{ "data": { "a": { "slug": "agent-zero", "name": "Agent Zero", "vendor": "Agent Zero, s.r.o.", "vendorUrl": "https://www.agent-zero.ai", "kind": "harness", "category": "agent-harnesses", "summary": "Agent Zero is an open-source agent framework that runs in a Docker container with a Linux desktop, a browser, a task scheduler and memory. Its owner reaches it through a web interface, Telegram, WhatsApp or email.", "url": "https://www.anchorterminal.com/tools/agent-zero", "markdownUrl": "https://www.anchorterminal.com/tools/agent-zero.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/agent-zero.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/agent-zero.json", "repo": "https://github.com/agent0ai/agent-zero", "license": "MIT", "transports": [], "packages": [ { "registry": "oci", "name": "agent0ai/agent-zero" } ], "auth": "none", "authNotes": "No account. The web interface has no login until the owner sets a username and password in Settings or as `AUTH_LOGIN` and `AUTH_PASSWORD`, which are stored in `/a0/usr/.env` (https://github.com/agent0ai/agent-zero/blob/main/docs/setup/vps-deployment.md). The external API takes an `X-API-KEY` header, and the optional MCP server and A2A endpoint carry the same token in the URL path. The token is derived from the instance id and the login, so it changes when either changes (https://github.com/agent0ai/agent-zero/blob/main/docs/guides/a2a-setup.md). Model access uses provider API keys or OAuth sign-in to ChatGPT (Codex), GitHub Copilot, Google Cloud Gemini or xAI (https://github.com/agent0ai/agent-zero/blob/main/plugins/_oauth/README.md).", "pricing": "free", "pricingNotes": "Free under MIT, with nothing to buy for the software. The owner pays the model provider they configure, or nothing with a local model. A beta LLM API on the vendor's site gives a daily quota to people who stake its A0T token and is separate from the software (checked 2026-10-12).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 19429, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://github.com/agent0ai/agent-zero/tree/main/docs", "llmsTxt": "https://www.agent-zero.ai/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "mit", "llms-txt", "docker" ], "lastRelease": "2026-09-23", "graded": true, "anchor": { "graded": true, "score": 54.2, "grade": "C", "agentReady": false, "rank": 709, "ranked": true, "rankOf": 986, "categoryRank": 19, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 62, "maintenance": 75, "payments": 60, "reliability": 57, "schema": 64, "security": 54, "transparency": 55 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -6, "negativeNotes": [ "2026-03-17. CVE-2026-4307 (path traversal in `get_abs_path`, CVSS 4.3) and CVE-2026-4308 (server-side request forgery in document queries, CVSS 6.3), both against 0.9.7, with public exploits. The NVD entries say the vendor was contacted and did not respond. The v2.9 notes of 12 August 2026 list a fix for an SSRF regression under CVE-2026-4308. Whether CVE-2026-4307 is fixed was not established. -2. https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-4308", "2026-05-27. CVE-2026-47119, stored cross-site scripting through SVG files served by the `image_get` endpoint, CVSS 6.1, in versions before 1.15. The report (#1609) was closed as completed on 12 May 2026. Fixed, and no GitHub advisory was published. -1. https://github.com/agent0ai/agent-zero/issues/1609", "2026-09-30. CVE-2026-51852 and CVE-2026-51853, directory traversal in the file browser of versions 1.7 to 1.10, CVSS 7.5 each. Reported as issues #1539 and #1540 on 20 April 2026 and closed as completed on 24 July 2026. The file browser still starts at the container root by design. -1. https://github.com/agent0ai/agent-zero/issues/1540", "2026-09-09. Two flaws recorded in the project's own security-review ledger and fixed in v2.12 the same day. An unauthenticated Telegram webhook accepted forged updates, and WhatsApp document names could overwrite files outside the media cache before the sender check ran. The ledger rates both high. Named in the release notes, with no advisory. -2. https://github.com/agent0ai/agent-zero/blob/main/security-review/LEDGER.md" ], "verdict": "Self-hosted under the MIT licence, with nine releases in the 90 days to 12 October 2026 and breaking changes listed in the release notes. The agent runs shell commands in its container with no approval step, the web interface has no login