{ "data": { "a": { "slug": "agent-zero", "name": "Agent Zero", "vendor": "Agent Zero, s.r.o.", "vendorUrl": "https://www.agent-zero.ai", "kind": "harness", "category": "agent-harnesses", "summary": "Agent Zero is an open-source agent framework that runs in a Docker container with a Linux desktop, a browser, a task scheduler and memory. Its owner reaches it through a web interface, Telegram, WhatsApp or email.", "url": "https://www.anchorterminal.com/tools/agent-zero", "markdownUrl": "https://www.anchorterminal.com/tools/agent-zero.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/agent-zero.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/agent-zero.json", "repo": "https://github.com/agent0ai/agent-zero", "license": "MIT", "transports": [], "packages": [ { "registry": "oci", "name": "agent0ai/agent-zero" } ], "auth": "none", "authNotes": "No account. The web interface has no login until the owner sets a username and password in Settings or as `AUTH_LOGIN` and `AUTH_PASSWORD`, which are stored in `/a0/usr/.env` (https://github.com/agent0ai/agent-zero/blob/main/docs/setup/vps-deployment.md). The external API takes an `X-API-KEY` header, and the optional MCP server and A2A endpoint carry the same token in the URL path. The token is derived from the instance id and the login, so it changes when either changes (https://github.com/agent0ai/agent-zero/blob/main/docs/guides/a2a-setup.md). Model access uses provider API keys or OAuth sign-in to ChatGPT (Codex), GitHub Copilot, Google Cloud Gemini or xAI (https://github.com/agent0ai/agent-zero/blob/main/plugins/_oauth/README.md).", "pricing": "free", "pricingNotes": "Free under MIT, with nothing to buy for the software. The owner pays the model provider they configure, or nothing with a local model. A beta LLM API on the vendor's site gives a daily quota to people who stake its A0T token and is separate from the software (checked 2026-10-12).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 19429, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://github.com/agent0ai/agent-zero/tree/main/docs", "llmsTxt": "https://www.agent-zero.ai/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "mit", "llms-txt", "docker" ], "lastRelease": "2026-09-23", "graded": true, "anchor": { "graded": true, "score": 54.2, "grade": "C", "agentReady": false, "rank": 709, "ranked": true, "rankOf": 986, "categoryRank": 19, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 62, "maintenance": 75, "payments": 60, "reliability": 57, "schema": 64, "security": 54, "transparency": 55 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -6, "negativeNotes": [ "2026-03-17. CVE-2026-4307 (path traversal in `get_abs_path`, CVSS 4.3) and CVE-2026-4308 (server-side request forgery in document queries, CVSS 6.3), both against 0.9.7, with public exploits. The NVD entries say the vendor was contacted and did not respond. The v2.9 notes of 12 August 2026 list a fix for an SSRF regression under CVE-2026-4308. Whether CVE-2026-4307 is fixed was not established. -2. https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-4308", "2026-05-27. CVE-2026-47119, stored cross-site scripting through SVG files served by the `image_get` endpoint, CVSS 6.1, in versions before 1.15. The report (#1609) was closed as completed on 12 May 2026. Fixed, and no GitHub advisory was published. -1. https://github.com/agent0ai/agent-zero/issues/1609", "2026-09-30. CVE-2026-51852 and CVE-2026-51853, directory traversal in the file browser of versions 1.7 to 1.10, CVSS 7.5 each. Reported as issues #1539 and #1540 on 20 April 2026 and closed as completed on 24 July 2026. The file browser still starts at the container root by design. -1. https://github.com/agent0ai/agent-zero/issues/1540", "2026-09-09. Two flaws recorded in the project's own security-review ledger and fixed in v2.12 the same day. An unauthenticated Telegram webhook accepted forged updates, and WhatsApp document names could overwrite files outside the media cache before the sender check ran. The ledger rates both high. Named in the release notes, with no advisory. -2. https://github.com/agent0ai/agent-zero/blob/main/security-review/LEDGER.md" ], "verdict": "Self-hosted under the MIT licence, with nine releases in the 90 days to 12 October 2026 and breaking changes listed in the release notes. The agent runs shell commands in its container with no approval step, the web interface has no login by default, and five CVEs from the past year have no published GitHub advisory.", "bestFor": "A technical owner who wants an agent