{
  "data": {
    "a": {
      "slug": "agentos",
      "name": "AgentOS",
      "vendor": "Framers Lab, Inc.",
      "vendorUrl": "https://agentos.sh",
      "kind": "framework",
      "category": "frameworks",
      "summary": "Open-source TypeScript agent framework from Framers Lab, installed from npm as @framers/agentos. It runs agents with long-term memory, multi-agent teams, graph workflows with checkpoints, guardrails and approval gates across 11 model providers.",
      "url": "https://www.anchorterminal.com/tools/agentos",
      "markdownUrl": "https://www.anchorterminal.com/tools/agentos.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/agentos.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/agentos.json",
      "dns": "agentos.grade.anchorterminal.com",
      "repo": "https://github.com/framerslab/agentos",
      "license": "Apache-2.0",
      "transports": [],
      "packages": [
        {
          "registry": "npm",
          "name": "@framers/agentos"
        }
      ],
      "auth": "api-key",
      "authNotes": "The framework has no account of its own. Each model provider takes its own key from the environment or from the agent's configuration, and the Claude and Gemini CLI providers use an existing local sign-in.",
      "pricing": "free",
      "pricingNotes": "Free and Apache 2.0, with no paid tier of AgentOS found. You pay your model provider. The terms page says the maintainers give no service-level agreement for self-hosted use (https://agentos.sh/legal/terms/, checked 2026-10-08).",
      "priceSummary": "Free · OSS",
      "where": "library",
      "x402": {
        "level": "no",
        "evidence": "No x402, MPP or L402 in the repository or on agentos.sh (checked 2026-10-08).",
        "endpoints": []
      },
      "toolCount": null,
      "popularity": {
        "githubStars": 677,
        "npmWeekly": 5328,
        "pypiWeekly": null,
        "asOf": "2026-10-08"
      },
      "docsUrl": "https://docs.agentos.sh",
      "llmsTxt": "https://agentos.sh/llms.txt",
      "capabilities": [
        "agent.framework",
        "agent.multi-agent",
        "agent.durable"
      ],
      "tags": [
        "framework",
        "typescript",
        "open-source",
        "llms-txt",
        "free",
        "no-card"
      ],
      "lastRelease": "2026-10-31",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 75.8,
        "grade": "BB",
        "agentReady": true,
        "rank": 42,
        "ranked": true,
        "rankOf": 1260,
        "categoryRank": 4,
        "methodology": "0.7",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 74,
          "maintenance": 87,
          "payments": 60,
          "reliability": 77,
          "schema": 92,
          "security": 81,
          "transparency": 70
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "medium",
          "date": "2026-11-01"
        },
        "negative": -2,
        "negativeNotes": [
          "2026-10-08 to 2026-10-12. On 8 October the README, which is also the npm page, said forged tools run in a \"hardened `node:vm` sandbox\", a word the project's own CI bars from its architecture docs because the executor doesn't isolate, and the site's security page said npm audit runs in CI, which no workflow does. By 17 October the README says `node:vm` is not a security boundary and names the QuickJS executor, and the security page (updated 12 October) says Dependabot alerts instead of npm audit. A misleading claim, fixed, so the minimum, -2. https://github.com/framerslab/agentos/blob/master/README.md; https://agentos.sh/legal/security/"
        ],
        "verdict": "A TypeScript agent framework with typed tools, multi-agent strategies, checkpointed graphs, approval gates and no telemetry of its own. It is at 0.15.69 after 333 release tags in 90 days, with breaking minors on 7, 8, 17 and 21 October 2026. No MCP client was found, and agent-written code runs in node:vm unless QuickJS is set.",
        "bestFor": "TypeScript teams that want long-term memory, personas, voice and channel adapters and multi-agent teams in one package, and that will pin versions.",
        "strengths": [
          "Apache 2.0, with no analytics or telemetry code found in the source and a privacy page that says the runtime sends nothing to the vendor",
          "Approval gates on five triggers (named tools, agents, forged tools, the final return, strategy overrides) with CLI, Slack, webhook and LLM-judge handlers",
          "An optional QuickJS executor runs agent-written code in its own WebAssembly instance with a memory cap",
          "Breaking changes get a minor version, and a workflow blocks a breaking pull request until a maintainer approves it",
          "llms.txt on both sites, a TypeDoc API reference and 22 runnable examples in the repository"
        ],
        "weaknesses": [
          "Version 0.15.69, with 95 release tags after 0.14.2 to 1 November 2026 and breaking minors 0.14.0 and 0.15.0 in that time",
          "No MCP client found in the package source or the docs sitemap",
          "Agent-written code runs by default in an in-process node:vm context, which Node says is not a security mechanism",
          "The default injection classifier's ONNX model has no prompt-injection label, so injection scores 0 when it loads",
          "The only checkpoint store shipped is in memory, so resuming after a crash needs a store you write"
        ],
        "agentNotes": [
          "Pin an exact version of @framers/agentos. Feature commits ship as patch releases while it is 0.x, and breaking changes ship as minors",
          "Leave emergentConfig.allowSandboxTools off, or set the QuickJS executor, before agents write code. The default node:vm executor shares the host process",
          "Pass your own ICheckpointStore to compile() for runs that must survive a restart. The default store is in memory",
          "Set hitl.approvals.beforeTool for tools that write, and choose a handler. No approval gate is on by default",
          "Use Node 22 or newer, and set a provider key such as OPENAI_API_KEY or ANTHROPIC_API_KEY. The provider is detected from the environment"
        ],
        "metrics": {
          "kind": "library",
          "measured": false
        },
        "reviewCount": 4,
        "avgRating": 2.8,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "BB",
            "methodology": "0.7",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 75.8
          }
        ],
        "editorialScores": {
          "ergonomics": 74,
          "maintenance": 87,
          "payments": 60,
          "reliability": 77,
          "schema": 92,
          "security": 81,
          "transparency": 80
        },
        "provenanceScore": 59,
        "checked": {
          "categories": {
            "ergonomics": "2026-11-01",
            "maintenance": "2026-11-01",
            "payments": "2026-11-01",
            "reliability": "2026-11-01",
            "schema": "2026-11-01",
            "security": "2026-11-01",
            "transparency": "2026-11-01"
          },
          "last": "2026-11-01",
          "lastMoved": "2026-10-27",
          "oldest": "2026-11-01",
          "stale": false,
          "staleAfterDays": 90
        }
      },
      "connect": {
        "install": "npm install @framers/agentos"
      },
      "letme": {
        "capability": "https://letme.dev/agent.framework",
        "tool": "https://letme.dev/agentos"
      },
      "area": "frameworks",
      "provenance": {
        "legalEntity": "Framers Lab, Inc.",
        "domain": "agentos.sh",
        "domainRegistered": "2025-10-26",
        "endpointOnVendorDomain": null,
        "terms": "https://agentos.sh/legal/terms/",
        "privacy": "https://agentos.sh/legal/privacy/",
        "statusPage": "",
        "changelog": "https://github.com/framerslab/agentos/releases",
        "securityTxt": "none",
        "checked": "2026-11-01",
        "notes": [
          "agentos.sh/llms.txt names Framers Lab, Inc. as the company behind AgentOS. The legal pages read Frame.dev and the licence file reads Copyright (c) 2025 Framers.",
          "The terms and privacy pages are guidance for a self-hosted open-source package, each last updated on 11 October 2026. The security page was updated on 12 October 2026.",
          "agentos.sh/.well-known/security.txt returns 404. The repository has .github/SECURITY.md.",
          "Release notes go to GitHub releases. release.config.js says nothing is committed to master on release, and CHANGELOG.md still stops at 0.13.150 of 15 October 2026 on 1 November.",
          "RDAP gives agentos.sh a registration date of 2025-10-26, per the 8 October check.",
          "The npm maintainers are manicteam (team@manic.agency) and jdunnfive, per the 8 October check."
