Get an audit

Head to head · Agent harnesses · October 2026 research run

Agent Zero vs Kiro CLI

Kiro CLI scores 59.9 (C) on agent readiness against Agent Zero's 54.2 (C), and leads in 4 of 7 scored categories. Agent Zero leads on payments & pricing. Both do agent harnesses.

Best agent harnesses and coding agents · All 205 harnesses comparisons

Agent ZeroAgent Zero, s.r.o. · Agent harness C54.2/100#709 of 986 Kiro CLIAmazon Web Services · Agent harness C59.9/100#549 of 986

Which one, for what

Agent Zero C

Best for A technical owner who wants an agent with its own Linux machine, reachable from Telegram, WhatsApp or email, with scheduled tasks and editable memory.

Ahead on

  • Payments & pricing, 60 against 40

Also in its favour

  • No key needed to call it
  • Open source

Watch for

No approval step before shell commands, file changes or outgoing messages. Tool Access defaults to allow

Kiro CLI C

Best for Teams on AWS that want one agent configuration across terminal, IDE and web, with central permission policy, prompt logging to their own S3 bucket and IAM Identity Centre sign-in.

Ahead on

  • Schema & documentation, 79 against 64
  • Agent ergonomics, 67 against 62
  • Security & auth, 66 against 54
  • Transparency & trust, 67 against 55

Also in its favour

  • Free to start without a card

Watch for

Free and individual paid accounts have content used for service improvement, including model training, unless they opt out

Score by category

CategoryWeight this runAgent ZeroKiro CLIEdge
Reliability16%205757even
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.26479Kiro CLI +15
Agent ergonomics13%16.26267Kiro CLI +5
Security & auth14%17.55466Kiro CLI +12
Payments & pricing10%12.56040Agent Zero +20
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.87573Agent Zero +2
Transparency & trust7%8.85567Kiro CLI +12
Negative events≤15-6-4
TotalC 54.2/100C 59.9/100

Facts side by side

FactAgent ZeroKiro CLI
KindAgent harnessAgent harness
VendorAgent Zero, s.r.o.Amazon Web Services
Hosted endpointno (local only)no (local only)
Transports
AuthNoneOAuth or key
PricingFreeFreemium
x402nono
LicenceMITProprietary. Licensed as AWS Content under the AWS Customer Agreement and the AWS Intellectual Property Licence (https://kiro.dev/license/). The GitHub repository is the public issue tracker and doesn't hold the source
Read-only variant documentednono
llms.txtyesyes
Last release2026-09-232026-10-05
Terms last updatedno document linked2026-08-14
Privacy policy last updatedno document linked2026-05-18
Customer content may train modelsnot found in the text
Terms restrict automated accessnot found in the text
Terms restrict benchmarkingnot found in the text
Terms or service can change without noticenot found in the text
Arbitration or class-action waiveryes
Popularity19k stars4.4k stars

Verdicts

Agent Zero

Self-hosted under the MIT licence, with nine releases in the 90 days to 12 October 2026 and breaking changes listed in the release notes. The agent runs shell commands in its container with no approval step, the web interface has no login by default, and five CVEs from the past year have no published GitHub advisory.

Kiro CLI

Permission rules follow deny over ask over allow, cloned repositories can't add rules, and a headless session treats every ask as a deny. Content from Free and individual paid accounts is used for service improvement, including model training, unless the user opts out, and API keys for pipelines need a paid plan.

Before you call either

Agent Zero

  1. Set a UI login and password in Settings before publishing the port or opening a tunnel. The default has none
  2. Fill allowed_users, allowed_numbers or sender_whitelist before enabling a channel. An empty list accepts every sender
  3. Enable the Infection Check plugin when the agent reads mail, web pages or MCP results. It ships disabled
  4. Run v2.12 or later. It fixes a Telegram webhook authentication bypass and a WhatsApp media path traversal
  5. Call POST /api_message with the X-API-KEY header. The token changes when the UI login or password changes

Kiro CLI

  1. Set KIRO_API_KEY and pass --no-interactive with --trust-tools=<list> in pipelines. Keep --trust-all-tools for disposable environments
  2. Pass --require-mcp-startup when a run depends on MCP tools. Without it a failed server is logged and the run continues
  3. Pass --no-interactive whenever input is piped from a source you don't control, and run 2.10.0 or later on Windows
  4. Run kiro-cli settings telemetry.enabled false and turn off content collection on Free and individual plans. Both are on by default
  5. Export variables in the shell before starting. Since 2.24.0 a project .env file is no longer loaded into sessions, MCP servers or tools

Questions

Which is better for AI agents, Agent Zero or Kiro CLI?

Kiro CLI scores 59.9 (C) on agent readiness against Agent Zero's 54.2 (C), and leads in 4 of 7 scored categories. Agent Zero leads on payments & pricing.

Are Agent Zero and Kiro CLI open source?

Agent Zero is open source (MIT). No open-source release is listed for Kiro CLI.

Other comparisons with Agent Zero or Kiro CLI

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report