{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "tool": { "slug": "celesto", "name": "Celesto (formerly SmolVM)", "vendor": "Celesto AI, Inc.", "vendorUrl": "https://celesto.ai", "kind": "sdk", "category": "code-sandboxes", "summary": "Celesto, formerly SmolVM, is an open-source Python SDK and CLI from Celesto AI that runs disposable Firecracker or QEMU microVMs on the owner's machine for agent code, browsers and desktops, with an optional paid Celesto Cloud.", "url": "https://www.anchorterminal.com/tools/celesto", "markdownUrl": "https://www.anchorterminal.com/tools/celesto.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/celesto.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/celesto.json", "dns": "celesto.grade.anchorterminal.com", "repo": "https://github.com/CelestoAI/Celesto", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "pypi", "name": "celesto" } ], "auth": "none", "authNotes": "Local use needs no account or key. The local API server and dashboard each require a bearer token, generated at start or read from CELESTO_SERVER_TOKEN and CELESTO_DASHBOARD_TOKEN. Celesto Cloud uses an organisation-bound CELESTO_API_KEY with named permissions (see, execute, delete) set in the dashboard.", "pricing": "freemium", "pricingNotes": "The local SDK and CLI are free under Apache-2.0. Celesto Cloud bills sandboxes by the running hour from $0.015 (Micro, 1 vCPU, 2 GB) to $0.16 (XL, 8 vCPU, 32 GB), prepaid from $2.01, with a one-time $5 Micro credit and no card.", "priceSummary": "$0.015 / session-hr", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the repository, the docs, llms.txt or the pricing page (checked 2026-11-06). Cloud runtime is prepaid by card under Settings \u003e Billing.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 1149, "npmWeekly": null, "pypiWeekly": 699, "asOf": "2026-11-06" }, "docsUrl": "https://celesto.ai/docs", "llmsTxt": "https://celesto.ai/llms.txt", "openapi": "https://github.com/CelestoAI/Celesto/blob/main/ts/celesto-local-server.openapi.json", "capabilities": [ "sandbox.code", "sandbox.fs", "sandbox.persist", "sandbox.browser" ], "tags": [ "open-source", "local", "self-hosted", "hosted", "freemium", "no-card", "free-tier", "apache-2.0", "python", "typescript", "cli", "microvm", "firecracker", "llms-txt", "openapi", "telemetry", "pre-1.0", "renamed" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 68, "grade": "B", "agentReady": false, "rank": 298, "ranked": true, "rankOf": 1486, "categoryRank": 6, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 69, "maintenance": 81, "payments": 60, "reliability": 66, "schema": 85, "security": 52, "transparency": 70 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 66, "points": 13.2, "reason": "Read with the local-software lines, because the graded surface runs on the owner's machine. Installs from PyPI as `celesto` with Python 3.11 or newer on Linux and macOS stated, plus an install script (20). The repository has pytest, e2e, lint, TypeScript and smoke-test workflows and 38 test packages, but GitHub's API answered with a rate limit, so no run result was read (15 of 25, unchecked). 22 open issues and pull requests against about 188 commits in 90 days. The open bugs include a snapshot restore that can lose a VM's disk if interrupted and a thread-safety issue with five replies (18 of 25). A dated changelog with Security, Fixed, Added and Removed sections, and the rename to Celesto marked as a breaking release, though versions stay below 1.0 (13 of 15). Pre-1.0 per SECURITY.md (0). Total 66.", "checked": "2026-11-06" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 85, "points": 13.81, "reason": "Read as an SDK and CLI. The repository ships an OpenAPI document for the local server (24 operations) and the cloud API (171 operations), from which the TypeScript client is generated (25). llms.txt at celesto.ai, plus Markdown docs in the repository (10). The README's runtime table says when to use each runtime, and the automation section says to prefer `exec` and keep `shell`, `ssh` and `desktop` for interactive work (14 of 20). Network modes are closed values (`open`, `off`, `public`, `restricted`) and the SDK takes typed keyword arguments, though `internet_settings` is a plain dict (11 of 15). Examples directory, a JSON envelope for every command and documented cloud error fields such as `required_scope`, without a full error catalogue (12 of 15). Dated changelog and tags, pre-1.0 (13 of 15). Total 85.", "checked": "2026-11-06" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 69, "points": 11.21, "reason": "A CLI and SDK add no tool definitions to an agent's context. Collected command output is capped at 8 MiB with streaming as the alternative (18 of 25). `computer list`, `logs --follow` and name lookups, with little filtering (10 of 20). JSON errors carry a recovery command where Celesto has one, and cloud errors carry stable codes, operation and computer context and recovery fields since 0.1.7 (18 of 20). State-changing cloud requests are never replayed automatically and computers are addressed by unique names, but there are no idempotency keys (10 of 20). `with Computer()` creates and deletes a computer with no parameters, with Python and an alpha TypeScript SDK (13 of 15). Total 69.", "checked": "2026-11-06" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 52, "points": 9.1, "reason": "Framework reading for local software. No credential is needed for local use, and the local API server and dashboard each require a bearer token, and cloud keys carry named permissions (22 of 30). Each computer has its own guest kernel, browser and display access uses capability URLs with a read-only option, and raw VNC is off. Against that, outbound networking is open by default and the restricting modes are opt-in (12 of 20). The security doc warns against giving connection URLs to a model as page content, but there is no guidance on treating command or page output as untrusted (5 of 15). `computer logs` shows startup output, with no audit log of commands (5 of 15). SECURITY.md with GitHub private vulnerability reporting and a supported-versions table, Security sections in the changelog, no security.txt, bug bounty or certification (8 of 20). Total 52.", "checked": "2026-11-06" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 60, "points": 7.5, "reason": "Read with the self-hosted rule, scoring the hosted option for the price lines. No x402, MPP or L402 (0 of 40). Celesto Cloud publishes hourly prices for six sizes without a login (20). A one-time $5 Micro credit needs no card, and the local SDK is free (20). The graded local SDK installs from PyPI and runs with no account, so an agent needs no signup (20). Cloud use needs a browser signup and a card top-up. Total 60.", "checked": "2026-11-06" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 81, "points": 7.09, "reason": "0.1.13 on PyPI on 5 November 2026, tagged 6 November (30). 22 PyPI releases in the 90 days to 6 November (20). Most open issues are filed by maintainers. Outside reports such as the thread-safety issue got replies, and several recent ones have none yet; pull-request reply times were not read (15 of 25). The Python SDK is current, the TypeScript SDK is an alpha not published to npm (8 of 15). uv and Cargo lock files, CodeQL and publish workflows, with run results unread (8 of 10). Total 81.", "checked": "2026-11-06" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 70, "points": 6.13, "note": "editorial 74, provenance 66", "reason": "Apache-2.0 in LICENSE and on PyPI (30). The privacy policy of 30 October 2026 links a subprocessor registry and describes the CLI telemetry in the same terms as the docs, but gives no retention periods beyond as long as necessary. Stopped cloud disks are kept 30 days per the pricing page (18 of 30). The changelog marks removals and the breaking rename, and the glossary lists older names still accepted, with no written deprecation policy (10 of 20). Telemetry is disclosed in the README, CLI reference and privacy policy, with three opt-outs, but it is on by default after the notice (16 of 20). Total 74.", "checked": "2026-11-06" } ], "assessment": { "date": "2026-11-06", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "A CLI and SDK add no tool definitions to an agent's context. Collected command output is capped at 8 MiB with streaming as the alternative (18 of 25). `computer list`, `logs --follow` and name lookups, with little filtering (10 of 20). JSON errors carry a recovery command where Celesto has one, and cloud errors carry stable codes, operation and computer context and recovery fields since 0.1.7 (18 of 20). State-changing cloud requests are never replayed automatically and computers are addressed by unique names, but there are no idempotency keys (10 of 20). `with Computer()` creates and deletes a computer with no parameters, with Python and an alpha TypeScript SDK (13 of 15). Total 69.", "maintenance": "0.1.13 on PyPI on 5 November 2026, tagged 6 November (30). 