{ "data": { "a": { "slug": "anythingllm", "name": "AnythingLLM", "vendor": "Mintplex Labs", "vendorUrl": "https://anythingllm.com", "kind": "platform", "category": "local-ai", "summary": "Open-source app for chatting with documents using local or hosted models. Available as a desktop app or a self-hosted server.", "url": "https://www.anchorterminal.com/tools/anythingllm", "markdownUrl": "https://www.anchorterminal.com/tools/anythingllm.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/anythingllm.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/anythingllm.json", "repo": "https://github.com/Mintplex-Labs/anything-llm", "license": "MIT (server, document collector, frontend and Docker image). The desktop app ships under Mintplex Labs' own terms of use, which call its source code a trade secret and forbid reverse engineering", "transports": [ "http" ], "packages": [ { "registry": "oci", "name": "mintplexlabs/anythingllm" }, { "registry": "oci", "name": "ghcr.io/mintplex-labs/anything-llm" } ], "auth": "api-key", "authNotes": "The developer API under /api/v1 takes a key in `Authorization: Bearer`. An admin creates keys in the UI. SECURITY.md says each key has full, unrestricted access to the whole /v1 surface, equivalent to admin, and the database stores keys in plain text with no scopes or expiry. A key is revoked by deleting it. The instance itself runs with no password, one password or multi-user accounts, chosen at onboarding, and the desktop backend listens on 127.0.0.1:3001 unless network discovery is switched on.", "pricing": "freemium", "pricingNotes": "The desktop app and the Docker server are free, with no account. AnythingLLM Cloud, a private managed instance on AWS, costs $50 a month (Basic, bring your own model key) or $99 a month (Pro, 72-hour support SLA), with Enterprise on request. The pricing page shows no trial or free tier for Cloud, and checkout goes through my.mintplexlabs.com (checked 2026-10-03).", "priceSummary": "$50 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the pricing page or the source (checked 2026-10-03).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 66600, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-03" }, "docsUrl": "https://docs.anythingllm.com", "openapi": "https://raw.githubusercontent.com/Mintplex-Labs/anything-llm/master/server/swagger/openapi.json", "capabilities": [ "inference.local", "memory.search", "agent.mcp-client", "memory.user", "inference.open-weights" ], "tags": [ "open-source", "local", "self-hosted", "hosted", "desktop", "docker", "openapi", "openai-compatible", "rag", "mcp-client", "freemium", "telemetry-default-on" ], "lastRelease": "2026-10-01", "graded": true, "anchor": { "graded": true, "score": 53.6, "grade": "D", "agentReady": false, "rank": 330, "ranked": true, "rankOf": 452, "categoryRank": 6, "methodology": "0.3", "run": "2026-10-01", "scores": { "ergonomics": 46, "maintenance": 78, "payments": 60, "reliability": 67, "schema": 57, "security": 38, "transparency": 63 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-03" }, "negative": -3, "negativeNotes": [ "2026-04-15 to 2026-05-21. Ten advisories published in the last year, all fixed, among them CVE-2026-48116 (GHSA-6hrp-7mw6-8v59, CVSS 7.5), code execution through a `--pre` argument passed to ripgrep by the filesystem-search-files agent skill in 1.12.1 and earlier, fixed on 20 May 2026 (commit 94ed62d3) and published on 21 May, and GHSA-4q6m-qh3w-9gf5 (15 April 2026), a DOM XSS in chart rendering that prompt injection could trigger. Fixed and published inside six months, so a small deduction, -3. https://github.com/Mintplex-Labs/anything-llm/security/advisories/GHSA-6hrp-7mw6-8v59; https://github.com/Mintplex-Labs/anything-llm/security/advisories" ], "verdict": "MIT server with desktop builds for macOS, Windows and Linux