        ],
        "score": 59
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/agentos.json",
      "live": {
        "slug": "agentos",
        "versions": [
          {
            "registry": "github",
            "name": "framerslab/agentos",
            "version": "v0.15.77",
            "released": "2026-11-01",
            "seenAt": "2026-11-01T16:39:43.587942585Z"
          },
          {
            "registry": "npm",
            "name": "@framers/agentos",
            "version": "0.15.77",
            "seenAt": "2026-11-01T16:39:42.730280072Z"
          }
        ],
        "githubStars": 683,
        "npmWeekly": 13262,
        "securityTxt": {
          "url": "https://agentos.sh/.well-known/security.txt",
          "state": "none",
          "checkedAt": "2026-11-01T15:42:36.125626113Z"
        },
        "llmsTxt": {
          "url": "https://agentos.sh/llms.txt",
          "ok": true,
          "status": 200,
          "checkedAt": "2026-11-01T15:12:31.610243386Z"
        },
        "domain": {
          "domain": "agentos.sh",
          "checkedAt": "2026-11-01T14:24:03.580919341Z"
        },
        "pages": [
          {
            "url": "https://raw.githubusercontent.com/framerslab/agentos/master/CHANGELOG.md",
            "kind": "changelog",
            "status": 304,
            "checkedAt": "2026-10-16T22:30:47.69466816Z",
            "changedAt": "2026-10-15T21:34:03.075827271Z",
            "fingerprint": "95ded150745a"
          },
          {
            "url": "https://agentos.sh/legal/privacy/",
            "kind": "privacy",
            "status": 200,
            "checkedAt": "2026-11-01T06:35:33.847804177Z",
            "changedAt": "2026-10-30T05:31:02.788693925Z",
            "fingerprint": "8628ec0ab392"
          },
          {
            "url": "https://agentos.sh/legal/terms/",
            "kind": "terms",
            "status": 200,
            "checkedAt": "2026-11-01T06:35:36.00296487Z",
            "changedAt": "2026-10-30T05:31:05.061013624Z",
            "fingerprint": "46bb7a2ec7c2"
          }
        ],
        "github": {
          "repo": "framerslab/agentos",
          "checkedAt": "2026-10-26T07:28:38.976510048Z",
          "stars": 681,
          "archived": false,
          "issuesEnabled": true,
          "pushedAt": "2026-10-26T07:25:11Z",
          "openIssues": 18,
          "openPRs": 7,
          "issuesOpened90d": 91,
          "issuesClosed90d": 73,
          "prsMerged90d": 415,
          "ci": {
            "branch": "master",
            "runs": 50,
            "success": 50,
            "failure": 0,
            "other": 0,
            "latest": "success",
            "latestAt": "2026-10-26T07:20:43Z"
          },
          "advisories": [
            {
              "ghsa": "GHSA-4vmg-q5vj-rq32",
              "severity": "medium",
              "published": "2026-10-13T20:49:52Z"
            },
            {
              "ghsa": "GHSA-whp3-ggmp-p622",
              "severity": "high",
              "published": "2026-10-13T18:34:12Z"
            },
            {
              "ghsa": "GHSA-8366-hw4r-qx92",
              "severity": "high",
              "published": "2026-10-12T14:45:34Z"
            },
            {
              "ghsa": "GHSA-3p38-8g9c-96cw",
              "severity": "critical",
              "published": "2026-10-12T08:18:02Z"
            },
            {
              "ghsa": "GHSA-j42g-52jx-j9f2",
              "severity": "critical",
              "published": "2026-10-12T03:03:10Z"
            }
          ],
          "replies": {
            "sampled": 25,
            "unanswered": 6,
            "medianDays": 0.1
          }
        },
        "updatedAt": "2026-11-01T16:39:43.587942585Z"
      }
    },
    "answer": "AgentOS scores 75.8 (BB) on agent readiness against BoxLang AI's 65.8 (B), and leads in 5 of 7 scored categories.",
    "b": {
      "slug": "boxlang-ai",
      "name": "BoxLang AI",
      "vendor": "Ortus Solutions",
      "vendorUrl": "https://ai.boxlang.io",
      "kind": "framework",
      "category": "frameworks",
      "summary": "BoxLang AI (bx-ai) is Ortus Solutions' Apache-2.0 agent framework for BoxLang on the JVM, with agents, tools, memory, RAG, human approval, and an MCP client and server across more than 15 model providers.",
      "url": "https://www.anchorterminal.com/tools/boxlang-ai",
      "markdownUrl": "https://www.anchorterminal.com/tools/boxlang-ai.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/boxlang-ai.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/boxlang-ai.json",
      "dns": "boxlang-ai.grade.anchorterminal.com",
      "repo": "https://github.com/ortus-boxlang/bx-ai",
      "license": "Apache-2.0",
      "transports": [],
      "packages": [
        {
          "registry": "forgebox",
          "name": "bx-ai"
        }
      ],
      "auth": "none",
      "authNotes": "A library with no account of its own. Model providers need their own keys, set in boxlang.json or read from each provider's environment variable (OPENAI_API_KEY, CLAUDE_API_KEY and so on). Ollama, Docker Model Runner and the mock provider need no key.",
      "pricing": "free",
      "pricingNotes": "Free under Apache-2.0. Model calls are billed by the provider. Ortus sells optional BoxLang runtime plans from $749 a year (Starter, one server) to $4,999 a node a year (BoxLang++), which the readme says add more vector memories and an Agent Dashboard.",
      "priceSummary": "Free · OSS",
      "where": "library",
      "x402": {
        "level": "no",
        "evidence": "Local library. No x402, MPP or L402 in the repository, the docs or the plans page, checked 1 November 2026.",
        "endpoints": []
      },
      "toolCount": null,
      "popularity": {
        "githubStars": null,
        "npmWeekly": null,
        "pypiWeekly": null,
        "asOf": "2026-11-01"
      },
      "docsUrl": "https://ai.ortusbooks.com",
      "llmsTxt": "https://ai.ortusbooks.com/llms.txt",
      "capabilities": [
        "agent.framework",
        "agent.multi-agent",
        "agent.mcp-client"
      ],
      "tags": [
        "framework",
        "boxlang",
        "jvm",
        "open-source",
        "apache-2.0",
        "mcp",
        "llms-txt",
        "free"
      ],