with its own Linux machine, reachable from Telegram, WhatsApp or email, with scheduled tasks and editable memory.", "strengths": [ "MIT licence, with prompts, tools, plugins and settings readable and editable in one public repository", "Nine tagged releases between 17 July and 23 September 2026, and Breaking Changes sections in the v2.11, v2.12 and v2.13 notes", "Memory dashboard to search, edit, delete and bulk-delete entries, with memory kept apart for each project by default", "No usage telemetry found in the source. The one call home is an update check that a setting turns off", "Tool Access policy can allow or block each built-in and MCP tool for a project or an agent profile" ], "weaknesses": [ "No approval step before shell commands, file changes or outgoing messages. Tool Access defaults to allow", "The web interface has no login until the owner sets a username, and the README command publishes port 80", "Five CVEs published between 17 March and 30 September 2026, none as a GitHub advisory, and no SECURITY.md or security.txt", "Infection Check, the prompt-injection audit before tool calls, ships turned off", "Empty allow-lists in the Telegram, WhatsApp and email integrations accept messages from anyone", "No public CI runs the 191 test files. The only workflows publish Docker images and close inactive issues" ], "agentNotes": [ "Set a UI login and password in Settings before publishing the port or opening a tunnel. The default has none", "Fill `allowed_users`, `allowed_numbers` or `sender_whitelist` before enabling a channel. An empty list accepts every sender", "Enable the Infection Check plugin when the agent reads mail, web pages or MCP results. It ships disabled", "Run v2.12 or later. It fixes a Telegram webhook authentication bypass and a WhatsApp media path traversal", "Call `POST /api_message` with the `X-API-KEY` header. The token changes when the UI login or password changes" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 54.2 } ], "editorialScores": { "ergonomics": 62, "maintenance": 75, "payments": 60, "reliability": 57, "schema": 64, "security": 54, "transparency": 56 }, "provenanceScore": 53 }, "connect": { "install": "docker run -p 80:80 -v a0_usr:/a0/usr agent0ai/agent-zero # or: curl -fsSL https://bash.agent-zero.ai | bash" }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/agent-zero" }, "area": "frameworks", "provenance": { "legalEntity": "Agent Zero, s.r.o.", "domain": "agent-zero.ai", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/agent0ai/agent-zero/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The site footer names Agent Zero, s.r.o., ID no. 231 46 508, Nové sady 988/2, 602 00 Brno, Czech Republic, and the `LICENSE` file carries the same company's copyright.", "No terms or privacy policy for the software was found. The site's terms page covers its community platform and its cookie page covers the website, so neither is linked here and the MIT licence stands in.", "`/.well-known/security.txt` on www.agent-zero.ai answered 404 on 12 October 2026, and the repository has no SECURITY.md.", "robots.txt on www.agent-zero.ai answered 404, read as no rules. agent-zero.ai redirects to www.agent-zero.ai.", "There is no hosted endpoint. An instance answers on its owner's own host.", "The domain's registration date was not looked up." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/agent-zero.json" }, "answer": "Gemini CLI scores 66.7 (B) on agent readiness against Agent Zero's 54.2 (C), and leads in 6 of 7 scored categories. Agent Zero leads on payments \u0026 pricing.", "b": { "slug": "gemini-cli", "name": "Gemini CLI", "vendor": "Google", "vendorUrl": "https://geminicli.com", "kind": "harness", "category": "agent-harnesses", "summary": "Google's open-source coding agent for the terminal, in TypeScript on Node 20 or newer.", "url": "https://www.anchorterminal.com/tools/gemini-cli", "markdownUrl": "https://www.anchorterminal.com/tools/gemini-cli.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/gemini-cli.