{ "data": { "a": { "slug": "antseed", "name": "Antseed", "vendor": "Antseed Foundation", "vendorUrl": "https://antseed.com", "kind": "router", "category": "inference", "summary": "Antseed is an open-source peer-to-peer network for buying and selling AI inference. A buyer runs a local proxy with OpenAI and Anthropic format endpoints, which routes each request to an independent seller and pays in USDC on Base.", "url": "https://www.anchorterminal.com/tools/antseed", "markdownUrl": "https://www.anchorterminal.com/tools/antseed.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/antseed.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/antseed.json", "dns": "antseed.grade.anchorterminal.com", "repo": "https://github.com/Antseed/antseed", "license": "GPL-3.0 (LICENSE in the repository). The @antseed/cli manifest on npm carries no licence field", "transports": [ "http" ], "packages": [ { "registry": "npm", "name": "@antseed/cli" } ], "auth": "none", "authNotes": "No account and no API key. The local proxy at 127.0.0.1:8377 doesn't check a key, so clients that need one send a placeholder such as `antseed-p2p`. Identity is a secp256k1 key the CLI creates on first run. Its EVM address is the peer id and the paying wallet. A public tunnel or the gateway (`antseed gateway`, `antseed tunnel start`) needs a generated `antseed_...` bearer key, with optional spend limits and expiry per key.", "pricing": "usage", "pricingNotes": "Sellers set their own prices per 1M input, cached-input and output tokens, published without login per PRICING.md and readable live with `antseed network browse --json`. Buyers pre-deposit USDC on Base and pay per request. Some models are free. The FAQ sets network fees at 4 per cent, and a gasless deposit costs a fixed $0.05 relay fee. The software is free.", "priceSummary": "4% fee", "where": "local", "x402": { "level": "no", "evidence": "Inference isn't paid by x402. Sellers answer HTTP 402 and the buyer signs Antseed's own EIP-712 ReserveAuth and SpendingAuth against an on-chain USDC channel (https://antseed.com/blog/the-402-flow/). x402 v2 appears only on `POST /v1/key/topup` of a gateway the owner runs, off until enabled per key (CHANGELOG.md, checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 106, "npmWeekly": 1823, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://antseed.com/docs/", "llmsTxt": "https://antseed.com/llms.txt", "capabilities": [ "inference.router", "inference.llm" ], "tags": [ "open-source", "local", "p2p", "usdc", "base", "no-signup", "no-card", "openai-compatible", "anthropic-compatible", "llms-txt", "cli", "desktop", "pre-1.0" ], "lastRelease": "2026-10-31", "graded": true, "anchor": { "graded": true, "score": 54.1, "grade": "C", "agentReady": false, "rank": 915, "ranked": true, "rankOf": 1486, "categoryRank": 27, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 56, "maintenance": 79, "payments": 70, "reliability": 52, "schema": 55, "security": 45, "transparency": 59 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-04" }, "negative": -3, "negativeNotes": [ "2026-10-12. The buyer proxy forwarded a client's `Authorization`, `x-api-key`, cookie and other credential headers to the seller it routed to, a flaw the repository's own review of 8 March 2026 lists as VULN-002 and issue #1104 (4 October 2026) raised. Commit 6d2c7c13 stopped it, first released in v0.2.58 on 12 October 2026, and CHANGELOG.md marks the entry as security and tells users to rotate exposed keys. Two more released fixes marked security in CHANGELOG.md fold into the same term, a local client spending from a workspace wallet by naming its buyer identity (v0.2.61, 16 October 2026) and API-key holders reusing a request ID to skip spend accounting (v0.2.67, 22 October 2026). No published advisory was found on osv.dev, so the released fixes without an advisory take -3. https://github.com/Antseed/antseed/blob/main/CHANGELOG.md" ], "verdict": "A buyer needs no account. The CLI creates a wallet key, free models answer at once and paid ones draw on deposited USDC, with seller, tokens and cost in response headers. Sellers are unvetted and can read prompts unless TEE-verified, the proxy forwarded client credentials to them until 12 October 2026 with no advisory, and every package is pre-1.0.", "bestFor": "Agents and coding tools that want pay-per-request inference with no account, and owners comfortable holding USDC on Base.", "strengths": [ "No sign-up. `npm install -g @antseed/cli` and `antseed buyer start` give a local endpoint at http://localhost:8377, and some models are free", "One proxy accepts Anthropic Messages, OpenAI Chat Completions and OpenAI Responses requests and translates between them when the seller speaks another format", "PRICING.md says seller prices per 1M tokens are published with no login, and `antseed network browse --json` reads them live", "Non-streaming responses carry `x-antseed-peer-id`, token counts and `x-antseed-estimated-cost-usd`, and `antseed buyer metering` gives totals per channel", "GPL-3.0 source, CI on main and 67 tagged releases between 6 August and 31 October 2026" ], "weaknesses": [ "The buyer proxy copied client credential headers to sellers until v0.2.58 (12 October 2026), with no published advisory", "Sellers are independent and unvetted. The FAQ says a standard seller can read the prompt it serves, and each sets its own data practices", "Pre-1.0 everywhere. Release tag v0.2.72 carries CLI 0.1.220, and CHANGELOG.md keeps recent entries under one Unreleased heading", "No OpenAPI document, security.txt, SECURITY.md, published advisory, bug bounty or contract audit report was found", "The buyer key is also the wallet, and the CLI stores it in plain text at ~/.antseed/identity.key unless `ANTSEED_IDENTITY_HEX` is set" ], "agentNotes": [ "Send a placeholder key such as `antseed-p2p`, and run v0.2.58 or later, which stops credential headers reaching sellers.", "Call `GET /v1/models` first and request a concrete id. The `antseed` alias works only when the desktop app has a model selected", "Handle 402 `insufficient_deposits` by reading `suggestedAmount`, then fund the address from `antseed buyer deposit` with USDC on Base", "Pass `--verifiers antseed-verifier --require-verifier` to `antseed buyer start` when prompts are private, so only TEE-verified sellers are routed", "Read `x-antseed-peer-id` and `x-antseed-estimated-cost-usd` on each response, and pin a seller with `\u003cpeerId\u003e@\u003cmodel\u003e` when the same one must answer" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 54.1 } ], "editorialScores": { "ergonomics": 56, "maintenance": 79, "payments": 70, "reliability": 52, "schema": 55, "security": 45, "transparency": 66 }, "provenanceScore": 52, "checked": { "categories": { "ergonomics": "2026-11-04", "maintenance": "2026-11-04", "payments": "2026-11-04", "reliability": "2026-11-04", "schema": "2026-11-04", "security": "2026-11-04", "transparency": "2026-11-04" }, "last": "2026-11-04", "lastMoved": "2026-11-04", "oldest": "2026-11-04", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install -g @antseed/cli \u0026\u0026 antseed buyer start", "http": "curl http://localhost:8377/v1/chat/completions -H 'content-type: application/json' -d '{\"model\": \"deepseek-v4-flash\", \"messages\": [{\"role\": \"user\", \"content\": \"Hello\"}]}'" }, "letme": { "capability": "https://letme.dev/inference.router", "tool": "https://letme.dev/antseed" }, "area": "models", "unitPrices": [ { "item": "Network fee", "unit": "pct", "usd": 4, "note": "Per the FAQ. Model prices are set by each seller" }, { "item": "Gasless deposit relay", "unit": "tx", "usd": 0.05, "note": "Fixed fee per sweep on Base mainnet" } ], "provenance": { "legalEntity": "Antseed Foundation", "domain": "antseed.com", "domainRegistered": "2026-02-23", "endpointOnVendorDomain": null, "terms": "https://antseed.com/terms-of-service/", "privacy": "", "statusPage": "", "changelog": "https://github.com/Antseed/antseed/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-04", "notes": [ "The site footer reads © 2026 Antseed Foundation. The foundation post of 17 July 2026 calls it a non-profit and gives no jurisdiction or registration number.", "The terms (last updated 9 October 2026, Gibraltar law) say the protocol is not a company and that supporting entities don't operate or control the network. Their contact section points to the repository's issues.", "https://antseed.com/privacy/ is a