Antseed vs LiteLLM

Antseed 55

No OpenAPI document found in the repository or docs. The proxy copies the OpenAI and Anthropic wire formats (0 of 25). llms.txt at antseed.com/llms.txt and a setup skill at /skill.md (10). The API guide states what each route is for, how routing picks a seller and when to pin one (14 of 20). Request bodies follow the upstream formats, and /v1/models reports context length, modalities, tool use and supported parameters per seller (8 of 15). Curl examples for each format and an error table with status, code, meaning and fix (13 of 15). A public changelog and tagged releases, with recent entries under an undated Unreleased heading (10 of 15). Docs per the 8 October check, not re-read on 4 November, because the terms of 9 October 2026 bar scripts that scrape or mine data from the Offerings, which include the documentation.

LiteLLM 91

Every gateway serves Swagger at /, ReDoc at /redoc and the raw schema at /openapi.json, and the docs host a public Swagger explorer (25). llms.txt, llms-full.txt and a Markdown twin of every page via .md (10). Pages say what a feature is for and where its limits are, and the key-auth page explains how permissions are inherited and where they aren't, but the reference is very large for a model to navigate (16 of 20). OpenAI-shaped request schemas from Pydantic models, with metadata, litellm_params and config blocks left as free-form objects (10 of 15). A full error reference with the envelope, every status, response headers and how to tell gateway limits from provider limits, plus examples on every page (15). Release notes per version with dates, newest v1.108.0 and v1.106.7 on 4 November 2026 (15).

Antseed 45

Model reading. The local proxy has no key and binds to 127.0.0.1. One secp256k1 key is identity and wallet, stored in plain text by the CLI unless supplied by environment variable, and encrypted by the OS keychain in the desktop app. Spending is bounded by a deposit contract, a capped ReserveAuth per seller and an optional separate withdrawal wallet, and gateway keys are hashed, revocable and spend-limited (18 of 30). Sellers are independent, and the FAQ says a standard seller can read prompts and sets its own practices (5 of 20). No central log, and an optional TEE-verified route with attestation checked on the buyer's machine (8 of 15). Seller, token and cost headers per response, antseed buyer metering and a Prometheus exporter (12 of 15). The buyer proxy stopped forwarding client credentials to sellers in v0.2.58 (12 October 2026). No SECURITY.md in the 4 November clone; no security.txt, published advisory, bug bounty, certification or contract audit report found. The repository holds one automated review of the buyer proxy dated 8 March 2026 (2 of 20). Docs per the 8 October check, not re-read on 4 November, because the terms of 9 October 2026 bar scripts that scrape or mine data from the Offerings, which include the documentation.

LiteLLM 72

Read with the tool checklist for self-hosted software. Virtual keys are hashed, revocable and blockable, with model, route, MCP server, budget, rate and expiry limits, and a proxy_admin_viewer read-only role exists. Rotation with a grace period is Enterprise only, so 25, less 10 because the docs pass a key as ?key= on /key/info and on the Claude Code marketplace manifest (15 of 30). allowed_routes, MCP permissions by key and team, an approval queue for submitted MCP servers and stdio MCP servers off by default from 1.104.0 (15 of 20). Guardrails can run before a model call and on MCP tool results, and an OWASP LLM Top 10 page maps each risk to a control, but prompt-injection detectors such as Lakera need an Enterprise licence and all of it is off by default (12 of 15). Request and spend logs per key in the open-source build; audit logs of admin actions are Enterprise only (12 of 15). security.md with GitHub private reporting, a bug bounty from $500 to $3,000 for P0 and P1 reports, a security announcements list, SOC 2 Type II per the data security page, CodeQL, OSV and Scorecard workflows, and advisories published on GitHub. No security.txt, and reports without a video are closed unread (18 of 20).

