{ "data": { "a": { "slug": "agent-zero", "name": "Agent Zero", "vendor": "Agent Zero, s.r.o.", "vendorUrl": "https://www.agent-zero.ai", "kind": "harness", "category": "agent-harnesses", "summary": "Agent Zero is an open-source agent framework that runs in a Docker container with a Linux desktop, a browser, a task scheduler and memory. Its owner reaches it through a web interface, Telegram, WhatsApp or email.", "url": "https://www.anchorterminal.com/tools/agent-zero", "markdownUrl": "https://www.anchorterminal.com/tools/agent-zero.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/agent-zero.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/agent-zero.json", "repo": "https://github.com/agent0ai/agent-zero", "license": "MIT", "transports": [], "packages": [ { "registry": "oci", "name": "agent0ai/agent-zero" } ], "auth": "none", "authNotes": "No account. The web interface has no login until the owner sets a username and password in Settings or as `AUTH_LOGIN` and `AUTH_PASSWORD`, which are stored in `/a0/usr/.env` (https://github.com/agent0ai/agent-zero/blob/main/docs/setup/vps-deployment.md). The external API takes an `X-API-KEY` header, and the optional MCP server and A2A endpoint carry the same token in the URL path. The token is derived from the instance id and the login, so it changes when either changes (https://github.com/agent0ai/agent-zero/blob/main/docs/guides/a2a-setup.md). Model access uses provider API keys or OAuth sign-in to ChatGPT (Codex), GitHub Copilot, Google Cloud Gemini or xAI (https://github.com/agent0ai/agent-zero/blob/main/plugins/_oauth/README.md).", "pricing": "free", "pricingNotes": "Free under MIT, with nothing to buy for the software. The owner pays the model provider they configure, or nothing with a local model. A beta LLM API on the vendor's site gives a daily quota to people who stake its A0T token and is separate from the software (checked 2026-10-12).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 19429, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://github.com/agent0ai/agent-zero/tree/main/docs", "llmsTxt": "https://www.agent-zero.ai/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "mit", "llms-txt", "docker" ], "lastRelease": "2026-09-23", "graded": true, "anchor": { "graded": true, "score": 54.2, "grade": "C", "agentReady": false, "rank": 768, "ranked": true, "rankOf": 1133, "categoryRank": 23, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 62, "maintenance": 75, "payments": 60, "reliability": 57, "schema": 64, "security": 54, "transparency": 55 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -6, "negativeNotes": [ "2026-03-17. CVE-2026-4307 (path traversal in `get_abs_path`, CVSS 4.3) and CVE-2026-4308 (server-side request forgery in document queries, CVSS 6.3), both against 0.9.7, with public exploits. The NVD entries say the vendor was contacted and did not respond. The v2.9 notes of 12 August 2026 list a fix for an SSRF regression under CVE-2026-4308. Whether CVE-2026-4307 is fixed was not established. -2. https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-4308", "2026-05-27. CVE-2026-47119, stored cross-site scripting through SVG files served by the `image_get` endpoint, CVSS 6.1, in versions before 1.15. The report (#1609) was closed as completed on 12 May 2026. Fixed, and no GitHub advisory was published. -1. https://github.com/agent0ai/agent-zero/issues/1609", "2026-09-30. CVE-2026-51852 and CVE-2026-51853, directory traversal in the file browser of versions 1.7 to 1.10, CVSS 7.5 each. Reported as issues #1539 and #1540 on 20 April 2026 and closed as completed on 24 July 2026. The file browser still starts at the container root by design. -1. https://github.com/agent0ai/agent-zero/issues/1540", "2026-09-09. Two flaws recorded in the project's own security-review ledger and fixed in v2.12 the same day. An unauthenticated Telegram webhook accepted forged updates, and WhatsApp document names could overwrite files outside the media cache before the sender check ran. The ledger rates both high. Named in the release notes, with no advisory. -2. https://github.com/agent0ai/agent-zero/blob/main/security-review/LEDGER.md" ], "verdict": "Self-hosted under the MIT licence, with nine releases in the 90 days to 12 October 2026 and breaking changes listed in the release notes. The agent runs shell commands in its container with no approval step, the web interface has no login by default, and five CVEs from the past year have no published GitHub advisory.", "bestFor": "A