product page about anonymity, not a privacy policy. Section 16 of the terms covers data, and docs/telemetry.md in the repository covers the desktop app.", "The endpoint an agent calls is on the owner's machine. The price snapshot is at network.antseed.com, and https://antseed.com/network shows live network data with no incident history.", "antseed.com/.well-known/security.txt and /security.txt both returned 404 on 8 October, and the repository has no SECURITY.md on 4 November.", "RDAP gives 2026-02-23 as the registration date for antseed.com. @antseed/cli was first published to npm on 2026-02-24.", "The terms bar using software, automated agents or scripts to scrape or mine data from the Offerings, defined to include the documentation, so antseed.com and network.antseed.com beyond the terms were not read on 4 November." ], "score": 52 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/antseed.json", "live": { "slug": "antseed", "versions": [ { "registry": "github", "name": "Antseed/antseed", "version": "v0.2.75", "released": "2026-11-06", "seenAt": "2026-11-06T23:06:26.206621872Z" }, { "registry": "npm", "name": "@antseed/cli", "version": "0.1.233", "seenAt": "2026-11-06T23:06:25.971132423Z" } ], "githubStars": 134, "npmWeekly": 3937, "securityTxt": { "url": "https://antseed.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:21.529216902Z" }, "llmsTxt": { "url": "https://antseed.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:31:33.843590794Z" }, "domain": { "domain": "antseed.com", "registered": "2026-02-23", "source": "https://rdap.verisign.com/com/v1/domain/antseed.com", "checkedAt": "2026-11-01T14:07:44.278290475Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/Antseed/antseed/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:17:56.702739614Z", "changedAt": "2026-11-07T14:17:56.702739614Z", "fingerprint": "15d8d4afbfb5" }, { "url": "https://antseed.com/terms-of-service/", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T13:59:09.334745665Z", "changedAt": "2026-10-29T04:58:31.310358429Z", "fingerprint": "9c5799bf23b1" } ], "github": { "repo": "antseed/antseed", "checkedAt": "2026-11-02T08:31:03.445259855Z", "stars": 132, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-02T02:30:59Z", "openIssues": 76, "openPRs": 47, "issuesOpened90d": 109, "issuesClosed90d": 55, "prsMerged90d": 435, "ci": { "branch": "main", "runs": 50, "success": 50, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-11-01T03:43:44Z" }, "replies": { "sampled": 25, "unanswered": 22, "medianDays": 0.4 } }, "updatedAt": "2026-11-07T16:00:21.529216902Z" } }, "answer": "LiteLLM scores 62.4 (B) on agent readiness against Antseed's 54.1 (C), and leads in 6 of 7 scored categories. Antseed leads on payments \u0026 pricing.", "b": { "slug": "litellm", "name": "LiteLLM", "vendor": "BerriAI", "vendorUrl": "https://www.litellm.ai", "kind": "router", "category": "inference", "summary": "Open-source Python SDK and self-hosted AI gateway from BerriAI that puts 100+ model providers behind one OpenAI-compatible API, with virtual keys, spend tracking, budgets, fallbacks, guardrails and an MCP gateway.", "url": "https://www.anchorterminal.com/tools/litellm", "markdownUrl": "https://www.anchorterminal.com/tools/litellm.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/litellm.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/litellm.json", "dns": "litellm.grade.anchorterminal.com", "repo": "https://github.com/BerriAI/litellm", "license": "MIT, except the enterprise/ directory, which is under its own licence and needs an Enterprise licence key", "transports": [ "http" ], "packages": [ { "registry": "pypi", "name": "litellm" }, { "registry": "docker", "name": "docker.litellm.ai/berriai/litellm" } ], "auth": "api-key", "authNotes": "The gateway takes a Bearer key. `LITELLM_MASTER_KEY` is required at start-up and has full admin rights. Virtual keys, stored hashed, carry model, route, MCP server, budget, rate-limit and expiry limits and can be blocked. Key rotation with a grace period, SSO beyond five users, SCIM and JWT/OIDC auth need an Enterprise licence. `/key/info` takes the key being looked up as a `?key=` query parameter.", "pricing": "freemium", "pricingNotes": "Free to self-host under MIT, with no account or card. Model calls bill at each upstream provider's own prices on the operator's keys. Enterprise (SSO, audit logs, key rotation, team-scoped guardrails, support SLAs) is an annual licence priced through sales, with a 30-day trial key emailed after a form and no card (https://www.litellm.ai/pricing, https://www.litellm.ai/enterprise).", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs index or the llms-full.txt file, read 2026-10-06. The gateway forwards to providers on the operator's keys.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 62841, "npmWeekly": null, "pypiWeekly": 22493278, "asOf": "2026-11-06" }, "docsUrl": "https://docs.litellm.ai", "llmsTxt": "https://docs.litellm.ai/llms.txt", "openapi": "https://docs.litellm.ai/api-reference/", "capabilities": [ "inference.router", "obs.gateway", "agent.mcp-client", "guard.pii" ], "tags": [ "self-hosted", "open-source", "router", "gateway", "mcp", "openapi", "llms-txt", "python", "docker", "bug-bounty", "soc2" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 62.4, "grade": "B", "agentReady": false, "rank": 557, "ranked": true, "rankOf": 1486, "categoryRank": 20, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 79, "maintenance": 82, "payments": 60, "reliability": 70, "schema": 91, "security": 72, "transparency": 63 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": -12, "negativeNotes": [ "2026-03-24, -6. litellm 1.82.7 and 1.82.8 were uploaded to PyPI with a credential stealer that read environment variables, SSH keys, cloud and Kubernetes credentials and sent them to models.litellm.cloud. They were live for about 40 minutes before PyPI quarantined them, after a token leaked through the Trivy compromise. BerriAI published indicators, checksums and a rebuilt pipeline (v1.83.0, 30 March). A supply-chain incident that reached users, fixed, documented and six months old. https://docs.litellm.ai/blog/security-update-march-2026, https://api.osv.dev/v1/vulns/GHSA-5mg7-485q-xm76", "2026-04-24, -2. GHSA-r75f-5x8p-qvmc (CVE-2026-42208, critical). An unauthenticated SQL injection through the `Authorization` header in proxy key verification, affecting 1.81.16 up to 1.83.7. Fixed and published, inside six months. https://api.osv.dev/v1/vulns/GHSA-r75f-5x8p-qvmc", "2026-06-16, -2. GHSA-4xpc-pv4p-pm3w (CVE-2026-49468, critical). A crafted Host header could reach protected management routes without authentication where nothing upstream normalises Host. Fixed in 1.84.0. https://api.osv.dev/v1/vulns/GHSA-4xpc-pv4p-pm3w", "2026-08-27, -2. GHSA-6wvf-77m9-58rm (CVE-2026-37004, critical). Server-side template injection in /prompts/test let unauthenticated callers run OS commands in 1.82.4 and earlier, fixed in 1.83.7. Published months after the fix. https://api.osv.dev/v1/vulns/GHSA-6wvf-77m9-58rm", "Not deducted separately. 26 other GitHub advisories published between 6 November 2025 and 6 November 2026 (one more critical, ten high, six moderate and nine low), among them an OIDC cache-key collision (GHSA-jjhc-v7c2-5hh6), authenticated credential exfiltration through request-body routing (GHSA-3cv6-jpf6-8222, 30 September 2026) and, on 27 October 2026, privilege escalation from internal_user to proxy_admin through reuse of the salt key (GHSA-7hp6-4w63-5g45, high) and an arbitrary local file read by internal_user_viewer (GHSA-g5ff-637f-6q2m, high). All handled in public with fixes. https://api.osv.dev/v1/query" ], "verdict": "An MIT-licensed gateway that puts 100+ model providers behind one OpenAI-compatible API, with virtual keys, budgets, fallbacks and an MCP gateway, released several times a week. Its security record is the main limitation. Two PyPI releases carried a credential stealer on 24 March 2026, and 30 GitHub advisories followed in 12 months, five of them critical.", "bestFor": "Teams that want one OpenAI-compatible endpoint over many providers on their own infrastructure, with per-key budgets, model allowlists and an MCP gateway.", "strengths": [ "MIT core, self-hosted, with no telemetry when self-hosted per the data security page", "Virtual keys limited by model, route, MCP server, budget, rate and expiry, and blockable at once", "Every proxy serves