{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-14", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "brea", "name": "Brea", "vendor": "Brea AI LLC", "vendorUrl": "https://brea.ai", "kind": "platform", "category": "personal-assistants", "summary": "Brea is a hosted personal AI assistant people text in iMessage. It replies to email, books flights and handles tasks across more than 2,000 connected apps, and uses a cloud browser for sites without an integration.", "url": "https://www.anchorterminal.com/tools/brea", "markdownUrl": "https://www.anchorterminal.com/tools/brea.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/brea.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/brea.json", "license": "Closed service under Brea's terms (Brea AI LLC, last updated 2 July 2026).", "transports": [], "packages": [], "auth": "mixed", "authNotes": "Sign up with a phone number at https://app.brea.ai/start, then text Brea in iMessage (https://brea.ai/llms.txt). Brea texts a secure link to connect an app when it needs one, and OAuth tokens are stored encrypted by its managed OAuth provider. Site logins are saved on a secure page, never in chat (https://brea.ai and https://brea.ai/privacy).", "pricing": "freemium", "pricingNotes": "\"Every account starts free, with every feature included. You do not need a credit card to sign up\" (https://brea.ai, FAQ, checked 14 October 2026). The docs name three plans, Free, Starter and Pro, which differ in monthly AI usage (not numbered) and connectors (1, 3 and no limit), billed monthly or yearly, with current prices shown only on the in-app Plan page (https://docs.brea.ai/settings/plan/). No paid price was published.", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 found on brea.ai, llms.txt or the terms, checked 14 October 2026. Purchases use one-time cards through Link by Stripe.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-14" }, "docsUrl": "https://docs.brea.ai", "llmsTxt": "https://brea.ai/llms.txt", "capabilities": [ "assistant.messaging", "assistant.accounts", "assistant.memory", "messaging.rcs", "messaging.inbound", "mailbox.read", "mailbox.send", "calendar.write", "browser.hosted", "commerce.checkout", "payments.card-token", "travel.booking", "memory.user", "notify.push" ], "tags": [ "hosted", "official", "closed-source", "freemium", "free-tier", "no-card", "ios", "llms-txt" ], "graded": true, "disclosure": "Brea competes with LocalGhost, which Anchor Terminal's founder builds. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.", "competesWith": "localghost", "anchor": { "graded": true, "score": 12.9, "grade": "F", "agentReady": false, "rank": 1001, "ranked": true, "rankOf": 1010, "categoryRank": 36, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 0, "maintenance": 4, "payments": 20, "reliability": 15, "schema": 10, "security": 7, "transparency": 48 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 15, "points": 3, "reason": "Read with the hosted lines. No status page found (0). No readable incident history (5). The plan docs describe AI usage as some, more and most for Free, Starter and Pro, with only the connector caps (1, 3 and no limit) numbered, and Brea stops answering at the limit (0). No overload or retry guidance (0). No SLA found (0). Not labelled beta (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 10, "points": 1.63, "reason": "Graded on the interface an outside agent can use, as GRADER.md asks. Brea has no API, MCP server or A2A endpoint for an agent, so the contract, description, typed-input and example lines score nothing (0 of 25, 0 of 20, 0 of 15, 0 of 15). That is a statement about agent access, not about the product for people. brea.ai/llms.txt and a docs site at docs.brea.ai with guides and troubleshooting (10). The versioning and changelog line versions an agent interface, and with none there is nothing to version, so it scores nothing (0 of 15). This is the reading the 12 October auditor applied to every listing without an agent interface, and app release notes count under maintenance instead." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 0, "points": 0, "reason": "Graded on the interface an outside agent can use. Brea has none, so context cost, pagination, errors, retries and defaults have nothing to score (0 on each line). This says nothing about the product for people." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 7, "points": 1.23, "reason": "Graded on the interface an outside agent can use. With none for Brea, the credential, least-privilege, injection and audit lines score nothing (0 of 30, 0 of 20, 0 of 15, 0 of 15), whatever the service does for its owner. The security programme line doesn't need an interface and is scored. For the record, Brea asks in iMessage before it sends, deletes, shares or changes a setting (allow, always or deny), pays with a new Link one-time card after each approval, and per the security page injects credentials server-side and runs each customer on a dedicated instance. brea.ai/.well-known/security.txt returns 404, but the security page (updated August 2026) sets out responsible disclosure to security@brea.ai, read by a person, and says Brea is CASA Tier 2 verified. No bug bounty, SOC 2 report or advisories found. A disclosure route with a CASA assessment sits below Natura's 10 for SOC 2 Type I and a disclosure address (7 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 20, "points": 2.5, "reason": "Read