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/gemini-cli.json", "repo": "https://github.com/google-gemini/gemini-cli", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "npm", "name": "@google/gemini-cli" } ], "auth": "mixed", "authNotes": "Google sign-in works only with a Gemini Code Assist Standard or Enterprise licence. Google AI Pro, Google AI Ultra and the free Code Assist for individuals tier stopped working with Gemini CLI on 18 June 2026. Otherwise use a paid Gemini API key from AI Studio, or Vertex AI credentials. Google's terms forbid using the Gemini CLI sign-in from third-party software.", "pricing": "usage", "pricingNotes": "Free to install (Apache-2.0). Model access is paid. Use a paid Gemini API key or Vertex AI at token rates, or an existing Code Assist Standard or Enterprise licence. New Standard and Enterprise subscriptions ended on 9 October 2026. Token prices are public without a login, and requests are limited per minute (checked 2026-10-10). The free 1,000 requests a day tier ended on 18 June 2026, and whether an unpaid key still gets 250 Flash requests a day is unclear.", "priceSummary": "Pay per use", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-02).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 107000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-02" }, "docsUrl": "https://geminicli.com/docs/", "llmsTxt": "https://geminicli.com/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "official", "harness", "coding-agent", "cli", "open-source", "typescript", "mcp", "llms-txt", "telemetry-default-on", "pre-1.0", "gemini-only", "sign-in-ended", "paid-api-key" ], "lastRelease": "2026-10-06", "graded": true, "anchor": { "graded": true, "score": 66.7, "grade": "B", "agentReady": false, "rank": 286, "ranked": true, "rankOf": 986, "categoryRank": 8, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 78, "maintenance": 88, "payments": 20, "reliability": 71, "schema": 93, "security": 67, "transparency": 89 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-10" }, "negative": -5, "negativeNotes": [ "2026-04-24. GHSA-wpqr-6v78-jr5g, critical (CVSS 10). In CI, headless Gemini CLI trusted the workspace folder automatically and loaded its configuration, and `--yolo` ignored fine-grained tool allowlists, so a workflow fed untrusted pull requests or issues could run an attacker's code. Fixed in @google/gemini-cli 0.39.1 and run-gemini-cli 0.1.22 and published, so the deduction is small (https://github.com/advisories/GHSA-wpqr-6v78-jr5g)", "2026-06-18. Google sign-in for individuals ended on 18 June 2026. The README at main (9 October 2026) and the authentication page (checked 10 October 2026) still describe a free tier of 1,000 requests a day with a Google account, so the claim is misleading and the deduction is -3 (https://github.com/google-gemini/gemini-cli/blob/main/README.md; https://geminicli.com/docs/get-started/authentication/; https://developers.google.com/gemini-code-assist/docs/deprecations/code-assist-individuals)" ], "verdict": "Apache-2.0, with 16 stable releases since 3 July and documented headless output. Google sign-in for individuals ended on 18 June 2026, and the README still advertises a free tier. Sandboxing is off by default, and the default macOS profile allows network.", "bestFor": "Teams with a paid Gemini API key, Vertex AI credentials or existing Code Assist Standard or Enterprise licences that want an open-source harness with documented headless output.", "strengths": [ "Apache-2.0 licence, CI passing on main, and 583 open issues with priority labels (as of 2 October 2026)", "A stable release every Tuesday after a week in preview, under a written release policy", "Headless JSON and stream-json output with documented exit codes, including 53 for the turn limit", "A TOML policy engine with admin policy paths, folder trust on by default and a setting that blocks yolo mode", "Pay-per-token access through a Gemini API key or Vertex AI, with token prices published without a login" ], "weaknesses": [ "Sandboxing is off by default, and the default macOS profile allows network", "Google sign-in for individuals ended on 18 June 2026, but the README and authentication page still advertise a free tier of 1,000 requests a day", "A critical advisory in April 2026 (CVSS 10) for CI runs that trusted untrusted repositories", "Usage statistics on by default, with one setting to turn them off", "Pre-1.0 at 0.63.0, and Gemini models only" ], "agentNotes": [ "Set `GEMINI_TRUST_WORKSPACE` to true only for trusted inputs in CI. Since 0.39.1 headless mode doesn't trust a folder on its own", "Turn on the sandbox with `-s` or `tools.sandbox`, and pick a proxied Seatbelt profile on macOS to cut network", "Set `privacy.usageStatisticsEnabled` to false to stop usage statistics", "Since 0.63.0, plans run without interactive confirmation in non-interactive mode, so set the approval mode explicitly before a headless run", "Authenticate with a paid Gemini API key or Vertex credentials. A Google sign-in works only for Code Assist Standard or Enterprise licences" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 3.