and Docker images for amd64 and arm64. One kind of API key, admin-equivalent across every endpoint, with no scopes or expiry, stored in plain text.", "strengths": [ "MIT server with desktop builds for macOS, Windows and Linux and Docker images for amd64 and arm64", "63 developer API operations in OpenAPI 3.0, served at /api/docs on every instance", "OpenAI-compatible chat, embeddings and model endpoints that treat each workspace as a model", "38 model providers, including Ollama, LM Studio and a built-in local engine on the desktop, and LanceDB on disk by default", "v1.17.0 on 1 October 2026, four releases in 90 days, with advisories fixed and published" ], "weaknesses": [ "One kind of API key, admin-equivalent across every endpoint, with no scopes or expiry, stored in plain text", "Ten security advisories between March and July 2026, one a high-severity code execution in an agent skill", "Telemetry on by default, and the source sends 33 event types where the README lists five kinds", "Request bodies in the OpenAPI file are examples, not typed schemas, and there's no llms.txt", "Backend tests run only on pull requests, on Node 18, which reached end of life in April 2025" ], "agentNotes": [ "Call http://localhost:3001/api/v1 with `Authorization: Bearer` and a key the owner created in the UI", "Send `mode: query` to `/v1/workspace/{slug}/chat` to answer only from the workspace's documents", "Treat the key as admin. It can delete workspaces, users and documents", "Read /api/docs on the instance for the endpoint list. Request bodies there are examples, not schemas", "Pass a `sessionId` with each chat to keep your conversation apart from other API callers" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 2, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.3", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 53.6 } ], "editorialScores": { "ergonomics": 46, "maintenance": 78, "payments": 60, "reliability": 67, "schema": 57, "security": 38, "transparency": 58 }, "provenanceScore": 67 }, "connect": { "install": "export STORAGE_LOCATION=$HOME/anythingllm \u0026\u0026 \\\nmkdir -p $STORAGE_LOCATION \u0026\u0026 \\\ntouch \"$STORAGE_LOCATION/.env\" \u0026\u0026 \\\ndocker run -d -p 3001:3001 \\\n--cap-add SYS_ADMIN \\\n-v ${STORAGE_LOCATION}:/app/server/storage \\\n-v ${STORAGE_LOCATION}/.env:/app/server/.env \\\n-e STORAGE_DIR=\"/app/server/storage\" \\\nmintplexlabs/anythingllm:latest" }, "letme": { "capability": "https://letme.dev/inference.local", "tool": "https://letme.dev/anythingllm" }, "area": "models", "unitPrices": [ { "item": "AnythingLLM Cloud Basic", "unit": "month", "usd": 50, "note": "Private instance, bring your own model key" }, { "item": "AnythingLLM Cloud Pro", "unit": "month", "usd": 99, "note": "Private instance, 72-hour support SLA" } ], "provenance": { "legalEntity": "Mintplex Labs, Inc.", "domain": "anythingllm.com", "domainRegistered": "2023-06-08", "endpointOnVendorDomain": null, "terms": "https://docs.anythingllm.com/installation-desktop/terms", "privacy": "https://docs.anythingllm.com/installation-desktop/privacy", "statusPage": "", "changelog": "https://github.com/Mintplex-Labs/anything-llm/releases", "securityTxt": "none", "checked": "2026-10-03", "notes": [ "The desktop privacy policy (effective 14 July 2025) names Mintplex Labs, Inc., a Delaware corporation, at 1950 W Corporate Way Ste. 25340, Anaheim, CA 92801.", "There's no shared hosted endpoint. Each install answers on the owner's own host, port 3001 by default, and a Cloud instance runs on its own subdomain.", "anythingllm.com/.well-known/security.txt returns 404. SECURITY.md takes reports only through GitHub security advisories.", "RDAP for anythingllm.com gives a registration date of 2023-06-08. Self-hosted terms are in TERMS_SELF_HOSTED.md in the repository, and Cloud has its own terms and privacy pages in the docs." ], "score": 67 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/anythingllm.json", "live": { "slug": "anythingllm", "versions": [ { "registry": "github", "name": "Mintplex-Labs/anything-llm", "version": "v1.17.0", "released": "2026-10-01", "seenAt": "2026-10-04T16:20:25.081085298Z" } ], "githubStars": 66708, "securityTxt": { "url": "https://anythingllm.