22 PyPI releases in the 90 days to 6 November (20). Most open issues are filed by maintainers. Outside reports such as the thread-safety issue got replies, and several recent ones have none yet; pull-request reply times were not read (15 of 25). The Python SDK is current, the TypeScript SDK is an alpha not published to npm (8 of 15). uv and Cargo lock files, CodeQL and publish workflows, with run results unread (8 of 10). Total 81.", "payments": "Read with the self-hosted rule, scoring the hosted option for the price lines. No x402, MPP or L402 (0 of 40). Celesto Cloud publishes hourly prices for six sizes without a login (20). A one-time $5 Micro credit needs no card, and the local SDK is free (20). The graded local SDK installs from PyPI and runs with no account, so an agent needs no signup (20). Cloud use needs a browser signup and a card top-up. Total 60.", "reliability": "Read with the local-software lines, because the graded surface runs on the owner's machine. Installs from PyPI as `celesto` with Python 3.11 or newer on Linux and macOS stated, plus an install script (20). The repository has pytest, e2e, lint, TypeScript and smoke-test workflows and 38 test packages, but GitHub's API answered with a rate limit, so no run result was read (15 of 25, unchecked). 22 open issues and pull requests against about 188 commits in 90 days. The open bugs include a snapshot restore that can lose a VM's disk if interrupted and a thread-safety issue with five replies (18 of 25). A dated changelog with Security, Fixed, Added and Removed sections, and the rename to Celesto marked as a breaking release, though versions stay below 1.0 (13 of 15). Pre-1.0 per SECURITY.md (0). Total 66.", "schema": "Read as an SDK and CLI. The repository ships an OpenAPI document for the local server (24 operations) and the cloud API (171 operations), from which the TypeScript client is generated (25). llms.txt at celesto.ai, plus Markdown docs in the repository (10). The README's runtime table says when to use each runtime, and the automation section says to prefer `exec` and keep `shell`, `ssh` and `desktop` for interactive work (14 of 20). Network modes are closed values (`open`, `off`, `public`, `restricted`) and the SDK takes typed keyword arguments, though `internet_settings` is a plain dict (11 of 15). Examples directory, a JSON envelope for every command and documented cloud error fields such as `required_scope`, without a full error catalogue (12 of 15). Dated changelog and tags, pre-1.0 (13 of 15). Total 85.", "security": "Framework reading for local software. No credential is needed for local use, and the local API server and dashboard each require a bearer token, and cloud keys carry named permissions (22 of 30). Each computer has its own guest kernel, browser and display access uses capability URLs with a read-only option, and raw VNC is off. Against that, outbound networking is open by default and the restricting modes are opt-in (12 of 20). The security doc warns against giving connection URLs to a model as page content, but there is no guidance on treating command or page output as untrusted (5 of 15). `computer logs` shows startup output, with no audit log of commands (5 of 15). SECURITY.md with GitHub private vulnerability reporting and a supported-versions table, Security sections in the changelog, no security.txt, bug bounty or certification (8 of 20). Total 52.", "transparency": "Apache-2.0 in LICENSE and on PyPI (30). The privacy policy of 30 October 2026 links a subprocessor registry and describes the CLI telemetry in the same terms as the docs, but gives no retention periods