{
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-10-14",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.4",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run"
  },
  "tool": {
    "slug": "robocorp",
    "name": "Robocorp",
    "vendor": "Sema4.ai",
    "vendorUrl": "https://sema4.ai",
    "kind": "sdk",
    "category": "desktop-automation",
    "summary": "Robocorp's open-source automation stack for Python, now run by Sema4.ai, with libraries for Windows desktop, cross-platform desktop, browser and document automation. Tasks run locally through `rcc` or Python, with Control Room as the hosted orchestrator.",
    "url": "https://www.anchorterminal.com/tools/robocorp",
    "markdownUrl": "https://www.anchorterminal.com/tools/robocorp.md",
    "slimMarkdownUrl": "https://www.anchorterminal.com/tools/robocorp.min.md",
    "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/robocorp.json",
    "repo": "https://github.com/robocorp/rpaframework",
    "license": "Apache-2.0",
    "transports": [],
    "packages": [
      {
        "registry": "pypi",
        "name": "rpaframework"
      },
      {
        "registry": "pypi",
        "name": "robocorp"
      },
      {
        "registry": "pypi",
        "name": "robocorp-windows"
      }
    ],
    "auth": "none",
    "authNotes": "No account or key for the libraries, which run on the owner's machine. Control Room services (work items, vault, storage) need a Control Room workspace and its credentials. Locally, the vault reads secrets from a file named in `RC_VAULT_SECRETS_FILE`.",
    "pricing": "free",
    "pricingNotes": "The libraries and rcc are free under Apache-2.0. Control Room plans and prices are published on sema4.ai, which answered our reader with a bot check, so they were not read (checked 2026-10-14).",
    "priceSummary": "Free · OSS",
    "where": "local",
    "x402": {
      "level": "no",
      "evidence": "No x402, MPP or L402 in the robocorp or rpaframework source or READMEs. Sema4.ai's pages were not readable (checked 2026-10-14).",
      "endpoints": []
    },
    "toolCount": null,
    "popularity": {
      "githubStars": 1575,
      "npmWeekly": null,
      "pypiWeekly": 61263,
      "asOf": "2026-10-14"
    },
    "docsUrl": "https://rpaframework.org/",
    "capabilities": [
      "desktop.rpa",
      "desktop.control",
      "desktop.orchestration",
      "desktop.scripting",
      "browser.control"
    ],
    "tags": [
      "open-source",
      "local",
      "python",
      "free",
      "rpa",
      "windows",
      "cli",
      "agent-skill"
    ],
    "lastRelease": "2026-10-04",
    "graded": true,
    "anchor": {
      "graded": true,
      "score": 65.5,
      "grade": "B",
      "agentReady": false,
      "rank": 337,
      "ranked": true,
      "rankOf": 1076,
      "categoryRank": 3,
      "methodology": "0.4",
      "run": "2026-10-01",
      "scores": {
        "ergonomics": 59,
        "maintenance": 81,
        "payments": 60,
        "reliability": 87,
        "schema": 65,
        "security": 44,
        "transparency": 65
      },
      "pending": [
        "performance",
        "tasks"
      ],
      "breakdown": [
        {
          "key": "reliability",
          "name": "Reliability",
          "weight": 16,
          "effectiveWeight": 20,
          "score": 87,
          "points": 17.4,
          "reason": "Scored as local software. Official PyPI packages with Python 3.10 or later stated, robocorp up to 3.15 and rpaframework up to 3.14 (20). Public CI per package, with rpaframework's main and Windows workflows passing on master on 4 October 2026 and robocorp's master runs passing to 14 October (25). rpaframework has 35 open issues and pull requests and robocorp 9. Of rpaframework's 15 newest, 8 had no reply, including RPA.Windows and Java Access Bridge problems from 2024 (12 of 25). The README commits to SemVer and each package has a dated changelog (15). rpaframework is marked Production/Stable at 33.0.2 and robocorp is 3.1.4 (15)."
        },
        {
          "key": "performance",
          "name": "Performance",
          "weight": 10,
          "effectiveWeight": 0,
          "pending": true,
          "points": 0,
          "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes."
