{ "data": { "a": { "slug": "autocua", "name": "AutoCua", "vendor": "Ashish Yadav and contributors (ComputerUseAgent on GitHub)", "vendorUrl": "https://github.com/ComputerUseAgent/AutoCua", "kind": "framework", "category": "desktop-automation", "summary": "AutoCua is an open-source Python agent that operates a computer the way a person does, desktop apps, a terminal, your own Chrome and iOS or Android phones, with any of 60 models from ten providers.", "url": "https://www.anchorterminal.com/tools/autocua", "markdownUrl": "https://www.anchorterminal.com/tools/autocua.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/autocua.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/autocua.json", "dns": "autocua.grade.anchorterminal.com", "repo": "https://github.com/ComputerUseAgent/AutoCua", "license": "MIT", "transports": [], "packages": [ { "registry": "pypi", "name": "AutoCua" } ], "auth": "none", "authNotes": "No account. You bring an API key for the model provider you choose, kept with chats, Chrome profiles and a credential vault in a local AutoCua_data folder.", "pricing": "free", "pricingNotes": "Free and MIT-licensed. You pay your model provider for tokens. Nothing to buy from the project (checked 2026-11-06).", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "evidence": "A local package with nothing to buy and no payment protocol (checked 2026-11-06).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://github.com/ComputerUseAgent/AutoCua#readme", "capabilities": [ "browser.control", "agent.run" ], "tags": [ "open-source", "mit", "python", "computer-use", "local", "new" ], "lastRelease": "2026-11-04", "graded": true, "anchor": { "graded": true, "score": 44.3, "grade": "E", "agentReady": false, "rank": 1100, "ranked": true, "rankOf": 1354, "categoryRank": 8, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 55, "maintenance": 65, "payments": 60, "reliability": 25, "schema": 42, "security": 38, "transparency": 42 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "low", "date": "2026-11-06" }, "negative": 0, "verdict": "A capable, fast-moving open-source agent for driving desktops, browsers and phones through real input and accessibility trees, with a careful safety section. It's two weeks old, with no test CI or changelog, and on Windows the model itself decides whether to accept an admin elevation prompt.", "bestFor": "Developers who want a local agent to operate desktop apps, their own browser or phones across platforms, on a machine they control.", "strengths": [ "One run_agent call drives the desktop, a terminal, your Chrome, or an iOS or Android device", "Element picking from accessibility trees and OCR instead of pixel coordinates", "Credentials typed from a vault so the model never sees them, in the browser and phone agents", "No telemetry, and nothing downloaded without a yes on the terminal", "MIT licence, a pip wheel per OS and architecture, and 60 models across ten providers" ], "weaknesses": [ "Two weeks old at version 0.1.9, with no changelog file", "No CI running the tests; the only workflow labels issues", "On Windows the model answers UAC elevation prompts itself through a kernel input driver", "Keeps API keys and logged-in Chrome profiles in a local folder next to the checkout", "No API reference beyond the README" ], "agentNotes": [ "pip install AutoCua, then call run_agent with a mode such as \"web use\" or \"computer use\", a provider, a model and a task", "Run it on a machine or account you can afford to lose; it drives real input and keeps logged-in browser profiles", "On Windows, don't install the Interception driver unless you accept the model deciding UAC prompts", "Set AutoCua_DATA_DIR to keep keys and profiles somewhere private", "Phones go over USB from a script; Wi-Fi only through the desktop app" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "E", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 44.3 } ], "editorialScores": { "ergonomics": 55, "maintenance": 65, "payments": 60, "reliability": 25, "schema": 42, "security": 38, "transparency": 70 }, "provenanceScore": 13, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install AutoCua\n# then, in Python:\n# from AutoCua.agent_launcher import run_agent\n# run_agent(mode=\"web use\", provider=\"openrouter\", model=\"gemini-3.8-flash\", task=\"Open wikipedia.org and summarise today's featured article.