All 20 Criteria
P1-A Structured Data — 1/5
No schema.org Organization, Product, or Offer markup detected on mintmcp.com. Standard enterprise B2B site with no structured data signals for machine buyers.
P1-B Machine-Readable Pricing — 0/5
No public pricing whatsoever. All pricing gated behind a custom quote request form and sales consultation. An AI agent cannot evaluate cost from any public page.
P1-C llms.txt / Agent Layer — 3/5
/llms.txt confirmed present at mintmcp.com/llms.txt. Content provides a clear structured description of MintMCP's purpose ("enterprise MCP gateway that adds authentication, authorization, policy enforcement, observability, and audit logging to AI-to-data/tool connections"), capabilities, and deployment options. Exists and is useful — but lacks structured links, capability listings, or agent-facing metadata beyond a prose description.
P1-D API / MCP Availability — 3/5
MintMCP hosts and brokers 10,000+ MCP servers and generates OpenAPI specs for ChatGPT Custom Actions compatibility. Supports JSON-RPC protocol. OAuth 2.0/2.1 with PKCE documented for enterprise. However, no public REST API spec or MCP server for MintMCP itself is published — the product requires enterprise onboarding to access.
P1-E Discoverability (GEO) — 3/5
Confirmed /llms.txt. Active blog targeting specific integration keywords (MCP for PostgreSQL, Jira, Confluence, etc.). Appears in multiple AI agent infrastructure search queries. Solid SEO-quality content with some GEO intent.
P2-A Offer Completeness — 1/5
"What" (MCP gateway with auth, logging, governance) is clearly described. "Who" (enterprise teams) is clear. "How Much" is entirely absent — no pricing visible anywhere. An agent cannot evaluate the full offer without human-mediated sales contact.
P2-B Scope & Limits — 2/5
Role-based access control, connection pooling, circuit breakers, and query result caching with configurable TTLs are mentioned in technical documentation. But specific rate limits, connection caps, or throughput boundaries are not published.
P2-C Substitution Rules — 2/5
Circuit breakers for graceful service degradation documented in enterprise deployment guide. Request queuing for traffic spikes mentioned. Some fallback logic is stated — better than most, but not in a structured, machine-readable format.
P2-D Conditional Logic — 1/5
All pricing and access conditions hidden behind sales contact. Four team-size segments disclosed (1–50, 51–1K, 1K–10K, 10K+ users) but no conditions, terms, or access rules associated with these. Contact sales or enterprise@mintmcp.com required.
P2-E Semantic Precision — 3/5
Technical documentation is substantively precise: OAuth 2.1 with PKCE, SAML/SSO, JSON-RPC, SOC 2 Type II, response latency monitoring, audit log format with user attribution. Specific protocol and compliance terminology used accurately throughout.
P3-A Verifiable Performance — 3/5
SOC 2 Type II certification verified (the highest level — ongoing audits, not a one-time assessment). Named enterprise customers: Coursera, Harvey AI, Flux AI, AC Transit. Self-reported claims only on uptime/performance — no public status page or third-party uptime dashboard found.
P3-B Scoped Permissions — 4/5
Role-based access control is a core product feature ("Sales teams see CRM tools, engineers see code tools"). SSO-based credential management scopes access by user type. Policy enforcement at the gateway level. Agent-scoped permissions with action-bounded controls are the explicit value proposition.
P3-C Audit Trail — 4/5
Complete audit trails for every tool call are a core product feature. Centralized logging with user attribution documented. Captures file operations, command execution, and tool invocations in real-time. The product exists to make agent actions auditable — this is the strongest pillar score.
P3-D Behavioral Consistency — 3/5
SOC 2 Type II implies ongoing, audited consistency. Enterprise SLAs mentioned ("high availability — enterprise SLAs") but specific SLA terms not published. No versioned terms or explicit notice periods found. The product's governance positioning implies stability commitment.
P4-A Friction-Free Activation — 1/5
No self-serve tier, no public API key, no free trial that is agent-accessible. Getting started requires scheduling a consultation or emailing enterprise@mintmcp.com. A sales call is required before any access. Maximum friction for an autonomous agent buyer.
P4-B Agent Decision Signals — 1/5
No free tier, no programmatic trial signal, no agent-legible "when to act" indicator. The only signals available are the existence of a pricing page (team size segmentation) and a free trial form — both require human action to proceed.
P5-A Integration Depth — 4/5
10,000+ MCP servers accessible through the gateway. Deep integration with enterprise data systems (Snowflake, BigQuery, Google Drive, Salesforce, Slack, etc.). Role-based tool access creates organizational-level lock-in. Replacing MintMCP means re-establishing all server connections, auth configs, and access policies across every AI tool in the organization. High switching cost.
P5-B Agent Memory Layer — 3/5
Comprehensive audit logs create a rich historical record of agent behavior. Real-time agent monitoring feeds behavioral data back into the system. Account-level history is maintained. Not quite a queryable agent memory API, but audit trail data is structurally close to one.
P5-C Programmatic Renewal — 1/5
Enterprise licensing model. No programmatic renewal API or agent-accessible subscription management found. Renewal is human-managed via sales relationship.
P5-D Compounding Value Signal — 2/5
The audit trail and agent behavior data compounds over time — more usage means richer governance history, better anomaly detection, and stronger compliance posture. But no agent-readable signal of this compounding value is exposed (no API endpoint to query "your security posture improvement score" or similar).
Rubric v1 (April 2026). Scores reflect the company's state on the audit date and may have improved since.