        },
        {
          "key": "schema",
          "name": "Schema \u0026 documentation",
          "weight": 13,
          "effectiveWeight": 16.25,
          "score": 65,
          "points": 10.56,
          "reason": "Graded as a library. Typed Python APIs with docstrings and keyword documentation at rpaframework.org. No machine-readable contract beyond the code (12 of 25). No llms.txt on rpaframework.org (404). The repository's agent skill and its api.md reference are Markdown written for coding agents. sema4.ai docs were unreadable (5 of 10). Keyword docs state purpose with arguments, rarely when not to use one (12 of 20). Type hints and enums on most keywords, some locator strings free-form (10 of 15). Examples throughout, and typed exceptions such as ElementNotFound (11 of 15). Dated changelogs per package and SemVer (15)."
        },
        {
          "key": "ergonomics",
          "name": "Agent ergonomics",
          "weight": 13,
          "effectiveWeight": 16.25,
          "score": 59,
          "points": 9.59,
          "reason": "No tool definitions in context. Output size is controlled through robocorp.log settings rather than call parameters (15 of 25). Locators, timeouts and work item iteration, but little output filtering (12 of 20). Typed exceptions such as ElementNotFound, MultipleElementsFound and TimeoutException (14 of 20). No idempotency guidance. Work items fail with a BUSINESS type, documented as not to be retried, or an APPLICATION type (8 of 20). Sensible defaults, Python and Robot Framework keyword interfaces (10 of 15)."
        },
        {
          "key": "security",
          "name": "Security \u0026 auth",
          "weight": 14,
          "effectiveWeight": 17.5,
          "score": 44,
          "points": 7.7,
          "reason": "Graded as a library. No credential of its own. robocorp.vault reads secrets from Control Room or a local file, and robocorp.log hides sensitive names and values (18 of 30). No least-privilege mode or approval step, and robots run with the user's desktop rights (5 of 20). Desktop and browser content is read back into tasks with no injection guidance found (4 of 15). robocorp.log writes a detailed log of each run with every call and its arguments, minus hidden values (11 of 15). No SECURITY.md or advisories in either repository, security dependency updates on 4 and 8 October 2026, and Sema4.ai's security pages unreadable (6 of 20)."
        },
        {
          "key": "payments",
          "name": "Payments \u0026 pricing",
          "weight": 10,
          "effectiveWeight": 12.5,
          "score": 60,
          "points": 7.5,
          "reason": "The libraries are free and self-hosted, so 20 + 20 + 20 under the self-hosted rule. Control Room is the paid option, but its pricing on sema4.ai was behind a bot check and could not be scored. No payment protocol (0)."
        },
        {
          "key": "tasks",
          "name": "Task success",
          "weight": 10,
          "effectiveWeight": 0,
          "pending": true,
          "points": 0,
          "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored."
        },
        {
          "key": "maintenance",
          "name": "Maintenance \u0026 community",
          "weight": 7,
          "effectiveWeight": 8.75,
          "score": 81,
          "points": 7.09,
          "reason": "rpaframework 33.0.2 on 4 October 2026 (30). rpaframework 33.0.0, 33.0.1 and 33.0.2 and robocorp 3.1.2 to 3.1.4 since 23 August 2026 (20). Commits are frequent, but most new issues get no reply (12 of 25). Current official packages, no MCP server (10 of 15). Lockfiles, scheduled dependency checks and passing CI (9 of 10)."
        },
        {
          "key": "transparency",
          "name": "Transparency \u0026 trust",
          "weight": 7,
          "effectiveWeight": 8.75,
          "score": 65,
          "points": 5.69,
          "note": "editorial 56, provenance 73",
          "reason": "Apache-2.0 for both repositories (30). The libraries run locally. Sema4.ai's privacy policy and terms were behind a bot check, and rpaframework.org loads Google Analytics (8 of 30). Changelogs record removals and deprecations, with no deprecation policy found (10 of 20). No telemetry code in the libraries. rcc has a do-not-track setting whose default was not read (8 of 20)."