technical owner who wants an agent with its own Linux machine, reachable from Telegram, WhatsApp or email, with scheduled tasks and editable memory.", "strengths": [ "MIT licence, with prompts, tools, plugins and settings readable and editable in one public repository", "Nine tagged releases between 17 July and 23 September 2026, and Breaking Changes sections in the v2.11, v2.12 and v2.13 notes", "Memory dashboard to search, edit, delete and bulk-delete entries, with memory kept apart for each project by default", "No usage telemetry found in the source. The one call home is an update check that a setting turns off", "Tool Access policy can allow or block each built-in and MCP tool for a project or an agent profile" ], "weaknesses": [ "No approval step before shell commands, file changes or outgoing messages. Tool Access defaults to allow", "The web interface has no login until the owner sets a username, and the README command publishes port 80", "Five CVEs published between 17 March and 30 September 2026, none as a GitHub advisory, and no SECURITY.md or security.txt", "Infection Check, the prompt-injection audit before tool calls, ships turned off", "Empty allow-lists in the Telegram, WhatsApp and email integrations accept messages from anyone", "No public CI runs the 191 test files. The only workflows publish Docker images and close inactive issues" ], "agentNotes": [ "Set a UI login and password in Settings before publishing the port or opening a tunnel. The default has none", "Fill `allowed_users`, `allowed_numbers` or `sender_whitelist` before enabling a channel. An empty list accepts every sender", "Enable the Infection Check plugin when the agent reads mail, web pages or MCP results. It ships disabled", "Run v2.12 or later. It fixes a Telegram webhook authentication bypass and a WhatsApp media path traversal", "Call `POST /api_message` with the `X-API-KEY` header. The token changes when the UI login or password changes" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 54.2 } ], "editorialScores": { "ergonomics": 62, "maintenance": 75, "payments": 60, "reliability": 57, "schema": 64, "security": 54, "transparency": 56 }, "provenanceScore": 53 }, "connect": { "install": "docker run -p 80:80 -v a0_usr:/a0/usr agent0ai/agent-zero # or: curl -fsSL https://bash.agent-zero.ai | bash" }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/agent-zero" }, "area": "frameworks", "provenance": { "legalEntity": "Agent Zero, s.r.o.", "domain": "agent-zero.ai", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/agent0ai/agent-zero/releases", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The site footer names Agent Zero, s.r.o., ID no. 231 46 508, Nové sady 988/2, 602 00 Brno, Czech Republic, and the `LICENSE` file carries the same company's copyright.", "No terms or privacy policy for the software was found. The site's terms page covers its community platform and its cookie page covers the website, so neither is linked here and the MIT licence stands in.", "`/.well-known/security.txt` on www.agent-zero.ai answered 404 on 12 October 2026, and the repository has no SECURITY.md.", "robots.txt on www.agent-zero.ai answered 404, read as no rules. agent-zero.ai redirects to www.agent-zero.ai.", "There is no hosted endpoint. An instance answers on its owner's own host.", "The domain's registration date was not looked up." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/agent-zero.json", "live": { "slug": "agent-zero", "versions": [ { "registry": "github", "name": "agent0ai/agent-zero", "version": "v2.14", "released": "2026-10-13", "seenAt": "2026-10-17T01:31:13.322666509Z" } ], "githubStars": 19490, "securityTxt": { "url": "https://agent-zero.ai/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-17T15:52:46.687563516Z" }, "llmsTxt": { "url": "https://www.agent-zero.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-17T14:21:03.451160042Z" }, "updatedAt": "2026-10-17T15:52:46.687563516Z" } }, "answer": "Agent Zero and Mirror CLI score within a point of each other on agent readiness, 54.2 (C) and 54.2 (C).", "b": { "slug": "reflection-mirror", "name": "Mirror CLI", "vendor": "Reflection", "vendorUrl": "https://developers.reflection.ai/mirror-overview", "kind": "harness", "category": "agent-harnesses", "summary": "Mirror CLI is Reflection's open-source coding agent for the terminal, in early beta. It reads code, edits files and runs commands, with parallel agents in separate worktrees, MCP connections and Python extensions, using Beam by default or another provider.", "url": "https://www.anchorterminal.com/tools/reflection-mirror", "markdownUrl": "https://www.anchorterminal.com/tools/reflection-mirror.