with the hosted rule. No x402, MPP or L402. Purchases use one-time cards through Link (0). The docs name Free, Starter and Pro and say the Plan page in the app shows current prices, and no paid price is published (0). The FAQ and the plan docs say every account starts on Free with every feature and no credit card (20). A person signs up with a phone number at app.brea.ai/start (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 4, "points": 0.35, "reason": "Read for a closed service. No changelog, release notes or app-store version found. The one blog post, 29 July 2026, introduces the blog (0). No dated product entries in the last 90 days (0). A docs site with troubleshooting pages and support@brea.ai, untested, like Natura's 4 for a community channel and an address (4 of 15). No MCP server or SDK (0). No package or CI to judge (0)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 48, "points": 4.2, "note": "editorial 40, provenance 55", "reason": "Closed service under terms last updated on 2 July 2026 naming Brea AI LLC (15). The privacy policy of 28 September 2026 keeps Google data out of generalised models and bars model providers from training on it, and deletes conversations and files with the account. The security page says Brea never trains on customer data. Consistent, with no periods beyond deletion (20 of 30). No deprecation policy or dated notices found (2 of 20). OAuth tokens are held by a managed OAuth provider that isn't named, and no hosting or model providers or regions are named (3 of 20)." } ], "assessment": { "date": "2026-10-14", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Graded on the interface an outside agent can use. Brea has none, so context cost, pagination, errors, retries and defaults have nothing to score (0 on each line). This says nothing about the product for people.", "maintenance": "Read for a closed service. No changelog, release notes or app-store version found. The one blog post, 29 July 2026, introduces the blog (0). No dated product entries in the last 90 days (0). A docs site with troubleshooting pages and support@brea.ai, untested, like Natura's 4 for a community channel and an address (4 of 15). No MCP server or SDK (0). No package or CI to judge (0).", "payments": "Read with the hosted rule. No x402, MPP or L402. Purchases use one-time cards through Link (0). The docs name Free, Starter and Pro and say the Plan page in the app shows current prices, and no paid price is published (0). The FAQ and the plan docs say every account starts on Free with every feature and no credit card (20). A person signs up with a phone number at app.brea.ai/start (0).", "reliability": "Read with the hosted lines. No status page found (0). No readable incident history (5). The plan docs describe AI usage as some, more and most for Free, Starter and Pro, with only the connector caps (1, 3 and no limit) numbered, and Brea stops answering at the limit (0). No overload or retry guidance (0). No SLA found (0). Not labelled beta (10).", "schema": "Graded on the interface an outside agent can use, as GRADER.md asks. Brea has no API, MCP server or A2A endpoint for an agent, so the contract, description, typed-input and example lines score nothing (0 of 25, 0 of 20, 0 of 15, 0 of 15). That is a statement about agent access, not about the product for people. brea.ai/llms.txt and a docs site at docs.brea.ai with guides and troubleshooting (10). The versioning and changelog line versions an agent interface, and with none there is nothing to version, so it scores nothing (0 of 15). This is the reading the 12 October auditor applied to every listing without an agent interface, and app release notes count under maintenance instead.", "security": "Graded on the interface an outside agent can use. With none for Brea, the credential, least-privilege, injection and audit lines score nothing (0 of 30, 0 of 20, 0 of 15, 0 of 15), whatever the service does for its owner. The security programme line doesn't need an interface and is scored. For the record, Brea asks in iMessage before it sends, deletes, shares or changes a setting (allow, always or deny), pays with a new Link one-time card after each approval, and per the security page injects credentials server-side and runs each customer on a dedicated instance. brea.ai/.well-known/security.txt returns 404, but the security page (updated August 2026) sets out responsible disclosure to security@brea.ai, read by a person, and says Brea is CASA Tier 2 verified. No bug bounty, SOC 2 report or advisories found. A disclosure route with a CASA assessment sits below Natura's 10 for SOC 2 Type I and a disclosure address (7 of 20).", "transparency": "Closed service under terms last updated on 2 July 2026 naming Brea AI LLC (15). The privacy policy of 28 September 2026 keeps Google data out of generalised models and bars model providers from training on it, and deletes conversations and files with the account. The security page says Brea never trains on customer data. Consistent, with no periods beyond deletion (20 of 30). No deprecation policy or dated notices found (2 of 20). OAuth tokens are held by a managed OAuth provider that isn't named, and no hosting or model providers or regions are named (3 of 20)." }, "sources": [ { "what": "home page and FAQ", "url": "https://brea.ai", "seen": "2026-10-14" }, { "what": "llms.txt", "url": "https://brea.ai/llms.txt", "seen": "2026-10-14" }, { "what": "security