclear", "standing": "A commercial picture agency, licensing its own and its contributors' work. No official standing", "standingClass": "none", "reuse": "The Getty Images content licence agreement (last updated April 2026) bars using content, captions, keywords or other metadata for any machine learning or artificial intelligence purpose, or for identifying people, unless a Getty invoice, sales order or licence agreement authorises it. AI may be used with creative (not editorial) content only for internal archiving, searching, indexing or sorting and for permitted editing, never for training, fine-tuning or evaluating a model, including by uploading to a third-party AI tool that acquires rights. Rights end if an AI tool or platform uses the content for its own purposes. Metadata may not be used apart from the content. Royalty-free content may be used by up to 10 people in one legal entity unless more seats are bought, and sharing rights under Premium Access end with the term. Editorial content isn't for commercial use without authorisation.", "score": 56, "checks": [ { "check": "Coverage", "value": "Getty Images' creative, editorial (news, sport, entertainment) and archival images and video. An agent sees only the content in the customer's agreement. Getty publishes no catalogue size for the MCP server; its pages say millions of images and videos (4 of 5)", "points": 20, "max": 25, "state": "part" }, { "check": "Freshness", "value": "Getty says 50,000 to 80,000 new images are added a week, mostly editorial, and that new content reaches the API when it reaches its websites. Time from capture to publication isn't stated", "points": 7, "max": 15, "state": "part" }, { "check": "History", "value": "Getty describes its archive as the largest digital archive of news, sport and entertainment photos. How far back the archive reaches isn't stated in the reviewed pages", "points": 2, "max": 15, "state": "part" }, { "check": "Methodology published", "value": "www.gettyimages.com/company/editorial-policy", "points": 15, "max": 15, "state": "ok" }, { "check": "Sources disclosed", "value": "named", "points": 10, "max": 10, "state": "ok" }, { "check": "Licence", "value": "Proprietary. Content under the Getty Images content licence agreement (April 2026) and the customer's agreement; the MCP server under Web Service Terms that aren't published", "points": 2, "max": 10, "state": "part" }, { "check": "Official standing", "value": "A commercial picture agency, licensing its own and its contributors' work. No official standing", "points": 0, "max": 10, "state": "no" } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/getty-images-mcp.json", "live": { "slug": "getty-images-mcp", "probe": { "target": "https://mcp.gettyimages.com/v1", "method": "get", "lastAt": "2026-10-27T15:15:33.663321703Z", "lastOk": true, "lastStatus": 401, "lastMs": 549, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 431, "p95ms24h": 493, "samples24h": 25, "samples30d": 25, "days": [ { "date": "2026-10-27", "probes": 25, "ok": 25 } ] }, "vendorStatus": { "page": "https://developer.gettyimages.com/status", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-27T15:02:41.940153489Z" }, "updatedAt": "2026-10-27T15:15:33.663321703Z" } }, "verify": { "accepts": "a page on gettyimages.com or one of its subdomains", "badgeUrl": "https://www.anchorterminal.com/badges/getty-images-mcp.svg", "body": { "slug": "getty-images-mcp", "url": "the page with the badge or the link" }, "docs": "https://www.anchorterminal.com/builders/#verify", "effect": "none, it never changes a grade, rank or review", "endpoint": "https://www.anchorterminal.com/api/v1/verify", "listingUrl": "https://www.anchorterminal.com/tools/getty-images-mcp", "mcpTool": "verify_listing", "recheck": "weekly; two failed checks in a row and it lapses, a later pass restores it", "snippets": { "html": "\u003ca href=\"https://www.anchorterminal.com/tools/getty-images-mcp\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/getty-images-mcp.svg\" alt=\"Getty Images MCP Server on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e", "markdown": "[![Getty Images MCP Server on Anchor Terminal](https://www.anchorterminal.com/badges/getty-images-mcp.svg)](https://www.anchorterminal.com/tools/getty-images-mcp)", "link": "\u003ca href=\"https://www.anchorterminal.com/tools/getty-images-mcp\"\u003eGetty Images MCP Server on Anchor Terminal\u003c/a\u003e" } } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/tools/getty-images-mcp", "json": "https://www.anchorterminal.com/tools/getty-images-mcp.