Sign in

Head to head · Assistants reached by message · October 2026 research run

AstrBot vs DeepTutor

DeepTutor scores 62.7 (B) on agent readiness against AstrBot's 59 (C), and leads in 5 of 7 scored categories. Both do assistants reached by message.

Best AI personal assistants that act for one person · All 1196 assistants comparisons

AstrBotAstrBotDevs · Agent harness C59/100#659 of 1238 DeepTutorHKUDS · Agent harness B62.7/100#494 of 1238

Which one, for what

AstrBot C

Best for Someone who wants one self-run bot answering on QQ, Telegram, Slack, Discord, Lark or WeCom, in private or group chats, with scheduled tasks, a knowledge base and plugins.

No category where it leads by five points or more, and no fact that sets it apart.

Watch for

No approval step before any tool call. The agent sends messages, creates scheduled tasks and calls MCP tools without asking

DeepTutor B

Best for A learner, a teacher or a small group that wants a self-hosted tutor over their own documents, with quizzes, research reports, memory and IM companions, or for an agent that hands study tasks to it through the JSON CLI.

Ahead on

  • Schema & documentation, 71 against 62
  • Agent ergonomics, 63 against 54
  • Security & auth, 51 against 44
  • Transparency & trust, 52 against 42

Also in its favour

  • No key needed to call it

Watch for

The default launch binds the backend to 0.0.0.0 with sign-in off and CORS open to any origin with credentials

Score by category

CategoryWeight this runAstrBotDeepTutorEdge
Reliability16%208178AstrBot +3
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.26271DeepTutor +9
Agent ergonomics13%16.25463DeepTutor +9
Security & auth14%17.54451DeepTutor +7
Payments & pricing10%12.56060even
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.88184DeepTutor +3
Transparency & trust7%8.84252DeepTutor +10
Negative events≤15-2-3
TotalC 59/100B 62.7/100

Facts side by side

FactAstrBotDeepTutor
KindAgent harnessAgent harness
VendorAstrBotDevsHKUDS
Hosted endpointno (local only)no (local only)
Transports
AuthOAuth or keyNone
PricingFreeFree
x402nono
LicenceAGPL-3.0-or-laterApache-2.0
Read-only variant documentednono
llms.txtnono
Last release2026-09-272026-10-28
Terms last updated2026-01-12no document linked
Privacy policy last updatedno document linkedno document linked
Customer content may train modelsnot found in the text
Terms restrict automated accessnot found in the text
Terms restrict benchmarkingnot found in the text
Terms or service can change without noticenot found in the text
Arbitration or class-action waivernot found in the text
Popularity42k stars51k stars

Verdicts

AstrBot

Fourteen official messaging adapters, scheduled tasks and scoped API keys come in one AGPL-3.0 program with releases most weeks. No tool call asks for approval, no mail, calendar or long-term memory connector is built in, and usage statistics, including the machine's hostname, are sent by default.

DeepTutor

DeepTutor runs on the owner's machine under Apache 2.0, ships releases every few days with upgrade notes, and gives other agents a JSON CLI with resumable sessions. Its default launch binds all interfaces with sign-in off and permissive CORS, there is no security policy, and two CVEs in 2026 covered a shell-tool RCE and a multi-user MCP bypass, both fixed.

Before you call either

AstrBot

  1. Set ASTRBOT_DISABLE_METRICS=1 before the first start. Statistics, including the hostname, are sent to tickstats.soulter.top by default
  2. Set dashboard.host to 127.0.0.1 in data/cmd_config.json, or the DASHBOARD_HOST variable, unless remote access is intended. The default is 0.0.0.0
  3. Create an abk_ key in Settings, OpenAPI with only the scopes needed, and send it as Authorization: Bearer or X-API-Key
  4. Include username in every POST /api/v1/chat body. Without the chat:admin scope an administrator ID is rejected
  5. Check Extensions, Future Tasks after asking for a schedule. One-off tasks are deleted after their run even when the run fails

DeepTutor

  1. Run deeptutor run <capability> "..." --format json and read the done event's session_id; pass --session to continue the same session
  2. Configure with deeptutor config apply setup.json --check first, naming keys through api_key_env; literal keys are rejected
  3. Before exposing it beyond one machine, enable sign-in in auth.json, set exact cors_origins and set BACKEND_HOST=127.0.0.1 where loopback is wanted
  4. Run 1.4.10 or later. Earlier versions carry CVE-2026-51870 (shell tool RCE, fixed in 1.4.1) and CVE-2026-58168 (multi-user MCP bypass)
  5. Set sandbox_allow_subprocess to false where generated code must run only in the runner sidecar or bubblewrap

Questions

Which is better for AI agents, AstrBot or DeepTutor?

DeepTutor scores 62.7 (B) on agent readiness against AstrBot's 59 (C), and leads in 5 of 7 scored categories.

Are AstrBot and DeepTutor open source?

Yes. AstrBot is open source (AGPL-3.0-or-later). DeepTutor is open source (Apache-2.0).

Other comparisons with AstrBot or DeepTutor

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report