{ "data": { "a": { "slug": "aura-autopilot", "name": "Aura Autopilot", "vendor": "Ramen", "vendorUrl": "https://www.tryaura.dev/autopilot/", "kind": "mcp", "category": "desktop-automation", "summary": "Aura Autopilot is Ramen's Apache-2.0 game playtester for Unreal Engine 5, Unity 6 and Godot 4. An editor plugin and local agent service play the game, and Claude Code or Codex drive it through a stdio MCP server.", "url": "https://www.anchorterminal.com/tools/aura-autopilot", "markdownUrl": "https://www.anchorterminal.com/tools/aura-autopilot.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/aura-autopilot.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/aura-autopilot.json", "dns": "aura-autopilot.grade.anchorterminal.com", "repo": "https://github.com/ramenvr/autopilot", "license": "Apache-2.0", "transports": [ "stdio" ], "packages": [], "auth": "api-key", "authNotes": "No Ramen account needed with one's own keys. A run needs a TypeSafe API key for the Jev decision model and a model provider key or Claude or ChatGPT plan, or an Aura sign-in in the browser instead. Keys are kept in autopilot.env in the user settings folder.", "pricing": "byo-plan", "pricingNotes": "Free under Apache-2.0. Runs pay for Jev through a TypeSafe key ($0.042 per million input tokens, per our typesafe-jev listing) or an Aura plan from $10 a month billed annually, plus the coding agent's model on the user's key or plan.", "priceSummary": "Your plan", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the repository, the docs or the download page, checked 1 November 2026.", "endpoints": [] }, "toolCount": 14, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-01" }, "docsUrl": "https://www.tryaura.dev/documentation/autopilot", "capabilities": [ "desktop.control", "desktop.scripting" ], "tags": [ "open-source", "apache-2.0", "local", "mcp", "stdio", "python", "game-testing", "unreal-engine", "unity", "godot", "claude-code-plugin", "pre-1.0" ], "graded": true, "anchor": { "graded": true, "score": 55.5, "grade": "C", "agentReady": false, "rank": 787, "ranked": true, "rankOf": 1251, "categoryRank": 4, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 69, "maintenance": 43, "payments": 50, "reliability": 41, "schema": 74, "security": 53, "transparency": 55 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": 0, "verdict": "Apache-2.0, with typed MCP tools carrying read-only hints, a separate process for model-written code and headless exit codes for CI. It is days old with no changelog, needs a TypeSafe Jev key or an Aura account, and by default shares recordings, agent traces and the user's own agent conversation with Ramen unless turned off.", "bestFor": "Agent-driven playtests of Unreal, Unity or Godot games in the editor or in CI", "strengths": [ "Apache-2.0 source for the agent service, the Unreal, Unity and Godot plugins and the Claude Code plugin in one repository", "Fourteen MCP tools with JSON Schema inputs, readOnlyHint on the seven that only read, and a `wait` call for long episodes", "Model-written harness and probe code runs in a child process without API keys; on Linux bubblewrap also removes network and most disk access", "Headless runs from the engine's command line write result.json and exit 0, 1, 2 or 3 for CI", "Release downloads are signed, listed in SHA256SUMS.txt and published as immutable GitHub releases" ], "weaknesses": [ "Run sharing is on by default and sends recordings, screenshots, agent traces with code excerpts and, for MCP runs, the user's Claude Code or Codex conversation to app.tryaura.dev", "Shared run data already sent is never deleted, even by `autopilot uninstall`, and no retention period was found", "Python package 0.1.0 and an Unreal plugin flagged beta, with no changelog in the repository; docs/run-data.md and docs/architecture.md are referenced but not published", "Needs a TypeSafe key for the Jev decision model (early access, per our typesafe-jev listing) or an Aura account, plus a model provider key or plan", "On Windows and macOS, the supported platforms, the sandbox is a plain child process that keeps keys out but not network or disk access" ], "agentNotes": [ "Check the game's project is open in the editor with the Autopilot tab connected before calling start_run; otherwise it answers that the agent service isn't running.", "When a call answers \"still going\", call `wait` until it returns; don't start another tool call meanwhile.", "Pass the user's request in their own words with kind verify, goal or explore, and read the INSTRUCTIONS.md that start_run names in parts with Autopilot's read_file.", "Tell the user that run data is shared by default and how to turn it off (the Settings page, AUTOPILOT_SHARE=0 or -PlaytestShare=0) before the first run.", "Never ask the user to paste a TypeSafe or provider key into the conversation; keys belong in autopilot.env or the Autopilot tab." ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 55.5 } ], "editorialScores": { "ergonomics": 69, "maintenance": 43, "payments": 50, "reliability": 41, "schema": 74, "security": 53, "transparency": 58 }, "provenanceScore": 52, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "# Download the plugin for your engine and OS from https://www.tryaura.dev/autopilot/ and finish the first-run setup in the editor's Autopilot tab\nautopilot connect claude\nautopilot connect codex", "claudeCode": "claude plugin install autopilot --marketplace ramenvr/autopilot", "config": { "mcpServers": { "autopilot": { "args": [ "mcp" ], "command": "autopilot" } } } }, "letme": { "capability": "https://letme.dev/desktop.control", "tool": "https://letme.dev/aura-autopilot" }, "area": "developer", "unitPrices": [ { "item": "Aura Indie, billed monthly", "unit": "month", "usd": 20, "note": "Includes Autopilot; $10 a month billed annually ($120 a year). Two-week trial, no card" }, { "item": "Aura Pro", "unit": "month", "usd": 40, "note": "Includes Autopilot; $360 a year billed annually" }, { "item": "Aura Ultimate", "unit": "month", "usd": 200, "note": "Includes Autopilot; $1,800 a year billed annually" } ], "provenance": { "legalEntity": "TribeVR Inc. (named in Aura's terms of service and privacy policy), trading as Ramen", "domain": "tryaura.dev", "domainRegistered": "2025-04-29", "endpointOnVendorDomain": null, "terms": "https://www.tryaura.dev/terms-of-service", "privacy": "https://www.tryaura.dev/privacy-policy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-11-01", "notes": [ "The repository's licence file is Apache 2.0; Aura's terms (25 June 2026) and privacy policy (27 August 2026) are TribeVR Inc.'s and don't mention Autopilot.", "RDAP gives tryaura.dev a registration date of 29 April 2025 and ramenvr.com of 16 February 2019.", "www.tryaura.dev/.well-known/security.txt answered 404. SECURITY.md in the repository asks for GitHub private vulnerability reporting.", "app.tryaura.dev, where shared run data goes and where sign-in happens, disallows ClaudeBot, anthropic-ai and Claude-Web in robots.txt and carries Content-Signal ai-train=no, so nothing on it was read.", "Local software, so there is no status page. Aura's release notes mention Autopilot; the repository has no changelog." ], "score": 52 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/aura-autopilot.json" }, "answer": "UiPath scores 68.2 (B) on agent readiness against Aura Autopilot's 55.5 (C), and leads in 6 of 7 scored categories. Aura Autopilot leads on payments \u0026 pricing.", "b": { "slug": "uipath", "name": "UiPath", "vendor": "UiPath", "vendorUrl": "https://www.uipath.com", "kind": "http-api", "category": "desktop-automation", "summary": "UiPath is a robotic process automation platform whose hosted Orchestrator runs robots that operate desktop, web and Windows applications. Outside agents start and monitor jobs through the Orchestrator API or folder-scoped MCP servers in Automation Cloud.", "url": "https://www.anchorterminal.com/tools/uipath", "markdownUrl": "https://www.anchorterminal.com/tools/uipath.