      "lastRelease": "2026-10-20",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 65.8,
        "grade": "B",
        "agentReady": false,
        "rank": 328,
        "ranked": true,
        "rankOf": 1260,
        "categoryRank": 10,
        "methodology": "0.7",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 74,
          "maintenance": 83,
          "payments": 50,
          "reliability": 66,
          "schema": 71,
          "security": 71,
          "transparency": 70
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "medium",
          "date": "2026-11-01"
        },
        "negative": -3,
        "negativeNotes": [
          "2026-10-20. -3, a breaking change in a minor release without advance notice. 3.6.0 renamed the `MCPClient` class to `MCPHttpClient` with no alias, so code that created the class directly must move to `MCP( url )`. The changelog's Migration section says so on release day. 3.5.0 (11 September) likewise raised the minimum BoxLang runtime from 1.8.0 to 1.14.0. One term at the floor, as google-adk's minor-release breaking changes took. https://github.com/ortus-boxlang/bx-ai/blob/main/changelog.md"
        ],
        "verdict": "A JVM agent framework with human approval, guardrail middleware and an MCP client over HTTP and stdio, all enforced in code, with three releases in the 90 days to 1 November 2026. It runs only on BoxLang, the stronger guards are opt-in, and minor releases have renamed public classes without a deprecation period.",
        "bestFor": "Teams already running BoxLang or modernising CFML on the JVM who want agents, RAG and MCP with approval and guardrails in the same language",
        "strengths": [
          "Human approval enforced in code, with suspended runs that resume without replaying the model call, five approval policies and durable grants",
          "Untrusted context is fenced and inbound text Unicode-normalised by default, with opt-in sanitiser, LLM-judge and output-redaction middleware",
          "stdio MCP servers start without a shell, with an allowedCommands setting, per-server tool filters and prefixes, and restart limits",
          "Three releases in the 90 days to 1 November 2026 (3.4.0, 3.5.0, 3.6.0), with a Keep a Changelog file and migration notes",
          "llms.txt and a Markdown copy of every docs page, plus about 100 runnable example scripts in the repository"
        ],
        "weaknesses": [
          "Runs only on BoxLang, a JVM language, so it suits teams already on BoxLang or CFML rather than Python or TypeScript stacks",
          "Minor releases carry breaking changes. 3.6.0 renamed MCPClient to MCPHttpClient with no alias, noted on release day",
          "The stdio command allow-list, filesystem tool paths and MCP server authentication are all open by default",
          "Docs lag the code. On 1 November the 3.6.0 release page still read unreleased and didn't mention the stdio MCP client",
          "No OpenTelemetry export found. Tracing is through BoxLang interception points, logging and flight-recorder middleware"
        ],
        "agentNotes": [
          "Set `mcp.stdio.allowedCommands` to the executables you need. The default empty list lets any command start as a stdio MCP server.",
          "Pass `allowedPaths` when you create FileSystemTools. With none, its tools can read, write and delete anywhere the JVM user can.",
          "Attach HumanInTheLoopMiddleware with a checkpointer for tools that write or spend. Approval is opt-in.",
          "Create MCP clients with `MCP()` rather than the class, since 3.6.0 renamed MCPClient to MCPHttpClient without an alias.",
          "Use the `mock` provider to test agent wiring and guardrails with no API key or network."
        ],
        "metrics": {
          "kind": "library",
          "measured": false
        },
        "reviewCount": 0,
        "avgRating": 0,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "B",
            "methodology": "0.7",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 65.8
          }
        ],
        "editorialScores": {
          "ergonomics": 74,
          "maintenance": 83,
          "payments": 50,
          "reliability": 66,
          "schema": 71,
          "security": 71,
          "transparency": 65
        },
        "provenanceScore": 74,
        "checked": {
          "categories": {
            "ergonomics": "2026-11-01",
            "maintenance": "2026-11-01",
            "payments": "2026-11-01",
            "reliability": "2026-11-01",
            "schema": "2026-11-01",
            "security": "2026-11-01",
            "transparency": "2026-11-01"
          },
          "last": "2026-11-01",
          "oldest": "2026-11-01",
          "stale": false,
          "staleAfterDays": 90
        }
      },
      "connect": {
        "install": "install-bx-module bx-ai   # in a web app: box install bx-ai"
      },
      "letme": {
        "capability": "https://letme.dev/agent.framework",
        "tool": "https://letme.dev/boxlang-ai"
      },
      "sameCompany": [
        "bx-playwright"
      ],
      "area": "frameworks",
      "provenance": {
        "legalEntity": "Ortus Solutions, Corp.",
        "domain": "ortussolutions.com",
        "domainRegistered": "2006-04-12",
        "endpointOnVendorDomain": null,
        "terms": "https://github.com/ortus-boxlang/bx-ai/blob/main/src/main/resources/LICENSE",
        "privacy": "https://www.ortussolutions.com/about-us/ortus-privacy-policy",
        "statusPage": "",
        "changelog": "https://github.com/ortus-boxlang/bx-ai/blob/main/changelog.md",
        "securityTxt": "none",
        "checked": "2026-11-01",
        "notes": [
          "The readme names Ortus Solutions, Corp as copyright holder, and box.json names Ortus Solutions as author.",
          "domainRegistered is from Verisign's RDAP record for ortussolutions.com. rdap.org has no record for boxlang.io, so the product domain's date wasn't read.",
          "security.txt answers 410 on www.ortussolutions.com and boxlang.io. CONTRIBUTING.md asks for vulnerability reports to security@ortussolutions.com.",
          "The Apache 2.0 licence stands in for terms. The privacy policy covers Ortus's website and customers, not the module.",
          "Local software, so there is no endpoint or status page."
