{
  "data": {
    "a": {
      "slug": "agent-zero",
      "name": "Agent Zero",
      "vendor": "Agent Zero, s.r.o.",
      "vendorUrl": "https://www.agent-zero.ai",
      "kind": "harness",
      "category": "agent-harnesses",
      "summary": "Agent Zero is an open-source agent framework that runs in a Docker container with a Linux desktop, a browser, a task scheduler and memory. Its owner reaches it through a web interface, Telegram, WhatsApp or email.",
      "url": "https://www.anchorterminal.com/tools/agent-zero",
      "markdownUrl": "https://www.anchorterminal.com/tools/agent-zero.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/agent-zero.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/agent-zero.json",
      "dns": "agent-zero.grade.anchorterminal.com",
      "repo": "https://github.com/agent0ai/agent-zero",
      "license": "MIT",
      "transports": [],
      "packages": [
        {
          "registry": "oci",
          "name": "agent0ai/agent-zero"
        }
      ],
      "auth": "none",
      "authNotes": "No account. The web interface has no login until the owner sets a username and password in Settings or as `AUTH_LOGIN` and `AUTH_PASSWORD`, which are stored in `/a0/usr/.env` (https://github.com/agent0ai/agent-zero/blob/main/docs/setup/vps-deployment.md). The external API takes an `X-API-KEY` header, and the optional MCP server and A2A endpoint carry the same token in the URL path. The token is derived from the instance id and the login, so it changes when either changes (https://github.com/agent0ai/agent-zero/blob/main/docs/guides/a2a-setup.md). Model access uses provider API keys or OAuth sign-in to ChatGPT (Codex), GitHub Copilot, Google Cloud Gemini or xAI (https://github.com/agent0ai/agent-zero/blob/main/plugins/_oauth/README.md).",
      "pricing": "free",
      "pricingNotes": "Free under MIT, with nothing to buy for the software. The owner pays the model provider they configure, or nothing with a local model. A beta LLM API on the vendor's site gives a daily quota to people who stake its A0T token and is separate from the software (checked 2026-10-12).",
      "priceSummary": "Free · OSS",
      "where": "local",
      "x402": {
        "level": "no",
        "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-12).",
        "endpoints": []
      },
      "toolCount": null,
      "popularity": {
        "githubStars": 19429,
        "npmWeekly": null,
        "pypiWeekly": null,
        "asOf": "2026-10-12"
      },
      "docsUrl": "https://github.com/agent0ai/agent-zero/tree/main/docs",
      "llmsTxt": "https://www.agent-zero.ai/llms.txt",
      "capabilities": [
        "agent.harness",
        "agent.mcp-client"
      ],
      "tags": [
        "open-source",
        "self-hosted",
        "local",
        "free",
        "python",
        "mit",
        "llms-txt",
        "docker"
      ],
      "lastRelease": "2026-09-23",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 54.6,
        "grade": "C",
        "agentReady": false,
        "rank": 820,
        "ranked": true,
        "rankOf": 1251,
        "categoryRank": 32,
        "methodology": "0.7",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 62,
          "maintenance": 75,
          "payments": 60,
          "reliability": 57,
          "schema": 64,
          "security": 54,
          "transparency": 59
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "medium",
          "date": "2026-10-12"
        },
        "negative": -6,
        "negativeNotes": [
          "2026-03-17. CVE-2026-4307 (path traversal in `get_abs_path`, CVSS 4.3) and CVE-2026-4308 (server-side request forgery in document queries, CVSS 6.3), both against 0.9.7, with public exploits. The NVD entries say the vendor was contacted and did not respond. The v2.9 notes of 12 August 2026 list a fix for an SSRF regression under CVE-2026-4308. Whether CVE-2026-4307 is fixed was not established. -2. https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-4308",
          "2026-05-27. CVE-2026-47119, stored cross-site scripting through SVG files served by the `image_get` endpoint, CVSS 6.1, in versions before 1.15. The report (#1609) was closed as completed on 12 May 2026. Fixed, and no GitHub advisory was published. -1. https://github.com/agent0ai/agent-zero/issues/1609",
          "2026-09-30. CVE-2026-51852 and CVE-2026-51853, directory traversal in the file browser of versions 1.7 to 1.10, CVSS 7.5 each. Reported as issues #1539 and #1540 on 20 April 2026 and closed as completed on 24 July 2026. The file browser still starts at the container root by design. -1. https://github.com/agent0ai/agent-zero/issues/1540",
          "2026-09-09. Two flaws recorded in the project's own security-review ledger and fixed in v2.12 the same day. An unauthenticated Telegram webhook accepted forged updates, and WhatsApp document names could overwrite files outside the media cache before the sender check ran. The ledger rates both high. Named in the release notes, with no advisory. -2. https://github.com/agent0ai/agent-zero/blob/main/security-review/LEDGER.md"
        ],
        "verdict": "Self-hosted under the MIT licence, with nine releases in the 90 days to 12 October 2026 and breaking changes listed in the release notes. The agent runs shell commands in its container with no approval step, the web interface has no login by default, and five CVEs from the past year have no published GitHub advisory.",
        "bestFor": "A technical owner who wants an agent with its own Linux machine, reachable from Telegram, WhatsApp or email, with scheduled tasks and editable memory.",
        "strengths": [
          "MIT licence, with prompts, tools, plugins and settings readable and editable in one public repository",
          "Nine tagged releases between 17 July and 23 September 2026, and Breaking Changes sections in the v2.11, v2.12 and v2.13 notes",
          "Memory dashboard to search, edit, delete and bulk-delete entries, with memory kept apart for each project by default",
          "No usage telemetry found in the source. The one call home is an update check that a setting turns off",
          "Tool Access policy can allow or block each built-in and MCP tool for a project or an agent profile"
        ],
        "weaknesses": [
          "No approval step before shell commands, file changes or outgoing messages. Tool Access defaults to allow",
          "The web interface has no login until the owner sets a username, and the README command publishes port 80",
          "Five CVEs published between 17 March and 30 September 2026, none as a GitHub advisory, and no SECURITY.md or security.txt",
          "Infection Check, the prompt-injection audit before tool calls, ships turned off",
          "Empty allow-lists in the Telegram, WhatsApp and email integrations accept messages from anyone",
          "No public CI runs the 191 test files. The only workflows publish Docker images and close inactive issues"
        ],
        "agentNotes": [
          "Set a UI login and password in Settings before publishing the port or opening a tunnel. The default has none",
          "Fill `allowed_users`, `allowed_numbers` or `sender_whitelist` before enabling a channel. An empty list accepts every sender",
          "Enable the Infection Check plugin when the agent reads mail, web pages or MCP results. It ships disabled",
          "Run v2.12 or later. It fixes a Telegram webhook authentication bypass and a WhatsApp media path traversal",
          "Call `POST /api_message` with the `X-API-KEY` header. The token changes when the UI login or password changes"
        ],
        "metrics": {
          "kind": "local",
          "measured": false
        },
        "reviewCount": 0,
        "avgRating": 0,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "C",
            "methodology": "0.7",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 54.6
          }
        ],
        "editorialScores": {
          "ergonomics": 62,
          "maintenance": 75,
          "payments": 60,
          "reliability": 57,
          "schema": 64,
          "security": 54,
          "transparency": 56
        },
        "provenanceScore": 61,
        "checked": {
          "categories": {
            "ergonomics": "2026-10-12",
            "maintenance": "2026-10-12",
            "payments": "2026-10-12",
            "reliability": "2026-10-12",
            "schema": "2026-10-12",
            "security": "2026-10-12",
            "transparency": "2026-10-12"
          },
          "last": "2026-10-12",
          "lastMoved": "2026-10-28",
          "oldest": "2026-10-12",
          "stale": false,
          "staleAfterDays": 90
        }
      },
      "connect": {
        "install": "docker run -p 80:80 -v a0_usr:/a0/usr agent0ai/agent-zero   # or: curl -fsSL https://bash.agent-zero.ai | bash"
      },
      "letme": {
        "capability": "https://letme.dev/agent.harness",
        "tool": "https://letme.dev/agent-zero"
      },
      "area": "frameworks",
      "provenance": {
        "legalEntity": "Agent Zero, s.r.o.",
        "domain": "agent-zero.ai",
        "domainRegistered": "",
        "endpointOnVendorDomain": null,
        "terms": "",
        "privacy": "",
        "statusPage": "",
        "changelog": "https://github.com/agent0ai/agent-zero/releases",
        "securityTxt": "none",
        "checked": "2026-10-12",
        "notes": [
          "The site footer names Agent Zero, s.r.o., ID no. 231 46 508, Nové sady 988/2, 602 00 Brno, Czech Republic, and the `LICENSE` file carries the same company's copyright.",
          "No terms or privacy policy for the software was found. The site's terms page covers its community platform and its cookie page covers the website, so neither is linked here and the MIT licence stands in.",
          "`/.well-known/security.txt` on www.agent-zero.ai answered 404 on 12 October 2026, and the repository has no SECURITY.md.",
          "robots.txt on www.agent-zero.ai answered 404, read as no rules. agent-zero.ai redirects to www.agent-zero.ai.",
          "There is no hosted endpoint. An instance answers on its owner's own host.",
          "The domain's registration date was not looked up."