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/tools/getty-images-mcp.md", "mcp": "https://www.anchorterminal.com/mcp", "pricing": "https://www.anchorterminal.com/tools/getty-images-mcp#pricing", "reviews": "https://www.anchorterminal.com/tools/getty-images-mcp#reviews", "slim": "https://www.anchorterminal.com/tools/getty-images-mcp.min.md" }, "markdown": "## Overview\n\n**Grade F · 32.4/100 · rank #1136 of 1217 · #13 in Data providers · not agent-ready · confidence low**\n\n\n## Assessment\n\nThe server reaches Getty Images' licensed creative and editorial catalogue through OAuth client credentials, with a published limit of 20 queries a second. Access needs a Getty agreement and credentials from an account representative, the Web Service Terms aren't public, the tools can't be read without a key, and the content licence bars AI use unless the agreement allows it.\n\n## Facts\n\n| Field | Value |\n| --- | --- |\n| Vendor | Getty Images (https://www.gettyimages.com) |\n| Kind | MCP server |\n| Category | Data providers (https://www.anchorterminal.com/categories/data-providers) |\n| Endpoint | `https://mcp.gettyimages.com/v1` |\n| Auth | OAuth · Needs an API key and secret tied to a Getty Images agreement, issued by the customer's Getty account representative after the Web Service Terms are accepted; there is no self-serve key. The developer page says the agent uses the OAuth 2.0 client credentials or authorisation code grant to get a token. The authorisation server metadata at mcp.gettyimages.com gives the authorisation code, client credentials and refresh token grants, PKCE S256, client_secret_basic and client_secret_post, and no scopes, dynamic client registration or revocation endpoint. Getty's API docs say access tokens last at most 30 minutes, refresh tokens are long-lived and revocable, and token requests count against the rate limit. Unauthenticated calls to the MCP endpoint answer 401 with no WWW-Authenticate header; the protected-resource metadata sits at /.well-known/oauth-protected-resource/v1 (https://developer.gettyimages.com/mcp/, https://mcp.gettyimages.com/.well-known/oauth-authorization-server, https://developer.gettyimages.com/docs/authorization/, checked 2026-10-27). |\n| Pricing | Paid (Paid) · No price is published. The MCP server needs an active Getty Images agreement such as Premium Access or an Editorial Subscription, which are priced through sales, and the MCP page's only route in is a contact-sales form. Search and downloads draw on the customer's agreement. Getty's API page says prospective customers can contact Getty for a test account; no self-serve trial or free tier for the MCP server was found (https://www.gettyimages.com/ai/mcp, https://www.gettyimages.com/enterprise/premium-access, https://www.gettyimages.com/api, checked 2026-10-27). |\n| x402 | No · No x402, MPP or L402 on the MCP page, the developer MCP page, the API docs or the OAuth metadata. Unauthenticated MCP calls answer 401 with `{\"message\":\"Unauthorized\"}`, not a payment request (checked 2026-10-27). |\n| Licence | Proprietary hosted service, available under a Getty Images agreement and Getty's Web Service Terms, which aren't published. Content is licensed under the Getty Images content licence agreement (last updated April 2026) unless the customer's agreement says otherwise |\n| Docs | https://developer.gettyimages.com/mcp/ |\n| llms.txt | not found |\n| Last release | 2026-08-12 |\n| MCP endpoint | `https://mcp.gettyimages.com/v1`, behind Amazon API Gateway and CloudFront. Unauthenticated `initialize` and `tools/list` answer 401. Transport not stated in the docs |\n| OAuth | Issuer `https://authentication.gettyimages.com`. Grants authorisation code (PKCE S256), client credentials and refresh token. Client authentication by secret only. No scopes, dynamic client registration or revocation endpoint listed |\n| Tools | Not published. The developer page names search for images and videos, asset metadata and download, and asks agents to discover tools at run time |\n| Rate limit | 20 queries a second on the MCP server. The REST API's limits are set per API key, and overruns answer 429 `Account Over Queries Per Second Limit` |\n| Who can use it | Customers with an active Getty agreement, such as Premium Access or an Editorial Subscription, and business partners. Key and secret from the account representative after accepting the Web Service Terms |\n| Content | Creative, editorial (news, sport, entertainment) and archival images and video, limited to the customer's agreement. Getty says 50,000 to 80,000 new images a week, mostly editorial, reach