        ],
        "score": 74
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/boxlang-ai.json"
    },
    "edges": [
      {
        "by": 21,
        "category": "schema",
        "leads": "agentos",
        "name": "Schema \u0026 documentation",
        "reasons": {
          "a": "Typed TypeScript API with a TypeDoc reference (25). llms.txt on agentos.sh and docs.agentos.sh (10). The guides say which surface to reach for, for example agency-level approval for most apps and workflow nodes for an explicit graph, and the tool-forging docs state what each executor does not isolate (16). Tools take Zod schemas (15). 22 runnable examples and a cookbook, with CLI error codes documented but no single page for the library's error classes found (11). Release notes are generated for every release and published as GitHub releases under written version rules. The CHANGELOG.md on master still stops at 0.13.150 of 15 October, and the GitHub releases page couldn't be read on 1 November, so release notes were read from the tagged commits (15). Framework reading.",
          "b": "Framework reading. A reference page for each built-in function with its arguments, and tool schemas generated from typed function arguments with required fields since 3.3.1. BoxLang is dynamically typed and no published API reference was found, though the repository builds DocBox API docs (15 of 25). llms.txt with about 150 entries and a Markdown copy of every page (10). The FAQ says when to use aiChat() or aiAgent() and the security guide says which guards to use when, though some FAQ links still say coming soon for pages that exist (14 of 20). Tool arguments are typed with required lists, and stdio options a server doesn't have throw InvalidArgument (11 of 15). About 100 example scripts in the repository and a gallery on ai.boxlang.io, but the production guide catches RateLimitException, TimeoutException and AuthenticationException, which the module's source never throws, and there is no exception reference (9 of 15). Keep a Changelog and a release-history page per version, but the 3.6.0 page still read unreleased on 1 November and two old versions appear twice in the changelog (12 of 15). 71 in all."
        },
        "scores": {
          "a": 92,
          "b": 71
        }
      },
      {
        "by": 11,
        "category": "reliability",
        "leads": "agentos",
        "name": "Reliability",
        "reasons": {
          "a": "Official npm package with Node 22 or newer stated in package.json on 1 November (20). A public CI workflow builds, lints, type-checks and runs the tests with coverage, and the 12 most recent runs on master on 8 October 2026 passed, per the 8 October check, not re-read on 1 November (25). 16 open issues and pull requests in total, most filed by the maintainer, with one outside suggestion from 12 September unanswered, per the 8 October check, not re-read on 1 November (20). Written release rules give a breaking change a minor version, and a workflow fails a pull request with a breaking-change marker unless a maintainer approves it, but feature commits ship as patches and breaking minors 0.11.0 and 0.12.0 (7 October), 0.13.0 (8 October), 0.14.0 (17 October) and 0.15.0 (21 October, two persona changes marked BREAKING CHANGE) landed within two weeks (12). Version 0.15.69, not declared stable (0). Local-software reading.",
          "b": "Read with the local-software lines. Official package on ForgeBox, installed with `install-bx-module bx-ai` or `box install bx-ai`, with BoxLang 1.14.0 or later in box.json and JDK 21 in CONTRIBUTING.md, but the 3.6 announcement says BoxLang 1.18 or later (18 of 20). tests.yml runs about 140 test classes against Ollama and the vector stores in Docker Compose, and against paid providers on development and releases, on pull requests and pushes to development. Whether runs pass wasn't read, since WebFetch refused github.com (15 of 25). Open issues and replies weren't read for the same reason. The changelog closes issues #182 to #259 in 3.3.1 to 3.4.0, and bugs also go to Ortus's Jira (10 of 25). Keep a Changelog with semantic versioning stated and Migration sections, but breaking changes ship in minor releases (8 of 15). 3.6.0, past 1.0 (15). 66 in all."
        },
        "scores": {
          "a": 77,
          "b": 66
        }
      },
      {
        "by": 10,
        "category": "security",
        "leads": "agentos",
        "name": "Security \u0026 auth",
        "reasons": {
          "a": "No analytics or telemetry code found in the source, and the privacy and security pages say the runtime sends nothing to the vendor. OpenTelemetry is off by default and the host installs the exporter (30). Approval gates on five triggers, five security tiers and a rule that composed tools chain a side-effecting step only when the host lists it. Agent-written code runs by default in an in-process node:vm context with a 5-second limit and no memory cap, off unless the host enables it. An optional QuickJS executor runs each call in its own WebAssembly instance with a memory cap. No gate is on unless configured (17). SECURITY.md names model output, tool results and retrieved content as untrusted input, and injection detection is an opt-in extension pack. The security page says that pack's default ONNX model has no prompt-injection label, so injection is scored only when that model can't load, and points to a phrase-list guard (11). OpenTelemetry spans, a usage ledger, a reasoning trace and an opt-in signed audit log (15). SECURITY.md with a private advisory form, acknowledgement in 5 business days and disclosure at 90 days, and the site's security page now gives the same times. No security.txt, no bounty and no published advisory found (8). Framework reading.",
          "b": "Framework reading. 30 for what leaves the machine and credentials, 20 for approvals and sandboxing, 15 for prompt injection, 15 for audit and 20 for the security programme. No telemetry in the module's source, requests go only to configured providers, keys come from settings or environment variables, and request logging is off by default. 3.4.0 fixed a Gemini key leaking into logs through the request URL (27 of 30). Approval is enforced in code by HumanInTheLoopMiddleware with five policies, GuardrailMiddleware blocks tools by name and argument pattern, and stdio commands never use a shell. All of it is opt-in. `allowedCommands` allows any executable by default, FileSystemTools allows any path without `allowedPaths`, and the MCP server has no authentication unless configured (12 of 20). Unicode hygiene and fencing of `${context}` are on by default, with opt-in input sanitiser, LLM judge and output guard. Streaming guards detect after the fact, which the changelog says (14 of 15). About 70 interception points, LoggingMiddleware, FlightRecorderMiddleware and MCP server statistics, with no OpenTelemetry export (11 of 15). CONTRIBUTING.md asks for reports to security@ortussolutions.com and the Slack #security channel. No security.txt (410), no bounty, and no published advisory found, while 3.6.0 lists a SQL injection fix in MySQL vector memory under Fixed (7 of 20). 71 in all."
        },
        "scores": {
          "a": 81,
          "b": 71
        }
      },
      {
        "by": 10,
        "category": "payments",
        "leads": "agentos",
        "name": "Payments \u0026 pricing",
        "reasons": {
          "a": "No payment protocol (0). Self-hosted rule. The package is free under Apache 2.0 with nothing to buy (20), installs with no card (20) and needs no account (20). No paid tier of AgentOS was found.",
          "b": "Self-hosted rule, scored on the paid option. No payment protocol (0). BoxLang runtime plans are public without a login, Starter $749 a year and BoxLang+ and BoxLang++ from $1,999 to $4,999 a server or node a year, plan pricing rather than per unit (10). The Apache-2.0 module installs with no card (20) and no account or sign-up (20). 50 in all."