        ],
        "score": 61
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/agent-zero.json",
      "live": {
        "slug": "agent-zero",
        "versions": [
          {
            "registry": "github",
            "name": "agent0ai/agent-zero",
            "version": "v2.14",
            "released": "2026-10-13",
            "seenAt": "2026-10-31T15:33:29.194996238Z"
          }
        ],
        "githubStars": 19616,
        "securityTxt": {
          "url": "https://agent-zero.ai/.well-known/security.txt",
          "state": "none",
          "checkedAt": "2026-10-31T15:41:04.702093789Z"
        },
        "llmsTxt": {
          "url": "https://www.agent-zero.ai/llms.txt",
          "ok": true,
          "status": 200,
          "checkedAt": "2026-10-31T15:09:28.636235853Z"
        },
        "domain": {
          "domain": "agent-zero.ai",
          "registered": "2025-01-26",
          "source": "https://rdap.identitydigital.services/rdap/domain/agent-zero.ai",
          "checkedAt": "2026-10-25T14:02:39.41525797Z"
        },
        "github": {
          "repo": "agent0ai/agent-zero",
          "checkedAt": "2026-10-26T07:07:52.263106773Z",
          "stars": 19567,
          "archived": false,
          "issuesEnabled": true,
          "pushedAt": "2026-10-24T16:45:36Z",
          "openIssues": 59,
          "openPRs": 77,
          "issuesOpened90d": 70,
          "issuesClosed90d": 118,
          "prsMerged90d": 34,
          "ci": {
            "branch": "main",
            "runs": 50,
            "success": 46,
            "failure": 3,
            "other": 1,
            "latest": "success",
            "latestAt": "2026-10-13T16:30:26Z"
          },
          "replies": {
            "sampled": 25,
            "unanswered": 23,
            "medianDays": 7.5
          }
        },
        "updatedAt": "2026-10-31T15:41:04.702093789Z"
      }
    },
    "answer": "Agent Zero scores 54.6 (C) on agent readiness against dsh-superagent (DeepSeek)'s 42.1 (E), and leads in 6 of 7 scored categories. dsh-superagent (DeepSeek) leads on agent ergonomics.",
    "b": {
      "slug": "deepseek-superagent",
      "name": "dsh-superagent (DeepSeek)",
      "vendor": "DeepSeek",
      "vendorUrl": "https://github.com/deepseek-ai/dsh-superagent-prototype",
      "kind": "harness",
      "category": "agent-harnesses",
      "summary": "dsh-superagent is DeepSeek's MIT-licensed research prototype of a proactive coding agent for one GitHub repository, run as a DeepSeek Harness bundle. A main Session admits requests from allowed people and parallel Executor Sessions work them into pull requests.",
      "url": "https://www.anchorterminal.com/tools/deepseek-superagent",
      "markdownUrl": "https://www.anchorterminal.com/tools/deepseek-superagent.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/deepseek-superagent.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/deepseek-superagent.json",
      "dns": "deepseek-superagent.grade.anchorterminal.com",
      "repo": "https://github.com/deepseek-ai/dsh-superagent-prototype",
      "license": "MIT",
      "transports": [],
      "packages": [],
      "auth": "pat",
      "authNotes": "No account with the project. The agent acts through a dedicated GitHub user account signed in to a `gh` wrapper with `auth login`, and optionally a Feishu bot through `lark-cli`. DSH needs a model provider key. The local Management API takes no credential and accepts only loopback requests with `x-orchestrator-request: 1`.",
      "pricing": "free",
      "pricingNotes": "Free and MIT, with nothing to buy. The operator pays the model provider DSH is set up with, usually DeepSeek's API, for a main Session and one Session per Ticket.",
      "priceSummary": "Free · OSS",
      "where": "local",
      "x402": {
        "level": "no",
        "evidence": "No x402, MPP or L402 in the README, SETUP.md or docs/000 to 008 (checked 2026-11-01).",
        "endpoints": []
      },
      "toolCount": null,
      "popularity": {
        "githubStars": null,
        "npmWeekly": null,
        "pypiWeekly": null,
        "asOf": "2026-11-01"
      },
      "docsUrl": "https://github.com/deepseek-ai/dsh-superagent-prototype/tree/main/docs",
      "capabilities": [
        "agent.harness",
        "agent.multi-agent"
      ],
      "tags": [
        "official",
        "harness",
        "coding-agent",
        "open-source",
        "mit",
        "typescript",
        "local",
        "free",
        "no-card",
        "pre-1.0",
        "preview",
        "telemetry-default-on"
      ],
      "lastRelease": "2026-10-31",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 42.1,
        "grade": "E",
        "agentReady": false,
        "rank": 1108,
        "ranked": true,
        "rankOf": 1251,
        "categoryRank": 41,
        "methodology": "0.7",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 67,
          "maintenance": 34,
          "payments": 40,
          "reliability": 15,
          "schema": 61,
          "security": 33,
          "transparency": 52
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "medium",
          "date": "2026-11-01"
        },
        "negative": 0,
        "verdict": "The authorization design is careful, with allowed lists, Mandates and a Policy enforced in code, proactive work only recorded by default and auto-merge off. Executors run every command without approval under the operator's OS user, and the README calls it a research prototype with no release, changelog or security policy.",
        "bestFor": "Teams on github.com that want a DeepSeek Harness agent to turn allowed people's issue requests into pull requests, run on an isolated machine or OS account.",
        "strengths": [
          "MIT licence, with nine numbered design and operations documents that state each rule, from admission to restart recovery",
          "Only listed GitHub logins can start work by default, and messages, comments and prompts cannot change the gate, which code enforces",
          "Proactive work starts in `observe` mode, which records what the agent would have done and accepts nothing",
          "The agent never enables auto-merge as its own account, and the default merge rule needs approvals and fewer than 200 changed lines",
          "Setup and worker shells drop environment variables named KEY, PASSWORD, SECRET or TOKEN, and git uses only the agent account's credentials"
        ],
        "weaknesses": [
          "Executor and main Sessions run with `danger-full-access` as the operator's OS user, and the docs say a worker can read the operator's home directory",
          "The README calls it a research prototype, not an official DeepSeek product, at version 0.1.0 with no tag, release or changelog found",
          "Not on npm. Installing means a git clone, `pnpm build`, a pinned DSH release candidate, tmux and a dedicated GitHub user account",
          "The docs don't mention that DSH's shipped profiles upload the session log to DeepSeek with official API requests by default",
          "No SECURITY.md, security.txt or CI workflow found, and GitHub's issues and pull requests couldn't be read"
        ],
        "agentNotes": [
          "Run it under a dedicated OS account holding only the agent's credentials. Executors run commands without approval and can read the operator's home directory",
          "Set `enabled: false` on the `session-log-deepseek` row of the `superagent` profile before using DeepSeek's official API on private code",
          "Keep the accept mode at `observe` and the allowed list short until the recorded Decisions look right",
          "Wait for `scripts/dsh-superagent status` to stop exiting 1 after any save that answers `restarting: true` before the next request",
          "Send `x-orchestrator-request: 1` and a loopback Host to the Management API, and send `revision` with each PUT, since a stale one gets 409"
        ],
        "metrics": {
          "kind": "local",
          "measured": false
        },
        "reviewCount": 0,
        "avgRating": 0,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "E",
            "methodology": "0.7",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 42.1
          }
        ],
        "editorialScores": {
          "ergonomics": 67,
          "maintenance": 34,
          "payments": 40,
          "reliability": 15,
          "schema": 61,
          "security": 33,
          "transparency": 51
        },
        "provenanceScore": 52,
        "checked": {
          "categories": {
            "ergonomics": "2026-11-01",
            "maintenance": "2026-11-01",
            "payments": "2026-11-01",
            "reliability": "2026-11-01",
            "schema": "2026-11-01",
            "security": "2026-11-01",
            "transparency": "2026-11-01"
          },
          "last": "2026-11-01",
          "oldest": "2026-11-01",
          "stale": false,
          "staleAfterDays": 90
        }
      },
      "connect": {
        "install": "npm install -g @deepseek-ai/dsh@0.2.1-rc.3 \u0026\u0026 git clone https://github.com/deepseek-ai/dsh-superagent-prototype dsh-superagent \u0026\u0026 cd dsh-superagent \u0026\u0026 pnpm install \u0026\u0026 pnpm build \u0026\u0026 dsh superagent --from-default-profile web --dump-config \u003e /dev/null \u0026\u0026 dsh plugin --profile superagent add \"link:$PWD\""
      },
      "letme": {
        "capability": "https://letme.dev/agent.harness",
        "tool": "https://letme.dev/deepseek-superagent"
      },
      "sameCompany": [
        "deepseek-harness"
      ],
      "area": "frameworks",
      "provenance": {
        "legalEntity": "DeepSeek (the LICENSE names the DeepSeek Harness Team; DeepSeek Harness's terms name Hangzhou DeepSeek Artificial Intelligence Co., Ltd.)",
        "domain": "github.com",
        "domainRegistered": "",
        "endpointOnVendorDomain": null,
        "terms": "",
        "privacy": "https://www.deepseek.com/en/harness/privacy/",
        "statusPage": "",
        "changelog": "",
        "securityTxt": "none",
        "checked": "2026-11-01",
        "notes": [
          "The repository has no terms or privacy policy of its own. DeepSeek Harness's terms of use and privacy policy (both last updated 20 September 2026) name Hangzhou DeepSeek Artificial Intelligence Co., Ltd. and cover the harness it runs on. The README says the prototype is not an official DeepSeek product.",
          "package.json names `DeepSeek Harness Team \u003cteam@dsh.dev\u003e` as author. dsh.dev didn't resolve from our network on 1 November 2026.",
          "No SECURITY.md in the root or .github, and www.deepseek.com/.well-known/security.txt returned 404 on 1 November 2026.",
          "No CHANGELOG.md, tags or releases found. GitHub's web pages and API weren't reachable, so files were read on raw.githubusercontent.com and the commit history, stars and issues are unchecked."