\")" }, "letme": { "capability": "https://letme.dev/browser.control", "tool": "https://letme.dev/autocua" }, "area": "developer", "provenance": { "legalEntity": "", "domain": "github.com", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The licence names Ashish Yadav as copyright holder; most commits are from the GitHub user FunctionFreak. No company, site or terms were found.", "github.com/AutoCua/AutoCua and github.com/ComputerUseAgent/AutoCua serve the same main branch, so one is a rename or mirror of the other." ], "score": 13 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/autocua.json" }, "answer": "Pomerado scores 62.5 (B) on agent readiness against AutoCua's 44.3 (E), and leads in 6 of 7 scored categories. AutoCua leads on payments \u0026 pricing.", "b": { "slug": "pomerado", "name": "Pomerado", "vendor": "Pomerado AI, Inc.", "vendorUrl": "https://pomerado.ai", "kind": "mcp", "category": "browser", "summary": "Pomerado builds and hosts deterministic tools that each do one task on one website, such as a flight search or adding to a cart, which agents call through a hosted MCP server or a REST API.", "url": "https://www.anchorterminal.com/tools/pomerado", "markdownUrl": "https://www.anchorterminal.com/tools/pomerado.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/pomerado.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/pomerado.json", "dns": "pomerado.grade.anchorterminal.com", "repo": "https://github.com/Pomerado/pomerado", "license": "Pomerado Cloud is a proprietary service under Pomerado's terms of service. The minting core in Pomerado/pomerado and the `pomerado` npm package are MIT from version 0.2.0, and versions 0.1.2 and earlier were AGPL-3.0-only", "transports": [ "http" ], "remoteUrl": "https://mcp.pomerado.ai/mcp", "packages": [ { "registry": "npm", "name": "pomerado" } ], "auth": "mixed", "authNotes": "Public read-only tools that need no website login run with no account on https://mcp.pomerado.ai/mcp/keyless and on the REST API without an Authorization header, within a daily limit. Everything else takes a Bearer token, either an OAuth access token from the MCP client's browser sign-in (Google, GitHub or email) or a `pom_` API key. A key carries 1 to 16 of 11 permissions, expires after 90 days by default (1 to 365), can be rotated and revoked, and an integration key reaches one site's MCP with at most four permissions. An agent without a browser can get a 30-day key by device sign-in, which a person approves with a short code. Website logins are entered by the person on a protected Pomerado page, and Pomerado never returns a saved password to a script or a model.", "pricing": "freemium", "pricingNotes": "Free is $0 a month with 100 tool calls a day and 10 new integrations a month, Premium is $50 a month with 1,000 calls a day and 100 integrations, and Business is custom pricing with 100,000+ calls a day, per the pricing section of pomerado.ai (checked 2026-10-17). Keyless use of public read-only tools needs no account or card. Only runs that end with a result count, and failed builds count nothing. The yearly Premium price wasn't shown in the page we read.", "priceSummary": "$50 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, llms.txt, the OpenAPI document or the pricing section. Premium is paid through a Stripe Checkout link that a person opens (https://docs.pomerado.ai/api-reference/billing/start-a-premium-checkout.md, checked 2026-10-17).", "endpoints": [] }, "toolCount": 14, "popularity": { "githubStars": null, "npmWeekly": 36759, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://docs.pomerado.ai", "llmsTxt": "https://docs.pomerado.ai/llms.txt", "openapi": "https://api.pomerado.ai/v1/openapi.json", "registryName": "ai.pomerado/pomerado", "capabilities": [ "browser.control", "web.extract", "automation.actions", "automation.auth", "scraping.anti-bot" ], "tags": [ "official", "hosted", "mcp", "mcp-registry", "oauth", "api-key", "scoped-keys", "openapi", "llms-txt", "freemium", "free-tier", "no-card", "no-key", "idempotency", "async-jobs", "webhooks", "audit-log", "open-source", "mit", "typescript", "no-status-page", "new" ], "lastRelease": "2026-10-29", "graded": true, "anchor": { "graded": true, "score": 62.5, "grade": "B", "agentReady": false, "rank": 503, "ranked": true, "rankOf": 1354, "categoryRank": 12, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 83, "maintenance": 81, "payments": 42, "reliability": 40, "schema": 86, "security": 69, "transparency": 53 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-02" }, "negative": -2, "negativeNotes": [ "Misleading claim, -2. On 2 November 2026, as on 17 October, the homepage (https://pomerado.ai) says \"Connect agents to any website\" and \"Integrate with any website\", and lists bank portals and government filings among what it handles. The docs still say builds and runs for bank and government websites are refused with `site_not_supported`, `details.category` `bank` or `government`, and that a bank tool may