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/uipath.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/uipath.json", "dns": "uipath.grade.anchorterminal.com", "license": "Proprietary service under the UiPath Master Software and Services Agreement, the Community Agreement for the free plan", "transports": [ "http" ], "remoteUrl": "https://cloud.uipath.com/{org}/{tenant}/agenthub_/mcp/{folderKey}/{slug}", "packages": [ { "registry": "pypi", "name": "uipath" } ], "auth": "oauth", "authNotes": "OAuth 2.0 throughout. MCP servers take a bearer token on every request from four sources. The MCP OAuth flow (authorisation server discovery, Client ID Metadata Documents or dynamic client registration, tokens bound to one server by RFC 8707 resource indicators, gated by an AI Trust Layer policy that is off unless an administrator enables it). Personal access tokens with chosen Orchestrator scopes and a lifetime of up to one year. External applications using client credentials (the only unattended route) or user scopes with PKCE. Interactive login through `uipath auth`, with one-hour tokens. The caller needs `MCPServers.View` in the folder, and Coded and Command servers also need `Jobs.Create`. Access is the intersection of token scopes and folder roles.", "pricing": "freemium", "pricingNotes": "The Community plan is free with no time limit, by direct sign-up, with one tenant, one Pro and one Plus user, one Unattended Robot and a monthly Credits pool. Basic starts at $25 a month with two robots and limited agent calls, hosted in Europe. Standard (60-day free trial) and Enterprise are priced by sales, and user and robot licences are sold across tiers without published prices. Whether a card is needed for Community was not stated (checked 2026-10-14).", "priceSummary": "$25 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Orchestrator API guide, the MCP server pages or the pricing page (checked 2026-10-14).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-14" }, "docsUrl": "https://docs.uipath.com/orchestrator/automation-cloud/latest/user-guide/about-mcp-servers", "llmsTxt": "https://docs.uipath.com/llms.txt", "capabilities": [ "desktop.rpa", "desktop.orchestration", "desktop.control" ], "tags": [ "hosted", "official", "oauth", "enterprise", "odata", "mcp", "python", "closed-source", "audit-log", "freemium", "llms-txt", "webhooks" ], "lastRelease": "2026-10-12", "graded": true, "anchor": { "graded": true, "score": 68.2, "grade": "B", "agentReady": false, "rank": 256, "ranked": true, "rankOf": 1251, "categoryRank": 2, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 73, "maintenance": 80, "payments": 25, "reliability": 62, "schema": 79, "security": 82, "transparency": 76 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-14" }, "negative": 0, "verdict": "Orchestrator exposes published RPA workflows, agents and API workflows as MCP tools over Streamable HTTP, with MCP OAuth, scoped PATs and an OpenAPI 3.0 API. Prices above the $25 Basic plan need a sales conversation, and the status page logged several multi-hour incidents between 10 September and 13 October 2026.", "bestFor": "An agent that needs to drive Windows desktop or legacy applications through robots a company already runs, started as MCP tools or API jobs.", "strengths": [ "Folder-scoped MCP servers turn chosen processes, agents and API workflows into tools at a URL of the form cloud.uipath.com/{org}/{tenant}/agenthub_/mcp/{folderKey}/{slug}", "MCP OAuth flow with Client ID Metadata Documents, dynamic registration and RFC 8707 resource binding, plus PATs scoped to OR.Jobs and OR.Execution", "Rate limits published per endpoint, with Retry-After and X-RateLimit-Remaining headers on 429 responses", "llms.txt index and a Markdown copy of every docs page by adding .md to the URL", "security.txt valid until 2028 pointing to a HackerOne programme, and SOC 2 Type 2 and ISO/IEC 27001 claimed for Automation Cloud" ], "weaknesses": [ "Standard and Enterprise prices are not published, and robot licences are sold through sales", "Status history shows robot job failures in Europe for over seven hours on 10 September 2026 and a certificate expiry hitting several services on 13 October 2026", "No idempotency key was found for StartJobs, and the MCP pages say nothing about readOnlyHint or destructiveHint", "The OpenAPI document is served per tenant behind the Orchestrator URL, not as a public file", "Tools backed by Integration Service activities time out with PATs or client credentials and need user-context sign-in" ], "agentNotes": [ "Send `Authorization: Bearer \u003ctoken\u003e` on every MCP request. The `mcp-session-id` header carries no authentication", "Give a PAT both `OR.Execution` (list tools) and `OR.Jobs` (run tools), or tool listing or calls fail", "Use client credentials from an external application for unattended runs. It is the only method that needs no person at sign-in", "Add a folder header such as `X-UIPATH-FolderKey` to Orchestrator API calls on folder resources", "Read job outputs with `GET /odata/Jobs({key})`. `GET /odata/Jobs` returns InputArguments and OutputArguments as null and is limited to 100 calls a minute per tenant" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 68.2 } ], "editorialScores": { "ergonomics": 73, "maintenance": 80, "payments": 25, "reliability": 62, "schema": 79, "security": 82, "transparency": 57 }, "provenanceScore": 95, "checked": { "categories": { "ergonomics": "2026-10-14", "maintenance": "2026-10-14", "payments": "2026-10-14", "reliability": "2026-10-14", "schema": "2026-10-14", "security": "2026-10-14", "transparency": "2026-10-14" }, "last": "2026-10-14", "oldest": "2026-10-14", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl -X POST \"https://cloud.uipath.com/{org}/{tenant}/agenthub_/mcp/{folderKey}/{slug}\" \\\n -H \"Authorization: Bearer $UIPATH_PAT\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\"jsonrpc\":\"2.0\",\"method\":\"initialize\",\"params\":{...