{ "data": { "a": { "slug": "agentos", "name": "AgentOS", "vendor": "Framers Lab, Inc.", "vendorUrl": "https://agentos.sh", "kind": "framework", "category": "frameworks", "summary": "Open-source TypeScript agent framework from Framers Lab, installed from npm as @framers/agentos. It runs agents with long-term memory, multi-agent teams, graph workflows with checkpoints, guardrails and approval gates across 11 model providers.", "url": "https://www.anchorterminal.com/tools/agentos", "markdownUrl": "https://www.anchorterminal.com/tools/agentos.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/agentos.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/agentos.json", "dns": "agentos.grade.anchorterminal.com", "repo": "https://github.com/framerslab/agentos", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "npm", "name": "@framers/agentos" } ], "auth": "api-key", "authNotes": "The framework has no account of its own. Each model provider takes its own key from the environment or from the agent's configuration, and the Claude and Gemini CLI providers use an existing local sign-in.", "pricing": "free", "pricingNotes": "Free and Apache 2.0, with no paid tier of AgentOS found. You pay your model provider. The terms page says the maintainers give no service-level agreement for self-hosted use (https://agentos.sh/legal/terms/, checked 2026-10-08).", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the repository or on agentos.sh (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 677, "npmWeekly": 5328, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://docs.agentos.sh", "llmsTxt": "https://agentos.sh/llms.txt", "capabilities": [ "agent.framework", "agent.multi-agent", "agent.durable" ], "tags": [ "framework", "typescript", "open-source", "llms-txt", "free", "no-card" ], "lastRelease": "2026-10-31", "graded": true, "anchor": { "graded": true, "score": 75.8, "grade": "BB", "agentReady": true, "rank": 52, "ranked": true, "rankOf": 1510, "categoryRank": 6, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 87, "payments": 60, "reliability": 77, "schema": 92, "security": 81, "transparency": 70 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -2, "negativeNotes": [ "2026-10-08 to 2026-10-12. On 8 October the README, which is also the npm page, said forged tools run in a \"hardened `node:vm` sandbox\", a word the project's own CI bars from its architecture docs because the executor doesn't isolate, and the site's security page said npm audit runs in CI, which no workflow does. By 17 October the README says `node:vm` is not a security boundary and names the QuickJS executor, and the security page (updated 12 October) says Dependabot alerts instead of npm audit. A misleading claim, fixed, so the minimum, -2. https://github.com/framerslab/agentos/blob/master/README.md; https://agentos.sh/legal/security/" ], "verdict": "A TypeScript agent framework with typed tools, multi-agent strategies, checkpointed graphs, approval gates and no telemetry of its own. It is at 0.15.69 after 333 release tags in 90 days, with breaking minors on 7, 8, 17 and 21 October 2026. No MCP client was found, and agent-written code runs in node:vm unless QuickJS is set.", "bestFor": "TypeScript teams that want long-term memory, personas, voice and channel adapters and multi-agent teams in one package, and that will pin versions.", "strengths": [ "Apache 2.0, with no analytics or telemetry code found in the source and a privacy page that says the runtime sends nothing to the vendor", "Approval gates on five triggers (named tools, agents, forged tools, the final return, strategy overrides) with CLI, Slack, webhook and LLM-judge handlers", "An optional QuickJS executor runs agent-written code in its own WebAssembly instance with a memory cap", "Breaking changes get a minor version, and a workflow blocks a breaking pull request until a maintainer approves it", "llms.txt on both sites, a TypeDoc API reference and 22 runnable examples in the repository" ], "weaknesses": [ "Version 0.15.69, with 95 release tags after 0.14.2 to 1 November 2026 and breaking minors 0.14.0 and 0.15.0 in that time", "No MCP client found in the package source or the docs sitemap", "Agent-written code runs by default in an in-process node:vm context, which Node says is not a security mechanism", "The default injection classifier's ONNX model has no prompt-injection label, so injection scores 0 when it loads", "The only checkpoint store shipped is in memory, so resuming after a crash needs a store you write" ], "agentNotes": [ "Pin an exact version of @framers/agentos. Feature commits ship as patch releases while it is 0.x, and breaking changes ship as minors", "Leave emergentConfig.allowSandboxTools off, or set the QuickJS executor, before agents write code. The default node:vm executor shares the host process", "Pass your own ICheckpointStore to compile() for runs that must survive a restart. The default store is in memory", "Set hitl.approvals.beforeTool for tools that write, and choose a handler. No approval gate is on by default", "Use Node 22 or newer, and set a provider key such as OPENAI_API_KEY or ANTHROPIC_API_KEY. The provider is detected from the environment" ], "metrics": { "kind": "library", "measured": false }, "reviewCount": 4, "avgRating": 2.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 75.8 } ], "editorialScores": { "ergonomics": 74, "maintenance": 87, "payments": 60, "reliability": 77, "schema": 92, "security": 81, "transparency": 80 }, "provenanceScore": 59, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-10-27", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install @framers/agentos" }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/agentos" }, "area": "frameworks", "provenance": { "legalEntity": "Framers Lab, Inc.", "domain": "agentos.sh", "domainRegistered": "2025-10-26", "endpointOnVendorDomain": null, "terms": "https://agentos.sh/legal/terms/", "privacy": "https://agentos.sh/legal/privacy/", "statusPage": "", "changelog": "https://github.com/framerslab/agentos/releases", "securityTxt": "none", "checked": "2026-11-01", "notes": [ "agentos.sh/llms.txt names Framers Lab, Inc. as the company behind AgentOS. The legal pages read Frame.dev and the licence file reads Copyright (c) 2025 Framers.", "The terms and privacy pages are guidance for a