        ],
        "score": 52
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/deepseek-superagent.json"
    },
    "edges": [
      {
        "by": 42,
        "category": "reliability",
        "leads": "agent-zero",
        "name": "Reliability",
        "reasons": {
          "a": "Read with the local-software lines, as software the owner runs. Installs from the `agent0ai/agent-zero` Docker image, an install script, or a desktop Launcher with builds for macOS, Linux and Windows on x86 and ARM64. The README says it runs wherever Docker runs. The image registry page was not read (17 of 20). The repository holds 191 test files, and its only two workflows publish Docker images and close inactive issues, so no public CI run shows the tests passing (5 of 25). 139 open issues and pull requests on 12 October 2026. Open reports from September include a crash of `run_ui` after a failed memory consolidation (#1909), a browser worker that hangs the agent turn (#1923) and truncated backups (#1904), each with no reply or one, and a workflow closes anything inactive for 90 days (11 of 25). Release notes for v2.11, v2.12 and v2.13 carry a Breaking Changes section, but breaking changes ship in minor versions, so the numbering is not semver (9 of 15). v2.13, past 1.0 (15).",
          "b": "Local-package reading, since it runs as a DSH bundle on the operator's machine. Not published to npm (`private: true` in package.json, and the registry has no `dsh-superagent`). It installs from a git clone with `pnpm install \u0026\u0026 pnpm build` on top of `@deepseek-ai/dsh@0.2.1-rc.3`, with Node 22.19+ or 24+, git 2.32+, Python 3.8+, tmux and gh 2.48+ stated, so half credit (10). A vitest suite of about 25 spec files is listed in docs/007, and `pnpm check` runs the typecheck, tests and build. Two spec files were read on raw.githubusercontent.com. No CI workflow was found at five common paths under .github/workflows, and the directory couldn't be listed (5). Open issues couldn't be read, because github.com and api.github.com weren't reachable from our network. Unchecked, so scored absent (0). Version 0.1.0 with no tag, release or changelog found, so no semver record (0). A research prototype, not stable (0)."
        },
        "scores": {
          "a": 57,
          "b": 15
        }
      },
      {
        "by": 41,
        "category": "maintenance",
        "leads": "agent-zero",
        "name": "Maintenance \u0026 community",
        "reasons": {
          "a": "v2.13 was published on 23 September 2026, 19 days before this check (30). Nine releases since 14 July 2026, v2.5 to v2.13 (20). Of the 40 newest open items read on 12 October, 16 are issues and 14 of those have no comment. Three security reports filed as issues were closed as completed, one in five days and two after three months (10 of 25). The Docker image, the desktop Launcher, the install scripts and the A0 CLI connector come from the same organisation, and the README links Launcher 1.8 (10 of 15). A Docker publish workflow builds images from tags, and the v2.0 notes record a LiteLLM upgrade past a patched CVE floor. No public test CI (5 of 10).",
          "b": "Published on 31 October 2026, within 30 days, read as the last published change since no tag or release was found (30). One publication, so not three releases in 90 days (0). Issues, pull requests and Discussions couldn't be read, and the README frames the code as a reference prototype adapted from an internal version (0). No official SDK or registry entry (0). Exact dependency pins and a lockfile, but no CI workflow found, and the docs pin DSH 0.2.1-rc.3 (23 October 2026) while npm `latest` is 0.2.1-rc.5 (29 October 2026) (4)."
        },
        "scores": {
          "a": 75,
          "b": 34
        }
      },
      {
        "by": 21,
        "category": "security",
        "leads": "agent-zero",
        "name": "Security \u0026 auth",
        "reasons": {
          "a": "Harness reading of the framework checklist, the one the Goose calibration dossier uses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. No usage telemetry was found in the source. An update check, on by default, posts the version and a 20-character hash of the instance id to api.agent-zero.ai, and one setting turns it off. The reviewed docs do not describe what it sends (22). The agent works inside a Docker container built on Kali Linux and runs as root there. Tool Access can block tools by project or profile and defaults to allow, host access through the A0 CLI is scoped by read, write and execute permissions, and no approval step was found before a shell command, a file deletion or an outgoing message. The web interface has no login until a username is set (10). Infection Check audits the agent's reasoning with a second model before each tool call and ships disabled. Scanners check plugins, skills and MCP servers before install. The channel allow-lists accept every sender when empty, and the email filter matches the claimed From address only, which the plugin README states (7). Chat logs, visible tool steps and Time Travel snapshots, with no per-call audit log. Per-process log files were removed in v2.5 (9). No SECURITY.md, security.txt answered 404, and the repository has no published advisory, while NVD lists five CVEs since March 2026. A security-review ledger in the repository records two findings, and the v2.12 notes name both fixes (6).",
          "b": "Harness reading of the framework checklist, 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. The `superagent` profile is created from DSH's Web template, and DSH documents that shipped profiles mount `session-log-deepseek`, enabled by default, which adds the session log to each official DeepSeek API request, up to 8 MiB. dsh-superagent's docs don't mention it, and its Sessions read issue, pull request and chat text and the repository. Setup and worker shells drop variables named KEY, PASSWORD, SECRET or TOKEN, and `GH_TOKEN` and `GITHUB_TOKEN` are removed from git (8). Both presets run `danger-full-access` without approval as the operator's OS user. docs/006 says the account wrappers don't isolate the process, a worker can run programs by path and read the operator's home directory, and recommends a dedicated OS account. The gate, `observe` default, blocked commands and no auto-merge as the agent account narrow what it does, not what it can do (6). docs/002 says messages, comments and quoted documents are inputs to a decision and can't change allowed lists, rules or Mandates, bots can never make explicit requests, and prompt edits don't change the gate. Workers with full access still read untrusted Thread text, and no further guidance on that was found (7). Decisions are recorded with reasons, Ticket details show the Trigger, Decision, scope and Policy version, the host records the prompt revisions each Session used, and every GitHub message starts with an automated-agent line by default (12). No SECURITY.md (404 at the root and in .github), no security.txt on www.deepseek.com (404), no bug bounty or advisory found. NVD has no record for the prototype. The CVEs against DSH itself are on the deepseek-harness listing (0)."
        },
        "scores": {
          "a": 54,
          "b": 33
        }
      },
      {
        "by": 20,
        "category": "payments",
        "leads": "agent-zero",
        "name": "Payments \u0026 pricing",
        "reasons": {
          "a": "Read with the self-hosted rule. No payment protocol in the source (0). Free under MIT with nothing to buy for the software, so 20, 20 and 20 on the last three lines. It starts with one Docker command and no account. Model usage is billed by whichever provider the owner configures, or costs nothing with a local model. The vendor's site also describes a beta LLM API whose daily quota depends on staking its A0T token. That is separate from the software and not scored.",
          "b": "Self-hosted rule, as for the other open-source harnesses. No payment protocol (0). Free under MIT with nothing to buy (20). No card for the software (20). An agent can't get started alone, because the setup needs a person to create a dedicated GitHub user account, accept the repository invitation and run `auth login` for the wrappers, which SETUP.md lists as operator steps. 0, as the other harnesses that need an account were read (0). The model provider is a separate purchase."