by default, and five CVEs from the past year have no published GitHub advisory.", "bestFor": "A technical owner who wants an agent with its own Linux machine, reachable from Telegram, WhatsApp or email, with scheduled tasks and editable memory.", "strengths": [ "MIT licence, with prompts, tools, plugins and settings readable and editable in one public repository", "Nine tagged releases between 17 July and 23 September 2026, and Breaking Changes sections in the v2.11, v2.12 and v2.13 notes", "Memory dashboard to search, edit, delete and bulk-delete entries, with memory kept apart for each project by default", "No usage telemetry found in the source. The one call home is an update check that a setting turns off", "Tool Access policy can allow or block each built-in and MCP tool for a project or an agent profile" ], "weaknesses": [ "No approval step before shell commands, file changes or outgoing messages. Tool Access defaults to allow", "The web interface has no login until the owner sets a username, and the README command publishes port 80", "Five CVEs published between 17 March and 30 September 2026, none as a GitHub advisory, and no SECURITY.md or security.txt", "Infection Check, the prompt-injection audit before tool calls, ships turned off", "Empty allow-lists in the Telegram, WhatsApp and email integrations accept messages from anyone", "No public CI runs the 191 test files. The only workflows publish Docker images and close inactive issues" ], "agentNotes": [ "Set a UI login and password in Settings before publishing the port or opening a tunnel. The default has none", "Fill `allowed_users`, `allowed_numbers` or `sender_whitelist` before enabling a channel. An empty list accepts every sender", "Enable the Infection Check plugin when the agent reads mail, web pages or MCP results. It ships disabled", "Run v2.12 or later. It fixes a Telegram webhook authentication bypass and a WhatsApp media path traversal", "Call `POST /api_message` with the `X-API-KEY` header. The token changes when the UI login or password changes" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 54.2 } ], "editorialScores": { "ergonomics": 62, "maintenance": 75, "payments": 60, "reliability": 57, "schema": 64, "security": 54, "transparency": 56 }, "provenanceScore": 53 }, "connect": { "install": "docker run -p 80:80 -v a0_usr:/a0/usr agent0ai/agent-zero # or: curl -fsSL https://bash.agent-zero.ai | bash" }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/agent-zero" }, "area": "frameworks", "provenance": { "legalEntity": "Agent Zero, s.r.o.", "domain": "agent-zero.ai", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/agent0ai/agent-zero/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The site footer names Agent Zero, s.r.o., ID no. 231 46 508, Nové sady 988/2, 602 00 Brno, Czech Republic, and the `LICENSE` file carries the same company's copyright.", "No terms or privacy policy for the software was found. The site's terms page covers its community platform and its cookie page covers the website, so neither is linked here and the MIT licence stands in.", "`/.well-known/security.txt` on www.agent-zero.ai answered 404 on 12 October 2026, and the repository has no SECURITY.md.", "robots.txt on www.agent-zero.ai answered 404, read as no rules. agent-zero.ai redirects to www.agent-zero.ai.", "There is no hosted endpoint. An instance answers on its owner's own host.", "The domain's registration date was not looked up." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/agent-zero.json" }, "answer": "Qwen Code scores 72.4 (BB) on agent readiness against Agent Zero's 54.2 (C), and leads in 5 of 7 scored categories.", "b": { "slug": "qwen-code", "name": "Qwen Code", "vendor": "Alibaba (Qwen team)", "vendorUrl": "https://qwenlm.github.io/qwen-code-docs/en/users/overview/", "kind": "harness", "category": "agent-harnesses", "summary": "Open-source coding agent from Alibaba's Qwen team for the terminal, with desktop, browser and editor interfaces. It runs Qwen, OpenAI, Anthropic and Gemini-compatible models or a local one, and runs headless with `qwen -p`.", "url": "https://www.anchorterminal.com/tools/qwen-code", "markdownUrl": "https://www.anchorterminal.com/tools/qwen-code.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/qwen-code.