# Airtop vs Kernel (slim)

> Kernel scores 66.9 (B) to Airtop's 54.5 (C) for browser automation. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/airtop-vs-kernel.md (~5,200 tokens) · this version ~2,980 tokens · JSON https://www.anchorterminal.com/compare/airtop-vs-kernel.json · canonical https://www.anchorterminal.com/compare/airtop-vs-kernel
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-07
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

Kernel scores 66.9 (B) on agent readiness against Airtop's 54.5 (C), and leads in 5 of 7 scored categories. Airtop leads on reliability. Both do browser automation.

- Airtop: C 54.5, rank #908 of 1510 · https://www.anchorterminal.com/tools/airtop.min.md
- Kernel: B 66.9, rank #352 of 1510 · https://www.anchorterminal.com/tools/kernel.min.md
- Airtop, good for Agents that need a hosted browser with natural-language page calls, saved logins handed over by a person, and proxies and CAPTCHA solving in one service. Ahead on Reliability, 69 against 53. Also No incidents deducted, where Kernel loses 8 points for them.
- Kernel, good for Agents that need hosted, logged-in browsers at scale with stealth and proxies. browserbase, steel, hyperbrowser and anchor-browser are the nearest listings. Ahead on Schema & documentation, 93 against 76; Agent ergonomics, 84 against 65; Security & auth, 81 against 46; Payments & pricing, 65 against 25; Maintenance & community, 90 against 14.

| Category | Airtop | Kernel |
| --- | --- | --- |
| Reliability (16%) | 69 | 53 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 76 | 93 |
| Agent ergonomics (13%) | 65 | 84 |
| Security & auth (14%) | 46 | 81 |
| Payments & pricing (10%) | 25 | 65 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 14 | 90 |
| Transparency & trust (7%) | 62 | 61 |

| Fact (where they differ) | Airtop | Kernel |
| --- | --- | --- |
| Vendor | Switchboard Visual Technologies, Inc. (dba Airtop) | Kernel Technologies, Inc. |
| Hosted endpoint | `https://api.airtop.ai/api` | `https://mcp.onkernel.com/mcp` |
| Transports | HTTP | Streamable HTTP |
| Auth | API key | OAuth or key |
| Pricing | Freemium | Pay per use |
| Licence | Proprietary cloud service under Airtop's terms of use. The Node and Python SDKs are MIT per npm and PyPI | none |
| Tools exposed | none | 32 |
| MCP registry | not listed | `com.onkernel/kernel-mcp-server` |
| Last release | 2025-11-06 | 2026-11-06 |
| Terms last updated | 2025-07-29 | 2026-09-01 |
| Privacy policy last updated | 2025-09-02 | 2026-09-15 |
| Arbitration or class-action waiver | yes | not found in the text |
| Popularity | 16 stars, 16k npm/wk | none |