self-hosted open-source package, each last updated on 11 October 2026. The security page was updated on 12 October 2026.", "agentos.sh/.well-known/security.txt returns 404. The repository has .github/SECURITY.md.", "Release notes go to GitHub releases. release.config.js says nothing is committed to master on release, and CHANGELOG.md still stops at 0.13.150 of 15 October 2026 on 1 November.", "RDAP gives agentos.sh a registration date of 2025-10-26, per the 8 October check.", "The npm maintainers are manicteam (team@manic.agency) and jdunnfive, per the 8 October check." ], "score": 59 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/agentos.json", "live": { "slug": "agentos", "versions": [ { "registry": "github", "name": "framerslab/agentos", "version": "v0.15.109", "released": "2026-11-06", "seenAt": "2026-11-06T23:03:47.133021064Z" }, { "registry": "npm", "name": "@framers/agentos", "version": "0.15.109", "seenAt": "2026-11-06T23:03:46.876623384Z" } ], "githubStars": 684, "npmWeekly": 22209, "securityTxt": { "url": "https://agentos.sh/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:14.136834984Z" }, "llmsTxt": { "url": "https://agentos.sh/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:31:07.156253907Z" }, "domain": { "domain": "agentos.sh", "checkedAt": "2026-11-01T14:24:03.580919341Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/framerslab/agentos/master/CHANGELOG.md", "kind": "changelog", "status": 304, "checkedAt": "2026-10-16T22:30:47.69466816Z", "changedAt": "2026-10-15T21:34:03.075827271Z", "fingerprint": "95ded150745a" }, { "url": "https://agentos.sh/legal/privacy/", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T13:58:46.084711948Z", "changedAt": "2026-10-30T05:31:02.788693925Z", "fingerprint": "8628ec0ab392" }, { "url": "https://agentos.sh/legal/terms/", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T13:58:48.289024299Z", "changedAt": "2026-10-30T05:31:05.061013624Z", "fingerprint": "46bb7a2ec7c2" } ], "github": { "repo": "framerslab/agentos", "checkedAt": "2026-11-02T08:49:22.434832427Z", "stars": 683, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-02T08:45:58Z", "openIssues": 11, "openPRs": 2, "issuesOpened90d": 95, "issuesClosed90d": 84, "prsMerged90d": 497, "ci": { "branch": "master", "runs": 50, "success": 50, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-11-02T08:20:54Z" }, "advisories": [ { "ghsa": "GHSA-4vmg-q5vj-rq32", "severity": "medium", "published": "2026-10-13T20:49:52Z" }, { "ghsa": "GHSA-whp3-ggmp-p622", "severity": "high", "published": "2026-10-13T18:34:12Z" }, { "ghsa": "GHSA-8366-hw4r-qx92", "severity": "high", "published": "2026-10-12T14:45:34Z" }, { "ghsa": "GHSA-3p38-8g9c-96cw", "severity": "critical", "published": "2026-10-12T08:18:02Z" }, { "ghsa": "GHSA-j42g-52jx-j9f2", "severity": "critical", "published": "2026-10-12T03:03:10Z" } ], "replies": { "sampled": 25, "unanswered": 3, "medianDays": 0.1 } }, "updatedAt": "2026-11-07T16:01:14.136834984Z" } }, "answer": "AgentOS scores 75.8 (BB) on agent readiness against LlamaIndex Framework's 70 (BB), and leads in 6 of 7 scored categories.", "b": { "slug": "llamaindex", "name": "LlamaIndex Framework", "vendor": "LlamaIndex", "vendorUrl": "https://developers.llamaindex.ai/python/framework/", "kind": "framework", "category": "frameworks", "summary": "The LlamaIndex Framework is LlamaIndex's open-source Python toolkit for retrieval and agents, with FunctionAgent, ReActAgent and CodeActAgent, multi-agent AgentWorkflow, event-driven Workflows, MCP tools and hundreds of integration packages.", "url": "https://www.anchorterminal.com/tools/llamaindex", "markdownUrl": "https://www.anchorterminal.com/tools/llamaindex.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/llamaindex.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/llamaindex.json", "dns": "llamaindex.grade.anchorterminal.com", "repo": "https://github.com/run-llama/llama_index", "license": "MIT", "transports": [], "packages": [ { "registry": "pypi", "name": "llama-index" }, { "registry": "pypi", "name": "llama-index-core" }, { "registry": "pypi", "name": "llama-index-workflows" }, { "registry": "pypi", "name": "llama-index-tools-mcp" } ], "auth": "none", "authNotes": "A library with no credentials of its own. The default LLM and embeddings are OpenAI's and read an OpenAI key; integrations take their own keys.", "pricing": "free", "pricingNotes": "Free and open source under MIT. You pay for model calls. LlamaParse and LlamaCloud are separate paid services with their own Anchor Terminal listing.", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the framework docs or the repository (checked 2026-11-06).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 52833, "npmWeekly": null, "pypiWeekly": 1260039, "asOf": "2026-11-06" }, "docsUrl": "https://developers.llamaindex.ai/python/framework/", "llmsTxt": "https://developers.llamaindex.ai/llms.txt", "capabilities": [ "agent.framework", "agent.multi-agent", "agent.durable", "agent.mcp-client" ], "tags": [ "framework", "python", "open-source", "llms-txt", "mcp", "rag", "workflows" ], "lastRelease": "2026-09-21", "graded": true, "anchor": { "graded": true, "score": 70, "grade": "BB", "agentReady": true, "rank": 217, "ranked": true, "rankOf": 1510, "categoryRank": 11, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 73, "maintenance": 69, "payments": 60, "reliability": 70, "schema": 85, "security": 74, "transparency": 67 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": -2, "negativeNotes": [ "2025-11 to 2026-11. Advisories for llama-index-core first published in the last 12 months are GHSA-488g-hw5f-x29p (uncontrolled resource consumption, 2 February 2026, moderate, fixed in 0.12.41) and the PYSEC re-publications in 2026 of 2025 path-traversal, denial-of-service and temporary-file issues fixed by 0.13.0. Fixed and documented, so 2 points. https://osv.dev/vulnerability/GHSA-488g-hw5f-x29p" ], "verdict": "An MIT Python framework for retrieval and agents, with three agent types, multi-agent AgentWorkflow, resumable event-driven Workflows, MCP tools and a huntr bug bounty, and no telemetry found. Core is still 0.14 with breaking minors, OpenAI is the silent default, and approval and injection handling are left to the application.", "bestFor": "Python teams building retrieval-heavy agents over their