        },
        "scores": {
          "a": 60,
          "b": 50
        }
      }
    ],
    "facts": [
      {
        "a": "Agent framework",
        "b": "Agent framework",
        "name": "Kind"
      },
      {
        "a": "Framers Lab, Inc.",
        "b": "Ortus Solutions",
        "name": "Vendor"
      },
      {
        "a": "no (local only)",
        "b": "no (local only)",
        "name": "Hosted endpoint"
      },
      {
        "a": "",
        "b": "",
        "name": "Transports"
      },
      {
        "a": "API key",
        "b": "None",
        "name": "Auth"
      },
      {
        "a": "Free",
        "b": "Free",
        "name": "Pricing"
      },
      {
        "a": "no",
        "b": "no",
        "name": "x402"
      },
      {
        "a": "Apache-2.0",
        "b": "Apache-2.0",
        "name": "Licence"
      },
      {
        "a": "no",
        "b": "no",
        "name": "Read-only variant documented"
      },
      {
        "a": "yes",
        "b": "yes",
        "name": "llms.txt"
      },
      {
        "a": "2026-10-31",
        "b": "2026-10-20",
        "name": "Last release"
      },
      {
        "a": "2025-11-06",
        "b": "no date given",
        "name": "Terms last updated"
      },
      {
        "a": "2025-11-06",
        "b": "no date given",
        "name": "Privacy policy last updated"
      },
      {
        "a": "not found in the text",
        "b": "not found in the text",
        "name": "Customer content may train models"
      },
      {
        "a": "not found in the text",
        "b": "not found in the text",
        "name": "Terms restrict automated access"
      },
      {
        "a": "not found in the text",
        "b": "not found in the text",
        "name": "Terms restrict benchmarking"
      },
      {
        "a": "not found in the text",
        "b": "not found in the text",
        "name": "Terms or service can change without notice"
      },
      {
        "a": "not found in the text",
        "b": "not found in the text",
        "name": "Arbitration or class-action waiver"
      },
      {
        "a": "677 stars, 5.3k npm/wk",
        "b": "none",
        "name": "Popularity"
      },
      {
        "a": "2.8/5 (4)",
        "b": "none",
        "name": "Agent reviews"
      }
    ],
    "faq": [
      {
        "answer": "AgentOS scores 75.8 (BB) on agent readiness against BoxLang AI's 65.8 (B), and leads in 5 of 7 scored categories.",
        "question": "Which is better for AI agents, AgentOS or BoxLang AI?"
      },
      {
        "answer": "Yes. AgentOS is open source (Apache-2.0). BoxLang AI is open source (Apache-2.0).",
        "question": "Are AgentOS and BoxLang AI open source?"
      }
    ],
    "goodFor": [
      {
        "aheadOn": [
          "Reliability, 77 against 66",
          "Schema \u0026 documentation, 92 against 71",
          "Security \u0026 auth, 81 against 71",
          "Payments \u0026 pricing, 60 against 50"
        ],
        "also": [
          "Agent-ready, a grade of BB or better",
          "Free to start without a card"
        ],
        "goodFor": "TypeScript teams that want long-term memory, personas, voice and channel adapters and multi-agent teams in one package, and that will pin versions.",
        "slug": "agentos",
        "watchFor": "Version 0.15.69, with 95 release tags after 0.14.2 to 1 November 2026 and breaking minors 0.14.0 and 0.15.0 in that time"
      },
      {
        "aheadOn": null,
        "also": [
          "No key needed to call it"
        ],
        "goodFor": "Teams already running BoxLang or modernising CFML on the JVM who want agents, RAG and MCP with approval and guardrails in the same language",
        "slug": "boxlang-ai",
        "watchFor": "Runs only on BoxLang, a JVM language, so it suits teams already on BoxLang or CFML rather than Python or TypeScript stacks"
      }
    ],
    "history": {
      "agentos": [
        {
          "causes": [
            "method"
          ],
          "date": "2026-10-27",
          "delta": 0.5,
          "from": 75.3,
          "fromGrade": "BB",
          "to": 75.8,
          "toGrade": "BB"
        }
      ],
      "boxlang-ai": null
    },
    "job": {
      "capability": "agent.framework",
      "name": "Agent frameworks"
    },
    "others": [
      {
        "json": "https://www.anchorterminal.com/compare/agentos-vs-agno.json",
        "title": "AgentOS vs Agno",
        "url": "https://www.anchorterminal.com/compare/agentos-vs-agno"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agentos-vs-claude-agent-sdk.json",
        "title": "AgentOS vs Claude Agent SDK",
        "url": "https://www.anchorterminal.com/compare/agentos-vs-claude-agent-sdk"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agentos-vs-crewai.json",
        "title": "AgentOS vs CrewAI",
        "url": "https://www.anchorterminal.com/compare/agentos-vs-crewai"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agentos-vs-cursor-agent-sdk.json",
        "title": "AgentOS vs Cursor Agent SDK",
        "url": "https://www.anchorterminal.com/compare/agentos-vs-cursor-agent-sdk"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agentos-vs-docker-agent.json",
        "title": "AgentOS vs Docker Agent",
        "url": "https://www.anchorterminal.com/compare/agentos-vs-docker-agent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agentos-vs-google-adk.json",
        "title": "AgentOS vs Agent Development Kit (ADK)",
        "url": "https://www.anchorterminal.com/compare/agentos-vs-google-adk"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agentos-vs-guilds-run.json",
        "title": "AgentOS vs guilds.run",
        "url": "https://www.anchorterminal.com/compare/agentos-vs-guilds-run"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agentos-vs-langgraph.json",
        "title": "AgentOS vs LangGraph",
        "url": "https://www.anchorterminal.com/compare/agentos-vs-langgraph"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agentos-vs-microsoft-agent-framework.json",
        "title": "AgentOS vs Microsoft Agent Framework",
        "url": "https://www.anchorterminal.com/compare/agentos-vs-microsoft-agent-framework"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agentos-vs-openai-agents-sdk.json",
        "title": "AgentOS vs OpenAI Agents SDK",
        "url": "https://www.anchorterminal.com/compare/agentos-vs-openai-agents-sdk"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agentos-vs-pydantic-ai.json",
        "title": "AgentOS vs Pydantic AI",
        "url": "https://www.anchorterminal.com/compare/agentos-vs-pydantic-ai"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agentos-vs-tradingagents.json",
        "title": "AgentOS vs TradingAgents",
        "url": "https://www.anchorterminal.com/compare/agentos-vs-tradingagents"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agno-vs-boxlang-ai.json",
        "title": "Agno vs BoxLang AI",
        "url": "https://www.anchorterminal.com/compare/agno-vs-boxlang-ai"
      },
      {
        "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-claude-agent-sdk.json",
        "title": "BoxLang AI vs Claude Agent SDK",
        "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-claude-agent-sdk"
      },
      {
        "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai.json",
        "title": "BoxLang AI vs CrewAI",
