{ "data": { "a": { "slug": "agent-zero", "name": "Agent Zero", "vendor": "Agent Zero, s.r.o.", "vendorUrl": "https://www.agent-zero.ai", "kind": "harness", "category": "agent-harnesses", "summary": "Agent Zero is an open-source agent framework that runs in a Docker container with a Linux desktop, a browser, a task scheduler and memory. Its owner reaches it through a web interface, Telegram, WhatsApp or email.", "url": "https://www.anchorterminal.com/tools/agent-zero", "markdownUrl": "https://www.anchorterminal.com/tools/agent-zero.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/agent-zero.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/agent-zero.json", "repo": "https://github.com/agent0ai/agent-zero", "license": "MIT", "transports": [], "packages": [ { "registry": "oci", "name": "agent0ai/agent-zero" } ], "auth": "none", "authNotes": "No account. The web interface has no login until the owner sets a username and password in Settings or as `AUTH_LOGIN` and `AUTH_PASSWORD`, which are stored in `/a0/usr/.env` (https://github.com/agent0ai/agent-zero/blob/main/docs/setup/vps-deployment.md). The external API takes an `X-API-KEY` header, and the optional MCP server and A2A endpoint carry the same token in the URL path. The token is derived from the instance id and the login, so it changes when either changes (https://github.com/agent0ai/agent-zero/blob/main/docs/guides/a2a-setup.md). Model access uses provider API keys or OAuth sign-in to ChatGPT (Codex), GitHub Copilot, Google Cloud Gemini or xAI (https://github.com/agent0ai/agent-zero/blob/main/plugins/_oauth/README.md).", "pricing": "free", "pricingNotes": "Free under MIT, with nothing to buy for the software. The owner pays the model provider they configure, or nothing with a local model. A beta LLM API on the vendor's site gives a daily quota to people who stake its A0T token and is separate from the software (checked 2026-10-12).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 19429, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://github.com/agent0ai/agent-zero/tree/main/docs", "llmsTxt": "https://www.agent-zero.ai/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "mit", "llms-txt", "docker" ], "lastRelease": "2026-09-23", "graded": true, "anchor": { "graded": true, "score": 54.2, "grade": "C", "agentReady": false, "rank": 709, "ranked": true, "rankOf": 986, "categoryRank": 19, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 62, "maintenance": 75, "payments": 60, "reliability": 57, "schema": 64, "security": 54, "transparency": 55 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -6, "negativeNotes": [ "2026-03-17. CVE-2026-4307 (path traversal in `get_abs_path`, CVSS 4.3) and CVE-2026-4308 (server-side request forgery in document queries, CVSS 6.3), both against 0.9.7, with public exploits. The NVD entries say the vendor was contacted and did not respond. The v2.9 notes of 12 August 2026 list a fix for an SSRF regression under CVE-2026-4308. Whether CVE-2026-4307 is fixed was not established. -2. https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-4308", "2026-05-27. CVE-2026-47119, stored cross-site scripting through SVG files served by the `image_get` endpoint, CVSS 6.1, in versions before 1.15. The report (#1609) was closed as completed on 12 May 2026. Fixed, and no GitHub advisory was published. -1. https://github.com/agent0ai/agent-zero/issues/1609", "2026-09-30. CVE-2026-51852 and CVE-2026-51853, directory traversal in the file browser of versions 1.7 to 1.10, CVSS 7.5 each. Reported as issues #1539 and #1540 on 20 April 2026 and closed as completed on 24 July 2026. The file browser still starts at the container root by design. -1. https://github.com/agent0ai/agent-zero/issues/1540", "2026-09-09. Two flaws recorded in the project's own security-review ledger and fixed in v2.12 the same day. An unauthenticated Telegram webhook accepted forged updates, and WhatsApp document names could overwrite files outside the media cache before the sender check ran. The ledger rates both high. Named in the release notes, with no advisory. -2. https://github.com/agent0ai/agent-zero/blob/main/security-review/LEDGER.md" ], "verdict": "Self-hosted under the MIT licence, with nine releases in the 90 days to 12 October 2026 and breaking changes listed in the release notes. The agent runs shell commands in its container with no approval step, the web interface has no login by default, and five CVEs from the past year have no published GitHub advisory.", "bestFor": "A technical owner who wants an agent with its own Linux machine, reachable