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/reflection-mirror.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/reflection-mirror.json", "repo": "https://github.com/reflection-oss/mirror", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "pypi", "name": "reflection-mirror" } ], "auth": "api-key", "authNotes": "The default provider is the Reflection API, with a key from platform.reflection.ai in `REFLECTION_API_KEY` or pasted at first start and saved to `~/.mirror/reflection_api_key`. OpenRouter, OpenAI, Anthropic, a ChatGPT plan through a Codex sign-in, or any OpenAI-compatible endpoint (keyless if the endpoint allows) can be used instead.", "pricing": "free", "pricingNotes": "Free and Apache-2.0. Model calls are billed by the provider chosen. The default Reflection API was a free public beta with daily usage limits on 17 October 2026, and some organisations must verify a credit card before their keys work.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Mirror docs, the README or the source at commit f938033 (checked 17 October 2026).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://developers.reflection.ai/mirror-overview", "llmsTxt": "https://developers.reflection.ai/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "official", "harness", "coding-agent", "cli", "open-source", "python", "rust", "mcp", "llms-txt", "beta", "pre-1.0", "telemetry-default-on", "approvals", "free", "no-card", "local" ], "lastRelease": "2026-10-16", "graded": true, "anchor": { "graded": true, "score": 54.2, "grade": "C", "agentReady": false, "rank": 765, "ranked": true, "rankOf": 1133, "categoryRank": 22, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 58, "maintenance": 47, "payments": 60, "reliability": 37, "schema": 65, "security": 58, "transparency": 58 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": 0, "verdict": "Mirror CLI is Apache-2.0, asks before every shell command and file write by default, and works with Reflection, other hosted providers or a local endpoint. It is a one-day-old 0.1.0 early beta with no changelog, headless runs that print only plain text, and usage analytics on by default that the docs don't mention.", "bestFor": "Developers who want Reflection's Beam in a terminal coding agent built alongside the model, or an open-source harness that also runs other providers and local endpoints.", "strengths": [ "Apache-2.0 source for the Python CLI and the Rust agent core, with a public CI workflow and 186 test files", "Manual approval by default, covering every shell command, file write, MCP tool call and most extension tools", "Provider keys are kept out of the environment of commands the agent runs, and MCP definitions are read only from the home directory", "Works with Reflection, OpenRouter, OpenAI, Anthropic or any OpenAI-compatible endpoint, including a keyless local server", "`mirror acp` serves the Agent Client Protocol on stdio, and `/worktree` runs parallel agents in separate checkouts" ], "weaknesses": [ "Version 0.1.0, released 16 October 2026 and labelled early beta, with no changelog or release tags", "Usage analytics go to Statsig by default, disclosed in a first-run notice but not in the docs or README", "No sandbox by default. The opt-in microVM sandbox covers file and shell tools only, and extensions and local MCP servers run on the host", "`mirror exec` prints only the final answer as plain text, with exit codes not documented and no budget or time limit", "Approval mode is saved globally, so switching to auto in one directory applies to later launches everywhere" ], "agentNotes": [ "Open Mirror interactively once in each directory before `mirror exec` or `mirror acp`. Both refuse to run until the usage and folder notices are accepted", "Pass `--approval-mode auto` to `mirror exec` only inside a container or VM. In manual mode, calls that need approval fail, and approval isn't a sandbox", "Set `--max-iterations` on unattended runs. Turns are unlimited by default", "Check the result with your own tests. `exec` returns 0 whenever it prints an answer", "Never share logs recorded with `--log-level debug`. The docs say they contain request headers with the API key" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 54.2 } ], "editorialScores": { "ergonomics": 58, "maintenance": 47, "payments": 60, "reliability": 37, "schema": 