},\"id\":1}'" }, "letme": { "capability": "https://letme.dev/desktop.rpa", "tool": "https://letme.dev/uipath" }, "area": "developer", "unitPrices": [ { "item": "Automation Cloud Basic", "unit": "month", "usd": 25, "note": "starting price, up to 5 Basic, 5 Plus and 1 Pro user, 2 robots, limited agent calls, hosted in Europe" } ], "provenance": { "legalEntity": "UiPath Inc.", "domain": "uipath.com", "domainRegistered": "2011-10-26", "domainNote": "API and MCP endpoints answer on cloud.uipath.com. www.uipath.com/.well-known/security.txt names security@uipath.com and https://hackerone.com/uipath and expires on 2028-06-26.", "endpointOnVendorDomain": true, "terms": "https://www.uipath.com/legal/trust-and-security/legal-terms", "privacy": "https://www.uipath.com/legal/trust-and-security/privacy-policy", "statusPage": "https://status.uipath.com", "changelog": "https://docs.uipath.com/orchestrator/automation-cloud/latest/release-notes/october-2026", "securityTxt": "valid", "checked": "2026-10-14", "notes": [ "The legal terms page says paid products fall under the UiPath Master Software and Services Agreement signed with each customer, the Community plan under the Community Agreement (updated 27 July 2026) and trials and previews under the Master Evaluation Agreement (updated 12 June 2026). The MSSA itself is not public.", "The same page lists the privacy policy's last update as 30 November 2018. A Data Processing Agreement is published as a download, which we did not read.", "The legal entities named are UiPath SRL, Bucharest, and UiPath Inc., One Vanderbilt Ave., New York.", "status.uipath.com is an Atlassian Statuspage. Its robots.txt disallows /api/, so incident history was read from /history.rss.", "RDAP for uipath.com gives a registration date of 2011-10-26." ], "score": 95 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/uipath.json", "live": { "slug": "uipath", "probe": { "target": "https://cloud.uipath.com/{org}/{tenant}/agenthub_/mcp/{folderKey}/{slug}", "method": "get", "lastAt": "2026-11-01T05:18:27.925358271Z", "lastOk": false, "lastStatus": 500, "lastMs": 46, "lastNote": "server error", "authRequired": false, "uptime24h": 0, "uptime30d": 0, "p50ms24h": 0, "p95ms24h": 0, "samples24h": 252, "samples30d": 4498, "days": [ { "date": "2026-10-14", "probes": 166, "ok": 0 }, { "date": "2026-10-15", "probes": 253, "ok": 0 }, { "date": "2026-10-16", "probes": 252, "ok": 0 }, { "date": "2026-10-17", "probes": 253, "ok": 0 }, { "date": "2026-10-18", "probes": 256, "ok": 0 }, { "date": "2026-10-19", "probes": 255, "ok": 0 }, { "date": "2026-10-20", "probes": 252, "ok": 0 }, { "date": "2026-10-21", "probes": 253, "ok": 0 }, { "date": "2026-10-22", "probes": 253, "ok": 0 }, { "date": "2026-10-23", "probes": 248, "ok": 0 }, { "date": "2026-10-24", "probes": 251, "ok": 0 }, { "date": "2026-10-25", "probes": 250, "ok": 0 }, { "date": "2026-10-26", "probes": 252, "ok": 0 }, { "date": "2026-10-27", "probes": 249, "ok": 0 }, { "date": "2026-10-28", "probes": 250, "ok": 0 }, { "date": "2026-10-29", "probes": 249, "ok": 0 }, { "date": "2026-10-30", "probes": 249, "ok": 0 }, { "date": "2026-10-31", "probes": 251, "ok": 0 }, { "date": "2026-11-01", "probes": 56, "ok": 0 } ], "outages": [ { "start": "2026-10-14T08:08:01.334877924Z", "end": "0001-01-01T00:00:00Z", "note": "HTTP 500 server error" } ] }, "vendorStatus": { "page": "https://status.uipath.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-01T05:15:30.961182949Z" }, "versions": [ { "registry": "pypi", "name": "uipath", "version": "2.14.44", "released": "2026-10-26", "seenAt": "2026-10-31T16:32:54.509007609Z" } ], "pypiWeekly": 196916, "securityTxt": { "url": "https://uipath.com/.well-known/security.txt", "state": "valid", "expires": "2028-06-26T00:00:00.000Z", "checkedAt": "2026-10-31T15:40:36.895401233Z" }, "llmsTxt": { "url": "https://docs.uipath.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-31T15:12:10.160936355Z" }, "domain": { "domain": "uipath.com", "registered": "2011-10-26", "source": "https://rdap.verisign.com/com/v1/domain/uipath.com", "checkedAt": "2026-10-25T14:00:25.032421615Z" }, "pages": [ { "url": "https://docs.uipath.com/orchestrator/automation-cloud/latest/release-notes/october-2026", "kind": "changelog", "status": 200, "checkedAt": "2026-10-31T06:11:32.969725892Z", "changedAt": "2026-10-29T05:06:12.198045576Z", "fingerprint": "1524c78093c4" }, { "url": "https://www.uipath.com/legal/trust-and-security/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-31T06:33:38.674587901Z", "changedAt": "2026-10-23T02:08:06.697083605Z", "fingerprint": "b3b6c5d148d8" }, { "url": "https://www.uipath.com/legal/trust-and-security/legal-terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-31T06:33:36.538020635Z", "changedAt": "2026-10-23T02:08:04.554160859Z", "fingerprint": "becfe320c79b" } ], "updatedAt": "2026-11-01T05:18:27.925358271Z" } }, "edges": [ { "by": 37, "category": "maintenance", "leads": "uipath", "name": "Maintenance \u0026 community", "reasons": { "a": "The launch post is dated 31 October 2026 and Aura 1.2.3 and 1.2.4 of 30 October 2026 ship Autopilot, so the last change is within 30 days (30). GitHub releases couldn't be read, and the two Aura release-note entries aren't three (0). Issue and pull-request replies couldn't be read; the project is days old, with Discord and support email as other channels (5 of 25). Not in the official MCP registry under any namespace (searched for autopilot and ramenvr) (0). Pinned dependencies, per-platform locks in packaging/, CI on three operating systems, conventional-commit checks and code-owner review (8 of 10). 43 in all.", "b": "Orchestrator release notes dated 12 October 2026 (30). Entries on 5, 7 and 12 October and nine dates in September (20). Public dated release notes, a forum and a support portal. Support was not tested (12 of 15). The Python SDK `uipath` 2.14.37 was published on 12 October 2026. UiPath's MCP servers are not in the official MCP registry, where a search returned only a third-party server (12 of 15). The SDK's CI was not checked (6 of 10)." }, "scores": { "a": 43, "b": 80 } }, { "by": 29, "category": "security", "leads": "uipath", "name": "Security \u0026 auth", "reasons": { "a": "Local-software reading, as tokeneconomizer was read: 30 for what leaves the machine and credentials, 20 approvals and sandboxing, 15 injection, 15 audit, 20 programme. Run sharing is on by default and sends recordings, screenshots, agent traces with the code the agent read and, for MCP runs, the user's own Claude Code or Codex conversation to app.tryaura.dev, after redacting secrets, paths, user and host names and email addresses. Keys sit in plain text in autopilot.env, the file tools never read *.env, and the localhost control endpoint carries a random secret (12). File tools write only the run's folder, notes.md and lib.py, and the user can stop or steer a run from the tab. `autopilot connect codex` sets default_tools_approval_mode to approve, and on Windows and macOS the sandbox is a plain child process without keys but with network and disk (10). sandbox.py names prompt injection from a game's code as the reason for the sandbox, and the frame describer is given only open questions (11). Each run keeps its agent log, harness versions, traces, decisions, report and recording, and the Feed tab shows activity (13). SECURITY.md asks for GitHub private vulnerability reporting; no security.txt on www.tryaura.dev (404), no bounty or certification found, advisories couldn't be read. Releases are signed and immutable, and pull requests need a code owner's approval (7). 