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/qwen-code.json", "repo": "https://github.com/QwenLM/qwen-code", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "npm", "name": "@qwen-code/qwen-code" }, { "registry": "npm", "name": "@qwen-code/sdk" }, { "registry": "pypi", "name": "qwen-code-sdk" }, { "registry": "oci", "name": "ghcr.io/qwenlm/qwen-code" } ], "auth": "api-key", "authNotes": "No account of its own. A model key goes in an environment variable or `~/.qwen/settings.json`, for Alibaba Cloud Model Studio (Coding Plan, Token Plan or a standard key), a listed third-party provider, or any OpenAI, Anthropic or Gemini-compatible endpoint including a local server. Vertex AI credentials also work. The Qwen OAuth sign-in was discontinued on 15 April 2026.", "pricing": "free", "pricingNotes": "Free and Apache-2.0, with nothing to buy for the CLI. The owner pays the model provider, or nothing with a local model. The Qwen OAuth free tier ended on 15 April 2026. Alibaba Cloud sells a fixed-fee Coding Plan and a usage-billed Token Plan for it, and we couldn't load their price pages on 8 October 2026.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 28362, "npmWeekly": 104819, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://qwenlm.github.io/qwen-code-docs/en/users/overview/", "llmsTxt": "https://qwenlm.github.io/qwen-code-docs/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "official", "harness", "coding-agent", "cli", "open-source", "typescript", "mcp", "llms-txt", "telemetry-default-on", "pre-1.0", "free", "no-card", "local", "docker" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 72.4, "grade": "BB", "agentReady": true, "rank": 107, "ranked": true, "rankOf": 986, "categoryRank": 4, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 85, "maintenance": 88, "payments": 60, "reliability": 69, "schema": 91, "security": 53, "transparency": 63 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": 0, "verdict": "Apache-2.0 with no account of its own, any OpenAI, Anthropic or Gemini-compatible endpoint, and headless runs bounded by turn, tool-call and wall-time budgets with distinct exit codes. Out of the box, Auto mode lets an LLM classifier approve tool calls, with the sandbox and folder trust both off. Usage statistics are on by default.", "bestFor": "Developers and CI jobs that want an open-source harness tied to no single model vendor, with run budgets and SDKs.", "strengths": [ "Apache-2.0, with CI on main showing 12 passes and 3 cancelled runs in the last 15, none failed", "Headless `qwen -p` with json and stream-json output, and exit codes 53 for the turn limit and 55 for a wall-time or tool-call budget", "Works with any OpenAI, Anthropic or Gemini-compatible endpoint, including a local server, with keys set by environment variable", "39 stable releases in the 90 days to 8 October 2026, each with a Breaking Changes heading in a generated changelog", "A Linux tool sandbox (Bubblewrap or Landlock) with `network: closed`, plus Seatbelt, Docker and Podman" ], "weaknesses": [ "The default approval mode is Auto, where an LLM classifier approves tool calls, and sandboxing and folder trust are both off by default", "Usage statistics are on by default and go to an Alibaba Cloud endpoint that the docs don't name", "SECURITY.md points only to an Alibaba Cloud console portal, with no response time, and the repository has no published advisories", "Pre-1.0 at 0.25.0, with breaking changes shipped in patch releases such as 0.23.4 and 0.24.1", "1,402 open issues and 334 open pull requests on 8 October 2026", "The Qwen OAuth free tier ended on 15 April 2026, so every run needs a paid key or a local model" ], "agentNotes": [ "Pass `--approval-mode` on every run. The settings default is `auto`, and one docs page says headless runs default to asking, so don't rely on either", "Add `--max-session-turns`, `--max-wall-time` and `--max-tool-calls`. All three are unlimited by default. Exit 53 is the turn limit and 55 a budget", "`--yolo` doesn't turn on a sandbox. Add `--sandbox`, or on Linux set `tools.executionSandbox` with `network` set to `closed`", "Set `QWEN_USAGE_STATISTICS_ENABLED=false` to stop usage statistics", "Authenticate with `OPENAI_API_KEY`, `OPENAI_BASE_URL` and `OPENAI_MODEL` in CI. The browser sign-in is discontinued" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 72.4 } ], "editorialScores": { "ergonomics": 85, "maintenance": 88, "payments": 60, "reliability": 69, "schema": 91, "security": 53, "transparency": 77 }, "provenanceScore": 48 }, "connect": { "install": "npm install -g @qwen-code/qwen-code@latest # or: brew install qwen-code", "headless": { "command": "qwen -p \"$TASK\" --output-format json --approval-mode auto-edit --max-session-turns 30 --max-wall-time 10m", "env": { "OPENAI_API_KEY": "\u003ckey\u003e", "OPENAI_BASE_URL": "\u003cendpoint\u003e", "OPENAI_MODEL": "\u003cmodel\u003e", "QWEN_USAGE_STATISTICS_ENABLED": "false" } } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/qwen-code" }, "area": "frameworks", "provenance": { "legalEntity": "Qwen team, Alibaba Group (no legal entity is named in the repository or the docs)", "domain": "qwenlm.github.io", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "https://qwenlm.github.io/qwen-code-docs/en/users/support/tos-privacy/", "privacy": "https://qwenlm.github.io/qwen-code-docs/en/users/support/tos-privacy/", "statusPage": "", "changelog": "https://github.com/QwenLM/qwen-code/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The project's own Terms of Service and Privacy Notice is one page. It covers usage statistics and the Chrome extension, and maps each sign-in method to the model provider's terms and privacy policy. The project publishes no separate privacy policy for the CLI, so both fields point at that page.", "The LICENSE file carries Copyright 2025 Google LLC and Copyright 2025 Qwen. The docs describe the project as Alibaba's, and SECURITY.md sends reports to an Alibaba Cloud console portal.", "The docs are on GitHub Pages. qwen.ai returned its application page for /.well-known/security.txt, so no security.txt was found. alibabacloud.com couldn't be reached from our network on 8 October 2026.", "The qwen.ai terms and privacy pages render only with JavaScript and weren't read." ], "score": 48 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/qwen-code.json", "live": { "slug": "qwen-code", "versions": [ { "registry": "github", "name": "QwenLM/qwen-code", "version": "sdk-typescript-v0.1.19", "released": "2026-10-11", "seenAt": "2026-10-11T19:53:19.929253912Z" }, { "registry": "npm", "name": "@qwen-code/qwen-code", "version": "0.25.1", "seenAt": "2026-10-11T19:53:17.416045564Z" }, { "registry": "npm", "name": "@qwen-code/sdk", "version": "0.1.19", "seenAt": "2026-10-11T19:53:17.6555238Z" }, { "registry": "pypi", "name": "qwen-code-sdk", "version": "0.1.0rc0", "released": "2026-05-09", "seenAt": "2026-10-11T19:53:19.688807983Z" } ], "githubStars": 28419, "npmWeekly": 68764, "pypiWeekly": 6611, "securityTxt": { "url": "https://qwenlm.github.io/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-12T15:43:27.616267528Z" }, "llmsTxt": { "url": "https://qwenlm.github.io/qwen-code-docs/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-12T14:09:53.542039621Z" }, "domain": { "domain": "github.io", "checkedAt": "2026-10-11T13:19:41.334156159Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/QwenLM/qwen-code/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-10-11T19:33:09.399523554Z", "changedAt": "2026-10-11T19:33:09.399523554Z", "fingerprint": "c542a93a0ae4" }, { "url": "https://qwenlm.github.io/qwen-code-docs/en/users/support/tos-privacy/", "kind": "terms", "status": 304, "checkedAt": "2026-10-11T19:32:38.395141802Z", "changedAt": "2026-10-10T19:08:28.212379677Z", "fingerprint": "5a5de33eed6c" } ], "updatedAt": "2026-10-12T15:43:27.616267528Z" } }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Agent Zero, s.r.o.", "b": "Alibaba (Qwen team)", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "API key", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Apache-2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-09-23", "b": "2026-10-05", "name": "Last release" }, { "a": "no document linked", "b": "2026-10-01", "name": "Terms last updated" }, { "a": "no document linked", "b": "2026-10-01", "name": "Privacy policy last updated" }, { "a": "", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "19k stars", "b": "28k stars, 105k npm/wk", "name": "Popularity" } ], "faq": [ { "answer": "Qwen Code scores 72.4 (BB) on agent readiness against Agent Zero's 54.2 (C), and leads in 5 of 7 scored categories.", "question": "Which is better for AI agents, Agent Zero or Qwen Code?" }, { "answer": "Yes. Agent Zero is open source (MIT). Qwen Code is open source (Apache-2.0).", "question": "Are Agent Zero and Qwen Code open source?" } ], "goodFor": [ { "aheadOn": null, "also": [ "No key needed to call it" ], "goodFor": "A