page", "url": "https://brea.ai/security", "seen": "2026-10-14" }, { "what": "plans docs", "url": "https://docs.brea.ai/settings/plan/", "seen": "2026-10-14" }, { "what": "usage limit docs", "url": "https://docs.brea.ai/troubleshooting/usage-limit/", "seen": "2026-10-14" }, { "what": "approvals docs", "url": "https://docs.brea.ai/privacy/approvals/", "seen": "2026-10-14" }, { "what": "blog", "url": "https://brea.ai/blog", "seen": "2026-10-14" }, { "what": "terms", "url": "https://brea.ai/terms", "seen": "2026-10-14" }, { "what": "privacy policy", "url": "https://brea.ai/privacy", "seen": "2026-10-14" }, { "what": "status subdomain DNS lookup", "url": "https://dns.google/resolve?name=status.brea.ai\u0026type=A", "seen": "2026-10-14" }, { "what": "App Store search", "url": "https://itunes.apple.com/search?term=brea+ai+llc\u0026entity=software\u0026country=us", "seen": "2026-10-14" } ], "openQuestions": [ "Paid plan prices.", "Which providers host Brea and its models." ] }, "negative": 0, "verdict": "Brea is an iMessage assistant with a free plan that needs no card, approval by reply before it sends, deletes or pays, and one-time Link cards for purchases. No outside agent can call it, paid prices sit inside the app, and no changelog or subprocessor list was found.", "bestFor": "An iPhone user who wants an assistant across many apps and websites with per-action approval.", "disclosure": "Brea competes with LocalGhost, which Anchor Terminal's founder builds. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.", "strengths": [ "Free plan with every feature and no credit card, per the FAQ and docs.", "Asks before sending, inviting, deleting, paying or changing settings, with ALLOW, ALWAYS or DENY replies.", "Each purchase uses a new one-time card approved in Link.", "A published security reporting address, read by a person." ], "weaknesses": [ "No API, MCP server or A2A endpoint for an outside agent.", "Paid plan prices appear only on the in-app Plan page.", "No changelog, release notes or status page found.", "No hosting, model or OAuth providers named." ], "agentNotes": [ "Don't plan to call Brea from another agent. It answers only the owner's iMessage thread.", "Tell the owner that replying ALWAYS stops Brea asking again for that action." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "F", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 12.9 } ], "editorialScores": { "ergonomics": 0, "maintenance": 4, "payments": 20, "reliability": 15, "schema": 10, "security": 7, "transparency": 40 }, "provenanceScore": 55 }, "connect": {}, "letme": { "capability": "https://letme.dev/assistant.messaging", "tool": "https://letme.dev/brea" }, "notable": [ "Before Brea sends, deletes, shares or changes a setting it asks in iMessage, and the owner replies allow, always or deny (https://brea.ai)", "Payments go through Link by Stripe, with a new one-time card for each purchase the owner approves (https://brea.ai)", "The security page (August 2026) says credentials are injected server-side when a tool runs, so the model holds only references, and that each customer has a dedicated, isolated instance (https://brea.ai/security)", "Brea says it is CASA Tier 2 verified and never trains on customer data (https://brea.ai/security)", "The privacy policy (28 September 2026) says Google user data is not used to train generalised models and model providers may not train on it, and conversations and files are deleted with the account (https://brea.ai/privacy)", "Brea has an iOS app with a Connectors screen and push notifications (https://brea.ai/privacy)" ], "area": "frameworks", "details": [ { "label": "Surface listed", "value": "Brea's iMessage assistant and iOS app, read from brea.ai, llms.txt, the security page, terms and privacy policy on 14 October 2026. docs.brea.ai was not read. No account was created." }, { "label": "Where it runs", "value": "A cloud service with a dedicated, isolated instance per customer (https://brea.ai/security). Hosting and model providers are not named." }, { "label": "What it acts on", "value": "Email, calendar, files and more than 2,000 connected apps, plus any website through a browser, including bookings and purchases (https://brea.ai)." }, { "label": "Outside agent access", "value": "None found." }, { "label": "Company", "value": "Brea AI LLC. Support support@brea.ai (https://brea.ai/terms and https://brea.ai/llms.txt)." } ], "provenance": { "legalEntity": "Brea AI LLC", "domain": "brea.ai", "domainRegistered": "2023-08-25", "endpointOnVendorDomain": null, "terms": "https://brea.ai/terms", "privacy": "https://brea.ai/privacy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-14", "notes": [ "The terms were last updated on 2 July 2026 and the privacy policy on 28 September 2026.", "brea.ai/.well-known/security.txt returns 404. No status page or changelog was found.", "RDAP gives a registration date of 2023-08-25 for brea.ai, which may predate the product." ], "score": 55, "checks": [ { "check": "Legal entity named", "value": "Brea AI LLC", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "brea.ai, registered 2023-08-25 (3 years)", "points": 7, "max": 15, "state": "part" }, { "check": "Endpoint on the vendor's domain", "value": "no hosted endpoint", "points": 0, "max": 0, "state": "na" }, { "check": "Terms of service", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "Privacy policy", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/brea.json" } }