from Telegram, WhatsApp or email, with scheduled tasks and editable memory.", "strengths": [ "MIT licence, with prompts, tools, plugins and settings readable and editable in one public repository", "Nine tagged releases between 17 July and 23 September 2026, and Breaking Changes sections in the v2.11, v2.12 and v2.13 notes", "Memory dashboard to search, edit, delete and bulk-delete entries, with memory kept apart for each project by default", "No usage telemetry found in the source. The one call home is an update check that a setting turns off", "Tool Access policy can allow or block each built-in and MCP tool for a project or an agent profile" ], "weaknesses": [ "No approval step before shell commands, file changes or outgoing messages. Tool Access defaults to allow", "The web interface has no login until the owner sets a username, and the README command publishes port 80", "Five CVEs published between 17 March and 30 September 2026, none as a GitHub advisory, and no SECURITY.md or security.txt", "Infection Check, the prompt-injection audit before tool calls, ships turned off", "Empty allow-lists in the Telegram, WhatsApp and email integrations accept messages from anyone", "No public CI runs the 191 test files. The only workflows publish Docker images and close inactive issues" ], "agentNotes": [ "Set a UI login and password in Settings before publishing the port or opening a tunnel. The default has none", "Fill `allowed_users`, `allowed_numbers` or `sender_whitelist` before enabling a channel. An empty list accepts every sender", "Enable the Infection Check plugin when the agent reads mail, web pages or MCP results. It ships disabled", "Run v2.12 or later. It fixes a Telegram webhook authentication bypass and a WhatsApp media path traversal", "Call `POST /api_message` with the `X-API-KEY` header. The token changes when the UI login or password changes" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 54.2 } ], "editorialScores": { "ergonomics": 62, "maintenance": 75, "payments": 60, "reliability": 57, "schema": 64, "security": 54, "transparency": 56 }, "provenanceScore": 53 }, "connect": { "install": "docker run -p 80:80 -v a0_usr:/a0/usr agent0ai/agent-zero # or: curl -fsSL https://bash.agent-zero.ai | bash" }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/agent-zero" }, "area": "frameworks", "provenance": { "legalEntity": "Agent Zero, s.r.o.", "domain": "agent-zero.ai", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/agent0ai/agent-zero/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The site footer names Agent Zero, s.r.o., ID no. 231 46 508, Nové sady 988/2, 602 00 Brno, Czech Republic, and the `LICENSE` file carries the same company's copyright.", "No terms or privacy policy for the software was found. The site's terms page covers its community platform and its cookie page covers the website, so neither is linked here and the MIT licence stands in.", "`/.well-known/security.txt` on www.agent-zero.ai answered 404 on 12 October 2026, and the repository has no SECURITY.md.", "robots.txt on www.agent-zero.ai answered 404, read as no rules. agent-zero.ai redirects to www.agent-zero.ai.", "There is no hosted endpoint. An instance answers on its owner's own host.", "The domain's registration date was not looked up." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/agent-zero.json" }, "answer": "Droid CLI scores 59.1 (C) on agent readiness against Agent Zero's 54.2 (C), and leads in 5 of 7 scored categories. Agent Zero leads on reliability and payments \u0026 pricing.", "b": { "slug": "droid-cli", "name": "Droid CLI", "vendor": "Factory", "vendorUrl": "https://factory.com", "kind": "harness", "category": "agent-harnesses", "summary": "Droid CLI is Factory's closed-source coding agent for the terminal. It runs interactively or headless through `droid exec`, connects MCP servers, runs multi-agent Missions, and can be driven by TypeScript and Python SDKs. A paid Factory plan is required.", "url": "https://www.anchorterminal.com/tools/droid-cli", "markdownUrl": "https://www.anchorterminal.com/tools/droid-cli.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/droid-cli.