{
  "data": {
    "a": {
      "slug": "autocua",
      "name": "AutoCua",
      "vendor": "Ashish Yadav and contributors (ComputerUseAgent on GitHub)",
      "vendorUrl": "https://github.com/ComputerUseAgent/AutoCua",
      "kind": "framework",
      "category": "desktop-automation",
      "summary": "AutoCua is an open-source Python agent that operates a computer the way a person does, desktop apps, a terminal, your own Chrome and iOS or Android phones, with any of 60 models from ten providers.",
      "url": "https://www.anchorterminal.com/tools/autocua",
      "markdownUrl": "https://www.anchorterminal.com/tools/autocua.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/autocua.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/autocua.json",
      "dns": "autocua.grade.anchorterminal.com",
      "repo": "https://github.com/ComputerUseAgent/AutoCua",
      "license": "MIT",
      "transports": [],
      "packages": [
        {
          "registry": "pypi",
          "name": "AutoCua"
        }
      ],
      "auth": "none",
      "authNotes": "No account. You bring an API key for the model provider you choose, kept with chats, Chrome profiles and a credential vault in a local AutoCua_data folder.",
      "pricing": "free",
      "pricingNotes": "Free and MIT-licensed. You pay your model provider for tokens. Nothing to buy from the project (checked 2026-11-06).",
      "priceSummary": "Free · OSS",
      "where": "library",
      "x402": {
        "level": "no",
        "evidence": "A local package with nothing to buy and no payment protocol (checked 2026-11-06).",
        "endpoints": []
      },
      "toolCount": null,
      "popularity": {
        "githubStars": null,
        "npmWeekly": null,
        "pypiWeekly": null,
        "asOf": "2026-11-06"
      },
      "docsUrl": "https://github.com/ComputerUseAgent/AutoCua#readme",
      "capabilities": [
        "browser.control",
        "agent.run"
      ],
      "tags": [
        "open-source",
        "mit",
        "python",
        "computer-use",
        "local",
        "new"
      ],
      "lastRelease": "2026-11-04",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 44.3,
        "grade": "E",
        "agentReady": false,
        "rank": 1100,
        "ranked": true,
        "rankOf": 1354,
        "categoryRank": 8,
        "methodology": "0.7",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 55,
          "maintenance": 65,
          "payments": 60,
          "reliability": 25,
          "schema": 42,
          "security": 38,
          "transparency": 42
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "low",
          "date": "2026-11-06"
        },
        "negative": 0,
        "verdict": "A capable, fast-moving open-source agent for driving desktops, browsers and phones through real input and accessibility trees, with a careful safety section. It's two weeks old, with no test CI or changelog, and on Windows the model itself decides whether to accept an admin elevation prompt.",
        "bestFor": "Developers who want a local agent to operate desktop apps, their own browser or phones across platforms, on a machine they control.",
        "strengths": [
          "One run_agent call drives the desktop, a terminal, your Chrome, or an iOS or Android device",
          "Element picking from accessibility trees and OCR instead of pixel coordinates",
          "Credentials typed from a vault so the model never sees them, in the browser and phone agents",
          "No telemetry, and nothing downloaded without a yes on the terminal",
          "MIT licence, a pip wheel per OS and architecture, and 60 models across ten providers"
        ],
        "weaknesses": [
          "Two weeks old at version 0.1.9, with no changelog file",
          "No CI running the tests; the only workflow labels issues",
          "On Windows the model answers UAC elevation prompts itself through a kernel input driver",
          "Keeps API keys and logged-in Chrome profiles in a local folder next to the checkout",
          "No API reference beyond the README"
        ],
        "agentNotes": [
          "pip install AutoCua, then call run_agent with a mode such as \"web use\" or \"computer use\", a provider, a model and a task",
          "Run it on a machine or account you can afford to lose; it drives real input and keeps logged-in browser profiles",
          "On Windows, don't install the Interception driver unless you accept the model deciding UAC prompts",
          "Set AutoCua_DATA_DIR to keep keys and profiles somewhere private",
          "Phones go over USB from a script; Wi-Fi only through the desktop app"
        ],
        "metrics": {
          "kind": "local",
          "measured": false
        },
        "reviewCount": 0,
        "avgRating": 0,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "low",
            "grade": "E",
            "methodology": "0.7",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 44.3
          }
        ],
        "editorialScores": {
          "ergonomics": 55,
          "maintenance": 65,
          "payments": 60,
          "reliability": 25,
          "schema": 42,
          "security": 38,
          "transparency": 70
        },
        "provenanceScore": 13,
        "checked": {
          "categories": {
            "ergonomics": "2026-11-06",
            "maintenance": "2026-11-06",
            "payments": "2026-11-06",
            "reliability": "2026-11-06",
            "schema": "2026-11-06",
            "security": "2026-11-06",
            "transparency": "2026-11-06"
          },
          "last": "2026-11-06",
          "oldest": "2026-11-06",
          "stale": false,
          "staleAfterDays": 90
        }
      },
      "connect": {
        "install": "pip install AutoCua\n# then, in Python:\n# from AutoCua.agent_launcher import run_agent\n# run_agent(mode=\"web use\", provider=\"openrouter\", model=\"gemini-3.8-flash\", task=\"Open wikipedia.org and summarise today's featured article.\")"
      },
      "letme": {
        "capability": "https://letme.dev/browser.control",
        "tool": "https://letme.dev/autocua"
      },
      "area": "developer",
      "provenance": {
        "legalEntity": "",
        "domain": "github.com",
        "domainRegistered": "",
        "endpointOnVendorDomain": null,
        "terms": "",
        "privacy": "",
        "statusPage": "",
        "changelog": "",
        "securityTxt": "none",
        "checked": "2026-11-06",
        "notes": [
          "The licence names Ashish Yadav as copyright holder; most commits are from the GitHub user FunctionFreak. No company, site or terms were found.",
          "github.com/AutoCua/AutoCua and github.com/ComputerUseAgent/AutoCua serve the same main branch, so one is a rename or mirror of the other."