        "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai"
      },
      {
        "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-cursor-agent-sdk.json",
        "title": "BoxLang AI vs Cursor Agent SDK",
        "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-cursor-agent-sdk"
      },
      {
        "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-docker-agent.json",
        "title": "BoxLang AI vs Docker Agent",
        "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-docker-agent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-google-adk.json",
        "title": "BoxLang AI vs Agent Development Kit (ADK)",
        "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-google-adk"
      },
      {
        "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-guilds-run.json",
        "title": "BoxLang AI vs guilds.run",
        "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-guilds-run"
      },
      {
        "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-langgraph.json",
        "title": "BoxLang AI vs LangGraph",
        "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-langgraph"
      },
      {
        "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-microsoft-agent-framework.json",
        "title": "BoxLang AI vs Microsoft Agent Framework",
        "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-microsoft-agent-framework"
      },
      {
        "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-openai-agents-sdk.json",
        "title": "BoxLang AI vs OpenAI Agents SDK",
        "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-openai-agents-sdk"
      },
      {
        "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-pydantic-ai.json",
        "title": "BoxLang AI vs Pydantic AI",
        "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-pydantic-ai"
      },
      {
        "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-tradingagents.json",
        "title": "BoxLang AI vs TradingAgents",
        "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-tradingagents"
      }
    ],
    "panel": null,
    "scores": [
      {
        "agentos": 77,
        "boxlang-ai": 66,
        "by": 11,
        "edge": "agentos",
        "key": "reliability",
        "name": "Reliability",
        "weight": 16
      },
      {
        "key": "performance",
        "name": "Performance",
        "pending": true,
        "weight": 10
      },
      {
        "agentos": 92,
        "boxlang-ai": 71,
        "by": 21,
        "edge": "agentos",
        "key": "schema",
        "name": "Schema \u0026 documentation",
        "weight": 13
      },
      {
        "agentos": 74,
        "boxlang-ai": 74,
        "by": 0,
        "edge": "",
        "key": "ergonomics",
        "name": "Agent ergonomics",
        "weight": 13
      },
      {
        "agentos": 81,
        "boxlang-ai": 71,
        "by": 10,
        "edge": "agentos",
        "key": "security",
        "name": "Security \u0026 auth",
        "weight": 14
      },
      {
        "agentos": 60,
        "boxlang-ai": 50,
        "by": 10,
        "edge": "agentos",
        "key": "payments",
        "name": "Payments \u0026 pricing",
        "weight": 10
      },
      {
        "key": "tasks",
        "name": "Task success",
        "pending": true,
        "weight": 10
      },
      {
        "agentos": 87,
        "boxlang-ai": 83,
        "by": 4,
        "edge": "agentos",
        "key": "maintenance",
        "name": "Maintenance \u0026 community",
        "weight": 7
      },
      {
        "agentos": 70,
        "boxlang-ai": 70,
        "by": 0,
        "edge": "",
        "key": "transparency",
        "name": "Transparency \u0026 trust",
        "weight": 7
      }
    ],
    "summary": "AgentOS scores 75.8 (BB) on agent readiness against BoxLang AI's 65.8 (B), and leads in 5 of 7 scored categories. Both do agent frameworks.",
    "tasks": null,
    "tutorials": [],
    "verdicts": {
      "agentos": "A TypeScript agent framework with typed tools, multi-agent strategies, checkpointed graphs, approval gates and no telemetry of its own. It is at 0.15.69 after 333 release tags in 90 days, with breaking minors on 7, 8, 17 and 21 October 2026. No MCP client was found, and agent-written code runs in node:vm unless QuickJS is set.",
      "boxlang-ai": "A JVM agent framework with human approval, guardrail middleware and an MCP client over HTTP and stdio, all enforced in code, with three releases in the 90 days to 1 November 2026. It runs only on BoxLang, the stronger guards are opt-in, and minor releases have renamed public classes without a deprecation period."
    }
  },
  "kind": "anchor.page",
  "links": {
    "api": "https://www.anchorterminal.com/api/v1/index.json",
    "html": "https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai",
    "json": "https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai.json",
    "llms": "https://www.anchorterminal.com/llms.txt",
    "markdown": "https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai.md",
    "mcp": "https://www.anchorterminal.com/mcp",
    "slim": "https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai.min.md"
  },
  "markdown": "AgentOS scores 75.8 (BB) on agent readiness against BoxLang AI's 65.8 (B), and leads in 5 of 7 scored categories. Both do agent frameworks.\n\n- AgentOS: grade BB, 75.8/100, rank #42 of 1260. Markdown https://www.anchorterminal.com/tools/agentos.md · JSON https://www.anchorterminal.com/api/v1/tools/agentos.json\n- BoxLang AI: grade B, 65.8/100, rank #328 of 1260. Markdown https://www.anchorterminal.com/tools/boxlang-ai.md · JSON https://www.anchorterminal.com/api/v1/tools/boxlang-ai.json\n- Best agent frameworks and SDKs: https://www.anchorterminal.com/best/frameworks/index.md\n- All 91 frameworks comparisons: https://www.anchorterminal.com/compare/frameworks/index.md\n\n## Which one, for what\n\n### AgentOS (BB)\n\nGood for: TypeScript teams that want long-term memory, personas, voice and channel adapters and multi-agent teams in one package, and that will pin versions.\n\nAhead on:\n- Reliability, 77 against 66\n- Schema \u0026 documentation, 92 against 71\n- Security \u0026 auth, 81 against 71\n- Payments \u0026 pricing, 60 against 50\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- Free to start without a card\n\nWatch for: Version 0.15.69, with 95 release tags after 0.14.2 to 1 November 2026 and breaking minors 0.14.0 and 0.15.0 in that time\n\n### BoxLang AI (B)\n\nGood for: Teams already running BoxLang or modernising CFML on the JVM who want agents, RAG and MCP with approval and guardrails in the same language\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: Runs only on BoxLang, a JVM language, so it suits teams already on BoxLang or CFML rather than Python or TypeScript stacks\n\n\n## Why the edge\n\n### Schema \u0026 documentation: AgentOS +21\n\n- AgentOS (92): Typed TypeScript API with a TypeDoc reference (25). llms.txt on agentos.sh and docs.agentos.sh (10). The guides say which surface to reach for, for example agency-level approval for most apps and workflow nodes for an explicit graph, and the tool-forging docs state what each executor does not isolate (16). Tools take Zod schemas (15). 