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/droid-cli.json", "repo": "https://github.com/Factory-AI/factory", "license": "Proprietary, under Factory's Terms and Conditions. The `droid` npm package is marked `UNLICENSED` and the public repository holds documentation only. The Python SDK is Apache-2.0", "transports": [], "packages": [ { "registry": "npm", "name": "droid" }, { "registry": "npm", "name": "@factory/droid-sdk" }, { "registry": "pypi", "name": "droid-sdk" } ], "auth": "mixed", "authNotes": "A Factory account is required. The interactive CLI signs in through a browser with OAuth, and the docs say stored tokens rotate every 30 days. Headless runs set `FACTORY_API_KEY` to a key starting `fk-` created on the API keys page in Factory settings. Organisations can use service accounts whose keys can be rotated and revoked through an API.", "pricing": "paid", "pricingNotes": "Pro is $20 a month, Plus $100 and Max $200, each with the CLI, the Factory App and the SDK. Teams is $60 a month per team plus $40 a seat, and Business and Enterprise are by quote. Usage is capped by rolling 5-hour, 7-day and 30-day rate limits stated without numbers. Extra usage is prepaid credit from $10. No free tier or trial was found (checked 2026-10-09).", "priceSummary": "$20 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs index, the pricing pages or the terms (checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 49, "npmWeekly": 7766, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://docs.factory.com/droid-cli/overview", "llmsTxt": "https://docs.factory.com/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "harness", "coding-agent", "cli", "closed-source", "mcp", "acp", "llms-txt", "sdk", "sandbox", "telemetry-default-on" ], "lastRelease": "2026-10-08", "graded": true, "anchor": { "graded": true, "score": 59.1, "grade": "C", "agentReady": false, "rank": 573, "ranked": true, "rankOf": 986, "categoryRank": 13, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 79, "payments": 10, "reliability": 49, "schema": 79, "security": 63, "transparency": 64 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": 0, "verdict": "`droid exec` is read-only unless `--auto` raises the autonomy level, with command rules, an optional kernel-enforced sandbox, JSON output and documented exit codes. No free tier, status page or security.txt was found, the source is closed, and usage metrics go to Factory by default.", "bestFor": "Teams that want a terminal coding agent with tiered autonomy, command rules and an optional sandbox, and that will pay for a Factory plan.", "strengths": [ "`droid exec` is read-only by default. `--auto low`, `medium` or `high` opens edits and commands by risk tier, and a run that exceeds its level exits non-zero", "Optional OS sandbox using Seatbelt on macOS and bubblewrap with seccomp on Linux, with writes limited to the working directory and network limited to allowed domains", "Text, JSON and JSON-RPC output, exit codes 0, 1 and 2, session resume and fork, and tool lists that can be restricted per run", "llms.txt with a Markdown copy of every docs page, and a dated changelog with 62 entries between 11 July and 8 October 2026", "The install script verifies a SHA-256 checksum, and the `droid` npm package is published from GitHub Actions through a trusted publisher" ], "weaknesses": [ "No free tier or trial was found. Plans start at $20 a month and included usage is stated only as rolling rate limits without numbers", "The sandbox is off until `sandbox.enabled` is set, and `--skip-permissions-unsafe` skips every permission prompt", "Usage metrics go to Factory's collector by default. The pages read give no opt-out outside an airgapped deployment", "Closed source on a 0.x version line with near-daily releases. The public tracker had 33 open issues on 9 October 2026, most with no reply", "No status page and no security.txt were found. The trust centre is drawn by script and was not read", "The individual terms forbid using the service for benchmarking or competitive analysis, which matters before any probe is run" ], "agentNotes": [ "Set `FACTORY_API_KEY` (starts `fk-`) from the API keys page in Factory settings for headless runs. Interactive use signs in through a browser", "Start with `droid exec` and no flags for analysis. Add `--auto low` for edits and `--auto medium` for installs, tests and local commits", "Use `--output-format json` and read `is_error`, `num_turns` and `session_id`. Treat a non-zero exit code as failure", "Set `sandbox.enabled` to true before running on untrusted code. In `droid exec` a sandbox violation is denied without a prompt", "Pin the version in CI with `npm install -g droid@\u003cversion\u003e`, or set `FACTORY_DROID_AUTO_UPDATE_ENABLED=false` on standalone installs, which update themselves" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59.1 } ], "editorialScores": { "ergonomics": 72, "maintenance": 79, "payments": 10, "reliability": 49, "schema": 79, "security": 63, "transparency": 