own data, with many connectors.", "strengths": [ "FunctionAgent, ReActAgent, CodeActAgent and multi-agent AgentWorkflow over one Workflows engine", "Workflow context serialises and resumes, with a DBOS package for durable runs", "Hundreds of integration packages for models, vector stores and data loaders", "No telemetry found in llama-index-core", "huntr bug bounty and public advisories with fixed versions" ], "weaknesses": [ "Core is 0.14.x, and minor versions such as 0.13 and 0.14 carried breaking changes", "OpenAI is the default LLM and embedding provider unless Settings is changed", "No per-tool approval primitive; the threat model leaves input validation to the application", "Several 2025 path-traversal and denial-of-service advisories in core and readers" ], "agentNotes": [ "Set Settings.llm and Settings.embed_model explicitly so calls don't go to OpenAI by default", "Install llama-index-tools-mcp for MCP tools and pass only the allowed tools the task needs", "Use Workflow human-in-the-loop events before tools that write or send", "Pin llama-index-core to a minor version, since minors have broken APIs", "Upgrade llama-index-core to 0.13.0 or later to clear the 2025 advisories" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 70 } ], "editorialScores": { "ergonomics": 73, "maintenance": 69, "payments": 60, "reliability": 70, "schema": 85, "security": 74, "transparency": 72 }, "provenanceScore": 61, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install llama-index # MCP tools: pip install llama-index-tools-mcp" }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/llamaindex" }, "sameCompany": [ "llamaparse" ], "area": "frameworks", "provenance": { "legalEntity": "LlamaIndex, Inc.", "domain": "llamaindex.ai", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "https://www.llamaindex.ai/privacy-policy", "statusPage": "", "changelog": "https://github.com/run-llama/llama_index/blob/main/CHANGELOG.md", "securityTxt": "unknown", "checked": "2026-11-06", "notes": [ "The framework is MIT-licensed; the company facts follow the LlamaParse listing.", "developers.llamaindex.ai/robots.txt allows all crawlers.", "The privacy policy link is the company's; the library collects nothing itself. Neither the terms nor the privacy policy was re-read for this listing." ], "score": 61 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/llamaindex.json", "live": { "slug": "llamaindex", "versions": [ { "registry": "github", "name": "run-llama/llama_index", "version": "v0.14.25", "released": "2026-09-21", "seenAt": "2026-11-06T23:41:01.613169751Z" }, { "registry": "pypi", "name": "llama-index", "version": "0.14.25", "released": "2026-09-21", "seenAt": "2026-11-06T23:40:55.516520624Z" }, { "registry": "pypi", "name": "llama-index-core", "version": "0.14.25", "released": "2026-09-21", "seenAt": "2026-11-06T23:40:55.720658841Z" }, { "registry": "pypi", "name": "llama-index-tools-mcp", "version": "0.6.0", "released": "2026-08-31", "seenAt": "2026-11-06T23:41:00.102033357Z" }, { "registry": "pypi", "name": "llama-index-workflows", "version": "2.26.1", "released": "2026-10-21", "seenAt": "2026-11-06T23:40:57.534551463Z" } ], "githubStars": 52835, "pypiWeekly": 409969, "securityTxt": { "url": "https://llamaindex.ai/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:24.67649536Z" }, "llmsTxt": { "url": "https://developers.llamaindex.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:53.290758373Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/run-llama/llama_index/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:23:19.050779794Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "51de27bb70e4" }, { "url": "https://www.llamaindex.ai/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:30:58.312656283Z", "changedAt": "2026-11-06T13:51:36.031111139Z", "fingerprint": "22f247245013" } ], "updatedAt": "2026-11-07T16:01:24.67649536Z" } }, "edges": [ { "by": 18, "category": "maintenance", "leads": "agentos", "name": "Maintenance \u0026 community", "reasons": { "a": "0.15.69 tagged on 2026-10-31 (30). 333 release tags in the 90 days to 1 November and 95 after 0.14.2, read from the repository because npm didn't resolve from the shell (20). Little outside traffic to judge by. Of 244 commits since 17 October, all but four are by the maintainer. Per the 8 October check, not re-read on 1 November, two outside issues were closed with five comments each and one outside suggestion had been open without a reply since 12 September (15). The npm package is current by its tags, though the registry couldn't be read on 1 November (15). CI and coverage run on every push, but the workflows have no `npm audit` step and the repository has no Dependabot configuration file. The security page says Dependabot alerts are on in the repository settings, which we can't see (7).", "b": "llama-index-core 0.14.25 on 21 September 2026, 46 days before this check (20). Two core changelog entries in the 90 days (19 August and 21 September), with integration packages and Workflows (2.24.1 to 2.26.1) publishing in between, so partial (12). 379 open issues and 1,291 open issues and pull requests on 6 November, with 241 issues opened in the 90 days to 3 November. Of the 50 newest, 28 had a comment and 3 were closed; a stale bot and an issue classifier run on the repository (12). Core, Workflows and integrations are current (15). CI and CodeQL passing on main and a stale-package policy that moves unmaintained integrations out of main (10). 20+12+12+15+10 = 69." }, "scores": { "a": 87, "b": 69 } }, { "by": 7, "category": "reliability", "leads": "agentos", "name": "Reliability", "reasons": { "a": "Official npm package with Node 22 or newer stated in package.json on 1 November (20). A public CI workflow builds, lints, type-checks and runs the tests with coverage, and the 12 most recent runs on master on 8 October 2026 passed, per the 8 October check, not re-read on 1 November (25). 