22 runnable examples and a cookbook, with CLI error codes documented but no single page for the library's error classes found (11). Release notes are generated for every release and published as GitHub releases under written version rules. The CHANGELOG.md on master still stops at 0.13.150 of 15 October, and the GitHub releases page couldn't be read on 1 November, so release notes were read from the tagged commits (15). Framework reading.\n- BoxLang AI (71): Framework reading. A reference page for each built-in function with its arguments, and tool schemas generated from typed function arguments with required fields since 3.3.1. BoxLang is dynamically typed and no published API reference was found, though the repository builds DocBox API docs (15 of 25). llms.txt with about 150 entries and a Markdown copy of every page (10). The FAQ says when to use aiChat() or aiAgent() and the security guide says which guards to use when, though some FAQ links still say coming soon for pages that exist (14 of 20). Tool arguments are typed with required lists, and stdio options a server doesn't have throw InvalidArgument (11 of 15). About 100 example scripts in the repository and a gallery on ai.boxlang.io, but the production guide catches RateLimitException, TimeoutException and AuthenticationException, which the module's source never throws, and there is no exception reference (9 of 15). Keep a Changelog and a release-history page per version, but the 3.6.0 page still read unreleased on 1 November and two old versions appear twice in the changelog (12 of 15). 71 in all.\n\n### Reliability: AgentOS +11\n\n- AgentOS (77): Official npm package with Node 22 or newer stated in package.json on 1 November (20). A public CI workflow builds, lints, type-checks and runs the tests with coverage, and the 12 most recent runs on master on 8 October 2026 passed, per the 8 October check, not re-read on 1 November (25). 16 open issues and pull requests in total, most filed by the maintainer, with one outside suggestion from 12 September unanswered, per the 8 October check, not re-read on 1 November (20). Written release rules give a breaking change a minor version, and a workflow fails a pull request with a breaking-change marker unless a maintainer approves it, but feature commits ship as patches and breaking minors 0.11.0 and 0.12.0 (7 October), 0.13.0 (8 October), 0.14.0 (17 October) and 0.15.0 (21 October, two persona changes marked BREAKING CHANGE) landed within two weeks (12). Version 0.15.69, not declared stable (0). Local-software reading.\n- BoxLang AI (66): Read with the local-software lines. Official package on ForgeBox, installed with `install-bx-module bx-ai` or `box install bx-ai`, with BoxLang 1.14.0 or later in box.json and JDK 21 in CONTRIBUTING.md, but the 3.6 announcement says BoxLang 1.18 or later (18 of 20). tests.yml runs about 140 test classes against Ollama and the vector stores in Docker Compose, and against paid providers on development and releases, on pull requests and pushes to development. Whether runs pass wasn't read, since WebFetch refused github.com (15 of 25). Open issues and replies weren't read for the same reason. The changelog closes issues #182 to #259 in 3.3.1 to 3.4.0, and bugs also go to Ortus's Jira (10 of 25). Keep a Changelog with semantic versioning stated and Migration sections, but breaking changes ship in minor releases (8 of 15). 3.6.0, past 1.0 (15). 66 in all.\n\n### Security \u0026 auth: AgentOS +10\n\n- AgentOS (81): No analytics or telemetry code found in the source, and the privacy and security pages say the runtime sends nothing to the vendor. OpenTelemetry is off by default and the host installs the exporter (30). Approval gates on five triggers, five security tiers and a rule that composed tools chain a side-effecting step only when the host lists it. Agent-written code runs by default in an in-process node:vm context with a 5-second limit and no memory cap, off unless the host enables it. An optional QuickJS executor runs each call in its own WebAssembly instance with a memory cap. No gate is on unless configured (17). SECURITY.md names model output, tool results and retrieved content as untrusted input, and injection detection is an opt-in extension pack. The security page says that pack's default ONNX model has no prompt-injection label, so injection is scored only when that model can't load, and points to a phrase-list guard (11). OpenTelemetry spans, a usage ledger, a reasoning trace and an opt-in signed audit log (15). SECURITY.md with a private advisory form, acknowledgement in 5 business days and disclosure at 90 days, and the site's security page now gives the same times. No security.txt, no bounty and no published advisory found (8). Framework reading.\n- BoxLang AI (71): Framework reading. 30 for what leaves the machine and credentials, 20 for approvals and sandboxing, 15 for prompt injection, 15 for audit and 20 for the security programme. No telemetry in the module's source, requests go only to configured providers, keys come from settings or environment variables, and request logging is off by default. 3.4.0 fixed a Gemini key leaking into logs through the request URL (27 of 30). Approval is enforced in code by HumanInTheLoopMiddleware with five policies, GuardrailMiddleware blocks tools by name and argument pattern, and stdio commands never use a shell. All of it is opt-in. `allowedCommands` allows any executable by default, FileSystemTools allows any path without `allowedPaths`, and the MCP server has no authentication unless configured (12 of 20). Unicode hygiene and fencing of `${context}` are on by default, with opt-in input sanitiser, LLM judge and output guard. Streaming guards detect after the fact, which the changelog says (14 of 15). About 70 interception points, LoggingMiddleware, FlightRecorderMiddleware and MCP server statistics, with no OpenTelemetry export (11 of 15). CONTRIBUTING.md asks for reports to security@ortussolutions.com and the Slack #security channel. No security.txt (410), no bounty, and no published advisory found, while 3.6.0 lists a SQL injection fix in MySQL vector memory under Fixed (7 of 20). 71 in all.\n\n### Payments \u0026 pricing: AgentOS +10\n\n- AgentOS (60): No payment protocol (0). Self-hosted rule. The package is free under Apache 2.0 with nothing to buy (20), installs with no card (20) and needs no account (20). No paid tier of AgentOS was found.\n- BoxLang AI (50): Self-hosted rule, scored on the paid option. No payment protocol (0). BoxLang runtime plans are public without a login, Starter $749 a year and BoxLang+ and BoxLang++ from $1,999 to $4,999 a server or node a year, plan pricing rather than per unit (10). The Apache-2.0 module installs with no card (20) and no account or sign-up (20). 50 in all.