{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-14", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "caddy-app", "name": "Caddy", "vendor": "Caddy Technologies Inc.", "vendorUrl": "https://caddy.app", "kind": "platform", "category": "personal-assistants", "summary": "Caddy is a hosted personal AI assistant people text over iMessage or RCS. It watches connected mail, calendars and work apps, sends reminders and briefings, and drafts replies and calendar changes for the owner.", "url": "https://www.anchorterminal.com/tools/caddy-app", "markdownUrl": "https://www.anchorterminal.com/tools/caddy-app.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/caddy-app.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/caddy-app.json", "license": "Closed service under Caddy's Terms of Service (Caddy Technologies Inc., last updated 27 April 2026).", "transports": [], "packages": [], "auth": "mixed", "authNotes": "Sign-in is with Google, then the person connects tools and continues in Messages (https://caddy.app/llms.txt). Financial accounts connect through Plaid, and Caddy does not receive bank login credentials (https://caddy.app/privacy).", "pricing": "free", "pricingNotes": "\"Caddy is free to use\" (https://caddy.app/llms.txt, checked 14 October 2026). The terms say some parts of the service may require payment, with pricing given in the service (https://caddy.app/terms-of-service). No paid plan was published.", "priceSummary": "Free", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 found on caddy.app, llms.txt and the terms, checked 14 October 2026.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-14" }, "llmsTxt": "https://caddy.app/llms.txt", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "messaging.rcs", "messaging.inbound", "mailbox.read", "calendar.write", "tasks.create", "memory.user" ], "tags": [ "hosted", "official", "closed-source", "free", "llms-txt", "ios" ], "lastRelease": "2026-10-13", "graded": true, "disclosure": "Caddy competes with LocalGhost, which Anchor Terminal's founder builds. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.", "competesWith": "localghost", "anchor": { "graded": true, "score": 16.7, "grade": "F", "agentReady": false, "rank": 996, "ranked": true, "rankOf": 1010, "categoryRank": 32, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 0, "maintenance": 55, "payments": 30, "reliability": 10, "schema": 10, "security": 0, "transparency": 52 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 10, "points": 2, "reason": "Read with the hosted lines. No status page found (0). No readable incident history (5). No limits published (0). No overload or retry guidance (0). No SLA found (0). The FAQ says Caddy is in public beta while anyone can sign up with Google. The Marmot and Instinct dossiers gave half for a service taking sign-ups while labelled preview or behind a waitlist step (5 of 10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 10, "points": 1.63, "reason": "Graded on the interface an outside agent can use, as GRADER.md asks. Caddy has no API, MCP server or A2A endpoint for an agent, so the contract, description, typed-input and example lines score nothing (0 of 25, 0 of 20, 0 of 15, 0 of 15). That is a statement about agent access, not about the service for people. caddy.app/llms.txt describes channels, connections, approvals and pricing (10). The versioning and changelog line versions an agent interface, and with none there is nothing to version, so it scores nothing (0 of 15), the reading the 12 October audit applied to every listing without an agent interface." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 0, "points": 0, "reason": "Graded on the interface an outside agent can use. Caddy has none, so context cost, pagination, errors, retries and defaults have nothing to score (0 on each line). This says nothing about the service for people." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 0, "points": 0, "reason": "Graded on the interface an outside agent can use. With none for Caddy, the credential, least-privilege, injection and audit lines score nothing (0 of 30, 0 of 20, 0 of 15, 0 of 15), whatever the service does for its owner. The security programme line doesn't need an interface and is scored. For the record, llms.txt says Caddy asks for approval before sending email, creating invites or changing data, and the bank link through Plaid is read-only. caddy.app/.well-known/security.txt returns 404, and no security contact, disclosure policy, bug bounty, certification or advisories were found (0 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 30, "points": 3.75, "reason": "Read with the hosted rule. No x402, MPP or L402 (0). llms.txt says Caddy is free to use and no paid plan is published. The terms say some functions may need payment with prices shown in the service, the reading we took for every free-only service in this batch (10). Sign-in is with Google with no card step, and llms.txt states the service is free (20). A person signs in with Google in a browser (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 55, "points": 4.81, "reason": "Read for a closed service. Caddy's iOS app, sold by Caddy Technologies Inc and linking to caddy.app, reached 1.7 on the App Store on 13 October 2026 (30). Eight iOS versions from 1.0 on 21 August to 1.7 on 13 October (20). No changelog page, short descriptive App Store notes (widgets, the vault, Apple Health and Calendar support) and contact@trycaddy.ai, which we didn't test. That's more than Tomo's 4 for generic notes and an address and less than Grok Bot's 6, which also had a help centre (5 of 15). No MCP server or SDK (0). No package or CI to judge (0). llms.txt says there's no separate app to install, which the App Store listing contradicts." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 52, "points": 4.55, "note": "editorial 43, provenance 60", "reason": "Closed service under terms updated on 27 April 2026 covering trycaddy.ai and caddy.app (15). The privacy policy of 18 September 2026 says Caddy doesn't use customer data to train AI models, uses zero data retention with some providers, keeps conversation history for the life of the account, deletes customer data within 30 days of account deletion with backups up to 30 days more, and lets owners stop sharing model interaction data with its evaluations provider (22 of 30). No deprecation policy or notices found (2 of 20). Data may be processed in the United States and wherever providers operate, and model providers aren't named (4 of 20)." } ], "assessment": { "date": "2026-10-14", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Graded on the interface an outside agent can use. Caddy has none, so context cost, pagination, errors, retries and defaults have nothing to score (0 on each line). This says nothing about the service for people.", "maintenance": "Read for a closed service. Caddy's iOS app, sold by Caddy Technologies Inc and linking to caddy.app, reached 1.7 on the App Store on 13 October 2026 (30). Eight iOS versions from 1.0 on 21 August to 1.7 on 13 October (20). No changelog page, short descriptive App Store notes (widgets, the vault, Apple Health and Calendar support) and contact@trycaddy.ai, which we didn't test. That's more than Tomo's 4 for generic notes and an address and less than Grok Bot's 6, which also had a help centre (5 of 15). No MCP server or SDK (0). No package or CI to judge (0). llms.txt says there's no separate app to install, which the App Store listing contradicts.", "payments": "Read with the hosted rule. No x402, MPP or L402 (0). llms.txt says Caddy is free to use and no paid plan is published. The terms say some functions may need payment with prices shown in the service, the reading we took for every free-only service in this batch (10). Sign-in is with Google with no card step, and llms.txt states the service is free (20). A person signs in with Google in a browser (0).", "reliability": "Read with the hosted lines. No status page found (0). No readable incident history (5). No limits published (0). No overload or retry guidance (0). No SLA found (0). The FAQ says Caddy is in public beta while anyone can sign up with Google. The Marmot and Instinct dossiers gave half for a service taking sign-ups while labelled preview or behind a waitlist step (5 of 10).", "schema": "Graded on the interface an outside agent can use, as GRADER.md asks. Caddy has no API, MCP server or A2A endpoint for an agent, so the contract, description, typed-input and example lines score nothing (0 of 25, 0 of 20, 0 of 15, 0 of 15). That is a statement about agent access, not about the service for people. caddy.app/llms.txt describes channels, connections, approvals and pricing (10). The versioning and changelog line versions an agent interface, and with none there is nothing to version, so it scores nothing (0 of 15), the reading the 12 October audit applied to every listing without an agent interface.", "security": "Graded on the interface an outside agent can use. With none for Caddy, the credential, least-privilege, injection and audit lines score nothing (0 of 30, 0 of 20, 0 of 15, 0 of 15), whatever the service does for its owner. The security programme line doesn't need an interface and is scored. For the record, llms.txt says Caddy asks for approval before sending email, creating invites or changing data, and the bank link through Plaid is read-only. caddy.app/.well-known/security.txt returns 404, and no security contact, disclosure policy, bug bounty, certification or advisories were found (0 of 20).", "transparency": "Closed service under terms updated on 27 April 2026 covering trycaddy.ai and caddy.app (15). The privacy policy of 18 September 2026 says Caddy doesn't use customer data to train AI models, uses zero data retention with some providers, keeps conversation history for the life of the account, deletes customer data within 30 days of account deletion with backups up to 30 days more, and lets owners stop sharing model interaction data with its evaluations provider (22 of 30). No deprecation policy or notices found (2 of 20). Data may be processed in the United States and wherever providers operate, and model providers aren't named (4 of 20)." }, "sources": [ { "what": "homepage and FAQ", "url": "https://caddy.app", "seen": "2026-10-14" }, { "what": "llms.txt", "url": "https://caddy.app/llms.txt", "seen": "2026-10-14" }, { "what": "privacy policy", "url": "https://caddy.app/privacy", "seen": "2026-10-14" }, { "what": "terms (per the lister's read)", "url": "https://caddy.app/terms-of-service", "seen": "2026-10-14" }, { "what": "App Store listing and version history", "url": "https://apps.apple.com/us/app/caddy-your-personal-ai/id6801337847", "seen": "2026-10-14" }, { "what": "status subdomain DNS lookup", "url": "https://dns.google/resolve?name=status.caddy.app\u0026type=A", "seen": "2026-10-14" }, { "what": "security.txt (404)", "url": "https://caddy.app/.well-known/security.txt", "seen": "2026-10-14" } ], "openQuestions": [ "Which functions may need payment, and at what price.", "Which model providers process data." ] }, "negative": 0, "verdict": "Caddy is a free iMessage and RCS assistant in public beta that watches connected mail, calendars and work apps and asks before sending email or changing data. No outside agent can call it, and no status page, changelog or security contact was found, though its iOS app ships every week or two.", "bestFor": "People who want a free assistant in iMessage or RCS that watches mail, calendars and work tools and asks before acting.", "disclosure": "Caddy competes with LocalGhost, which Anchor Terminal's founder builds. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.", "strengths": [ "Free, with Google sign-in and no card.", "Asks for approval before sending email, creating invites or changing data, per llms.txt.", "The privacy policy says customer data doesn't train models and is deleted within 30 days of account deletion.", "The bank link through Plaid is read-only.", "Eight iOS releases between 21 August and 13 October 2026." ], "weaknesses": [ "No API, MCP server or A2A endpoint for an outside agent.", "In public beta.", "No status page, changelog, security.txt or security contact found.", "llms.txt says there's no app to install, while the App Store lists Caddy's iOS app.", "Model providers aren't named." ], "agentNotes": [ "Don't plan to call Caddy from another agent. It answers the owner's text messages, Siri and group chats it's added to.", "Expect Caddy to ask the owner before it sends email or creates an invite." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "F", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 16.7 } ], "editorialScores": { "ergonomics": 0, "maintenance": 55, "payments": 30, "reliability": 10, "schema": 10, "security": 0, "transparency": 43 }, "provenanceScore": 60 }, "connect": {}, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/caddy-app" }, "notable": [ "Caddy's only channel is text message, iMessage on iPhone and RCS on Android, plus Siri. It can be added to group chats (https://caddy.app/llms.txt and https://caddy.app)", "Connections named include Gmail, Google Calendar, Slack, Linear, Notion, Google Drive and Strava (https://caddy.app/llms.txt and https://caddy.app)", "llms.txt says Caddy \"asks for approval before taking sensitive actions (sending email, creating invites, changing data)\" (https://caddy.app/llms.txt)", "The site says Caddy is in public beta and can make mistakes (https://caddy.app)", "The privacy policy (18 September 2026) says Caddy does not use customer data to train AI models, uses zero data retention with some providers, and lets owners turn off sharing of model interaction data with its evaluations provider (https://caddy.app/privacy)", "Conversation history is kept for the life of the account, and customer data is deleted within 30 days of account deletion (https://caddy.app/privacy)", "A read-only bank link through Plaid answers questions about transactions and spending, and the privacy policy says Caddy does not use it to move money (https://caddy.app/privacy)", "The App Store lists Caddy: Your Personal AI, sold by Caddy Technologies Inc, released on 21 August 2026 and at version 1.7 on 13 October 2026, while llms.txt says there is no separate app to install (https://apps.apple.com/us/app/caddy-your-personal-ai/id6801337847 and https://caddy.app/llms.txt)" ], "area": "frameworks", "details": [ { "label": "Surface listed", "value": "Caddy's texting assistant, read from caddy.app, llms.txt, the about page, terms and privacy policy on 14 October 2026. No account was created." }, { "label": "Where it runs", "value": "A cloud service. Data may be stored and processed in the United States and other jurisdictions where providers operate (https://caddy.app/privacy). Model providers are not named." }, { "label": "What it acts on", "value": "Email drafts and replies, calendar events and scheduling, reminders, documents in connected tools, expense logging and read-only bank data (https://caddy.app/llms.txt and https://caddy.app/privacy)." }, { "label": "Outside agent access", "value": "None found. The terms mention APIs as part of the service, but no public API documentation was found." }, { "label": "Company", "value": "Caddy Technologies Inc., governed by Delaware law. Support contact@trycaddy.ai (https://caddy.app/terms-of-service)." }, { "label": "Eligibility", "value": "18 and older (https://caddy.app/terms-of-service)." } ], "provenance": { "legalEntity": "Caddy Technologies Inc.", "domain": "caddy.app", "domainRegistered": "2018-05-05", "endpointOnVendorDomain": null, "terms": "https://caddy.app/terms-of-service", "privacy": "https://caddy.app/privacy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-14", "notes": [ "The terms cover both trycaddy.ai and caddy.app.", "caddy.app/.well-known/security.txt returns 404. No status page or changelog was found.", "RDAP gives a registration date of 2018-05-05 for caddy.app, which may predate the company." ], "score": 60, "checks": [ { "check": "Legal entity named", "value": "Caddy Technologies Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "caddy.app, registered 2018-05-05 (8 years)", "points": 11, "max": 15, "state": "part" }, { "check": "Endpoint on the vendor's domain", "value": "no hosted endpoint", "points": 0, "max": 0, "state": "na" }, { "check": "Terms of service", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "Privacy policy", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/caddy-app.json" } }