{
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "attributionRequired": true,
    "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-11-06",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.7",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run",
    "terms": "https://www.anchorterminal.com/terms/#data"
  },
  "tool": {
    "slug": "autocua",
    "name": "AutoCua",
    "vendor": "Ashish Yadav and contributors (ComputerUseAgent on GitHub)",
    "vendorUrl": "https://github.com/ComputerUseAgent/AutoCua",
    "kind": "framework",
    "category": "desktop-automation",
    "summary": "AutoCua is an open-source Python agent that operates a computer the way a person does, desktop apps, a terminal, your own Chrome and iOS or Android phones, with any of 60 models from ten providers.",
    "url": "https://www.anchorterminal.com/tools/autocua",
    "markdownUrl": "https://www.anchorterminal.com/tools/autocua.md",
    "slimMarkdownUrl": "https://www.anchorterminal.com/tools/autocua.min.md",
    "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/autocua.json",
    "dns": "autocua.grade.anchorterminal.com",
    "repo": "https://github.com/ComputerUseAgent/AutoCua",
    "license": "MIT",
    "transports": [],
    "packages": [
      {
        "registry": "pypi",
        "name": "AutoCua"
      }
    ],
    "auth": "none",
    "authNotes": "No account. You bring an API key for the model provider you choose, kept with chats, Chrome profiles and a credential vault in a local AutoCua_data folder.",
    "pricing": "free",
    "pricingNotes": "Free and MIT-licensed. You pay your model provider for tokens. Nothing to buy from the project (checked 2026-11-06).",
    "priceSummary": "Free · OSS",
    "where": "library",
    "x402": {
      "level": "no",
      "evidence": "A local package with nothing to buy and no payment protocol (checked 2026-11-06).",
      "endpoints": []
    },
    "toolCount": null,
    "popularity": {
      "githubStars": null,
      "npmWeekly": null,
      "pypiWeekly": null,
      "asOf": "2026-11-06"
    },
    "docsUrl": "https://github.com/ComputerUseAgent/AutoCua#readme",
    "capabilities": [
      "browser.control",
      "agent.run"
    ],
    "tags": [
      "open-source",
      "mit",
      "python",
      "computer-use",
      "local",
      "new"
    ],
    "lastRelease": "2026-11-04",
    "graded": true,
    "anchor": {
      "graded": true,
      "score": 44.3,
      "grade": "E",
      "agentReady": false,
      "rank": 1100,
      "ranked": true,
      "rankOf": 1354,
      "categoryRank": 8,
      "methodology": "0.7",
      "run": "2026-10-01",
      "scores": {
        "ergonomics": 55,
        "maintenance": 65,
        "payments": 60,
        "reliability": 25,
        "schema": 42,
        "security": 38,
        "transparency": 42
      },
      "pending": [
        "performance",
        "tasks"
      ],
      "breakdown": [
        {
          "key": "reliability",
          "name": "Reliability",
          "weight": 16,
          "effectiveWeight": 20,
          "score": 25,
          "points": 5,
          "reason": "Local package. Installs from PyPI as AutoCua with Python 3.10 or later and the supported platforms stated (20). No CI runs the tests; the only workflow, use_case_label.yml, labels issues (0). GitHub issues weren't read, so the open-issue line is scored absent (0). Four tags in a week with no changelog file (5). Version 0.1.9 (0). 20 + 0 + 0 + 5 + 0 = 25.",
          "checked": "2026-11-06"
        },
        {
          "key": "performance",
          "name": "Performance",
          "weight": 10,
          "effectiveWeight": 0,
          "pending": true,
          "points": 0,
          "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes."