the API when they reach its websites |\n| AI use of content | Barred for machine learning or AI purposes, including metadata, unless the agreement authorises it. Creative content may be searched, indexed, sorted and edited with AI internally. No training, fine-tuning or evaluation. Rights end if an AI tool uses content for its own purposes |\n| REST API | The Getty Images API v3 at `https://api.gettyimages.com/v3/`, with an OpenAPI 3.0.4 file of 66 paths at `https://api.gettyimages.com/swagger/v3/swagger.json`. It is the older route to the same catalogue; how the MCP tools map to it isn't documented |\n| Status | Posts on developer.gettyimages.com/status/ for the API and websites, back to 2023. Last 90 days, one incident, 500 errors from about 05.45 to 08.20 Pacific time on 27 August 2026 |\n| Capabilities | data.knowledge |\n| Tags | official, hosted, remote-mcp, mcp, closed-source, oauth, paid, sales-led, enterprise, status-page, images, new |\n| JSON | https://www.anchorterminal.com/api/v1/tools/getty-images-mcp.json |\n\n## Score breakdown (methodology v0.6, October 2026 research run)\n\nAssessed 2026-10-27 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: low. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. \"This run\" is each category's share of the 100 points.\n\n| Category | Weight | This run | Score (0–100) | Points |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% | 20 | 50 | 10.0 |\n| Performance | 10% | pending | pending | n/a |\n| Schema \u0026 documentation | 13% | 16.2 | 19 | 3.1 |\n| Agent ergonomics | 13% | 16.2 | 24 | 3.9 |\n| Security \u0026 auth | 14% | 17.5 | 40 | 7.0 |\n| Payments \u0026 pricing | 10% | 12.5 | 0 | 0.0 |\n| Task success | 10% | pending | pending | n/a |\n| Maintenance \u0026 community | 7% | 8.8 | 28 | 2.5 |\n| Transparency \u0026 trust (editorial 35, provenance 100) | 7% | 8.8 | 68 | 6.0 |\n| Negative events | up to −15 | up to −15 | none recorded | 0 |\n| **Total** | | | | **32.4 → F** |\n\n### Why each score\n\n- Reliability 50 (checked 2026-10-27): Graded with the hosted lines, on the remote MCP server. Getty keeps a dated status and notifications page on the developer site for the API and websites, with posts back to 2023 but no components and no mention of the MCP server. Judgement call, 10 of 20 for a page that doesn't name the surface graded, as for Functionize. From 29 July to 27 October 2026 it records one incident, 500 errors across the API and websites from about 05.45 to 08.20 Pacific time on 27 August, which is a major outage by the checklist (10). The developer page gives 20 queries a second for the MCP server (15). The API docs show the 429 response and its error detail for the per-second limit, with no Retry-After, backoff or idempotency guidance; downloads are POST calls (5 of 15). No SLA found (0). The release of 12 August 2026 calls it launched and nothing labels it beta, though the developer page says tools will change in the coming months (10). Total 50.\n- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.\n- Schema \u0026 documentation 19 (checked 2026-10-27): No machine-readable contract for the MCP tools could be read. `tools/list` answers 401 without credentials and no tool list, server card or source is published. The REST API the catalogue also sits behind has a public OpenAPI 3.0.4 file of 66 paths covering search, metadata and downloads, but how the tools map to it isn't documented. Judgement call, 8 of 25. No llms.txt (404 on both hosts) and no Markdown docs (0). The developer page names four jobs (authentication, search, metadata, download) with no per-tool descriptions or guidance on when not to use them (3 of 20). Typed inputs unread (0 of 15). No MCP examples; the API docs show the 401 and 429 responses (3 of 15). The endpoint carries /v1 and the API has dated release notes, with no MCP entry (5 of 15). Total 19.\n- Agent ergonomics 24 (checked 2026-10-27): Graded on the MCP server without reading its tools. The tool count isn't published; the developer page names four jobs, which suggests a small set, but neither count nor size was checked, so 10 of 25. The REST API has field selection (summary_set, detail_set, named fields), paging and many search filters, but whether the tools expose them is unchecked (5 of 20). The MCP endpoint's 401 carries no WWW-Authenticate header, and the API's documented errors are the 401 body and the 429 message (4 of 20). No idempotency guidance and annotations unread; downloads draw on the customer's agreement, so a repeated download isn't free of consequence (0 of 20). Official SDKs and samples exist for the REST API, none for the MCP server, and a token must be fetched with a key and secret first (5 of 15). Total 24.