technical owner who wants an agent with its own Linux machine, reachable from Telegram, WhatsApp or email, with scheduled tasks and editable memory.", "slug": "agent-zero", "watchFor": "No approval step before shell commands, file changes or outgoing messages. Tool Access defaults to allow" }, { "aheadOn": [ "Reliability, 69 against 57", "Schema \u0026 documentation, 91 against 64", "Agent ergonomics, 85 against 62", "Maintenance \u0026 community, 88 against 75", "Transparency \u0026 trust, 63 against 55" ], "also": [ "Agent-ready, a grade of BB or better", "Free to start without a card", "No incidents deducted, where Agent Zero loses 6 points for them" ], "goodFor": "Developers and CI jobs that want an open-source harness tied to no single model vendor, with run budgets and SDKs.", "slug": "qwen-code", "watchFor": "The default approval mode is Auto, where an LLM classifier approves tool calls, and sandboxing and folder trust are both off by default" } ], "job": { "capability": "agent.harness", "name": "Agent harnesses" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-aider.json", "title": "Agent Zero vs Aider", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-aider" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-amp.json", "title": "Agent Zero vs Amp", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-amp" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-antigravity-cli.json", "title": "Agent Zero vs Antigravity CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-antigravity-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-claude-code.json", "title": "Agent Zero vs Claude Code", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-cline.json", "title": "Agent Zero vs Cline", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-cline" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli.json", "title": "Agent Zero vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-devin.json", "title": "Agent Zero vs Devin", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-devin" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli.json", "title": "Agent Zero vs Droid CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-earendil-pi.json", "title": "Agent Zero vs Pi", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli.json", "title": "Agent Zero vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-github-copilot-cli.json", "title": "Agent Zero vs GitHub Copilot CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-github-copilot-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-goose.json", "title": "Agent Zero vs goose", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-goose" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli.json", "title": "Agent Zero vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-kiro-cli.json", "title": "Agent Zero vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex.json", "title": "Agent Zero vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-opencode.json", "title": "Agent Zero vs OpenCode", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-openhands.json", "title": "Agent Zero vs OpenHands", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-prime-agent.json", "title": "Agent Zero vs Prime Agent", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-qwen-code.json", "title": "Aider vs Qwen Code", "url": "https://www.anchorterminal.com/compare/aider-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-qwen-code.json", "title": "Amp vs Qwen Code", "url": "https://www.anchorterminal.com/compare/amp-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-qwen-code.json", "title": "Antigravity CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-qwen-code.json", "title": "Claude Code vs Qwen Code", "url": "https://www.anchorterminal.com/compare/claude-code-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-qwen-code.json", "title": "Cline vs Qwen Code", "url": "https://www.anchorterminal.com/compare/cline-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-qwen-code.json", "title": "Cursor CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-qwen-code.json", "title": "Devin vs Qwen Code", "url": "https://www.anchorterminal.com/compare/devin-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-qwen-code.json", "title": "Droid CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-qwen-code.json", "title": "Pi vs Qwen