        ],
        "score": 13
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/autocua.json"
    },
    "answer": "BxPlaywright scores 55 (C) on agent readiness against AutoCua's 44.3 (E), and leads in 5 of 7 scored categories. AutoCua leads on maintenance \u0026 community.",
    "b": {
      "slug": "bx-playwright",
      "name": "BxPlaywright",
      "vendor": "Ortus Solutions",
      "vendorUrl": "https://bxplaywright.boxlang.io",
      "kind": "sdk",
      "category": "browser",
      "summary": "BxPlaywright (bx-playwright) is Ortus Solutions' Apache-2.0 BoxLang module for browser automation and testing on Playwright for Java, with browser tools for BoxLang AI agents and a command that starts Playwright's MCP server. Only a 1.0.0 snapshot is published.",
      "url": "https://www.anchorterminal.com/tools/bx-playwright",
      "markdownUrl": "https://www.anchorterminal.com/tools/bx-playwright.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/bx-playwright.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/bx-playwright.json",
      "dns": "bx-playwright.grade.anchorterminal.com",
      "repo": "https://github.com/ortus-boxlang/bx-playwright",
      "license": "Apache-2.0",
      "transports": [],
      "packages": [
        {
          "registry": "forgebox",
          "name": "bx-playwright"
        },
        {
          "registry": "forgebox",
          "name": "bx-playwright-full"
        }
      ],
      "auth": "none",
      "authNotes": "A local module with no account or key. `bxplaywright mcp` over stdio needs none, and with `--port` it serves HTTP on localhost with Playwright's host check and no authentication. Site logins live in the browser profile or in storage-state files that `session()` caches.",
      "pricing": "free",
      "pricingNotes": "Free under Apache-2.0, with nothing to buy for the module. It runs on BoxLang, whose optional runtime plans start at $749 a year, and bx-playwright doesn't need them (checked 2026-11-01).",
      "priceSummary": "Free · OSS",
      "where": "local",
      "x402": {
        "level": "no",
        "evidence": "Local library. No x402, MPP or L402 in the repository, the docs or either announcement, checked 1 November 2026.",
        "endpoints": []
      },
      "toolCount": null,
      "popularity": {
        "githubStars": null,
        "npmWeekly": null,
        "pypiWeekly": null,
        "asOf": "2026-11-01"
      },
      "docsUrl": "https://bxplaywright.boxlang.io",
      "llmsTxt": "https://bxplaywright.boxlang.io/llms.txt",
      "capabilities": [
        "browser.control",
        "browser.debug",
        "pdf.generate"
      ],
      "tags": [
        "official",
        "local",
        "open-source",
        "apache-2.0",
        "sdk",
        "browser",
        "boxlang",
        "jvm",
        "mcp",
        "llms-txt",
        "no-auth",
        "free",
        "pre-1.0",
        "new"
      ],
      "lastRelease": "2026-10-23",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 55,
        "grade": "C",
        "agentReady": false,
        "rank": 798,
        "ranked": true,
        "rankOf": 1354,
        "categoryRank": 18,
        "methodology": "0.7",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 63,
          "maintenance": 53,
          "payments": 60,
          "reliability": 41,
          "schema": 66,
          "security": 43,
          "transparency": 70
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "medium",
          "date": "2026-11-01"
        },
        "negative": 0,
        "verdict": "A BoxLang library over Playwright for Java with smart selectors, retrying assertions, AI snapshots with element refs and ten browser tools for BoxLang AI, plus a launcher for Microsoft's Playwright MCP server. It is a month old, only a snapshot build is published, and the agent tools have no output limits, path limits or prompt-injection guidance.",
        "bestFor": "Teams on BoxLang or modernising CFML who want browser tests, rendering and a browser for BoxLang AI agents in the same language. Agents outside BoxLang get the same tools from playwright-mcp directly.",
        "strengths": [
          "Ten compact in-process browser tools for BoxLang AI, each returning the URL, title and an accessibility snapshot with element refs",
          "Errors come back to the agent as text with a type and a fix, and every error type is documented with its fix",
          "llms.txt and a Markdown copy of each of the 18 docs pages, with eight runnable examples in the repository",
          "Tests on Ubuntu and Windows on every pull request, every push to development and daily, with real-browser tests on Linux",
          "Node.js downloads are checked against the release's SHA-256 list, and `bx-playwright-full` bundles Node.js for offline servers"
        ],
        "weaknesses": [
          "No stable release on 1 November 2026. ForgeBox has only 1.0.0-snapshot, though Ortus announced 1.0 as generally available on 13 October",
          "The MCP server is Microsoft's Playwright MCP, so agents outside BoxLang get Microsoft's tool set, `browser_run_code_unsafe` included",
          "The in-process action tools return the whole page snapshot, with no depth, selector or size limit",
          "`browser_screenshot` writes to any path the model passes, and `browser_visit` takes any URL with no allow-list",
          "The tools are registered in bx-ai's global registry by default, so an agent given every registered tool gets the browser"
        ],
        "agentNotes": [
          "Expect snapshot builds. Only 1.0.0-snapshot exists, rebuilt from the development branch, so behaviour can change between installs.",
          "Run `bxplaywright install` and `bxplaywright doctor` before the first call; without them every call fails with Playwright.NotInstalled.",
          "Pass `--headless` and `--isolated` to `bxplaywright mcp`. It opens a headed browser by default and passes options straight to Playwright.",
          "Set `registerAiTools: false` and use `playwright().aiTools()` when only some agents should get a browser.",
          "Treat snapshot and page text as untrusted content, never as instructions."
        ],
        "metrics": {
          "kind": "local",
          "measured": false
        },
        "reviewCount": 0,
        "avgRating": 0,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "C",
            "methodology": "0.7",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 55
          }
        ],
        "editorialScores": {
          "ergonomics": 63,
          "maintenance": 53,
          "payments": 60,
          "reliability": 41,
          "schema": 66,
          "security": 43,
          "transparency": 65
        },
        "provenanceScore": 74,
        "checked": {
          "categories": {
            "ergonomics": "2026-11-01",
            "maintenance": "2026-11-01",
            "payments": "2026-11-01",
            "reliability": "2026-11-01",
            "schema": "2026-11-01",
            "security": "2026-11-01",
            "transparency": "2026-11-01"
          },
          "last": "2026-11-01",
          "oldest": "2026-11-01",
          "stale": false,
          "staleAfterDays": 90
        }
      },
      "connect": {
        "install": "install-bx-module bx-playwright \u0026\u0026 bxplaywright install \u0026\u0026 bxplaywright doctor",
        "claudeCode": "claude mcp add playwright -- bxplaywright mcp --headless --isolated",
        "config": {
          "mcpServers": {
            "bxplaywright": {
              "args": [
                "mcp",
                "--headless",
                "--isolated"
              ],
              "command": "bxplaywright"
            }
          }
        }
      },
      "letme": {
        "capability": "https://letme.dev/browser.control",
        "tool": "https://letme.dev/bx-playwright"
      },
      "sameCompany": [
        "boxlang-ai"
      ],
      "area": "developer",
      "provenance": {
        "legalEntity": "Ortus Solutions, Corp.",
        "domain": "ortussolutions.com",
        "domainRegistered": "2006-04-12",
        "endpointOnVendorDomain": null,
        "terms": "https://github.com/ortus-boxlang/bx-playwright/blob/main/src/main/resources/LICENSE",
        "privacy": "https://www.ortussolutions.com/about-us/ortus-privacy-policy",
        "statusPage": "",
        "changelog": "https://github.com/ortus-boxlang/bx-playwright/blob/development/changelog.md",
        "securityTxt": "none",
        "checked": "2026-11-01",
        "notes": [
          "The readme names Ortus Solutions, Corp as copyright holder, and box.json and the ForgeBox entry name Ortus Solutions as author and publisher.",
          "domainRegistered is from Verisign's RDAP record for ortussolutions.com, read for boxlang-ai on the same day. The docs are on bxplaywright.boxlang.io, whose registration date wasn't read.",
          "security.txt answered 410 on www.ortussolutions.com and boxlang.io for boxlang-ai on the same day. CONTRIBUTING.md asks for vulnerability reports to security@ortussolutions.com.",
          "The Apache 2.0 licence stands in for terms. The privacy policy covers Ortus's website and customers, not the module.",
          "The changelog on both branches reads only [Unreleased] on 1 November 2026.",
          "Local software, so there is no endpoint or status page."