Why the edge:
- Maintenance & community, Kernel +76: Airtop 14 (Graded on the browser API. The newest stable release is the Node SDK's 0.1.47, tagged on 6 November 2025, 363 days before the check. The 1.0.0-alpha2 Node line (last published 1 July 2026 per the 8 October check) is a pre-release and doesn't count, the Python SDK's last tag is 0.0.49 (23 April 2025) and the docs changelog ends on 3 September 2025 (0). No three releases or dated entries since 6 August; the Agent Skill's commits of March 2026 are untagged (0). Support is by Discord and email. On GitHub the Node SDK had an issue from February 2025 still open and six pull requests open since early 2025, per the 8 October check, not re-read on 4 November (5). Official SDKs exist but the Python one was last released on 23 April 2025, and no Airtop server is in the MCP registry (6). Both SDK repositories carry CI workflows whose results were not read (3). 0 + 0 + 5 + 6 + 3 = 14.); Kernel 90 (The changelog's latest entry is 16 October 2026 and the MCP server repository has commits on 6 November (30). More than three dated changes in 90 days, scoped keys, memory tiers, GPU tier and card payments among them (20). A closed service with a public changelog, Discord, email support and an open-source MCP server with 210 commits since 8 August (15). Official SDKs in three languages, and the MCP server in the registry as com.onkernel/kernel-mcp-server 1.1.0 (15). CI and tests in the MCP repository (10). 30 + 20 + 15 + 15 + 10 = 90.)
- Payments & pricing, Kernel +40: Airtop 25 (No x402, MPP or L402 in the docs, the OpenAPI document or the pricing page (0). Plan prices are public, $0, $29, $189 and $558 a month with stated credit allowances, unchanged on 4 November, but the credits charged for browser time, proxy traffic and AI calls are not published, so plan-only (10). The Free plan renews 1,000 credits a month. Whether signup asks for a card is not stated on the pricing page or in the docs, so 15 of 20, partly met, kept. A person has to sign up in a browser to get a key (0). 0 + 10 + 15 + 0 = 25.); Kernel 65 (MPP on POST /mpp/browsers, a 402 challenge paid with a Stripe shared payment token through Link, covering one browser product only, not the API or MCP server (20). Per-second prices public without a login (20). The Developer plan is free with $5 of monthly credit, but whether signup needs a card wasn't stated on the pages read (10). Through MPP an agent gets a browser with no account or key, though a person approves each Link payment (15). 20 + 20 + 10 + 15 = 65.)
- Security & auth, Kernel +35: Airtop 46 (API keys from the portal, sent as a Bearer header on REST, CDP and Selenium, so no secret travels in a URL. Scopes, expiry and rotation were not found in the reviewed documentation, and the portal's key page sits behind login (18). No read-only keys or approval step. A person can log in through Live View so the agent never holds the password, profiles are encrypted at rest with AES-256, each browser runs in its own virtual machine per the docs, and credit thresholds cap a call (8). The API returns untrusted page content and runs models over it, and no prompt-injection guidance was found (0). Optional session recordings, a sessions page with logs in the portal, and credit usage and a request ID on every AI response (10). Airtop states SOC 2 Type II and HIPAA compliance, and the pricing page lists the SOC 2 Type 2 report on the Enterprise plan. The Vanta trust centre at trust.airtop.ai needs JavaScript and was not read. www.airtop.ai/.well-known/security.txt still returns 404, and no disclosure policy or bug bounty was found. No advisory for `@airtop/sdk` or `airtop` on OSV (10). 18 + 8 + 0 + 10 + 10 = 46.); Kernel 81 (Scoped API keys with resource and action policies, project scoping and expiry, and OAuth 2.1 for MCP with project-limited tokens (30). Least privilege through scoped keys, a payment cap for cards through the MCP server and vault writes that need their own action (16). Pages an agent browses are untrusted, and we found no prompt-injection guidance in the docs read (4). Audit log search and export on Start-Up and above (13). SOC 2 Type II, HIPAA, PCI DSS and ISO 27001 on the security page and a HackerOne bounty (18). 30 + 16 + 4 + 13 + 18 = 81, before the deduction for the November 2026 incident.)