Swagger, ReDoc and /openapi.json, and the docs have llms.txt with a Markdown twin of every page", "Error reference tells a gateway 429 (with `retry-after`, `rate_limit_type`, `reset_at`) from a provider 429", "v1.108.1 on 5 November 2026, 125 tags since 8 August, and four stable minor lines supported with patches" ], "weaknesses": [ "litellm 1.82.7 and 1.82.8 on PyPI carried a credential stealer for about 40 minutes on 24 March 2026", "30 GitHub advisories from 6 November 2025 to 6 November 2026, five critical, including unauthenticated SQL injection fixed in 1.83.7", "Key rotation, audit logs and SSO beyond five users need an Enterprise licence, priced only through sales", "Breaking changes ship in weekly minor releases on the 1.x line, and lines older than the latest four stop getting fixes", "The default Docker image runs as root, and the Swagger, ReDoc and OpenAPI pages are public until switched off" ], "agentNotes": [ "Pin an exact litellm version or image digest, verify the cosign signature, and never install an unpinned latest in CI", "Give each agent a virtual key limited to its models, routes and MCP servers, with a budget and an expiry", "Treat a 429 with `retry-after` as the gateway's own limit and wait that long; a 429 without it came from the provider", "Set `NO_DOCS`, `NO_REDOC` and `NO_OPENAPI` to True in production, and use the `-non_root` image variant", "Set `LITELLM_LOCAL_MODEL_COST_MAP=True` where egress is blocked, since start-up otherwise fetches the price map from GitHub" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.4 } ], "editorialScores": { "ergonomics": 79, "maintenance": 82, "payments": 60, "reliability": 70, "schema": 91, "security": 72, "transparency": 77 }, "provenanceScore": 49, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install litellm # SDK; gateway: curl -sSLO https://github.com/BerriAI/litellm/raw/main/docker/docker-compose.quickstart.yml \u0026\u0026 docker compose -f docker-compose.quickstart.yml up -d", "http": "curl http://localhost:4000/v1/chat/completions \\\n -H 'Authorization: Bearer sk-\u003cyour-virtual-key\u003e' \\\n -H 'Content-Type: application/json' \\\n -d '{\n \"model\": \"gpt-5.6-terra\",\n \"messages\": [{\"role\": \"user\", \"content\": \"Say hello in five words.\"}]\n }'", "claudeCode": "export ANTHROPIC_BASE_URL=\"http://localhost:4000\"\nexport ANTHROPIC_AUTH_TOKEN=\"sk-\u003cyour-virtual-key\u003e\"\nexport ANTHROPIC_MODEL=\"\u003ca model_name from your config\u003e\"\nclaude" }, "letme": { "capability": "https://letme.dev/inference.router", "tool": "https://letme.dev/litellm" }, "area": "models", "provenance": { "legalEntity": "Berrie AI Incorporated", "domain": "litellm.ai", "domainRegistered": "2023-08-07", "endpointOnVendorDomain": false, "terms": "", "privacy": "https://docs.litellm.ai/docs/data_security", "statusPage": "", "changelog": "https://docs.litellm.ai/release_notes", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The data security page names the legal entity as Berrie AI Incorporated, with krrish@berri.ai as the security contact.", "The gateway is software the operator runs, so there's no vendor endpoint and no status page.", "No terms of service or privacy policy found on www.litellm.ai (/terms, /privacy and /legal return 404). The data security page in the docs covers self-hosted data handling.", "www.litellm.ai/.well-known/security.txt and the docs host both return 404. Reports go to GitHub private vulnerability reporting under security.md.", "RDAP for litellm.ai gives a registration date of 2023-08-07.", "Rechecked 2026-11-06: www.litellm.ai/terms, /privacy, /legal, /terms-of-service and /privacy-policy all return 404, and neither host serves security.txt. Both robots.txt files allow all." ], "score": 49 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/litellm.json", "live": { "slug": "litellm", "versions": [ { "registry": "github", "name": "BerriAI/litellm", "version": "v1.108.2", "released": "2026-11-06", "seenAt": "2026-11-06T23:40:24.985518384Z" }, { "registry": "pypi", "name": "litellm", "version": "1.108.2", "released": "2026-11-06", "seenAt": "2026-11-06T23:40:24.735967257Z" } ], "githubStars": 62845, "pypiWeekly": 22493278, "securityTxt": { "url": "https://litellm.ai/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:25.60777972Z" }, "llmsTxt": { "url": "https://docs.litellm.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:52.845519783Z" }, "pages": [ { "url": "https://docs.litellm.ai/release_notes", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:06:55.608946935Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "e493aadf92b2" }, { "url": "https://www.litellm.ai/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:30:56.79408028Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "45e60222905c" }, { "url": "https://docs.litellm.ai/docs/data_security", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:06:53.531435979Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a2363610f7ad" } ], "updatedAt": "2026-11-07T16:01:25.60777972Z" } }, "edges": [ { "by": 36, "category": "schema", "leads": "litellm", "name": "Schema \u0026 documentation", "reasons": { "a": "No OpenAPI document found in the repository or docs. The proxy copies the OpenAI and Anthropic wire formats (0 of 25). llms.txt at antseed.com/llms.txt and a setup skill at /skill.md (10). The API guide states what each route is for, how routing picks a seller and when to pin one (14 of 20). Request bodies follow the upstream formats, and `/v1/models` reports context length, modalities, tool use and supported parameters per seller (8 of 15). Curl examples for each format and an error table with status, code, meaning and fix (13 of 15). A public changelog and tagged releases, with recent entries under an undated Unreleased heading (10 of 15). Docs per the 8 October check, not re-read on 4 November, because the terms of 9 October 2026 bar scripts that scrape or mine data from the Offerings, which include the documentation.", "b": "Every gateway serves Swagger at /, ReDoc at /redoc and the raw schema at /openapi.json, and the docs host a public Swagger explorer (25). llms.txt, llms-full.txt and a Markdown twin of every page via `.md` (10). Pages say what a feature is for and where its limits are, and the key-auth page explains how permissions are inherited and where they aren't, but the reference is very large for a model to navigate (16 of 20). OpenAI-shaped request schemas from Pydantic models, with `metadata`, `litellm_params` and config blocks left as free-form objects (10 of 15). A full error reference with the envelope, every status, response headers and how to tell gateway limits from provider limits, plus examples on every page (15). Release notes per version with dates, newest v1.108.0 and v1.106.7 on 4 November 2026 (15)." }, "scores": { "a": 55, "b": 91 } }, { "by": 27, "category": "security", "leads": "litellm", "name": "Security \u0026 auth", "reasons": { "a": "Model reading. The local proxy has no key and binds to 127.0.0.1. One secp256k1 key is identity and wallet, stored in plain text by the CLI unless supplied by environment variable, and encrypted by the OS keychain in the desktop app. Spending is bounded by a deposit contract, a capped ReserveAuth per seller and an optional separate withdrawal wallet, and gateway keys are hashed, revocable and spend-limited (18 of 30). Sellers are independent, and the FAQ says a standard seller can read prompts and sets its own practices (5 of 20). No central log, and an optional TEE-verified route with attestation checked on the buyer's machine (8 of 15). Seller, token and cost headers per response, `antseed buyer metering` and a Prometheus exporter (12 of 15). The buyer proxy stopped forwarding client credentials to sellers in v0.2.58 (12 October 2026). No SECURITY.md in the 4 November clone; no security.txt, published advisory, bug bounty, certification or contract audit report found. The repository holds one automated review of the buyer proxy dated 8 March 2026 (2 of 20). Docs per the 8 October check, not re-read on 4 November, because the terms of 9 October 2026 bar scripts that scrape or mine data from the Offerings, which include the documentation.", "b": "Read with the tool checklist for self-hosted software. Virtual keys are hashed, revocable and blockable, with model, route, MCP server, budget, rate and expiry limits, and a `proxy_admin_viewer` read-only role