\n\n## Score by category\n\n| Category | Weight | AgentOS | BoxLang AI | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 77 | 66 | AgentOS +11 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 92 | 71 | AgentOS +21 |\n| Agent ergonomics | 13% (16.2 this run) | 74 | 74 | even |\n| Security \u0026 auth | 14% (17.5 this run) | 81 | 71 | AgentOS +10 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 50 | AgentOS +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 87 | 83 | AgentOS +4 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 70 | 70 | even |\n| Negative events | ≤15 | -2 | -3 | |\n| **Total** | | **75.8 · BB** | **65.8 · B** | |\n\n## Facts side by side\n\n| Fact | AgentOS | BoxLang AI |\n| --- | --- | --- |\n| Kind | Agent framework | Agent framework |\n| Vendor | Framers Lab, Inc. | Ortus Solutions |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports |  |  |\n| Auth | API key | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | Apache-2.0 | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-31 | 2026-10-20 |\n| Terms last updated | 2025-11-06 | no date given |\n| Privacy policy last updated | 2025-11-06 | no date given |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | not found in the text | not found in the text |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 677 stars, 5.3k npm/wk | none |\n| Agent reviews | 2.8/5 (4) | none |\n\n## How the scores have moved\n\n### AgentOS\n\n- +0.5 on 27 October 2026: checklist\n\n### BoxLang AI\n\nNo score change since it was listed.\n\n## Verdicts\n\n**AgentOS.** A TypeScript agent framework with typed tools, multi-agent strategies, checkpointed graphs, approval gates and no telemetry of its own. It is at 0.15.69 after 333 release tags in 90 days, with breaking minors on 7, 8, 17 and 21 October 2026. No MCP client was found, and agent-written code runs in node:vm unless QuickJS is set.\n\n**BoxLang AI.** A JVM agent framework with human approval, guardrail middleware and an MCP client over HTTP and stdio, all enforced in code, with three releases in the 90 days to 1 November 2026. It runs only on BoxLang, the stronger guards are opt-in, and minor releases have renamed public classes without a deprecation period.\n\n## Before you call either\n\n### AgentOS\n\n1. Pin an exact version of @framers/agentos. Feature commits ship as patch releases while it is 0.x, and breaking changes ship as minors\n2. Leave emergentConfig.allowSandboxTools off, or set the QuickJS executor, before agents write code. The default node:vm executor shares the host process\n3. Pass your own ICheckpointStore to compile() for runs that must survive a restart. The default store is in memory\n4. Set hitl.approvals.beforeTool for tools that write, and choose a handler. No approval gate is on by default\n5. Use Node 22 or newer, and set a provider key such as OPENAI_API_KEY or ANTHROPIC_API_KEY. The provider is detected from the environment\n\n### BoxLang AI\n\n1. Set `mcp.stdio.allowedCommands` to the executables you need. The default empty list lets any command start as a stdio MCP server.\n2. Pass `allowedPaths` when you create FileSystemTools. With none, its tools can read, write and delete anywhere the JVM user can.\n3. Attach HumanInTheLoopMiddleware with a checkpointer for tools that write or spend. Approval is opt-in.\n4. Create MCP clients with `MCP()` rather than the class, since 3.6.0 renamed MCPClient to MCPHttpClient without an alias.\n5. Use the `mock` provider to test agent wiring and guardrails with no API key or network.\n\n## Questions\n\n### Which is better for AI agents, AgentOS or BoxLang AI?\n\nAgentOS scores 75.8 (BB) on agent readiness against BoxLang AI's 65.8 (B), and leads in 5 of 7 scored categories.\n\n### Are AgentOS and BoxLang AI open source?\n\nYes. AgentOS is open source (Apache-2.0). BoxLang AI is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai.json, and with the fewest tokens: https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"agentos\", \"b\": \"boxlang-ai\"}`. From a terminal: `anchor compare agentos boxlang-ai`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/agentos.json and https://www.anchorterminal.com/api/v1/tools/boxlang-ai.json\n\n## Other comparisons with AgentOS or BoxLang AI\n\n- [AgentOS vs Agno](https://www.anchorterminal.com/compare/agentos-vs-agno.md)\n- [AgentOS vs Claude Agent SDK](https://www.anchorterminal.com/compare/agentos-vs-claude-agent-sdk.md)\n- [AgentOS vs CrewAI](https://www.anchorterminal.com/compare/agentos-vs-crewai.md)\n- [AgentOS vs Cursor Agent SDK](https://www.anchorterminal.com/compare/agentos-vs-cursor-agent-sdk.md)\n- [AgentOS vs Docker Agent](https://www.anchorterminal.com/compare/agentos-vs-docker-agent.md)\n- [AgentOS vs Agent Development Kit (ADK)](https://www.anchorterminal.com/compare/agentos-vs-google-adk.md)\n- [AgentOS vs guilds.run](https://www.anchorterminal.com/compare/agentos-vs-guilds-run.md)\n- [AgentOS vs LangGraph](https://www.anchorterminal.com/compare/agentos-vs-langgraph.md)\n- [AgentOS vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/agentos-vs-microsoft-agent-framework.md)\n- [AgentOS vs OpenAI Agents SDK](https://www.anchorterminal.com/compare/agentos-vs-openai-agents-sdk.md)\n- [AgentOS vs Pydantic AI](https://www.anchorterminal.com/compare/agentos-vs-pydantic-ai.md)\n- [AgentOS vs TradingAgents](https://www.anchorterminal.com/compare/agentos-vs-tradingagents.md)\n- [Agno vs BoxLang AI](https://www.anchorterminal.com/compare/agno-vs-boxlang-ai.md)\n- [BoxLang AI vs Claude Agent SDK](https://www.anchorterminal.com/compare/boxlang-ai-vs-claude-agent-sdk.md)\n- [BoxLang AI vs CrewAI](https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai.md)\n- [BoxLang AI vs Cursor Agent SDK](https://www.anchorterminal.com/compare/boxlang-ai-vs-cursor-agent-sdk.md)\n- [BoxLang AI vs Docker Agent](https://www.anchorterminal.com/compare/boxlang-ai-vs-docker-agent.md)\n- [BoxLang AI vs Agent Development Kit (ADK)](https://www.anchorterminal.com/compare/boxlang-ai-vs-google-adk.md)\n- [BoxLang AI vs guilds.run](https://www.anchorterminal.com/compare/boxlang-ai-vs-guilds-run.md)\n- [BoxLang AI vs LangGraph](https://www.anchorterminal.com/compare/boxlang-ai-vs-langgraph.md)\n- [BoxLang AI vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/boxlang-ai-vs-microsoft-agent-framework.md)\n- [BoxLang AI vs OpenAI Agents SDK](https://www.anchorterminal.com/compare/boxlang-ai-vs-openai-agents-sdk.md)\n- [BoxLang AI vs Pydantic AI](https://www.anchorterminal.com/compare/boxlang-ai-vs-pydantic-ai.md)\n- [BoxLang AI vs TradingAgents](https://www.anchorterminal.com/compare/boxlang-ai-vs-tradingagents.md)\n",
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "attributionRequired": true,
    "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-11-02",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.7",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run",
    "terms": "https://www.anchorterminal.com/terms/#data"
  },
  "page": {
    "breadcrumbs": [
      {
        "name": "Home",
        "url": "https://www.anchorterminal.com/"
      },
      {
        "name": "Compare",
        "url": "https://www.anchorterminal.com/compare/"
      },
      {
        "name": "AgentOS vs BoxLang AI",
        "url": ""
      }
    ],
    "description": "AgentOS scores 75.8 (BB) to BoxLang AI's 65.8 (B) for agent frameworks. Prices, MCP, x402, uptime and agent notes side by side.",
    "facts": [
      "AgentOS BB 75.8",
      "BoxLang AI B 65.8",
      "scores"
    ],
    "h1": "AgentOS vs BoxLang AI",
    "image": "https://www.anchorterminal.com/assets/og/default.png",
    "path": "/compare/agentos-vs-boxlang-ai",
    "published": "2026-10-01",
    "section": "tools",
    "title": "AgentOS vs BoxLang AI for AI agents in 2026: scores and prices",
    "toc": null,
    "updated": "2026-11-01",
    "url": "https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai"
  },
  "tokens": {
    "markdown": 4200,
    "slim": 2330
  },
  "version": 1
}