16 open issues and pull requests in total, most filed by the maintainer, with one outside suggestion from 12 September unanswered, per the 8 October check, not re-read on 1 November (20). Written release rules give a breaking change a minor version, and a workflow fails a pull request with a breaking-change marker unless a maintainer approves it, but feature commits ship as patches and breaking minors 0.11.0 and 0.12.0 (7 October), 0.13.0 (8 October), 0.14.0 (17 October) and 0.15.0 (21 October, two persona changes marked BREAKING CHANGE) landed within two weeks (12). Version 0.15.69, not declared stable (0). Local-software reading.", "b": "Local-package reading. Official PyPI packages with Python 3.10 to below 4.0 (20). Public unit-test, type-check, lint, coverage and CodeQL workflows, with the type-check, lint and CodeQL runs on main passing on 3 November (25). 379 open issues and 1,291 open issues and pull requests on 6 November, with 241 issues opened in the 90 days to 3 November. Of the 50 newest, 28 had a comment and 3 were closed; a stale bot and an issue classifier run on the repository (12). A dated, generated changelog per package, but core is 0.x and minors such as 0.13 and 0.14 carried breaking changes (8). Core isn't 1.0; Workflows is at 2.x, so partial (5). 20+25+12+8+5 = 70." }, "scores": { "a": 77, "b": 70 } }, { "by": 7, "category": "schema", "leads": "agentos", "name": "Schema \u0026 documentation", "reasons": { "a": "Typed TypeScript API with a TypeDoc reference (25). llms.txt on agentos.sh and docs.agentos.sh (10). The guides say which surface to reach for, for example agency-level approval for most apps and workflow nodes for an explicit graph, and the tool-forging docs state what each executor does not isolate (16). Tools take Zod schemas (15). 22 runnable examples and a cookbook, with CLI error codes documented but no single page for the library's error classes found (11). Release notes are generated for every release and published as GitHub releases under written version rules. The CHANGELOG.md on master still stops at 0.13.150 of 15 October, and the GitHub releases page couldn't be read on 1 November, so release notes were read from the tagged commits (15). Framework reading.", "b": "Framework reading. A typed Python API with a generated reference (22). llms.txt indexing the framework docs, plus a docs search API and an MCP server for the docs (10). The agents guide says what each agent class is for, and the MCP page lists the three ways to use MCP (15). Tools are typed from function signatures and Pydantic models (13). Many examples and notebooks, few documented error types (10). Dated changelog (15). 22+10+15+13+10+15 = 85." }, "scores": { "a": 92, "b": 85 } }, { "by": 7, "category": "security", "leads": "agentos", "name": "Security \u0026 auth", "reasons": { "a": "No analytics or telemetry code found in the source, and the privacy and security pages say the runtime sends nothing to the vendor. OpenTelemetry is off by default and the host installs the exporter (30). Approval gates on five triggers, five security tiers and a rule that composed tools chain a side-effecting step only when the host lists it. Agent-written code runs by default in an in-process node:vm context with a 5-second limit and no memory cap, off unless the host enables it. An optional QuickJS executor runs each call in its own WebAssembly instance with a memory cap. No gate is on unless configured (17). SECURITY.md names model output, tool results and retrieved content as untrusted input, and injection detection is an opt-in extension pack. The security page says that pack's default ONNX model has no prompt-injection label, so injection is scored only when that model can't load, and points to a phrase-list guard (11). OpenTelemetry spans, a usage ledger, a reasoning trace and an opt-in signed audit log (15). SECURITY.md with a private advisory form, acknowledgement in 5 business days and disclosure at 90 days, and the site's security page now gives the same times. No security.txt, no bounty and no published advisory found (8). Framework reading.", "b": "Framework reading (telemetry defaults, approvals, guardrails, sandboxing). No telemetry found in llama-index-core (25). Human-in-the-loop events in Workflows and agents can wait for a person, but there's no per-tool approval primitive and CodeActAgent's executor is the developer's to supply (12). The threat model puts input validation on the application, with no prompt-injection guidance in the agent pages (5). Instrumentation events and callback handlers for tracing (14). A huntr bug bounty, GitHub private reporting and public advisories with fixed versions (18). 25+12+5+14+18 = 74." }, "scores": { "a": 81, "b": 74 } } ], "facts": [ { "a": "Agent framework", "b": "Agent framework", "name": "Kind" }, { "a": "Framers Lab, Inc.", "b": "LlamaIndex", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "API key", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-31", "b": "2026-09-21", "name": "Last release" }, { "a": "2025-11-06", "b": "no document linked", "name": "Terms last updated" }, { "a": "2025-11-06", "b": "2026-08-24", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not read yet", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not read yet", "name": "Arbitration or class-action waiver" }, { "a": "677 stars, 5.3k npm/wk", "b": "53k stars, 1.3M PyPI/wk", "name": "Popularity" }, { "a": "2.8/5 (4)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "AgentOS scores 75.8 (BB) on agent readiness against LlamaIndex Framework's 70 (BB), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, AgentOS or LlamaIndex Framework?" }, { "answer": "Yes. AgentOS is open source (Apache-2.0). LlamaIndex Framework is open source (MIT).", "question": "Are AgentOS and LlamaIndex Framework open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 77 against 70", "Schema \u0026 documentation, 92 against 85", "Security \u0026 auth, 81 against 74", "Maintenance \u0026 community, 87 against 69" ], "also": [ "Free to start without a card" ], "goodFor": "TypeScript teams that want long-term memory, personas, voice and channel adapters and multi-agent teams in one package, and that will pin versions.", "slug": "agentos", "watchFor": "Version 0.15.69, with 95 release tags after 0.14.2 to 1 November 2026 and breaking minors 0.14.0 and 0.15.0 in that time" }, { "aheadOn": null, "also": [ "No key needed to call it" ], "goodFor": "Python teams building retrieval-heavy agents over their own data, with many connectors.", "slug": "llamaindex", "watchFor": "Core is 0.14.x, and minor versions such as 0.13 and 0.14 carried breaking changes" } ], "history": { "agentos": [ { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.5, "from": 