        }
      ],
      "assessment": {
        "date": "2026-10-14",
        "basis": "public evidence",
        "confidence": "medium",
        "notes": {
          "ergonomics": "No tool definitions in context. Output size is controlled through robocorp.log settings rather than call parameters (15 of 25). Locators, timeouts and work item iteration, but little output filtering (12 of 20). Typed exceptions such as ElementNotFound, MultipleElementsFound and TimeoutException (14 of 20). No idempotency guidance. Work items fail with a BUSINESS type, documented as not to be retried, or an APPLICATION type (8 of 20). Sensible defaults, Python and Robot Framework keyword interfaces (10 of 15).",
          "maintenance": "rpaframework 33.0.2 on 4 October 2026 (30). rpaframework 33.0.0, 33.0.1 and 33.0.2 and robocorp 3.1.2 to 3.1.4 since 23 August 2026 (20). Commits are frequent, but most new issues get no reply (12 of 25). Current official packages, no MCP server (10 of 15). Lockfiles, scheduled dependency checks and passing CI (9 of 10).",
          "payments": "The libraries are free and self-hosted, so 20 + 20 + 20 under the self-hosted rule. Control Room is the paid option, but its pricing on sema4.ai was behind a bot check and could not be scored. No payment protocol (0).",
          "reliability": "Scored as local software. Official PyPI packages with Python 3.10 or later stated, robocorp up to 3.15 and rpaframework up to 3.14 (20). Public CI per package, with rpaframework's main and Windows workflows passing on master on 4 October 2026 and robocorp's master runs passing to 14 October (25). rpaframework has 35 open issues and pull requests and robocorp 9. Of rpaframework's 15 newest, 8 had no reply, including RPA.Windows and Java Access Bridge problems from 2024 (12 of 25). The README commits to SemVer and each package has a dated changelog (15). rpaframework is marked Production/Stable at 33.0.2 and robocorp is 3.1.4 (15).",
          "schema": "Graded as a library. Typed Python APIs with docstrings and keyword documentation at rpaframework.org. No machine-readable contract beyond the code (12 of 25). No llms.txt on rpaframework.org (404). The repository's agent skill and its api.md reference are Markdown written for coding agents. sema4.ai docs were unreadable (5 of 10). Keyword docs state purpose with arguments, rarely when not to use one (12 of 20). Type hints and enums on most keywords, some locator strings free-form (10 of 15). Examples throughout, and typed exceptions such as ElementNotFound (11 of 15). Dated changelogs per package and SemVer (15).",
          "security": "Graded as a library. No credential of its own. robocorp.vault reads secrets from Control Room or a local file, and robocorp.log hides sensitive names and values (18 of 30). No least-privilege mode or approval step, and robots run with the user's desktop rights (5 of 20). Desktop and browser content is read back into tasks with no injection guidance found (4 of 15). robocorp.log writes a detailed log of each run with every call and its arguments, minus hidden values (11 of 15). No SECURITY.md or advisories in either repository, security dependency updates on 4 and 8 October 2026, and Sema4.ai's security pages unreadable (6 of 20).",
          "transparency": "Apache-2.0 for both repositories (30). The libraries run locally. Sema4.ai's privacy policy and terms were behind a bot check, and rpaframework.org loads Google Analytics (8 of 30). Changelogs record removals and deprecations, with no deprecation policy found (10 of 20). No telemetry code in the libraries. rcc has a do-not-track setting whose default was not read (8 of 20)."
        },
        "sources": [
          {
            "what": "rpaframework repository, README and CLAUDE.md",
            "url": "https://github.com/robocorp/rpaframework",
            "seen": "2026-10-14"
          },
          {
            "what": "robocorp repository, README, agent skill and package changelogs",
            "url": "https://github.com/robocorp/robocorp",
            "seen": "2026-10-14"
          },
          {
            "what": "RPA Framework release notes",
            "url": "https://rpaframework.org/releasenotes.html",
            "seen": "2026-10-14"
          },
          {
            "what": "rpaframework CI runs on master",
            "url": "https://api.github.com/repos/robocorp/rpaframework/actions/workflows/main.yaml/runs?branch=master",
            "seen": "2026-10-14"
          },
          {
            "what": "newest open rpaframework issues",
            "url": "https://api.github.com/repos/robocorp/rpaframework/issues?state=open\u0026sort=created\u0026direction=desc",
            "seen": "2026-10-14"
          },
          {
            "what": "PyPI metadata for rpaframework, robocorp and robocorp-windows",
            "url": "https://pypi.org/pypi/rpaframework/json",
            "seen": "2026-10-14"