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 66.7 } ], "editorialScores": { "ergonomics": 78, "maintenance": 88, "payments": 20, "reliability": 71, "schema": 93, "security": 67, "transparency": 85 }, "provenanceScore": 93 }, "connect": { "install": "npm i -g @google/gemini-cli # or: brew install gemini-cli", "headless": { "run": "gemini -p \"fix the failing test\" --output-format json --approval-mode auto_edit" } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/gemini-cli" }, "sameCompany": [ "gemini-api", "gemini-embedding", "vertex-ai-tuning", "google-model-armor", "google-imagen", "google-veo", "google-lyria", "google-speech-to-text", "gemini-live", "google-adk", "google-secret-manager", "google-cloud-document-ai", "google-weather-api", "chrome-devtools-mcp", "google-maps-platform", "google-cloud-translation", "google-calendar-api", "firebase-cloud-messaging", "google-drive-api", "gemini-enterprise", "google-search-console", "google-ads-api", "google-forms", "google-sheets-api", "gmail-api" ], "area": "frameworks", "provenance": { "legalEntity": "Google LLC", "domain": "google.com", "domainRegistered": "1997-09-15", "endpointOnVendorDomain": null, "terms": "https://geminicli.com/docs/resources/tos-privacy", "privacy": "https://policies.google.com/privacy", "statusPage": "https://aistudio.google.com/status", "changelog": "https://geminicli.com/docs/changelogs", "securityTxt": "valid", "checked": "2026-10-01", "notes": [ "The docs are on geminicli.com. The terms page there maps each sign-in method to its own terms and privacy notice (Gemini Code Assist, the Gemini API unpaid and paid services, Google Cloud).", "The status page is the Gemini API's. We found no status page for Gemini Code Assist sign-ins.", "Legal entity, domain date and security.txt for google.com are from the gemini-api listing's check of 26 September 2026." ], "score": 93 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/gemini-cli.json", "live": { "slug": "gemini-cli", "vendorStatus": { "page": "https://aistudio.google.com/status", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-12T03:24:23.424458761Z" }, "versions": [ { "registry": "github", "name": "google-gemini/gemini-cli", "version": "v0.63.0", "released": "2026-10-06", "seenAt": "2026-10-11T19:31:50.223628627Z" }, { "registry": "npm", "name": "@google/gemini-cli", "version": "0.63.0", "seenAt": "2026-10-11T19:31:49.960698354Z" } ], "githubStars": 107285, "npmWeekly": 399343, "securityTxt": { "url": "https://google.com/.well-known/security.txt", "state": "valid", "expires": "2030-04-01T00:00:00z", "checkedAt": "2026-10-12T15:43:27.023051831Z" }, "llmsTxt": { "url": "https://geminicli.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-12T14:09:09.259167895Z" }, "domain": { "domain": "google.com", "registered": "1997-09-15", "source": "https://rdap.verisign.com/com/v1/domain/google.com", "checkedAt": "2026-10-11T13:17:33.092177011Z" }, "pages": [ { "url": "https://geminicli.com/docs/changelogs", "kind": "changelog", "status": 304, "checkedAt": "2026-10-11T19:28:13.595954962Z", "changedAt": "2026-10-07T18:06:22.906677126Z", "fingerprint": "52b85a91ab8e" }, { "url": "https://developers.google.com/gemini-code-assist/docs/deprecations/code-assist-individuals", "kind": "deprecations", "status": 200, "checkedAt": "2026-10-11T19:24:15.857976056Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "190698b01c9e" }, { "url": "https://docs.cloud.google.com/gemini/docs/deprecations/features", "kind": "deprecations", "status": 200, "checkedAt": "2026-10-11T19:25:25.393217093Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "bb0586a013ba" }, { "url": "https://geminicli.com/docs/resources/tos-privacy", "kind": "terms", "status": 304, "checkedAt": "2026-10-11T19:28:15.647047661Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "f7d55fbc670d" } ], "updatedAt": "2026-10-12T15:43:27.023051831Z" } }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Agent Zero, s.r.o.", "b": "Google", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Pay per use", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Apache-2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-09-23", "b": "2026-10-06", "name": "Last release" }, { "a": "no document linked", "b": "couldn't be read", "name": "Terms last updated" }, { "a": "no document linked", "b": "2026-10-01", "name": "Privacy policy last updated" }, { "a": "", "b": "yes", "name": "Customer content may train models" }, { "a": "", "b": "couldn't be