55 }, "provenanceScore": 72 }, "connect": { "install": "curl -fsSL https://app.factory.ai/cli | sh # or: npm install -g droid", "headless": { "command": "droid exec --auto low --output-format json \"$TASK\"", "env": { "FACTORY_API_KEY": "fk-..." } } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/droid-cli" }, "area": "frameworks", "unitPrices": [ { "item": "Pro plan", "unit": "month", "usd": 20, "note": "rolling rate limits, numbers not published" }, { "item": "Plus plan", "unit": "month", "usd": 100, "note": "about 5 times Pro usage" }, { "item": "Max plan", "unit": "month", "usd": 200, "note": "about 10 times Pro usage" }, { "item": "Teams seat", "unit": "seat-month", "usd": 40, "note": "plus $60 a month per team, up to 10 seats" } ], "provenance": { "legalEntity": "The San Francisco AI Factory, Inc.", "domain": "factory.com", "domainRegistered": "1999-03-09", "endpointOnVendorDomain": null, "terms": "https://factory.com/legal/terms-individual", "privacy": "https://factory.com/privacy-policy", "statusPage": "", "changelog": "https://docs.factory.com/changelog/release-notes", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The Terms and Conditions for Individual Plans (last updated 14 July 2026) name The San Francisco AI Factory, Inc., a Delaware corporation in San Francisco. The privacy policy (last updated 20 August 2026) names the same company.", "RDAP (Verisign) gives factory.com a registration date of 1999-03-09, long before the company.", "The CLI installs from app.factory.ai and downloads.factory.ai and signs in to app.factory.ai, a second domain of the vendor's.", "factory.com/.well-known/security.txt answered 404 on 9 October 2026.", "No status page is linked from the home page, the docs support page or the other pages read. factory.com/sla states a 99 per cent availability target.", "The terms linked are those for individual plans. Organisation plans are sold under separate orders, which we did not read." ], "score": 72 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/droid-cli.json", "live": { "slug": "droid-cli", "versions": [ { "registry": "npm", "name": "@factory/droid-sdk", "version": "0.9.1", "seenAt": "2026-10-11T19:28:08.711665439Z" }, { "registry": "npm", "name": "droid", "version": "0.238.0", "seenAt": "2026-10-11T19:28:08.494295442Z" }, { "registry": "pypi", "name": "droid-sdk", "version": "0.5.0", "released": "2026-09-24", "seenAt": "2026-10-11T19:28:10.692964397Z" } ], "githubStars": 50, "npmWeekly": 6704, "pypiWeekly": 9812, "securityTxt": { "url": "https://factory.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-12T15:43:33.896819735Z" }, "llmsTxt": { "url": "https://docs.factory.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-12T14:08:56.994809623Z" }, "domain": { "domain": "factory.com", "registered": "1999-03-09", "source": "https://rdap.verisign.com/com/v1/domain/factory.com", "checkedAt": "2026-10-11T13:18:33.575055534Z" }, "pages": [ { "url": "https://docs.factory.com/changelog/release-notes", "kind": "changelog", "status": 200, "checkedAt": "2026-10-11T19:25:49.100563426Z", "changedAt": "2026-10-10T19:01:38.547922633Z", "fingerprint": "0ee6c58878ef" }, { "url": "https://factory.com/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-11T19:27:47.02302271Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "5ef46e9f3c4f" }, { "url": "https://factory.com/legal/terms-individual", "kind": "terms", "status": 200, "checkedAt": "2026-10-11T19:27:44.816737608Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "ebfbb9d9f0ab" } ], "updatedAt": "2026-10-12T15:43:33.896819735Z" } }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Agent Zero, s.r.o.", "b": "Factory", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Paid", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Proprietary, under Factory's Terms and Conditions. The `droid` npm package is marked `UNLICENSED` and the public repository holds documentation only. The Python SDK is Apache-2.0", "name": "Licence" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-09-23", "b": "2026-10-08", "name": "Last release" }, { "a": "no document linked", "b": "2026-07-14", "name": "Terms last updated" }, { "a": "no document linked", "b": "2026-08-20", "name": "Privacy policy last updated" }, { "a": "", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "19k stars", "b": "49 stars, 7.8k npm/wk", "name": "Popularity" } ], "faq": [ { "answer": "Droid CLI scores 59.1 (C) on agent readiness against Agent Zero's 54.2 (C), and leads in 5 of 7 scored categories. Agent Zero leads on reliability and payments \u0026 