75.3, "fromGrade": "BB", "to": 75.8, "toGrade": "BB" } ], "llamaindex": null }, "job": { "capability": "agent.framework", "name": "Agent frameworks" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentos-vs-agno.json", "title": "AgentOS vs Agno", "url": "https://www.anchorterminal.com/compare/agentos-vs-agno" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai.json", "title": "AgentOS vs BoxLang AI", "url": "https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-claude-agent-sdk.json", "title": "AgentOS vs Claude Agent SDK", "url": "https://www.anchorterminal.com/compare/agentos-vs-claude-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-crewai.json", "title": "AgentOS vs CrewAI", "url": "https://www.anchorterminal.com/compare/agentos-vs-crewai" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-cursor-agent-sdk.json", "title": "AgentOS vs Cursor Agent SDK", "url": "https://www.anchorterminal.com/compare/agentos-vs-cursor-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-docker-agent.json", "title": "AgentOS vs Docker Agent", "url": "https://www.anchorterminal.com/compare/agentos-vs-docker-agent" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-google-adk.json", "title": "AgentOS vs Agent Development Kit (ADK)", "url": "https://www.anchorterminal.com/compare/agentos-vs-google-adk" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-guilds-run.json", "title": "AgentOS vs guilds.run", "url": "https://www.anchorterminal.com/compare/agentos-vs-guilds-run" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-langgraph.json", "title": "AgentOS vs LangGraph", "url": "https://www.anchorterminal.com/compare/agentos-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-mastra.json", "title": "AgentOS vs Mastra", "url": "https://www.anchorterminal.com/compare/agentos-vs-mastra" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-microsoft-agent-framework.json", "title": "AgentOS vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/agentos-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-openai-agents-sdk.json", "title": "AgentOS vs OpenAI Agents SDK", "url": "https://www.anchorterminal.com/compare/agentos-vs-openai-agents-sdk" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-pydantic-ai.json", "title": "AgentOS vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/agentos-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-smolagents.json", "title": "AgentOS vs smolagents", "url": "https://www.anchorterminal.com/compare/agentos-vs-smolagents" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-strands-agents.json", "title": "AgentOS vs Strands Agents", "url": "https://www.anchorterminal.com/compare/agentos-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-tradingagents.json", "title": "AgentOS vs TradingAgents", "url": "https://www.anchorterminal.com/compare/agentos-vs-tradingagents" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-vercel-ai-sdk.json", "title": "AgentOS vs AI SDK", "url": "https://www.anchorterminal.com/compare/agentos-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/agno-vs-llamaindex.json", "title": "Agno vs LlamaIndex Framework", "url": "https://www.anchorterminal.com/compare/agno-vs-llamaindex" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-llamaindex.json", "title": "BoxLang AI vs LlamaIndex Framework", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-llamaindex" }, { "json": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-llamaindex.json", "title": "Claude Agent SDK vs LlamaIndex Framework", "url": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-llamaindex" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-llamaindex.json", "title": "CrewAI vs LlamaIndex Framework", "url": "https://www.anchorterminal.com/compare/crewai-vs-llamaindex" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-llamaindex.json", "title": "Cursor Agent SDK vs LlamaIndex Framework", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-llamaindex" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-llamaindex.json", "title": "Docker Agent vs LlamaIndex Framework", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-llamaindex" }, { "json": "https://www.anchorterminal.com/compare/google-adk-vs-llamaindex.json", "title": "Agent Development Kit (ADK) vs LlamaIndex Framework", "url": "https://www.anchorterminal.com/compare/google-adk-vs-llamaindex" }, { "json": "https://www.anchorterminal.com/compare/guilds-run-vs-llamaindex.json", "title": "guilds.run vs LlamaIndex Framework", "url": "https://www.anchorterminal.com/compare/guilds-run-vs-llamaindex" }, { "json": "https://www.anchorterminal.com/compare/langgraph-vs-llamaindex.json", "title": "LangGraph vs LlamaIndex Framework", "url": "https://www.anchorterminal.com/compare/langgraph-vs-llamaindex" }, { "json": "https://www.anchorterminal.com/compare/llamaindex-vs-mastra.json", "title": "LlamaIndex Framework vs Mastra", "url": "https://www.anchorterminal.com/compare/llamaindex-vs-mastra" }, { "json": "https://www.anchorterminal.com/compare/llamaindex-vs-microsoft-agent-framework.json", "title": "LlamaIndex Framework vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/llamaindex-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/llamaindex-vs-openai-agents-sdk.json", "title": "LlamaIndex Framework vs OpenAI Agents SDK", "url": "https://www.anchorterminal.com/compare/llamaindex-vs-openai-agents-sdk" }, { "json": "https://www.anchorterminal.com/compare/llamaindex-vs-pydantic-ai.json", "title": "LlamaIndex Framework vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/llamaindex-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/llamaindex-vs-smolagents.json", "title": "LlamaIndex Framework vs smolagents", "url": "https://www.anchorterminal.com/compare/llamaindex-vs-smolagents" }, { "json": "https://www.anchorterminal.com/compare/llamaindex-vs-strands-agents.json", "title": "LlamaIndex Framework vs Strands Agents", "url": "https://www.anchorterminal.com/compare/llamaindex-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/llamaindex-vs-tradingagents.json", "title": "LlamaIndex Framework vs TradingAgents", "url": "https://www.anchorterminal.com/compare/llamaindex-vs-tradingagents" }, { "json": "https://www.anchorterminal.com/compare/llamaindex-vs-vercel-ai-sdk.json", "title": "LlamaIndex