exists. Rotation with a grace period is Enterprise only, so 25, less 10 because the docs pass a key as `?key=` on `/key/info` and on the Claude Code marketplace manifest (15 of 30). `allowed_routes`, MCP permissions by key and team, an approval queue for submitted MCP servers and stdio MCP servers off by default from 1.104.0 (15 of 20). Guardrails can run before a model call and on MCP tool results, and an OWASP LLM Top 10 page maps each risk to a control, but prompt-injection detectors such as Lakera need an Enterprise licence and all of it is off by default (12 of 15). Request and spend logs per key in the open-source build; audit logs of admin actions are Enterprise only (12 of 15). security.md with GitHub private reporting, a bug bounty from $500 to $3,000 for P0 and P1 reports, a security announcements list, SOC 2 Type II per the data security page, CodeQL, OSV and Scorecard workflows, and advisories published on GitHub. No security.txt, and reports without a video are closed unread (18 of 20)." }, "scores": { "a": 45, "b": 72 } }, { "by": 23, "category": "ergonomics", "leads": "litellm", "name": "Agent ergonomics", "reasons": { "a": "Model reading, as for other routers. Tool use and structured output depend on the seller, and the model list reports both per seller with conservative model-level values (12 of 20 and 8 of 15). Cached-input pricing is advertised per seller where supported (8 of 15). Context length is reported per model as the lowest value across sellers (10 of 15). No batch route found (0 of 10). No SDK of its own for buyers. OpenAI and Anthropic SDKs work against the proxy, and wrappers launch Claude Code, Codex and OpenCode (5 of 10). Documented error codes with fixes, and cost and seller headers on non-streaming responses (13 of 15). Docs per the 8 October check, not re-read on 4 November, because the terms of 9 October 2026 bar scripts that scrape or mine data from the Offerings, which include the documentation.", "b": "Read with the API lines for the gateway an agent calls. Responses size through the usual `max_tokens` and streaming, and the MCP gateway can replace a large tool catalogue with four virtual tools (tool search) or filter tools by semantic relevance, which cuts context cost (20 of 25). Key, team and spend listings page and filter, though we didn't check every list call (15 of 20). Errors keep the OpenAI envelope with a string `code`, gateway 429s carry `retry-after`, `rate_limit_type` and `reset_at`, management routes answer RFC 9457 problem+json, and a table says which errors are safe to retry (20). Retries, cooldowns and fallbacks run inside the gateway and the docs say which errors to retry, but there are no idempotency keys for the management writes (12 of 20). Any OpenAI or Anthropic SDK works by changing the base URL, but the only first-party client is the Python SDK, and keys and spend need Postgres and a master key before the first call (12 of 15)." }, "scores": { "a": 56, "b": 79 } }, { "by": 18, "category": "reliability", "leads": "litellm", "name": "Reliability", "reasons": { "a": "Read with the local-software lines, since the buyer runs the proxy. Official npm package @antseed/cli with Node.js 20 or later stated, plus desktop installers (20). Public CI on main runs the unit tests, an end-to-end suite and a payment flow (ci.yml in the clone), but the run results on GitHub couldn't be read on 4 November, so 15 of 25. Open issues and pull requests per the 8 October count (74 and 32), with bug reports from late September open then and reply times not sampled (12 of 25). CHANGELOG.md calls out breaking CLI changes, but versions are 0.x patch bumps and recent entries sit under one Unreleased heading (5 of 15). Release tag v0.2.72 and CLI 0.1.220 at that tag, with no statement of stability (0). Whether a request is answered also depends on which sellers are online, which this checklist doesn't score.", "b": "Read with the local-software lines, since the gateway runs on the operator's hardware and BerriAI hosts nothing an agent calls. litellm on PyPI states Python 3.10 to 3.14, and the gateway ships as a Docker image, a Helm chart and Terraform modules, with GHCR images signed by cosign (20). 51 GitHub Actions workflows plus a CircleCI config cover unit, proxy-database, end-to-end, chaos, mutation and UI tests. The GitHub API was rate-limited for our reader on 6 November and Actions pages refused it on 6 October, so we couldn't confirm main is passing (15 of 25). The issue tracker showed 1,674 open issues on 6 November, with eight bug reports among the 15 newest, seven of them with a reply, against a project that tags several releases a day (10 of 25, down from an unchecked 12). Release notes carry breaking-change bullets, but breaking changes land in weekly minor releases on the 1.x line, so version numbers don't signal them (10 of 15). 1.108.1, past 1.0 (15)." }, "scores": { "a": 52, "b": 70 } }, { "by": 10, "category": "payments", "leads": "antseed", "name": "Payments \u0026 pricing", "reasons": { "a": "x402 v2 exists only on `POST /v1/key/topup` of a gateway the owner runs, and is off until enabled per key. Inference is paid through Antseed's own HTTP 402 flow with EIP-712 signatures and USDC channels on Base, which isn't one of the three protocols the rubric names (10 of 40, a judgement call). PRICING.md in the repository says seller prices per 1M tokens are published without authentication at a cached endpoint and live through `antseed network browse --json` (20); the 8 October snapshot figures came from that JSON endpoint and are struck. Free models answer with no card and no account, per the docs on 8 October (20). An agent can install the CLI, get a key generated locally and fund it by a USDC transfer, with no sign-up flow (20). The self-hosted rule gives the same three lines for the free software.", "b": "Read with the self-hosted rule, since an agent uses the free gateway and Enterprise is a sales-led licence for the same software. No x402, MPP or L402 (0). MIT with no account and no card, so 20, 20 and 20 on the last three lines. Model calls cost what the operator's provider keys cost." }, "scores": { "a": 70, "b": 60 } } ], "facts": [ { "a": "Model router", "b": "Model router", "name": "Kind" }, { "a": "Antseed Foundation", "b": "BerriAI", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP", "name": "Transports" }, { "a": "None", "b": "API key", "name": "Auth" }, { "a": "Pay per use", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "GPL-3.0 (LICENSE in the repository). The @antseed/cli manifest on npm carries no licence field", "b": "MIT, except the enterprise/ directory, which is under its own licence and needs an Enterprise licence key", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-31", "b": "2026-11-05", "name": "Last release" }, { "a": "2026-05-15", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no date given", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not read yet", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not read yet", "name": "Arbitration or class-action waiver" }, { "a": "106 stars, 1.8k npm/wk", "b": "63k stars, 22.5M PyPI/wk", "name": "Popularity" } ], "faq": [ { "answer": "LiteLLM scores 62.4 (B) on agent readiness against Antseed's 54.1 (C), and leads in 6 of 7 scored categories. Antseed leads on payments \u0026 pricing.", "question": "Which is better for AI agents, Antseed or LiteLLM?" }, { "answer": "Antseed needs no key. LiteLLM needs an API key.", "question": "Do Antseed and LiteLLM need an API key?" }, { "answer": "No hosted endpoint is listed for Antseed. No hosted endpoint is listed for LiteLLM.", "question": "Can an agent call Antseed and LiteLLM without installing anything?" }, { "answer": "Yes. Antseed is open source (GPL-3.0 (LICENSE in the repository). The @antseed/cli manifest on npm carries no licence field). LiteLLM is open source (MIT, except the enterprise/ directory, which is under its own licence and needs an Enterprise licence key).", "question": "Are Antseed and LiteLLM open source?" } ], "goodFor": [ { "aheadOn": [ "Payments \u0026 pricing, 70 against 60" ], "also": [ "No key needed to call it", "Free to start without a card" ], "goodFor": "Agents and coding tools that want pay-per-request inference with no account, and owners comfortable holding USDC on Base.", "slug": "antseed", "watchFor": "The buyer proxy copied client credential headers to sellers until v0.2.58 (12 October 2026), with