        ],
        "score": 74
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/bx-playwright.json",
      "live": {
        "slug": "bx-playwright",
        "githubStars": 1,
        "securityTxt": {
          "url": "https://ortussolutions.com/.well-known/security.txt",
          "state": "none",
          "checkedAt": "2026-11-05T15:56:44.456508933Z"
        },
        "llmsTxt": {
          "url": "https://bxplaywright.boxlang.io/llms.txt",
          "ok": true,
          "status": 200,
          "checkedAt": "2026-11-05T15:25:22.059022953Z"
        },
        "pages": [
          {
            "url": "https://raw.githubusercontent.com/ortus-boxlang/bx-playwright/development/changelog.md",
            "kind": "changelog",
            "status": 304,
            "checkedAt": "2026-11-05T13:06:36.43729405Z",
            "changedAt": "0001-01-01T00:00:00Z",
            "fingerprint": "b3855d430a4b"
          },
          {
            "url": "https://raw.githubusercontent.com/ortus-boxlang/bx-playwright/main/src/main/resources/LICENSE",
            "kind": "terms",
            "status": 304,
            "checkedAt": "2026-11-05T13:06:38.704762826Z",
            "changedAt": "0001-01-01T00:00:00Z",
            "fingerprint": "839fbbcddc72"
          }
        ],
        "github": {
          "repo": "ortus-boxlang/bx-playwright",
          "checkedAt": "2026-11-02T08:22:47.702698773Z",
          "stars": 1,
          "archived": false,
          "issuesEnabled": true,
          "pushedAt": "2026-11-01T13:28:06Z",
          "openIssues": 0,
          "openPRs": 2,
          "issuesOpened90d": 0,
          "issuesClosed90d": 0,
          "prsMerged90d": 39,
          "ci": {
            "branch": "development",
            "runs": 50,
            "success": 42,
            "failure": 1,
            "other": 7,
            "latest": "success",
            "latestAt": "2026-10-23T16:01:50Z"
          }
        },
        "updatedAt": "2026-11-05T21:19:00.673776201Z"
      }
    },
    "edges": [
      {
        "by": 28,
        "category": "transparency",
        "leads": "bx-playwright",
        "name": "Transparency \u0026 trust",
        "reasons": {
          "a": "MIT (30). Says it sends data only to the chosen model provider and keeps everything else locally, and the source agrees (20 of 30). No deprecation policy (0). States no telemetry, and none was found (20). 30 + 20 + 0 + 20 = 70.",
          "b": "Apache-2.0, OSI approved, in box.json and src/main/resources/LICENSE (30). Local software with no data statement for the module. The source contacts only nodejs.org, Playwright's browser downloads and the pages it is told to open, and Ortus's privacy policy covers its website and customers (15 of 30). The integrations page says a minor release only adds and removals wait for a major release, listed in the changelog. Nothing has been released under it, and the module was renamed from `playwright` to `bxplaywright` on 12 October before any release (10 of 20). No telemetry found in the source and no statement either way in the docs, scored as boxlang-ai was (10 of 20). 30+15+10+10 = 65."
        },
        "scores": {
          "a": 42,
          "b": 70
        }
      },
      {
        "by": 24,
        "category": "schema",
        "leads": "bx-playwright",
        "name": "Schema \u0026 documentation",
        "reasons": {
          "a": "Framework reading. No API reference or typed interface beyond run_agent's documented arguments (5 of 25). No llms.txt (0). The README says what each mode drives and where it runs, and agent_capabilities.md lists what it can do (16 of 20). Modes and device are documented strings (6 of 15). Many examples, no documented errors (10 of 15). Tags without a changelog (5 of 15). 5 + 0 + 16 + 6 + 10 + 5 = 42.",
          "b": "Library reading. BoxLang is dynamically typed. The public API is listed in the docs' integrations page, `help()` and `bxplaywright help --json` describe it at run time, and the ten agent tools describe each argument in a sentence, with no published API reference (14 of 25). llms.txt with a Markdown copy of each of 18 docs pages (10). The AI page says when to use `aiTools()`, the registry or MCP, and when to turn registration off. Tool descriptions are one line each (13 of 20). Every agent-tool argument is a string, with no enums or limits; library options are checked, and InvalidOption lists the valid values (9 of 15). An errors page lists each error type with when it happens and the fix, eight runnable examples sit in the repository, and the docs have code on every page (13 of 15). Keep a Changelog and docs versioning on release, but no released version and no tags yet (7 of 15). 14+10+13+9+13+7 = 66."
        },
        "scores": {
          "a": 42,
          "b": 66
        }
      },
      {
        "by": 16,
        "category": "reliability",
        "leads": "bx-playwright",
        "name": "Reliability",
        "reasons": {
          "a": "Local package. Installs from PyPI as AutoCua with Python 3.10 or later and the supported platforms stated (20). No CI runs the tests; the only workflow, use_case_label.yml, labels issues (0). GitHub issues weren't read, so the open-issue line is scored absent (0). Four tags in a week with no changelog file (5). Version 0.1.9 (0). 20 + 0 + 0 + 5 + 0 = 25.",
          "b": "Read with the local-software lines and graded as a pre-release. Official package on ForgeBox with BoxLang 1.17.0 or later, Java 21 and the supported platforms stated, but the only version is 1.0.0-snapshot, rebuilt from the development branch on 23 October 2026, with no binary hash on the entry (14 of 20). tests.yml runs 24 test files on Ubuntu and Windows with JDK 21, real-browser tests on Linux and a test of the full distribution, on pull requests, pushes to development and daily. Whether runs pass wasn't read, since WebFetch refused GitHub (15 of 25). Issues weren't readable for the same reason, bugs go to Ortus's Jira, and the repository is a month old, so there's no record to read (5 of 25). Keep a Changelog with semantic versioning stated and a written public contract, but nothing has been released under it and the changelog reads only [Unreleased] (7 of 15). Ortus announced 1.0 as generally available on 13 October, but no 1.0.0 build or tag exists, so it isn't 1.0 for this line (0 of 15). 14+15+5+7+0 = 41."
        },
        "scores": {
          "a": 25,
          "b": 41
        }
      },
      {
        "by": 12,
        "category": "maintenance",
        "leads": "autocua",
        "name": "Maintenance \u0026 community",
        "reasons": {
          "a": "v0.1.9 tagged on 4 November 2026 (30). Four tags in 90 days (20). Issues and pull requests weren't read (0 of 25). The PyPI wheel is current (15). No CI; dependencies pinned per OS in requirements files (0 of 10). 30 + 20 + 0 + 15 + 0 = 65.",
          "b": "The snapshot build of 23 October 2026 is the latest published package, so 30 on time, though it isn't a release (30). No tagged releases or dated changelog entries in the 90 days, only one version rebuilt (0 of 20). 39 pull requests merged by Luis Majano between 30 September and 23 October. Issue replies couldn't be read and bugs go to Jira (10 of 25). Not in the official MCP registry, and the ForgeBox package has no stable version (5 of 15). Playwright for Java 1.63.0, Dependabot for Gradle monthly and Actions quarterly, a daily test run and a format check (8 of 10). 30+0+10+5+8 = 53."
        },
        "scores": {
          "a": 65,
          "b": 53
        }
      },
      {
        "by": 8,
        "category": "ergonomics",
        "leads": "bx-playwright",
        "name": "Agent ergonomics",
        "reasons": {
          "a": "Framework reading. One call with a mode, provider, model and task runs a whole agent (20 of 25). A separate compression agent splices handoff summaries in, and runs are capped and stoppable (15 of 20). Permission and blocked-input errors are reported specifically, with no error reference (8 of 20). No resume or retry semantics described (2 of 20). Sensible defaults (simulators unless device is set), Python only (10 of 15). 20 + 15 + 8 + 2 + 10 = 55.",
          "b": "Library reading, scored on what a tool-calling agent gets. Ten compact in-process tools for BoxLang AI, with nothing to load until a tool is used (25 for ten or fewer), less 5 because every action tool returns the whole page's AI snapshot. Through MCP an agent gets Playwright's 24 default tools (20 of 25). The agent tools have no depth, selector or size limit, and `browser_text` returns the whole page. `snapshot( selector )` exists in the library but not in the tools (8 of 20). Errors come back to the agent as text in the form `Error [type]: message Fix: detail`, and the error types are documented (16 of 20). Assertions retry until they pass. The in-process tools carry no read-only or destructive hints, and bx-ai doesn't read them; over MCP the annotations are Microsoft's (8 of 20). Works with defaults (headless Chromium, 1280 by 720) and profiles, but in one language, BoxLang, with the MCP route for any other client (11 of 15). 20+8+16+8+11 = 63."