- Agent ergonomics, Kernel +19: Airtop 65 (AI calls return an answer shaped by the prompt and an optional `outputSchema`, with `costThresholdCredits` and `timeThresholdSeconds` to bound a call. Scrape returns the page content without field selection (18). Sessions list by `offset` and `limit` with a default of 10 and filters for status and IDs, files list the same way, and `paginated-extraction` follows a site's own pages (15). Responses share a documented envelope with `errors` and `warnings` carrying `message`, `code` and `reason`, and AI calls report success, partial or failure. The codes are not listed (12). No idempotency keys. `clientRequestId` is echoed for correlation, and async variants return a request ID to poll (7). A session needs no parameters, and there are official Node and Python SDKs, the Python one last released in April 2025 (13). 18 + 15 + 12 + 7 + 13 = 65.); Kernel 84 (Graded mainly on the API, with the MCP server noted. Responses are scoped per resource and the MCP server groups actions into about 32 tools (18). List endpoints page with limit and offset and filter by status (18). Typed SDK errors and documented 409 on concurrent changes, 204 on a pool timeout and 429 (17). Retrying an MPP purchase with the same credential returns the same browser, and the MCP tools carry readOnlyHint where read-only (16). SDKs in TypeScript, Python and Go plus a CLI, with defaults such as a 60-second timeout (15). 18 + 18 + 17 + 16 + 15 = 84.)
- Schema & documentation, Kernel +17: Airtop 76 (OpenAPI 3.1 at docs.airtop.ai/openapi.json with 31 paths and 39 operations and a Bearer scheme, unchanged on 4 November (25). llms.txt and a Markdown twin of every docs page (10). 32 of 39 operations carry a description, parameter descriptions are long and specific, and the two deprecated endpoints name their replacement. Few say when not to use a call (13). Inputs carry 18 enums, required fields and bounds such as `timeoutMinutes` from 1 to 10,080, but `outputSchema` is a JSON Schema passed as a string and the proxy setting is loosely typed (11). The Markdown reference shows request and response examples. The spec declares error responses on 5 of 39 operations and no 429 anywhere, and no list of issue codes was found (8). Paths are versioned under /v1 and a dated changelog is public, but its last entry is still 3 September 2025 (9). 25 + 10 + 13 + 11 + 8 + 9 = 76.); Kernel 93 (OpenAPI at kernel.sh/openapi.json and per-endpoint Markdown reference (25). llms.txt with 423 entries and a Markdown twin for each page (10). Endpoint descriptions say when to use alternatives ("For interactive browsing, use GET /audit-logs", pools for bursty traffic) (17). Typed parameters with enums and limits such as memory sizes and timeout maximums (13). Code samples in TypeScript, Python and Go, and documented status codes such as 409 and 204 on pool acquire (13). A dated public changelog and SDK changelogs (15). 25 + 10 + 17 + 13 + 13 + 15 = 93.)
- Reliability, Airtop +16: Airtop 69 (Graded as a hosted service, on the cloud browser API. status.airtop.ai runs on Instatus with 90 days of history, though it lists a single component, App (20). Between 6 August and 4 November 2026 its feed records no incident, only 30 minutes of scheduled maintenance on 18 August, announced at 20:37 UTC for a 23:30 start with a stated 30-minute duration, which is maintenance, not an incident. The proxies incident of 1 July falls outside the window (30). No request rate limit was found in the reviewed documentation. The pricing page gives simultaneous sessions per plan, 3, 30 and 100 (5). No 429 or backoff guidance and no idempotency keys were found. The SDK helpers retry twice by default and the CDP guides table a 503 for sessions that cannot be reached, partly met, kept (4). No SLA found for any plan (0). The API is at /v1 and sessions and windows are not marked beta, though form filling is (10). 20 + 30 + 5 + 4 + 0 + 10 = 69.); Kernel 53 (Hosted reading. status.kernel.sh on incident.io with a public incident feed (20). In the 90 days from 8 August it lists browser connection failures on 10 September (54 minutes, major), frozen popups on 1 October (71 minutes, major), elevated API errors on 19 October (4 minutes, critical), proxy failures on 23 October (65 minutes, major) and browser creation errors on 4 November (29 minutes, major), plus minor ones. Several majors, two of them an hour or more (0). Rate limits are per organisation with headers on every response, and concurrency is published per plan, but the create-rate numbers aren't (8). 429 with Retry-After, SDK retries with a typed error, safe retry with the same MPP credential and 409 on concurrent pool changes (15). The terms mention service levels in an order form but no public SLA was found (0). The API and MCP server carry no beta label (10). 20 + 0 + 8 + 15 + 0 + 10 = 53.)