no published advisory" }, { "aheadOn": [ "Reliability, 70 against 52", "Schema \u0026 documentation, 91 against 55", "Agent ergonomics, 79 against 56", "Security \u0026 auth, 72 against 45" ], "also": null, "goodFor": "Teams that want one OpenAI-compatible endpoint over many providers on their own infrastructure, with per-key budgets, model allowlists and an MCP gateway.", "slug": "litellm", "watchFor": "litellm 1.82.7 and 1.82.8 on PyPI carried a credential stealer for about 40 minutes on 24 March 2026" } ], "history": { "antseed": [ { "causes": [ "security", "evidence" ], "date": "2026-11-04", "delta": -1, "from": 55.1, "fromGrade": "C", "to": 54.1, "toGrade": "C" } ], "litellm": null }, "job": { "capability": "inference.router", "name": "Model routing" }, "others": [ { "json": "https://www.anchorterminal.com/compare/amazon-bedrock-vs-antseed.json", "title": "Amazon Bedrock vs Antseed", "url": "https://www.anchorterminal.com/compare/amazon-bedrock-vs-antseed" }, { "json": "https://www.anchorterminal.com/compare/anthropic-api-vs-antseed.json", "title": "Claude API vs Antseed", "url": "https://www.anchorterminal.com/compare/anthropic-api-vs-antseed" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-azure-openai.json", "title": "Antseed vs Azure OpenAI in Foundry Models", "url": "https://www.anchorterminal.com/compare/antseed-vs-azure-openai" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-blockrun-ai.json", "title": "Antseed vs BlockRun.AI", "url": "https://www.anchorterminal.com/compare/antseed-vs-blockrun-ai" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-cerebras-inference.json", "title": "Antseed vs Cerebras Inference", "url": "https://www.anchorterminal.com/compare/antseed-vs-cerebras-inference" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-cloudflare-workers-ai.json", "title": "Antseed vs Cloudflare Workers AI", "url": "https://www.anchorterminal.com/compare/antseed-vs-cloudflare-workers-ai" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-cohere-chat.json", "title": "Antseed vs Cohere Chat API (Command models)", "url": "https://www.anchorterminal.com/compare/antseed-vs-cohere-chat" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-deepinfra.json", "title": "Antseed vs DeepInfra", "url": "https://www.anchorterminal.com/compare/antseed-vs-deepinfra" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-deepseek-api.json", "title": "Antseed vs DeepSeek API", "url": "https://www.anchorterminal.com/compare/antseed-vs-deepseek-api" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-elorian-glimpse.json", "title": "Antseed vs Glimpse", "url": "https://www.anchorterminal.com/compare/antseed-vs-elorian-glimpse" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-fireworks-inference.json", "title": "Antseed vs Fireworks AI Inference", "url": "https://www.anchorterminal.com/compare/antseed-vs-fireworks-inference" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-gemini-api.json", "title": "Antseed vs Gemini Developer API", "url": "https://www.anchorterminal.com/compare/antseed-vs-gemini-api" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-groq.json", "title": "Antseed vs GroqCloud", "url": "https://www.anchorterminal.com/compare/antseed-vs-groq" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-inkling-2-small.json", "title": "Antseed vs Inkling 2 Small", "url": "https://www.anchorterminal.com/compare/antseed-vs-inkling-2-small" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-jais-3.json", "title": "Antseed vs Jais 3", "url": "https://www.anchorterminal.com/compare/antseed-vs-jais-3" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-meta-model-api.json", "title": "Antseed vs Meta Model API", "url": "https://www.anchorterminal.com/compare/antseed-vs-meta-model-api" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-minimax-api.json", "title": "Antseed vs MiniMax API", "url": "https://www.anchorterminal.com/compare/antseed-vs-minimax-api" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-mistral-api.json", "title": "Antseed vs Mistral AI API", "url": "https://www.anchorterminal.com/compare/antseed-vs-mistral-api" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-muse-spark-open.json", "title": "Antseed vs Muse Spark Open", "url": "https://www.anchorterminal.com/compare/antseed-vs-muse-spark-open" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-nemotron-3-5-super-vl.json", "title": "Antseed vs Nemotron 3.5 Super VL", "url": "https://www.anchorterminal.com/compare/antseed-vs-nemotron-3-5-super-vl" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-novita-ai.json", "title": "Antseed vs Novita AI", "url": "https://www.anchorterminal.com/compare/antseed-vs-novita-ai" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-openai-api.json", "title": "Antseed vs OpenAI API", "url": "https://www.anchorterminal.com/compare/antseed-vs-openai-api" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-prism-inference.json", "title": "Antseed vs Prism Inference", "url": "https://www.anchorterminal.com/compare/antseed-vs-prism-inference" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-reflection-beam.json", "title": "Antseed vs Beam 1.0", "url": "https://www.anchorterminal.com/compare/antseed-vs-reflection-beam" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-sambanova.json", "title": "Antseed vs SambaCloud", "url": "https://www.anchorterminal.com/compare/antseed-vs-sambanova" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-siliconflow.json", "title": "Antseed vs SiliconFlow", "url": "https://www.anchorterminal.com/compare/antseed-vs-siliconflow" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-simplismart.json", "title": "Antseed vs Simplismart", "url": "https://www.anchorterminal.com/compare/antseed-vs-simplismart" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-stepfun-api.json", "title": "Antseed vs StepFun API", "url": "https://www.anchorterminal.com/compare/antseed-vs-stepfun-api" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-swe-2-flash.json", "title": "Antseed vs SWE-2 Flash", "url": "https://www.anchorterminal.com/compare/antseed-vs-swe-2-flash" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-together-inference.json", "title": "Antseed vs Together AI Inference", "url": "https://www.anchorterminal.com/compare/antseed-vs-together-inference" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-vertex-ai.json", "title": "Antseed vs Vertex AI (Gemini Enterprise Agent Platform)", "url": "https://www.anchorterminal.com/compare/antseed-vs-vertex-ai" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-xai-api.json", "title": "Antseed vs xAI API (Grok)", "url": "https://www.anchorterminal.com/compare/antseed-vs-xai-api" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-cloudflare-ai-gateway.json", "title": "Antseed vs Cloudflare AI Gateway", "url": "https://www.anchorterminal.com/compare/antseed-vs-cloudflare-ai-gateway" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-eden-ai.json", "title": "Antseed vs Eden AI", "url": "https://www.anchorterminal.com/compare/antseed-vs-eden-ai" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-hugging-face-inference-providers.json", "title": "Antseed vs Hugging Face Inference Providers", "url": "https://www.anchorterminal.com/compare/antseed-vs-hugging-face-inference-providers" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-openrouter.json", "title": "Antseed vs OpenRouter", "url": "https://www.anchorterminal.com/compare/antseed-vs-openrouter" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-ramp-router.json", "title": "Antseed vs Router.com (Ramp Router)", "url": "https://www.anchorterminal.com/compare/antseed-vs-ramp-router" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-routerplus.json", "title": "Antseed vs RouterPlus", "url": "https://www.anchorterminal.com/compare/antseed-vs-routerplus" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-tencent-tokenhub.json", "title": "Antseed vs Tencent Cloud TokenHub", "url": "https://www.anchorterminal.com/compare/antseed-vs-tencent-tokenhub" }, { "json": "https://www.anchorterminal.com/compare/antseed-vs-vercel-ai-gateway.json", "title": "Antseed vs Vercel AI Gateway", "url": "https://www.anchorterminal.com/compare/antseed-vs-vercel-ai-gateway" }, { "json": "https://www.anchorterminal.com/compare/cloudflare-ai-gateway-vs-litellm.json", "title": "Cloudflare AI Gateway vs