        },
        "scores": {
          "a": 55,
          "b": 63
        }
      },
      {
        "by": 5,
        "category": "security",
        "leads": "bx-playwright",
        "name": "Security \u0026 auth",
        "reasons": {
          "a": "Framework reading (telemetry, approvals, guardrails, sandboxing). Provider keys stored in a local folder with Chrome profiles (10 of 30). The worker tools are an allow-list with no write tool, unseen ids are refused, downloads need a yes, but on Windows the model answers UAC elevation prompts itself through a kernel driver, with no person asked (6 of 20). The scraping ruleset has a prompt-injection instruction to log page text that gives instructions (10 of 15). Runs are logged in the app, with no audit log (7 of 15). No security policy, disclosure route or advisories found (5 of 20, for the vault and certificate handling). 10 + 6 + 10 + 7 + 5 = 38.",
          "b": "Library reading, as puppeteer and playwright-mcp were. No credential to leak and nothing to scope, so the middle band (20 of 30). Nothing is restricted by default. `browser_visit` takes any URL with no allow-list, `browser_screenshot` writes to any path the model passes, and the tools are added to bx-ai's global registry unless `registerAiTools` is false, so an agent given every registered tool gets a browser. Over MCP it starts Microsoft's server, which limits file access to workspace roots, and Ortus's plugin starts it with `--headless` but without `--isolated`, with `browser_run_code_unsafe` and `browser_evaluate` in the default set. HTTPS errors are not ignored by default (6 of 20). Page snapshots and text go to the model unfenced, and the docs give no prompt-injection guidance (0 of 15). Screenshot, trace and video policies, `show-trace`, and interception points such as onPageCreate and onPlaywrightArtifact give the operator a record, all off by default (10 of 15). CONTRIBUTING.md asks for reports to security@ortussolutions.com and the Slack #security channel; SECURITY.md points there. No security.txt (410, per the boxlang-ai check of the same day), no bounty, no advisories. Node.js downloads are checked against the release's SHA-256 list (7 of 20). 20+6+0+10+7 = 43."
        },
        "scores": {
          "a": 38,
          "b": 43
        }
      }
    ],
    "facts": [
      {
        "a": "Agent framework",
        "b": "SDK + MCP",
        "name": "Kind"
      },
      {
        "a": "Ashish Yadav and contributors (ComputerUseAgent on GitHub)",
        "b": "Ortus Solutions",
        "name": "Vendor"
      },
      {
        "a": "no (local only)",
        "b": "no (local only)",
        "name": "Hosted endpoint"
      },
      {
        "a": "",
        "b": "",
        "name": "Transports"
      },
      {
        "a": "None",
        "b": "None",
        "name": "Auth"
      },
      {
        "a": "Free",
        "b": "Free",
        "name": "Pricing"
      },
      {
        "a": "no",
        "b": "no",
        "name": "x402"
      },
      {
        "a": "MIT",
        "b": "Apache-2.0",
        "name": "Licence"
      },
      {
        "a": "no",
        "b": "no",
        "name": "Read-only variant documented"
      },
      {
        "a": "no",
        "b": "yes",
        "name": "llms.txt"
      },
      {
        "a": "2026-11-04",
        "b": "2026-10-23",
        "name": "Last release"
      },
      {
        "a": "no document linked",
        "b": "no date given",
        "name": "Terms last updated"
      },
      {
        "a": "no document linked",
        "b": "no date given",
        "name": "Privacy policy last updated"
      },
      {
        "a": "not read yet",
        "b": "not found in the text",
        "name": "Customer content may train models"
      },
      {
        "a": "not read yet",
        "b": "not found in the text",
        "name": "Terms restrict automated access"
      },
      {
        "a": "not read yet",
        "b": "not found in the text",
        "name": "Terms restrict benchmarking"
      },
      {
        "a": "not read yet",
        "b": "not found in the text",
        "name": "Terms or service can change without notice"
      },
      {
        "a": "not read yet",
        "b": "not found in the text",
        "name": "Arbitration or class-action waiver"
      }
    ],
    "faq": [
      {
        "answer": "BxPlaywright scores 55 (C) on agent readiness against AutoCua's 44.3 (E), and leads in 5 of 7 scored categories. AutoCua leads on maintenance \u0026 community.",
        "question": "Which is better for AI agents, AutoCua or BxPlaywright?"
      },
      {
        "answer": "Yes. AutoCua is open source (MIT). BxPlaywright is open source (Apache-2.0).",
        "question": "Are AutoCua and BxPlaywright open source?"
      }
    ],
    "goodFor": [
      {
        "aheadOn": [
          "Maintenance \u0026 community, 65 against 53"
        ],
        "also": null,
        "goodFor": "Developers who want a local agent to operate desktop apps, their own browser or phones across platforms, on a machine they control.",
        "slug": "autocua",
        "watchFor": "Two weeks old at version 0.1.9, with no changelog file"
      },
      {
        "aheadOn": [
          "Reliability, 41 against 25",
          "Schema \u0026 documentation, 66 against 42",
          "Agent ergonomics, 63 against 55",
          "Security \u0026 auth, 43 against 38",
          "Transparency \u0026 trust, 70 against 42"
        ],
        "also": null,
        "goodFor": "Teams on BoxLang or modernising CFML who want browser tests, rendering and a browser for BoxLang AI agents in the same language. Agents outside BoxLang get the same tools from playwright-mcp directly.",
        "slug": "bx-playwright",
        "watchFor": "No stable release on 1 November 2026. ForgeBox has only 1.0.0-snapshot, though Ortus announced 1.0 as generally available on 13 October"
      }
    ],
    "history": null,
    "job": {
      "capability": "browser.control",
      "name": "Browser automation"
    },
    "others": [
      {
        "json": "https://www.anchorterminal.com/compare/agent-browser-vs-autocua.json",
        "title": "agent-browser vs AutoCua",
        "url": "https://www.anchorterminal.com/compare/agent-browser-vs-autocua"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-browser-vs-bx-playwright.json",
        "title": "agent-browser vs BxPlaywright",
        "url": "https://www.anchorterminal.com/compare/agent-browser-vs-bx-playwright"
      },
      {
        "json": "https://www.anchorterminal.com/compare/airtop-vs-autocua.json",
        "title": "Airtop vs AutoCua",
        "url": "https://www.anchorterminal.com/compare/airtop-vs-autocua"
      },
      {
        "json": "https://www.anchorterminal.com/compare/airtop-vs-bx-playwright.json",
        "title": "Airtop vs BxPlaywright",
        "url": "https://www.anchorterminal.com/compare/airtop-vs-bx-playwright"
      },
      {
        "json": "https://www.anchorterminal.com/compare/anchor-browser-vs-autocua.json",
        "title": "Anchor Browser vs AutoCua",
        "url": "https://www.anchorterminal.com/compare/anchor-browser-vs-autocua"
      },
      {
        "json": "https://www.anchorterminal.com/compare/anchor-browser-vs-bx-playwright.json",
        "title": "Anchor Browser vs BxPlaywright",
        "url": "https://www.anchorterminal.com/compare/anchor-browser-vs-bx-playwright"
      },
      {
        "json": "https://www.anchorterminal.com/compare/autocua-vs-browser-use.json",
        "title": "AutoCua vs Browser Use",
        "url": "https://www.anchorterminal.com/compare/autocua-vs-browser-use"
      },
      {