53 in all.", "b": "MCP OAuth with resource indicators binding a token to one server, external apps with OAuth scopes such as OR.Jobs, and PATs with chosen scopes and an expiry of up to one year (30). Folder roles limit what a token can do, and automatic client registration is off until an administrator enables it in the AI Trust Layer. No approval step before destructive API calls was found (14 of 20). Tools return job outputs from robots that read third-party applications, and no prompt-injection guidance was found in the MCP pages (5 of 15). Orchestrator audit logs and a preview API audit view (13 of 15). security.txt valid until 2028 with a HackerOne programme, and SOC 2 Type 2, ISO/IEC 27001 and FedRAMP Moderate claimed on the Automation Cloud page (20)." }, "scores": { "a": 53, "b": 82 } }, { "by": 25, "category": "payments", "leads": "aura-autopilot", "name": "Payments \u0026 pricing", "reasons": { "a": "Open-source software with paid parts around it, so the pricing lines are read for what a run needs. No payment protocol (0). TypeSafe publishes Jev's price per million input tokens and Aura's plans are public, Indie from $10 a month billed annually (20). Autopilot is free under Apache-2.0, and Aura's two-week trial needs no card (20). No Ramen account is needed with one's own keys, but a person installs the editor plugin and gets a TypeSafe key or signs in to Aura in a browser, so 10 rather than the self-hosted rule's 20 (10). 50 in all.", "b": "No x402, MPP or L402 (0). Basic is published at $25 a month and the Community plan is free, while Standard, Enterprise and extra robots are priced by sales (10). The Community plan is free with no time limit by direct sign-up. No page we read says whether a card is needed (15 of 20). A person signs up in a browser and creates the PAT or external application (0)." }, "scores": { "a": 50, "b": 25 } }, { "by": 21, "category": "reliability", "leads": "uipath", "name": "Reliability", "reasons": { "a": "Local-software reading, as a stdio MCP server with engine plugins. Official downloads per engine and OS from GitHub Releases, signed and listed in SHA256SUMS.txt, with Unreal 5.4 to 5.8, Unity 6000.0 or later, Godot 4.7 or later, Windows and macOS and Python 3.12 or later stated. The agent service isn't on a package registry; the plugin installs it, with uv and Bun, on first run (17 of 20). .github/workflows/ci.yml runs ruff and pytest on Linux, Windows and macOS with Python 3.12 and 3.13 plus a Codex end-to-end job, and CONTRIBUTING.md names download and uninstall end-to-end workflows. Whether runs pass wasn't checked, as github.com couldn't be read (15 of 25). Open issues couldn't be read, and the repository is days old (5 of 25). No changelog; releases are tagged v\u003cversion\u003e-\u003ccommit\u003e, the plugin protocol is versioned and the contributing rules say to add optional fields rather than change existing ones (4 of 15). Python package 0.1.0 and the Unreal plugin marked IsBetaVersion (0). 41 in all.", "b": "Graded on the hosted Orchestrator API and MCP servers. Public Atlassian Statuspage at status.uipath.com with component and incident history (20). The 90-day feed has several major incidents, including robot job failures in Europe from 10:00 to 17:23 UTC on 10 September 2026, solution deployments failing from 15:18 to 20:45 UTC on 11 September, Cloud Robot jobs stuck pending in the US for 94 minutes on 2 October and an expired certificate taking down several ML services across regions on 13 October (0). Per-endpoint rate limits with numbers (15). 429 responses carry Retry-After and X-RateLimit-Remaining, with retry guidance. No idempotency key for StartJobs was found (12 of 15). The Automation Cloud page states a 99.9 per cent uptime SLA, but the SLA document with credits was not found publicly (5 of 10). The Orchestrator API and the UiPath MCP server type are generally available, with Platform and Swagger servers in preview (10)." }, "scores": { "a": 41, "b": 62 } }, { "by": 21, "category": "transparency", "leads": "uipath", "name": "Transparency \u0026 trust", "reasons": { "a": "Apache-2.0 for the repository, with bundled fonts under the SIL OFL (30). The repository's code docstrings and the Unreal README say what is shared and how it is redacted, but docs/run-data.md, which they cite, isn't published. Aura's terms (TribeVR Inc., 25 June 2026) and privacy policy (27 August 2026) don't mention Autopilot, opt Aura customers into training by default with a perpetual licence to that data, and state no retention period. Runs with one's own keys go to Aura's endpoint under an install token with no account and no terms named. Sent data is never deleted (10 of 30). No deprecation policy; the protocol rule to add optional fields is a contributor guideline (6 of 20). Sharing is disclosed in the setup screen, the README and the plugin docs with three ways to turn it off, but it is on by default, the documentation page doesn't say so, and it includes the user's own agent conversation (12 of 20). 58 in all.", "b": "Closed service with published terms pages, though the MSSA that governs paid use is signed per customer and not public (15). The privacy policy covers cloud product data, says it may be used for product improvement and machine learning under the customer contract and warns against personal data on Community. The legal page dates it 30 November 2018, and the DPA download was not read (15 of 30). A product lifecycle policy and a dated deprecation timeline for the Swagger 2.0 specification (17 of 20). Hosting regions are named, such as Europe for Basic. No subprocessor list was read (10 of 20)." }, "scores": { "a": 55, "b": 76 } }, { "by": 5, "category": "schema", "leads": "uipath", "name": "Schema \u0026 documentation", "reasons": { "a": "MCP reading. All 14 tools (start_run, wait, probe, run_harness, snapshot, describe_frames, restart_level, report, frames and five file tools) have JSON Schema inputs, read in autopilot/mcp.py, session.py, external.py and files.py (25). No llms.txt on www.tryaura.dev (404). The agent skill, INSTRUCTIONS.md and KIT.md are Markdown written for the agent, and the README and CONTRIBUTING.md are in the repository (7 of 10). Descriptions say what each tool does and when not to use it (`frames` is for a describer subagent only, `describe_frames` is a fallback), with server instructions (17 of 20). Required fields and an enum on `kind`, but `report.outcome` is a free string with its values only in the description, numeric ranges sit in descriptions rather than the schema, and `probe` takes free-form Python (9 of 15). Prompt examples in the README and skill, plain-language errors in the MCP server and documented exit codes for headless runs (11 of 15). Version numbers and a protocol version, but no public changelog, and GitHub release notes couldn't be read (5 of 15). 