65, "security": 58, "transparency": 56 }, "provenanceScore": 60 }, "connect": { "install": "uv tool install reflection-mirror", "headless": { "command": "mirror exec --approval-mode auto --max-iterations 50 \"$TASK\"", "env": { "REFLECTION_API_KEY": "\u003cyour-key\u003e" } } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/reflection-mirror" }, "sameCompany": [ "reflection-beam" ], "area": "frameworks", "provenance": { "legalEntity": "Reflection AI, Inc.", "domain": "reflection.ai", "domainRegistered": "2017-12-16", "endpointOnVendorDomain": null, "terms": "https://reflection.ai/legal/commercial-terms-of-service", "privacy": "https://reflection.ai/legal/privacy-policy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-17", "notes": [ "The software is under Apache-2.0 (LICENSE and NOTICE in the repository). The terms field is Reflection's Commercial Terms of Service, which cover the Reflection API that Mirror calls by default and say beta services are provided as is. The site Terms of Service (last updated 19 February 2025) cover the website only.", "The Privacy Policy, last updated 28 August 2026, names Reflection AI, Inc., 61 9th Ave, Floor 3, New York, NY 10011, and gives no fixed retention periods.", "RDAP for reflection.ai gives a registration date of 16 December 2017.", "No changelog or release notes were found for Mirror. The repository has no tags.", "reflection.ai/.well-known/security.txt and developers.reflection.ai/.well-known/security.txt return 404. The repository's SECURITY.md sends vulnerability reports to developers@reflection.ai.", "Mirror is software the owner runs, so no status page applies to it. The Reflection API's status page wasn't looked for here." ], "score": 60 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/reflection-mirror.json" }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Agent Zero, s.r.o.", "b": "Reflection", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "API key", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Apache-2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-09-23", "b": "2026-10-16", "name": "Last release" }, { "a": "no document linked", "b": "", "name": "Terms last updated" }, { "a": "no document linked", "b": "", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "19k stars", "b": "none", "name": "Popularity" }, { "a": "none", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Agent Zero and Mirror CLI score within a point of each other on agent readiness, 54.2 (C) and 54.2 (C).", "question": "Which is better for AI agents, Agent Zero or Mirror CLI?" }, { "answer": "Yes. Agent Zero is open source (MIT). Mirror CLI is open source (Apache-2.0).", "question": "Are Agent Zero and Mirror CLI open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 57 against 37", "Maintenance \u0026 community, 75 against 47" ], "also": [ "No key needed to call it" ], "goodFor": "A technical owner who wants an agent with its own Linux machine, reachable from Telegram, WhatsApp or email, with scheduled tasks and editable memory.", "slug": "agent-zero", "watchFor": "No approval step before shell commands, file changes or outgoing messages. Tool Access defaults to allow" }, { "aheadOn": null, "also": [ "Free to start without a card", "No incidents deducted, where Agent Zero loses 6 points for them" ], "goodFor": "Developers who want Reflection's Beam in a terminal coding agent built alongside the model, or an open-source harness that also runs other providers and local endpoints.", "slug": "reflection-mirror", "watchFor": "Version 0.1.0, released 16 October 2026 and labelled early beta, with no changelog or release tags" } ], "job": { "capability": "agent.harness", "name": "Agent harnesses" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-aider.json", "title": "Agent Zero vs Aider", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-aider" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-amp.json", "title": "Agent Zero vs Amp", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-amp" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-antigravity-cli.json", "title": "Agent Zero vs Antigravity CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-antigravity-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-claude-code.json", "title": "Agent Zero vs Claude Code", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-cline.json", "title": "Agent Zero vs Cline", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-cline" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli.json", "title": "Agent