        "json": "https://www.anchorterminal.com/compare/autocua-vs-browserless.json",
        "title": "AutoCua vs Browserless",
        "url": "https://www.anchorterminal.com/compare/autocua-vs-browserless"
      },
      {
        "json": "https://www.anchorterminal.com/compare/autocua-vs-chrome-devtools-mcp.json",
        "title": "AutoCua vs Chrome DevTools MCP",
        "url": "https://www.anchorterminal.com/compare/autocua-vs-chrome-devtools-mcp"
      },
      {
        "json": "https://www.anchorterminal.com/compare/autocua-vs-functionize-mcp.json",
        "title": "AutoCua vs Functionize MCP server",
        "url": "https://www.anchorterminal.com/compare/autocua-vs-functionize-mcp"
      },
      {
        "json": "https://www.anchorterminal.com/compare/autocua-vs-hyperbrowser.json",
        "title": "AutoCua vs Hyperbrowser",
        "url": "https://www.anchorterminal.com/compare/autocua-vs-hyperbrowser"
      },
      {
        "json": "https://www.anchorterminal.com/compare/autocua-vs-kane-cli.json",
        "title": "AutoCua vs Kane CLI",
        "url": "https://www.anchorterminal.com/compare/autocua-vs-kane-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/autocua-vs-lightpanda.json",
        "title": "AutoCua vs Lightpanda",
        "url": "https://www.anchorterminal.com/compare/autocua-vs-lightpanda"
      },
      {
        "json": "https://www.anchorterminal.com/compare/autocua-vs-notte.json",
        "title": "AutoCua vs Notte",
        "url": "https://www.anchorterminal.com/compare/autocua-vs-notte"
      },
      {
        "json": "https://www.anchorterminal.com/compare/autocua-vs-playwright-mcp.json",
        "title": "AutoCua vs Playwright MCP",
        "url": "https://www.anchorterminal.com/compare/autocua-vs-playwright-mcp"
      },
      {
        "json": "https://www.anchorterminal.com/compare/autocua-vs-pomerado.json",
        "title": "AutoCua vs Pomerado",
        "url": "https://www.anchorterminal.com/compare/autocua-vs-pomerado"
      },
      {
        "json": "https://www.anchorterminal.com/compare/autocua-vs-puppeteer.json",
        "title": "AutoCua vs Puppeteer",
        "url": "https://www.anchorterminal.com/compare/autocua-vs-puppeteer"
      },
      {
        "json": "https://www.anchorterminal.com/compare/autocua-vs-puppeteer-reference-server-archived.json",
        "title": "AutoCua vs Puppeteer (archived MCP reference server)",
        "url": "https://www.anchorterminal.com/compare/autocua-vs-puppeteer-reference-server-archived"
      },
      {
        "json": "https://www.anchorterminal.com/compare/autocua-vs-robocorp.json",
        "title": "AutoCua vs Robocorp",
        "url": "https://www.anchorterminal.com/compare/autocua-vs-robocorp"
      },
      {
        "json": "https://www.anchorterminal.com/compare/autocua-vs-selenium.json",
        "title": "AutoCua vs Selenium",
        "url": "https://www.anchorterminal.com/compare/autocua-vs-selenium"
      },
      {
        "json": "https://www.anchorterminal.com/compare/autocua-vs-skyvern.json",
        "title": "AutoCua vs Skyvern",
        "url": "https://www.anchorterminal.com/compare/autocua-vs-skyvern"
      },
      {
        "json": "https://www.anchorterminal.com/compare/autocua-vs-steel.json",
        "title": "AutoCua vs Steel",
        "url": "https://www.anchorterminal.com/compare/autocua-vs-steel"
      },
      {
        "json": "https://www.anchorterminal.com/compare/autocua-vs-tinyfish.json",
        "title": "AutoCua vs TinyFish",
        "url": "https://www.anchorterminal.com/compare/autocua-vs-tinyfish"
      },
      {
        "json": "https://www.anchorterminal.com/compare/browser-use-vs-bx-playwright.json",
        "title": "Browser Use vs BxPlaywright",
        "url": "https://www.anchorterminal.com/compare/browser-use-vs-bx-playwright"
      },
      {
        "json": "https://www.anchorterminal.com/compare/browserbase-vs-bx-playwright.json",
        "title": "Browserbase vs BxPlaywright",
        "url": "https://www.anchorterminal.com/compare/browserbase-vs-bx-playwright"
      },
      {
        "json": "https://www.anchorterminal.com/compare/browserless-vs-bx-playwright.json",
        "title": "Browserless vs BxPlaywright",
        "url": "https://www.anchorterminal.com/compare/browserless-vs-bx-playwright"
      },
      {
        "json": "https://www.anchorterminal.com/compare/bx-playwright-vs-chrome-devtools-mcp.json",
        "title": "BxPlaywright vs Chrome DevTools MCP",
        "url": "https://www.anchorterminal.com/compare/bx-playwright-vs-chrome-devtools-mcp"
      },
      {
        "json": "https://www.anchorterminal.com/compare/bx-playwright-vs-functionize-mcp.json",
        "title": "BxPlaywright vs Functionize MCP server",
        "url": "https://www.anchorterminal.com/compare/bx-playwright-vs-functionize-mcp"
      },
      {
        "json": "https://www.anchorterminal.com/compare/bx-playwright-vs-hyperbrowser.json",
        "title": "BxPlaywright vs Hyperbrowser",
        "url": "https://www.anchorterminal.com/compare/bx-playwright-vs-hyperbrowser"
      },
      {
        "json": "https://www.anchorterminal.com/compare/bx-playwright-vs-kane-cli.json",
        "title": "BxPlaywright vs Kane CLI",
        "url": "https://www.anchorterminal.com/compare/bx-playwright-vs-kane-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/bx-playwright-vs-lightpanda.json",
        "title": "BxPlaywright vs Lightpanda",
        "url": "https://www.anchorterminal.com/compare/bx-playwright-vs-lightpanda"
      },
      {
        "json": "https://www.anchorterminal.com/compare/bx-playwright-vs-notte.json",
        "title": "BxPlaywright vs Notte",
        "url": "https://www.anchorterminal.com/compare/bx-playwright-vs-notte"
      },
      {
        "json": "https://www.anchorterminal.com/compare/bx-playwright-vs-playwright-mcp.json",
        "title": "BxPlaywright vs Playwright MCP",
        "url": "https://www.anchorterminal.com/compare/bx-playwright-vs-playwright-mcp"
      },
      {
        "json": "https://www.anchorterminal.com/compare/bx-playwright-vs-pomerado.json",
        "title": "BxPlaywright vs Pomerado",
        "url": "https://www.anchorterminal.com/compare/bx-playwright-vs-pomerado"
      },
      {
        "json": "https://www.anchorterminal.com/compare/bx-playwright-vs-puppeteer.json",
        "title": "BxPlaywright vs Puppeteer",
        "url": "https://www.anchorterminal.com/compare/bx-playwright-vs-puppeteer"
      },
      {
        "json": "https://www.anchorterminal.com/compare/bx-playwright-vs-puppeteer-reference-server-archived.json",
        "title": "BxPlaywright vs Puppeteer (archived MCP reference server)",
        "url": "https://www.anchorterminal.com/compare/bx-playwright-vs-puppeteer-reference-server-archived"
      },
      {
        "json": "https://www.anchorterminal.com/compare/bx-playwright-vs-selenium.json",
        "title": "BxPlaywright vs Selenium",
        "url": "https://www.anchorterminal.com/compare/bx-playwright-vs-selenium"
      },
      {
        "json": "https://www.anchorterminal.com/compare/bx-playwright-vs-skyvern.json",
        "title": "BxPlaywright vs Skyvern",
        "url": "https://www.anchorterminal.com/compare/bx-playwright-vs-skyvern"
      },
      {
        "json": "https://www.anchorterminal.com/compare/bx-playwright-vs-steel.json",
        "title": "BxPlaywright vs Steel",
        "url": "https://www.anchorterminal.com/compare/bx-playwright-vs-steel"
      },
      {
        "json": "https://www.anchorterminal.com/compare/bx-playwright-vs-tinyfish.json",
        "title": "BxPlaywright vs TinyFish",
        "url": "https://www.anchorterminal.com/compare/bx-playwright-vs-tinyfish"
      }
    ],
    "panel": null,
