{ "data": { "similar": [ { "grade": "B", "json": "https://www.anchorterminal.com/tools/dataforseo.json", "name": "DataForSEO", "score": 64.9, "shared": [ "seo.keywords", "seo.backlinks", "seo.serp", "seo.rankings" ], "slug": "dataforseo" }, { "grade": "C", "json": "https://www.anchorterminal.com/tools/manifold-mcp.json", "name": "Manifold", "score": 56.2, "shared": [ "seo.keywords", "seo.backlinks", "seo.serp", "seo.rankings" ], "slug": "manifold-mcp" }, { "grade": "D", "json": "https://www.anchorterminal.com/tools/semrush.json", "name": "Semrush API + MCP", "score": 53.1, "shared": [ "seo.keywords", "seo.backlinks", "seo.rankings", "seo.serp" ], "slug": "semrush" }, { "grade": "D", "json": "https://www.anchorterminal.com/tools/ahrefs.json", "name": "Ahrefs", "score": 49.8, "shared": [ "seo.keywords", "seo.backlinks", "seo.serp", "seo.rankings" ], "slug": "ahrefs" }, { "grade": "D", "json": "https://www.anchorterminal.com/tools/similarweb.json", "name": "Similarweb", "score": 46, "shared": [ "seo.keywords", "seo.serp", "seo.rankings" ], "slug": "similarweb" } ], "tool": { "slug": "moz-api", "name": "Moz API", "vendor": "SEOmoz, Inc.", "vendorUrl": "https://moz.com", "kind": "http-api", "category": "seo", "summary": "Moz API is a hosted JSON-RPC 2.0 service for SEO data from Moz's link and keyword indexes. It returns Domain Authority, backlinks, keyword metrics, ranking keywords and search results, with a beta MCP server for AI clients.", "url": "https://www.anchorterminal.com/tools/moz-api", "markdownUrl": "https://www.anchorterminal.com/tools/moz-api.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/moz-api.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/moz-api.json", "license": "Proprietary service under the Moz API General Conditions (effective 12 August 2026 for new subscribers). Displaying Moz data to others requires attribution under the API legal page", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.moz.com/jsonrpc", "packages": [], "auth": "api-key", "authNotes": "Self-serve. A person signs up at moz.com with a credit card, then creates a token in the API dashboard. Each account holds up to five tokens, which can be deleted, and every request sends one in the `x-moz-token` header. No scopes or read-only tokens were found in the reviewed documentation. The beta MCP server at https://api.moz.com/mcp/v1/data accepts OAuth (authorisation code with PKCE, dynamic client registration, one scope named `mcp`) or the same token as a Bearer header, and is limited to account owners.", "pricing": "freemium", "pricingNotes": "Free plan of 50 rows a month at one request every ten seconds, which needs a valid credit card. Paid plans run from $20 a month for 3,000 rows to $500 for 500,000, with overage from $5 per 1,000 rows down to $10 per 10,000. Over 4 million rows a month is quoted by sales. There is no sandbox, though `quota.lookup`, `test.ping` and `test.ping.async` cost no rows (checked 2026-10-08).", "priceSummary": "$20 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API docs, the pricing page or the product page (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://moz.com/api/docs", "capabilities": [ "seo.keywords", "seo.backlinks", "seo.serp", "seo.rankings" ], "tags": [ "hosted", "json-rpc", "api-key", "freemium", "mcp", "oauth", "backlinks", "keywords", "closed-source" ], "lastRelease": "2026-08-14", "graded": true, "anchor": { "graded": true, "score": 45.3, "grade": "E", "agentReady": false, "rank": 571, "ranked": true, "rankOf": 629, "categoryRank": 6, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 28, "payments": 20, "reliability": 42, "schema": 50, "security": 38, "transparency": 59 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 42, "points": 8.4, "reason": "Graded on the public JSON-RPC API with the hosted lines. No working public status page was found. moz.statuspage.io redirects to a page saying Moz Status is inactive, the docs and help hub link none, and status.moz.com and health.moz.com did not connect from our network (0). No readable incident history (5). Edge limits are published with numbers, 2,000 requests in 60 seconds, 20 client errors in 60 seconds and a 30-minute block after ten 401 or 403 responses in five minutes, plus one request every ten seconds on the free plan (15). Per-method 429 responses carry `Retry-After` and the docs say to honour it, edge 429 responses carry none and the docs ask for exponential backoff, and no idempotency guidance was found for the Local write methods (12). The General Conditions promise commercially reasonable efforts at availability with no SLA or credits (0). The JSON-RPC API is generally available, and the MCP server is beta (10). 0 + 5 + 15 + 12 + 0 + 10 = 42." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 50, "points": 8.13, "reason": "No downloadable OpenAPI or OpenRPC file was found, and api.moz.com/openrpc.json and /openapi.json return 404. Each method page is generated from JSON Schema definitions for payload, result and quota, which we count as a partial contract (8). moz.com/llms.txt returns 404 and no Markdown docs for agents were found (0). Method descriptions state the purpose and the row cost, and the guides explain async calls and errors, but few say when not to use a method (10). Inputs are typed with enums for scope, sort, filters, engine and device, numeric ranges and required fields (13). Request and response examples appear on each method page and in cURL, Python and JavaScript, and the error guide lists 13 codes with sample bodies (14). The docs say the API is not versioned, and the product updates archive holds one dated Moz API entry in the last 90 days (5). 8 + 0 + 10 + 13 + 14 + 5 = 50." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 74, "points": 12.03, "reason": "List methods take `limit` (1 to 50 on link lists) and separate methods return a single keyword metric, but no field selection was found, and a site metrics object carries about 60 fields (15). Paging by opaque token, sort keys and named filters such as external, follow and gained_last_60_days (20). Errors carry a stable code, HTTP status, `data.issue`, `data.key` and an explanation, though the status field is named `status` in some bodies and `httpStatus` in others (19). The Data methods are reads, validation and quota checks run before any rows are used, and async calls can be polled again, but no idempotency keys were found for the Local write methods (13). `site_query` is the only required input on most site methods, the request `id` must be at least 24 characters, and no official SDK was found in the reviewed documentation (7). 15 + 20 + 19 + 13 + 7 = 74." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 38, "points": 6.65, "reason": "Plain revocable tokens, up to five per account, sent in the `x-moz-token` header and never in a URL. No scopes were found. The beta MCP server adds OAuth with PKCE and dynamic client registration, with a single scope named `mcp` (20). The Data methods only read, but there's no read-only or per-product token, and the same token works on the Local endpoint, whose methods create, update, cancel and close locations (8). Results carry page titles, anchor text and search result snippets from the open web, and no prompt-injection guidance was found (0). Each response reports the quota used and the dashboard has a usage page, which sits behind a login we couldn't read. No audit log was found in the docs (5). security.txt gives a contact address, but it expired about three hours before our check and its policy, acknowledgements and PGP key links return 404. No SOC 2 or ISO 27001 statement and no bug bounty were found on the pages reviewed (5). 20 + 8 + 0 + 5 + 5 = 38." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 20, "points": 2.5, "reason": "No x402, MPP or L402 (0). Plan prices, monthly rows and per-row overage prices are public without a login, and each method page states its row cost (20). The free plan of 50 rows a month requires a valid credit card, so it doesn't count (0). A person has to sign up and check out in a browser before a token exists. The MCP server's OAuth has dynamic client registration but still needs the account owner to sign in (0). 0 + 20 + 0 + 0 = 20." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 28, "points": 2.45, "reason": "The newest dated Moz API entry in the product updates archive is the MCP server beta of 14 August 2026, 55 days before the check (20). That is the only Moz API entry in the last 90 days, the other nine dated since 15 June are Moz Pro and Moz Local (0). A dated archive exists, and support is by api@moz.com and the help team contact form, with 24/7 online support claimed on the product page. We could not test response times, and the contact page returned 403 to our reader (8). No official SDK was found (0). No packages to assess (0). The API General Conditions were revised with effect from 12 August 2026, and API responses report service version 2.28.2, which has no public release notes. 