Agent Tree vs Pydantic Logfire

Agent Tree 50

Framework reading, docs a model can follow, as superpowers was read. types/index.d.ts types the pane's state, and plugin.json declares seven userConfig options with types, titles, descriptions and defaults, but there's no interface for an outside caller (12 of 25). README in English and German, a nine-step GUIDE.md and PRIVACY.md, all Markdown in the repository; no llms.txt (10). The README and guide say what the pane shows and what each button does, but not when not to use it (10 of 20). Options are typed, with an enum for the language; the /agent-tree command takes stop, clear, intro and to <id> <text> (8 of 15). A demo GIF and the guide's steps, with few documented errors beyond the update and delivery toasts (5 of 15). Semver tags but no changelog or release notes read (5 of 15). 50 in all.

Pydantic Logfire 81

A public OpenAPI 3.1 document of 68 paths and 106 operations, served without a key. The hosted MCP server is closed source and its host's robots.txt disallows the endpoint, so we did not read its tool schemas (22). llms.txt, llms-full.txt and a Markdown twin of every docs page (10). Every operation has a summary and 83 have a description. The MCP discovery card's tool descriptions say when to call a tool, for example token_info only when the user asks about identity (15). 38 enums in the document. Queries are a free SQL string by design and dashboards are Perses JSON (10). The docs carry curl, Python and TypeScript examples, 94 operations declare a 422 and 89 a 429, but the declared error schema is a single detail string and the document has few examples (11). /v1 paths, a dated product changelog and SDK release notes, with the API document itself at version 0.1.0 (13).

Agent Tree 49

Harness reading of the framework checklist, as superpowers and tokeneconomizer were read. 30 for what leaves the machine and credentials, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. No credentials of its own, and the only request is a daily GET of plugin.json from the main branch carrying nothing about the session. Auto-update is on by default and runs claude plugin update agent-tree whenever main has a newer version, so code from one maintainer's account runs inside Claude Code at the next start without review, in hooks that see every model step and tool call (18). Hooks act only after the person acts in the pane, per PRIVACY.md and the code. Stops, messages and model changes are explicit. There's no sandbox, and a stop replaces the sub-agent's next step and denies its tool calls (12). Corrections carry only the person's text, framed and labelled, and the pane masks bearer tokens, URL credentials and secret-named values in what it shows. No guidance on untrusted content in sub-agent output (9). Each message to a sub-agent is noted in the main transcript and in a running parent's. The event log stays in memory and isn't kept after the session (8). No SECURITY.md, no security.txt and no advisories found; GitHub's security page couldn't be read (2). 49 in all.

Pydantic Logfire 80

OAuth authorisation code with PKCE, S256 required for every client, dynamic client registration, pushed authorisation requests and device code, with 44 scopes. API keys carry selected scopes and can be rotated, expired and disabled through the API. No documented option sends a secret in a URL (30). Read-only scopes such as project:read, separate read and write tokens, and an organisation-wide read-only MCP policy that is Enterprise only and experimental. No server-side confirmation step for destructive tools was found (15). The MCP docs state that telemetry can hold user-controlled content and tell agents to treat results as diagnostic data, not instructions. SDK scrubbing is documented (11). The audit log API records logins and changes with user, IP address and a diff, on Enterprise only (9). A valid security.txt, SOC 2 Type II, HIPAA, and an independent penetration test at least every 12 months. No bug bounty found and no advisories published on the SDK repository (15).

Agent Tree 60

v0.5.4 tagged on 29 October 2026 and a commit on 31 October (30). 19 tags from v0.2.2 (24 October) to v0.5.4 (29 October), far more than three in 90 days (20). Issue and pull-request replies couldn't be read, as github.com was unreachable (5 of 25). Not in Claude's official plugin directory; claude.com/plugins/agent-tree answered 404 (0). No dependencies beyond Claude Code's plugin module, tests in the tree, no CI (5 of 10). 60 in all.