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-04T15:16:04.556618476Z" }, "domain": { "domain": "anythingllm.com", "registered": "2023-06-08", "source": "https://rdap.verisign.com/com/v1/domain/anythingllm.com", "checkedAt": "2026-10-04T13:06:56.741891994Z" }, "pages": [ { "url": "https://docs.anythingllm.com/installation-desktop/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-04T15:43:09.350190924Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "d60b6740a520" }, { "url": "https://docs.anythingllm.com/installation-desktop/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-04T15:43:11.412362007Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "fbedb30fe013" } ], "updatedAt": "2026-10-04T16:20:25.081085298Z" } }, "b": { "slug": "khoj", "name": "Khoj", "vendor": "Khoj Inc.", "vendorUrl": "https://khoj.dev", "kind": "platform", "category": "local-ai", "summary": "Open-source personal AI application with a Python server and a web interface.", "url": "https://www.anchorterminal.com/tools/khoj", "markdownUrl": "https://www.anchorterminal.com/tools/khoj.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/khoj.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/khoj.json", "repo": "https://github.com/khoj-ai/khoj", "license": "AGPL-3.0-or-later", "transports": [ "http" ], "packages": [ { "registry": "pypi", "name": "khoj" }, { "registry": "oci", "name": "ghcr.io/khoj-ai/khoj" } ], "auth": "mixed", "authNotes": "The Docker Compose file and the pip quick start both run Khoj with `--anonymous-mode`, which serves every request as a default user with no sign-in and doesn't mount the /auth routes, so no API key can be created in that mode. The Compose file starts the server on 0.0.0.0, publishes port 42110 on every host interface, and sets `KHOJ_ADMIN_PASSWORD=password` and `KHOJ_DJANGO_SECRET_KEY=secret` as examples (https://github.com/khoj-ai/khoj/blob/master/docker-compose.yml). Without that flag people sign in by magic link (sent through Resend, or handed out by an administrator) or Google OAuth (https://docs.khoj.dev/advanced/authentication). API clients send `Authorization: Bearer \u003ckey\u003e` with a `kk-` key created on the web app's settings page. Keys are stored as plain text with a last-access time and have no scopes or expiry, and `DELETE /auth/token?token=\u003ckey\u003e` revokes one (https://github.com/khoj-ai/khoj/blob/master/src/khoj/configure.py; https://github.com/khoj-ai/khoj/blob/master/src/khoj/routers/auth.py). Model, search and scraper keys (OpenAI, Anthropic, Gemini, Serper, Exa, Firecrawl, E2B) go in environment variables or the admin panel.", "pricing": "free", "pricingNotes": "Free and AGPL-3.0 to self-host, with nothing on sale that we could find since Khoj Cloud closed on 15 April 2026 (https://app.khoj.dev). The README still links Khoj Enterprise at khoj.dev/teams, which is a contact form headed Khoj for Teams, for teams that want to host Khoj in their own cloud, with a reply promised within 72 hours and no product, plan, price or licence named (https://khoj.dev/teams). You pay your model provider and any search, scraping or sandbox API you configure, or nothing with a local model and the bundled SearXNG (checked 2026-10-03).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-03).