pricing.", "question": "Which is better for AI agents, Agent Zero or Droid CLI?" }, { "answer": "Agent Zero is open source (MIT). No open-source release is listed for Droid CLI.", "question": "Are Agent Zero and Droid CLI open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 57 against 49", "Payments \u0026 pricing, 60 against 10" ], "also": [ "No key needed to call it", "Open source" ], "goodFor": "A technical owner who wants an agent with its own Linux machine, reachable from Telegram, WhatsApp or email, with scheduled tasks and editable memory.", "slug": "agent-zero", "watchFor": "No approval step before shell commands, file changes or outgoing messages. Tool Access defaults to allow" }, { "aheadOn": [ "Schema \u0026 documentation, 79 against 64", "Agent ergonomics, 72 against 62", "Security \u0026 auth, 63 against 54", "Transparency \u0026 trust, 64 against 55" ], "also": [ "No incidents deducted, where Agent Zero loses 6 points for them" ], "goodFor": "Teams that want a terminal coding agent with tiered autonomy, command rules and an optional sandbox, and that will pay for a Factory plan.", "slug": "droid-cli", "watchFor": "No free tier or trial was found. Plans start at $20 a month and included usage is stated only as rolling rate limits without numbers" } ], "job": { "capability": "agent.harness", "name": "Agent harnesses" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-aider.json", "title": "Agent Zero vs Aider", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-aider" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-amp.json", "title": "Agent Zero vs Amp", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-amp" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-antigravity-cli.json", "title": "Agent Zero vs Antigravity CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-antigravity-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-claude-code.json", "title": "Agent Zero vs Claude Code", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-cline.json", "title": "Agent Zero vs Cline", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-cline" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli.json", "title": "Agent Zero vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-devin.json", "title": "Agent Zero vs Devin", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-devin" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-earendil-pi.json", "title": "Agent Zero vs Pi", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli.json", "title": "Agent Zero vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-github-copilot-cli.json", "title": "Agent Zero vs GitHub Copilot CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-github-copilot-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-goose.json", "title": "Agent Zero vs goose", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-goose" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli.json", "title": "Agent Zero vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-kiro-cli.json", "title": "Agent Zero vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex.json", "title": "Agent Zero vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-opencode.json", "title": "Agent Zero vs OpenCode", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-openhands.json", "title": "Agent Zero vs OpenHands", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-prime-agent.json", "title": "Agent Zero vs Prime Agent", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code.json", "title": "Agent Zero vs Qwen Code", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-droid-cli.json", "title": "Aider vs Droid CLI", "url": "https://www.anchorterminal.com/compare/aider-vs-droid-cli" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-droid-cli.json", "title": "Amp vs Droid CLI", "url": "https://www.anchorterminal.com/compare/amp-vs-droid-cli" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-droid-cli.json", "title": "Antigravity CLI vs Droid CLI", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-droid-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-droid-cli.json", "title": "Claude Code vs Droid CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-droid-cli" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-droid-cli.json", "title": "Cline vs Droid CLI", "url": "https://www.anchorterminal.com/compare/cline-vs-droid-cli" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-droid-cli.json", "title": "Cursor CLI vs Droid CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-droid-cli" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-droid-cli.json", "title": "Devin