Zero vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-devin.json", "title": "Agent Zero vs Devin", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-devin" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli.json", "title": "Agent Zero vs Droid CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-earendil-pi.json", "title": "Agent Zero vs Pi", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli.json", "title": "Agent Zero vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-github-copilot-cli.json", "title": "Agent Zero vs GitHub Copilot CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-github-copilot-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-goose.json", "title": "Agent Zero vs goose", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-goose" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-harnessrouter.json", "title": "Agent Zero vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli.json", "title": "Agent Zero vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-kiro-cli.json", "title": "Agent Zero vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-muse-code.json", "title": "Agent Zero vs Muse Code", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-muse-code" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex.json", "title": "Agent Zero vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-opencode.json", "title": "Agent Zero vs OpenCode", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-openhands.json", "title": "Agent Zero vs OpenHands", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-prime-agent.json", "title": "Agent Zero vs Prime Agent", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code.json", "title": "Agent Zero vs Qwen Code", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-reflection-mirror.json", "title": "Aider vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/aider-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-reflection-mirror.json", "title": "Amp vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/amp-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-reflection-mirror.json", "title": "Antigravity CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror.json", "title": "Claude Code vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-reflection-mirror.json", "title": "Cline vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/cline-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-reflection-mirror.json", "title": "Cursor CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-reflection-mirror.json", "title": "Devin vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/devin-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-reflection-mirror.json", "title": "Droid CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-reflection-mirror.json", "title": "Pi vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-reflection-mirror.json", "title": "Gemini CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-reflection-mirror.json", "title": "GitHub Copilot CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-reflection-mirror.json", "title": "goose vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/goose-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-reflection-mirror.json", "title": "HarnessRouter vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-reflection-mirror.json", "title": "Kilo Code CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-reflection-mirror.json", "title": "Kiro CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/muse-code-vs-reflection-mirror.json", "title": "Muse Code vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/muse-code-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-reflection-mirror.json", "title": "OpenAI Codex vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-reflection-mirror.json", "title": "OpenCode vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/opencode-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-reflection-mirror.json", "title": "OpenHands vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/openhands-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/prime-agent-vs-reflection-mirror.json", "title": "Prime Agent vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/prime-agent-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/qwen-code-vs-reflection-mirror.json", "title": "Qwen Code vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/qwen-code-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-reflection-mirror.json", "title": "CLI