20 + 0 + 8 + 0 + 0 = 28." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 59, "points": 5.16, "note": "editorial 39, provenance 79", "reason": "Editorial half only. Closed service with clear terms, the API General Conditions (effective 12 August 2026) and an API legal page with attribution rules (15). The privacy policy (effective 8 April 2025) has a table of retention periods by data category and describes transfers under the EU-U.S. Data Privacy Framework, but covers the whole Moz site. No data processing agreement and no statement on retention of API queries were found on the pages reviewed (15). The docs say no breaking changes are expected outside beta methods, while the terms let Moz change or discontinue the service without notice, and the note that some methods are documented only in the legacy docs carries no dates (5). No list of subprocessors or data locations was found. The privacy policy says data is shared with other Ziff Davis companies (4). 15 + 15 + 5 + 4 = 39." } ], "assessment": { "date": "2026-10-08", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "List methods take `limit` (1 to 50 on link lists) and separate methods return a single keyword metric, but no field selection was found, and a site metrics object carries about 60 fields (15). Paging by opaque token, sort keys and named filters such as external, follow and gained_last_60_days (20). Errors carry a stable code, HTTP status, `data.issue`, `data.key` and an explanation, though the status field is named `status` in some bodies and `httpStatus` in others (19). The Data methods are reads, validation and quota checks run before any rows are used, and async calls can be polled again, but no idempotency keys were found for the Local write methods (13). `site_query` is the only required input on most site methods, the request `id` must be at least 24 characters, and no official SDK was found in the reviewed documentation (7). 15 + 20 + 19 + 13 + 7 = 74.", "maintenance": "The newest dated Moz API entry in the product updates archive is the MCP server beta of 14 August 2026, 55 days before the check (20). That is the only Moz API entry in the last 90 days, the other nine dated since 15 June are Moz Pro and Moz Local (0). A dated archive exists, and support is by api@moz.com and the help team contact form, with 24/7 online support claimed on the product page. We could not test response times, and the contact page returned 403 to our reader (8). No official SDK was found (0). No packages to assess (0). The API General Conditions were revised with effect from 12 August 2026, and API responses report service version 2.28.2, which has no public release notes. 20 + 0 + 8 + 0 + 0 = 28.", "payments": "No x402, MPP or L402 (0). Plan prices, monthly rows and per-row overage prices are public without a login, and each method page states its row cost (20). The free plan of 50 rows a month requires a valid credit card, so it doesn't count (0). A person has to sign up and check out in a browser before a token exists. The MCP server's OAuth has dynamic client registration but still needs the account owner to sign in (0). 0 + 20 + 0 + 0 = 20.", "reliability": "Graded on the public JSON-RPC API with the hosted lines. No working public status page was found. moz.statuspage.io redirects to a page saying Moz Status is inactive, the docs and help hub link none, and status.moz.com and health.moz.com did not connect from our network (0). No readable incident history (5). Edge limits are published with numbers, 2,000 requests in 60 seconds, 20 client errors in 60 seconds and a 30-minute block after ten 401 or 403 responses in five minutes, plus one request every ten seconds on the free plan (15). Per-method 429 responses carry `Retry-After` and the docs say to honour it, edge 429 responses carry none and the docs ask for exponential backoff, and no idempotency guidance was found for the Local write methods (12). The General Conditions promise commercially reasonable efforts at availability with no SLA or credits (0). The JSON-RPC API is generally available, and the MCP server is beta (10). 0 + 5 + 15 + 12 + 0 + 10 = 42.", "schema": "No downloadable OpenAPI or OpenRPC file was found, and api.moz.com/openrpc.json and /openapi.json return 404. Each method page is generated from JSON Schema definitions for payload, result and quota, which we count as a partial contract (8). moz.com/llms.txt returns 404 and no Markdown docs for agents were found (0). Method descriptions state the purpose and the row cost, and the guides explain async calls and errors, but few say when not to use a method (10). Inputs are typed with enums for scope, sort, filters, engine and device, numeric ranges and required fields (13). Request and response examples appear on each method page and in cURL, Python and JavaScript, and the error guide lists 13 codes with sample bodies (14). The docs say the API is not versioned, and the product updates archive holds one dated Moz API entry in the last 90 days (5). 8 + 0 + 10 + 13 + 14 + 5 = 50.", "security": "Plain revocable tokens, up to five per account, sent in the `x-moz-token` header and never in a URL. No scopes were found. The beta MCP server adds OAuth with PKCE and dynamic client registration, with a single scope named `mcp` (20). The Data methods only read, but there's no read-only or per-product token, and the same token works on the Local endpoint, whose methods create, update, cancel and close locations (8). Results carry page titles, anchor text and search result snippets from the open web, and no prompt-injection guidance was found (0). Each response reports the quota used and the dashboard has a usage page, which sits behind a login we couldn't read. No audit log was found in the docs (5). security.txt gives a contact address, but it expired about three hours before our check and its policy, acknowledgements and PGP key links return 404. No SOC 2 or ISO 27001 statement and no bug bounty were found on the pages reviewed (5). 20 + 8 + 0 + 5 + 5 = 38.", "transparency": "Editorial half only. Closed service with clear terms, the API General Conditions (effective 12 August 2026) and an API legal page with attribution rules (15). The privacy policy (effective 8 April 2025) has a table of retention periods by data category and describes transfers under the EU-U.S. Data Privacy Framework, but covers the whole Moz site. No data processing agreement and no statement on retention of API queries were found on the pages reviewed (15). The docs say no breaking changes are expected outside beta methods, while the terms let Moz change or discontinue the service without notice, and the note that some methods are documented only in the legacy docs carries no dates (5). No list of subprocessors or data locations was found. The privacy policy says data is shared with other Ziff Davis companies (4). 15 + 15 + 5 + 4 = 39." }, "sources": [ { "what": "product page (data sets, vendor claims, MCP mention)", "url": "https://moz.com/products/api", "seen": "2026-10-08" }, { "what": "pricing (plans, rows, overage, free plan limit, beta rows)", "url": "https://moz.com/products/api/pricing", "seen": "2026-10-08" }, { "what": "docs index and method list (73 methods)", "url": "https://moz.com/api/docs", "seen": "2026-10-08" }, { "what": "getting started (endpoint, quota, compression, beta methods, versioning)", "url": "https://moz.com/api/docs/guides/getting-started", "seen": "2026-10-08" }, { "what": "authentication (tokens, five per account, card for free plan)", "url": "https://moz.com/api/docs/guides/authentication", "seen": "2026-10-08" }, { "what": "error handling and rate limiting", "url": "https://moz.com/api/docs/guides/error-handling", "seen": "2026-10-08" }, { "what": "MCP server guide (endpoints, OAuth, beta, Claude Code command)", "url": "https://moz.com/api/docs/guides/mcp-servers", "seen": "2026-10-08" }, { "what": "asynchronous calls guide", "url": "https://moz.com/api/docs/guides/asynchronous-api-calls", "seen": "2026-10-08" }, { "what": "method page, List Links (schema, paging, filters, quota)", "url": "https://moz.com/api/docs/methods/DataSiteLinkListAction", "seen": "2026-10-08" }, { "what": "method page, Generate SERP (async, engines, shared rate limit, row cost)", "url": "https://moz.com/api/docs/methods/DataKeywordSerpGenerateAction", "seen": "2026-10-08" }, { "what": "MCP OAuth metadata (PKCE, dynamic registration, scope)", "url": "https://api.moz.com/.well-known/oauth-authorization-server", "seen": "2026-10-08" }, { "what": "API General Conditions (entity, availability, AI training clause, refunds)", "url": "https://moz.com/api-general-conditions", "seen": "2026-10-08" }, { "what": "API legal page (attribution, suspension, beta terms)", "url": "https://moz.com/help/links-api/getting-started/legal", "seen": "2026-10-08" }, { "what": "terms of use (effective 22 April 2023)", "url": "https://moz.com/terms-of-use", "seen": "2026-10-08" }, { "what": "privacy policy (effective 8 April 2025)", "url": "https://moz.com/privacy-policy", "seen": "2026-10-08" }, { "what": "product updates archive (MCP beta, 14 August 2026)", "url": "https://moz.com/whats-new/archive", "seen": "2026-10-08" }, { "what": "security.txt (expiry, contact, broken links)", "url": "https://moz.com/.well-known/security.txt", "seen": "2026-10-08" }, { "what": "Statuspage page reported inactive", "url": "https://moz.statuspage.io/", "seen": "2026-10-08" }, { "what": "RDAP registration date for moz.com", "url": "https://rdap.verisign.com/com/v1/domain/moz.com", "seen": "2026-10-08" } ], "openQuestions": [ "unchecked: status.moz.com and health.moz.com did not connect from our network, so we can't say whether either hosts a live status page. moz.statuspage.io reports the page as inactive.", "unchecked: the MCP server's tool list, schemas and annotations. Both endpoints return 401 without an account.", "unchecked: the API dashboard and its usage page, which sit behind a login.", "unchecked: moz.com/help/contact returned 403 to our reader, so support routes are taken from the product page and docs.", "The founder's note said Moz's site could not be fetched earlier. On 8 October 2026 moz.com and api.moz.com answered curl with a plain user agent, and the docs were read from the page payload. WebFetch was refused for moz.com.", "security.txt carried an expiry of 2026-10-07T22:45:48-07:00, about three hours before the check. It may be regenerated on a schedule, so the expired reading could be short-lived.", "No data processing agreement, subprocessor list, SOC 2 or ISO 27001 statement was found on the pages reviewed. We tried moz.com/dpa, /subprocessors, /security and /trust, which return 404, and did not search further.", "The welcome page says the API is moving between versions and some link and site methods are documented only in the legacy docs, although current method pages exist for most of those named. Which methods remain legacy-only was not established.", "Whether an official SDK exists outside the docs was not established. None is named in the docs or on the product page." ] }, "negative": 0, "verdict": "The JSON-RPC API documents every error code, its rate limits and the row cost of each method, and failed validation uses no quota. No working status page, SLA, machine-readable spec or official SDK was found. Tokens carry no scopes, and the free plan needs a credit card.", "bestFor": "Agents that need Domain Authority, backlink lists, link intersects, keyword volume and difficulty, search intent and ranking keywords at a low entry price, on a read-only data set.", "strengths": [ "Error reference lists 13 codes, each with HTTP status, a machine-readable `data.issue` and the parameter at fault", "Edge rate limits are published with numbers, and per-method 429 responses carry `Retry-After`", "Each method page states its row cost, and validation and quota checks run before any rows are used", "List methods take a `limit`, a paging token, sort keys and named filters", "Public plan prices from $20 a month for 3,000 rows, with per-row overage prices" ], "weaknesses": [ "No working public status page was found, and moz.statuspage.io reports the Moz Status page as inactive", "No downloadable OpenAPI or OpenRPC file, no llms.txt and no official SDK in the reviewed documentation", "Tokens have no scopes or read-only mode, and one token works on both the Data and Local MCP endpoints", "The free plan of 50 rows a month requires a valid credit card", "security.txt expired on 8 October 2026 (UTC), and its policy, acknowledgements and PGP key links return 404" ], "agentNotes": [ "Send a request `id` of at least 24 characters (letters, numbers and hyphens). A UUID works. Shorter ids are rejected with -32654.", "Stop on a 401. Ten 401 or 403 responses in five minutes block the caller for 30 minutes.", "On 429 with code -32658 wait the `Retry-After` seconds. On code -32650 no wait time is given, so back off exponentially.", "Call `quota.lookup` (free) before large pulls. List methods charge one row per result, and `limit` is capped at 50 on link lists.", "Poll `async.call.lookup` for `data.keyword.serp.generate`, and collect the result within 20 seconds of first seeing it complete." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 45.3 } ], "editorialScores": { "ergonomics": 74, "maintenance": 28, "payments": 20, "reliability": 42, "schema": 50, "security": 38, "transparency": 39 }, "provenanceScore": 79 }, "connect": { "http": "curl -X POST https://api.moz.com/jsonrpc -H \"x-moz-token: $MOZ_TOKEN\" -H \"Content-Type: application/json\" -d '{\"jsonrpc\":\"2.0\",\"id\":\"01a0458f-a14f-7254-aa11-7c6cb734e3f2\",\"method\":\"quota.lookup\",\"params\":{\"data\":{\"path\":\"api.limits.data.rows\"}}}'", "claudeCode": "claude mcp add moz-mcp-v1-data https://api.moz.com/mcp/v1/data --transport http --header \"Authorization: Bearer $YOUR_MOZ_TOKEN\" --scope user" }, "letme": { "capability": "https://letme.dev/seo.keywords", "tool": "https://letme.dev/moz-api" }, "notable": [ "One URL, https://api.moz.com/jsonrpc, takes every call as a JSON-RPC 2.0 POST. The docs list 73 methods, 33 under `data` for links, sites and keywords, 35 under `local` for Moz Local, and five for quota, index, async and test calls (https://moz.com/api/docs)", "Quota is counted in rows, and each method page states its cost. Validation runs before the quota check, and a call that would exceed the balance is refused without using any rows (https://moz.com/api/docs/guides/error-handling)", "Edge limits are published. Ten 401 or 403 responses in five minutes block the caller for 30 minutes, 20 client errors in 60 seconds throttle it, and so do 2,000 requests in 60 seconds (https://moz.com/api/docs/guides/error-handling)", "The MCP server went to beta on 14 August 2026 with two endpoints, https://api.moz.com/mcp/v1/data and https://api.moz.com/mcp/v1/local, and is included in every paid plan as beta access (https://moz.com/whats-new/archive, https://moz.com/products/api/pricing)", "The General Conditions forbid using data from the service to develop, train or fine-tune any AI system or model, while allowing AI software to analyse the data for internal business purposes (https://moz.com/api-general-conditions)", "The docs say the API is not versioned and that no breaking changes are expected outside beta methods, which can change or be removed without notice (https://moz.com/api/docs/guides/getting-started)", "Moz says its link index covers 45.5 trillion links across 1 billion domains, with 1.25 billion monthly keyword volumes (https://moz.com/products/api)" ], "area": "web-data", "details": [ { "label": "API", "value": "JSON-RPC 2.0 over POST at https://api.moz.com/jsonrpc, single and batch requests, gzip in both directions, request bodies up to 100 KB after decompression" }, { "label": "Methods", "value": "73 documented. 33 `data` methods (site metrics, Brand Authority, links, linking domains, anchor text, link intersect, link status, final redirect, top pages, competitors, ranking keywords, keyword metrics, search intent, related keywords, SERP fetch and generate, global top domains and pages), 35 `local` methods for Moz Local, plus quota, index, async and test calls" }, { "label": "MCP server", "value": "Beta since 14 August 2026. https://api.moz.com/mcp/v1/data (needs a Moz API subscription) and https://api.moz.com/mcp/v1/local (needs Moz Local). OAuth or a Bearer token. Account owners only. Tool list not readable without an account" }, { "label": "Credentials", "value": "Up to five deletable tokens per account, sent as `x-moz-token`. No scopes found. MCP OAuth metadata lists authorisation code, PKCE S256, dynamic client registration and the scope `mcp`" }, { "label": "Rate limits", "value": "Free plan one request every ten seconds. Edge limits of 2,000 requests in 60 seconds, 20 client errors in 60 seconds, and a 30-minute block after ten 401 or 403 responses in five minutes. `data.keyword.serp.generate` shares 2,000 requests an hour across all callers" }, { "label": "Errors", "value": "Thirteen documented codes from -32700 to -32650 with HTTP status, `data.issue`, `data.key` and `data.explanation`. Per-method 429 (-32658) carries `Retry-After`, edge 429 (-32650) does not" }, { "label": "Quota", "value": "Counted in rows. `data.site.metrics.fetch` costs one row a call, list