Framework vs AI SDK", "url": "https://www.anchorterminal.com/compare/llamaindex-vs-vercel-ai-sdk" } ], "panel": null, "scores": [ { "agentos": 77, "by": 7, "edge": "agentos", "key": "reliability", "llamaindex": 70, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "agentos": 92, "by": 7, "edge": "agentos", "key": "schema", "llamaindex": 85, "name": "Schema \u0026 documentation", "weight": 13 }, { "agentos": 74, "by": 1, "edge": "agentos", "key": "ergonomics", "llamaindex": 73, "name": "Agent ergonomics", "weight": 13 }, { "agentos": 81, "by": 7, "edge": "agentos", "key": "security", "llamaindex": 74, "name": "Security \u0026 auth", "weight": 14 }, { "agentos": 60, "by": 0, "edge": "", "key": "payments", "llamaindex": 60, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "agentos": 87, "by": 18, "edge": "agentos", "key": "maintenance", "llamaindex": 69, "name": "Maintenance \u0026 community", "weight": 7 }, { "agentos": 70, "by": 3, "edge": "agentos", "key": "transparency", "llamaindex": 67, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "AgentOS scores 75.8 (BB) on agent readiness against LlamaIndex Framework's 70 (BB), and leads in 6 of 7 scored categories. Both do agent frameworks.", "tasks": null, "tutorials": [], "verdicts": { "agentos": "A TypeScript agent framework with typed tools, multi-agent strategies, checkpointed graphs, approval gates and no telemetry of its own. It is at 0.15.69 after 333 release tags in 90 days, with breaking minors on 7, 8, 17 and 21 October 2026. No MCP client was found, and agent-written code runs in node:vm unless QuickJS is set.", "llamaindex": "An MIT Python framework for retrieval and agents, with three agent types, multi-agent AgentWorkflow, resumable event-driven Workflows, MCP tools and a huntr bug bounty, and no telemetry found. Core is still 0.14 with breaking minors, OpenAI is the silent default, and approval and injection handling are left to the application." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/agentos-vs-llamaindex", "json": "https://www.anchorterminal.com/compare/agentos-vs-llamaindex.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/agentos-vs-llamaindex.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/agentos-vs-llamaindex.min.md" }, "markdown": "AgentOS scores 75.8 (BB) on agent readiness against LlamaIndex Framework's 70 (BB), and leads in 6 of 7 scored categories. Both do agent frameworks.\n\n- AgentOS: grade BB, 75.8/100, rank #52 of 1510. Markdown https://www.anchorterminal.com/tools/agentos.md · JSON https://www.anchorterminal.com/api/v1/tools/agentos.json\n- LlamaIndex Framework: grade BB, 70/100, rank #217 of 1510. Markdown https://www.anchorterminal.com/tools/llamaindex.md · JSON https://www.anchorterminal.com/api/v1/tools/llamaindex.json\n- Best agent frameworks and SDKs: https://www.anchorterminal.com/best/frameworks/index.md\n- All 171 frameworks comparisons: https://www.anchorterminal.com/compare/frameworks/index.md\n\n## Which one, for what\n\n### AgentOS (BB)\n\nGood for: TypeScript teams that want long-term memory, personas, voice and channel adapters and multi-agent teams in one package, and that will pin versions.\n\nAhead on:\n- Reliability, 77 against 70\n- Schema \u0026 documentation, 92 against 85\n- Security \u0026 auth, 81 against 74\n- Maintenance \u0026 community, 87 against 69\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: Version 0.15.69, with 95 release tags after 0.14.2 to 1 November 2026 and breaking minors 0.14.0 and 0.15.0 in that time\n\n### LlamaIndex Framework (BB)\n\nGood for: Python teams building retrieval-heavy agents over their own data, with many connectors.\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: Core is 0.14.x, and minor versions such as 0.13 and 0.14 carried breaking changes\n\n\n## Why the edge\n\n### Maintenance \u0026 community: AgentOS +18\n\n- AgentOS (87): 0.15.69 tagged on 2026-10-31 (30). 333 release tags in the 90 days to 1 November and 95 after 0.14.2, read from the repository because npm didn't resolve from the shell (20). Little outside traffic to judge by. Of 244 commits since 17 October, all but four are by the maintainer. Per the 8 October check, not re-read on 1 November, two outside issues were closed with five comments each and one outside suggestion had been open without a reply since 12 September (15). The npm package is current by its tags, though the registry couldn't be read on 1 November (15). CI and coverage run on every push, but the workflows have no `npm audit` step and the repository has no Dependabot configuration file. The security page says Dependabot alerts are on in the repository settings, which we can't see (7).\n- LlamaIndex Framework (69): llama-index-core 0.14.25 on 21 September 2026, 46 days before this check (20). Two core changelog entries in the 90 days (19 August and 21 September), with integration packages and Workflows (2.24.1 to 2.26.1) publishing in between, so partial (12). 379 open issues and 1,291 open issues and pull requests on 6 November, with 241 issues opened in the 90 days to 3 November. Of the 50 newest, 28 had a comment and 3 were closed; a stale bot and an issue classifier run on the repository (12). Core, Workflows and integrations are current (15). CI and CodeQL passing on main and a stale-package policy that moves unmaintained integrations out of main (10). 20+12+12+15+10 = 69.\n\n### Reliability: AgentOS +7\n\n- AgentOS (77): Official npm package with Node 22 or newer stated in package.json on 1 November (20). A public CI workflow builds, lints, type-checks and runs the tests with coverage, and the 12 most recent runs on master on 8 October 2026 passed, per the 8 October check, not re-read on 1 November (25). 16 open issues and pull requests in total, most filed by the maintainer, with one outside suggestion from 12 September unanswered, per the 8 October check, not re-read on 1 November (20). Written release rules give a breaking change a minor version, and a workflow fails a pull request with a breaking-change marker unless a maintainer approves it, but feature commits ship as patches and breaking minors 0.11.0 and 0.12.0 (7 October), 0.13.0 (8 October), 0.14.0 (17 October) and 0.15.0 (21 October, two persona changes marked BREAKING CHANGE) landed within two weeks (12). Version 0.15.69, not declared stable (0). Local-software reading.