beyond as long as necessary. Stopped cloud disks are kept 30 days per the pricing page (18 of 30). The changelog marks removals and the breaking rename, and the glossary lists older names still accepted, with no written deprecation policy (10 of 20). Telemetry is disclosed in the README, CLI reference and privacy policy, with three opt-outs, but it is on by default after the notice (16 of 20). Total 74." }, "sources": [ { "what": "repository README, docs and changelog (clone)", "url": "https://github.com/CelestoAI/Celesto", "seen": "2026-11-06" }, { "what": "changelog 0.0.15a0 to 0.1.13", "url": "https://github.com/CelestoAI/Celesto/blob/main/CHANGELOG.md", "seen": "2026-11-06" }, { "what": "networking guide", "url": "https://github.com/CelestoAI/Celesto/blob/main/docs/guides/networking.md", "seen": "2026-11-06" }, { "what": "security doc and SECURITY.md", "url": "https://github.com/CelestoAI/Celesto/blob/main/docs/security.md", "seen": "2026-11-06" }, { "what": "PyPI release feed", "url": "https://pypi.org/rss/project/celesto/releases.xml", "seen": "2026-11-06" }, { "what": "pricing", "url": "https://celesto.ai/pricing", "seen": "2026-11-06" }, { "what": "security page", "url": "https://celesto.ai/security", "seen": "2026-11-06" }, { "what": "privacy policy (30 October 2026)", "url": "https://celesto.ai/legal/privacy-policy", "seen": "2026-11-06" }, { "what": "llms.txt", "url": "https://celesto.ai/llms.txt", "seen": "2026-11-06" } ], "openQuestions": [ "The lead named SmolVM at github.com/CelestoAI/SmolVM, v0.0.3. The repository now redirects to CelestoAI/Celesto, the product was renamed on 19 September 2026 and the current version is 0.1.13, so the slug is `celesto` rather than `smolvm`.", "Category code-sandboxes as suggested. `sandbox.code` first, then filesystem, persistent computers and browser sessions, all documented.", "Graded on the local SDK and CLI, the lead's surface. Celesto Cloud and its hosted MCP server at mcp.celesto.ai/mcp have their own status, rate limits and terms, which a separate pass would read; they were read here for pricing only.", "unchecked: CI run results and pull-request reply times, because GitHub's API answered with a rate limit on 6 November 2026.", "unchecked: the terms of service at celesto.ai/legal/terms were not read; the policy reader covers them at landing.", "pydantic-ai's listing names smolvm as one of its Harness sandboxes since 2.56.0; that text predates the rename and may need the new name.", "Lapse. pypi.org/pypi/\u003cpackage\u003e/json, which PyPI's robots.txt disallows (/pypi/*/json), was fetched for this listing's packages on 6 November 2026 before robots.txt was read. Nothing from those responses is used; versions and release dates come from the allowed release feed at pypi.org/rss/project/\u003cpackage\u003e/releases.xml, and licences and authors from the repository." ] }, "negative": 0, "verdict": "Celesto runs each agent task in a local Firecracker or QEMU microVM with its own kernel, driven by a CLI with a stable JSON envelope and a Python SDK, free under Apache-2.0. It is pre-1.0, renamed from SmolVM on 19 September 2026, sends usage telemetry after a first-use notice, and leaves outbound networking open unless a mode is set.", "bestFor": "Local microVM sandboxes for agent code, browsers and desktops on Linux and macOS, with a path to a hosted cloud.", "strengths": [ "Apache-2.0, installs from PyPI with `celesto setup` and `celesto doctor`, and runs local microVMs with no account or key", "Every `--json` response has the same `ok`, `command`, `exit_code`, `data` and `error` fields, with recovery commands in errors", "Network modes `off`, `public` (proxy that rejects private and metadata addresses) and `restricted` with CIDR or domain allowlists", "Dated changelog with Security sections, breaking changes marked, and 22 PyPI releases in the 90 days to 6 November 2026", "OpenAPI documents for the local server (24 operations) and the cloud API (171 operations) in the repository, plus llms.txt" ], "weaknesses": [ "Version 0.1.13 and declared pre-1.0 in SECURITY.md, with the TypeScript SDK an alpha installed from a GitHub tarball", "Outbound network access is open by default, and Linux TAP mode does