methods one row per result, `data.keyword.serp.generate` up to 21 rows. `quota.lookup`, `metadata.index.fetch` and the test methods are free" }, { "label": "Paging", "value": "`offset.limit` (1 to 50 on link lists, default 25) and an opaque `offset.token` returned with each page" }, { "label": "Async", "value": "Some methods return an `async_call` with `pending`, `processing` or `complete` status and a `ttl` in seconds, polled with `async.call.lookup`" }, { "label": "SERP coverage", "value": "`engine` is google, bing or yahoo, `device` is desktop, mobile_android or mobile_ios, and `locale` is a Google hl-gl pair such as en-US. Ranking keywords cover the top 50 Google results" }, { "label": "Versioning", "value": "Not versioned. The docs expect no breaking changes outside beta methods. Some link and site methods are still documented only in the legacy docs at https://moz.com/help/links-api" }, { "label": "Terms", "value": "API General Conditions effective 12 August 2026 (new subscribers) and 11 September 2026 (existing). Availability on commercially reasonable efforts, fees non-refundable, no AI training on the data, attribution required for external display" }, { "label": "Status", "value": "No working public status page found. moz.statuspage.io redirects to a page saying Moz Status is inactive" } ], "unitPrices": [ { "item": "Free plan", "unit": "month", "usd": 0, "note": "50 rows a month, one request every ten seconds, credit card required" }, { "item": "Starter Medium", "unit": "month", "usd": 20, "note": "3,000 rows, no overage, plus 150 beta rows" }, { "item": "Starter Large", "unit": "month", "usd": 75, "note": "15,000 rows, plus 750 beta rows" }, { "item": "Growth Small", "unit": "month", "usd": 125, "note": "50,000 rows, plus 3,500 beta rows" }, { "item": "Growth Medium", "unit": "month", "usd": 250, "note": "120,000 rows, plus 8,400 beta rows" }, { "item": "Growth Large", "unit": "month", "usd": 500, "note": "500,000 rows, plus 35,000 beta rows" }, { "item": "Overage row, Starter Large", "unit": "record", "usd": 0.005, "note": "$5 per 1,000 rows" }, { "item": "Overage row, Growth Small", "unit": "record", "usd": 0.0025, "note": "$25 per 10,000 rows" }, { "item": "Overage row, Growth Medium", "unit": "record", "usd": 0.002, "note": "$20 per 10,000 rows" }, { "item": "Overage row, Growth Large", "unit": "record", "usd": 0.001, "note": "$10 per 10,000 rows" } ], "provenance": { "legalEntity": "SEOmoz, Inc.", "domain": "moz.com", "domainRegistered": "1998-04-29", "endpointOnVendorDomain": true, "terms": "https://moz.com/api-general-conditions", "privacy": "https://moz.com/privacy-policy", "statusPage": "", "changelog": "https://moz.com/whats-new/archive", "securityTxt": "expired", "checked": "2026-10-08", "notes": [ "The API General Conditions name SEOMOZ, INC., a Delaware corporation, as the contracting party. The site footer reads SEOMoz, Inc., a Ziff Davis company, and the terms of use give 360 Park Ave. S., 17th Floor, New York, NY 10010 for notices.", "The API answers at https://api.moz.com/jsonrpc and the MCP server at https://api.moz.com/mcp/v1/data, both on moz.com.", "moz.com/.well-known/security.txt gives a contact address and `Expiration: 2026-10-07T22:45:48-07:00`, about three hours before our fetch at 08:42 UTC on 8 October 2026. Its Policy, Acknowledgements and Encryption links (moz.com/security-policy, /hall-of-fame, /pgp-key.txt) return 404.", "moz.statuspage.io redirects to a page saying the Moz Status page is inactive and visible only to team members. status.moz.com and health.moz.com did not connect from our network.", "The changelog is Moz's product updates archive, which covers all products. The newest Moz API entry is the MCP server beta of 14 August 2026.", "RDAP for moz.com gives a registration date of 1998-04-29 and expiry in 2029.", "The privacy policy is effective 8 April 2025 and says Moz is owned by Ziff Davis, Inc. and takes part in the EU-U.S. Data Privacy Framework." ], "score": 79, "checks": [ { "check": "Legal entity named", "value": "SEOmoz, Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "moz.com, registered 1998-04-29 (28 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "api.moz.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 5 of the 7 things a reader expects, and has 2 clauses that cost points", "points": 4.3, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "published but past its Expires date", "points": 5, "max": 10, "state": "part" } ], "policies": [ { "kind": "terms", "url": "https://moz.com/api-general-conditions", "state": "read", "readAt": "2026-10-08", "statedDate": "2026-08-12", "words": 6489, "points": 4.3, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Effective August 12, 2026, for new subscribers; effective September 11, 2026, for existing subscribers. Previous version can be found here.", "says": "Last updated 2026-08-12" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "Each party irrevocably agrees that all related matters shall be governed by the laws of the state of New York, without regard to any rules relating to conflict of laws.", "says": "The law of the State of New York" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "IN NO EVENT SHALL EITHER PARTY'S AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THIS AGREEMENT, WHETHER IN CONTRACT, TORT OR UNDER ANY OTHER THEORY OF LIABILITY, EXCEED THE TOTAL AMOUNT PAID BY YOU TO US UNDER THE AGREEMENT IN THE 12 MONTHS PRECEDING THE INCIDENT.", "says": "Capped at the fees paid in the 12 months before the claim" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "For clarity, if any two Agreements have the same subject matter and overlapping Effective Dates, then the Agreement with the earlier Effective Date will be superseded and terminated by the Agreement having the later Effective Date." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": false }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "You shall not (c) make the Services available to anyone other than Users;" }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "terms.benchmark", "label": "Restricts benchmarking or competitive use", "found": true, "quote": "Subscriber will not use or access the Service for purposes of benchmarking or otherwise comparing the availability, performance or functionality of any Moz Services with similar third party software or API services.", "costsPoints": true }, { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "Notwithstanding the foregoing, Moz USA retains the right to revise and update these General Conditions at any time for any reason in its sole and absolute discretion, effective immediately on posting the same to www.moz.com or www.mozcast.com (the “Sites”).", "costsPoints": true }, { "key": "terms.arbitration", "label": "Requires arbitration or waives class actions", "found": true, "quote": "The parties to this Agreement will submit all disputes arising under this Agreement to arbitration in New York City, New York, before a single arbitrator of the American Arbitration Association (“AAA”)." } ], "notes": [ { "date": "2026-10-08", "text": "Subscribers may not use data obtained through the Services to develop, train, fine-tune or improve any artificial intelligence system, model or algorithm, or permit a third party to do so.", "quote": "use any data obtained through the Services to develop, train, fine-tune, refine, or improve any artificial intelligence system, model, or algorithm (including, without limitation, large language models, machine learning, or generative artificial intelligence), or permit any third party to do so" }, { "date": "2026-10-08", "text": "Moz may use the subscriber's name and logo on the client identification part of its website, and the subscriber grants a licence for that use.", "quote": "You acknowledge and agree that We shall have the right to use Your name and/or logo on the client identification portion of Our website, and You hereby grant Us a license to all rights required for the lawful reproduction of Your name and/or logo on such page." }, { "date": "2026-10-08", "text": "Moz may change service fees for any renewal term, provided it gives notice of the new fees at least 30 days before that renewal term starts.", "quote": "We reserve the right to change Service Fees for any Renewal Term; provided, however, that such change will not take effect unless We provide You notice of different Service Fees at least thirty (30) days prior to the start of the applicable Renewal Term." } ] }, { "kind": "privacy", "url": "https://moz.com/privacy-policy", "state": "read", "readAt": "2026-10-08", "statedDate": "2025-04-08", "words": 5667, "points": 10, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Effective April 8, 2025", "says": "Last updated 2025-04-08" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "We may collect or obtain information about you when you sign up, when you create profiles, pages or contributions, when you use and interact with our services and when you make your personal information public." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "We will retain your personal information for as long as is necessary in connection with the purposes set out in this policy, and in accordance with applicable laws.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "Please note that this policy does not cover the practices of third parties, including those that may disclose information to Moz." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "Right to Opt-out of the Sale or Sharing for Targeted Ads: Under some circumstances we may sell or share the personal data you provide to us to provide ads to you that align with your interests." }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "Right to Know: You have a right to know what personal information we collect, process, and share or sell." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "If you would like to opt out of the sale or sharing of your data with other Ziff Davis Companies, you can do so by contacting privacy@moz.com.", "says": "privacy@moz.com" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "Data Privacy Framework, the UK extension to the EU-U.S.", "says": "Relies on the Data Privacy Framework" } ], "toKnow": [ { "key": "privacy.sells", "label": "Says it sells personal data or shares it for advertising", "found": true, "quote": "Under some circumstances we may sell or share the personal data you provide to us to provide ads to you that align with your interests." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/moz-api.json", "live": { "slug": "moz-api", "probe": { "target": "https://api.moz.com/jsonrpc", "method": "get", "lastAt": "2026-10-08T18:20:35.41517576Z", "lastOk": true, "lastStatus": 404, "lastMs": 139, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 155, "p95ms24h": 393, "samples24h": 33, "samples30d": 33, "days": [ { "date": "2026-10-08", "probes": 33, "ok": 33 } ] }, "securityTxt": { "url": "https://moz.com/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-08T15:38:29.983500854Z" }, "pages": [ { "url": "https://moz.com/whats-new/archive", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:22:15.827097105Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "2df39f51de96" }, { "url": "https://moz.com/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:22:13.802124938Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "ef92cf739b3e" }, { "url": "https://moz.com/api-general-conditions", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:22:11.727645446Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "13b81cfc0ea8" } ], "updatedAt": "2026-10-08T18:22:15.827097105Z" } }, "verify": { "accepts": "a page on moz.com or one of its subdomains", "badgeUrl": "https://www.anchorterminal.com/badges/moz-api.svg", "body": { "slug": "moz-api", "url": "the page with the badge or the link" }, "docs": "https://www.anchorterminal.com/builders/#verify", "effect": "none, it never changes a grade, rank or review", "endpoint": "https://www.anchorterminal.com/api/v1/verify", "listingUrl": "https://www.anchorterminal.com/tools/moz-api", "mcpTool": "verify_listing", "recheck": "weekly; two failed checks in a row and it lapses, a later pass restores it", "snippets": { "html": "\u003ca href=\"https://www.anchorterminal.com/tools/moz-api\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/moz-api.svg\" alt=\"Moz API on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e", "markdown": "[![Moz API on Anchor Terminal](https://www.anchorterminal.com/badges/moz-api.svg)](https://www.anchorterminal.com/tools/moz-api)", "link": "\u003ca href=\"https://www.anchorterminal.com/tools/moz-api\"\u003eMoz API on Anchor Terminal\u003c/a\u003e" } } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/tools/moz-api", "json": "https://www.anchorterminal.com/tools/moz-api.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/tools/moz-api.md", "slim": "https://www.anchorterminal.com/tools/moz-api.min.md" }, "markdown": "## Overview\n\n**Grade E · 45.3/100 · rank #571 of 629 · #6 in SEO \u0026 search visibility · not agent-ready · confidence medium**\n\n\n## Assessment\n\nThe JSON-RPC API documents every error code, its rate limits and the row cost of each method, and failed validation uses no quota. No working status page, SLA, machine-readable spec or official SDK was found. Tokens carry no scopes, and the free plan needs a credit card.\n\n## Facts\n\n| Field | Value |\n| --- | --- |\n| Vendor | SEOmoz, Inc. (https://moz.com) |\n| Kind | HTTP API |\n| Category | SEO \u0026 search visibility (https://www.anchorterminal.com/categories/seo) |\n| Transport | HTTP, Streamable HTTP |\n| Endpoint | `https://api.moz.com/jsonrpc` |\n| Auth | API key · Self-serve. A person signs up at moz.com with a credit card, then creates a token in the API dashboard. Each account holds up to five tokens, which can be deleted, and every request sends one in the `x-moz-token` header. No scopes or read-only tokens were found in the reviewed documentation. The beta MCP server at https://api.moz.com/mcp/v1/data accepts OAuth (authorisation code with PKCE, dynamic client registration, one scope named `mcp`) or the same token as a Bearer header, and is limited to account owners. |\n| Pricing | Freemium ($20 / mo) · Free plan of 50 rows a month at one request every ten seconds, which needs a valid credit card. Paid plans run from $20 a month for 3,000 rows to $500 for 500,000, with overage from $5 per 1,000 rows down to $10 per 10,000. Over 4 million rows a month is quoted by sales. There is no sandbox, though `quota.lookup`, `test.ping` and `test.ping.async` cost no rows (checked 2026-10-08). |\n| x402 | No · No x402, MPP or L402 in the API docs, the pricing page or the product page (checked 2026-10-08). |\n| Licence | Proprietary service under the Moz API General Conditions (effective 12 August 2026 for new subscribers). Displaying Moz data to others requires attribution under the API legal page |\n| Docs | https://moz.com/api/docs |\n| llms.txt | not found |\n| Last release | 2026-08-14 |\n| API | JSON-RPC 2.0 over POST at https://api.moz.com/jsonrpc, single and batch requests, gzip in both directions, request bodies up to 100 KB after decompression |\n| Methods | 73 documented. 33 `data` methods (site metrics, Brand Authority, links, linking domains, anchor text, link intersect, link status, final redirect, top pages, competitors, ranking keywords, keyword metrics, search intent, related keywords, SERP fetch and generate, global top domains and pages), 35 `local` methods for Moz Local, plus quota, index, async and test calls |\n| MCP server | Beta since 14 August 2026. https://api.moz.com/mcp/v1/data (needs a Moz API subscription) and https://api.moz.com/mcp/v1/local (needs Moz Local). OAuth or a Bearer token. Account owners only. Tool list not readable without an account |\n| Credentials | Up to five deletable tokens per account, sent as `x-moz-token`. No scopes found. MCP OAuth metadata lists authorisation code, PKCE S256, dynamic client registration and the scope `mcp` |\n| Rate limits | Free plan one request every ten seconds. Edge limits of 2,000 requests in 60 seconds, 20 client errors in 60 seconds, and a 30-minute block after ten 401 or 403 responses in five minutes. `data.keyword.serp.generate` shares 2,000 requests an hour across all callers |\n| Errors | Thirteen documented codes from -32700 to -32650 with HTTP status, `data.issue`, `data.key` and `data.explanation`. Per-method 429 (-32658) carries `Retry-After`, edge 429 (-32650) does not |\n| Quota | Counted in rows. `data.site.metrics.fetch` costs one row a call, list methods one row per result, `data.keyword.serp.generate` up to 21 rows. `quota.lookup`, `metadata.index.fetch` and the test methods are free |\n| Paging | `offset.limit` (1 to 50 on link lists, default 25) and an opaque `offset.token` returned with each page |\n| Async | Some methods return an `async_call` with `pending`, `processing` or `complete` status and a `ttl` in seconds, polled with `async.call.lookup` |\n| SERP coverage | `engine` is google, bing or yahoo, `device` is desktop, mobile_android or mobile_ios, and `locale` is a Google hl-gl pair such as en-US. Ranking keywords cover the top 50 Google results |\n| Versioning | Not versioned. The docs expect no breaking changes outside beta methods. Some link and site methods are still documented only in the legacy docs at https://moz.com/help/links-api |\n| Terms | API General Conditions effective 12 August 2026 (new subscribers) and 11 September 2026 (existing). Availability on commercially reasonable efforts, fees non-refundable, no AI training on the data, attribution required for external display |\n| Status | No working public status page found. moz.statuspage.io redirects to a page saying Moz Status is inactive |\n| Capabilities | seo.keywords, seo.backlinks, seo.serp, seo.rankings |\n| Tags | hosted, json-rpc, api-key, freemium, mcp, oauth, backlinks, keywords, closed-source |\n| JSON | https://www.anchorterminal.com/api/v1/tools/moz-api.json |\n\n## Score breakdown (methodology v0.4, October 2026 research run)\n\nAssessed 2026-10-08 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. \"This run\" is each category's share of the 100 points.