        },
        {
          "key": "schema",
          "name": "Schema \u0026 documentation",
          "weight": 13,
          "effectiveWeight": 16.25,
          "score": 42,
          "points": 6.83,
          "reason": "Framework reading. No API reference or typed interface beyond run_agent's documented arguments (5 of 25). No llms.txt (0). The README says what each mode drives and where it runs, and agent_capabilities.md lists what it can do (16 of 20). Modes and device are documented strings (6 of 15). Many examples, no documented errors (10 of 15). Tags without a changelog (5 of 15). 5 + 0 + 16 + 6 + 10 + 5 = 42.",
          "checked": "2026-11-06"
        },
        {
          "key": "ergonomics",
          "name": "Agent ergonomics",
          "weight": 13,
          "effectiveWeight": 16.25,
          "score": 55,
          "points": 8.94,
          "reason": "Framework reading. One call with a mode, provider, model and task runs a whole agent (20 of 25). A separate compression agent splices handoff summaries in, and runs are capped and stoppable (15 of 20). Permission and blocked-input errors are reported specifically, with no error reference (8 of 20). No resume or retry semantics described (2 of 20). Sensible defaults (simulators unless device is set), Python only (10 of 15). 20 + 15 + 8 + 2 + 10 = 55.",
          "checked": "2026-11-06"
        },
        {
          "key": "security",
          "name": "Security \u0026 auth",
          "weight": 14,
          "effectiveWeight": 17.5,
          "score": 38,
          "points": 6.65,
          "reason": "Framework reading (telemetry, approvals, guardrails, sandboxing). Provider keys stored in a local folder with Chrome profiles (10 of 30). The worker tools are an allow-list with no write tool, unseen ids are refused, downloads need a yes, but on Windows the model answers UAC elevation prompts itself through a kernel driver, with no person asked (6 of 20). The scraping ruleset has a prompt-injection instruction to log page text that gives instructions (10 of 15). Runs are logged in the app, with no audit log (7 of 15). No security policy, disclosure route or advisories found (5 of 20, for the vault and certificate handling). 10 + 6 + 10 + 7 + 5 = 38.",
          "checked": "2026-11-06"
        },
        {
          "key": "payments",
          "name": "Payments \u0026 pricing",
          "weight": 10,
          "effectiveWeight": 12.5,
          "score": 60,
          "points": 7.5,
          "reason": "Free self-hosted package with nothing to buy: 0 + 20 + 20 + 20 = 60.",
          "checked": "2026-11-06"
        },
        {
          "key": "tasks",
          "name": "Task success",
          "weight": 10,
          "effectiveWeight": 0,
          "pending": true,
          "points": 0,
          "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored."
        },
        {
          "key": "maintenance",
          "name": "Maintenance \u0026 community",
          "weight": 7,
          "effectiveWeight": 8.75,
          "score": 65,
          "points": 5.69,
          "reason": "v0.1.9 tagged on 4 November 2026 (30). Four tags in 90 days (20). Issues and pull requests weren't read (0 of 25). The PyPI wheel is current (15). No CI; dependencies pinned per OS in requirements files (0 of 10). 30 + 20 + 0 + 15 + 0 = 65.",
          "checked": "2026-11-06"
        },
        {
          "key": "transparency",
          "name": "Transparency \u0026 trust",
          "weight": 7,
          "effectiveWeight": 8.75,
          "score": 42,
          "points": 3.68,
          "note": "editorial 70, provenance 13",
          "reason": "MIT (30). Says it sends data only to the chosen model provider and keeps everything else locally, and the source agrees (20 of 30). No deprecation policy (0). States no telemetry, and none was found (20). 30 + 20 + 0 + 20 = 70.",
          "checked": "2026-11-06"
        }
      ],
      "assessment": {
        "date": "2026-11-06",
        "basis": "public evidence",
        "confidence": "low",
        "notes": {
          "ergonomics": "Framework reading. One call with a mode, provider, model and task runs a whole agent (20 of 25). A separate compression agent splices handoff summaries in, and runs are capped and stoppable (15 of 20). Permission and blocked-input errors are reported specifically, with no error reference (8 of 20). No resume or retry semantics described (2 of 20). Sensible defaults (simulators unless device is set), Python only (10 of 15). 20 + 15 + 8 + 2 + 10 = 55.",
          "maintenance": "v0.1.9 tagged on 4 November 2026 (30). Four tags in 90 days (20). Issues and pull requests weren't read (0 of 25). The PyPI wheel is current (15). No CI; dependencies pinned per OS in requirements files (0 of 10). 30 + 20 + 0 + 15 + 0 = 65.",
          "payments": "Free self-hosted package with nothing to buy: 0 + 20 + 20 + 20 = 60.",
          "reliability": "Local package. Installs from PyPI as AutoCua with Python 3.10 or later and the supported platforms stated (20). No CI runs the tests; the only workflow, use_case_label.yml, labels issues (0). GitHub issues weren't read, so the open-issue line is scored absent (0). Four tags in a week with no changelog file (5). Version 0.1.9 (0). 20 + 0 + 0 + 5 + 0 = 25.",
          "schema": "Framework reading. No API reference or typed interface beyond run_agent's documented arguments (5 of 25). No llms.txt (0). The README says what each mode drives and where it runs, and agent_capabilities.md lists what it can do (16 of 20). Modes and device are documented strings (6 of 15). Many examples, no documented errors (10 of 15). Tags without a changelog (5 of 15). 5 + 0 + 16 + 6 + 10 + 5 = 42.",
          "security": "Framework reading (telemetry, approvals, guardrails, sandboxing). Provider keys stored in a local folder with Chrome profiles (10 of 30). The worker tools are an allow-list with no write tool, unseen ids are refused, downloads need a yes, but on Windows the model answers UAC elevation prompts itself through a kernel driver, with no person asked (6 of 20). The scraping ruleset has a prompt-injection instruction to log page text that gives instructions (10 of 15). Runs are logged in the app, with no audit log (7 of 15). No security policy, disclosure route or advisories found (5 of 20, for the vault and certificate handling). 10 + 6 + 10 + 7 + 5 = 38.",
          "transparency": "MIT (30). Says it sends data only to the chosen model provider and keeps everything else locally, and the source agrees (20 of 30). No deprecation policy (0). States no telemetry, and none was found (20). 30 + 20 + 0 + 20 = 70."