be used only by Pomerado staff (https://docs.pomerado.ai/errors#site_not_supported, https://docs.pomerado.ai/errors#tool_on_bank_site)." ], "verdict": "An agent can find and run 584 public read-only website tools with no account, and signed-in calls get scoped, expiring keys, idempotency keys and a documented code for every failure. Pomerado launched on 5 October 2026, has no status page or security.txt, and its homepage lists bank and government portals that its builds refuse.", "bestFor": "An agent that repeats the same task on consumer sites or portals, such as flight searches, carts or order history, and wants a typed call instead of driving a browser.", "strengths": [ "584 public read-only tools across 447 sites run with no account, key or card on the keyless MCP URL and the REST API, as listed on 2 November 2026", "API keys carry chosen permissions out of 11, expire after 90 days by default, rotate and revoke, and integration keys reach one site only", "Idempotency keys on runs and builds, with `write_status` and `outcome_unknown` saying whether a write may have happened", "Public OpenAPI 3.1 document with 90 operations, llms.txt, Markdown docs and 157 error codes, each with what to do", "Every keyless MCP tool carries readOnlyHint or destructiveHint, and the read-only run refuses a tool that writes" ], "weaknesses": [ "First released on 5 October 2026, with a team of two per its YC profile", "No status page or per-second rate limits, and the SLA guarantees listed for Business have no published terms", "No security.txt, SOC 2 report or bug bounty found, while it stores website passwords, authenticator secrets and recovery codes", "The homepage lists bank portals and government filings, but builds for bank and government sites are refused with `site_not_supported`", "Run tools take `input` as a JSON-encoded string over MCP, and there is no official client SDK" ], "agentNotes": [ "Try public read-only tools at https://mcp.pomerado.ai/mcp/keyless, then use `sign_in` and reconnect at /mcp with the key for writes, logins and builds", "Call `find_website_tool` with a query and `site_url`, and check `possible_matches` before starting a build", "Send an `idempotency_key` with every run that writes, and on `outcome_unknown` read the website back before calling again", "Give the person the job's `answer_url` for website logins and codes. Don't take passwords in chat", "Save a run's result when it arrives. It is returned once and erased after 60 minutes if unread" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.5 } ], "editorialScores": { "ergonomics": 83, "maintenance": 81, "payments": 42, "reliability": 40, "schema": 86, "security": 69, "transparency": 43 }, "provenanceScore": 63, "checked": { "categories": { "ergonomics": "2026-11-02", "maintenance": "2026-11-02", "payments": "2026-11-02", "reliability": "2026-11-02", "schema": "2026-11-02", "security": "2026-11-02", "transparency": "2026-11-02" }, "last": "2026-11-02", "lastMoved": "2026-10-30", "oldest": "2026-11-02", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl \"https://api.pomerado.ai/v1/tools?query=search%20flights\"", "claudeCode": "claude mcp add --transport http pomerado https://mcp.pomerado.ai/mcp/keyless", "config": { "mcpServers": { "pomerado": { "url": "https://mcp.pomerado.ai/mcp" } } } }, "letme": { "capability": "https://letme.dev/browser.control", "tool": "https://letme.dev/pomerado" }, "area": "developer", "unitPrices": [ { "item": "Premium plan", "unit": "month", "usd": 50, "note": "1,000 tool calls a day and 100 new integrations a month, billed monthly" } ], "provenance": { "legalEntity": "Pomerado AI, Inc.", "domain": "pomerado.ai", "domainRegistered": "2026-08-28", "endpointOnVendorDomain": true, "terms": "https://pomerado.ai/terms-of-service", "privacy": "https://pomerado.ai/privacy-policy", "statusPage": "", "changelog": "https://github.com/Pomerado/pomerado/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-17", "notes": [ "The terms of service, last updated 4 October 2026, name Pomerado AI, Inc. as provider, are built on the Common Paper Cloud Service Agreement Standard Terms 2.1 with an automated access addendum, and choose Delaware law. The LICENSE names Pomerado AI, Inc.", "The privacy policy page embeds an iubenda policy (iubenda.com/privacy-policy/84434258). iubenda's robots.txt disallows /privacy-policy/, so the policy was not read.", "The MCP server answers at mcp.pomerado.ai and the REST API at api.pomerado.ai, both on the vendor's domain. pomerado.com is an unrelated church website.", "pomerado.ai/.well-known/security.txt returns 404. The README sends security reports to GitHub private vulnerability reporting on