74 in all.", "b": "The Orchestrator API is described in OpenAPI 3.0, served per tenant at the Orchestrator URL plus /swagger/index.html rather than as a public file (20 of 25). llms.txt at docs.uipath.com and a Markdown copy of every page by adding .md (10). API pages state scope and limits clearly, such as which fields GET /odata/Jobs omits. MCP tool descriptions come from the description of each published artifact, so quality depends on the owner (12 of 20). OData types and an enumerated types reference. MCP tool inputs follow each process's arguments (11 of 15). Request examples on each API page and a table of custom error codes (14 of 15). Monthly dated release notes. UiPath says the Swagger version number should not be relied on (12 of 15)." }, "scores": { "a": 74, "b": 79 } } ], "facts": [ { "a": "MCP server", "b": "HTTP API", "name": "Kind" }, { "a": "Ramen", "b": "UiPath", "name": "Vendor" }, { "a": "no (local only)", "b": "https://cloud.uipath.com/{org}/{tenant}/agenthub_/mcp/{folderKey}/{slug}", "name": "Hosted endpoint" }, { "a": "stdio", "b": "HTTP", "name": "Transports" }, { "a": "API key", "b": "OAuth", "name": "Auth" }, { "a": "Your plan", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "Proprietary service under the UiPath Master Software and Services Agreement, the Community Agreement for the free plan", "name": "Licence" }, { "a": "14", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "none", "b": "2026-10-12", "name": "Last release" }, { "a": "2026-06-25", "b": "couldn't be read", "name": "Terms last updated" }, { "a": "2026-08-27", "b": "no date given", "name": "Privacy policy last updated" }, { "a": "yes, with an opt-out", "b": "yes", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "couldn't be read", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "couldn't be read", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "couldn't be read", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "couldn't be read", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "2.5/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "UiPath scores 68.2 (B) on agent readiness against Aura Autopilot's 55.5 (C), and leads in 6 of 7 scored categories. Aura Autopilot leads on payments \u0026 pricing.", "question": "Which is better for AI agents, Aura Autopilot or UiPath?" }, { "answer": "Aura Autopilot needs an API key. UiPath uses an OAuth sign-in.", "question": "Do Aura Autopilot and UiPath need an API key?" }, { "answer": "Aura Autopilot runs on your own machine, with no hosted endpoint listed. UiPath has a hosted endpoint at https://cloud.uipath.com/{org}/{tenant}/agenthub_/mcp/{folderKey}/{slug}.", "question": "Can an agent call Aura Autopilot and UiPath without installing anything?" }, { "answer": "Aura Autopilot is open source (Apache-2.0). No open-source release is listed for UiPath.", "question": "Are Aura Autopilot and UiPath open source?" } ], "goodFor": [ { "aheadOn": [ "Payments \u0026 pricing, 50 against 25" ], "also": [ "Runs on your own machine", "Open source" ], "goodFor": "Agent-driven playtests of Unreal, Unity or Godot games in the editor or in CI", "slug": "aura-autopilot", "watchFor": "Run sharing is on by default and sends recordings, screenshots, agent traces with code excerpts and, for MCP runs, the user's Claude Code or Codex conversation to app.tryaura.dev" }, { "aheadOn": [ "Reliability, 62 against 41", "Schema \u0026 documentation, 79 against 74", "Security \u0026 auth, 82 against 53", "Maintenance \u0026 community, 80 against 43", "Transparency \u0026 trust, 76 against 55" ], "also": [ "A hosted endpoint, with nothing to install" ], "goodFor": "An agent that needs to drive Windows desktop or legacy applications through robots a company already runs, started as MCP tools or API jobs.", "slug": "uipath", "watchFor": "Standard and Enterprise prices are not published, and robot licences are sold through sales" } ], "history": null, "job": { "capability": "desktop.control", "name": "Desktop app control" }, "others": [ { "json": "https://www.anchorterminal.com/compare/aura-autopilot-vs-autohotkey.json", "title": "Aura Autopilot vs AutoHotkey", "url": "https://www.anchorterminal.com/compare/aura-autopilot-vs-autohotkey" }, { "json": "https://www.anchorterminal.com/compare/aura-autopilot-vs-autoit.json", "title": "Aura Autopilot vs AutoIt", "url": "https://www.anchorterminal.com/compare/aura-autopilot-vs-autoit" }, { "json": "https://www.anchorterminal.com/compare/aura-autopilot-vs-automation-anywhere.json", "title": "Aura Autopilot vs Automation Anywhere", "url": "https://www.anchorterminal.com/compare/aura-autopilot-vs-automation-anywhere" }, { "json": "https://www.anchorterminal.com/compare/aura-autopilot-vs-beam-win.json", "title": "Aura Autopilot vs Beam (beam.win)", "url": "https://www.anchorterminal.com/compare/aura-autopilot-vs-beam-win" }, { "json": "https://www.anchorterminal.com/compare/aura-autopilot-vs-robocorp.json", "title": "Aura Autopilot vs Robocorp", "url": "https://www.anchorterminal.com/compare/aura-autopilot-vs-robocorp" }, { "json": "https://www.anchorterminal.com/compare/autohotkey-vs-uipath.json", "title": "AutoHotkey vs UiPath", "url": "https://www.anchorterminal.com/compare/autohotkey-vs-uipath" }, { "json": "https://www.anchorterminal.com/compare/autoit-vs-uipath.json", "title": "AutoIt vs UiPath", "url": "https://www.anchorterminal.com/compare/autoit-vs-uipath" }, { "json": "https://www.anchorterminal.com/compare/beam-win-vs-uipath.json", "title": "Beam (beam.win) vs UiPath", "url": "https://www.anchorterminal.com/compare/beam-win-vs-uipath" }, { "json": "https://www.anchorterminal.com/compare/automation-anywhere-vs-uipath.json", "title": "Automation Anywhere vs UiPath", "url": "https://www.anchorterminal.com/compare/automation-anywhere-vs-uipath" }, { "json": "https://www.anchorterminal.com/compare/robocorp-vs-uipath.json", "title": "Robocorp vs UiPath", "url": "https://www.anchorterminal.com/compare/robocorp-vs-uipath" }, { "json": "https://www.anchorterminal.com/compare/robot-framework-vs-uipath.json", "title": "Robot Framework vs UiPath", "url": "https://www.anchorterminal.com/compare/robot-framework-vs-uipath" }, { "json": "https://www.anchorterminal.com/compare/aura-autopilot-vs-robot-framework.json", "title": "Aura Autopilot vs Robot Framework", "url": "https://www.anchorterminal.com/compare/aura-autopilot-vs-robot-framework" } ], "panel": null, "scores": [ { "aura-autopilot": 41, "by": 21, "edge": "uipath", "key": "reliability", "name": "Reliability", "uipath": 62, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "aura-autopilot": 74, "by": 