        },
        "scores": {
          "a": 60,
          "b": 40
        }
      },
      {
        "by": 7,
        "category": "transparency",
        "leads": "agent-zero",
        "name": "Transparency \u0026 trust",
        "reasons": {
          "a": "MIT, copyright Agent Zero, s.r.o. (30). No privacy policy for the software was found. The site's cookie notice covers the website, and its terms cover the community platform. The docs say where data lives (chats, memory, secrets and settings under `/a0/usr`) and warn that model providers see what is sent to them only in general terms, with no retention statement (8 of 30). Release notes list breaking changes and removals with the release date, and one deprecated alias is named. No deprecation policy or notice period was found (8 of 20). No telemetry was found, and the update check has an off switch in settings, but what it sends is not described in the reviewed docs (10 of 20).",
          "b": "MIT, Copyright (c) 2026 DeepSeek Harness Team (30). The prototype has no data statement of its own. DeepSeek Harness's privacy policy (last updated 20 September 2026) names Hangzhou DeepSeek Artificial Intelligence Co., Ltd., says session logs are collected with official model services and may be used to train models with a right to opt out, and says custom model services aren't stored server-side. It agrees with DSH's session-log README, but neither is referred to from the prototype (12). No deprecation policy. The README says the published code differs from DeepSeek's internal version, and docs/006 warns that database migrations are one-way (3). Telemetry and the session-log upload are disclosed with opt-outs in DSH's own reference pages, not in this repository (6)."
        },
        "scores": {
          "a": 59,
          "b": 52
        }
      },
      {
        "by": 5,
        "category": "ergonomics",
        "leads": "deepseek-superagent",
        "name": "Agent ergonomics",
        "reasons": {
          "a": "Harness reading, scored on what a person or program driving it must supply. Skills load on demand, blocked tools are removed from the prompt, chats can be compacted, and the v2.12 notes report Codex input falling from about 16.4K to 11.3K tokens, a vendor figure (18 of 25). An MCP tool timeout of 120 seconds, a limit of five consecutive unusable responses and context-window handling are set by default. No turn or spend limit was found in the reviewed docs (11 of 20). Other programs reach it through `POST /api_message`, an optional MCP server, A2A and an ACP bridge, with request and response shapes left to the source (11 of 20). An error-retry plugin, saved chats, a message queue, backups and Time Travel snapshots with diff and revert (14 of 20). One Docker command starts it and a wizard sets the model, but there is no SDK and the default has no login (8 of 15).",
          "b": "Harness reading, scored on what a team or pipeline driving it has to supply. The worker preset is DSH's `standard` with web fetch, plan mode, questions, scheduling and workflows left out, the main Session can't write files, and tool results over 8,192 characters are pruned (18). A concurrency limit with one extra slot for a person's message, a 5-second foreground shell, a 10-minute prepare limit and 30 minutes for background work after a turn. No cost or turn limit per Ticket was found (12). Ticket stages, health entries per part, Reports of `blocked` or `failed`, API refusals with codes, and three retries with growing backoff on 408, 429, 5xx and dropped connections (17). Saves carry a revision and a stale one gets 409, state and Sessions survive a restart, and a restarted Assignment gets a recovery note to check git and GitHub before repeating any outside action (16). Sensible defaults (observe mode, port 3082, branch prefix `agent/`), but setup needs a dedicated GitHub user account, CLI wrappers, tmux and a profile, and there is no SDK. Work is requested by mentioning the agent account on GitHub or Feishu (4)."
        },
        "scores": {
          "a": 62,
          "b": 67
        }
      }
    ],
    "facts": [
      {
        "a": "Agent harness",
        "b": "Agent harness",
        "name": "Kind"
      },
      {
        "a": "Agent Zero, s.r.o.",
        "b": "DeepSeek",
        "name": "Vendor"
      },
      {
        "a": "no (local only)",
        "b": "no (local only)",
        "name": "Hosted endpoint"
      },
      {
        "a": "",
        "b": "",
        "name": "Transports"
      },
      {
        "a": "None",
        "b": "Token",
        "name": "Auth"
      },
      {
        "a": "Free",
        "b": "Free",
        "name": "Pricing"
      },
      {
        "a": "no",
        "b": "no",
        "name": "x402"
      },
      {
        "a": "MIT",
        "b": "MIT",
        "name": "Licence"
      },
      {
        "a": "no",
        "b": "no",
        "name": "Read-only variant documented"
      },
      {
        "a": "yes",
        "b": "no",
        "name": "llms.txt"
      },
      {
        "a": "2026-09-23",
        "b": "2026-10-31",
        "name": "Last release"
      },
      {
        "a": "no document linked",
        "b": "no document linked",
        "name": "Terms last updated"
      },
      {
        "a": "no document linked",
        "b": "2026-09-20",
        "name": "Privacy policy last updated"
      },
      {
        "a": "19k stars",
        "b": "none",
        "name": "Popularity"
      }
    ],
    "faq": [
      {
        "answer": "Agent Zero scores 54.6 (C) on agent readiness against dsh-superagent (DeepSeek)'s 42.1 (E), and leads in 6 of 7 scored categories. dsh-superagent (DeepSeek) leads on agent ergonomics.",
        "question": "Which is better for AI agents, Agent Zero or dsh-superagent (DeepSeek)?"
      },
      {
        "answer": "Yes. Agent Zero is open source (MIT). dsh-superagent (DeepSeek) is open source (MIT).",
        "question": "Are Agent Zero and dsh-superagent (DeepSeek) open source?"
      }
    ],
    "goodFor": [
      {
        "aheadOn": [
          "Reliability, 57 against 15",
          "Security \u0026 auth, 54 against 33",
          "Payments \u0026 pricing, 60 against 40",
          "Maintenance \u0026 community, 75 against 34",
          "Transparency \u0026 trust, 59 against 52"
        ],
        "also": [
          "No key needed to call it"
        ],
        "goodFor": "A technical owner who wants an agent with its own Linux machine, reachable from Telegram, WhatsApp or email, with scheduled tasks and editable memory.",
        "slug": "agent-zero",
        "watchFor": "No approval step before shell commands, file changes or outgoing messages. Tool Access defaults to allow"
      },
      {
        "aheadOn": [
          "Agent ergonomics, 67 against 62"
        ],
        "also": [
          "Free to start without a card",
          "No incidents deducted, where Agent Zero loses 6 points for them"
        ],
        "goodFor": "Teams on github.com that want a DeepSeek Harness agent to turn allowed people's issue requests into pull requests, run on an isolated machine or OS account.",
        "slug": "deepseek-superagent",
        "watchFor": "Executor and main Sessions run with `danger-full-access` as the operator's OS user, and the docs say a worker can read the operator's home directory"
      }
    ],
    "history": {
      "agent-zero": [
        {
          "causes": [
            "evidence"
          ],
          "date": "2026-10-28",
          "delta": 0.3,
          "from": 54.3,
          "fromGrade": "C",
          "to": 54.6,
          "toGrade": "C"
        },
        {
          "causes": [
            "method"
          ],
          "date": "2026-10-27",
          "delta": 0.1,
          "from": 54.2,
          "fromGrade": "C",
          "to": 54.3,
          "toGrade": "C"
        }
      ],
      "deepseek-superagent": null
    },
    "job": {
      "capability": "agent.harness",
      "name": "Agent harnesses"
    },
    "others": [
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-aider.json",
        "title": "Agent Zero vs Aider",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-aider"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-amp.json",
        "title": "Agent Zero vs Amp",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-amp"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-antigravity-cli.json",
        "title": "Agent Zero vs Antigravity CLI",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-antigravity-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-auggie.json",
        "title": "Agent Zero vs Auggie CLI",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-auggie"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-claude-code.json",
        "title": "Agent Zero vs Claude Code",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-claude-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-cline.json",
        "title": "Agent Zero vs Cline",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-cline"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-crush.json",
        "title": "Agent Zero vs Crush",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-crush"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli.json",
        "title": "Agent Zero vs Cursor CLI",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-deepseek-harness.json",
        "title": "Agent Zero vs DeepSeek Harness (dsh)",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-deepseek-harness"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-devin.json",
        "title": "Agent Zero vs Devin",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-devin"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli.json",
        "title": "Agent Zero vs Droid CLI",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-earendil-pi.json",
        "title": "Agent Zero vs Pi",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-earendil-pi"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli.json",
        "title": "Agent Zero vs Gemini CLI",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-github-copilot-cli.json",
        "title": "Agent Zero vs GitHub Copilot CLI",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-github-copilot-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-goose.json",
        "title": "Agent Zero vs goose",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-goose"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-harness2.json",
        "title": "Agent Zero vs Harness²",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-harness2"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-harnessrouter.json",
        "title": "Agent Zero vs HarnessRouter",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-harnessrouter"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-jules.json",
        "title": "Agent Zero vs Jules",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-jules"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-junie.json",
        "title": "Agent Zero vs Junie CLI",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-junie"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli.json",
        "title": "Agent Zero vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-kimi-code-cli.json",
        "title": "Agent Zero vs Kimi Code CLI",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-kimi-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-kiro-cli.json",
        "title": "Agent Zero vs Kiro CLI",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-kiro-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-mini-swe-agent.json",
        "title": "Agent Zero vs mini-swe-agent",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-mini-swe-agent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-minimax-code.json",
        "title": "Agent Zero vs MiniMax Code",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-minimax-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-mistral-vibe-cli.json",
        "title": "Agent Zero vs Mistral Vibe CLI",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-mistral-vibe-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-muse-code.json",
        "title": "Agent Zero vs Muse Code",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-muse-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex.json",
        "title": "Agent Zero vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-opencode.json",