the repository.", "status.pomerado.ai has no DNS record, and no status page is linked from the site or docs.", "RDAP for pomerado.ai gives a registration date of 2026-08-28.", "The repository's CHANGELOG.md covers the open-source core. The hosted API's changes are listed under Changes in the API reference introduction, with one entry dated 15 October 2026." ], "score": 63 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/pomerado.json", "live": { "slug": "pomerado", "probe": { "target": "https://mcp.pomerado.ai/mcp", "method": "get", "lastAt": "2026-11-06T09:47:44.343318921Z", "lastOk": true, "lastStatus": 405, "lastMs": 282, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 278, "p95ms24h": 337, "samples24h": 221, "samples30d": 4819, "days": [ { "date": "2026-10-17", "probes": 21, "ok": 21 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 250, "ok": 250 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 102, "ok": 102 } ] }, "versions": [ { "registry": "github", "name": "Pomerado/pomerado", "version": "v0.4.0-canary.522", "released": "2026-11-03", "seenAt": "2026-11-05T21:58:55.908307973Z" }, { "registry": "mcp-registry", "name": "ai.pomerado/pomerado", "version": "1.0.0", "seenAt": "2026-11-05T17:32:31.346782632Z" }, { "registry": "npm", "name": "pomerado", "version": "0.4.0-canary.522", "seenAt": "2026-11-05T21:58:53.830440523Z" } ], "githubStars": 1561, "npmWeekly": 25777, "securityTxt": { "url": "https://pomerado.ai/.well-known/security.txt", "state": "valid", "expires": "2027-10-31T07:00:00.000Z", "checkedAt": "2026-11-05T15:55:27.939955946Z" }, "llmsTxt": { "url": "https://docs.pomerado.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-05T15:27:03.380729209Z" }, "domain": { "domain": "pomerado.ai", "registered": "2026-08-28", "source": "https://rdap.identitydigital.services/rdap/domain/pomerado.ai", "checkedAt": "2026-11-01T14:25:25.062919494Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/Pomerado/pomerado/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-05T13:03:31.990343801Z", "changedAt": "2026-11-05T13:03:31.990343801Z", "fingerprint": "f0d7d0f67649" }, { "url": "https://pomerado.ai/privacy-policy", "kind": "privacy", "status": 304, "checkedAt": "2026-11-05T13:01:41.732382522Z", "changedAt": "2026-11-04T08:30:16.286673821Z", "fingerprint": "a84b6010ea47" }, { "url": "https://pomerado.ai/terms-of-service", "kind": "terms", "status": 304, "checkedAt": "2026-11-05T13:01:43.769338011Z", "changedAt": "2026-10-23T01:53:36.755496743Z", "fingerprint": "66261c298edd" } ], "mcpTools": { "url": "https://mcp.pomerado.ai/mcp", "checkedAt": "2026-11-06T01:36:05.507177577Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-10-17T22:40:22.563221747Z" }, "github": { "repo": "pomerado/pomerado", "checkedAt": "2026-11-02T09:17:41.929385179Z", "stars": 1517, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-02T08:57:21Z", "openIssues": 21, "openPRs": 38, "issuesOpened90d": 25, "issuesClosed90d": 4, "prsMerged90d": 520, "ci": { "branch": "main", "runs": 50, "success": 47, "failure": 2, "other": 1, "latest": "success", "latestAt": "2026-11-02T09:01:54Z" }, "replies": { "sampled": 25, "unanswered": 21, "medianDays": 1.7 } }, "updatedAt": "2026-11-06T09:47:44.343318921Z" } }, "edges": [ { "by": 44, "category": "schema", "leads": "pomerado", "name": "Schema \u0026 documentation", "reasons": { "a": "Framework reading. No API reference or typed interface beyond run_agent's documented arguments (5 of 25). No llms.txt (0). The README says what each mode drives and where it runs, and agent_capabilities.md lists what it can do (16 of 20). Modes and device are documented strings (6 of 15). Many examples, no documented errors (10 of 15). Tags without a changelog (5 of 15). 5 + 0 + 16 + 6 + 10 + 5 = 42.", "b": "OpenAPI 3.1 at /v1/openapi.json with 90 operations on 71 paths on 2 November (84 on 66 on 17 October), and every MCP tool on the keyless endpoint has a typed JSON Schema input with `additionalProperties: false` (25). llms.txt with every page, and a Markdown twin of each docs page (10). MCP descriptions say when to use each tool and when not to, such as Pomerado before a browser, the read-only run for read tools, `possible_matches` before a build, and secrets on `answer_url`, not in chat. The server's instructions say to use a browser only if Pomerado says it can't build a tool (18). 184 enums, lengths and ranges such as `limit` 1 to 100 and keys of 1 to 200 characters, and required fields marked. The run and build tools take `input` and `example_input` as JSON-encoded strings over MCP (11). 