not block every private network or metadata service", "Usage telemetry to PostHog is on after a first-use notice, until switched off", "Renamed from SmolVM on 19 September 2026 in a breaking release that removed the `smolvm` command and import path", "No security.txt, bug bounty or certification found, and CI results could not be read" ], "agentNotes": [ "Pass `--json` to every `celesto` command and branch on `ok` and `exit_code`, not on printed text", "Create computers with unique names and delete them by exact name when the job ends, including after failures", "Set `internet_settings={\"mode\": \"off\"}` or `restricted` for untrusted code, since the default is open", "Set CELESTO_NO_TELEMETRY=1 in unattended runs if usage events must not leave the machine", "Never paste browser or display connection URLs into model context; possession of the URL grants control" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 68 } ], "editorialScores": { "ergonomics": 69, "maintenance": 81, "payments": 60, "reliability": 66, "schema": 85, "security": 52, "transparency": 74 }, "provenanceScore": 66, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-11-06", "grade": "B", "kind": "listed", "method": "0.7", "score": 68 } ] }, "connect": { "install": "pip install celesto \u0026\u0026 celesto setup \u0026\u0026 celesto doctor", "headless": { "create": "celesto computer create --name agent-job --json", "delete": "celesto computer delete agent-job --json", "exec": "celesto computer exec agent-job --json -- python -m pytest" } }, "letme": { "capability": "https://letme.dev/sandbox.code", "tool": "https://letme.dev/celesto" }, "notable": [ "SmolVM was renamed Celesto in 0.0.15a0 on 19 September 2026. The PyPI package became `celesto`, the `smolvm` executable alias and import path were removed in a release the changelog marks as breaking, and `~/.smolvm` state is still read during the transition (https://github.com/CelestoAI/Celesto/blob/main/CHANGELOG.md)", "github.com/CelestoAI/SmolVM now redirects to CelestoAI/Celesto, created 15 February 2026 (https://github.com/CelestoAI/Celesto)", "Each computer is a Firecracker or QEMU microVM with its own guest kernel. The CLI's `--json` output always carries `ok`, `command`, `exit_code`, `data` and `error`, and JSON errors include a recovery command where one exists (https://github.com/CelestoAI/Celesto/blob/main/README.md)", "Outbound network access is open by default. `mode=\"off\"`, `public` (HTTP and HTTPS through a destination-checking proxy) and `restricted` with allowed CIDRs or domains are opt-in (https://github.com/CelestoAI/Celesto/blob/main/docs/guides/networking.md)", "Local CLI and SDK usage telemetry to PostHog starts after a first-use notice and is switched off with `celesto config telemetry off`, CELESTO_NO_TELEMETRY=1 or DO_NOT_TRACK=1. Events exclude commands, file paths and URLs (https://github.com/CelestoAI/Celesto/blob/main/docs/reference/cli.md)", "0.1.9 of 25 October 2026 was a security release covering local APIs, guest connections, SSH host-key checks, archive and image handling, and privileged setup. 0.1.13 of 6 November requires a fixed openssh-server in locally built Alpine images (https://github.com/CelestoAI/Celesto/blob/main/CHANGELOG.md)", "The same company sells Celesto Cloud sandboxes, a hosted MCP server at mcp.celesto.ai/mcp with OAuth, and GitHub Actions runners (https://celesto.ai/llms.txt)" ], "area": "agent-runtime", "details": [ { "label": "Surface listed", "value": "The open-source `celesto` Python SDK and CLI 0.1.13 running local microVMs, read from a clone of github.com/CelestoAI/Celesto, PyPI, celesto.ai and its llms.txt, pricing, security and privacy pages on 6 November 2026. Celesto Cloud and the hosted MCP server were read for pricing only. Nothing was installed or run" }, { "label": "Which product", "value": "SmolVM, the lead's name, is the same repository renamed Celesto on 19 September 2026. The slug follows the current name" }, { "label": "Runtimes", "value": "Minimal computer (`Computer()`), browser session with Chromium and CDP, Linux desktop, Windows computer from an image, and macOS desktop on Apple Silicon" }, { "label": "Hosts", "value": "Python 3.11 or newer on Linux