Code", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-qwen-code.json", "title": "Gemini CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-qwen-code.json", "title": "GitHub Copilot CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-qwen-code.json", "title": "goose vs Qwen Code", "url": "https://www.anchorterminal.com/compare/goose-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-qwen-code.json", "title": "Kilo Code CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-qwen-code.json", "title": "Kiro CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-qwen-code.json", "title": "OpenAI Codex vs Qwen Code", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-qwen-code.json", "title": "OpenCode vs Qwen Code", "url": "https://www.anchorterminal.com/compare/opencode-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-qwen-code.json", "title": "OpenHands vs Qwen Code", "url": "https://www.anchorterminal.com/compare/openhands-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/prime-agent-vs-qwen-code.json", "title": "Prime Agent vs Qwen Code", "url": "https://www.anchorterminal.com/compare/prime-agent-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-qwen-code.json", "title": "Paperclip vs Qwen Code", "url": "https://www.anchorterminal.com/compare/paperclip-vs-qwen-code" } ], "scores": [ { "agent-zero": 57, "by": 12, "edge": "qwen-code", "key": "reliability", "name": "Reliability", "qwen-code": 69, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "agent-zero": 64, "by": 27, "edge": "qwen-code", "key": "schema", "name": "Schema \u0026 documentation", "qwen-code": 91, "weight": 13 }, { "agent-zero": 62, "by": 23, "edge": "qwen-code", "key": "ergonomics", "name": "Agent ergonomics", "qwen-code": 85, "weight": 13 }, { "agent-zero": 54, "by": 1, "edge": "agent-zero", "key": "security", "name": "Security \u0026 auth", "qwen-code": 53, "weight": 14 }, { "agent-zero": 60, "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "qwen-code": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "agent-zero": 75, "by": 13, "edge": "qwen-code", "key": "maintenance", "name": "Maintenance \u0026 community", "qwen-code": 88, "weight": 7 }, { "agent-zero": 55, "by": 8, "edge": "qwen-code", "key": "transparency", "name": "Transparency \u0026 trust", "qwen-code": 63, "weight": 7 } ], "summary": "Qwen Code scores 72.4 (BB) on agent readiness against Agent Zero's 54.2 (C), and leads in 5 of 7 scored categories. Both do agent harnesses.", "verdicts": { "agent-zero": "Self-hosted under the MIT licence, with nine releases in the 90 days to 12 October 2026 and breaking changes listed in the release notes. The agent runs shell commands in its container with no approval step, the web interface has no login by default, and five CVEs from the past year have no published GitHub advisory.", "qwen-code": "Apache-2.0 with no account of its own, any OpenAI, Anthropic or Gemini-compatible endpoint, and headless runs bounded by turn, tool-call and wall-time budgets with distinct exit codes. Out of the box, Auto mode lets an LLM classifier approve tool calls, with the sandbox and folder trust both off. Usage statistics are on by default." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code", "json": "https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code.md", "slim": "https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code.min.md" }, "markdown": "Qwen Code scores 72.4 (BB) on agent readiness against Agent Zero's 54.2 (C), and leads in 5 of 7 scored categories. Both do agent harnesses.\n\n- Agent Zero: grade C, 54.2/100, rank #709 of 986. Markdown https://www.anchorterminal.com/tools/agent-zero.md · JSON https://www.anchorterminal.com/api/v1/tools/agent-zero.json\n- Qwen Code: grade BB, 72.4/100, rank #107 of 986. Markdown https://www.anchorterminal.com/tools/qwen-code.md · JSON https://www.anchorterminal.com/api/v1/tools/qwen-code.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 205 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### Agent Zero (C)\n\nGood for: A technical owner who wants an agent with its own Linux machine, reachable from Telegram, WhatsApp or email, with scheduled tasks and editable memory.\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: No approval step before shell commands, file changes or outgoing messages. Tool Access defaults to allow\n\n### Qwen Code (BB)\n\nGood for: Developers and CI jobs that want an open-source harness tied to no single model vendor, with run budgets and SDKs.