    "scores": [
      {
        "autocua": 25,
        "bx-playwright": 41,
        "by": 16,
        "edge": "bx-playwright",
        "key": "reliability",
        "name": "Reliability",
        "weight": 16
      },
      {
        "key": "performance",
        "name": "Performance",
        "pending": true,
        "weight": 10
      },
      {
        "autocua": 42,
        "bx-playwright": 66,
        "by": 24,
        "edge": "bx-playwright",
        "key": "schema",
        "name": "Schema \u0026 documentation",
        "weight": 13
      },
      {
        "autocua": 55,
        "bx-playwright": 63,
        "by": 8,
        "edge": "bx-playwright",
        "key": "ergonomics",
        "name": "Agent ergonomics",
        "weight": 13
      },
      {
        "autocua": 38,
        "bx-playwright": 43,
        "by": 5,
        "edge": "bx-playwright",
        "key": "security",
        "name": "Security \u0026 auth",
        "weight": 14
      },
      {
        "autocua": 60,
        "bx-playwright": 60,
        "by": 0,
        "edge": "",
        "key": "payments",
        "name": "Payments \u0026 pricing",
        "weight": 10
      },
      {
        "key": "tasks",
        "name": "Task success",
        "pending": true,
        "weight": 10
      },
      {
        "autocua": 65,
        "bx-playwright": 53,
        "by": 12,
        "edge": "autocua",
        "key": "maintenance",
        "name": "Maintenance \u0026 community",
        "weight": 7
      },
      {
        "autocua": 42,
        "bx-playwright": 70,
        "by": 28,
        "edge": "bx-playwright",
        "key": "transparency",
        "name": "Transparency \u0026 trust",
        "weight": 7
      }
    ],
    "summary": "BxPlaywright scores 55 (C) on agent readiness against AutoCua's 44.3 (E), and leads in 5 of 7 scored categories. AutoCua leads on maintenance \u0026 community. Both do browser automation.",
    "tasks": null,
    "tutorials": [],
    "verdicts": {
      "autocua": "A capable, fast-moving open-source agent for driving desktops, browsers and phones through real input and accessibility trees, with a careful safety section. It's two weeks old, with no test CI or changelog, and on Windows the model itself decides whether to accept an admin elevation prompt.",
      "bx-playwright": "A BoxLang library over Playwright for Java with smart selectors, retrying assertions, AI snapshots with element refs and ten browser tools for BoxLang AI, plus a launcher for Microsoft's Playwright MCP server. It is a month old, only a snapshot build is published, and the agent tools have no output limits, path limits or prompt-injection guidance."
    }
  },
  "kind": "anchor.page",
  "links": {
    "api": "https://www.anchorterminal.com/api/v1/index.json",
    "html": "https://www.anchorterminal.com/compare/autocua-vs-bx-playwright",
    "json": "https://www.anchorterminal.com/compare/autocua-vs-bx-playwright.json",
    "llms": "https://www.anchorterminal.com/llms.txt",
    "markdown": "https://www.anchorterminal.com/compare/autocua-vs-bx-playwright.md",
    "mcp": "https://www.anchorterminal.com/mcp",
    "slim": "https://www.anchorterminal.com/compare/autocua-vs-bx-playwright.min.md"
  },
  "markdown": "BxPlaywright scores 55 (C) on agent readiness against AutoCua's 44.3 (E), and leads in 5 of 7 scored categories. AutoCua leads on maintenance \u0026 community. Both do browser automation.\n\n- AutoCua: grade E, 44.3/100, rank #1100 of 1354. Markdown https://www.anchorterminal.com/tools/autocua.md · JSON https://www.anchorterminal.com/api/v1/tools/autocua.json\n- BxPlaywright: grade C, 55/100, rank #798 of 1354. Markdown https://www.anchorterminal.com/tools/bx-playwright.md · JSON https://www.anchorterminal.com/api/v1/tools/bx-playwright.json\n- Best desktop and mobile app automation for AI agents: https://www.anchorterminal.com/best/desktop-automation/index.md\n- All 48 desktop comparisons: https://www.anchorterminal.com/compare/desktop-automation/index.md\n- Best browser automation tools for AI agents: https://www.anchorterminal.com/best/browser/index.md\n- All 230 browser comparisons: https://www.anchorterminal.com/compare/browser/index.md\n\n## Which one, for what\n\n### AutoCua (E)\n\nGood for: Developers who want a local agent to operate desktop apps, their own browser or phones across platforms, on a machine they control.\n\nAhead on:\n- Maintenance \u0026 community, 65 against 53\n\nWatch for: Two weeks old at version 0.1.9, with no changelog file\n\n### BxPlaywright (C)\n\nGood for: Teams on BoxLang or modernising CFML who want browser tests, rendering and a browser for BoxLang AI agents in the same language. Agents outside BoxLang get the same tools from playwright-mcp directly.\n\nAhead on:\n- Reliability, 41 against 25\n- Schema \u0026 documentation, 66 against 42\n- Agent ergonomics, 63 against 55\n- Security \u0026 auth, 43 against 38\n- Transparency \u0026 trust, 70 against 42\n\nWatch for: No stable release on 1 November 2026. ForgeBox has only 1.0.0-snapshot, though Ortus announced 1.0 as generally available on 13 October\n\n\n## Why the edge\n\n### Transparency \u0026 trust: BxPlaywright +28\n\n- AutoCua (42): MIT (30). Says it sends data only to the chosen model provider and keeps everything else locally, and the source agrees (20 of 30). No deprecation policy (0). States no telemetry, and none was found (20). 30 + 20 + 0 + 20 = 70.\n- BxPlaywright (70): Apache-2.0, OSI approved, in box.json and src/main/resources/LICENSE (30). Local software with no data statement for the module. The source contacts only nodejs.org, Playwright's browser downloads and the pages it is told to open, and Ortus's privacy policy covers its website and customers (15 of 30). The integrations page says a minor release only adds and removals wait for a major release, listed in the changelog. Nothing has been released under it, and the module was renamed from `playwright` to `bxplaywright` on 12 October before any release (10 of 20). No telemetry found in the source and no statement either way in the docs, scored as boxlang-ai was (10 of 20). 30+15+10+10 = 65.\n\n### Schema \u0026 documentation: BxPlaywright +24\n\n- AutoCua (42): Framework reading. No API reference or typed interface beyond run_agent's documented arguments (5 of 25). No llms.txt (0). The README says what each mode drives and where it runs, and agent_capabilities.md lists what it can do (16 of 20). Modes and device are documented strings (6 of 15). Many examples, no documented errors (10 of 15). Tags without a changelog (5 of 15). 5 + 0 + 16 + 6 + 10 + 5 = 42.\n- BxPlaywright (66): Library reading. BoxLang is dynamically typed. The public API is listed in the docs' integrations page, `help()` and `bxplaywright help --json` describe it at run time, and the ten agent tools describe each argument in a sentence, with no published API reference (14 of 25). llms.txt with a Markdown copy of each of 18 docs pages (10). The AI page says when to use `aiTools()`, the registry or MCP, and when to turn registration off. Tool descriptions are one line each (13 of 20). Every agent-tool argument is a string, with no enums or limits; library options are checked, and InvalidOption lists the valid values (9 of 15). An errors page lists each error type with when it happens and the fix, eight runnable examples sit in the repository, and the docs have code on every page (13 of 15). Keep a Changelog and docs versioning on release, but no released version and no tags yet (7 of 15). 14+10+13+9+13+7 = 66.