        },
        "sources": [
          {
            "what": "repository README, pyproject.toml, licence, workflows and tags, cloned at c7ca4db",
            "url": "https://github.com/ComputerUseAgent/AutoCua",
            "seen": "2026-11-06"
          },
          {
            "what": "same repository under the AutoCua organisation, main branch matching",
            "url": "https://github.com/AutoCua/AutoCua",
            "seen": "2026-11-06"
          },
          {
            "what": "lead, Agent Tools Today for 5 November 2026",
            "url": "https://munderdiffl.in/blog/agent-tools-today-2026-11-05/",
            "seen": "2026-11-06"
          }
        ],
        "openQuestions": [
          "unchecked: GitHub issues and pull requests (not read), and the PyPI release history (registry JSON not requested)",
          "Who runs it. The licence names Ashish Yadav and most commits are from FunctionFreak; no company or site found",
          "Model-decided UAC elevation on Windows scored as a security weakness, not a deduction, since the README discloses it"
        ]
      },
      "negative": 0,
      "verdict": "A capable, fast-moving open-source agent for driving desktops, browsers and phones through real input and accessibility trees, with a careful safety section. It's two weeks old, with no test CI or changelog, and on Windows the model itself decides whether to accept an admin elevation prompt.",
      "bestFor": "Developers who want a local agent to operate desktop apps, their own browser or phones across platforms, on a machine they control.",
      "strengths": [
        "One run_agent call drives the desktop, a terminal, your Chrome, or an iOS or Android device",
        "Element picking from accessibility trees and OCR instead of pixel coordinates",
        "Credentials typed from a vault so the model never sees them, in the browser and phone agents",
        "No telemetry, and nothing downloaded without a yes on the terminal",
        "MIT licence, a pip wheel per OS and architecture, and 60 models across ten providers"
      ],
      "weaknesses": [
        "Two weeks old at version 0.1.9, with no changelog file",
        "No CI running the tests; the only workflow labels issues",
        "On Windows the model answers UAC elevation prompts itself through a kernel input driver",
        "Keeps API keys and logged-in Chrome profiles in a local folder next to the checkout",
        "No API reference beyond the README"
      ],
      "agentNotes": [
        "pip install AutoCua, then call run_agent with a mode such as \"web use\" or \"computer use\", a provider, a model and a task",
        "Run it on a machine or account you can afford to lose; it drives real input and keeps logged-in browser profiles",
        "On Windows, don't install the Interception driver unless you accept the model deciding UAC prompts",
        "Set AutoCua_DATA_DIR to keep keys and profiles somewhere private",
        "Phones go over USB from a script; Wi-Fi only through the desktop app"
      ],
      "metrics": {
        "kind": "local",
        "measured": false
      },
      "reviewCount": 0,
      "avgRating": 0,
      "history": [
        {
          "basis": "public evidence",
          "confidence": "low",
          "grade": "E",
          "methodology": "0.7",
          "pending": [
            "performance",
            "tasks"
          ],
          "run": "2026-10-01",
          "runLabel": "October 2026 research run",
          "score": 44.3
        }
      ],
      "editorialScores": {
        "ergonomics": 55,
        "maintenance": 65,
        "payments": 60,
        "reliability": 25,
        "schema": 42,
        "security": 38,
        "transparency": 70
      },
      "provenanceScore": 13,
      "checked": {
        "categories": {
          "ergonomics": "2026-11-06",
          "maintenance": "2026-11-06",
          "payments": "2026-11-06",
          "reliability": "2026-11-06",
          "schema": "2026-11-06",
          "security": "2026-11-06",
          "transparency": "2026-11-06"
        },
        "last": "2026-11-06",
        "oldest": "2026-11-06",
        "stale": false,
        "staleAfterDays": 90
      },
      "scoreHistory": [
        {
          "date": "2026-11-06",
          "grade": "E",
          "kind": "listed",
          "method": "0.7",
          "score": 44.3
        }
      ]
    },
    "connect": {
      "install": "pip install AutoCua\n# then, in Python:\n# from AutoCua.agent_launcher import run_agent\n# run_agent(mode=\"web use\", provider=\"openrouter\", model=\"gemini-3.8-flash\", task=\"Open wikipedia.org and summarise today's featured article.\")"
    },
    "letme": {
      "capability": "https://letme.dev/browser.control",
      "tool": "https://letme.dev/autocua"
    },
    "notable": [
      "Shown on Hacker News on 4 November 2026, the day v0.1.9 was tagged. The repository's first commit is 20 October 2026, with about 150 commits since (https://github.com/ComputerUseAgent/AutoCua)",