5, "edge": "uipath", "key": "schema", "name": "Schema \u0026 documentation", "uipath": 79, "weight": 13 }, { "aura-autopilot": 69, "by": 4, "edge": "uipath", "key": "ergonomics", "name": "Agent ergonomics", "uipath": 73, "weight": 13 }, { "aura-autopilot": 53, "by": 29, "edge": "uipath", "key": "security", "name": "Security \u0026 auth", "uipath": 82, "weight": 14 }, { "aura-autopilot": 50, "by": 25, "edge": "aura-autopilot", "key": "payments", "name": "Payments \u0026 pricing", "uipath": 25, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "aura-autopilot": 43, "by": 37, "edge": "uipath", "key": "maintenance", "name": "Maintenance \u0026 community", "uipath": 80, "weight": 7 }, { "aura-autopilot": 55, "by": 21, "edge": "uipath", "key": "transparency", "name": "Transparency \u0026 trust", "uipath": 76, "weight": 7 } ], "summary": "UiPath scores 68.2 (B) on agent readiness against Aura Autopilot's 55.5 (C), and leads in 6 of 7 scored categories. Aura Autopilot leads on payments \u0026 pricing. Both do desktop app control.", "tasks": null, "tutorials": [], "verdicts": { "aura-autopilot": "Apache-2.0, with typed MCP tools carrying read-only hints, a separate process for model-written code and headless exit codes for CI. It is days old with no changelog, needs a TypeSafe Jev key or an Aura account, and by default shares recordings, agent traces and the user's own agent conversation with Ramen unless turned off.", "uipath": "Orchestrator exposes published RPA workflows, agents and API workflows as MCP tools over Streamable HTTP, with MCP OAuth, scoped PATs and an OpenAPI 3.0 API. Prices above the $25 Basic plan need a sales conversation, and the status page logged several multi-hour incidents between 10 September and 13 October 2026." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/aura-autopilot-vs-uipath", "json": "https://www.anchorterminal.com/compare/aura-autopilot-vs-uipath.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/aura-autopilot-vs-uipath.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/aura-autopilot-vs-uipath.min.md" }, "markdown": "UiPath scores 68.2 (B) on agent readiness against Aura Autopilot's 55.5 (C), and leads in 6 of 7 scored categories. Aura Autopilot leads on payments \u0026 pricing. Both do desktop app control.\n\n- Aura Autopilot: grade C, 55.5/100, rank #787 of 1251. Markdown https://www.anchorterminal.com/tools/aura-autopilot.md · JSON https://www.anchorterminal.com/api/v1/tools/aura-autopilot.json\n- UiPath: grade B, 68.2/100, rank #256 of 1251. Markdown https://www.anchorterminal.com/tools/uipath.md · JSON https://www.anchorterminal.com/api/v1/tools/uipath.json\n- Best desktop and mobile app automation for AI agents: https://www.anchorterminal.com/best/desktop-automation/index.md\n- All 27 desktop comparisons: https://www.anchorterminal.com/compare/desktop-automation/index.md\n\n## Which one, for what\n\n### Aura Autopilot (C)\n\nGood for: Agent-driven playtests of Unreal, Unity or Godot games in the editor or in CI\n\nAhead on:\n- Payments \u0026 pricing, 50 against 25\n\nAlso in its favour:\n- Runs on your own machine\n- Open source\n\nWatch for: Run sharing is on by default and sends recordings, screenshots, agent traces with code excerpts and, for MCP runs, the user's Claude Code or Codex conversation to app.tryaura.dev\n\n### UiPath (B)\n\nGood for: An agent that needs to drive Windows desktop or legacy applications through robots a company already runs, started as MCP tools or API jobs.\n\nAhead on:\n- Reliability, 62 against 41\n- Schema \u0026 documentation, 79 against 74\n- Security \u0026 auth, 82 against 53\n- Maintenance \u0026 community, 80 against 43\n- Transparency \u0026 trust, 76 against 55\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n\nWatch for: Standard and Enterprise prices are not published, and robot licences are sold through sales\n\n\n## Why the edge\n\n### Maintenance \u0026 community: UiPath +37\n\n- Aura Autopilot (43): The launch post is dated 31 October 2026 and Aura 1.2.3 and 1.2.4 of 30 October 2026 ship Autopilot, so the last change is within 30 days (30). GitHub releases couldn't be read, and the two Aura release-note entries aren't three (0). Issue and pull-request replies couldn't be read; the project is days old, with Discord and support email as other channels (5 of 25). Not in the official MCP registry under any namespace (searched for autopilot and ramenvr) (0). Pinned dependencies, per-platform locks in packaging/, CI on three operating systems, conventional-commit checks and code-owner review (8 of 10). 43 in all.\n- UiPath (80): Orchestrator release notes dated 12 October 2026 (30). Entries on 5, 7 and 12 October and nine dates in September (20). Public dated release notes, a forum and a support portal. Support was not tested (12 of 15). The Python SDK `uipath` 2.14.37 was published on 12 October 2026. UiPath's MCP servers are not in the official MCP registry, where a search returned only a third-party server (12 of 15). The SDK's CI was not checked (6 of 10).\n\n### Security \u0026 auth: UiPath +29\n\n- Aura Autopilot (53): Local-software reading, as tokeneconomizer was read: 30 for what leaves the machine and credentials, 20 approvals and sandboxing, 15 injection, 15 audit, 20 programme. Run sharing is on by default and sends recordings, screenshots, agent traces with the code the agent read and, for MCP runs, the user's own Claude Code or Codex conversation to app.tryaura.dev, after redacting secrets, paths, user and host names and email addresses. Keys sit in plain text in autopilot.env, the file tools never read *.env, and the localhost control endpoint carries a random secret (12). File tools write only the run's folder, notes.md and lib.py, and the user can stop or steer a run from the tab. `autopilot connect codex` sets default_tools_approval_mode to approve, and on Windows and macOS the sandbox is a plain child process without keys but with network and disk (10). sandbox.py names prompt injection from a game's code as the reason for the sandbox, and the frame describer is given only open questions (11). Each run keeps its agent log, harness versions, traces, decisions, report and recording, and the Feed tab shows activity (13). SECURITY.md asks for GitHub private vulnerability reporting; no security.txt on www.tryaura.dev (404), no bounty or certification found, advisories couldn't be read. Releases are signed and immutable, and pull requests need a code owner's approval (7). 53 in all.\n- UiPath (82): MCP OAuth with resource indicators binding a token to one server, external apps with OAuth scopes such as OR.Jobs, and PATs with chosen scopes and an expiry of up to one year (30). Folder roles limit what a token can do, and automatic client registration is off until an administrator enables it in the AI Trust Layer. No approval step before destructive API calls was found (14 of 20). Tools return job outputs from robots that read third-party applications, and no prompt-injection guidance was found in the MCP pages (5 of 15). Orchestrator audit logs and a preview API audit view (13 of 15). security.txt valid until 2028 with a HackerOne programme, and SOC 2 Type 2, ISO/IEC 27001 and FedRAMP Moderate claimed on the Automation Cloud page (20).