\n\n### Reliability: BxPlaywright +16\n\n- AutoCua (25): Local package. Installs from PyPI as AutoCua with Python 3.10 or later and the supported platforms stated (20). No CI runs the tests; the only workflow, use_case_label.yml, labels issues (0). GitHub issues weren't read, so the open-issue line is scored absent (0). Four tags in a week with no changelog file (5). Version 0.1.9 (0). 20 + 0 + 0 + 5 + 0 = 25.\n- BxPlaywright (41): Read with the local-software lines and graded as a pre-release. Official package on ForgeBox with BoxLang 1.17.0 or later, Java 21 and the supported platforms stated, but the only version is 1.0.0-snapshot, rebuilt from the development branch on 23 October 2026, with no binary hash on the entry (14 of 20). tests.yml runs 24 test files on Ubuntu and Windows with JDK 21, real-browser tests on Linux and a test of the full distribution, on pull requests, pushes to development and daily. Whether runs pass wasn't read, since WebFetch refused GitHub (15 of 25). Issues weren't readable for the same reason, bugs go to Ortus's Jira, and the repository is a month old, so there's no record to read (5 of 25). Keep a Changelog with semantic versioning stated and a written public contract, but nothing has been released under it and the changelog reads only [Unreleased] (7 of 15). Ortus announced 1.0 as generally available on 13 October, but no 1.0.0 build or tag exists, so it isn't 1.0 for this line (0 of 15). 14+15+5+7+0 = 41.\n\n### Maintenance \u0026 community: AutoCua +12\n\n- AutoCua (65): v0.1.9 tagged on 4 November 2026 (30). Four tags in 90 days (20). Issues and pull requests weren't read (0 of 25). The PyPI wheel is current (15). No CI; dependencies pinned per OS in requirements files (0 of 10). 30 + 20 + 0 + 15 + 0 = 65.\n- BxPlaywright (53): The snapshot build of 23 October 2026 is the latest published package, so 30 on time, though it isn't a release (30). No tagged releases or dated changelog entries in the 90 days, only one version rebuilt (0 of 20). 39 pull requests merged by Luis Majano between 30 September and 23 October. Issue replies couldn't be read and bugs go to Jira (10 of 25). Not in the official MCP registry, and the ForgeBox package has no stable version (5 of 15). Playwright for Java 1.63.0, Dependabot for Gradle monthly and Actions quarterly, a daily test run and a format check (8 of 10). 30+0+10+5+8 = 53.\n\n### Agent ergonomics: BxPlaywright +8\n\n- AutoCua (55): Framework reading. One call with a mode, provider, model and task runs a whole agent (20 of 25). A separate compression agent splices handoff summaries in, and runs are capped and stoppable (15 of 20). Permission and blocked-input errors are reported specifically, with no error reference (8 of 20). No resume or retry semantics described (2 of 20). Sensible defaults (simulators unless device is set), Python only (10 of 15). 20 + 15 + 8 + 2 + 10 = 55.\n- BxPlaywright (63): Library reading, scored on what a tool-calling agent gets. Ten compact in-process tools for BoxLang AI, with nothing to load until a tool is used (25 for ten or fewer), less 5 because every action tool returns the whole page's AI snapshot. Through MCP an agent gets Playwright's 24 default tools (20 of 25). The agent tools have no depth, selector or size limit, and `browser_text` returns the whole page. `snapshot( selector )` exists in the library but not in the tools (8 of 20). Errors come back to the agent as text in the form `Error [type]: message Fix: detail`, and the error types are documented (16 of 20). Assertions retry until they pass. The in-process tools carry no read-only or destructive hints, and bx-ai doesn't read them; over MCP the annotations are Microsoft's (8 of 20). Works with defaults (headless Chromium, 1280 by 720) and profiles, but in one language, BoxLang, with the MCP route for any other client (11 of 15). 20+8+16+8+11 = 63.\n\n### Security \u0026 auth: BxPlaywright +5\n\n- AutoCua (38): Framework reading (telemetry, approvals, guardrails, sandboxing). Provider keys stored in a local folder with Chrome profiles (10 of 30). The worker tools are an allow-list with no write tool, unseen ids are refused, downloads need a yes, but on Windows the model answers UAC elevation prompts itself through a kernel driver, with no person asked (6 of 20). The scraping ruleset has a prompt-injection instruction to log page text that gives instructions (10 of 15). Runs are logged in the app, with no audit log (7 of 15). No security policy, disclosure route or advisories found (5 of 20, for the vault and certificate handling). 10 + 6 + 10 + 7 + 5 = 38.\n- BxPlaywright (43): Library reading, as puppeteer and playwright-mcp were. No credential to leak and nothing to scope, so the middle band (20 of 30). Nothing is restricted by default. `browser_visit` takes any URL with no allow-list, `browser_screenshot` writes to any path the model passes, and the tools are added to bx-ai's global registry unless `registerAiTools` is false, so an agent given every registered tool gets a browser. Over MCP it starts Microsoft's server, which limits file access to workspace roots, and Ortus's plugin starts it with `--headless` but without `--isolated`, with `browser_run_code_unsafe` and `browser_evaluate` in the default set. HTTPS errors are not ignored by default (6 of 20). Page snapshots and text go to the model unfenced, and the docs give no prompt-injection guidance (0 of 15). Screenshot, trace and video policies, `show-trace`, and interception points such as onPageCreate and onPlaywrightArtifact give the operator a record, all off by default (10 of 15). CONTRIBUTING.md asks for reports to security@ortussolutions.com and the Slack #security channel; SECURITY.md points there. No security.txt (410, per the boxlang-ai check of the same day), no bounty, no advisories. Node.js downloads are checked against the release's SHA-256 list (7 of 20). 20+6+0+10+7 = 43.\n\n## Score by category\n\n| Category | Weight | AutoCua | BxPlaywright | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 25 | 41 | BxPlaywright +16 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 42 | 66 | BxPlaywright +24 |\n| Agent ergonomics | 13% (16.2 this run) | 55 | 63 | BxPlaywright +8 |\n| Security \u0026 auth | 14% (17.5 this run) | 38 | 43 | BxPlaywright +5 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 65 | 53 | AutoCua +12 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 42 | 70 | BxPlaywright +28 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **44.3 · E** | **55 · C** | |\n\n## Facts side by side\n\n| Fact | AutoCua | BxPlaywright |\n| --- | --- | --- |\n| Kind | Agent framework | SDK + MCP |\n| Vendor | Ashish Yadav and contributors (ComputerUseAgent on GitHub) | Ortus Solutions |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports |  |  |\n| Auth | None | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| Last release | 2026-11-04 | 2026-10-23 |\n| Terms last updated | no document linked | no date given |\n| Privacy policy last updated | no document linked | no date given |\n| Customer content may train models | not read yet | not found in the text |\n| Terms restrict automated access | not read yet | not found in the text |\n| Terms restrict benchmarking | not read yet | not found in the text |\n| Terms or service can change without notice | not read yet | not found in the text |\n| Arbitration or class-action waiver | not read yet | not found in the text |\n\n## Verdicts\n\n**AutoCua.** A capable, fast-moving open-source agent for driving desktops, browsers and phones through real input and accessibility trees, with a careful safety section. It's two weeks old, with no test CI or changelog, and on Windows the model itself decides whether to accept an admin elevation prompt.\n\n**BxPlaywright.