        "title": "Agent Zero vs OpenCode",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-opencode"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-openhands.json",
        "title": "Agent Zero vs OpenHands",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-openhands"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-openmausbot.json",
        "title": "Agent Zero vs OpenMausBot",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-openmausbot"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-prime-agent.json",
        "title": "Agent Zero vs Prime Agent",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-prime-agent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-qoder-cli.json",
        "title": "Agent Zero vs Qoder CLI",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-qoder-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code.json",
        "title": "Agent Zero vs Qwen Code",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-reflection-mirror.json",
        "title": "Agent Zero vs Mirror CLI",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-reflection-mirror"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-rovo-dev-cli.json",
        "title": "Agent Zero vs Rovo Dev CLI",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-rovo-dev-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-unstoppable.json",
        "title": "Agent Zero vs Unstoppable",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-unstoppable"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading.json",
        "title": "Agent Zero vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-warp.json",
        "title": "Agent Zero vs Warp (Warp Agent CLI and the Oz Agent API)",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-warp"
      },
      {
        "json": "https://www.anchorterminal.com/compare/aider-vs-deepseek-superagent.json",
        "title": "Aider vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/aider-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/amp-vs-deepseek-superagent.json",
        "title": "Amp vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/amp-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-deepseek-superagent.json",
        "title": "Antigravity CLI vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/auggie-vs-deepseek-superagent.json",
        "title": "Auggie CLI vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/auggie-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/claude-code-vs-deepseek-superagent.json",
        "title": "Claude Code vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/claude-code-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cline-vs-deepseek-superagent.json",
        "title": "Cline vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/cline-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/crush-vs-deepseek-superagent.json",
        "title": "Crush vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/crush-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-deepseek-superagent.json",
        "title": "Cursor CLI vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-deepseek-superagent.json",
        "title": "DeepSeek Harness (dsh) vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-devin.json",
        "title": "dsh-superagent (DeepSeek) vs Devin",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-devin"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-droid-cli.json",
        "title": "dsh-superagent (DeepSeek) vs Droid CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-droid-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-earendil-pi.json",
        "title": "dsh-superagent (DeepSeek) vs Pi",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-earendil-pi"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-gemini-cli.json",
        "title": "dsh-superagent (DeepSeek) vs Gemini CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-gemini-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-github-copilot-cli.json",
        "title": "dsh-superagent (DeepSeek) vs GitHub Copilot CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-github-copilot-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-goose.json",
        "title": "dsh-superagent (DeepSeek) vs goose",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-goose"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness2.json",
        "title": "dsh-superagent (DeepSeek) vs Harness²",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness2"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harnessrouter.json",
        "title": "dsh-superagent (DeepSeek) vs HarnessRouter",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harnessrouter"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-jules.json",
        "title": "dsh-superagent (DeepSeek) vs Jules",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-jules"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-junie.json",
        "title": "dsh-superagent (DeepSeek) vs Junie CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-junie"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kilo-code-cli.json",
        "title": "dsh-superagent (DeepSeek) vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kimi-code-cli.json",
        "title": "dsh-superagent (DeepSeek) vs Kimi Code CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kimi-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kiro-cli.json",
        "title": "dsh-superagent (DeepSeek) vs Kiro CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kiro-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-mini-swe-agent.json",
        "title": "dsh-superagent (DeepSeek) vs mini-swe-agent",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-mini-swe-agent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-minimax-code.json",
        "title": "dsh-superagent (DeepSeek) vs MiniMax Code",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-minimax-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-mistral-vibe-cli.json",
        "title": "dsh-superagent (DeepSeek) vs Mistral Vibe CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-mistral-vibe-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-muse-code.json",
        "title": "dsh-superagent (DeepSeek) vs Muse Code",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-muse-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openai-codex.json",
        "title": "dsh-superagent (DeepSeek) vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-opencode.json",
        "title": "dsh-superagent (DeepSeek) vs OpenCode",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-opencode"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openhands.json",
        "title": "dsh-superagent (DeepSeek) vs OpenHands",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openhands"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openmausbot.json",
        "title": "dsh-superagent (DeepSeek) vs OpenMausBot",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openmausbot"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-prime-agent.json",
        "title": "dsh-superagent (DeepSeek) vs Prime Agent",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-prime-agent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-qoder-cli.json",
        "title": "dsh-superagent (DeepSeek) vs Qoder CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-qoder-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-qwen-code.json",
        "title": "dsh-superagent (DeepSeek) vs Qwen Code",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-qwen-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-reflection-mirror.json",
        "title": "dsh-superagent (DeepSeek) vs Mirror CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-reflection-mirror"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-rovo-dev-cli.json",
        "title": "dsh-superagent (DeepSeek) vs Rovo Dev CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-rovo-dev-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-unstoppable.json",
        "title": "dsh-superagent (DeepSeek) vs Unstoppable",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-unstoppable"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-vibe-trading.json",
        "title": "dsh-superagent (DeepSeek) vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-warp.json",
        "title": "dsh-superagent (DeepSeek) vs Warp (Warp Agent CLI and the Oz Agent API)",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-warp"
      },
      {
        "json": "https://www.anchorterminal.com/compare/clawboo-vs-deepseek-superagent.json",
        "title": "Clawboo vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/clawboo-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cli-manager-vs-deepseek-superagent.json",
        "title": "CLI Manager vs dsh-superagent (DeepSeek)",
        "url": "https://www.anchorterminal.com/compare/cli-manager-vs-deepseek-superagent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness-autonomous.json",
        "title": "dsh-superagent (DeepSeek) vs Harness",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness-autonomous"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-paperclip.json",
        "title": "dsh-superagent (DeepSeek) vs Paperclip",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-paperclip"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-parallax-agents.json",
        "title": "dsh-superagent (DeepSeek) vs Parallax",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-parallax-agents"
      }
    ],
    "panel": null,
    "scores": [
      {
        "agent-zero": 57,
        "by": 42,
        "deepseek-superagent": 15,
        "edge": "agent-zero",
        "key": "reliability",
        "name": "Reliability",
        "weight": 16
      },
      {
        "key": "performance",
        "name": "Performance",
        "pending": true,
        "weight": 10
      },
      {
        "agent-zero": 64,
        "by": 3,
        "deepseek-superagent": 61,
        "edge": "agent-zero",
        "key": "schema",
        "name": "Schema \u0026 documentation",
        "weight": 13
      },
      {
        "agent-zero": 62,
        "by": 5,
        "deepseek-superagent": 67,
        "edge": "deepseek-superagent",
        "key": "ergonomics",
        "name": "Agent ergonomics",
        "weight": 13
      },
      {
        "agent-zero": 54,
        "by": 21,
        "deepseek-superagent": 33,
        "edge": "agent-zero",
        "key": "security",
        "name": "Security \u0026 auth",
        "weight": 14
      },
      {
        "agent-zero": 60,
        "by": 20,
        "deepseek-superagent": 40,
        "edge": "agent-zero",
        "key": "payments",
        "name": "Payments \u0026 pricing",
        "weight": 10
      },
      {
        "key": "tasks",
        "name": "Task success",
        "pending": true,
        "weight": 10
      },
      {
        "agent-zero": 75,
        "by": 41,
        "deepseek-superagent": 34,
        "edge": "agent-zero",
        "key": "maintenance",
        "name": "Maintenance \u0026 community",
        "weight": 7
      },
      {
        "agent-zero": 59,
        "by": 7,
        "deepseek-superagent": 52,
        "edge": "agent-zero",
        "key": "transparency",
        "name": "Transparency \u0026 trust",
        "weight": 7
      }
    ],
    "summary": "Agent Zero scores 54.6 (C) on agent readiness against dsh-superagent (DeepSeek)'s 42.1 (E), and leads in 6 of 7 scored categories. dsh-superagent (DeepSeek) leads on agent ergonomics. Both do agent harnesses.",
    "tasks": null,
    "tutorials": [],
    "verdicts": {
      "agent-zero": "Self-hosted under the MIT licence, with nine releases in the 90 days to 12 October 2026 and breaking changes listed in the release notes. The agent runs shell commands in its container with no approval step, the web interface has no login by default, and five CVEs from the past year have no published GitHub advisory.",
      "deepseek-superagent": "The authorization design is careful, with allowed lists, Mandates and a Policy enforced in code, proactive work only recorded by default and auto-merge off. Executors run every command without approval under the operator's OS user, and the README calls it a research prototype with no release, changelog or security policy."