\n\n### Payments \u0026 pricing: Aura Autopilot +25\n\n- Aura Autopilot (50): Open-source software with paid parts around it, so the pricing lines are read for what a run needs. No payment protocol (0). TypeSafe publishes Jev's price per million input tokens and Aura's plans are public, Indie from $10 a month billed annually (20). Autopilot is free under Apache-2.0, and Aura's two-week trial needs no card (20). No Ramen account is needed with one's own keys, but a person installs the editor plugin and gets a TypeSafe key or signs in to Aura in a browser, so 10 rather than the self-hosted rule's 20 (10). 50 in all.\n- UiPath (25): No x402, MPP or L402 (0). Basic is published at $25 a month and the Community plan is free, while Standard, Enterprise and extra robots are priced by sales (10). The Community plan is free with no time limit by direct sign-up. No page we read says whether a card is needed (15 of 20). A person signs up in a browser and creates the PAT or external application (0).\n\n### Reliability: UiPath +21\n\n- Aura Autopilot (41): Local-software reading, as a stdio MCP server with engine plugins. Official downloads per engine and OS from GitHub Releases, signed and listed in SHA256SUMS.txt, with Unreal 5.4 to 5.8, Unity 6000.0 or later, Godot 4.7 or later, Windows and macOS and Python 3.12 or later stated. The agent service isn't on a package registry; the plugin installs it, with uv and Bun, on first run (17 of 20). .github/workflows/ci.yml runs ruff and pytest on Linux, Windows and macOS with Python 3.12 and 3.13 plus a Codex end-to-end job, and CONTRIBUTING.md names download and uninstall end-to-end workflows. Whether runs pass wasn't checked, as github.com couldn't be read (15 of 25). Open issues couldn't be read, and the repository is days old (5 of 25). No changelog; releases are tagged v\u003cversion\u003e-\u003ccommit\u003e, the plugin protocol is versioned and the contributing rules say to add optional fields rather than change existing ones (4 of 15). Python package 0.1.0 and the Unreal plugin marked IsBetaVersion (0). 41 in all.\n- UiPath (62): Graded on the hosted Orchestrator API and MCP servers. Public Atlassian Statuspage at status.uipath.com with component and incident history (20). The 90-day feed has several major incidents, including robot job failures in Europe from 10:00 to 17:23 UTC on 10 September 2026, solution deployments failing from 15:18 to 20:45 UTC on 11 September, Cloud Robot jobs stuck pending in the US for 94 minutes on 2 October and an expired certificate taking down several ML services across regions on 13 October (0). Per-endpoint rate limits with numbers (15). 429 responses carry Retry-After and X-RateLimit-Remaining, with retry guidance. No idempotency key for StartJobs was found (12 of 15). The Automation Cloud page states a 99.9 per cent uptime SLA, but the SLA document with credits was not found publicly (5 of 10). The Orchestrator API and the UiPath MCP server type are generally available, with Platform and Swagger servers in preview (10).\n\n### Transparency \u0026 trust: UiPath +21\n\n- Aura Autopilot (55): Apache-2.0 for the repository, with bundled fonts under the SIL OFL (30). The repository's code docstrings and the Unreal README say what is shared and how it is redacted, but docs/run-data.md, which they cite, isn't published. Aura's terms (TribeVR Inc., 25 June 2026) and privacy policy (27 August 2026) don't mention Autopilot, opt Aura customers into training by default with a perpetual licence to that data, and state no retention period. Runs with one's own keys go to Aura's endpoint under an install token with no account and no terms named. Sent data is never deleted (10 of 30). No deprecation policy; the protocol rule to add optional fields is a contributor guideline (6 of 20). Sharing is disclosed in the setup screen, the README and the plugin docs with three ways to turn it off, but it is on by default, the documentation page doesn't say so, and it includes the user's own agent conversation (12 of 20). 58 in all.\n- UiPath (76): Closed service with published terms pages, though the MSSA that governs paid use is signed per customer and not public (15). The privacy policy covers cloud product data, says it may be used for product improvement and machine learning under the customer contract and warns against personal data on Community. The legal page dates it 30 November 2018, and the DPA download was not read (15 of 30). A product lifecycle policy and a dated deprecation timeline for the Swagger 2.0 specification (17 of 20). Hosting regions are named, such as Europe for Basic. No subprocessor list was read (10 of 20).\n\n### Schema \u0026 documentation: UiPath +5\n\n- Aura Autopilot (74): MCP reading. All 14 tools (start_run, wait, probe, run_harness, snapshot, describe_frames, restart_level, report, frames and five file tools) have JSON Schema inputs, read in autopilot/mcp.py, session.py, external.py and files.py (25). No llms.txt on www.tryaura.dev (404). The agent skill, INSTRUCTIONS.md and KIT.md are Markdown written for the agent, and the README and CONTRIBUTING.md are in the repository (7 of 10). Descriptions say what each tool does and when not to use it (`frames` is for a describer subagent only, `describe_frames` is a fallback), with server instructions (17 of 20). Required fields and an enum on `kind`, but `report.outcome` is a free string with its values only in the description, numeric ranges sit in descriptions rather than the schema, and `probe` takes free-form Python (9 of 15). Prompt examples in the README and skill, plain-language errors in the MCP server and documented exit codes for headless runs (11 of 15). Version numbers and a protocol version, but no public changelog, and GitHub release notes couldn't be read (5 of 15). 74 in all.\n- UiPath (79): The Orchestrator API is described in OpenAPI 3.0, served per tenant at the Orchestrator URL plus /swagger/index.html rather than as a public file (20 of 25). llms.txt at docs.uipath.com and a Markdown copy of every page by adding .md (10). API pages state scope and limits clearly, such as which fields GET /odata/Jobs omits. MCP tool descriptions come from the description of each published artifact, so quality depends on the owner (12 of 20). OData types and an enumerated types reference. MCP tool inputs follow each process's arguments (11 of 15). Request examples on each API page and a table of custom error codes (14 of 15). Monthly dated release notes. UiPath says the Swagger version number should not be relied on (12 of 15).