Manager vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-reflection-mirror.json", "title": "Harness vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror.json", "title": "Paperclip vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/parallax-agents-vs-reflection-mirror.json", "title": "Parallax vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/parallax-agents-vs-reflection-mirror" } ], "scores": [ { "agent-zero": 57, "by": 20, "edge": "agent-zero", "key": "reliability", "name": "Reliability", "reflection-mirror": 37, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "agent-zero": 64, "by": 1, "edge": "reflection-mirror", "key": "schema", "name": "Schema \u0026 documentation", "reflection-mirror": 65, "weight": 13 }, { "agent-zero": 62, "by": 4, "edge": "agent-zero", "key": "ergonomics", "name": "Agent ergonomics", "reflection-mirror": 58, "weight": 13 }, { "agent-zero": 54, "by": 4, "edge": "reflection-mirror", "key": "security", "name": "Security \u0026 auth", "reflection-mirror": 58, "weight": 14 }, { "agent-zero": 60, "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "reflection-mirror": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "agent-zero": 75, "by": 28, "edge": "agent-zero", "key": "maintenance", "name": "Maintenance \u0026 community", "reflection-mirror": 47, "weight": 7 }, { "agent-zero": 55, "by": 3, "edge": "reflection-mirror", "key": "transparency", "name": "Transparency \u0026 trust", "reflection-mirror": 58, "weight": 7 } ], "summary": "Agent Zero and Mirror CLI score within a point of each other on agent readiness, 54.2 (C) and 54.2 (C). Both do agent harnesses.", "tutorials": [], "verdicts": { "agent-zero": "Self-hosted under the MIT licence, with nine releases in the 90 days to 12 October 2026 and breaking changes listed in the release notes. The agent runs shell commands in its container with no approval step, the web interface has no login by default, and five CVEs from the past year have no published GitHub advisory.", "reflection-mirror": "Mirror CLI is Apache-2.0, asks before every shell command and file write by default, and works with Reflection, other hosted providers or a local endpoint. It is a one-day-old 0.1.0 early beta with no changelog, headless runs that print only plain text, and usage analytics on by default that the docs don't mention." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/agent-zero-vs-reflection-mirror", "json": "https://www.anchorterminal.com/compare/agent-zero-vs-reflection-mirror.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/agent-zero-vs-reflection-mirror.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/agent-zero-vs-reflection-mirror.min.md" }, "markdown": "Agent Zero and Mirror CLI score within a point of each other on agent readiness, 54.2 (C) and 54.2 (C). Both do agent harnesses.\n\n- Agent Zero: grade C, 54.2/100, rank #768 of 1133. Markdown https://www.anchorterminal.com/tools/agent-zero.md · JSON https://www.anchorterminal.com/api/v1/tools/agent-zero.json\n- Mirror CLI: grade C, 54.2/100, rank #765 of 1133. Markdown https://www.anchorterminal.com/tools/reflection-mirror.md · JSON https://www.anchorterminal.com/api/v1/tools/reflection-mirror.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 331 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### Agent Zero (C)\n\nGood for: A technical owner who wants an agent with its own Linux machine, reachable from Telegram, WhatsApp or email, with scheduled tasks and editable memory.\n\nAhead on:\n- Reliability, 57 against 37\n- Maintenance \u0026 community, 75 against 47\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: No approval step before shell commands, file changes or outgoing messages. Tool Access defaults to allow\n\n### Mirror CLI (C)\n\nGood for: Developers who want Reflection's Beam in a terminal coding agent built alongside the model, or an open-source harness that also runs other providers and local endpoints.