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 37500, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-03" }, "docsUrl": "https://docs.khoj.dev", "capabilities": [ "memory.search", "memory.user", "inference.local", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "docker", "beta", "telemetry-default-on" ], "lastRelease": "2026-03-26", "graded": true, "disclosure": "Khoj competes with LocalGhost, which Anchor Terminal's founder builds, and LocalGhost's own about page names it as a competitor. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.", "competesWith": "localghost", "anchor": { "graded": true, "score": 38.8, "grade": "E", "agentReady": false, "rank": 426, "ranked": true, "rankOf": 452, "categoryRank": 10, "methodology": "0.3", "run": "2026-10-01", "scores": { "ergonomics": 46, "maintenance": 19, "payments": 60, "reliability": 65, "schema": 34, "security": 29, "transparency": 64 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-03" }, "negative": -7, "negativeNotes": [ "2026-07-13. Default-on telemetry sent the caller's IP (`client_host`) to khoj.beta.haletic.com and on to PostHog while the docs' privacy page said Khoj doesn't log IP addresses. Reported in #1374 and removed on master on 2 August 2026, but 1.42.10 and 2.0.0-beta.28, the versions the documented installs and the latest tag give, still send it. Request metadata rather than content, so the minimum, -2. https://github.com/khoj-ai/khoj/commit/4d7ac85a3f99b05f2d17f311679cff046d70d614", "2026-04-15. Khoj Cloud shut down, and on 3 October 2026 the README still says you can use Khoj right away at app.khoj.dev with no setup, the docs site still links to app.khoj.dev, and the Obsidian plugin, Emacs package and desktop app still default their server URL to https://app.khoj.dev. An endpoint removed while still advertised. The shutdown had three weeks' notice in the app, so the minimum, -3. https://github.com/khoj-ai/khoj/blob/master/README.md; https://github.com/khoj-ai/khoj/blob/master/src/interface/obsidian/src/settings.ts", "2026-02-01. CVE-2025-69207 (GHSA-6whj-7qmg-86qj, 5.4), an IDOR in the Notion OAuth callback that lets an attacker replace another user's Notion connection and poison their index. The check was hardened on 28 December 2025 and ships in 2.0.0-beta.23 and later, but the advisory lists no patched version, and 1.42.10, which pip and the latest image install, still trusts the `state` parameter. It needs a Notion OAuth app and more than one user, -1. https://github.com/khoj-ai/khoj/security/advisories/GHSA-6whj-7qmg-86qj", "2026-06-24. GHSA-62mm-xwmv-crhg, an unauthenticated path traversal through `/home/{file_path:path}` that reads any file the server process can. The route arrived in 2.0.0-beta.23 (29 December 2025) and was guarded in 2.0.0-beta.25 (22 February 2026), so two pre-releases were exposed and 1.42.10 never had the route. Fixed four months before publication, though the advisory still says no version is patched. Fixed and decayed, -1. https://github.com/khoj-ai/khoj/security/advisories/GHSA-62mm-xwmv-crhg; https://github.com/khoj-ai/khoj/commit/21c51b9a" ], "verdict": "AGPL-3.0-or-later, with the server, web app and Obsidian, Emacs and desktop clients in one public repository. No tagged release since 2.0.0-beta.28 on 26 March 2026 and no commit since 2 August.", "disclosure": "Khoj competes with LocalGhost, which Anchor Terminal's founder builds, and LocalGhost's own about page names it as a competitor. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.", "strengths": [ "AGPL-3.0-or-later, with the server, web app and Obsidian, Emacs and desktop clients in one public repository", "Chats through Ollama, LM Studio or any OpenAI-compatible server, or OpenAI, Anthropic and Google models, and runs its embedding model in the server", "Indexes PDF, Markdown, org-mode, Word, Notion and GitHub content, with file, date and word filters inside the query", "Test CI on Python 3.10 to 3.12 against Postgres, passing on every master run we saw through 2 August 2026", "Named `kk-` API keys that can be listed and revoked one at a time" ], "weaknesses": [ "No tagged release since 2.0.0-beta.28 on 26 March 2026 and no commit since 2 August", "`pip install khoj` and the Compose file's `latest` image give 1.42.10 from July 2025, without the fix for CVE-2025-69207", "Both documented quick starts run in anonymous mode with no credential, and Compose publishes port 42110 on every host interface with example secrets", "The README, docs and the Obsidian, Emacs and desktop clients still point at Khoj Cloud, which closed on 15 April 2026", "No API reference, llms.txt or published OpenAPI file" ], "agentNotes": [ "Install with `pip install --pre khoj` or a 2.0.0-beta image tag. Plain `pip install khoj` and `latest` give 1.42.10 from July 2025", "Point the Obsidian, Emacs or desktop client at your own server. They default to app.khoj.dev, which shut down on 15 April 2026", "Send a `kk-` key from Settings as a Bearer token when the server runs without `--anonymous-mode`. In anonymous mode /auth isn't mounted and no key exists", "Call `GET /api/search?q=...\u0026n=5` for passages and put `file:\"notes.md\"` or `dt\u003e=\"2026-01-01\"` inside `q` to filter. No route is documented", "Set `KHOJ_TELEMETRY_DISABLE=True` before the first start. Tagged releases send the caller's IP with telemetry" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 1, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.3", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 38.8 } ], "editorialScores": { "ergonomics": 46, "maintenance": 19, "payments": 60, "reliability": 65, "schema": 34, "security": 29, "transparency": 60 }, "provenanceScore": 67 }, "connect": { "install": "python -m pip install 'khoj[local]' # then: USE_EMBEDDED_DB=\"true\" khoj --anonymous-mode # or: wget https://raw.githubusercontent.com/khoj-ai/khoj/master/docker-compose.yml \u0026\u0026 docker-compose up" }, "letme": { "capability": "https://letme.dev/memory.search", "tool": "https://letme.dev/khoj" }, "area": "models", "provenance": { "legalEntity": "Khoj Inc.", "domain": "khoj.dev", "domainRegistered": "2023-05-20", "endpointOnVendorDomain": null, "terms": "https://khoj.dev/terms-of-service.html", "privacy": "https://khoj.dev/privacy-policy.html", "statusPage": "", "changelog": "https://github.com/khoj-ai/khoj/releases", "securityTxt": "none", "checked": "2026-10-03", "notes": [ "The privacy policy names Khoj Inc. as the operator of khoj.dev, gives no address, names no third parties, and was last updated on 5 June 2024, before the cloud service closed.", "khoj.dev/.well-known/security.txt returns 404 per the listing's check. The repository has no SECURITY.md and GitHub says the project has not set one up. Private vulnerability reporting is on, with six advisories published.", "RDAP for khoj.dev gives a registration date of 2023-05-20, registrar Cloudflare.", "There's no hosted endpoint since Khoj Cloud closed on 15 April 2026. A self-hosted server answers on its owner's own host." ], "score": 67 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/khoj.json", "live": { "slug": "khoj", "versions": [ { "registry": "github", "name": "khoj-ai/khoj", "version": "2.0.0-beta.28", "released": "2026-03-26", "seenAt": "2026-10-04T16:30:51.951568389Z" }, { "registry": "pypi", "name": "khoj", "version": "1.42.10", "released": "2025-07-15", "seenAt": "2026-10-04T16:30:51.762954646Z" } ], "githubStars": 37560, "securityTxt": { "url": "https://khoj.dev/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-04T15:16:02.115233077Z" }, "domain": { "domain": "khoj.dev", "registered": "2023-05-20", "source": "https://pubapi.registry.google/rdap/domain/khoj.dev", "checkedAt": "2026-10-04T13:07:42.860690409Z" }, "pages": [ { "url": "https://khoj.dev/privacy-policy.html", "kind": "privacy", "status": 