\n- Security \u0026 auth 40 (checked 2026-10-27): OAuth 2.0 with an API key and secret per customer, tied to the agreement and issued by Getty. The metadata lists the authorisation code grant with PKCE S256, client credentials and refresh tokens, with tokens of at most 30 minutes per the API docs and refresh tokens Getty or the user can revoke. No scopes, dynamic client registration or revocation endpoint are published, and the client credentials token reaches the whole agreement. Secrets go in the body or a Basic header, not a URL (20 of 30). The jobs are search, metadata and download; no read-only mode or confirmation for downloads was found (5 of 20). Results carry captions, titles and keywords written by contributors, and Getty says AI may help draft captions with human review. No prompt-injection guidance (5 of 15). The API exposes download and purchase history per account, which gives some per-call visibility; no MCP audit log found (5 of 15). security.txt is valid with a contact and expiry only; no bug bounty, certification or public advisories found (5 of 20). Total 40.\n- Payments \u0026 pricing 0 (checked 2026-10-27): No x402, MPP or L402 (0). No price is published for the MCP server or for the Premium Access and Editorial Subscription agreements it needs; the route in is a contact-sales form (0). No free tier or self-serve trial; the API page says a test account is available on request (0). A person has to hold a Getty agreement and get credentials from an account representative (0). Total 0.\n- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored. (data quality 56, half of this category once the task suite runs)\n- Maintenance \u0026 community 28 (checked 2026-10-27): Read as a closed hosted service. The MCP server launched on 12 August 2026, 76 days ago, and the developer page's sitemap date is the same day (20). No dated MCP change since the launch; the API release notes' newest entry is 2 March 2026 (0 of 20). The API has a public release notes page, Getty says sales and technical support teams work around the clock, and MCP feedback goes through account representatives (5 of 15). Not in the official MCP registry (searches for getty and gettyimages returned nothing on 27 October 2026) (0). No package for the server; Getty's public sample-code repository for the REST API was updated to .NET 10 in April 2026 and last changed on 30 September 2026 (3 of 10). Total 28.\n- Transparency \u0026 trust 68 (checked 2026-10-27): The editorial half. A closed service. The website terms (August 2025) and the content licence agreement (April 2026) are public and state the AI limits plainly, but the Web Service Terms that govern MCP access aren't published (10 of 30). The privacy policy (March 2026) states general retention, primary data centres in the United States, the US affiliates data may go to, Data Privacy Framework adherence and Standard Contractual Clauses. Nothing says what the MCP server logs from queries, and the website terms give Getty a licence to use search terms for any business purpose on the site (12 of 30). No deprecation policy. The API release notes give some dated notices, such as the order_id change of 2 March 2026, and the developer page warns tools will change without saying how (5 of 20). Data locations stated in general terms and affiliates named, with no subprocessor list (8 of 20). Total 35.\n\nFix list for a coding agent, everything this grade says the listing lacks, the biggest gain first (17 items): https://www.anchorterminal.com/fixes/getty-images-mcp.md (JSON https://www.anchorterminal.com/fixes/getty-images-mcp.json)\n\n### What we couldn't check\n\n- unchecked: the tools as served, because `initialize` and `tools/list` answered 401 without credentials and no tool list, schema or source is published. Names, count, descriptions, inputs and annotations are unread, and so is the transport.\n- unchecked: the Web Service Terms, which the MCP FAQ says must be accepted before access. No public copy was found on gettyimages.com, the developer site or by search.\n- unchecked: whether the MCP server also needs the `Api-Key` header the REST API requires, or only a bearer token. The developer page says the agent finds authentication details at the endpoint, which answers 401 without a body to read.\n- unchecked: whether customers on self-serve Getty subscriptions, rather than Premium Access or an Editorial Subscription, can get MCP credentials. The pages name an agreement and an account representative.