and macOS. macOS setup installs QEMU through Homebrew; Linux setup may ask for sudo" }, { "label": "TypeScript SDK", "value": "`@celestoai/celesto` 0.1.0-preview.1, an alpha installed from a GitHub release tarball, not npm" }, { "label": "Celesto Cloud prices", "value": "Micro $0.015, Small $0.020, Standard $0.030, Memory $0.040, Large $0.080, XL $0.160 per running hour. Up to 10 running sandboxes on paid accounts, one on the trial. Stopped root disks kept free for 30 days" }, { "label": "Legal entity", "value": "Celesto AI, Inc., a Delaware corporation, per the privacy policy of 30 October 2026" } ], "unitPrices": [ { "item": "Cloud Micro sandbox (1 vCPU, 2 GB)", "unit": "session-hour", "usd": 0.015, "note": "Billed by the running hour; local use is free" }, { "item": "Cloud XL sandbox (8 vCPU, 32 GB)", "unit": "session-hour", "usd": 0.16, "note": "Largest size on the pricing page" } ], "provenance": { "legalEntity": "Celesto AI, Inc.", "domain": "celesto.ai", "domainRegistered": "2025-07-13", "endpointOnVendorDomain": null, "terms": "https://celesto.ai/legal/terms", "privacy": "https://celesto.ai/legal/privacy-policy", "statusPage": "", "changelog": "https://github.com/CelestoAI/Celesto/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The privacy policy, last updated 30 October 2026, names Celesto AI, Inc., a Delaware corporation with a Wilmington mailing address. It has no clause on automated access.", "celesto.ai/robots.txt allows all crawlers. docs.celesto.ai carries Content-Signal ai-train=yes, search=yes, ai-input=yes.", "RDAP gives celesto.ai a registration date of 13 July 2025.", "/.well-known/security.txt returns 404. SECURITY.md asks for private reports through GitHub's vulnerability reporting. No status page is linked from the pricing page." ], "score": 66, "checks": [ { "check": "Legal entity named", "value": "Celesto AI, Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "celesto.ai, registered 2025-07-13 (1 year)", "points": 3, "max": 15, "state": "part" }, { "check": "Endpoint on the vendor's domain", "value": "no hosted endpoint", "points": 0, "max": 0, "state": "na" }, { "check": "Terms of service", "value": "read, states 5 of the 7 things a reader expects", "points": 8.3, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "People named", "value": "1 named with their role, 1 with a public profile", "points": 10, "max": 10, "state": "ok" }, { "check": "Support route", "value": "help pages, a community", "points": 5, "max": 5, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "https://celesto.ai/legal/terms", "state": "read", "readAt": "2026-11-06", "statedDate": "2026-10-30", "words": 936, "points": 8.3, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated: October 30, 2026", "says": "Last updated 2026-10-30" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "These Terms are governed by the laws of the State of Delaware, United States, without regard to its conflict of law principles.", "says": "The law of the State of Delaware" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "IN ALL CASES, CELESTOAI'S TOTAL LIABILITY WILL NOT EXCEED THE AMOUNTS PAID BY YOU TO CELESTOAI FOR THE SERVICES IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM.", "says": "Capped at the fees paid in the 12 months before the claim" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "We may suspend or terminate your access to the services at any time for violations of these Terms or for any behavior that poses risk to the services or other users." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": false }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "Do not attempt to reverse engineer, interfere with, or disrupt the services." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ] }, { "kind": "privacy", "url": "https://celesto.ai/legal/privacy-policy", "state": "read", "readAt": "2026-11-06", "statedDate": "2026-10-30", "words": 1393, "points": 10, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated: October 30, 2026", "says": "Last updated 2026-10-30" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "Information you provide: account details, contact information, messages, preferences, and payment/billing details (processed by our payment processor;" }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "If you arrive from an X ad, we keep X's click identifier in a first-party cookie (x_twclid) for 30 days.", "says": "Names a period of 30 days" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "When we process personal information on behalf of a customer through connected systems (for example, CRM, DMS, or other APIs), we act as a processor/service provider." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "We do not sell personal information as defined by the CPRA.", "says": "Says it does not sell personal data" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal information, as well as the right to data portability and to object to certain processing." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "If we process your information on behalf of a customer, please direct your request to that customer." }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross‑border transfers.", "says": "Relies on standard contractual clauses" } ] } ] }, "humans": { "slug": "celesto", "checked": "2026-11-06", "company": "Celesto AI, Inc.", "people": [ { "name": "Aniket Maurya", "role": "Founder, Celesto AI", "founder": true, "linkedin": "https://linkedin.com/in/aniketmaurya", "x": "https://x.com/aniketmaurya", "github": "https://github.com/aniketmaurya", "page": "/people/aniket-maurya/" } ], "peopleNote": "No team or about page was found on celesto.ai (sitemap read on 6 November 2026). Aniket Maurya's own GitHub profile reads \"Creator of LitServe | Building Celesto AI\" and links his LinkedIn and X. His own post on DEV (dev.to/aniketmaurya, posted 12 April) says \"I'm the founder of Celesto AI\", and his DEV profile gives his work as Founder @ Celesto AI. No co-founder is named. Investors were looked for on 6 November 2026 on every page in the celesto.ai sitemap, on his GitHub profile and site (aniketmaurya.com) and in two web searches; no round or investor is named anywhere, so investors are left out.", "companySocial": { "linkedin": "https://linkedin.com/company/celestoai", "x": "https://x.com/celestoai", "github": "https://github.com/CelestoAI" }, "support": { "urls": [ "https://github.com/CelestoAI/Celesto/issues", "https://celesto.ai/contact" ], "community": [ { "label": "Discord", "url": "https://discord.gg/KNb5UkrAmm", "kind": "discord" }, { "label": "GitHub", "url": "https://github.com/CelestoAI/Celesto", "kind": "github" } ], "contactEmails": [ "oss@celesto.ai" ] }, "sources": [ "https://github.com/aniketmaurya", "https://github.com/CelestoAI", "https://github.com/CelestoAI/Celesto", "https://celesto.ai/legal/privacy-policy", "https://pypi.org/rss/project/celesto/releases.xml", "https://dev.to/aniketmaurya/why-ai-agents-need-sandboxes-and-what-to-look-for-e37" ], "ownership": { "status": "private", "checked": "2026-11-06", "sources": [ "https://celesto.ai/legal/privacy-policy" ] } }, "pageJsonUrl": "https://www.anchorterminal.com/tools/celesto.json", "live": { "slug": "celesto", "versions": [ { "registry": "github", "name": "CelestoAI/Celesto", "version": "v0.1.13", "released": "2026-11-05", "seenAt": "2026-11-06T23:13:37.416837168Z" }, { "registry": "pypi", "name": "celesto", "version": "0.1.13", "released": "2026-11-05", "seenAt": "2026-11-06T23:13:37.309276304Z" } ], "githubStars": 1149, "pypiWeekly": 699, "securityTxt": { "url": "https://celesto.ai/.well-known/security.txt", "state": "unknown", "checkedAt": "2026-11-07T16:01:01.176888246Z" }, "llmsTxt": { "url": "https://celesto.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:31:46.784166983Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/CelestoAI/Celesto/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:18:00.719411253Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "8ddae4a6adbd" }, { "url": "https://celesto.ai/legal/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:00:50.868104256Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "87ce310b1db6" }, { "url": "https://celesto.ai/legal/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:00:53.107282947Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "1dece6f9a42e" } ], "updatedAt": "2026-11-07T16:01:01.176888246Z" } } }