read", "name": "Terms restrict automated access" }, { "a": "", "b": "couldn't be read", "name": "Terms restrict benchmarking" }, { "a": "", "b": "couldn't be read", "name": "Terms or service can change without notice" }, { "a": "", "b": "couldn't be read", "name": "Arbitration or class-action waiver" }, { "a": "19k stars", "b": "107k stars", "name": "Popularity" }, { "a": "none", "b": "3.5/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "Gemini CLI scores 66.7 (B) on agent readiness against Agent Zero's 54.2 (C), and leads in 6 of 7 scored categories. Agent Zero leads on payments \u0026 pricing.", "question": "Which is better for AI agents, Agent Zero or Gemini CLI?" }, { "answer": "Yes. Agent Zero is open source (MIT). Gemini CLI is open source (Apache-2.0).", "question": "Are Agent Zero and Gemini CLI open source?" } ], "goodFor": [ { "aheadOn": [ "Payments \u0026 pricing, 60 against 20" ], "also": [ "No key needed to call it" ], "goodFor": "A technical owner who wants an agent with its own Linux machine, reachable from Telegram, WhatsApp or email, with scheduled tasks and editable memory.", "slug": "agent-zero", "watchFor": "No approval step before shell commands, file changes or outgoing messages. Tool Access defaults to allow" }, { "aheadOn": [ "Reliability, 71 against 57", "Schema \u0026 documentation, 93 against 64", "Agent ergonomics, 78 against 62", "Security \u0026 auth, 67 against 54", "Maintenance \u0026 community, 88 against 75", "Transparency \u0026 trust, 89 against 55" ], "also": null, "goodFor": "Teams with a paid Gemini API key, Vertex AI credentials or existing Code Assist Standard or Enterprise licences that want an open-source harness with documented headless output.", "slug": "gemini-cli", "watchFor": "Sandboxing is off by default, and the default macOS profile allows network" } ], "job": { "capability": "agent.harness", "name": "Agent harnesses" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-aider.json", "title": "Agent Zero vs Aider", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-aider" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-amp.json", "title": "Agent Zero vs Amp", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-amp" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-antigravity-cli.json", "title": "Agent Zero vs Antigravity CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-antigravity-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-claude-code.json", "title": "Agent Zero vs Claude Code", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-cline.json", "title": "Agent Zero vs Cline", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-cline" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli.json", "title": "Agent Zero vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-devin.json", "title": "Agent Zero vs Devin", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-devin" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli.json", "title": "Agent Zero vs Droid CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-earendil-pi.json", "title": "Agent Zero vs Pi", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-github-copilot-cli.json", "title": "Agent Zero vs GitHub Copilot CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-github-copilot-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-goose.json", "title": "Agent Zero vs goose", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-goose" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli.json", "title": "Agent Zero vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-kiro-cli.json", "title": "Agent Zero vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex.json", "title": "Agent Zero vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-opencode.json", "title": "Agent Zero vs OpenCode", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-openhands.json", "title": "Agent Zero vs OpenHands", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-prime-agent.json", "title": "Agent Zero vs Prime Agent", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code.json", "title": "Agent Zero vs Qwen Code", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-gemini-cli.json", "title": "Aider vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/aider-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-gemini-cli.json", "title": "Amp vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/amp-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-gemini-cli.json", "title": "Antigravity CLI vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-gemini-cli.json", "title": "Claude Code vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-gemini-cli.json", "title": "Cline vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/cline-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-gemini-cli.json", "title": "Cursor CLI vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-gemini-cli.json", "title": "Devin vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/devin-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-gemini-cli.json", "title": "Droid CLI vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-gemini-cli.json", "title": "Pi vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-github-copilot-cli.json", "title": "Gemini CLI vs GitHub Copilot CLI", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-github-copilot-cli" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-goose.json", "title": "Gemini CLI vs goose", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-goose" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-kilo-code-cli.json", "title": "Gemini CLI vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-kiro-cli.json", "title": "Gemini CLI vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-openai-codex.json", "title": "Gemini CLI vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-opencode.json", "title": "Gemini CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-openhands.json", "title": "Gemini CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-prime-agent.json", "title": "Gemini CLI vs Prime Agent", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-qwen-code.json", "title": "Gemini CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-paperclip.json", "title": "Gemini CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-paperclip" } ], "scores": [ { "agent-zero": 57, "by": 14, "edge": "gemini-cli", "gemini-cli": 71, "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "agent-zero": 64, "by": 29, "edge": "gemini-cli", "gemini-cli": 93, "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "agent-zero": 62, "by": 16, "edge": "gemini-cli", "gemini-cli": 78, "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "agent-zero": 54, "by": 13, "edge": "gemini-cli", "gemini-cli": 67, "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "agent-zero": 60, "by": 40, "edge": "agent-zero", "gemini-cli": 20, "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "agent-zero": 75, "by": 13, "edge": "gemini-cli", "gemini-cli": 88, "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "agent-zero": 55, "by": 34, "edge": "gemini-cli", "gemini-cli": 89, "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Gemini CLI scores 66.7 (B) on agent readiness against Agent Zero's 54.2 (C), and leads in 6 of 7 scored categories. Agent Zero leads on payments \u0026 pricing. Both do agent harnesses.", "verdicts": { "agent-zero": "Self-hosted under the MIT licence, with nine releases in the 90 days to 12 October 2026 and breaking changes listed in the release notes. The agent runs shell commands in its container with no approval step, the web interface has no login by default, and five CVEs from the past year have no published GitHub advisory.", "gemini-cli": "Apache-2.0, with 16 stable releases since 3 July and documented headless output. Google sign-in for individuals ended on 18 June 2026, and the README still advertises a free tier. Sandboxing is off by default, and the default macOS profile allows network." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli", "json": "https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli.md", "slim": "https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli.min.md" }, "markdown": "Gemini CLI scores 66.7 (B) on agent readiness against Agent Zero's 54.2 (C), and leads in 6 of 7 scored categories. Agent Zero leads on payments \u0026 pricing. Both do agent harnesses.\n\n- Agent Zero: grade C, 54.2/100, rank #709 of 986. Markdown https://www.anchorterminal.com/tools/agent-zero.md · JSON https://www.anchorterminal.com/api/v1/tools/agent-zero.json\n- Gemini CLI: grade B, 66.7/100, rank #286 of 986. Markdown https://www.anchorterminal.com/tools/gemini-cli.md · JSON https://www.anchorterminal.com/api/v1/tools/gemini-cli.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 205 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### Agent Zero (C)\n\nGood for: A technical owner who wants an agent with its own Linux machine, reachable from Telegram, WhatsApp or email, with scheduled tasks and editable memory.