vs Droid CLI", "url": "https://www.anchorterminal.com/compare/devin-vs-droid-cli" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-earendil-pi.json", "title": "Droid CLI vs Pi", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-gemini-cli.json", "title": "Droid CLI vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-github-copilot-cli.json", "title": "Droid CLI vs GitHub Copilot CLI", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-github-copilot-cli" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-goose.json", "title": "Droid CLI vs goose", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-goose" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-kilo-code-cli.json", "title": "Droid CLI vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-kiro-cli.json", "title": "Droid CLI vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-openai-codex.json", "title": "Droid CLI vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-opencode.json", "title": "Droid CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-openhands.json", "title": "Droid CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-prime-agent.json", "title": "Droid CLI vs Prime Agent", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-qwen-code.json", "title": "Droid CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-paperclip.json", "title": "Droid CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-paperclip" } ], "scores": [ { "agent-zero": 57, "by": 8, "droid-cli": 49, "edge": "agent-zero", "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "agent-zero": 64, "by": 15, "droid-cli": 79, "edge": "droid-cli", "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "agent-zero": 62, "by": 10, "droid-cli": 72, "edge": "droid-cli", "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "agent-zero": 54, "by": 9, "droid-cli": 63, "edge": "droid-cli", "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "agent-zero": 60, "by": 50, "droid-cli": 10, "edge": "agent-zero", "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "agent-zero": 75, "by": 4, "droid-cli": 79, "edge": "droid-cli", "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "agent-zero": 55, "by": 9, "droid-cli": 64, "edge": "droid-cli", "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Droid CLI scores 59.1 (C) on agent readiness against Agent Zero's 54.2 (C), and leads in 5 of 7 scored categories. Agent Zero leads on reliability and payments \u0026 pricing. Both do agent harnesses.", "verdicts": { "agent-zero": "Self-hosted under the MIT licence, with nine releases in the 90 days to 12 October 2026 and breaking changes listed in the release notes. The agent runs shell commands in its container with no approval step, the web interface has no login by default, and five CVEs from the past year have no published GitHub advisory.", "droid-cli": "`droid exec` is read-only unless `--auto` raises the autonomy level, with command rules, an optional kernel-enforced sandbox, JSON output and documented exit codes. No free tier, status page or security.txt was found, the source is closed, and usage metrics go to Factory by default." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli", "json": "https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli.md", "slim": "https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli.min.md" }, "markdown": "Droid CLI scores 59.1 (C) on agent readiness against Agent Zero's 54.2 (C), and leads in 5 of 7 scored categories. Agent Zero leads on reliability and payments \u0026 pricing. Both do agent harnesses.\n\n- Agent Zero: grade C, 54.2/100, rank #709 of 986. Markdown https://www.anchorterminal.com/tools/agent-zero.md · JSON https://www.anchorterminal.com/api/v1/tools/agent-zero.json\n- Droid CLI: grade C, 59.1/100, rank #573 of 986. Markdown https://www.anchorterminal.com/tools/droid-cli.md · JSON https://www.anchorterminal.com/api/v1/tools/droid-cli.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 205 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### Agent Zero (C)\n\nGood for: A technical owner who wants an agent with its own Linux machine, reachable from Telegram, WhatsApp or email, with scheduled tasks and editable memory.\n\nAhead on:\n- Reliability, 57 against 49\n- Payments \u0026 pricing, 60 against 10\n\nAlso in its favour:\n- No key needed to call it\n- Open source\n\nWatch for: No approval step before shell commands, file changes or outgoing messages. Tool Access defaults to allow\n\n### Droid CLI (C)\n\nGood for: Teams that want a terminal coding agent with tiered autonomy, command rules and an optional sandbox, and that will pay for a Factory plan.