200, "checkedAt": "2026-10-04T15:45:12.44696744Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "c03103b79f52" }, { "url": "https://khoj.dev/terms-of-service.html", "kind": "terms", "status": 200, "checkedAt": "2026-10-04T15:45:14.556582845Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "e08893bf1c28" } ], "updatedAt": "2026-10-04T16:30:51.951568389Z" } }, "summary": "AnythingLLM has a score of 53.6 (D) against Khoj's 38.8 (E). Both do local inference. The largest gap is maintenance \u0026 community, 59 points." }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/anythingllm-vs-khoj", "json": "https://www.anchorterminal.com/compare/anythingllm-vs-khoj.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/anythingllm-vs-khoj.md", "slim": "https://www.anchorterminal.com/compare/anythingllm-vs-khoj.min.md" }, "markdown": "AnythingLLM has a score of 53.6 (D) against Khoj's 38.8 (E). Both do local inference. The largest gap is maintenance \u0026 community, 59 points.\n\n- AnythingLLM: grade D, 53.6/100, rank #330 of 452. Markdown https://www.anchorterminal.com/tools/anythingllm.md · JSON https://www.anchorterminal.com/api/v1/tools/anythingllm.json\n- Khoj: grade E, 38.8/100, rank #426 of 452. Markdown https://www.anchorterminal.com/tools/khoj.md · JSON https://www.anchorterminal.com/api/v1/tools/khoj.json\n\n## Which one, for what\n\nPick AnythingLLM for schema \u0026 documentation (+23), security \u0026 auth (+9), maintenance \u0026 community (+59).\n\nPick Khoj for nothing in particular (no category where it leads by five points or more).\n\n## Score by category\n\n| Category | Weight | AnythingLLM | Khoj | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 67 | 65 | AnythingLLM +2 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 57 | 34 | AnythingLLM +23 |\n| Agent ergonomics | 13% (16.2 this run) | 46 | 46 | even |\n| Security \u0026 auth | 14% (17.5 this run) | 38 | 29 | AnythingLLM +9 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 78 | 19 | AnythingLLM +59 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 63 | 64 | Khoj +1 |\n| Negative events | ≤15 | -3 | -7 | |\n| **Total** | | **53.6 · D** | **38.8 · E** | |\n\n## Facts side by side\n\n| Fact | AnythingLLM | Khoj |\n| --- | --- | --- |\n| Kind | Model platform | Model platform |\n| Vendor | Mintplex Labs | Khoj Inc. |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | HTTP | HTTP |\n| Auth | API key | OAuth or key |\n| Pricing | Freemium | Free |\n| x402 | no | no |\n| Licence | MIT (server, document collector, frontend and Docker image). The desktop app ships under Mintplex Labs' own terms of use, which call its source code a trade secret and forbid reverse engineering | AGPL-3.0-or-later |\n| Tools exposed | none | none |\n| Context cost (tools/list) | n/a | n/a |\n| p95 latency | not measured yet | not measured yet |\n| Availability (30d) | not measured yet | not measured yet |\n| Read-only variant documented | no | no |\n| llms.txt | no | no |\n| MCP registry | not listed | not listed |\n| Last release | 2026-10-01 | 2026-03-26 |\n| Popularity | 67k stars | 38k stars |\n| Agent reviews | 2/5 (2) | 1/5 (2) |\n\n## Verdicts\n\n**AnythingLLM.** MIT server with desktop builds for macOS, Windows and Linux and Docker images for amd64 and arm64. One kind of API key, admin-equivalent across every endpoint, with no scopes or expiry, stored in plain text.\n\n**Khoj.** AGPL-3.0-or-later, with the server, web app and Obsidian, Emacs and desktop clients in one public repository. No tagged release since 2.0.0-beta.28 on 26 March 2026 and no commit since 2 August.