LiteLLM", "url": "https://www.anchorterminal.com/compare/cloudflare-ai-gateway-vs-litellm" }, { "json": "https://www.anchorterminal.com/compare/eden-ai-vs-litellm.json", "title": "Eden AI vs LiteLLM", "url": "https://www.anchorterminal.com/compare/eden-ai-vs-litellm" }, { "json": "https://www.anchorterminal.com/compare/hugging-face-inference-providers-vs-litellm.json", "title": "Hugging Face Inference Providers vs LiteLLM", "url": "https://www.anchorterminal.com/compare/hugging-face-inference-providers-vs-litellm" }, { "json": "https://www.anchorterminal.com/compare/litellm-vs-openrouter.json", "title": "LiteLLM vs OpenRouter", "url": "https://www.anchorterminal.com/compare/litellm-vs-openrouter" }, { "json": "https://www.anchorterminal.com/compare/litellm-vs-ramp-router.json", "title": "LiteLLM vs Router.com (Ramp Router)", "url": "https://www.anchorterminal.com/compare/litellm-vs-ramp-router" }, { "json": "https://www.anchorterminal.com/compare/litellm-vs-routerplus.json", "title": "LiteLLM vs RouterPlus", "url": "https://www.anchorterminal.com/compare/litellm-vs-routerplus" }, { "json": "https://www.anchorterminal.com/compare/litellm-vs-tencent-tokenhub.json", "title": "LiteLLM vs Tencent Cloud TokenHub", "url": "https://www.anchorterminal.com/compare/litellm-vs-tencent-tokenhub" }, { "json": "https://www.anchorterminal.com/compare/litellm-vs-vercel-ai-gateway.json", "title": "LiteLLM vs Vercel AI Gateway", "url": "https://www.anchorterminal.com/compare/litellm-vs-vercel-ai-gateway" } ], "panel": null, "scores": [ { "antseed": 52, "by": 18, "edge": "litellm", "key": "reliability", "litellm": 70, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "antseed": 55, "by": 36, "edge": "litellm", "key": "schema", "litellm": 91, "name": "Schema \u0026 documentation", "weight": 13 }, { "antseed": 56, "by": 23, "edge": "litellm", "key": "ergonomics", "litellm": 79, "name": "Agent ergonomics", "weight": 13 }, { "antseed": 45, "by": 27, "edge": "litellm", "key": "security", "litellm": 72, "name": "Security \u0026 auth", "weight": 14 }, { "antseed": 70, "by": 10, "edge": "antseed", "key": "payments", "litellm": 60, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "antseed": 79, "by": 3, "edge": "litellm", "key": "maintenance", "litellm": 82, "name": "Maintenance \u0026 community", "weight": 7 }, { "antseed": 59, "by": 4, "edge": "litellm", "key": "transparency", "litellm": 63, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "LiteLLM scores 62.4 (B) on agent readiness against Antseed's 54.1 (C), and leads in 6 of 7 scored categories. Antseed leads on payments \u0026 pricing. Both do model routing.", "tasks": null, "tutorials": [], "verdicts": { "antseed": "A buyer needs no account. The CLI creates a wallet key, free models answer at once and paid ones draw on deposited USDC, with seller, tokens and cost in response headers. Sellers are unvetted and can read prompts unless TEE-verified, the proxy forwarded client credentials to them until 12 October 2026 with no advisory, and every package is pre-1.0.", "litellm": "An MIT-licensed gateway that puts 100+ model providers behind one OpenAI-compatible API, with virtual keys, budgets, fallbacks and an MCP gateway, released several times a week. Its security record is the main limitation. Two PyPI releases carried a credential stealer on 24 March 2026, and 30 GitHub advisories followed in 12 months, five of them critical." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/antseed-vs-litellm", "json": "https://www.anchorterminal.com/compare/antseed-vs-litellm.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/antseed-vs-litellm.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/antseed-vs-litellm.min.md" }, "markdown": "LiteLLM scores 62.4 (B) on agent readiness against Antseed's 54.1 (C), and leads in 6 of 7 scored categories. Antseed leads on payments \u0026 pricing. Both do model routing.\n\n- Antseed: grade C, 54.1/100, rank #915 of 1486. Markdown https://www.anchorterminal.com/tools/antseed.md · JSON https://www.anchorterminal.com/api/v1/tools/antseed.json\n- LiteLLM: grade B, 62.4/100, rank #557 of 1486. Markdown https://www.anchorterminal.com/tools/litellm.md · JSON https://www.anchorterminal.com/api/v1/tools/litellm.json\n- Best model APIs and inference for AI agents: https://www.anchorterminal.com/best/inference/index.md\n- All 830 models comparisons: https://www.anchorterminal.com/compare/inference/index.md\n\n## Which one, for what\n\n### Antseed (C)\n\nGood for: Agents and coding tools that want pay-per-request inference with no account, and owners comfortable holding USDC on Base.\n\nAhead on:\n- Payments \u0026 pricing, 70 against 60\n\nAlso in its favour:\n- No key needed to call it\n- Free to start without a card\n\nWatch for: The buyer proxy copied client credential headers to sellers until v0.2.58 (12 October 2026), with no published advisory\n\n### LiteLLM (B)\n\nGood for: Teams that want one OpenAI-compatible endpoint over many providers on their own infrastructure, with per-key budgets, model allowlists and an MCP gateway.\n\nAhead on:\n- Reliability, 70 against 52\n- Schema \u0026 documentation, 91 against 55\n- Agent ergonomics, 79 against 56\n- Security \u0026 auth, 72 against 45\n\nWatch for: litellm 1.82.7 and 1.82.8 on PyPI carried a credential stealer for about 40 minutes on 24 March 2026\n\n\n## Why the edge\n\n### Schema \u0026 documentation: LiteLLM +36\n\n- Antseed (55): No OpenAPI document found in the repository or docs. The proxy copies the OpenAI and Anthropic wire formats (0 of 25). llms.txt at antseed.com/llms.txt and a setup skill at /skill.md (10). The API guide states what each route is for, how routing picks a seller and when to pin one (14 of 20). Request bodies follow the upstream formats, and `/v1/models` reports context length, modalities, tool use and supported parameters per seller (8 of 15). Curl examples for each format and an error table with status, code, meaning and fix (13 of 15). A public changelog and tagged releases, with recent entries under an undated Unreleased heading (10 of 15). Docs per the 8 October check, not re-read on 4 November, because the terms of 9 October 2026 bar scripts that scrape or mine data from the Offerings, which include the documentation.\n- LiteLLM (91): Every gateway serves Swagger at /, ReDoc at /redoc and the raw schema at /openapi.json, and the docs host a public Swagger explorer (25). llms.txt, llms-full.txt and a Markdown twin of every page via `.md` (10). Pages say what a feature is for and where its limits are, and the key-auth page explains how permissions are inherited and where they aren't, but the reference is very large for a model to navigate (16 of 20). OpenAI-shaped request schemas from Pydantic models, with `metadata`, `litellm_params` and config blocks left as free-form objects (10 of 15). A full error reference with the envelope, every status, response headers and how to tell gateway limits from provider limits, plus examples on every page (15). Release notes per version with dates, newest v1.108.0 and v1.106.7 on 4 November 2026 (15).\n\n### Security \u0026 auth: LiteLLM +27\n\n- Antseed (45): Model reading. The local proxy has no key and binds to 127.0.0.1. One secp256k1 key is identity and wallet, stored in plain text by the CLI unless supplied by environment variable, and encrypted by the OS keychain in the desktop app. Spending is bounded by a deposit contract, a capped ReserveAuth per seller and an optional separate withdrawal wallet, and gateway keys are hashed, revocable and spend-limited (18 of 30). Sellers are independent, and the FAQ says a standard seller can read prompts and sets its own practices (5 of 20). No central log, and an optional TEE-verified route with attestation checked on the buyer's machine (8 of 15). Seller, token and cost headers per response, `antseed buyer metering` and a Prometheus exporter (12 of 15). The buyer proxy stopped forwarding client credentials to sellers in v0.2.58 (12 October 2026). No SECURITY.md in the 4 November clone; no security.txt, published advisory, bug bounty, certification or contract audit report found. The repository holds one automated review of the buyer proxy dated 8 March 2026 (2 of 20). Docs per the 8 October check, not re-read on 4 November, because the terms of 9 October 2026 bar scripts that scrape or mine data from the Offerings, which include the documentation.