59 of 90 operations carry examples, all 90 document error responses, and the errors page gives 157 codes, each with its status, whether to retry and what to do (14). Paths are versioned `/v1`. The API reference still has a dated Changes list with one entry, of 15 October 2026, though six operations were added since, and the open-source core keeps CHANGELOG.md with breaking-change sections (8 of 15)." }, "scores": { "a": 42, "b": 86 } }, { "by": 31, "category": "security", "leads": "pomerado", "name": "Security \u0026 auth", "reasons": { "a": "Framework reading (telemetry, approvals, guardrails, sandboxing). Provider keys stored in a local folder with Chrome profiles (10 of 30). The worker tools are an allow-list with no write tool, unseen ids are refused, downloads need a yes, but on Windows the model answers UAC elevation prompts itself through a kernel driver, with no person asked (6 of 20). The scraping ruleset has a prompt-injection instruction to log page text that gives instructions (10 of 15). Runs are logged in the app, with no audit log (7 of 15). No security policy, disclosure route or advisories found (5 of 20, for the vault and certificate handling). 10 + 6 + 10 + 7 + 5 = 38.", "b": "OAuth for MCP clients, and `pom_` API keys limited to chosen permissions out of 11, expiring after 90 days by default, rotated and revoked through the API, with integration keys confined to one site's MCP. No secret travels in a URL; the keyless URL refuses a key (30). The read-only run refuses a tool that writes before a job starts, builds declare read or write, write tools carry destructiveHint, website logins go through a protected page, and a key can't reveal a saved password or authenticator code. No approval step of Pomerado's own for writes was found beyond the client's own prompt (16). Tools return website content. The job-object page says to treat a job's `message` as data, never as instructions, and outputs are checked against each tool's schema, but no wider guidance on untrusted page text was found (6). Run logs list each browser action and the site's own requests, kept 90 days, builds have an activity log, and connected apps show permissions used and last use (13). No security.txt, SOC 2, ISO 27001 or bug bounty found. The homepage footer now links a trust centre at trust.pomerado.ai, whose robots.txt answers with its script-drawn app page, so it wasn't read and nothing on it is credited. The README sends reports to GitHub private vulnerability reporting, and the terms commit to notify customers of incidents without undue delay (4). Pomerado stores website passwords, authenticator secrets and recovery codes, which raises the stakes of that gap." }, "scores": { "a": 38, "b": 69 } }, { "by": 28, "category": "ergonomics", "leads": "pomerado", "name": "Agent ergonomics", "reasons": { "a": "Framework reading. One call with a mode, provider, model and task runs a whole agent (20 of 25). A separate compression agent splices handoff summaries in, and runs are capped and stoppable (15 of 20). Permission and blocked-input errors are reported specifically, with no error reference (8 of 20). No resume or retry semantics described (2 of 20). Sensible defaults (simulators unless device is set), Python only (10 of 15). 20 + 15 + 8 + 2 + 10 = 55.", "b": "The keyless endpoint lists eight tools with about 27,400 characters of definitions on 2 November, and the docs give 14 for a signed-in connection, with the rest of the API reached through `search_pomerado_api`, `describe_pomerado_api` and `call_pomerado_api` instead of one tool per operation. An integration MCP narrows an agent to one site's tools (19 of 25). Lists take `cursor` and `limit` 1 to 100, tool search filters by query, site and integration, `get_job` takes `include_result` and `wait_seconds`, and paged results carry a cursor (17). One error envelope with `code`, `message`, `retryable`, `docs_url` and `details`, and codes such as `key_permission_missing` name the missing permission and the page to fix it (20). Idempotency keys on runs and builds, with replay marked `Idempotent-Replayed`, and every keyless tool carries readOnlyHint or destructiveHint, idempotentHint and openWorldHint as fits (20). Few required fields (none for search, two for a run), but no official client SDK. The npm package is the local minter, not a Cloud client (7 of 15)." }, "scores": { "a": 55, "b": 83 } }, { "by": 18, "category": "payments", "leads": "autocua", "name": "Payments \u0026 pricing", "reasons": { "a": "Free self-hosted package with nothing to buy: 0 + 20 + 20 + 20 = 60.", "b": "No x402, MPP or L402 on Pomerado's endpoints (0). Plan prices are public, Free $0, Premium $50 a month and Business custom, with call and build allowances, but there is no per-call price (10). The Free plan and keyless use need no card (20). An agent can find and run 584 public read-only tools across 447 sites with no account (46 across 23 on 17 October), but writes, logins and builds need an account that a person approves, through OAuth or a device code, so partial credit (12 of 20)." }, "scores": { "a": 60, "b": 42 } }, { "by": 16, "category": "maintenance", "leads": "pomerado", "name": "Maintenance \u0026 community", "reasons": { "a": "v0.1.9 tagged on 4 November 2026 (30). Four tags in 90 days (20). Issues and pull requests weren't read (0 of 25). The PyPI wheel is current (15). No CI; dependencies pinned per OS in requirements files (0 of 10). 