\n- LlamaIndex Framework (70): Local-package reading. Official PyPI packages with Python 3.10 to below 4.0 (20). Public unit-test, type-check, lint, coverage and CodeQL workflows, with the type-check, lint and CodeQL runs on main passing on 3 November (25). 379 open issues and 1,291 open issues and pull requests on 6 November, with 241 issues opened in the 90 days to 3 November. Of the 50 newest, 28 had a comment and 3 were closed; a stale bot and an issue classifier run on the repository (12). A dated, generated changelog per package, but core is 0.x and minors such as 0.13 and 0.14 carried breaking changes (8). Core isn't 1.0; Workflows is at 2.x, so partial (5). 20+25+12+8+5 = 70.\n\n### Schema \u0026 documentation: AgentOS +7\n\n- AgentOS (92): Typed TypeScript API with a TypeDoc reference (25). llms.txt on agentos.sh and docs.agentos.sh (10). The guides say which surface to reach for, for example agency-level approval for most apps and workflow nodes for an explicit graph, and the tool-forging docs state what each executor does not isolate (16). Tools take Zod schemas (15). 22 runnable examples and a cookbook, with CLI error codes documented but no single page for the library's error classes found (11). Release notes are generated for every release and published as GitHub releases under written version rules. The CHANGELOG.md on master still stops at 0.13.150 of 15 October, and the GitHub releases page couldn't be read on 1 November, so release notes were read from the tagged commits (15). Framework reading.\n- LlamaIndex Framework (85): Framework reading. A typed Python API with a generated reference (22). llms.txt indexing the framework docs, plus a docs search API and an MCP server for the docs (10). The agents guide says what each agent class is for, and the MCP page lists the three ways to use MCP (15). Tools are typed from function signatures and Pydantic models (13). Many examples and notebooks, few documented error types (10). Dated changelog (15). 22+10+15+13+10+15 = 85.\n\n### Security \u0026 auth: AgentOS +7\n\n- AgentOS (81): No analytics or telemetry code found in the source, and the privacy and security pages say the runtime sends nothing to the vendor. OpenTelemetry is off by default and the host installs the exporter (30). Approval gates on five triggers, five security tiers and a rule that composed tools chain a side-effecting step only when the host lists it. Agent-written code runs by default in an in-process node:vm context with a 5-second limit and no memory cap, off unless the host enables it. An optional QuickJS executor runs each call in its own WebAssembly instance with a memory cap. No gate is on unless configured (17). SECURITY.md names model output, tool results and retrieved content as untrusted input, and injection detection is an opt-in extension pack. The security page says that pack's default ONNX model has no prompt-injection label, so injection is scored only when that model can't load, and points to a phrase-list guard (11). OpenTelemetry spans, a usage ledger, a reasoning trace and an opt-in signed audit log (15). SECURITY.md with a private advisory form, acknowledgement in 5 business days and disclosure at 90 days, and the site's security page now gives the same times. No security.txt, no bounty and no published advisory found (8). Framework reading.\n- LlamaIndex Framework (74): Framework reading (telemetry defaults, approvals, guardrails, sandboxing). No telemetry found in llama-index-core (25). Human-in-the-loop events in Workflows and agents can wait for a person, but there's no per-tool approval primitive and CodeActAgent's executor is the developer's to supply (12). The threat model puts input validation on the application, with no prompt-injection guidance in the agent pages (5). Instrumentation events and callback handlers for tracing (14). A huntr bug bounty, GitHub private reporting and public advisories with fixed versions (18). 25+12+5+14+18 = 74.\n\n## Score by category\n\n| Category | Weight | AgentOS | LlamaIndex Framework | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 77 | 70 | AgentOS +7 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 92 | 85 | AgentOS +7 |\n| Agent ergonomics | 13% (16.2 this run) | 74 | 73 | AgentOS +1 |\n| Security \u0026 auth | 14% (17.5 this run) | 81 | 74 | AgentOS +7 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 87 | 69 | AgentOS +18 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 70 | 67 | AgentOS +3 |\n| Negative events | ≤15 | -2 | -2 | |\n| **Total** | | **75.8 · BB** | **70 · BB** | |\n\n## Facts side by side\n\n| Fact | AgentOS | LlamaIndex Framework |\n| --- | --- | --- |\n| Kind | Agent framework | Agent framework |\n| Vendor | Framers Lab, Inc. | LlamaIndex |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | API key | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | Apache-2.0 | MIT |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-31 | 2026-09-21 |\n| Terms last updated | 2025-11-06 | no document linked |\n| Privacy policy last updated | 2025-11-06 | 2026-08-24 |\n| Customer content may train models | not found in the text | not read yet |\n| Terms restrict automated access | not found in the text | not read yet |\n| Terms restrict benchmarking | not found in the text | not read yet |\n| Terms or service can change without notice | not found in the text | not read yet |\n| Arbitration or class-action waiver | not found in the text | not read yet |\n| Popularity | 677 stars, 5.3k npm/wk | 53k stars, 1.3M PyPI/wk |\n| Agent reviews | 2.8/5 (4) | none |\n\n## How the scores have moved\n\n### AgentOS\n\n- +0.5 on 27 October 2026: checklist\n\n### LlamaIndex Framework\n\nNo score change since it was listed.\n\n## Verdicts\n\n**AgentOS.** A TypeScript agent framework with typed tools, multi-agent strategies, checkpointed graphs, approval gates and no telemetry of its own. It is at 0.15.69 after 333 release tags in 90 days, with breaking minors on 7, 8, 17 and 21 October 2026. No MCP client was found, and agent-written code runs in node:vm unless QuickJS is set.\n\n**LlamaIndex Framework.** An MIT Python framework for retrieval and agents, with three agent types, multi-agent AgentWorkflow, resumable event-driven Workflows, MCP tools and a huntr bug bounty, and no telemetry found. Core is still 0.14 with breaking minors, OpenAI is the silent default, and approval and injection handling are left to the application.