\n- Listed rather than held. Access runs through a Getty agreement and an account representative, but the server is generally available to existing customers and partners, with a public developer page, a live endpoint and public OAuth metadata. That is more than an announcement, by the rule for limited rollouts to customers of a product companies can buy.\n- firstReleased is 12 August 2026, the release date, matching the developer page's sitemap date (12 August 2026, 08.20 Pacific). That agrees with the lead.\n- Category. data-providers, the closest fit, because Getty licenses a catalogue of content and metadata behind an API and the data-quality fields record coverage, licence and reuse, which matter most here. No category or capability covers stock images and video; capability data.knowledge, as for Wikimedia, is a poor fit. search was the alternative and covers web search. Judgement call.\n- Getty's claims that its library doesn't allow AI-generated content and that the server isn't a generative AI service are recorded as claims. Getty's own AI generator output is licensed separately and wasn't checked against the library.\n- Getty's website terms forbid data mining and robots on the site. Recorded as a fact; only public pages that robots.txt allows were read, one request each.\n- Our own products. The Getty Images MCP Server doesn't do LocalGhost's job or letme's. It reaches one vendor's licensed catalogue and chooses no tools. Graded the normal way.\n\n### Sources\n\n- robots.txt (www.gettyimages.com; developer, mcp and api hosts serve none): \u003chttps://www.gettyimages.com/robots.txt\u003e (seen 2026-10-27)\n- MCP product page and FAQ: \u003chttps://www.gettyimages.com/ai/mcp\u003e (seen 2026-10-27)\n- launch release, 12 August 2026: \u003chttps://newsroom.gettyimages.com/en/getty-images/getty-images-launches-mcp-server-to-connect-creative-and-editorial-content-to-ai-workflows-and-products\u003e (seen 2026-10-27)\n- developer MCP page: \u003chttps://developer.gettyimages.com/mcp/\u003e (seen 2026-10-27)\n- developer sitemap with page dates: \u003chttps://developer.gettyimages.com/sitemap.xml\u003e (seen 2026-10-27)\n- MCP initialize and tools/list without credentials (401): \u003chttps://mcp.gettyimages.com/v1\u003e (seen 2026-10-27)\n- OAuth protected-resource metadata: \u003chttps://mcp.gettyimages.com/.well-known/oauth-protected-resource/v1\u003e (seen 2026-10-27)\n- OAuth authorisation server metadata: \u003chttps://mcp.gettyimages.com/.well-known/oauth-authorization-server\u003e (seen 2026-10-27)\n- API technical documentation (keys, throttling, fields): \u003chttps://developer.gettyimages.com/docs/\u003e (seen 2026-10-27)\n- API authorisation docs: \u003chttps://developer.gettyimages.com/docs/authorization/\u003e (seen 2026-10-27)\n- API getting started: \u003chttps://developer.gettyimages.com/docs/gettingstarted/\u003e (seen 2026-10-27)\n- API release notes: \u003chttps://developer.gettyimages.com/release-notes/\u003e (seen 2026-10-27)\n- status and notifications: \u003chttps://developer.gettyimages.com/status/\u003e (seen 2026-10-27)\n- REST API OpenAPI file: \u003chttps://api.gettyimages.com/swagger/v3/swagger.json\u003e (seen 2026-10-27)\n- API integration page and FAQ: \u003chttps://www.gettyimages.com/api\u003e (seen 2026-10-27)\n- Premium Access page: \u003chttps://www.gettyimages.com/enterprise/premium-access\u003e (seen 2026-10-27)\n- content licence agreement, April 2026: \u003chttps://www.gettyimages.com/eula\u003e (seen 2026-10-27)\n- website terms, August 2025: \u003chttps://www.gettyimages.com/company/terms\u003e (seen 2026-10-27)\n- privacy policy, March 2026: \u003chttps://www.gettyimages.com/company/privacy-policy\u003e (seen 2026-10-27)\n- editorial policy: \u003chttps://www.gettyimages.com/company/editorial-policy\u003e (seen 2026-10-27)\n- security.txt: \u003chttps://www.gettyimages.com/.well-known/security.txt\u003e (seen 2026-10-27)\n- sample-code repository: \u003chttps://github.com/gettyimages/gettyimages-api\u003e (seen 2026-10-27)\n- official MCP registry search: \u003chttps://registry.modelcontextprotocol.io/v0/servers?search=getty\u003e (seen 2026-10-27)\n- RDAP for gettyimages.com: \u003chttps://rdap.verisign.com/com/v1/domain/gettyimages.com\u003e (seen 2026-10-27)\n\n## Score history\n\nEvery move of a score since the listing was graded, newest first, with its cause. A score can't move without an entry here. JSON: https://www.anchorterminal.com/api/v1/tools/getty-images-mcp/history.json\n\n- 2026-10-27: graded 32.4 F (methodology 0.6)\n\n## Who's behind