30 + 20 + 0 + 15 + 0 = 65.", "b": "The repository's newest tag is v0.4.0-canary.493 on 29 October 2026, with main merged to 1 November, and the API's Changes entry is of 15 October (30). Releases 0.1.0 to 0.2.0 between 5 and 6 October, 0.3.0 closed in the changelog on 7 October, and 34 tags in all, most of them canaries (20). 1,396 commits on main from 17 October to 1 November, nearly all by the two founders. GitHub issues and replies couldn't be read, because GitHub's pages and API answer 403 in this session, so this rests on the commit history and the founders' email address (8 of 25). In the official MCP registry as `ai.pomerado/pomerado`, a domain-verified namespace, version 1.0.0, active since 15 October 2026, re-read on 2 November (15). CI runs a gitleaks secret scan, pins actions by SHA and publishes with npm provenance, per the 17 October check. Run results couldn't be read (8 of 10). 30 + 20 + 8 + 15 + 8 = 81." }, "scores": { "a": 65, "b": 81 } }, { "by": 15, "category": "reliability", "leads": "pomerado", "name": "Reliability", "reasons": { "a": "Local package. Installs from PyPI as AutoCua with Python 3.10 or later and the supported platforms stated (20). No CI runs the tests; the only workflow, use_case_label.yml, labels issues (0). GitHub issues weren't read, so the open-issue line is scored absent (0). Four tags in a week with no changelog file (5). Version 0.1.9 (0). 20 + 0 + 0 + 5 + 0 = 25.", "b": "Graded as a hosted service, Pomerado Cloud, since the MCP and REST docs and the homepage's setup prompt point agents to it. No status page found on 2 November. status.pomerado.ai still doesn't resolve, and none is linked from the site, the docs or llms.txt (0). No readable incident history (5). Daily allowances are published with numbers (100 or 1,000 tool runs a day, 10 or 100 integrations a month), keyless runs have a daily limit, and 20 connect keys an hour, but no per-second or per-minute request rate was found (10 of 15). Over a limit the API answers 429 `quota_exceeded` with `reset_at`, or `try_limit_reached` with Retry-After, every error carries `retryable`, retryable MCP errors add `retry_after_seconds`, and runs, builds and invitations take idempotency keys with `write_status` and `outcome_unknown` for writes whose result is unclear (15). Business lists SLA guarantees, with no published terms (0). No beta or preview label on the hosted MCP or API, and the registry entry is version 1.0.0 (10). 0 + 5 + 10 + 15 + 0 + 10 = 40." }, "scores": { "a": 25, "b": 40 } } ], "facts": [ { "a": "Agent framework", "b": "MCP server", "name": "Kind" }, { "a": "Ashish Yadav and contributors (ComputerUseAgent on GitHub)", "b": "Pomerado AI, Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "https://mcp.pomerado.ai/mcp", "name": "Hosted endpoint" }, { "a": "", "b": "HTTP", "name": "Transports" }, { "a": "None", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Pomerado Cloud is a proprietary service under Pomerado's terms of service. The minting core in Pomerado/pomerado and the `pomerado` npm package are MIT from version 0.2.0, and versions 0.1.2 and earlier were AGPL-3.0-only", "name": "Licence" }, { "a": "none", "b": "14", "name": "Tools exposed" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "ai.pomerado/pomerado", "name": "MCP registry" }, { "a": "2026-11-04", "b": "2026-10-29", "name": "Last release" }, { "a": "no document linked", "b": "2026-10-04", "name": "Terms last updated" }, { "a": "no document linked", "b": "2026-10-16", "name": "Privacy policy last updated" }, { "a": "not read yet", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not read yet", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "37k npm/wk", "name": "Popularity" }, { "a": "none", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Pomerado scores 62.5 (B) on agent readiness against AutoCua's 44.3 (E), and leads in 6 of 7 scored categories. AutoCua leads on payments \u0026 pricing.", "question": "Which is better for AI agents, AutoCua or Pomerado?" }, { "answer": "No hosted endpoint