\n\nAhead on:\n- Schema \u0026 documentation, 79 against 64\n- Agent ergonomics, 72 against 62\n- Security \u0026 auth, 63 against 54\n- Transparency \u0026 trust, 64 against 55\n\nAlso in its favour:\n- No incidents deducted, where Agent Zero loses 6 points for them\n\nWatch for: No free tier or trial was found. Plans start at $20 a month and included usage is stated only as rolling rate limits without numbers\n\n\n## Score by category\n\n| Category | Weight | Agent Zero | Droid CLI | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 57 | 49 | Agent Zero +8 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 64 | 79 | Droid CLI +15 |\n| Agent ergonomics | 13% (16.2 this run) | 62 | 72 | Droid CLI +10 |\n| Security \u0026 auth | 14% (17.5 this run) | 54 | 63 | Droid CLI +9 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 10 | Agent Zero +50 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 75 | 79 | Droid CLI +4 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 55 | 64 | Droid CLI +9 |\n| Negative events | ≤15 | -6 | 0 | |\n| **Total** | | **54.2 · C** | **59.1 · C** | |\n\n## Facts side by side\n\n| Fact | Agent Zero | Droid CLI |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Agent Zero, s.r.o. | Factory |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | OAuth or key |\n| Pricing | Free | Paid |\n| x402 | no | no |\n| Licence | MIT | Proprietary, under Factory's Terms and Conditions. The `droid` npm package is marked `UNLICENSED` and the public repository holds documentation only. The Python SDK is Apache-2.0 |\n| Read-only variant documented | no | yes |\n| llms.txt | yes | yes |\n| Last release | 2026-09-23 | 2026-10-08 |\n| Terms last updated | no document linked | 2026-07-14 |\n| Privacy policy last updated | no document linked | 2026-08-20 |\n| Customer content may train models | | not found in the text |\n| Terms restrict automated access | | not found in the text |\n| Terms restrict benchmarking | | yes |\n| Terms or service can change without notice | | not found in the text |\n| Arbitration or class-action waiver | | yes |\n| Popularity | 19k stars | 49 stars, 7.8k npm/wk |\n\n## Verdicts\n\n**Agent Zero.** Self-hosted under the MIT licence, with nine releases in the 90 days to 12 October 2026 and breaking changes listed in the release notes. The agent runs shell commands in its container with no approval step, the web interface has no login by default, and five CVEs from the past year have no published GitHub advisory.\n\n**Droid CLI.** `droid exec` is read-only unless `--auto` raises the autonomy level, with command rules, an optional kernel-enforced sandbox, JSON output and documented exit codes. No free tier, status page or security.txt was found, the source is closed, and usage metrics go to Factory by default.\n\n## Before you call either\n\n### Agent Zero\n\n1. Set a UI login and password in Settings before publishing the port or opening a tunnel. The default has none\n2. Fill `allowed_users`, `allowed_numbers` or `sender_whitelist` before enabling a channel. An empty list accepts every sender\n3. Enable the Infection Check plugin when the agent reads mail, web pages or MCP results. It ships disabled\n4. Run v2.12 or later. It fixes a Telegram webhook authentication bypass and a WhatsApp media path traversal\n5. Call `POST /api_message` with the `X-API-KEY` header. The token changes when the UI login or password changes\n\n### Droid CLI\n\n1. Set `FACTORY_API_KEY` (starts `fk-`) from the API keys page in Factory settings for headless runs. Interactive use signs in through a browser\n2. Start with `droid exec` and no flags for analysis. Add `--auto low` for edits and `--auto medium` for installs, tests and local commits\n3. Use `--output-format json` and read `is_error`, `num_turns` and `session_id`. Treat a non-zero exit code as failure\n4. Set `sandbox.enabled` to true before running on untrusted code. In `droid exec` a sandbox violation is denied without a prompt\n5. Pin the version in CI with `npm install -g droid@\u003cversion\u003e`, or set `FACTORY_DROID_AUTO_UPDATE_ENABLED=false` on standalone installs, which update themselves\n\n## Questions\n\n### Which is better for AI agents, Agent Zero or Droid CLI?\n\nDroid CLI scores 59.1 (C) on agent readiness against Agent Zero's 54.2 (C), and leads in 5 of 7 scored categories. Agent Zero leads on reliability and payments \u0026 pricing.\n\n### Are Agent Zero and Droid CLI open source?