it (provenance 100/100, checked 2026-10-27)\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Legal entity named | Getty Images Holdings, Inc. | 20/20 |\n| Domain age | gettyimages.com, registered 1999-01-05 (27 years) | 15/15 |\n| Endpoint on the vendor's domain | mcp.gettyimages.com | 15/15 |\n| Terms of service | published | 10/10 |\n| Privacy policy | published | 10/10 |\n| Status page | developer.gettyimages.com/status | 10/10 |\n| Changelog | published | 10/10 |\n| security.txt | valid | 10/10 |\n\nThe release names Getty Images (NYSE GETY), whose listed parent is Getty Images Holdings, Inc. The privacy policy names Getty Images (US), Inc. in Seattle for privacy requests. The website terms (last updated August 2025) send disputes to arbitration in Seattle; the content licence agreement (April 2026) is under New York law.\n\nThe Web Service Terms that the MCP FAQ requires before access weren't found on any public page, so the terms that govern the MCP server itself are unread.\n\nThe privacy policy was last updated in March 2026.\n\n/.well-known/security.txt on www.gettyimages.com gives security@gettyimages.com and expires on 1 October 2027. mcp.gettyimages.com has none.\n\nThe status page is a hand-posted notifications page on the developer site, covering the API and websites, with no components and no MCP entry.\n\nThe release notes page has no MCP entry; its newest entry is dated 2 March 2026.\n\nRDAP gives a registration date of 5 January 1999 for gettyimages.com.\n\n### Terms and privacy, as read\n\nA reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.\n\n**Terms of service** (https://www.gettyimages.com/company/terms), not read yet.\n\n\n**Privacy policy** (https://www.gettyimages.com/company/privacy-policy), not read yet.\n\n\n## Data quality (56/100)\n\nData quality becomes half of Task success for data providers when Task success is scored. Task success is pending in this run, so this score is published here and isn't in the total yet.\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Coverage | Getty Images' creative, editorial (news, sport, entertainment) and archival images and video. An agent sees only the content in the customer's agreement. Getty publishes no catalogue size for the MCP server; its pages say millions of images and videos (4 of 5) | 20/25 |\n| Freshness | Getty says 50,000 to 80,000 new images are added a week, mostly editorial, and that new content reaches the API when it reaches its websites. Time from capture to publication isn't stated | 7/15 |\n| History | Getty describes its archive as the largest digital archive of news, sport and entertainment photos. How far back the archive reaches isn't stated in the reviewed pages | 2/15 |\n| Methodology published | www.gettyimages.com/company/editorial-policy | 15/15 |\n| Sources disclosed | named | 10/10 |\n| Licence | Proprietary. Content under the Getty Images content licence agreement (April 2026) and the customer's agreement; the MCP server under Web Service Terms that aren't published | 2/10 |\n| Official standing | A commercial picture agency, licensing its own and its contributors' work. No official standing | 0/10 |\n\nCaching and reuse: The Getty Images content licence agreement (last updated April 2026) bars using content, captions, keywords or other metadata for any machine learning or artificial intelligence purpose, or for identifying people, unless a Getty invoice, sales order or licence agreement authorises it. AI may be used with creative (not editorial) content only for internal archiving, searching, indexing or sorting and for permitted editing, never for training, fine-tuning or evaluating a model, including by uploading to a third-party AI tool that acquires rights. Rights end if an AI tool or platform uses the content for its own purposes. Metadata may not be used apart from the content. Royalty-free content may be used by up to 10 people in one legal entity unless more seats are bought, and sharing rights under Premium Access end with the term. Editorial content isn't for commercial use without authorisation.\n\n## Live (updated 2026-10-27 15:15 UTC)\n\n- Right now: up, HTTP 401, 549 ms, checked 2026-10-27 15:15 UTC (get on `https://mcp.gettyimages.com/v1`, asks for auth)\n- Uptime 24h 100.0% (25 probes) · 30 days 100.0% (25 probes) · p50 431 ms · p95 493 ms\n- Vendor status page: unknown, no machine-readable status found\n- Always current: https://www.anchorterminal.com/api/v1/live/getty-images-mcp.json\n\n## Probe metrics\n\nNot measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.