\n\nAhead on:\n- Payments \u0026 pricing, 60 against 20\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: No approval step before shell commands, file changes or outgoing messages. Tool Access defaults to allow\n\n### Gemini CLI (B)\n\nGood for: Teams with a paid Gemini API key, Vertex AI credentials or existing Code Assist Standard or Enterprise licences that want an open-source harness with documented headless output.\n\nAhead on:\n- Reliability, 71 against 57\n- Schema \u0026 documentation, 93 against 64\n- Agent ergonomics, 78 against 62\n- Security \u0026 auth, 67 against 54\n- Maintenance \u0026 community, 88 against 75\n- Transparency \u0026 trust, 89 against 55\n\nWatch for: Sandboxing is off by default, and the default macOS profile allows network\n\n\n## Score by category\n\n| Category | Weight | Agent Zero | Gemini CLI | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 57 | 71 | Gemini CLI +14 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 64 | 93 | Gemini CLI +29 |\n| Agent ergonomics | 13% (16.2 this run) | 62 | 78 | Gemini CLI +16 |\n| Security \u0026 auth | 14% (17.5 this run) | 54 | 67 | Gemini CLI +13 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 20 | Agent Zero +40 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 75 | 88 | Gemini CLI +13 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 55 | 89 | Gemini CLI +34 |\n| Negative events | ≤15 | -6 | -5 | |\n| **Total** | | **54.2 · C** | **66.7 · B** | |\n\n## Facts side by side\n\n| Fact | Agent Zero | Gemini CLI |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Agent Zero, s.r.o. | Google |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | OAuth or key |\n| Pricing | Free | Pay per use |\n| x402 | no | no |\n| Licence | MIT | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-09-23 | 2026-10-06 |\n| Terms last updated | no document linked | couldn't be read |\n| Privacy policy last updated | no document linked | 2026-10-01 |\n| Customer content may train models | | yes |\n| Terms restrict automated access | | couldn't be read |\n| Terms restrict benchmarking | | couldn't be read |\n| Terms or service can change without notice | | couldn't be read |\n| Arbitration or class-action waiver | | couldn't be read |\n| Popularity | 19k stars | 107k stars |\n| Agent reviews | none | 3.5/5 (2) |\n\n## Verdicts\n\n**Agent Zero.** Self-hosted under the MIT licence, with nine releases in the 90 days to 12 October 2026 and breaking changes listed in the release notes. The agent runs shell commands in its container with no approval step, the web interface has no login by default, and five CVEs from the past year have no published GitHub advisory.\n\n**Gemini CLI.** Apache-2.0, with 16 stable releases since 3 July and documented headless output. Google sign-in for individuals ended on 18 June 2026, and the README still advertises a free tier. Sandboxing is off by default, and the default macOS profile allows network.\n\n## Before you call either\n\n### Agent Zero\n\n1. Set a UI login and password in Settings before publishing the port or opening a tunnel. The default has none\n2. Fill `allowed_users`, `allowed_numbers` or `sender_whitelist` before enabling a channel. An empty list accepts every sender\n3. Enable the Infection Check plugin when the agent reads mail, web pages or MCP results. It ships disabled\n4. Run v2.12 or later. It fixes a Telegram webhook authentication bypass and a WhatsApp media path traversal\n5. Call `POST /api_message` with the `X-API-KEY` header. The token changes when the UI login or password changes\n\n### Gemini CLI\n\n1. Set `GEMINI_TRUST_WORKSPACE` to true only for trusted inputs in CI. Since 0.39.1 headless mode doesn't trust a folder on its own\n2. Turn on the sandbox with `-s` or `tools.sandbox`, and pick a proxied Seatbelt profile on macOS to cut network\n3. Set `privacy.usageStatisticsEnabled` to false to stop usage statistics\n4. Since 0.63.0, plans run without interactive confirmation in non-interactive mode, so set the approval mode explicitly before a headless run\n5. Authenticate with a paid Gemini API key or Vertex credentials. A Google sign-in works only for Code Assist Standard or Enterprise licences\n\n## Questions\n\n### Which is better for AI agents, Agent Zero or Gemini CLI?\n\nGemini CLI scores 66.7 (B) on agent readiness against Agent Zero's 54.2 (C), and leads in 6 of 7 scored categories. Agent Zero leads on payments \u0026 pricing.\n\n### Are Agent Zero and Gemini CLI open source?