\n\nAlso in its favour:\n- Free to start without a card\n- No incidents deducted, where Agent Zero loses 6 points for them\n\nWatch for: Version 0.1.0, released 16 October 2026 and labelled early beta, with no changelog or release tags\n\n\n## Score by category\n\n| Category | Weight | Agent Zero | Mirror CLI | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 57 | 37 | Agent Zero +20 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 64 | 65 | Mirror CLI +1 |\n| Agent ergonomics | 13% (16.2 this run) | 62 | 58 | Agent Zero +4 |\n| Security \u0026 auth | 14% (17.5 this run) | 54 | 58 | Mirror CLI +4 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 75 | 47 | Agent Zero +28 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 55 | 58 | Mirror CLI +3 |\n| Negative events | ≤15 | -6 | 0 | |\n| **Total** | | **54.2 · C** | **54.2 · C** | |\n\n## Facts side by side\n\n| Fact | Agent Zero | Mirror CLI |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Agent Zero, s.r.o. | Reflection |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | API key |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-09-23 | 2026-10-16 |\n| Terms last updated | no document linked | |\n| Privacy policy last updated | no document linked | |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 19k stars | none |\n| Agent reviews | none | 3/5 (4) |\n\n## Verdicts\n\n**Agent Zero.** Self-hosted under the MIT licence, with nine releases in the 90 days to 12 October 2026 and breaking changes listed in the release notes. The agent runs shell commands in its container with no approval step, the web interface has no login by default, and five CVEs from the past year have no published GitHub advisory.\n\n**Mirror CLI.** Mirror CLI is Apache-2.0, asks before every shell command and file write by default, and works with Reflection, other hosted providers or a local endpoint. It is a one-day-old 0.1.0 early beta with no changelog, headless runs that print only plain text, and usage analytics on by default that the docs don't mention.\n\n## Before you call either\n\n### Agent Zero\n\n1. Set a UI login and password in Settings before publishing the port or opening a tunnel. The default has none\n2. Fill `allowed_users`, `allowed_numbers` or `sender_whitelist` before enabling a channel. An empty list accepts every sender\n3. Enable the Infection Check plugin when the agent reads mail, web pages or MCP results. It ships disabled\n4. Run v2.12 or later. It fixes a Telegram webhook authentication bypass and a WhatsApp media path traversal\n5. Call `POST /api_message` with the `X-API-KEY` header. The token changes when the UI login or password changes\n\n### Mirror CLI\n\n1. Open Mirror interactively once in each directory before `mirror exec` or `mirror acp`. Both refuse to run until the usage and folder notices are accepted\n2. Pass `--approval-mode auto` to `mirror exec` only inside a container or VM. In manual mode, calls that need approval fail, and approval isn't a sandbox\n3. Set `--max-iterations` on unattended runs. Turns are unlimited by default\n4. Check the result with your own tests. `exec` returns 0 whenever it prints an answer\n5. Never share logs recorded with `--log-level debug`. The docs say they contain request headers with the API key\n\n## Questions\n\n### Which is better for AI agents, Agent Zero or Mirror CLI?\n\nAgent Zero and Mirror CLI score within a point of each other on agent readiness, 54.2 (C) and 54.2 (C).\n\n### Are Agent Zero and Mirror CLI open source?\n\nYes. Agent Zero is open source (MIT). Mirror CLI is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/agent-zero-vs-reflection-mirror.json, and with the fewest tokens: https://www.anchorterminal.com/compare/agent-zero-vs-reflection-mirror.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"agent-zero\", \"b\": \"reflection-mirror\"}`. From a terminal: `anchor compare agent-zero reflection-mirror`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/agent-zero.json and https://www.anchorterminal.com/api/v1/tools/reflection-mirror.json\n\n## Other comparisons with Agent Zero or Mirror CLI\n\n- [Agent Zero vs Aider](https://www.anchorterminal.com/compare/agent-zero-vs-aider.md)\n- [Agent Zero vs Amp](https://www.anchorterminal.com/compare/agent-zero-vs-amp.md)\n- [Agent Zero vs Antigravity CLI](https://www.anchorterminal.com/compare/agent-zero-vs-antigravity-cli.md)\n- [Agent Zero vs Claude Code](https://www.anchorterminal.com/compare/agent-zero-vs-claude-code.md)\n- [Agent Zero vs Cline](https://www.anchorterminal.com/compare/agent-zero-vs-cline.md)\n- [Agent Zero vs Cursor CLI](https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli.md)\n- [Agent Zero vs Devin](https://www.anchorterminal.com/compare/agent-zero-vs-devin.md)\n- [Agent Zero vs Droid CLI](https://www.anchorterminal.com/compare/agent-zero-vs-droid-cli.md)\n- [Agent Zero vs Pi](https://www.anchorterminal.com/compare/agent-zero-vs-earendil-pi.md)\n- [Agent Zero vs Gemini CLI](https://www.anchorterminal.com/compare/agent-zero-vs-gemini-cli.md)\n- [Agent