\n\n| Category | Weight | This run | Score (0–100) | Points |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% | 20 | 42 | 8.4 |\n| Performance | 10% | pending | pending | n/a |\n| Schema \u0026 documentation | 13% | 16.2 | 50 | 8.1 |\n| Agent ergonomics | 13% | 16.2 | 74 | 12.0 |\n| Security \u0026 auth | 14% | 17.5 | 38 | 6.7 |\n| Payments \u0026 pricing | 10% | 12.5 | 20 | 2.5 |\n| Task success | 10% | pending | pending | n/a |\n| Maintenance \u0026 community | 7% | 8.8 | 28 | 2.5 |\n| Transparency \u0026 trust (editorial 39, provenance 79) | 7% | 8.8 | 59 | 5.2 |\n| Negative events | up to −15 | up to −15 | none recorded | 0 |\n| **Total** | | | | **45.3 → E** |\n\n### Why each score\n\n- Reliability 42: Graded on the public JSON-RPC API with the hosted lines. No working public status page was found. moz.statuspage.io redirects to a page saying Moz Status is inactive, the docs and help hub link none, and status.moz.com and health.moz.com did not connect from our network (0). No readable incident history (5). Edge limits are published with numbers, 2,000 requests in 60 seconds, 20 client errors in 60 seconds and a 30-minute block after ten 401 or 403 responses in five minutes, plus one request every ten seconds on the free plan (15). Per-method 429 responses carry `Retry-After` and the docs say to honour it, edge 429 responses carry none and the docs ask for exponential backoff, and no idempotency guidance was found for the Local write methods (12). The General Conditions promise commercially reasonable efforts at availability with no SLA or credits (0). The JSON-RPC API is generally available, and the MCP server is beta (10). 0 + 5 + 15 + 12 + 0 + 10 = 42.\n- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.\n- Schema \u0026 documentation 50: No downloadable OpenAPI or OpenRPC file was found, and api.moz.com/openrpc.json and /openapi.json return 404. Each method page is generated from JSON Schema definitions for payload, result and quota, which we count as a partial contract (8). moz.com/llms.txt returns 404 and no Markdown docs for agents were found (0). Method descriptions state the purpose and the row cost, and the guides explain async calls and errors, but few say when not to use a method (10). Inputs are typed with enums for scope, sort, filters, engine and device, numeric ranges and required fields (13). Request and response examples appear on each method page and in cURL, Python and JavaScript, and the error guide lists 13 codes with sample bodies (14). The docs say the API is not versioned, and the product updates archive holds one dated Moz API entry in the last 90 days (5). 8 + 0 + 10 + 13 + 14 + 5 = 50.\n- Agent ergonomics 74: List methods take `limit` (1 to 50 on link lists) and separate methods return a single keyword metric, but no field selection was found, and a site metrics object carries about 60 fields (15). Paging by opaque token, sort keys and named filters such as external, follow and gained_last_60_days (20). Errors carry a stable code, HTTP status, `data.issue`, `data.key` and an explanation, though the status field is named `status` in some bodies and `httpStatus` in others (19). The Data methods are reads, validation and quota checks run before any rows are used, and async calls can be polled again, but no idempotency keys were found for the Local write methods (13). `site_query` is the only required input on most site methods, the request `id` must be at least 24 characters, and no official SDK was found in the reviewed documentation (7). 15 + 20 + 19 + 13 + 7 = 74.\n- Security \u0026 auth 38: Plain revocable tokens, up to five per account, sent in the `x-moz-token` header and never in a URL. No scopes were found. The beta MCP server adds OAuth with PKCE and dynamic client registration, with a single scope named `mcp` (20). The Data methods only read, but there's no read-only or per-product token, and the same token works on the Local endpoint, whose methods create, update, cancel and close locations (8). Results carry page titles, anchor text and search result snippets from the open web, and no prompt-injection guidance was found (0). Each response reports the quota used and the dashboard has a usage page, which sits behind a login we couldn't read. No audit log was found in the docs (5). security.txt gives a contact address, but it expired about three hours before our check and its policy, acknowledgements and PGP key links return 404. No SOC 2 or ISO 27001 statement and no bug bounty were found on the pages reviewed (5). 20 + 8 + 0 + 5 + 5 = 38.\n- Payments \u0026 pricing 20: No x402, MPP or L402 (0). Plan prices, monthly rows and per-row overage prices are public without a login, and each method page states its row cost (20). The free plan of 50 rows a month requires a valid credit card, so it doesn't count (0). A person has to sign up and check out in a browser before a token exists. The MCP server's OAuth has dynamic client registration but still needs the account owner to sign in (0). 0 + 20 + 0 + 0 = 20.\n- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.\n- Maintenance \u0026 community 28: The newest dated Moz API entry in the product updates archive is the MCP server beta of 14 August 2026, 55 days before the check (20). That is the only Moz API entry in the last 90 days, the other nine dated since 15 June are Moz Pro and Moz Local (0). A dated archive exists, and support is by api@moz.com and the help team contact form, with 24/7 online support claimed on the product page. We could not test response times, and the contact page returned 403 to our reader (8). No official SDK was found (0). No packages to assess (0). The API General Conditions were revised with effect from 12 August 2026, and API responses report service version 2.28.2, which has no public release notes. 20 + 0 + 8 + 0 + 0 = 28.\n- Transparency \u0026 trust 59: Editorial half only. Closed service with clear terms, the API General Conditions (effective 12 August 2026) and an API legal page with attribution rules (15). The privacy policy (effective 8 April 2025) has a table of retention periods by data category and describes transfers under the EU-U.S. Data Privacy Framework, but covers the whole Moz site. No data processing agreement and no statement on retention of API queries were found on the pages reviewed (15). The docs say no breaking changes are expected outside beta methods, while the terms let Moz change or discontinue the service without notice, and the note that some methods are documented only in the legacy docs carries no dates (5). No list of subprocessors or data locations was found. The privacy policy says data is shared with other Ziff Davis companies (4). 15 + 15 + 5 + 4 = 39.\n\nFix list for a coding agent, everything this grade says the listing lacks, the biggest gain first (19 items): https://www.anchorterminal.com/fixes/moz-api.md (JSON https://www.anchorterminal.com/fixes/moz-api.json)\n\n### What we couldn't check\n\n- unchecked: status.moz.com and health.moz.com did not connect from our network, so we can't say whether either hosts a live status page. moz.statuspage.io reports the page as inactive.\n- unchecked: the MCP server's tool list, schemas and annotations. Both endpoints return 401 without an account.\n- unchecked: the API dashboard and its usage page, which sit behind a login.\n- unchecked: moz.com/help/contact returned 403 to our reader, so support routes are taken from the product page and docs.\n- The founder's note said Moz's site could not be fetched earlier. On 8 October 2026 moz.com and api.moz.com answered curl with a plain user agent, and the docs were read from the page payload. WebFetch was refused for moz.com.\n- security.txt carried an expiry of 2026-10-07T22:45:48-07:00, about three hours before the check. It may be regenerated on a schedule, so the expired reading could be short-lived.\n- No data processing agreement, subprocessor list, SOC 2 or ISO 27001 statement was found on the pages reviewed. We tried moz.com/dpa, /subprocessors, /security and /trust, which return 404, and did not search further.