    }
  },
  "kind": "anchor.page",
  "links": {
    "api": "https://www.anchorterminal.com/api/v1/index.json",
    "html": "https://www.anchorterminal.com/compare/agent-zero-vs-deepseek-superagent",
    "json": "https://www.anchorterminal.com/compare/agent-zero-vs-deepseek-superagent.json",
    "llms": "https://www.anchorterminal.com/llms.txt",
    "markdown": "https://www.anchorterminal.com/compare/agent-zero-vs-deepseek-superagent.md",
    "mcp": "https://www.anchorterminal.com/mcp",
    "slim": "https://www.anchorterminal.com/compare/agent-zero-vs-deepseek-superagent.min.md"
  },
  "markdown": "Agent Zero scores 54.6 (C) on agent readiness against dsh-superagent (DeepSeek)'s 42.1 (E), and leads in 6 of 7 scored categories. dsh-superagent (DeepSeek) leads on agent ergonomics. Both do agent harnesses.\n\n- Agent Zero: grade C, 54.6/100, rank #820 of 1251. Markdown https://www.anchorterminal.com/tools/agent-zero.md · JSON https://www.anchorterminal.com/api/v1/tools/agent-zero.json\n- dsh-superagent (DeepSeek): grade E, 42.1/100, rank #1108 of 1251. Markdown https://www.anchorterminal.com/tools/deepseek-superagent.md · JSON https://www.anchorterminal.com/api/v1/tools/deepseek-superagent.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 955 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### Agent Zero (C)\n\nGood for: A technical owner who wants an agent with its own Linux machine, reachable from Telegram, WhatsApp or email, with scheduled tasks and editable memory.\n\nAhead on:\n- Reliability, 57 against 15\n- Security \u0026 auth, 54 against 33\n- Payments \u0026 pricing, 60 against 40\n- Maintenance \u0026 community, 75 against 34\n- Transparency \u0026 trust, 59 against 52\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: No approval step before shell commands, file changes or outgoing messages. Tool Access defaults to allow\n\n### dsh-superagent (DeepSeek) (E)\n\nGood for: Teams on github.com that want a DeepSeek Harness agent to turn allowed people's issue requests into pull requests, run on an isolated machine or OS account.\n\nAhead on:\n- Agent ergonomics, 67 against 62\n\nAlso in its favour:\n- Free to start without a card\n- No incidents deducted, where Agent Zero loses 6 points for them\n\nWatch for: Executor and main Sessions run with `danger-full-access` as the operator's OS user, and the docs say a worker can read the operator's home directory\n\n\n## Why the edge\n\n### Reliability: Agent Zero +42\n\n- Agent Zero (57): Read with the local-software lines, as software the owner runs. Installs from the `agent0ai/agent-zero` Docker image, an install script, or a desktop Launcher with builds for macOS, Linux and Windows on x86 and ARM64. The README says it runs wherever Docker runs. The image registry page was not read (17 of 20). The repository holds 191 test files, and its only two workflows publish Docker images and close inactive issues, so no public CI run shows the tests passing (5 of 25). 139 open issues and pull requests on 12 October 2026. Open reports from September include a crash of `run_ui` after a failed memory consolidation (#1909), a browser worker that hangs the agent turn (#1923) and truncated backups (#1904), each with no reply or one, and a workflow closes anything inactive for 90 days (11 of 25). Release notes for v2.11, v2.12 and v2.13 carry a Breaking Changes section, but breaking changes ship in minor versions, so the numbering is not semver (9 of 15). v2.13, past 1.0 (15).\n- dsh-superagent (DeepSeek) (15): Local-package reading, since it runs as a DSH bundle on the operator's machine. Not published to npm (`private: true` in package.json, and the registry has no `dsh-superagent`). It installs from a git clone with `pnpm install \u0026\u0026 pnpm build` on top of `@deepseek-ai/dsh@0.2.1-rc.3`, with Node 22.19+ or 24+, git 2.32+, Python 3.8+, tmux and gh 2.48+ stated, so half credit (10). A vitest suite of about 25 spec files is listed in docs/007, and `pnpm check` runs the typecheck, tests and build. Two spec files were read on raw.githubusercontent.com. No CI workflow was found at five common paths under .github/workflows, and the directory couldn't be listed (5). Open issues couldn't be read, because github.com and api.github.com weren't reachable from our network. Unchecked, so scored absent (0). Version 0.1.0 with no tag, release or changelog found, so no semver record (0). A research prototype, not stable (0).\n\n### Maintenance \u0026 community: Agent Zero +41\n\n- Agent Zero (75): v2.13 was published on 23 September 2026, 19 days before this check (30). Nine releases since 14 July 2026, v2.5 to v2.13 (20). Of the 40 newest open items read on 12 October, 16 are issues and 14 of those have no comment. Three security reports filed as issues were closed as completed, one in five days and two after three months (10 of 25). The Docker image, the desktop Launcher, the install scripts and the A0 CLI connector come from the same organisation, and the README links Launcher 1.8 (10 of 15). A Docker publish workflow builds images from tags, and the v2.0 notes record a LiteLLM upgrade past a patched CVE floor. No public test CI (5 of 10).\n- dsh-superagent (DeepSeek) (34): Published on 31 October 2026, within 30 days, read as the last published change since no tag or release was found (30). One publication, so not three releases in 90 days (0). Issues, pull requests and Discussions couldn't be read, and the README frames the code as a reference prototype adapted from an internal version (0). No official SDK or registry entry (0). Exact dependency pins and a lockfile, but no CI workflow found, and the docs pin DSH 0.2.1-rc.3 (23 October 2026) while npm `latest` is 0.2.1-rc.5 (29 October 2026) (4).\n\n### Security \u0026 auth: Agent Zero +21\n\n- Agent Zero (54): Harness reading of the framework checklist, the one the Goose calibration dossier uses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. No usage telemetry was found in the source. An update check, on by default, posts the version and a 20-character hash of the instance id to api.agent-zero.ai, and one setting turns it off. The reviewed docs do not describe what it sends (22). The agent works inside a Docker container built on Kali Linux and runs as root there. Tool Access can block tools by project or profile and defaults to allow, host access through the A0 CLI is scoped by read, write and execute permissions, and no approval step was found before a shell command, a file deletion or an outgoing message. The web interface has no login until a username is set (10). Infection Check audits the agent's reasoning with a second model before each tool call and ships disabled. Scanners check plugins, skills and MCP servers before install. The channel allow-lists accept every sender when empty, and the email filter matches the claimed From address only, which the plugin README states (7). Chat logs, visible tool steps and Time Travel snapshots, with no per-call audit log. Per-process log files were removed in v2.5 (9). No SECURITY.md, security.txt answered 404, and the repository has no published advisory, while NVD lists five CVEs since March 2026. A security-review ledger in the repository records two findings, and the v2.12 notes name both fixes (6).\n- dsh-superagent (DeepSeek) (33): Harness reading of the framework checklist, 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. The `superagent` profile is created from DSH's Web template, and DSH documents that shipped profiles mount `session-log-deepseek`, enabled by default, which adds the session log to each official DeepSeek API request, up to 8 MiB. dsh-superagent's docs don't mention it, and its Sessions read issue, pull request and chat text and the repository. Setup and worker shells drop variables named KEY, PASSWORD, SECRET or TOKEN, and `GH_TOKEN` and `GITHUB_TOKEN` are removed from git (8). Both presets run `danger-full-access` without approval as the operator's OS user. docs/006 says the account wrappers don't isolate the process, a worker can run programs by path and read the operator's home directory, and recommends a dedicated OS account. The gate, `observe` default, blocked commands and no auto-merge as the agent account narrow what it does, not what it can do (6). docs/002 says messages, comments and quoted documents are inputs to a decision and can't change allowed lists, rules or Mandates, bots can never make explicit requests, and prompt edits don't change the gate. Workers with full access still read untrusted Thread text, and no further guidance on that was found (7). Decisions are recorded with reasons, Ticket details show the Trigger, Decision, scope and Policy version, the host records the prompt revisions each Session used, and every GitHub message starts with an automated-agent line by default (12). No SECURITY.md (404 at the root and in .github), no security.txt on www.deepseek.com (404), no bug bounty or advisory found. NVD has no record for the prototype. The CVEs against DSH itself are on the deepseek-harness listing (0).\n\n### Payments \u0026 pricing: Agent Zero +20\n\n- Agent Zero (60): Read with the self-hosted rule. No payment protocol in the source (0). Free under MIT with nothing to buy for the software, so 20, 20 and 20 on the last three lines. It starts with one Docker command and no account. Model usage is billed by whichever provider the owner configures, or costs nothing with a local model. The vendor's site also describes a beta LLM API whose daily quota depends on staking its A0T token. That is separate from the software and not scored.