\n- LiteLLM (72): Read with the tool checklist for self-hosted software. Virtual keys are hashed, revocable and blockable, with model, route, MCP server, budget, rate and expiry limits, and a `proxy_admin_viewer` read-only role exists. Rotation with a grace period is Enterprise only, so 25, less 10 because the docs pass a key as `?key=` on `/key/info` and on the Claude Code marketplace manifest (15 of 30). `allowed_routes`, MCP permissions by key and team, an approval queue for submitted MCP servers and stdio MCP servers off by default from 1.104.0 (15 of 20). Guardrails can run before a model call and on MCP tool results, and an OWASP LLM Top 10 page maps each risk to a control, but prompt-injection detectors such as Lakera need an Enterprise licence and all of it is off by default (12 of 15). Request and spend logs per key in the open-source build; audit logs of admin actions are Enterprise only (12 of 15). security.md with GitHub private reporting, a bug bounty from $500 to $3,000 for P0 and P1 reports, a security announcements list, SOC 2 Type II per the data security page, CodeQL, OSV and Scorecard workflows, and advisories published on GitHub. No security.txt, and reports without a video are closed unread (18 of 20).\n\n### Agent ergonomics: LiteLLM +23\n\n- Antseed (56): Model reading, as for other routers. Tool use and structured output depend on the seller, and the model list reports both per seller with conservative model-level values (12 of 20 and 8 of 15). Cached-input pricing is advertised per seller where supported (8 of 15). Context length is reported per model as the lowest value across sellers (10 of 15). No batch route found (0 of 10). No SDK of its own for buyers. OpenAI and Anthropic SDKs work against the proxy, and wrappers launch Claude Code, Codex and OpenCode (5 of 10). Documented error codes with fixes, and cost and seller headers on non-streaming responses (13 of 15). Docs per the 8 October check, not re-read on 4 November, because the terms of 9 October 2026 bar scripts that scrape or mine data from the Offerings, which include the documentation.\n- LiteLLM (79): Read with the API lines for the gateway an agent calls. Responses size through the usual `max_tokens` and streaming, and the MCP gateway can replace a large tool catalogue with four virtual tools (tool search) or filter tools by semantic relevance, which cuts context cost (20 of 25). Key, team and spend listings page and filter, though we didn't check every list call (15 of 20). Errors keep the OpenAI envelope with a string `code`, gateway 429s carry `retry-after`, `rate_limit_type` and `reset_at`, management routes answer RFC 9457 problem+json, and a table says which errors are safe to retry (20). Retries, cooldowns and fallbacks run inside the gateway and the docs say which errors to retry, but there are no idempotency keys for the management writes (12 of 20). Any OpenAI or Anthropic SDK works by changing the base URL, but the only first-party client is the Python SDK, and keys and spend need Postgres and a master key before the first call (12 of 15).\n\n### Reliability: LiteLLM +18\n\n- Antseed (52): Read with the local-software lines, since the buyer runs the proxy. Official npm package @antseed/cli with Node.js 20 or later stated, plus desktop installers (20). Public CI on main runs the unit tests, an end-to-end suite and a payment flow (ci.yml in the clone), but the run results on GitHub couldn't be read on 4 November, so 15 of 25. Open issues and pull requests per the 8 October count (74 and 32), with bug reports from late September open then and reply times not sampled (12 of 25). CHANGELOG.md calls out breaking CLI changes, but versions are 0.x patch bumps and recent entries sit under one Unreleased heading (5 of 15). Release tag v0.2.72 and CLI 0.1.220 at that tag, with no statement of stability (0). Whether a request is answered also depends on which sellers are online, which this checklist doesn't score.\n- LiteLLM (70): Read with the local-software lines, since the gateway runs on the operator's hardware and BerriAI hosts nothing an agent calls. litellm on PyPI states Python 3.10 to 3.14, and the gateway ships as a Docker image, a Helm chart and Terraform modules, with GHCR images signed by cosign (20). 51 GitHub Actions workflows plus a CircleCI config cover unit, proxy-database, end-to-end, chaos, mutation and UI tests. The GitHub API was rate-limited for our reader on 6 November and Actions pages refused it on 6 October, so we couldn't confirm main is passing (15 of 25). The issue tracker showed 1,674 open issues on 6 November, with eight bug reports among the 15 newest, seven of them with a reply, against a project that tags several releases a day (10 of 25, down from an unchecked 12). Release notes carry breaking-change bullets, but breaking changes land in weekly minor releases on the 1.x line, so version numbers don't signal them (10 of 15). 1.108.1, past 1.0 (15).\n\n### Payments \u0026 pricing: Antseed +10\n\n- Antseed (70): x402 v2 exists only on `POST /v1/key/topup` of a gateway the owner runs, and is off until enabled per key. Inference is paid through Antseed's own HTTP 402 flow with EIP-712 signatures and USDC channels on Base, which isn't one of the three protocols the rubric names (10 of 40, a judgement call). PRICING.md in the repository says seller prices per 1M tokens are published without authentication at a cached endpoint and live through `antseed network browse --json` (20); the 8 October snapshot figures came from that JSON endpoint and are struck. Free models answer with no card and no account, per the docs on 8 October (20). An agent can install the CLI, get a key generated locally and fund it by a USDC transfer, with no sign-up flow (20). The self-hosted rule gives the same three lines for the free software.\n- LiteLLM (60): Read with the self-hosted rule, since an agent uses the free gateway and Enterprise is a sales-led licence for the same software. No x402, MPP or L402 (0). MIT with no account and no card, so 20, 20 and 20 on the last three lines. Model calls cost what the operator's provider keys cost.\n\n## Score by category\n\n| Category | Weight | Antseed | LiteLLM | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 52 | 70 | LiteLLM +18 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 55 | 91 | LiteLLM +36 |\n| Agent ergonomics | 13% (16.2 this run) | 56 | 79 | LiteLLM +23 |\n| Security \u0026 auth | 14% (17.5 this run) | 45 | 72 | LiteLLM +27 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 70 | 60 | Antseed +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 79 | 82 | LiteLLM +3 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 59 | 63 | LiteLLM +4 |\n| Negative events | ≤15 | -3 | -12 | |\n| **Total** | | **54.1 · C** | **62.4 · B** | |\n\n## Facts side by side\n\n| Fact | Antseed | LiteLLM |\n| --- | --- | --- |\n| Kind | Model router | Model router |\n| Vendor | Antseed Foundation | BerriAI |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | HTTP | HTTP |\n| Auth | None | API key |\n| Pricing | Pay per use | Freemium |\n| x402 | no | no |\n| Licence | GPL-3.0 (LICENSE in the repository). The @antseed/cli manifest on npm carries no licence field | MIT, except the enterprise/ directory, which is under its own licence and needs an Enterprise licence key |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-31 | 2026-11-05 |\n| Terms last updated | 2026-05-15 | no document linked |\n| Privacy policy last updated | no document linked | no date given |\n| Customer content may train models | not found in the text | not read yet |\n| Terms restrict automated access | not found in the text | not read yet |\n| Terms restrict benchmarking | not found in the text | not read yet |\n| Terms or service can change without notice | not found in the text | not read yet |\n| Arbitration or class-action waiver | not found in the text | not read yet |\n| Popularity | 106 stars, 1.8k npm/wk | 63k stars, 22.5M PyPI/wk |\n\n## How the scores have moved\n\n### Antseed\n\n- -1.0 on 4 November 2026: security, new evidence\n\n### LiteLLM\n\nNo score change since it was listed.\n\n## Verdicts\n\n**Antseed.** A buyer needs no account. The CLI creates a wallet key, free models answer at once and paid ones draw on deposited USDC, with seller, tokens and cost in response headers. Sellers are unvetted and can read prompts unless TEE-verified, the proxy forwarded client credentials to them until 12 October 2026 with no advisory, and every package is pre-1.0.