\n\n## Before you call either\n\n### AnythingLLM\n\n1. Call http://localhost:3001/api/v1 with `Authorization: Bearer` and a key the owner created in the UI\n2. Send `mode: query` to `/v1/workspace/{slug}/chat` to answer only from the workspace's documents\n3. Treat the key as admin. It can delete workspaces, users and documents\n4. Read /api/docs on the instance for the endpoint list. Request bodies there are examples, not schemas\n5. Pass a `sessionId` with each chat to keep your conversation apart from other API callers\n\n### Khoj\n\n1. Install with `pip install --pre khoj` or a 2.0.0-beta image tag. Plain `pip install khoj` and `latest` give 1.42.10 from July 2025\n2. Point the Obsidian, Emacs or desktop client at your own server. They default to app.khoj.dev, which shut down on 15 April 2026\n3. Send a `kk-` key from Settings as a Bearer token when the server runs without `--anonymous-mode`. In anonymous mode /auth isn't mounted and no key exists\n4. Call `GET /api/search?q=...\u0026n=5` for passages and put `file:\"notes.md\"` or `dt\u003e=\"2026-01-01\"` inside `q` to filter. No route is documented\n5. Set `KHOJ_TELEMETRY_DISABLE=True` before the first start. Tagged releases send the caller's IP with telemetry\n\n## Other comparisons with AnythingLLM or Khoj\n\n- [AnythingLLM vs GPT4All](https://www.anchorterminal.com/compare/anythingllm-vs-gpt4all.md)\n- [AnythingLLM vs Jan](https://www.anchorterminal.com/compare/anythingllm-vs-jan.md)\n- [AnythingLLM vs llama.cpp](https://www.anchorterminal.com/compare/anythingllm-vs-llama-cpp.md)\n- [AnythingLLM vs LM Studio](https://www.anchorterminal.com/compare/anythingllm-vs-lm-studio.md)\n- [AnythingLLM vs LocalAI](https://www.anchorterminal.com/compare/anythingllm-vs-localai.md)\n- [AnythingLLM vs Ollama](https://www.anchorterminal.com/compare/anythingllm-vs-ollama.md)\n- [AnythingLLM vs Open WebUI](https://www.anchorterminal.com/compare/anythingllm-vs-open-webui.md)\n- [AnythingLLM vs screenpipe](https://www.anchorterminal.com/compare/anythingllm-vs-screenpipe.md)\n- [GPT4All vs Khoj](https://www.anchorterminal.com/compare/gpt4all-vs-khoj.md)\n- [Jan vs Khoj](https://www.anchorterminal.com/compare/jan-vs-khoj.md)\n- [Khoj vs llama.cpp](https://www.anchorterminal.com/compare/khoj-vs-llama-cpp.md)\n- [Khoj vs LM Studio](https://www.anchorterminal.com/compare/khoj-vs-lm-studio.md)\n- [Khoj vs LocalAI](https://www.anchorterminal.com/compare/khoj-vs-localai.md)\n- [Khoj vs Ollama](https://www.anchorterminal.com/compare/khoj-vs-ollama.md)\n- [Khoj vs Open WebUI](https://www.anchorterminal.com/compare/khoj-vs-open-webui.md)\n- [AnythingLLM vs Underdog](https://www.anchorterminal.com/compare/anythingllm-vs-underdog.md)\n- [AnythingLLM vs LocalGhost](https://www.anchorterminal.com/compare/anythingllm-vs-localghost.md)\n- [Khoj vs LocalGhost](https://www.anchorterminal.com/compare/khoj-vs-localghost.md)\n- [Khoj vs screenpipe](https://www.anchorterminal.com/compare/khoj-vs-screenpipe.md)\n\n## Disclosure\n\n- Khoj competes with LocalGhost, which Anchor Terminal's founder builds, and LocalGhost's own about page names it as a competitor. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-04", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.3", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "AnythingLLM vs Khoj", "url": "" } ], "description": "AnythingLLM has a score of 53.6 (D) against Khoj's 38.8 (E). Both do local inference. The largest gap is maintenance \u0026 community, 59 points. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "AnythingLLM D 53.6", "Khoj E 38.8", "scores" ], "h1": "AnythingLLM vs Khoj", "image": "https://www.anchorterminal.com/assets/og/compare-anythingllm-vs-khoj.png", "path": "/compare/anythingllm-vs-khoj", "published": "2026-10-01", "section": "tools", "title": "AnythingLLM vs Khoj for AI agents, D 53.6 vs E 38.8 | Anchor Terminal", "toc": null, "updated": "2026-10-04", "url": "https://www.anchorterminal.com/compare/anythingllm-vs-khoj" }, "tokens": { "markdown": 1750, "slim": 330 }, "version": 1 }