\n- dsh-superagent (DeepSeek) (40): Self-hosted rule, as for the other open-source harnesses. No payment protocol (0). Free under MIT with nothing to buy (20). No card for the software (20). An agent can't get started alone, because the setup needs a person to create a dedicated GitHub user account, accept the repository invitation and run `auth login` for the wrappers, which SETUP.md lists as operator steps. 0, as the other harnesses that need an account were read (0). The model provider is a separate purchase.\n\n### Transparency \u0026 trust: Agent Zero +7\n\n- Agent Zero (59): MIT, copyright Agent Zero, s.r.o. (30). No privacy policy for the software was found. The site's cookie notice covers the website, and its terms cover the community platform. The docs say where data lives (chats, memory, secrets and settings under `/a0/usr`) and warn that model providers see what is sent to them only in general terms, with no retention statement (8 of 30). Release notes list breaking changes and removals with the release date, and one deprecated alias is named. No deprecation policy or notice period was found (8 of 20). No telemetry was found, and the update check has an off switch in settings, but what it sends is not described in the reviewed docs (10 of 20).\n- dsh-superagent (DeepSeek) (52): MIT, Copyright (c) 2026 DeepSeek Harness Team (30). The prototype has no data statement of its own. DeepSeek Harness's privacy policy (last updated 20 September 2026) names Hangzhou DeepSeek Artificial Intelligence Co., Ltd., says session logs are collected with official model services and may be used to train models with a right to opt out, and says custom model services aren't stored server-side. It agrees with DSH's session-log README, but neither is referred to from the prototype (12). No deprecation policy. The README says the published code differs from DeepSeek's internal version, and docs/006 warns that database migrations are one-way (3). Telemetry and the session-log upload are disclosed with opt-outs in DSH's own reference pages, not in this repository (6).\n\n### Agent ergonomics: dsh-superagent (DeepSeek) +5\n\n- Agent Zero (62): Harness reading, scored on what a person or program driving it must supply. Skills load on demand, blocked tools are removed from the prompt, chats can be compacted, and the v2.12 notes report Codex input falling from about 16.4K to 11.3K tokens, a vendor figure (18 of 25). An MCP tool timeout of 120 seconds, a limit of five consecutive unusable responses and context-window handling are set by default. No turn or spend limit was found in the reviewed docs (11 of 20). Other programs reach it through `POST /api_message`, an optional MCP server, A2A and an ACP bridge, with request and response shapes left to the source (11 of 20). An error-retry plugin, saved chats, a message queue, backups and Time Travel snapshots with diff and revert (14 of 20). One Docker command starts it and a wizard sets the model, but there is no SDK and the default has no login (8 of 15).\n- dsh-superagent (DeepSeek) (67): Harness reading, scored on what a team or pipeline driving it has to supply. The worker preset is DSH's `standard` with web fetch, plan mode, questions, scheduling and workflows left out, the main Session can't write files, and tool results over 8,192 characters are pruned (18). A concurrency limit with one extra slot for a person's message, a 5-second foreground shell, a 10-minute prepare limit and 30 minutes for background work after a turn. No cost or turn limit per Ticket was found (12). Ticket stages, health entries per part, Reports of `blocked` or `failed`, API refusals with codes, and three retries with growing backoff on 408, 429, 5xx and dropped connections (17). Saves carry a revision and a stale one gets 409, state and Sessions survive a restart, and a restarted Assignment gets a recovery note to check git and GitHub before repeating any outside action (16). Sensible defaults (observe mode, port 3082, branch prefix `agent/`), but setup needs a dedicated GitHub user account, CLI wrappers, tmux and a profile, and there is no SDK. Work is requested by mentioning the agent account on GitHub or Feishu (4).\n\n## Score by category\n\n| Category | Weight | Agent Zero | dsh-superagent (DeepSeek) | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 57 | 15 | Agent Zero +42 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 64 | 61 | Agent Zero +3 |\n| Agent ergonomics | 13% (16.2 this run) | 62 | 67 | dsh-superagent (DeepSeek) +5 |\n| Security \u0026 auth | 14% (17.5 this run) | 54 | 33 | Agent Zero +21 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 40 | Agent Zero +20 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 75 | 34 | Agent Zero +41 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 59 | 52 | Agent Zero +7 |\n| Negative events | ≤15 | -6 | 0 | |\n| **Total** | | **54.6 · C** | **42.1 · E** | |\n\n## Facts side by side\n\n| Fact | Agent Zero | dsh-superagent (DeepSeek) |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Agent Zero, s.r.o. | DeepSeek |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports |  |  |\n| Auth | None | Token |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | MIT |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-09-23 | 2026-10-31 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | 2026-09-20 |\n| Popularity | 19k stars | none |\n\n## How the scores have moved\n\n### Agent Zero\n\n- +0.3 on 28 October 2026: new evidence\n- +0.1 on 27 October 2026: checklist\n\n### dsh-superagent (DeepSeek)\n\nNo score change since it was listed.\n\n## Verdicts\n\n**Agent Zero.** Self-hosted under the MIT licence, with nine releases in the 90 days to 12 October 2026 and breaking changes listed in the release notes. The agent runs shell commands in its container with no approval step, the web interface has no login by default, and five CVEs from the past year have no published GitHub advisory.\n\n**dsh-superagent (DeepSeek).** The authorization design is careful, with allowed lists, Mandates and a Policy enforced in code, proactive work only recorded by default and auto-merge off. Executors run every command without approval under the operator's OS user, and the README calls it a research prototype with no release, changelog or security policy.\n\n## Before you call either\n\n### Agent Zero\n\n1. Set a UI login and password in Settings before publishing the port or opening a tunnel. The default has none\n2. Fill `allowed_users`, `allowed_numbers` or `sender_whitelist` before enabling a channel. An empty list accepts every sender\n3. Enable the Infection Check plugin when the agent reads mail, web pages or MCP results. It ships disabled\n4. Run v2.12 or later. It fixes a Telegram webhook authentication bypass and a WhatsApp media path traversal\n5. Call `POST /api_message` with the `X-API-KEY` header. The token changes when the UI login or password changes\n\n### dsh-superagent (DeepSeek)\n\n1. Run it under a dedicated OS account holding only the agent's credentials. Executors run commands without approval and can read the operator's home directory\n2. Set `enabled: false` on the `session-log-deepseek` row of the `superagent` profile before using DeepSeek's official API on private code\n3. Keep the accept mode at `observe` and the allowed list short until the recorded Decisions look right\n4. Wait for `scripts/dsh-superagent status` to stop exiting 1 after any save that answers `restarting: true` before the next request\n5. Send `x-orchestrator-request: 1` and a loopback Host to the Management API, and send `revision` with each PUT, since a stale one gets 409\n\n## Questions\n\n### Which is better for AI agents, Agent Zero or dsh-superagent (DeepSeek)?\n\nAgent Zero scores 54.6 (C) on agent readiness against dsh-superagent (DeepSeek)'s 42.1 (E), and leads in 6 of 7 scored categories. dsh-superagent (DeepSeek) leads on agent ergonomics.\n\n### Are Agent Zero and dsh-superagent (DeepSeek) open source?\n\nYes. Agent Zero is open source (MIT). dsh-superagent (DeepSeek) is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/agent-zero-vs-deepseek-superagent.json, and with the fewest tokens: https://www.anchorterminal.com/compare/agent-zero-vs-deepseek-superagent.