      "Acts through each operating system's own input layer and an accessibility tree fused with OCR, so the model picks numbered elements instead of coordinates, per the README (https://github.com/ComputerUseAgent/AutoCua#readme)",
      "On Windows, a UAC elevation prompt is put to the model as an allow-or-decline step and answered through the Interception kernel input driver, which you install yourself (https://github.com/ComputerUseAgent/AutoCua#readme)",
      "Says it sends nothing anywhere except to the chosen model provider, and Telegram if you connect it; the source has no analytics library (https://github.com/ComputerUseAgent/AutoCua)",
      "The README's badges and links point to github.com/AutoCua/AutoCua, which serves the same main branch as ComputerUseAgent/AutoCua (https://github.com/ComputerUseAgent/AutoCua)"
    ],
    "area": "developer",
    "details": [
      {
        "label": "Surface graded",
        "value": "The open-source package, read from a clone of github.com/ComputerUseAgent/AutoCua (main at c7ca4db) on 6 November 2026: the README, pyproject.toml, licence, workflows and tags. Nothing was installed or run, and GitHub issues weren't read"
      },
      {
        "label": "Modes",
        "value": "computer use (macOS, Windows, Linux with GNOME), computer use with phone sub-agents, shell use, web use through your own Chrome and an extension, mobile use on an iOS Simulator or paired iPhone (Mac only) and on an Android emulator or phone"
      },
      {
        "label": "Safety",
        "value": "A UAC prompt is asked of the model with no screenshot, and its alt+y or alt+n is injected through the Interception driver. The worker tool set has no write tool, unseen element ids are refused, vault credentials are typed by the runtime, nothing is downloaded without a yes, stop is checked before every action, and shell commands are capped at 10 minutes"
      },
      {
        "label": "Data",
        "value": "Chats, API keys, persistent Chrome profiles, the credential vault and skills live in AutoCua_data next to the checkout or the working directory, or where AutoCua_DATA_DIR points"
      },
      {
        "label": "Releases",
        "value": "Tags v0.1.6 (30 October), v0.1.7 (31 October), v0.1.8 (3 November) and v0.1.9 (4 November) 2026, and a PyPI wheel per OS and architecture with the Rust extensions prebuilt"
      }
    ],
    "provenance": {
      "legalEntity": "",
      "domain": "github.com",
      "domainRegistered": "",
      "endpointOnVendorDomain": null,
      "terms": "",
      "privacy": "",
      "statusPage": "",
      "changelog": "",
      "securityTxt": "none",
      "checked": "2026-11-06",
      "notes": [
        "The licence names Ashish Yadav as copyright holder; most commits are from the GitHub user FunctionFreak. No company, site or terms were found.",
        "github.com/AutoCua/AutoCua and github.com/ComputerUseAgent/AutoCua serve the same main branch, so one is a rename or mirror of the other."
      ],
      "score": 13,
      "checks": [
        {
          "check": "Legal entity named",
          "value": "not found",
          "points": 0,
          "max": 20,
          "state": "no"
        },
        {
          "check": "Domain age",
          "value": "github.com, no registry record we could read",
          "points": 0,
          "max": 15,
          "state": "no"
        },
        {
          "check": "Endpoint on the vendor's domain",
          "value": "no hosted endpoint",
          "points": 0,
          "max": 0,
          "state": "na"
        },
        {
          "check": "Terms of service",
          "value": "nothing hosted, so the MIT licence stands in",
          "points": 10,
          "max": 10,
          "state": "ok"
        },
        {
          "check": "Privacy policy",
          "value": "nothing hosted, not scored",
          "points": 0,
          "max": 0,
          "state": "na"
        },
        {
          "check": "Status page",
          "value": "not found",
          "points": 0,
          "max": 10,
          "state": "no"
        },
        {
          "check": "Changelog",
          "value": "not found",
          "points": 0,
          "max": 10,
          "state": "no"
        },
        {
          "check": "security.txt",
          "value": "not found",
          "points": 0,
          "max": 10,
          "state": "no"
        },
        {
          "check": "People named",
          "value": "not researched yet",
          "points": 0,
          "max": 0,
          "state": "na"
        },
        {
          "check": "Support route",
          "value": "not researched yet",
          "points": 0,
          "max": 0,
          "state": "na"
        }
      ]
    },
    "pageJsonUrl": "https://www.anchorterminal.com/tools/autocua.json"
  }
}