\n- The welcome page says the API is moving between versions and some link and site methods are documented only in the legacy docs, although current method pages exist for most of those named. Which methods remain legacy-only was not established.\n- Whether an official SDK exists outside the docs was not established. None is named in the docs or on the product page.\n\n### Sources\n\n- product page (data sets, vendor claims, MCP mention): \u003chttps://moz.com/products/api\u003e (seen 2026-10-08)\n- pricing (plans, rows, overage, free plan limit, beta rows): \u003chttps://moz.com/products/api/pricing\u003e (seen 2026-10-08)\n- docs index and method list (73 methods): \u003chttps://moz.com/api/docs\u003e (seen 2026-10-08)\n- getting started (endpoint, quota, compression, beta methods, versioning): \u003chttps://moz.com/api/docs/guides/getting-started\u003e (seen 2026-10-08)\n- authentication (tokens, five per account, card for free plan): \u003chttps://moz.com/api/docs/guides/authentication\u003e (seen 2026-10-08)\n- error handling and rate limiting: \u003chttps://moz.com/api/docs/guides/error-handling\u003e (seen 2026-10-08)\n- MCP server guide (endpoints, OAuth, beta, Claude Code command): \u003chttps://moz.com/api/docs/guides/mcp-servers\u003e (seen 2026-10-08)\n- asynchronous calls guide: \u003chttps://moz.com/api/docs/guides/asynchronous-api-calls\u003e (seen 2026-10-08)\n- method page, List Links (schema, paging, filters, quota): \u003chttps://moz.com/api/docs/methods/DataSiteLinkListAction\u003e (seen 2026-10-08)\n- method page, Generate SERP (async, engines, shared rate limit, row cost): \u003chttps://moz.com/api/docs/methods/DataKeywordSerpGenerateAction\u003e (seen 2026-10-08)\n- MCP OAuth metadata (PKCE, dynamic registration, scope): \u003chttps://api.moz.com/.well-known/oauth-authorization-server\u003e (seen 2026-10-08)\n- API General Conditions (entity, availability, AI training clause, refunds): \u003chttps://moz.com/api-general-conditions\u003e (seen 2026-10-08)\n- API legal page (attribution, suspension, beta terms): \u003chttps://moz.com/help/links-api/getting-started/legal\u003e (seen 2026-10-08)\n- terms of use (effective 22 April 2023): \u003chttps://moz.com/terms-of-use\u003e (seen 2026-10-08)\n- privacy policy (effective 8 April 2025): \u003chttps://moz.com/privacy-policy\u003e (seen 2026-10-08)\n- product updates archive (MCP beta, 14 August 2026): \u003chttps://moz.com/whats-new/archive\u003e (seen 2026-10-08)\n- security.txt (expiry, contact, broken links): \u003chttps://moz.com/.well-known/security.txt\u003e (seen 2026-10-08)\n- Statuspage page reported inactive: \u003chttps://moz.statuspage.io/\u003e (seen 2026-10-08)\n- RDAP registration date for moz.com: \u003chttps://rdap.verisign.com/com/v1/domain/moz.com\u003e (seen 2026-10-08)\n\n## Who's behind it (provenance 79/100, checked 2026-10-08)\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Legal entity named | SEOmoz, Inc. | 20/20 |\n| Domain age | moz.com, registered 1998-04-29 (28 years) | 15/15 |\n| Endpoint on the vendor's domain | api.moz.com | 15/15 |\n| Terms of service | read, states 5 of the 7 things a reader expects, and has 2 clauses that cost points | 4.3/10 |\n| Privacy policy | read, states 8 of the 8 things a reader expects | 10/10 |\n| Status page | not found | 0/10 |\n| Changelog | published | 10/10 |\n| security.txt | published but past its Expires date | 5/10 |\n\nThe API General Conditions name SEOMOZ, INC., a Delaware corporation, as the contracting party. The site footer reads SEOMoz, Inc., a Ziff Davis company, and the terms of use give 360 Park Ave. S., 17th Floor, New York, NY 10010 for notices.\n\nThe API answers at https://api.moz.com/jsonrpc and the MCP server at https://api.moz.com/mcp/v1/data, both on moz.com.\n\nmoz.com/.well-known/security.txt gives a contact address and `Expiration: 2026-10-07T22:45:48-07:00`, about three hours before our fetch at 08:42 UTC on 8 October 2026. Its Policy, Acknowledgements and Encryption links (moz.com/security-policy, /hall-of-fame, /pgp-key.txt) return 404.\n\nmoz.statuspage.io redirects to a page saying the Moz Status page is inactive and visible only to team members. status.moz.com and health.moz.com did not connect from our network.\n\nThe changelog is Moz's product updates archive, which covers all products. The newest Moz API entry is the MCP server beta of 14 August 2026.\n\nRDAP for moz.com gives a registration date of 1998-04-29 and expiry in 2029.\n\nThe privacy policy is effective 8 April 2025 and says Moz is owned by Ziff Davis, Inc. and takes part in the EU-U.S. Data Privacy Framework.\n\n### Terms and privacy, as read\n\nA reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.\n\n**Terms of service** (https://moz.com/api-general-conditions), read 2026-10-08, dated 2026-08-12, states 5 of the 7 things a reader expects.\n\n- To know. Restricts benchmarking or competitive use (costs points). \"Subscriber will not use or access the Service for purposes of benchmarking or otherwise comparing the availability, performance or functionality of any Moz Services with similar third party software or API services.\"\n- To know. Says the terms or the service can change without notice (costs points). \"Notwithstanding the foregoing, Moz USA retains the right to revise and update these General Conditions at any time for any reason in its sole and absolute discretion, effective immediately on posting the same to www.moz.com or www.mozcast.com (the “Sites”).\"\n- To know. Requires arbitration or waives class actions. \"The parties to this Agreement will submit all disputes arising under this Agreement to arbitration in New York City, New York, before a single arbitrator of the American Arbitration Association (“AAA”).\"\n- Gives the date it was last updated. Last updated 2026-08-12.\n- Names the governing law or courts. The law of the State of New York.\n- States a limit on its liability. Capped at the fees paid in the 12 months before the claim.\n- Not found in the text. Says how changes to the terms are announced.\n- Not found in the text. Refers to a service level or uptime commitment.\n- Also in the text (2026-10-08). Subscribers may not use data obtained through the Services to develop, train, fine-tune or improve any artificial intelligence system, model or algorithm, or permit a third party to do so. \"use any data obtained through the Services to develop, train, fine-tune, refine, or improve any artificial intelligence system, model, or algorithm (including, without limitation, large language models, machine learning, or generative artificial intelligence), or permit any third party to do so\"\n- Also in the text (2026-10-08). Moz may use the subscriber's name and logo on the client identification part of its website, and the subscriber grants a licence for that use. \"You acknowledge and agree that We shall have the right to use Your name and/or logo on the client identification portion of Our website, and You hereby grant Us a license to all rights required for the lawful reproduction of Your name and/or logo on such page.\"\n- Also in the text (2026-10-08). Moz may change service fees for any renewal term, provided it gives notice of the new fees at least 30 days before that renewal term starts. \"We reserve the right to change Service Fees for any Renewal Term; provided, however, that such change will not take effect unless We provide You notice of different Service Fees at least thirty (30) days prior to the start of the applicable Renewal Term.\"\n\n**Privacy policy** (https://moz.com/privacy-policy), read 2026-10-08, dated 2025-04-08, states 8 of the 8 things a reader expects.\n\n- To know. Says it sells personal data or shares it for advertising. \"Under some circumstances we may sell or share the personal data you provide to us to provide ads to you that align with your interests.\"\n- Gives the date it was last updated. Last updated 2025-04-08.\n- Says how long data is kept. For as long as needed, with no period named.\n- Gives a privacy contact. privacy@moz.com.\n- Says where data is transferred or stored. Relies on the Data Privacy Framework.\n\n## Live (updated 2026-10-08 18:22 UTC)\n\n- Right now: up, HTTP 404, 139 ms, checked 2026-10-08 18:20 UTC (get on `https://api.moz.com/jsonrpc`)\n- Uptime 24h 100.0% (33 probes) · 30 days 100.0% (33 probes) · p50 155 ms · p95 393 ms\n- security.txt: valid\n- Watching changelog \u003chttps://moz.com/whats-new/archive\u003e\n- Watching privacy \u003chttps://moz.com/privacy-policy\u003e\n- Watching terms \u003chttps://moz.com/api-general-conditions\u003e\n- Always current: https://www.anchorterminal.com/api/v1/live/moz-api.json\n\n## Probe metrics\n\nNot measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.