\n\nAhead on:\n- Reliability, 69 against 57\n- Schema \u0026 documentation, 91 against 64\n- Agent ergonomics, 85 against 62\n- Maintenance \u0026 community, 88 against 75\n- Transparency \u0026 trust, 63 against 55\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- Free to start without a card\n- No incidents deducted, where Agent Zero loses 6 points for them\n\nWatch for: The default approval mode is Auto, where an LLM classifier approves tool calls, and sandboxing and folder trust are both off by default\n\n\n## Score by category\n\n| Category | Weight | Agent Zero | Qwen Code | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 57 | 69 | Qwen Code +12 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 64 | 91 | Qwen Code +27 |\n| Agent ergonomics | 13% (16.2 this run) | 62 | 85 | Qwen Code +23 |\n| Security \u0026 auth | 14% (17.5 this run) | 54 | 53 | Agent Zero +1 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 75 | 88 | Qwen Code +13 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 55 | 63 | Qwen Code +8 |\n| Negative events | ≤15 | -6 | 0 | |\n| **Total** | | **54.2 · C** | **72.4 · BB** | |\n\n## Facts side by side\n\n| Fact | Agent Zero | Qwen Code |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Agent Zero, s.r.o. | Alibaba (Qwen team) |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | API key |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-09-23 | 2026-10-05 |\n| Terms last updated | no document linked | 2026-10-01 |\n| Privacy policy last updated | no document linked | 2026-10-01 |\n| Customer content may train models | | not found in the text |\n| Terms restrict automated access | | not found in the text |\n| Terms restrict benchmarking | | not found in the text |\n| Terms or service can change without notice | | not found in the text |\n| Arbitration or class-action waiver | | not found in the text |\n| Popularity | 19k stars | 28k stars, 105k npm/wk |\n\n## Verdicts\n\n**Agent Zero.** Self-hosted under the MIT licence, with nine releases in the 90 days to 12 October 2026 and breaking changes listed in the release notes. The agent runs shell commands in its container with no approval step, the web interface has no login by default, and five CVEs from the past year have no published GitHub advisory.\n\n**Qwen Code.** Apache-2.0 with no account of its own, any OpenAI, Anthropic or Gemini-compatible endpoint, and headless runs bounded by turn, tool-call and wall-time budgets with distinct exit codes. Out of the box, Auto mode lets an LLM classifier approve tool calls, with the sandbox and folder trust both off. Usage statistics are on by default.\n\n## Before you call either\n\n### Agent Zero\n\n1. Set a UI login and password in Settings before publishing the port or opening a tunnel. The default has none\n2. Fill `allowed_users`, `allowed_numbers` or `sender_whitelist` before enabling a channel. An empty list accepts every sender\n3. Enable the Infection Check plugin when the agent reads mail, web pages or MCP results. It ships disabled\n4. Run v2.12 or later. It fixes a Telegram webhook authentication bypass and a WhatsApp media path traversal\n5. Call `POST /api_message` with the `X-API-KEY` header. The token changes when the UI login or password changes\n\n### Qwen Code\n\n1. Pass `--approval-mode` on every run. The settings default is `auto`, and one docs page says headless runs default to asking, so don't rely on either\n2. Add `--max-session-turns`, `--max-wall-time` and `--max-tool-calls`. All three are unlimited by default. Exit 53 is the turn limit and 55 a budget\n3. `--yolo` doesn't turn on a sandbox. Add `--sandbox`, or on Linux set `tools.executionSandbox` with `network` set to `closed`\n4. Set `QWEN_USAGE_STATISTICS_ENABLED=false` to stop usage statistics\n5. Authenticate with `OPENAI_API_KEY`, `OPENAI_BASE_URL` and `OPENAI_MODEL` in CI. The browser sign-in is discontinued\n\n## Questions\n\n### Which is better for AI agents, Agent Zero or Qwen Code?\n\nQwen Code scores 72.4 (BB) on agent readiness against Agent Zero's 54.2 (C), and leads in 5 of 7 scored categories.\n\n### Are Agent Zero and Qwen Code open source?