Pydantic Logfire 90

The product changelog's newest entry is dated 7 October 2026 and the Python SDK's newest tag, 6.0.0b7, 25 September (30). Seven product changelog entries and ten SDK releases since 20 August (20). The SDK repository shows 208 open issues and pull requests. Pull requests opened in the past fortnight have comments, while several issues from the same period have none yet. Support is by Slack, email and GitHub (17). Current official SDKs, Python 5.1.0 on 11 September and @pydantic/logfire-node 0.18.27. The official MCP registry did not answer our lookup (15). CI, coverage and dependency test workflows and a lock file in the repository. We did not confirm the pass state (8).

Agent Tree 60

Self-hosted rule. No payment protocol (0). Free under MIT with nothing to buy (20). No card or account (20). A person installs it with one command and no sign-up (20). 60 in all.

Pydantic Logfire 40

No x402, MPP or L402 (0). Per-unit pricing is public without a login, at $2 per million records beyond the included 10 million, with Team at $49 a month and Growth at $249 (20). The Personal plan is free with no card (20). A person signs up in a browser and approves OAuth or creates the first key. Client registration is unauthenticated but grants nothing until a user consents, and the CLI's login opens a browser (0).

Agent Tree 63

MIT, an OSI licence (30). PRIVACY.md is the manifest's privacy page and matches the code. Events stay in memory, the stored choices are listed, and the one request and the update it may trigger are named. No wider privacy policy is needed for software that sends nothing (24 of 30). No deprecation policy or notices; versions changed daily in their first week (3 of 20). No telemetry in the source. The update check is disclosed in the README and PRIVACY.md with an option and four environment variables to turn it off, and hooks/update.ts reads the same switches. It was added and documented on 28 October 2026, a minute apart (20). 77 in all.

Pydantic Logfire 75

The platform is closed source under clear terms, with MIT SDKs and an open Helm chart (18). The Privacy Statement (22 August 2026), a public Data Processing Addendum with 72-hour incident notice, and retention stated per plan. The documents disagree in places. The terms say Personal data past the allowance is stored but hidden, where the docs say it is dropped once a buffer is used. The data regions page names GCP only, where the sub-processor list names GCP and AWS for hosting. The terms give no warranty that data is deleted promptly after retention ends (20). Twelve operations are marked deprecated in the OpenAPI document and SDK removals are listed in release notes for major versions, but no notice period or removal dates were found, and the terms allow the service to be changed or discontinued with reasonable efforts to notify (9). The sub-processor list gives each vendor's purpose and location with 14 days' notice of changes, and both hosting regions are named (20).

Agent Tree 67

Framework reading, how much a coding agent has to carry. The plugin adds no tools, skills or prompt text to the model's context. Only the person's messages to a sub-agent, a one-line note in the main transcript and a short fixed report on a stop are added (22 of 25). Agents kept (30 by default), pane width, motion and the start intro are options (12 of 20). Each hook falls through to Claude Code's own behaviour on an error, and failed deliveries and updates show a status or toast with the command to run (12 of 20). Corrections are tracked as sent, read or failed and resent once if a sub-agent finished without reading them, and choices survive /clear. A stop can't be undone (13 of 20). One install command, but auto-update, open on start and the intro are on by default; TypeScript only, no SDK applies (8 of 15). 67 in all.

Pydantic Logfire 72

The MCP discovery card lists 51 tools, which scores 5. The tool list is cut to what the credential's scopes allow, and an organisation-wide read-only mode exists on Enterprise, which earns 7 back (12). Queries are SQL with LIMIT, time bounds and a limit parameter from 100 to 10,000, in JSON, Arrow or CSV, and dashboard_list pages by cursor. The query API has no cursor and the docs tell callers to split a range that returns a full page (18). An unknown path on the public API returned a JSON problem body with error_code, retryable and what_you_should_do, and a 429 names the query source and the wait. The declared schema is plainer (17). The docs say destructive variable operations sit in their own tool so clients can rely on destructiveHint. We could not confirm annotations on the other tools, and found no idempotency keys (10). Python, JavaScript and Rust SDKs, a CLI, and OTLP from any OpenTelemetry SDK (15).