\n\n**LiteLLM.** An MIT-licensed gateway that puts 100+ model providers behind one OpenAI-compatible API, with virtual keys, budgets, fallbacks and an MCP gateway, released several times a week. Its security record is the main limitation. Two PyPI releases carried a credential stealer on 24 March 2026, and 30 GitHub advisories followed in 12 months, five of them critical.\n\n## Before you call either\n\n### Antseed\n\n1. Send a placeholder key such as `antseed-p2p`, and run v0.2.58 or later, which stops credential headers reaching sellers.\n2. Call `GET /v1/models` first and request a concrete id. The `antseed` alias works only when the desktop app has a model selected\n3. Handle 402 `insufficient_deposits` by reading `suggestedAmount`, then fund the address from `antseed buyer deposit` with USDC on Base\n4. Pass `--verifiers antseed-verifier --require-verifier` to `antseed buyer start` when prompts are private, so only TEE-verified sellers are routed\n5. Read `x-antseed-peer-id` and `x-antseed-estimated-cost-usd` on each response, and pin a seller with `\u003cpeerId\u003e@\u003cmodel\u003e` when the same one must answer\n\n### LiteLLM\n\n1. Pin an exact litellm version or image digest, verify the cosign signature, and never install an unpinned latest in CI\n2. Give each agent a virtual key limited to its models, routes and MCP servers, with a budget and an expiry\n3. Treat a 429 with `retry-after` as the gateway's own limit and wait that long; a 429 without it came from the provider\n4. Set `NO_DOCS`, `NO_REDOC` and `NO_OPENAPI` to True in production, and use the `-non_root` image variant\n5. Set `LITELLM_LOCAL_MODEL_COST_MAP=True` where egress is blocked, since start-up otherwise fetches the price map from GitHub\n\n## Questions\n\n### Which is better for AI agents, Antseed or LiteLLM?\n\nLiteLLM scores 62.4 (B) on agent readiness against Antseed's 54.1 (C), and leads in 6 of 7 scored categories. Antseed leads on payments \u0026 pricing.\n\n### Do Antseed and LiteLLM need an API key?\n\nAntseed needs no key. LiteLLM needs an API key.\n\n### Can an agent call Antseed and LiteLLM without installing anything?\n\nNo hosted endpoint is listed for Antseed. No hosted endpoint is listed for LiteLLM.\n\n### Are Antseed and LiteLLM open source?\n\nYes. Antseed is open source (GPL-3.0 (LICENSE in the repository). The @antseed/cli manifest on npm carries no licence field). LiteLLM is open source (MIT, except the enterprise/ directory, which is under its own licence and needs an Enterprise licence key).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/antseed-vs-litellm.json, and with the fewest tokens: https://www.anchorterminal.com/compare/antseed-vs-litellm.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"antseed\", \"b\": \"litellm\"}`. From a terminal: `anchor compare antseed litellm`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/antseed.json and https://www.anchorterminal.com/api/v1/tools/litellm.json\n\n## Other comparisons with Antseed or LiteLLM\n\n- [Amazon Bedrock vs Antseed](https://www.anchorterminal.com/compare/amazon-bedrock-vs-antseed.md)\n- [Claude API vs Antseed](https://www.anchorterminal.com/compare/anthropic-api-vs-antseed.md)\n- [Antseed vs Azure OpenAI in Foundry Models](https://www.anchorterminal.com/compare/antseed-vs-azure-openai.md)\n- [Antseed vs BlockRun.AI](https://www.anchorterminal.com/compare/antseed-vs-blockrun-ai.md)\n- [Antseed vs Cerebras Inference](https://www.anchorterminal.com/compare/antseed-vs-cerebras-inference.md)\n- [Antseed vs Cloudflare Workers AI](https://www.anchorterminal.com/compare/antseed-vs-cloudflare-workers-ai.md)\n- [Antseed vs Cohere Chat API (Command models)](https://www.anchorterminal.com/compare/antseed-vs-cohere-chat.md)\n- [Antseed vs DeepInfra](https://www.anchorterminal.com/compare/antseed-vs-deepinfra.md)\n- [Antseed vs DeepSeek API](https://www.anchorterminal.com/compare/antseed-vs-deepseek-api.md)\n- [Antseed vs Glimpse](https://www.anchorterminal.com/compare/antseed-vs-elorian-glimpse.md)\n- [Antseed vs Fireworks AI Inference](https://www.anchorterminal.com/compare/antseed-vs-fireworks-inference.md)\n- [Antseed vs Gemini Developer API](https://www.anchorterminal.com/compare/antseed-vs-gemini-api.md)\n- [Antseed vs GroqCloud](https://www.anchorterminal.com/compare/antseed-vs-groq.md)\n- [Antseed vs Inkling 2 Small](https://www.anchorterminal.com/compare/antseed-vs-inkling-2-small.md)\n- [Antseed vs Jais 3](https://www.anchorterminal.com/compare/antseed-vs-jais-3.md)\n- [Antseed vs Meta Model API](https://www.anchorterminal.com/compare/antseed-vs-meta-model-api.md)\n- [Antseed vs MiniMax API](https://www.anchorterminal.com/compare/antseed-vs-minimax-api.md)\n- [Antseed vs Mistral AI API](https://www.anchorterminal.com/compare/antseed-vs-mistral-api.md)\n- [Antseed vs Muse Spark Open](https://www.anchorterminal.com/compare/antseed-vs-muse-spark-open.md)\n- [Antseed vs Nemotron 3.5 Super VL](https://www.anchorterminal.com/compare/antseed-vs-nemotron-3-5-super-vl.md)\n- [Antseed vs Novita AI](https://www.anchorterminal.com/compare/antseed-vs-novita-ai.md)\n- [Antseed vs OpenAI API](https://www.anchorterminal.com/compare/antseed-vs-openai-api.md)\n- [Antseed vs Prism Inference](https://www.anchorterminal.com/compare/antseed-vs-prism-inference.md)\n- [Antseed vs Beam 1.0](https://www.anchorterminal.com/compare/antseed-vs-reflection-beam.md)\n- [Antseed vs SambaCloud](https://www.anchorterminal.com/compare/antseed-vs-sambanova.md)\n- [Antseed vs SiliconFlow](https://www.anchorterminal.com/compare/antseed-vs-siliconflow.md)\n- [Antseed vs Simplismart](https://www.anchorterminal.com/compare/antseed-vs-simplismart.md)\n- [Antseed vs StepFun API](https://www.anchorterminal.com/compare/antseed-vs-stepfun-api.md)\n- [Antseed vs SWE-2 Flash](https://www.anchorterminal.com/compare/antseed-vs-swe-2-flash.md)\n- [Antseed vs Together AI Inference](https://www.anchorterminal.com/compare/antseed-vs-together-inference.md)\n- [Antseed vs Vertex AI (Gemini Enterprise Agent Platform)](https://www.anchorterminal.com/compare/antseed-vs-vertex-ai.md)\n- [Antseed vs xAI API (Grok)](https://www.anchorterminal.com/compare/antseed-vs-xai-api.md)\n- [Antseed vs Cloudflare AI Gateway](https://www.anchorterminal.com/compare/antseed-vs-cloudflare-ai-gateway.md)\n- [Antseed vs Eden AI](https://www.anchorterminal.com/compare/antseed-vs-eden-ai.md)\n- [Antseed vs Hugging Face Inference Providers](https://www.anchorterminal.com/compare/antseed-vs-hugging-face-inference-providers.md)\n- [Antseed vs OpenRouter](https://www.anchorterminal.com/compare/antseed-vs-openrouter.md)\n- [Antseed vs Router.com (Ramp Router)](https://www.anchorterminal.com/compare/antseed-vs-ramp-router.md)\n- [Antseed vs RouterPlus](https://www.anchorterminal.com/compare/antseed-vs-routerplus.md)\n- [Antseed vs Tencent Cloud TokenHub](https://www.anchorterminal.com/compare/antseed-vs-tencent-tokenhub.md)\n- [Antseed vs Vercel AI Gateway](https://www.anchorterminal.com/compare/antseed-vs-vercel-ai-gateway.md)\n- [Cloudflare AI Gateway vs LiteLLM](https://www.anchorterminal.com/compare/cloudflare-ai-gateway-vs-litellm.md)\n- [Eden AI vs LiteLLM](https://www.anchorterminal.com/compare/eden-ai-vs-litellm.md)\n- [Hugging Face Inference Providers vs LiteLLM](https://www.anchorterminal.com/compare/hugging-face-inference-providers-vs-litellm.md)\n- [LiteLLM vs OpenRouter](https://www.anchorterminal.com/compare/litellm-vs-openrouter.md)\n- [LiteLLM vs Router.com (Ramp Router)](https://www.anchorterminal.com/compare/litellm-vs-ramp-router.md)\n- [LiteLLM vs RouterPlus](https://www.anchorterminal.com/compare/litellm-vs-routerplus.md)\n- [LiteLLM vs Tencent Cloud TokenHub](https://www.anchorterminal.com/compare/litellm-vs-tencent-tokenhub.md)\n- [LiteLLM vs Vercel AI Gateway](https://www.anchorterminal.com/compare/litellm-vs-vercel-ai-gateway.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Antseed vs LiteLLM", "url": "" } ], "description": "LiteLLM scores 62.4 (B) to Antseed's 54.1 (C) for model routing. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Antseed C 54.1", "LiteLLM B 62.4", "scores" ], "h1": "Antseed vs LiteLLM", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/antseed-vs-litellm", "published": "2026-10-01", "section": "tools", "title": "Antseed vs LiteLLM for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/antseed-vs-litellm" }, "tokens": { "markdown": 5450, "slim": 2980 }, "version": 1 }