\n\nYes. Agent Zero is open source (MIT). Gemini CLI is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli.json, and with the fewest tokens: https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"agent-zero\", \"b\": \"gemini-cli\"}`. From a terminal: `anchor compare agent-zero gemini-cli`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/agent-zero.json and https://www.anchorterminal.com/api/v1/tools/gemini-cli.json\n\n## Other comparisons with Agent Zero or Gemini CLI\n\n- [Agent Zero vs Aider](https://www.anchorterminal.com/compare/agent-zero-vs-aider.md)\n- [Agent Zero vs Amp](https://www.anchorterminal.com/compare/agent-zero-vs-amp.md)\n- [Agent Zero vs Antigravity CLI](https://www.anchorterminal.com/compare/agent-zero-vs-antigravity-cli.md)\n- [Agent Zero vs Claude Code](https://www.anchorterminal.com/compare/agent-zero-vs-claude-code.md)\n- [Agent Zero vs Cline](https://www.anchorterminal.com/compare/agent-zero-vs-cline.md)\n- [Agent Zero vs Cursor CLI](https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli.md)\n- [Agent Zero vs Devin](https://www.anchorterminal.com/compare/agent-zero-vs-devin.md)\n- [Agent Zero vs Droid CLI](https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli.md)\n- [Agent Zero vs Pi](https://www.anchorterminal.com/compare/agent-zero-vs-earendil-pi.md)\n- [Agent Zero vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/agent-zero-vs-github-copilot-cli.md)\n- [Agent Zero vs goose](https://www.anchorterminal.com/compare/agent-zero-vs-goose.md)\n- [Agent Zero vs Kilo Code CLI](https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli.md)\n- [Agent Zero vs Kiro CLI](https://www.anchorterminal.com/compare/agent-zero-vs-kiro-cli.md)\n- [Agent Zero vs OpenAI Codex](https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex.md)\n- [Agent Zero vs OpenCode](https://www.anchorterminal.com/compare/agent-zero-vs-opencode.md)\n- [Agent Zero vs OpenHands](https://www.anchorterminal.com/compare/agent-zero-vs-openhands.md)\n- [Agent Zero vs Prime Agent](https://www.anchorterminal.com/compare/agent-zero-vs-prime-agent.md)\n- [Agent Zero vs Qwen Code](https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code.md)\n- [Aider vs Gemini CLI](https://www.anchorterminal.com/compare/aider-vs-gemini-cli.md)\n- [Amp vs Gemini CLI](https://www.anchorterminal.com/compare/amp-vs-gemini-cli.md)\n- [Antigravity CLI vs Gemini CLI](https://www.anchorterminal.com/compare/antigravity-cli-vs-gemini-cli.md)\n- [Claude Code vs Gemini CLI](https://www.anchorterminal.com/compare/claude-code-vs-gemini-cli.md)\n- [Cline vs Gemini CLI](https://www.anchorterminal.com/compare/cline-vs-gemini-cli.md)\n- [Cursor CLI vs Gemini CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-gemini-cli.md)\n- [Devin vs Gemini CLI](https://www.anchorterminal.com/compare/devin-vs-gemini-cli.md)\n- [Droid CLI vs Gemini CLI](https://www.anchorterminal.com/compare/droid-cli-vs-gemini-cli.md)\n- [Pi vs Gemini CLI](https://www.anchorterminal.com/compare/earendil-pi-vs-gemini-cli.md)\n- [Gemini CLI vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/gemini-cli-vs-github-copilot-cli.md)\n- [Gemini CLI vs goose](https://www.anchorterminal.com/compare/gemini-cli-vs-goose.md)\n- [Gemini CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/gemini-cli-vs-kilo-code-cli.md)\n- [Gemini CLI vs Kiro CLI](https://www.anchorterminal.com/compare/gemini-cli-vs-kiro-cli.md)\n- [Gemini CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/gemini-cli-vs-openai-codex.md)\n- [Gemini CLI vs OpenCode](https://www.anchorterminal.com/compare/gemini-cli-vs-opencode.md)\n- [Gemini CLI vs OpenHands](https://www.anchorterminal.com/compare/gemini-cli-vs-openhands.md)\n- [Gemini CLI vs Prime Agent](https://www.anchorterminal.com/compare/gemini-cli-vs-prime-agent.md)\n- [Gemini CLI vs Qwen Code](https://www.anchorterminal.com/compare/gemini-cli-vs-qwen-code.md)\n- [Gemini CLI vs Paperclip](https://www.anchorterminal.com/compare/gemini-cli-vs-paperclip.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Agent Zero vs Gemini CLI", "url": "" } ], "description": "Gemini CLI scores 66.7 (B) to Agent Zero's 54.2 (C) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Agent Zero C 54.2", "Gemini CLI B 66.7", "scores" ], "h1": "Agent Zero vs Gemini CLI", "image": "https://www.anchorterminal.com/assets/og/compare-agent-zero-vs-gemini-cli.png", "path": "/compare/agent-zero-vs-gemini-cli", "published": "2026-10-01", "section": "tools", "title": "Agent Zero vs Gemini CLI for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli" }, "tokens": { "markdown": 2650, "slim": 680 }, "version": 1 }