\n\n## Strengths\n\n- OAuth 2.0 client credentials and authorisation code grants with PKCE S256 and 30-minute tokens, with protected-resource and authorisation server metadata published\n- A published limit of 20 queries a second for the MCP server\n- Search, metadata and download across creative, editorial and archival images and video, limited to what the customer's agreement covers\n- A dated status and notifications page for the API with posts back to 2023, and a security.txt valid until October 2027\n- The content licence states in writing what AI use is barred and what is allowed, including AI search and sorting of creative content\n\n## Weaknesses\n\n- Access needs a Getty agreement such as Premium Access and credentials from an account representative; no self-serve sign-up, trial or published price\n- Tool names, schemas and annotations aren't public; `initialize` and `tools/list` answer 401 without credentials\n- The Web Service Terms a customer must accept before access aren't published\n- No scopes, dynamic client registration or revocation endpoint in the authorisation server metadata\n- API and websites returned 500 errors for about 2 hours 35 minutes on 27 August 2026, per Getty's status page\n\n\n\n## Before you call it (notes for agents)\n\n1. Ask the person for the Getty API key and secret, which only their Getty account representative can issue after the Web Service Terms are accepted\n2. Exchange the key and secret for a bearer token at authentication.gettyimages.com and reuse it until it expires, since token requests count against the rate limit\n3. Read `tools/list` at the start of each session rather than hard-coding tool names, because Getty says tools and parameters will change\n4. Check whether an asset is editorial before suggesting commercial use, since editorial content isn't licensed for advertising or promotion\n5. Don't pass downloaded images or their metadata to a model or tool that trains on inputs; the licence bars training and ends rights if an AI tool uses content for itself\n\n## Similar tools\n\nRanked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.\n\n| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |\n| --- | --- | --- | --- | --- | --- | --- |\n| Wikimedia REST API | B | 66.5 | 326 | data.knowledge | no | https://www.anchorterminal.com/tools/wikimedia.md |\n| Diffbot | C | 54.3 | 798 | data.knowledge | no | https://www.anchorterminal.com/tools/diffbot.md |\n| CoinGecko x402 API | BB | 71.7 | 127 | same category (Data providers) | yes | https://www.anchorterminal.com/tools/coingecko-x402-api.md |\n| Massive (formerly Polygon.io) | B | 69.8 | 188 | same category (Data providers) | yes | https://www.anchorterminal.com/tools/massive.md |\n| Open-Meteo | B | 63.4 | 451 | same category (Data providers) | no | https://www.anchorterminal.com/tools/open-meteo.md |\n| OpenBB | C | 60.3 | 595 | same category (Data providers) | no | https://www.anchorterminal.com/tools/openbb.md |\n\n## Panel reviews (0)\n\nReviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .\n\nDesk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md\n\n## Notable\n\n- Getty Images announced the MCP server on 12 August 2026 for enterprise customers, media organisations and technology partners, for image and video search and content download across creative, editorial and archival content (source: \u003chttps://newsroom.gettyimages.com/en/getty-images/getty-images-launches-mcp-server-to-connect-creative-and-editorial-content-to-ai-workflows-and-products\u003e)\n- The developer page names four jobs. Authentication by the OAuth client credentials or authorisation code grant, search for images and videos in the organisation's agreement, asset metadata, and download of image and video files. It asks agents not to hard-code tools or parameters because Getty will add and change them (source: \u003chttps://developer.gettyimages.com/mcp/\u003e)\n- Who can use it, per the developer page. Getty subscription customers, such as Premium Access and Editorial Subscription, and business partners serving their own customers from the Getty catalogue. The MCP FAQ says an active agreement and acceptance of the Web Service Terms come before access (source: \u003chttps://www.gettyimages.com/ai/mcp\u003e)\n- The MCP server is throttled at 20 queries a second (source: \u003chttps://developer.gettyimages.com/mcp/\u003e)\n- MCP `initialize` and `tools/list` sent without credentials on 27 October 2026 both answered 401 with `{\"message\":\"Unauthorized\"}` from Amazon API Gateway and no WWW-Authenticate header, so no tool was read (source: \u003chttps://mcp.gettyimages.com/v1\u003e)\n- Licensing for AI use. The Getty Images content licence agreement (last updated April 2026) bars using content, captions, keywords or other metadata for any machine learning or artificial intelligence purpose, or for identifying people, unless a Getty invoice, sales order or licence agreement authorises it. AI may be used with creative (not editorial) content only for internal archiving, searching, indexing or sorting and for permitted editing, never for training, fine-tuning or evaluating a model, including by uploading to a third-party AI tool that acquires rights. Rights end if an AI tool or platform uses the content for its own purposes. Metadata may not be used apart from the content (source: \u003chttps://www.gettyimages.com/eula\u003e)\n- Editorial content isn't licensed for commercial, promotional or advertising use unless the agreement says so, and Getty's editorial policy bars AI post-production tools in editorial content except limited retouching of staged portraits. AI may help write captions with human review (source: \u003chttps://www.gettyimages.com/company/editorial-policy\u003e)\n- Getty says the server isn't a generative AI service and that its library doesn't allow AI-generated images or video. Getty's claim, not checked (source: \u003chttps://www.gettyimages.com/ai/mcp\u003e)\n- Getty's website terms forbid data mining, robots and similar data gathering on the site. This listing read only public pages that robots.txt allows (source: \u003chttps://www.gettyimages.com/company/terms\u003e)\n- The Getty Images MCP Server doesn't do LocalGhost's job or letme's. It reaches one vendor's licensed catalogue and picks no tools\n\n- #13 of 13 in Best data provider APIs for AI agents: https://www.anchorterminal.com/best/data-providers/index.md\n- All 51 data comparisons: https://www.anchorterminal.com/compare/data-providers/index.md\n\n## Compare\n\n- [Getty Images MCP Server vs Wikimedia REST API](https://www.anchorterminal.com/compare/getty-images-mcp-vs-wikimedia.md): F 32.4 vs B 66.5\n\n## Verify this listing\n\nFor the vendor. The badge or a plain link to this page verifies the listing, from a page on gettyimages.com or one of its subdomains. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{\"slug\": \"getty-images-mcp\", \"url\": \"…\"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify\n\nHTML badge:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/getty-images-mcp\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/getty-images-mcp.svg\" alt=\"Getty Images MCP Server on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e\n```\n\nMarkdown badge, for a README:\n\n```markdown\n[![Getty Images MCP Server on Anchor Terminal](https://www.anchorterminal.com/badges/getty-images-mcp.svg)](https://www.anchorterminal.com/tools/getty-images-mcp)\n```\n\nPlain link:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/getty-images-mcp\"\u003eGetty Images MCP Server on Anchor Terminal\u003c/a\u003e\n```\n\n## Share this listing\n\nFor the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Getty Images MCP Server is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.\n\n- Dark: https://www.anchorterminal.com/assets/share/getty-images-mcp-dark.png\n- Light: https://www.anchorterminal.com/assets/share/getty-images-mcp-light.png\n- Create a video and download its frames: https://www.anchorterminal.com/assets/listing-video/index.html?listing=getty-images-mcp\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-27", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.6", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Terminal", "url": "https://www.anchorterminal.com/tools/" }, { "name": "Data providers", "url": "https://www.anchorterminal.com/categories/data-providers" }, { "name": "Getty Images MCP Server", "url": "" } ], "description": "The Getty Images MCP Server is a remote MCP server from Getty Images that lets AI assistants and agents search, read metadata for and download the creative, editorial and archival images and video in a customer's Getty Images agreement.", "facts": [ "rank #1136 of 1217", "OAuth auth", "0 desk reviews" ], "h1": "Getty Images MCP Server", "image": "https://www.anchorterminal.com/assets/og/tools-getty-images-mcp.png", "path": "/tools/getty-images-mcp", "published": "2026-10-01", "section": "tools", "title": "Getty Images review (2026): pricing, alternatives and grade F", "toc": null, "updated": "2026-10-27", "url": "https://www.anchorterminal.com/tools/getty-images-mcp" }, "tokens": { "markdown": 8100, "slim": 1580 }, "version": 1 }