\n\n## Prices\n\n| Item | Price | Unit | Note |\n| --- | --- | --- | --- |\n| Free plan | free | per month (plan) | 50 rows a month, one request every ten seconds, credit card required |\n| Starter Medium | $20 | per month (plan) | 3,000 rows, no overage, plus 150 beta rows |\n| Starter Large | $75 | per month (plan) | 15,000 rows, plus 750 beta rows |\n| Growth Small | $125 | per month (plan) | 50,000 rows, plus 3,500 beta rows |\n| Growth Medium | $250 | per month (plan) | 120,000 rows, plus 8,400 beta rows |\n| Growth Large | $500 | per month (plan) | 500,000 rows, plus 35,000 beta rows |\n| Overage row, Starter Large | $0.005 | per record | $5 per 1,000 rows |\n| Overage row, Growth Small | $0.0025 | per record | $25 per 10,000 rows |\n| Overage row, Growth Medium | $0.002 | per record | $20 per 10,000 rows |\n| Overage row, Growth Large | $0.001 | per record | $10 per 10,000 rows |\n\nAcross all listings: https://www.anchorterminal.com/prices/index.md\n\n## Strengths\n\n- Error reference lists 13 codes, each with HTTP status, a machine-readable `data.issue` and the parameter at fault\n- Edge rate limits are published with numbers, and per-method 429 responses carry `Retry-After`\n- Each method page states its row cost, and validation and quota checks run before any rows are used\n- List methods take a `limit`, a paging token, sort keys and named filters\n- Public plan prices from $20 a month for 3,000 rows, with per-row overage prices\n\n## Weaknesses\n\n- No working public status page was found, and moz.statuspage.io reports the Moz Status page as inactive\n- No downloadable OpenAPI or OpenRPC file, no llms.txt and no official SDK in the reviewed documentation\n- Tokens have no scopes or read-only mode, and one token works on both the Data and Local MCP endpoints\n- The free plan of 50 rows a month requires a valid credit card\n- security.txt expired on 8 October 2026 (UTC), and its policy, acknowledgements and PGP key links return 404\n\n## Before you call it (notes for agents)\n\n1. Send a request `id` of at least 24 characters (letters, numbers and hyphens). A UUID works. Shorter ids are rejected with -32654.\n2. Stop on a 401. Ten 401 or 403 responses in five minutes block the caller for 30 minutes.\n3. On 429 with code -32658 wait the `Retry-After` seconds. On code -32650 no wait time is given, so back off exponentially.\n4. Call `quota.lookup` (free) before large pulls. List methods charge one row per result, and `limit` is capped at 50 on link lists.\n5. Poll `async.call.lookup` for `data.keyword.serp.generate`, and collect the result within 20 seconds of first seeing it complete.\n\n## Connect\n\nFirst request:\n\n```bash\ncurl -X POST https://api.moz.com/jsonrpc -H \"x-moz-token: $MOZ_TOKEN\" -H \"Content-Type: application/json\" -d '{\"jsonrpc\":\"2.0\",\"id\":\"01a0458f-a14f-7254-aa11-7c6cb734e3f2\",\"method\":\"quota.lookup\",\"params\":{\"data\":{\"path\":\"api.limits.data.rows\"}}}'\n```\n\nClaude Code:\n\n```bash\nclaude mcp add moz-mcp-v1-data https://api.moz.com/mcp/v1/data --transport http --header \"Authorization: Bearer $YOUR_MOZ_TOKEN\" --scope user\n```\n\nThrough letme (picks today, calling later): https://letme.dev/moz-api. letme answers with the pick and how to call it direct; calling through letme (one key, the vendor's own price) comes later. How it works: https://www.anchorterminal.com/letme/index.md\n\n## Similar tools\n\nRanked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.\n\n| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |\n| --- | --- | --- | --- | --- | --- | --- |\n| DataForSEO | B | 64.9 | 244 | seo.keywords, seo.backlinks, seo.serp, seo.rankings | no | https://www.anchorterminal.com/tools/dataforseo.md |\n| Manifold | C | 56.2 | 438 | seo.keywords, seo.backlinks, seo.serp, seo.rankings | no | https://www.anchorterminal.com/tools/manifold-mcp.md |\n| Semrush API + MCP | D | 53.1 | 487 | seo.keywords, seo.backlinks, seo.rankings, seo.serp | no | https://www.anchorterminal.com/tools/semrush.md |\n| Ahrefs | D | 49.8 | 526 | seo.keywords, seo.backlinks, seo.serp, seo.rankings | no | https://www.anchorterminal.com/tools/ahrefs.md |\n| Similarweb | D | 46 | 566 | seo.keywords, seo.serp, seo.rankings | no | https://www.anchorterminal.com/tools/similarweb.md |\n\n## Panel reviews (0)\n\nReviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .\n\nDesk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md\n\n## Notable\n\n- One URL, https://api.moz.com/jsonrpc, takes every call as a JSON-RPC 2.0 POST. The docs list 73 methods, 33 under `data` for links, sites and keywords, 35 under `local` for Moz Local, and five for quota, index, async and test calls (source: \u003chttps://moz.com/api/docs\u003e)\n- Quota is counted in rows, and each method page states its cost. Validation runs before the quota check, and a call that would exceed the balance is refused without using any rows (source: \u003chttps://moz.com/api/docs/guides/error-handling\u003e)\n- Edge limits are published. Ten 401 or 403 responses in five minutes block the caller for 30 minutes, 20 client errors in 60 seconds throttle it, and so do 2,000 requests in 60 seconds (source: \u003chttps://moz.com/api/docs/guides/error-handling\u003e)\n- The MCP server went to beta on 14 August 2026 with two endpoints, https://api.moz.com/mcp/v1/data and https://api.moz.com/mcp/v1/local, and is included in every paid plan as beta access (source: \u003chttps://moz.com/whats-new/archive, https://moz.com/products/api/pricing\u003e)\n- The General Conditions forbid using data from the service to develop, train or fine-tune any AI system or model, while allowing AI software to analyse the data for internal business purposes (source: \u003chttps://moz.com/api-general-conditions\u003e)\n- The docs say the API is not versioned and that no breaking changes are expected outside beta methods, which can change or be removed without notice (source: \u003chttps://moz.com/api/docs/guides/getting-started\u003e)\n- Moz says its link index covers 45.5 trillion links across 1 billion domains, with 1.25 billion monthly keyword volumes (source: \u003chttps://moz.com/products/api\u003e)\n\n## Compare\n\n- [Ahrefs vs Moz API](https://www.anchorterminal.com/compare/ahrefs-vs-moz-api.md): D 49.8 vs E 45.3\n- [DataForSEO vs Moz API](https://www.anchorterminal.com/compare/dataforseo-vs-moz-api.md): B 64.9 vs E 45.3\n- [Manifold vs Moz API](https://www.anchorterminal.com/compare/manifold-mcp-vs-moz-api.md): C 56.2 vs E 45.3\n- [Moz API vs Semrush API + MCP](https://www.anchorterminal.com/compare/moz-api-vs-semrush.md): E 45.3 vs D 53.1\n- [Moz API vs Similarweb](https://www.anchorterminal.com/compare/moz-api-vs-similarweb.md): E 45.3 vs D 46\n\n## Verify this listing\n\nFor the vendor. The badge or a plain link to this page verifies the listing, from a page on moz.com or one of its subdomains. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{\"slug\": \"moz-api\", \"url\": \"…\"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify\n\nHTML badge:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/moz-api\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/moz-api.svg\" alt=\"Moz API on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e\n```\n\nMarkdown badge, for a README:\n\n```markdown\n[![Moz API on Anchor Terminal](https://www.anchorterminal.com/badges/moz-api.svg)](https://www.anchorterminal.com/tools/moz-api)\n```\n\nPlain link:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/moz-api\"\u003eMoz API on Anchor Terminal\u003c/a\u003e\n```\n\n## Share this listing\n\nFor the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Moz API is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.\n\n- Dark: https://www.anchorterminal.com/assets/share/moz-api-dark.png\n- Light: https://www.anchorterminal.com/assets/share/moz-api-light.png\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Terminal", "url": "https://www.anchorterminal.com/tools/" }, { "name": "SEO \u0026 search visibility", "url": "https://www.anchorterminal.com/categories/seo" }, { "name": "Moz API", "url": "" } ], "description": "Moz API is a hosted JSON-RPC 2.0 service for SEO data from Moz's link and keyword indexes. It returns Domain Authority, backlinks, keyword metrics, ranking keywords and search results, with a beta MCP server for AI clients.", "facts": [ "rank #571 of 629", "API key auth", "0 desk reviews" ], "h1": "Moz API", "image": "https://www.anchorterminal.com/assets/og/tools-moz-api.png", "path": "/tools/moz-api", "published": "2026-10-01", "section": "tools", "title": "Moz API review for AI agents, grade E (45.3/100) | Anchor Terminal", "toc": null, "updated": "2026-10-08", "url": "https://www.anchorterminal.com/tools/moz-api" }, "tokens": { "markdown": 7950, "slim": 2030 }, "version": 1 }