Antseed 56

Model reading, as for other routers. Tool use and structured output depend on the seller, and the model list reports both per seller with conservative model-level values (12 of 20 and 8 of 15). Cached-input pricing is advertised per seller where supported (8 of 15). Context length is reported per model as the lowest value across sellers (10 of 15). No batch route found (0 of 10). No SDK of its own for buyers. OpenAI and Anthropic SDKs work against the proxy, and wrappers launch Claude Code, Codex and OpenCode (5 of 10). Documented error codes with fixes, and cost and seller headers on non-streaming responses (13 of 15). Docs per the 8 October check, not re-read on 4 November, because the terms of 9 October 2026 bar scripts that scrape or mine data from the Offerings, which include the documentation.

LiteLLM 79

Read with the API lines for the gateway an agent calls. Responses size through the usual max_tokens and streaming, and the MCP gateway can replace a large tool catalogue with four virtual tools (tool search) or filter tools by semantic relevance, which cuts context cost (20 of 25). Key, team and spend listings page and filter, though we didn't check every list call (15 of 20). Errors keep the OpenAI envelope with a string code, gateway 429s carry retry-after, rate_limit_type and reset_at, management routes answer RFC 9457 problem+json, and a table says which errors are safe to retry (20). Retries, cooldowns and fallbacks run inside the gateway and the docs say which errors to retry, but there are no idempotency keys for the management writes (12 of 20). Any OpenAI or Anthropic SDK works by changing the base URL, but the only first-party client is the Python SDK, and keys and spend need Postgres and a master key before the first call (12 of 15).

Antseed 52

Read with the local-software lines, since the buyer runs the proxy. Official npm package @antseed/cli with Node.js 20 or later stated, plus desktop installers (20). Public CI on main runs the unit tests, an end-to-end suite and a payment flow (ci.yml in the clone), but the run results on GitHub couldn't be read on 4 November, so 15 of 25. Open issues and pull requests per the 8 October count (74 and 32), with bug reports from late September open then and reply times not sampled (12 of 25). CHANGELOG.md calls out breaking CLI changes, but versions are 0.x patch bumps and recent entries sit under one Unreleased heading (5 of 15). Release tag v0.2.72 and CLI 0.1.220 at that tag, with no statement of stability (0). Whether a request is answered also depends on which sellers are online, which this checklist doesn't score.

LiteLLM 70

Read with the local-software lines, since the gateway runs on the operator's hardware and BerriAI hosts nothing an agent calls. litellm on PyPI states Python 3.10 to 3.14, and the gateway ships as a Docker image, a Helm chart and Terraform modules, with GHCR images signed by cosign (20). 51 GitHub Actions workflows plus a CircleCI config cover unit, proxy-database, end-to-end, chaos, mutation and UI tests. The GitHub API was rate-limited for our reader on 6 November and Actions pages refused it on 6 October, so we couldn't confirm main is passing (15 of 25). The issue tracker showed 1,674 open issues on 6 November, with eight bug reports among the 15 newest, seven of them with a reply, against a project that tags several releases a day (10 of 25, down from an unchecked 12). Release notes carry breaking-change bullets, but breaking changes land in weekly minor releases on the 1.x line, so version numbers don't signal them (10 of 15). 1.108.1, past 1.0 (15).

Antseed 70

x402 v2 exists only on POST /v1/key/topup of a gateway the owner runs, and is off until enabled per key. Inference is paid through Antseed's own HTTP 402 flow with EIP-712 signatures and USDC channels on Base, which isn't one of the three protocols the rubric names (10 of 40, a judgement call). PRICING.md in the repository says seller prices per 1M tokens are published without authentication at a cached endpoint and live through antseed network browse --json (20); the 8 October snapshot figures came from that JSON endpoint and are struck. Free models answer with no card and no account, per the docs on 8 October (20). An agent can install the CLI, get a key generated locally and fund it by a USDC transfer, with no sign-up flow (20). The self-hosted rule gives the same three lines for the free software.

LiteLLM 60

Read with the self-hosted rule, since an agent uses the free gateway and Enterprise is a sales-led licence for the same software. No x402, MPP or L402 (0). MIT with no account and no card, so 20, 20 and 20 on the last three lines. Model calls cost what the operator's provider keys cost.