is listed for AutoCua. Pomerado has a hosted endpoint at https://mcp.pomerado.ai/mcp.", "question": "Can an agent call AutoCua and Pomerado without installing anything?" }, { "answer": "Yes. AutoCua is open source (MIT). Pomerado is open source (Pomerado Cloud is a proprietary service under Pomerado's terms of service. The minting core in Pomerado/pomerado and the `pomerado` npm package are MIT from version 0.2.0, and versions 0.1.2 and earlier were AGPL-3.0-only).", "question": "Are AutoCua and Pomerado open source?" } ], "goodFor": [ { "aheadOn": [ "Payments \u0026 pricing, 60 against 42" ], "also": [ "No key needed to call it" ], "goodFor": "Developers who want a local agent to operate desktop apps, their own browser or phones across platforms, on a machine they control.", "slug": "autocua", "watchFor": "Two weeks old at version 0.1.9, with no changelog file" }, { "aheadOn": [ "Reliability, 40 against 25", "Schema \u0026 documentation, 86 against 42", "Agent ergonomics, 83 against 55", "Security \u0026 auth, 69 against 38", "Maintenance \u0026 community, 81 against 65", "Transparency \u0026 trust, 53 against 42" ], "also": [ "A hosted endpoint, with nothing to install", "Free to start without a card" ], "goodFor": "An agent that repeats the same task on consumer sites or portals, such as flight searches, carts or order history, and wants a typed call instead of driving a browser.", "slug": "pomerado", "watchFor": "First released on 5 October 2026, with a team of two per its YC profile" } ], "history": { "autocua": null, "pomerado": [ { "causes": [ "method" ], "date": "2026-10-30", "delta": -0.3, "from": 62.8, "fromGrade": "B", "to": 62.5, "toGrade": "B" }, { "causes": [ "method" ], "date": "2026-10-28", "delta": 0.2, "from": 62.6, "fromGrade": "B", "to": 62.8, "toGrade": "B" } ] }, "job": { "capability": "browser.control", "name": "Browser automation" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-browser-vs-autocua.json", "title": "agent-browser vs AutoCua", "url": "https://www.anchorterminal.com/compare/agent-browser-vs-autocua" }, { "json": "https://www.anchorterminal.com/compare/agent-browser-vs-pomerado.json", "title": "agent-browser vs Pomerado", "url": "https://www.anchorterminal.com/compare/agent-browser-vs-pomerado" }, { "json": "https://www.anchorterminal.com/compare/airtop-vs-autocua.json", "title": "Airtop vs AutoCua", "url": "https://www.anchorterminal.com/compare/airtop-vs-autocua" }, { "json": "https://www.anchorterminal.com/compare/airtop-vs-pomerado.json", "title": "Airtop vs Pomerado", "url": "https://www.anchorterminal.com/compare/airtop-vs-pomerado" }, { "json": "https://www.anchorterminal.com/compare/anchor-browser-vs-autocua.json", "title": "Anchor Browser vs AutoCua", "url": "https://www.anchorterminal.com/compare/anchor-browser-vs-autocua" }, { "json": "https://www.anchorterminal.com/compare/anchor-browser-vs-pomerado.json", "title": "Anchor Browser vs Pomerado", "url": "https://www.anchorterminal.com/compare/anchor-browser-vs-pomerado" }, { "json": "https://www.anchorterminal.com/compare/autocua-vs-browser-use.json", "title": "AutoCua vs Browser Use", "url": "https://www.anchorterminal.com/compare/autocua-vs-browser-use" }, { "json": "https://www.anchorterminal.com/compare/autocua-vs-browserless.json", "title": "AutoCua vs Browserless", "url": "https://www.anchorterminal.com/compare/autocua-vs-browserless" }, { "json": "https://www.anchorterminal.com/compare/autocua-vs-bx-playwright.json", "title": "AutoCua vs BxPlaywright", "url": "https://www.anchorterminal.com/compare/autocua-vs-bx-playwright" }, { "json": "https://www.anchorterminal.com/compare/autocua-vs-chrome-devtools-mcp.json", "title": "AutoCua vs Chrome DevTools MCP", "url": "https://www.anchorterminal.com/compare/autocua-vs-chrome-devtools-mcp" }, { "json": "https://www.anchorterminal.com/compare/autocua-vs-functionize-mcp.json", "title": "AutoCua vs Functionize MCP server", "url": "https://www.anchorterminal.com/compare/autocua-vs-functionize-mcp" }, { "json": "https://www.anchorterminal.com/compare/autocua-vs-hyperbrowser.json", "title": "AutoCua vs Hyperbrowser", "url": "https://www.anchorterminal.com/compare/autocua-vs-hyperbrowser" }, { "json": "https://www.anchorterminal.com/compare/autocua-vs-kane-cli.json", "title": "AutoCua vs Kane CLI", "url": "https://www.anchorterminal.com/compare/autocua-vs-kane-cli" }, { "json": "https://www.anchorterminal.com/compare/autocua-vs-lightpanda.json", "title": "AutoCua vs Lightpanda", "url": "https://www.anchorterminal.com/compare/autocua-vs-lightpanda" }, { "json": "https://www.anchorterminal.com/compare/autocua-vs-notte.json", "title": "AutoCua vs