** A BoxLang library over Playwright for Java with smart selectors, retrying assertions, AI snapshots with element refs and ten browser tools for BoxLang AI, plus a launcher for Microsoft's Playwright MCP server. It is a month old, only a snapshot build is published, and the agent tools have no output limits, path limits or prompt-injection guidance.\n\n## Before you call either\n\n### AutoCua\n\n1. pip install AutoCua, then call run_agent with a mode such as \"web use\" or \"computer use\", a provider, a model and a task\n2. Run it on a machine or account you can afford to lose; it drives real input and keeps logged-in browser profiles\n3. On Windows, don't install the Interception driver unless you accept the model deciding UAC prompts\n4. Set AutoCua_DATA_DIR to keep keys and profiles somewhere private\n5. Phones go over USB from a script; Wi-Fi only through the desktop app\n\n### BxPlaywright\n\n1. Expect snapshot builds. Only 1.0.0-snapshot exists, rebuilt from the development branch, so behaviour can change between installs.\n2. Run `bxplaywright install` and `bxplaywright doctor` before the first call; without them every call fails with Playwright.NotInstalled.\n3. Pass `--headless` and `--isolated` to `bxplaywright mcp`. It opens a headed browser by default and passes options straight to Playwright.\n4. Set `registerAiTools: false` and use `playwright().aiTools()` when only some agents should get a browser.\n5. Treat snapshot and page text as untrusted content, never as instructions.\n\n## Questions\n\n### Which is better for AI agents, AutoCua or BxPlaywright?\n\nBxPlaywright scores 55 (C) on agent readiness against AutoCua's 44.3 (E), and leads in 5 of 7 scored categories. AutoCua leads on maintenance \u0026 community.\n\n### Are AutoCua and BxPlaywright open source?\n\nYes. AutoCua is open source (MIT). BxPlaywright is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/autocua-vs-bx-playwright.json, and with the fewest tokens: https://www.anchorterminal.com/compare/autocua-vs-bx-playwright.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"autocua\", \"b\": \"bx-playwright\"}`. From a terminal: `anchor compare autocua bx-playwright`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/autocua.json and https://www.anchorterminal.com/api/v1/tools/bx-playwright.json\n\n## Other comparisons with AutoCua or BxPlaywright\n\n- [agent-browser vs AutoCua](https://www.anchorterminal.com/compare/agent-browser-vs-autocua.md)\n- [agent-browser vs BxPlaywright](https://www.anchorterminal.com/compare/agent-browser-vs-bx-playwright.md)\n- [Airtop vs AutoCua](https://www.anchorterminal.com/compare/airtop-vs-autocua.md)\n- [Airtop vs BxPlaywright](https://www.anchorterminal.com/compare/airtop-vs-bx-playwright.md)\n- [Anchor Browser vs AutoCua](https://www.anchorterminal.com/compare/anchor-browser-vs-autocua.md)\n- [Anchor Browser vs BxPlaywright](https://www.anchorterminal.com/compare/anchor-browser-vs-bx-playwright.md)\n- [AutoCua vs Browser Use](https://www.anchorterminal.com/compare/autocua-vs-browser-use.md)\n- [AutoCua vs Browserless](https://www.anchorterminal.com/compare/autocua-vs-browserless.md)\n- [AutoCua vs Chrome DevTools MCP](https://www.anchorterminal.com/compare/autocua-vs-chrome-devtools-mcp.md)\n- [AutoCua vs Functionize MCP server](https://www.anchorterminal.com/compare/autocua-vs-functionize-mcp.md)\n- [AutoCua vs Hyperbrowser](https://www.anchorterminal.com/compare/autocua-vs-hyperbrowser.md)\n- [AutoCua vs Kane CLI](https://www.anchorterminal.com/compare/autocua-vs-kane-cli.md)\n- [AutoCua vs Lightpanda](https://www.anchorterminal.com/compare/autocua-vs-lightpanda.md)\n- [AutoCua vs Notte](https://www.anchorterminal.com/compare/autocua-vs-notte.md)\n- [AutoCua vs Playwright MCP](https://www.anchorterminal.com/compare/autocua-vs-playwright-mcp.md)\n- [AutoCua vs Pomerado](https://www.anchorterminal.com/compare/autocua-vs-pomerado.md)\n- [AutoCua vs Puppeteer](https://www.anchorterminal.com/compare/autocua-vs-puppeteer.md)\n- [AutoCua vs Puppeteer (archived MCP reference server)](https://www.anchorterminal.com/compare/autocua-vs-puppeteer-reference-server-archived.md)\n- [AutoCua vs Robocorp](https://www.anchorterminal.com/compare/autocua-vs-robocorp.md)\n- [AutoCua vs Selenium](https://www.anchorterminal.com/compare/autocua-vs-selenium.md)\n- [AutoCua vs Skyvern](https://www.anchorterminal.com/compare/autocua-vs-skyvern.md)\n- [AutoCua vs Steel](https://www.anchorterminal.com/compare/autocua-vs-steel.md)\n- [AutoCua vs TinyFish](https://www.anchorterminal.com/compare/autocua-vs-tinyfish.md)\n- [Browser Use vs BxPlaywright](https://www.anchorterminal.com/compare/browser-use-vs-bx-playwright.md)\n- [Browserbase vs BxPlaywright](https://www.anchorterminal.com/compare/browserbase-vs-bx-playwright.md)\n- [Browserless vs BxPlaywright](https://www.anchorterminal.com/compare/browserless-vs-bx-playwright.md)\n- [BxPlaywright vs Chrome DevTools MCP](https://www.anchorterminal.com/compare/bx-playwright-vs-chrome-devtools-mcp.md)\n- [BxPlaywright vs Functionize MCP server](https://www.anchorterminal.com/compare/bx-playwright-vs-functionize-mcp.md)\n- [BxPlaywright vs Hyperbrowser](https://www.anchorterminal.com/compare/bx-playwright-vs-hyperbrowser.md)\n- [BxPlaywright vs Kane CLI](https://www.anchorterminal.com/compare/bx-playwright-vs-kane-cli.md)\n- [BxPlaywright vs Lightpanda](https://www.anchorterminal.com/compare/bx-playwright-vs-lightpanda.md)\n- [BxPlaywright vs Notte](https://www.anchorterminal.com/compare/bx-playwright-vs-notte.md)\n- [BxPlaywright vs Playwright MCP](https://www.anchorterminal.com/compare/bx-playwright-vs-playwright-mcp.md)\n- [BxPlaywright vs Pomerado](https://www.anchorterminal.com/compare/bx-playwright-vs-pomerado.md)\n- [BxPlaywright vs Puppeteer](https://www.anchorterminal.com/compare/bx-playwright-vs-puppeteer.md)\n- [BxPlaywright vs Puppeteer (archived MCP reference server)](https://www.anchorterminal.com/compare/bx-playwright-vs-puppeteer-reference-server-archived.md)\n- [BxPlaywright vs Selenium](https://www.anchorterminal.com/compare/bx-playwright-vs-selenium.md)\n- [BxPlaywright vs Skyvern](https://www.anchorterminal.com/compare/bx-playwright-vs-skyvern.md)\n- [BxPlaywright vs Steel](https://www.anchorterminal.com/compare/bx-playwright-vs-steel.md)\n- [BxPlaywright vs TinyFish](https://www.anchorterminal.com/compare/bx-playwright-vs-tinyfish.md)\n",
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "attributionRequired": true,
    "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-11-06",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.7",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run",
    "terms": "https://www.anchorterminal.com/terms/#data"
  },
  "page": {
    "breadcrumbs": [
      {
        "name": "Home",
        "url": "https://www.anchorterminal.com/"
      },
      {
        "name": "Compare",
        "url": "https://www.anchorterminal.com/compare/"
      },
      {
        "name": "AutoCua vs BxPlaywright",
        "url": ""
      }
    ],
    "description": "BxPlaywright scores 55 (C) to AutoCua's 44.3 (E) for browser automation. Prices, MCP, x402, uptime and agent notes side by side.",
    "facts": [
      "AutoCua E 44.3",
      "BxPlaywright C 55",
      "scores"
    ],
    "h1": "AutoCua vs BxPlaywright",
    "image": "https://www.anchorterminal.com/assets/og/default.png",
    "path": "/compare/autocua-vs-bx-playwright",
    "published": "2026-10-01",
    "section": "tools",
    "title": "AutoCua vs BxPlaywright for AI agents in 2026: scores and prices",
    "toc": null,
    "updated": "2026-11-06",
    "url": "https://www.anchorterminal.com/compare/autocua-vs-bx-playwright"
  },
  "tokens": {
    "markdown": 4850,
    "slim": 2730
  },
  "version": 1
}