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"agent-zero\", \"b\": \"deepseek-superagent\"}`. From a terminal: `anchor compare agent-zero deepseek-superagent`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/agent-zero.json and https://www.anchorterminal.com/api/v1/tools/deepseek-superagent.json\n\n## Other comparisons with Agent Zero or dsh-superagent (DeepSeek)\n\n- [Agent Zero vs Aider](https://www.anchorterminal.com/compare/agent-zero-vs-aider.md)\n- [Agent Zero vs Amp](https://www.anchorterminal.com/compare/agent-zero-vs-amp.md)\n- [Agent Zero vs Antigravity CLI](https://www.anchorterminal.com/compare/agent-zero-vs-antigravity-cli.md)\n- [Agent Zero vs Auggie CLI](https://www.anchorterminal.com/compare/agent-zero-vs-auggie.md)\n- [Agent Zero vs Claude Code](https://www.anchorterminal.com/compare/agent-zero-vs-claude-code.md)\n- [Agent Zero vs Cline](https://www.anchorterminal.com/compare/agent-zero-vs-cline.md)\n- [Agent Zero vs Crush](https://www.anchorterminal.com/compare/agent-zero-vs-crush.md)\n- [Agent Zero vs Cursor CLI](https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli.md)\n- [Agent Zero vs DeepSeek Harness (dsh)](https://www.anchorterminal.com/compare/agent-zero-vs-deepseek-harness.md)\n- [Agent Zero vs Devin](https://www.anchorterminal.com/compare/agent-zero-vs-devin.md)\n- [Agent Zero vs Droid CLI](https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli.md)\n- [Agent Zero vs Pi](https://www.anchorterminal.com/compare/agent-zero-vs-earendil-pi.md)\n- [Agent Zero vs Gemini CLI](https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli.md)\n- [Agent Zero vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/agent-zero-vs-github-copilot-cli.md)\n- [Agent Zero vs goose](https://www.anchorterminal.com/compare/agent-zero-vs-goose.md)\n- [Agent Zero vs Harness²](https://www.anchorterminal.com/compare/agent-zero-vs-harness2.md)\n- [Agent Zero vs HarnessRouter](https://www.anchorterminal.com/compare/agent-zero-vs-harnessrouter.md)\n- [Agent Zero vs Jules](https://www.anchorterminal.com/compare/agent-zero-vs-jules.md)\n- [Agent Zero vs Junie CLI](https://www.anchorterminal.com/compare/agent-zero-vs-junie.md)\n- [Agent Zero vs Kilo Code CLI](https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli.md)\n- [Agent Zero vs Kimi Code CLI](https://www.anchorterminal.com/compare/agent-zero-vs-kimi-code-cli.md)\n- [Agent Zero vs Kiro CLI](https://www.anchorterminal.com/compare/agent-zero-vs-kiro-cli.md)\n- [Agent Zero vs mini-swe-agent](https://www.anchorterminal.com/compare/agent-zero-vs-mini-swe-agent.md)\n- [Agent Zero vs MiniMax Code](https://www.anchorterminal.com/compare/agent-zero-vs-minimax-code.md)\n- [Agent Zero vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/agent-zero-vs-mistral-vibe-cli.md)\n- [Agent Zero vs Muse Code](https://www.anchorterminal.com/compare/agent-zero-vs-muse-code.md)\n- [Agent Zero vs OpenAI Codex](https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex.md)\n- [Agent Zero vs OpenCode](https://www.anchorterminal.com/compare/agent-zero-vs-opencode.md)\n- [Agent Zero vs OpenHands](https://www.anchorterminal.com/compare/agent-zero-vs-openhands.md)\n- [Agent Zero vs OpenMausBot](https://www.anchorterminal.com/compare/agent-zero-vs-openmausbot.md)\n- [Agent Zero vs Prime Agent](https://www.anchorterminal.com/compare/agent-zero-vs-prime-agent.md)\n- [Agent Zero vs Qoder CLI](https://www.anchorterminal.com/compare/agent-zero-vs-qoder-cli.md)\n- [Agent Zero vs Qwen Code](https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code.md)\n- [Agent Zero vs Mirror CLI](https://www.anchorterminal.com/compare/agent-zero-vs-reflection-mirror.md)\n- [Agent Zero vs Rovo Dev CLI](https://www.anchorterminal.com/compare/agent-zero-vs-rovo-dev-cli.md)\n- [Agent Zero vs Unstoppable](https://www.anchorterminal.com/compare/agent-zero-vs-unstoppable.md)\n- [Agent Zero vs Vibe-Trading](https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading.md)\n- [Agent Zero vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/agent-zero-vs-warp.md)\n- [Aider vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/aider-vs-deepseek-superagent.md)\n- [Amp vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/amp-vs-deepseek-superagent.md)\n- [Antigravity CLI vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/antigravity-cli-vs-deepseek-superagent.md)\n- [Auggie CLI vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/auggie-vs-deepseek-superagent.md)\n- [Claude Code vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/claude-code-vs-deepseek-superagent.md)\n- [Cline vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/cline-vs-deepseek-superagent.md)\n- [Crush vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/crush-vs-deepseek-superagent.md)\n- [Cursor CLI vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/cursor-cli-vs-deepseek-superagent.md)\n- [DeepSeek Harness (dsh) vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/deepseek-harness-vs-deepseek-superagent.md)\n- [dsh-superagent (DeepSeek) vs Devin](https://www.anchorterminal.com/compare/deepseek-superagent-vs-devin.md)\n- [dsh-superagent (DeepSeek) vs Droid CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-droid-cli.md)\n- [dsh-superagent (DeepSeek) vs Pi](https://www.anchorterminal.com/compare/deepseek-superagent-vs-earendil-pi.md)\n- [dsh-superagent (DeepSeek) vs Gemini CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-gemini-cli.md)\n- [dsh-superagent (DeepSeek) vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-github-copilot-cli.md)\n- [dsh-superagent (DeepSeek) vs goose](https://www.anchorterminal.com/compare/deepseek-superagent-vs-goose.md)\n- [dsh-superagent (DeepSeek) vs Harness²](https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness2.md)\n- [dsh-superagent (DeepSeek) vs HarnessRouter](https://www.anchorterminal.com/compare/deepseek-superagent-vs-harnessrouter.md)\n- [dsh-superagent (DeepSeek) vs Jules](https://www.anchorterminal.com/compare/deepseek-superagent-vs-jules.md)\n- [dsh-superagent (DeepSeek) vs Junie CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-junie.md)\n- [dsh-superagent (DeepSeek) vs Kilo Code CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-kilo-code-cli.md)\n- [dsh-superagent (DeepSeek) vs Kimi Code CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-kimi-code-cli.md)\n- [dsh-superagent (DeepSeek) vs Kiro CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-kiro-cli.md)\n- [dsh-superagent (DeepSeek) vs mini-swe-agent](https://www.anchorterminal.com/compare/deepseek-superagent-vs-mini-swe-agent.md)\n- [dsh-superagent (DeepSeek) vs MiniMax Code](https://www.anchorterminal.com/compare/deepseek-superagent-vs-minimax-code.md)\n- [dsh-superagent (DeepSeek) vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-mistral-vibe-cli.md)\n- [dsh-superagent (DeepSeek) vs Muse Code](https://www.anchorterminal.com/compare/deepseek-superagent-vs-muse-code.md)\n- [dsh-superagent (DeepSeek) vs OpenAI Codex](https://www.anchorterminal.com/compare/deepseek-superagent-vs-openai-codex.md)\n- [dsh-superagent (DeepSeek) vs OpenCode](https://www.anchorterminal.com/compare/deepseek-superagent-vs-opencode.md)\n- [dsh-superagent (DeepSeek) vs OpenHands](https://www.anchorterminal.com/compare/deepseek-superagent-vs-openhands.md)\n- [dsh-superagent (DeepSeek) vs OpenMausBot](https://www.anchorterminal.com/compare/deepseek-superagent-vs-openmausbot.md)\n- [dsh-superagent (DeepSeek) vs Prime Agent](https://www.anchorterminal.com/compare/deepseek-superagent-vs-prime-agent.md)\n- [dsh-superagent (DeepSeek) vs Qoder CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-qoder-cli.md)\n- [dsh-superagent (DeepSeek) vs Qwen Code](https://www.anchorterminal.com/compare/deepseek-superagent-vs-qwen-code.md)\n- [dsh-superagent (DeepSeek) vs Mirror CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-reflection-mirror.md)\n- [dsh-superagent (DeepSeek) vs Rovo Dev CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-rovo-dev-cli.md)\n- [dsh-superagent (DeepSeek) vs Unstoppable](https://www.anchorterminal.com/compare/deepseek-superagent-vs-unstoppable.md)\n- [dsh-superagent (DeepSeek) vs Vibe-Trading](https://www.anchorterminal.com/compare/deepseek-superagent-vs-vibe-trading.md)\n- [dsh-superagent (DeepSeek) vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/deepseek-superagent-vs-warp.md)\n- [Clawboo vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/clawboo-vs-deepseek-superagent.md)\n- [CLI Manager vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/cli-manager-vs-deepseek-superagent.md)\n- [dsh-superagent (DeepSeek) vs Harness](https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness-autonomous.md)\n- [dsh-superagent (DeepSeek) vs Paperclip](https://www.anchorterminal.com/compare/deepseek-superagent-vs-paperclip.md)\n- [dsh-superagent (DeepSeek) vs Parallax](https://www.anchorterminal.com/compare/deepseek-superagent-vs-parallax-agents.md)\n",
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "attributionRequired": true,
    "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-11-01",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.7",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run",
    "terms": "https://www.anchorterminal.com/terms/#data"
  },
  "page": {
    "breadcrumbs": [
      {
        "name": "Home",
        "url": "https://www.anchorterminal.com/"
      },
      {
        "name": "Compare",
        "url": "https://www.anchorterminal.com/compare/"
      },
      {
        "name": "Agent Zero vs dsh-superagent (DeepSeek)",
        "url": ""
      }
    ],
    "description": "Agent Zero scores 54.6 (C) to dsh-superagent's 42.1 (E) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.",
    "facts": [
      "Agent Zero C 54.6",
      "dsh-superagent (DeepSeek) E 42.1",
      "scores"
    ],
    "h1": "Agent Zero vs dsh-superagent (DeepSeek)",
    "image": "https://www.anchorterminal.com/assets/og/default.png",
    "path": "/compare/agent-zero-vs-deepseek-superagent",
    "published": "2026-10-01",
    "section": "tools",
    "title": "Agent Zero vs dsh-superagent for AI agents in 2026: scores and prices",
    "toc": null,
    "updated": "2026-11-01",
    "url": "https://www.anchorterminal.com/compare/agent-zero-vs-deepseek-superagent"
  },
  "tokens": {
    "markdown": 6950,
    "slim": 3480
  },
  "version": 1
}