\n\n## Score by category\n\n| Category | Weight | Aura Autopilot | UiPath | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 41 | 62 | UiPath +21 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 74 | 79 | UiPath +5 |\n| Agent ergonomics | 13% (16.2 this run) | 69 | 73 | UiPath +4 |\n| Security \u0026 auth | 14% (17.5 this run) | 53 | 82 | UiPath +29 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 50 | 25 | Aura Autopilot +25 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 43 | 80 | UiPath +37 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 55 | 76 | UiPath +21 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **55.5 · C** | **68.2 · B** | |\n\n## Facts side by side\n\n| Fact | Aura Autopilot | UiPath |\n| --- | --- | --- |\n| Kind | MCP server | HTTP API |\n| Vendor | Ramen | UiPath |\n| Hosted endpoint | no (local only) | `https://cloud.uipath.com/{org}/{tenant}/agenthub_/mcp/{folderKey}/{slug}` |\n| Transports | stdio | HTTP |\n| Auth | API key | OAuth |\n| Pricing | Your plan | Freemium |\n| x402 | no | no |\n| Licence | Apache-2.0 | Proprietary service under the UiPath Master Software and Services Agreement, the Community Agreement for the free plan |\n| Tools exposed | 14 | none |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| Last release | none | 2026-10-12 |\n| Terms last updated | 2026-06-25 | couldn't be read |\n| Privacy policy last updated | 2026-08-27 | no date given |\n| Customer content may train models | yes, with an opt-out | yes |\n| Terms restrict automated access | not found in the text | couldn't be read |\n| Terms restrict benchmarking | not found in the text | couldn't be read |\n| Terms or service can change without notice | not found in the text | couldn't be read |\n| Arbitration or class-action waiver | not found in the text | couldn't be read |\n| Agent reviews | none | 2.5/5 (4) |\n\n## Verdicts\n\n**Aura Autopilot.** Apache-2.0, with typed MCP tools carrying read-only hints, a separate process for model-written code and headless exit codes for CI. It is days old with no changelog, needs a TypeSafe Jev key or an Aura account, and by default shares recordings, agent traces and the user's own agent conversation with Ramen unless turned off.\n\n**UiPath.** Orchestrator exposes published RPA workflows, agents and API workflows as MCP tools over Streamable HTTP, with MCP OAuth, scoped PATs and an OpenAPI 3.0 API. Prices above the $25 Basic plan need a sales conversation, and the status page logged several multi-hour incidents between 10 September and 13 October 2026.\n\n## Before you call either\n\n### Aura Autopilot\n\n1. Check the game's project is open in the editor with the Autopilot tab connected before calling start_run; otherwise it answers that the agent service isn't running.\n2. When a call answers \"still going\", call `wait` until it returns; don't start another tool call meanwhile.\n3. Pass the user's request in their own words with kind verify, goal or explore, and read the INSTRUCTIONS.md that start_run names in parts with Autopilot's read_file.\n4. Tell the user that run data is shared by default and how to turn it off (the Settings page, AUTOPILOT_SHARE=0 or -PlaytestShare=0) before the first run.\n5. Never ask the user to paste a TypeSafe or provider key into the conversation; keys belong in autopilot.env or the Autopilot tab.\n\n### UiPath\n\n1. Send `Authorization: Bearer \u003ctoken\u003e` on every MCP request. The `mcp-session-id` header carries no authentication\n2. Give a PAT both `OR.Execution` (list tools) and `OR.Jobs` (run tools), or tool listing or calls fail\n3. Use client credentials from an external application for unattended runs. It is the only method that needs no person at sign-in\n4. Add a folder header such as `X-UIPATH-FolderKey` to Orchestrator API calls on folder resources\n5. Read job outputs with `GET /odata/Jobs({key})`. `GET /odata/Jobs` returns InputArguments and OutputArguments as null and is limited to 100 calls a minute per tenant\n\n## Questions\n\n### Which is better for AI agents, Aura Autopilot or UiPath?\n\nUiPath scores 68.2 (B) on agent readiness against Aura Autopilot's 55.5 (C), and leads in 6 of 7 scored categories. Aura Autopilot leads on payments \u0026 pricing.\n\n### Do Aura Autopilot and UiPath need an API key?\n\nAura Autopilot needs an API key. UiPath uses an OAuth sign-in.\n\n### Can an agent call Aura Autopilot and UiPath without installing anything?\n\nAura Autopilot runs on your own machine, with no hosted endpoint listed. UiPath has a hosted endpoint at https://cloud.uipath.com/{org}/{tenant}/agenthub_/mcp/{folderKey}/{slug}.\n\n### Are Aura Autopilot and UiPath open source?\n\nAura Autopilot is open source (Apache-2.0). No open-source release is listed for UiPath.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/aura-autopilot-vs-uipath.json, and with the fewest tokens: https://www.anchorterminal.com/compare/aura-autopilot-vs-uipath.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"aura-autopilot\", \"b\": \"uipath\"}`. From a terminal: `anchor compare aura-autopilot uipath`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/aura-autopilot.json and https://www.anchorterminal.com/api/v1/tools/uipath.json\n\n## Other comparisons with Aura Autopilot or UiPath\n\n- [Aura Autopilot vs AutoHotkey](https://www.anchorterminal.com/compare/aura-autopilot-vs-autohotkey.md)\n- [Aura Autopilot vs AutoIt](https://www.anchorterminal.com/compare/aura-autopilot-vs-autoit.md)\n- [Aura Autopilot vs Automation Anywhere](https://www.anchorterminal.com/compare/aura-autopilot-vs-automation-anywhere.md)\n- [Aura Autopilot vs Beam (beam.win)](https://www.anchorterminal.com/compare/aura-autopilot-vs-beam-win.md)\n- [Aura Autopilot vs Robocorp](https://www.anchorterminal.com/compare/aura-autopilot-vs-robocorp.md)\n- [AutoHotkey vs UiPath](https://www.anchorterminal.com/compare/autohotkey-vs-uipath.md)\n- [AutoIt vs UiPath](https://www.anchorterminal.com/compare/autoit-vs-uipath.md)\n- [Beam (beam.win) vs UiPath](https://www.anchorterminal.com/compare/beam-win-vs-uipath.md)\n- [Automation Anywhere vs UiPath](https://www.anchorterminal.com/compare/automation-anywhere-vs-uipath.md)\n- [Robocorp vs UiPath](https://www.anchorterminal.com/compare/robocorp-vs-uipath.md)\n- [Robot Framework vs UiPath](https://www.anchorterminal.com/compare/robot-framework-vs-uipath.md)\n- [Aura Autopilot vs Robot Framework](https://www.anchorterminal.com/compare/aura-autopilot-vs-robot-framework.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-01", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Aura Autopilot vs UiPath", "url": "" } ], "description": "UiPath scores 68.2 (B) to Aura Autopilot's 55.5 (C) for desktop app control. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Aura Autopilot C 55.5", "UiPath B 68.2", "scores" ], "h1": "Aura Autopilot vs UiPath", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/aura-autopilot-vs-uipath", "published": "2026-10-01", "section": "tools", "title": "Aura Autopilot vs UiPath for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-01", "url": "https://www.anchorterminal.com/compare/aura-autopilot-vs-uipath" }, "tokens": { "markdown": 4750, "slim": 3180 }, "version": 1 }