          },
          {
            "what": "PyPI downloads",
            "url": "https://pypistats.org/api/packages/rpaframework/recent",
            "seen": "2026-10-14"
          },
          {
            "what": "sema4.ai robots.txt (pages behind a bot check)",
            "url": "https://sema4.ai/robots.txt",
            "seen": "2026-10-14"
          },
          {
            "what": "robocorp.com redirect to sema4.ai",
            "url": "https://robocorp.com",
            "seen": "2026-10-14"
          }
        ],
        "openQuestions": [
          "unchecked: Control Room plans and pricing, Sema4.ai terms, privacy policy, security page and docs at sema4.ai, which answered with a bot check",
          "unchecked: whether rcc collects usage data by default",
          "unchecked: whether Control Room is still sold to new customers under the Robocorp name"
        ]
      },
      "negative": 0,
      "verdict": "Apache-2.0 libraries with passing CI, releases in the last month and an agent skill in the repository make it practical for agent-written desktop automation. robocorp.com now redirects to Sema4.ai, whose docs, pricing, terms and rcc downloads sit behind a bot check, and recent library issues mostly go unanswered.",
      "bestFor": "Python RPA on Windows desktops, browsers and documents, written or run by a coding agent.",
      "strengths": [
        "Apache-2.0 packages on PyPI, rpaframework 33.0.2 (4 October 2026) and robocorp 3.1.4 (28 September 2026)",
        "RPA.Windows and robocorp.windows drive Windows controls by locator, and RPA.Desktop is a cross-platform library for keyboard, mouse and screen",
        "rpaframework's main and Windows CI workflows passed on master on 4 October 2026",
        "The robocorp repository ships an agent skill and a Claude Code plugin for building and running task packages, added 1 October 2026",
        "robocorp.log hides values with sensitive names and values passed to `hide_from_output`"
      ],
      "weaknesses": [
        "robocorp.com redirects to sema4.ai, which answered our reader with a bot check, so the docs, Control Room pricing and terms were not read",
        "The repository's own agent skill says the rcc release page blocks automated requests and asks the user to fetch the download link",
        "Of the 15 newest open rpaframework issues and pull requests, 8 had no reply, including Windows automation issues open since 2024",
        "No SECURITY.md in either repository and no published advisories",
        "rpaframework.org has no llms.txt and loads Google Analytics on its documentation pages"
      ],
      "agentNotes": [
        "Install libraries with `pip install robocorp` and add `rpaframework` or `robocorp-windows` separately. robocorp-windows is not in the meta-package",
        "Use RPA.Windows or robocorp.windows on Windows only. On macOS or Linux use RPA.Desktop, which works by keyboard, mouse and image matching",
        "Ask the user for the rcc download link for their platform, because the release notes page blocks automated requests",
        "Run a task package with `rcc task run --robot robot.yaml --task \"TASK NAME\"` and read the final status as well as the log output",
        "Keep secrets in robocorp.vault or environment variables and register sensitive names with robocorp.log so they are hidden from logs"
      ],
      "metrics": {
        "kind": "local",
        "measured": false
      },
      "reviewCount": 0,
      "avgRating": 0,
      "history": [
        {
          "basis": "public evidence",
          "confidence": "medium",
          "grade": "B",
          "methodology": "0.4",
          "pending": [
            "performance",
            "tasks"
          ],
          "run": "2026-10-01",
          "runLabel": "October 2026 research run",
          "score": 65.5
        }
      ],
      "editorialScores": {
        "ergonomics": 59,
        "maintenance": 81,
        "payments": 60,
        "reliability": 87,
        "schema": 65,
        "security": 44,
        "transparency": 56
      },
      "provenanceScore": 73
    },
    "connect": {
      "install": "pip install robocorp rpaframework",
      "claudeCode": "claude plugin marketplace add robocorp/robocorp\nclaude plugin install robocorp-automation@robocorp"
    },
    "letme": {
      "capability": "https://letme.dev/desktop.rpa",
      "tool": "https://letme.dev/robocorp"
    },
    "notable": [
      "robocorp.com answers with a 301 redirect to sema4.ai, and robocorp.com/docs/python to sema4.ai/docs/automation/python (checked 14 October 2026)",
      "Package metadata names Sema4.ai \u003cdev@sema4.ai\u003e as author of the robocorp packages and RPA Framework \u003crpafw@robocorp.com\u003e for rpaframework (https://pypi.org/pypi/robocorp/json)",
      "rpaframework 33.0.2 on 4 October 2026 adds Python 3.13 and 3.14 support (https://rpaframework.org/releasenotes.html)",