\n\nAgent Zero is open source (MIT). No open-source release is listed for Droid CLI.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli.json, and with the fewest tokens: https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"agent-zero\", \"b\": \"droid-cli\"}`. From a terminal: `anchor compare agent-zero droid-cli`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/agent-zero.json and https://www.anchorterminal.com/api/v1/tools/droid-cli.json\n\n## Other comparisons with Agent Zero or Droid CLI\n\n- [Agent Zero vs Aider](https://www.anchorterminal.com/compare/agent-zero-vs-aider.md)\n- [Agent Zero vs Amp](https://www.anchorterminal.com/compare/agent-zero-vs-amp.md)\n- [Agent Zero vs Antigravity CLI](https://www.anchorterminal.com/compare/agent-zero-vs-antigravity-cli.md)\n- [Agent Zero vs Claude Code](https://www.anchorterminal.com/compare/agent-zero-vs-claude-code.md)\n- [Agent Zero vs Cline](https://www.anchorterminal.com/compare/agent-zero-vs-cline.md)\n- [Agent Zero vs Cursor CLI](https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli.md)\n- [Agent Zero vs Devin](https://www.anchorterminal.com/compare/agent-zero-vs-devin.md)\n- [Agent Zero vs Pi](https://www.anchorterminal.com/compare/agent-zero-vs-earendil-pi.md)\n- [Agent Zero vs Gemini CLI](https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli.md)\n- [Agent Zero vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/agent-zero-vs-github-copilot-cli.md)\n- [Agent Zero vs goose](https://www.anchorterminal.com/compare/agent-zero-vs-goose.md)\n- [Agent Zero vs Kilo Code CLI](https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli.md)\n- [Agent Zero vs Kiro CLI](https://www.anchorterminal.com/compare/agent-zero-vs-kiro-cli.md)\n- [Agent Zero vs OpenAI Codex](https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex.md)\n- [Agent Zero vs OpenCode](https://www.anchorterminal.com/compare/agent-zero-vs-opencode.md)\n- [Agent Zero vs OpenHands](https://www.anchorterminal.com/compare/agent-zero-vs-openhands.md)\n- [Agent Zero vs Prime Agent](https://www.anchorterminal.com/compare/agent-zero-vs-prime-agent.md)\n- [Agent Zero vs Qwen Code](https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code.md)\n- [Aider vs Droid CLI](https://www.anchorterminal.com/compare/aider-vs-droid-cli.md)\n- [Amp vs Droid CLI](https://www.anchorterminal.com/compare/amp-vs-droid-cli.md)\n- [Antigravity CLI vs Droid CLI](https://www.anchorterminal.com/compare/antigravity-cli-vs-droid-cli.md)\n- [Claude Code vs Droid CLI](https://www.anchorterminal.com/compare/claude-code-vs-droid-cli.md)\n- [Cline vs Droid CLI](https://www.anchorterminal.com/compare/cline-vs-droid-cli.md)\n- [Cursor CLI vs Droid CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-droid-cli.md)\n- [Devin vs Droid CLI](https://www.anchorterminal.com/compare/devin-vs-droid-cli.md)\n- [Droid CLI vs Pi](https://www.anchorterminal.com/compare/droid-cli-vs-earendil-pi.md)\n- [Droid CLI vs Gemini CLI](https://www.anchorterminal.com/compare/droid-cli-vs-gemini-cli.md)\n- [Droid CLI vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/droid-cli-vs-github-copilot-cli.md)\n- [Droid CLI vs goose](https://www.anchorterminal.com/compare/droid-cli-vs-goose.md)\n- [Droid CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/droid-cli-vs-kilo-code-cli.md)\n- [Droid CLI vs Kiro CLI](https://www.anchorterminal.com/compare/droid-cli-vs-kiro-cli.md)\n- [Droid CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/droid-cli-vs-openai-codex.md)\n- [Droid CLI vs OpenCode](https://www.anchorterminal.com/compare/droid-cli-vs-opencode.md)\n- [Droid CLI vs OpenHands](https://www.anchorterminal.com/compare/droid-cli-vs-openhands.md)\n- [Droid CLI vs Prime Agent](https://www.anchorterminal.com/compare/droid-cli-vs-prime-agent.md)\n- [Droid CLI vs Qwen Code](https://www.anchorterminal.com/compare/droid-cli-vs-qwen-code.md)\n- [Droid CLI vs Paperclip](https://www.anchorterminal.com/compare/droid-cli-vs-paperclip.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Agent Zero vs Droid CLI", "url": "" } ], "description": "Droid CLI scores 59.1 (C) to Agent Zero's 54.2 (C) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Agent Zero C 54.2", "Droid CLI C 59.1", "scores" ], "h1": "Agent Zero vs Droid CLI", "image": "https://www.anchorterminal.com/assets/og/compare-agent-zero-vs-droid-cli.png", "path": "/compare/agent-zero-vs-droid-cli", "published": "2026-10-01", "section": "tools", "title": "Agent Zero vs Droid CLI for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli" }, "tokens": { "markdown": 2700, "slim": 680 }, "version": 1 }