\n\nYes. Agent Zero is open source (MIT). Qwen Code is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code.json, and with the fewest tokens: https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"agent-zero\", \"b\": \"qwen-code\"}`. From a terminal: `anchor compare agent-zero qwen-code`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/agent-zero.json and https://www.anchorterminal.com/api/v1/tools/qwen-code.json\n\n## Other comparisons with Agent Zero or Qwen Code\n\n- [Agent Zero vs Aider](https://www.anchorterminal.com/compare/agent-zero-vs-aider.md)\n- [Agent Zero vs Amp](https://www.anchorterminal.com/compare/agent-zero-vs-amp.md)\n- [Agent Zero vs Antigravity CLI](https://www.anchorterminal.com/compare/agent-zero-vs-antigravity-cli.md)\n- [Agent Zero vs Claude Code](https://www.anchorterminal.com/compare/agent-zero-vs-claude-code.md)\n- [Agent Zero vs Cline](https://www.anchorterminal.com/compare/agent-zero-vs-cline.md)\n- [Agent Zero vs Cursor CLI](https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli.md)\n- [Agent Zero vs Devin](https://www.anchorterminal.com/compare/agent-zero-vs-devin.md)\n- [Agent Zero vs Droid CLI](https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli.md)\n- [Agent Zero vs Pi](https://www.anchorterminal.com/compare/agent-zero-vs-earendil-pi.md)\n- [Agent Zero vs Gemini CLI](https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli.md)\n- [Agent Zero vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/agent-zero-vs-github-copilot-cli.md)\n- [Agent Zero vs goose](https://www.anchorterminal.com/compare/agent-zero-vs-goose.md)\n- [Agent Zero vs Kilo Code CLI](https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli.md)\n- [Agent Zero vs Kiro CLI](https://www.anchorterminal.com/compare/agent-zero-vs-kiro-cli.md)\n- [Agent Zero vs OpenAI Codex](https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex.md)\n- [Agent Zero vs OpenCode](https://www.anchorterminal.com/compare/agent-zero-vs-opencode.md)\n- [Agent Zero vs OpenHands](https://www.anchorterminal.com/compare/agent-zero-vs-openhands.md)\n- [Agent Zero vs Prime Agent](https://www.anchorterminal.com/compare/agent-zero-vs-prime-agent.md)\n- [Aider vs Qwen Code](https://www.anchorterminal.com/compare/aider-vs-qwen-code.md)\n- [Amp vs Qwen Code](https://www.anchorterminal.com/compare/amp-vs-qwen-code.md)\n- [Antigravity CLI vs Qwen Code](https://www.anchorterminal.com/compare/antigravity-cli-vs-qwen-code.md)\n- [Claude Code vs Qwen Code](https://www.anchorterminal.com/compare/claude-code-vs-qwen-code.md)\n- [Cline vs Qwen Code](https://www.anchorterminal.com/compare/cline-vs-qwen-code.md)\n- [Cursor CLI vs Qwen Code](https://www.anchorterminal.com/compare/cursor-cli-vs-qwen-code.md)\n- [Devin vs Qwen Code](https://www.anchorterminal.com/compare/devin-vs-qwen-code.md)\n- [Droid CLI vs Qwen Code](https://www.anchorterminal.com/compare/droid-cli-vs-qwen-code.md)\n- [Pi vs Qwen Code](https://www.anchorterminal.com/compare/earendil-pi-vs-qwen-code.md)\n- [Gemini CLI vs Qwen Code](https://www.anchorterminal.com/compare/gemini-cli-vs-qwen-code.md)\n- [GitHub Copilot CLI vs Qwen Code](https://www.anchorterminal.com/compare/github-copilot-cli-vs-qwen-code.md)\n- [goose vs Qwen Code](https://www.anchorterminal.com/compare/goose-vs-qwen-code.md)\n- [Kilo Code CLI vs Qwen Code](https://www.anchorterminal.com/compare/kilo-code-cli-vs-qwen-code.md)\n- [Kiro CLI vs Qwen Code](https://www.anchorterminal.com/compare/kiro-cli-vs-qwen-code.md)\n- [OpenAI Codex vs Qwen Code](https://www.anchorterminal.com/compare/openai-codex-vs-qwen-code.md)\n- [OpenCode vs Qwen Code](https://www.anchorterminal.com/compare/opencode-vs-qwen-code.md)\n- [OpenHands vs Qwen Code](https://www.anchorterminal.com/compare/openhands-vs-qwen-code.md)\n- [Prime Agent vs Qwen Code](https://www.anchorterminal.com/compare/prime-agent-vs-qwen-code.md)\n- [Paperclip vs Qwen Code](https://www.anchorterminal.com/compare/paperclip-vs-qwen-code.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Agent Zero vs Qwen Code", "url": "" } ], "description": "Qwen Code scores 72.4 (BB) to Agent Zero's 54.2 (C) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Agent Zero C 54.2", "Qwen Code BB 72.4", "scores" ], "h1": "Agent Zero vs Qwen Code", "image": "https://www.anchorterminal.com/assets/og/compare-agent-zero-vs-qwen-code.png", "path": "/compare/agent-zero-vs-qwen-code", "published": "2026-10-01", "section": "tools", "title": "Agent Zero vs Qwen Code for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-12", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code" }, "tokens": { "markdown": 2650, "slim": 630 }, "version": 1 }