      "An agent skill, robocorp-automation, and a Claude Code plugin marketplace were added to the robocorp repository on 1 October 2026 (https://github.com/robocorp/robocorp/tree/master/skills/robocorp-automation)",
      "Action Server and AI actions moved to Sema4.ai packages (sema4ai-actions, sema4ai-action-server), last released 10 April 2026 (https://pypi.org/project/sema4ai-action-server/)",
      "1,575 GitHub stars for rpaframework and 653 for robocorp on 14 October 2026 (https://api.github.com/repos/robocorp/rpaframework)"
    ],
    "area": "developer",
    "details": [
      {
        "label": "What is graded",
        "value": "The open-source Robocorp automation stack. The `robocorp` libraries (tasks, log, work items, vault, storage, browser, windows, excel) and RPA Framework (`rpaframework`, `rpaframework-windows` and others). Sema4.ai's Action Server is a separate product"
      },
      {
        "label": "Desktop control",
        "value": "RPA.Windows and robocorp.windows (Windows UI Automation, locators for windows and controls). RPA.Desktop for keyboard, mouse, screen and image matching on Windows, macOS and Linux. JavaAccessBridge for Java apps and SAP"
      },
      {
        "label": "Running tasks",
        "value": "`rcc task run` in an environment defined by `robot.yaml` and `conda.yaml`, or plain Python with `python -m robocorp.tasks run tasks.py`. Robot Framework suites run with RPA Framework keywords"
      },
      {
        "label": "Hosted orchestration",
        "value": "Control Room at cloud.robocorp.com, used by work items, vault and storage. Plans and prices are on sema4.ai, which answered with a bot check"
      },
      {
        "label": "Runtimes",
        "value": "Python 3.10 or later. robocorp 3.1.4 lists up to 3.15, rpaframework 33.0.2 up to 3.14"
      },
      {
        "label": "Telemetry",
        "value": "No telemetry code found in the libraries. rcc has a `configure identity --do-not-track` setting, which the repository's test fixtures switch on. Its default was not read"
      },
      {
        "label": "Agent skill",
        "value": "`robocorp-automation` skill for Claude Code, Codex, Cursor and other coding agents, covering rcc templates, local runs and validation"
      }
    ],
    "provenance": {
      "legalEntity": "Sema4.ai (full legal name not confirmed)",
      "domain": "robocorp.com",
      "domainRegistered": "2005-05-31",
      "domainNote": "robocorp.com redirects to sema4.ai. RDAP gives robocorp.com a registration date of 2005-05-31. robocorp.com/.well-known/security.txt redirects to sema4.ai, whose robots.txt disallows /.well-known/, so it was not fetched.",
      "endpointOnVendorDomain": null,
      "terms": "",
      "privacy": "",
      "statusPage": "",
      "changelog": "https://rpaframework.org/releasenotes.html",
      "securityTxt": "unknown",
      "checked": "2026-10-14",
      "notes": [
        "sema4.ai answered every page request with a bot check except robots.txt, so its terms and privacy policy were not read and `terms` and `privacy` are left out.",
        "The libraries are Apache-2.0 and run on the owner's machine. PyPI metadata names Sema4.ai as author of the robocorp packages.",
        "The changelog link is RPA Framework's release notes. Each robocorp package keeps its own docs/CHANGELOG.md."
      ],
      "score": 73,
      "checks": [
        {
          "check": "Legal entity named",
          "value": "Sema4.ai (full legal name not confirmed)",
          "points": 20,
          "max": 20,
          "state": "ok"
        },
        {
          "check": "Domain age",
          "value": "robocorp.com, registered 2005-05-31 (21 years)",
          "points": 15,
          "max": 15,
          "state": "ok"
        },
        {
          "check": "Endpoint on the vendor's domain",
          "value": "no hosted endpoint",
          "points": 0,
          "max": 0,
          "state": "na"
        },
        {
          "check": "Terms of service",
          "value": "nothing hosted, so the Apache-2.0 licence stands in",
          "points": 10,
          "max": 10,
          "state": "ok"
        },
        {
          "check": "Privacy policy",
          "value": "nothing hosted, not scored",
          "points": 0,
          "max": 0,
          "state": "na"
        },
        {
          "check": "Status page",
          "value": "not found",
          "points": 0,
          "max": 10,
          "state": "no"
        },
        {
          "check": "Changelog",
          "value": "published",
          "points": 10,
          "max": 10,
          "state": "ok"
        },
        {
          "check": "security.txt",
          "value": "could not be fetched",
          "points": 0,
          "max": 10,
          "state": "no"
        }
      ]
    },
    "pageJsonUrl": "https://www.anchorterminal.com/tools/robocorp.json"
  }
}