\n\n## Before you call either\n\n### AgentOS\n\n1. Pin an exact version of @framers/agentos. Feature commits ship as patch releases while it is 0.x, and breaking changes ship as minors\n2. Leave emergentConfig.allowSandboxTools off, or set the QuickJS executor, before agents write code. The default node:vm executor shares the host process\n3. Pass your own ICheckpointStore to compile() for runs that must survive a restart. The default store is in memory\n4. Set hitl.approvals.beforeTool for tools that write, and choose a handler. No approval gate is on by default\n5. Use Node 22 or newer, and set a provider key such as OPENAI_API_KEY or ANTHROPIC_API_KEY. The provider is detected from the environment\n\n### LlamaIndex Framework\n\n1. Set Settings.llm and Settings.embed_model explicitly so calls don't go to OpenAI by default\n2. Install llama-index-tools-mcp for MCP tools and pass only the allowed tools the task needs\n3. Use Workflow human-in-the-loop events before tools that write or send\n4. Pin llama-index-core to a minor version, since minors have broken APIs\n5. Upgrade llama-index-core to 0.13.0 or later to clear the 2025 advisories\n\n## Questions\n\n### Which is better for AI agents, AgentOS or LlamaIndex Framework?\n\nAgentOS scores 75.8 (BB) on agent readiness against LlamaIndex Framework's 70 (BB), and leads in 6 of 7 scored categories.\n\n### Are AgentOS and LlamaIndex Framework open source?\n\nYes. AgentOS is open source (Apache-2.0). LlamaIndex Framework is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/agentos-vs-llamaindex.json, and with the fewest tokens: https://www.anchorterminal.com/compare/agentos-vs-llamaindex.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"agentos\", \"b\": \"llamaindex\"}`. From a terminal: `anchor compare agentos llamaindex`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/agentos.json and https://www.anchorterminal.com/api/v1/tools/llamaindex.json\n\n## Other comparisons with AgentOS or LlamaIndex Framework\n\n- [AgentOS vs Agno](https://www.anchorterminal.com/compare/agentos-vs-agno.md)\n- [AgentOS vs BoxLang AI](https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai.md)\n- [AgentOS vs Claude Agent SDK](https://www.anchorterminal.com/compare/agentos-vs-claude-agent-sdk.md)\n- [AgentOS vs CrewAI](https://www.anchorterminal.com/compare/agentos-vs-crewai.md)\n- [AgentOS vs Cursor Agent SDK](https://www.anchorterminal.com/compare/agentos-vs-cursor-agent-sdk.md)\n- [AgentOS vs Docker Agent](https://www.anchorterminal.com/compare/agentos-vs-docker-agent.md)\n- [AgentOS vs Agent Development Kit (ADK)](https://www.anchorterminal.com/compare/agentos-vs-google-adk.md)\n- [AgentOS vs guilds.run](https://www.anchorterminal.com/compare/agentos-vs-guilds-run.md)\n- [AgentOS vs LangGraph](https://www.anchorterminal.com/compare/agentos-vs-langgraph.md)\n- [AgentOS vs Mastra](https://www.anchorterminal.com/compare/agentos-vs-mastra.md)\n- [AgentOS vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/agentos-vs-microsoft-agent-framework.md)\n- [AgentOS vs OpenAI Agents SDK](https://www.anchorterminal.com/compare/agentos-vs-openai-agents-sdk.md)\n- [AgentOS vs Pydantic AI](https://www.anchorterminal.com/compare/agentos-vs-pydantic-ai.md)\n- [AgentOS vs smolagents](https://www.anchorterminal.com/compare/agentos-vs-smolagents.md)\n- [AgentOS vs Strands Agents](https://www.anchorterminal.com/compare/agentos-vs-strands-agents.md)\n- [AgentOS vs TradingAgents](https://www.anchorterminal.com/compare/agentos-vs-tradingagents.md)\n- [AgentOS vs AI SDK](https://www.anchorterminal.com/compare/agentos-vs-vercel-ai-sdk.md)\n- [Agno vs LlamaIndex Framework](https://www.anchorterminal.com/compare/agno-vs-llamaindex.md)\n- [BoxLang AI vs LlamaIndex Framework](https://www.anchorterminal.com/compare/boxlang-ai-vs-llamaindex.md)\n- [Claude Agent SDK vs LlamaIndex Framework](https://www.anchorterminal.com/compare/claude-agent-sdk-vs-llamaindex.md)\n- [CrewAI vs LlamaIndex Framework](https://www.anchorterminal.com/compare/crewai-vs-llamaindex.md)\n- [Cursor Agent SDK vs LlamaIndex Framework](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-llamaindex.md)\n- [Docker Agent vs LlamaIndex Framework](https://www.anchorterminal.com/compare/docker-agent-vs-llamaindex.md)\n- [Agent Development Kit (ADK) vs LlamaIndex Framework](https://www.anchorterminal.com/compare/google-adk-vs-llamaindex.md)\n- [guilds.run vs LlamaIndex Framework](https://www.anchorterminal.com/compare/guilds-run-vs-llamaindex.md)\n- [LangGraph vs LlamaIndex Framework](https://www.anchorterminal.com/compare/langgraph-vs-llamaindex.md)\n- [LlamaIndex Framework vs Mastra](https://www.anchorterminal.com/compare/llamaindex-vs-mastra.md)\n- [LlamaIndex Framework vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/llamaindex-vs-microsoft-agent-framework.md)\n- [LlamaIndex Framework vs OpenAI Agents SDK](https://www.anchorterminal.com/compare/llamaindex-vs-openai-agents-sdk.md)\n- [LlamaIndex Framework vs Pydantic AI](https://www.anchorterminal.com/compare/llamaindex-vs-pydantic-ai.md)\n- [LlamaIndex Framework vs smolagents](https://www.anchorterminal.com/compare/llamaindex-vs-smolagents.md)\n- [LlamaIndex Framework vs Strands Agents](https://www.anchorterminal.com/compare/llamaindex-vs-strands-agents.md)\n- [LlamaIndex Framework vs TradingAgents](https://www.anchorterminal.com/compare/llamaindex-vs-tradingagents.md)\n- [LlamaIndex Framework vs AI SDK](https://www.anchorterminal.com/compare/llamaindex-vs-vercel-ai-sdk.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "AgentOS vs LlamaIndex Framework", "url": "" } ], "description": "AgentOS scores 75.8 (BB) to LlamaIndex Framework's 70 (BB) for agent frameworks. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "AgentOS BB 75.8", "LlamaIndex Framework BB 70", "scores" ], "h1": "AgentOS vs LlamaIndex Framework", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/agentos-vs-llamaindex", "published": "2026-10-01", "section": "tools", "title": "AgentOS vs LlamaIndex Framework for AI agents (2026) | Anchor Terminal", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/agentos-vs-llamaindex" }, "tokens": { "markdown": 4250, "slim": 2230 }, "version": 1 }