Zero vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/agent-zero-vs-github-copilot-cli.md)\n- [Agent Zero vs goose](https://www.anchorterminal.com/compare/agent-zero-vs-goose.md)\n- [Agent Zero vs HarnessRouter](https://www.anchorterminal.com/compare/agent-zero-vs-harnessrouter.md)\n- [Agent Zero vs Kilo Code CLI](https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli.md)\n- [Agent Zero vs Kiro CLI](https://www.anchorterminal.com/compare/agent-zero-vs-kiro-cli.md)\n- [Agent Zero vs Muse Code](https://www.anchorterminal.com/compare/agent-zero-vs-muse-code.md)\n- [Agent Zero vs OpenAI Codex](https://www.anchorterminal.com/compare/agent-zero-vs-openai-codex.md)\n- [Agent Zero vs OpenCode](https://www.anchorterminal.com/compare/agent-zero-vs-opencode.md)\n- [Agent Zero vs OpenHands](https://www.anchorterminal.com/compare/agent-zero-vs-openhands.md)\n- [Agent Zero vs Prime Agent](https://www.anchorterminal.com/compare/agent-zero-vs-prime-agent.md)\n- [Agent Zero vs Qwen Code](https://www.anchorterminal.com/compare/agent-zero-vs-qwen-code.md)\n- [Aider vs Mirror CLI](https://www.anchorterminal.com/compare/aider-vs-reflection-mirror.md)\n- [Amp vs Mirror CLI](https://www.anchorterminal.com/compare/amp-vs-reflection-mirror.md)\n- [Antigravity CLI vs Mirror CLI](https://www.anchorterminal.com/compare/antigravity-cli-vs-reflection-mirror.md)\n- [Claude Code vs Mirror CLI](https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror.md)\n- [Cline vs Mirror CLI](https://www.anchorterminal.com/compare/cline-vs-reflection-mirror.md)\n- [Cursor CLI vs Mirror CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-reflection-mirror.md)\n- [Devin vs Mirror CLI](https://www.anchorterminal.com/compare/devin-vs-reflection-mirror.md)\n- [Droid CLI vs Mirror CLI](https://www.anchorterminal.com/compare/droid-cli-vs-reflection-mirror.md)\n- [Pi vs Mirror CLI](https://www.anchorterminal.com/compare/earendil-pi-vs-reflection-mirror.md)\n- [Gemini CLI vs Mirror CLI](https://www.anchorterminal.com/compare/gemini-cli-vs-reflection-mirror.md)\n- [GitHub Copilot CLI vs Mirror CLI](https://www.anchorterminal.com/compare/github-copilot-cli-vs-reflection-mirror.md)\n- [goose vs Mirror CLI](https://www.anchorterminal.com/compare/goose-vs-reflection-mirror.md)\n- [HarnessRouter vs Mirror CLI](https://www.anchorterminal.com/compare/harnessrouter-vs-reflection-mirror.md)\n- [Kilo Code CLI vs Mirror CLI](https://www.anchorterminal.com/compare/kilo-code-cli-vs-reflection-mirror.md)\n- [Kiro CLI vs Mirror CLI](https://www.anchorterminal.com/compare/kiro-cli-vs-reflection-mirror.md)\n- [Muse Code vs Mirror CLI](https://www.anchorterminal.com/compare/muse-code-vs-reflection-mirror.md)\n- [OpenAI Codex vs Mirror CLI](https://www.anchorterminal.com/compare/openai-codex-vs-reflection-mirror.md)\n- [OpenCode vs Mirror CLI](https://www.anchorterminal.com/compare/opencode-vs-reflection-mirror.md)\n- [OpenHands vs Mirror CLI](https://www.anchorterminal.com/compare/openhands-vs-reflection-mirror.md)\n- [Prime Agent vs Mirror CLI](https://www.anchorterminal.com/compare/prime-agent-vs-reflection-mirror.md)\n- [Qwen Code vs Mirror CLI](https://www.anchorterminal.com/compare/qwen-code-vs-reflection-mirror.md)\n- [CLI Manager vs Mirror CLI](https://www.anchorterminal.com/compare/cli-manager-vs-reflection-mirror.md)\n- [Harness vs Mirror CLI](https://www.anchorterminal.com/compare/harness-autonomous-vs-reflection-mirror.md)\n- [Paperclip vs Mirror CLI](https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror.md)\n- [Parallax vs Mirror CLI](https://www.anchorterminal.com/compare/parallax-agents-vs-reflection-mirror.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-18", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Agent Zero vs Mirror CLI", "url": "" } ], "description": "Agent Zero and Mirror CLI score within a point of each other for agent harnesses, 54.2 and 54.2 out of 100. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Agent Zero C 54.2", "Mirror CLI C 54.2", "scores" ], "h1": "Agent Zero vs Mirror CLI", "image": "https://www.anchorterminal.com/assets/og/compare-agent-zero-vs-reflection-mirror.png", "path": "/compare/agent-zero-vs-reflection-mirror", "published": "2026-10-01", "section": "tools", "title": "Agent Zero vs Mirror CLI for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-17", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-reflection-mirror" }, "tokens": { "markdown": 2850, "slim": 530 }, "version": 1 }