Notte", "url": "https://www.anchorterminal.com/compare/autocua-vs-notte" }, { "json": "https://www.anchorterminal.com/compare/autocua-vs-playwright-mcp.json", "title": "AutoCua vs Playwright MCP", "url": "https://www.anchorterminal.com/compare/autocua-vs-playwright-mcp" }, { "json": "https://www.anchorterminal.com/compare/autocua-vs-puppeteer.json", "title": "AutoCua vs Puppeteer", "url": "https://www.anchorterminal.com/compare/autocua-vs-puppeteer" }, { "json": "https://www.anchorterminal.com/compare/autocua-vs-puppeteer-reference-server-archived.json", "title": "AutoCua vs Puppeteer (archived MCP reference server)", "url": "https://www.anchorterminal.com/compare/autocua-vs-puppeteer-reference-server-archived" }, { "json": "https://www.anchorterminal.com/compare/autocua-vs-robocorp.json", "title": "AutoCua vs Robocorp", "url": "https://www.anchorterminal.com/compare/autocua-vs-robocorp" }, { "json": "https://www.anchorterminal.com/compare/autocua-vs-selenium.json", "title": "AutoCua vs Selenium", "url": "https://www.anchorterminal.com/compare/autocua-vs-selenium" }, { "json": "https://www.anchorterminal.com/compare/autocua-vs-skyvern.json", "title": "AutoCua vs Skyvern", "url": "https://www.anchorterminal.com/compare/autocua-vs-skyvern" }, { "json": "https://www.anchorterminal.com/compare/autocua-vs-steel.json", "title": "AutoCua vs Steel", "url": "https://www.anchorterminal.com/compare/autocua-vs-steel" }, { "json": "https://www.anchorterminal.com/compare/autocua-vs-tinyfish.json", "title": "AutoCua vs TinyFish", "url": "https://www.anchorterminal.com/compare/autocua-vs-tinyfish" }, { "json": "https://www.anchorterminal.com/compare/browser-use-vs-pomerado.json", "title": "Browser Use vs Pomerado", "url": "https://www.anchorterminal.com/compare/browser-use-vs-pomerado" }, { "json": "https://www.anchorterminal.com/compare/browserbase-vs-pomerado.json", "title": "Browserbase vs Pomerado", "url": "https://www.anchorterminal.com/compare/browserbase-vs-pomerado" }, { "json": "https://www.anchorterminal.com/compare/browserless-vs-pomerado.json", "title": "Browserless vs Pomerado", "url": "https://www.anchorterminal.com/compare/browserless-vs-pomerado" }, { "json": "https://www.anchorterminal.com/compare/bx-playwright-vs-pomerado.json", "title": "BxPlaywright vs Pomerado", "url": "https://www.anchorterminal.com/compare/bx-playwright-vs-pomerado" }, { "json": "https://www.anchorterminal.com/compare/chrome-devtools-mcp-vs-pomerado.json", "title": "Chrome DevTools MCP vs Pomerado", "url": "https://www.anchorterminal.com/compare/chrome-devtools-mcp-vs-pomerado" }, { "json": "https://www.anchorterminal.com/compare/functionize-mcp-vs-pomerado.json", "title": "Functionize MCP server vs Pomerado", "url": "https://www.anchorterminal.com/compare/functionize-mcp-vs-pomerado" }, { "json": "https://www.anchorterminal.com/compare/hyperbrowser-vs-pomerado.json", "title": "Hyperbrowser vs Pomerado", "url": "https://www.anchorterminal.com/compare/hyperbrowser-vs-pomerado" }, { "json": "https://www.anchorterminal.com/compare/kane-cli-vs-pomerado.json", "title": "Kane CLI vs Pomerado", "url": "https://www.anchorterminal.com/compare/kane-cli-vs-pomerado" }, { "json": "https://www.anchorterminal.com/compare/lightpanda-vs-pomerado.json", "title": "Lightpanda vs Pomerado", "url": "https://www.anchorterminal.com/compare/lightpanda-vs-pomerado" }, { "json": "https://www.anchorterminal.com/compare/notte-vs-pomerado.json", "title": "Notte vs Pomerado", "url": "https://www.anchorterminal.com/compare/notte-vs-pomerado" }, { "json": "https://www.anchorterminal.com/compare/playwright-mcp-vs-pomerado.json", "title": "Playwright MCP vs Pomerado", "url": "https://www.anchorterminal.com/compare/playwright-mcp-vs-pomerado" }, { "json": "https://www.anchorterminal.com/compare/pomerado-vs-puppeteer.json", "title": "Pomerado vs Puppeteer", "url": "https://www.anchorterminal.com/compare/pomerado-vs-puppeteer" }, { "json": "https://www.anchorterminal.com/compare/pomerado-vs-puppeteer-reference-server-archived.json", "title": "Pomerado vs Puppeteer (archived MCP reference server)", "url": "https://www.anchorterminal.com/compare/pomerado-vs-puppeteer-reference-server-archived" }, { "json": "https://www.anchorterminal.com/compare/pomerado-vs-selenium.json", "title": "Pomerado vs Selenium", "url": "https://www.anchorterminal.com/compare/pomerado-vs-selenium" }, { "json": "https://www.anchorterminal.com/compare/pomerado-vs-skyvern.json", "title": "Pomerado vs Skyvern", "url": "https://www.anchorterminal.com/compare/pomerado-vs-skyvern" }, { "json": "https://www.anchorterminal.com/compare/pomerado-vs-steel.json", "title": "Pomerado vs Steel", "url": "https://www.anchorterminal.com/compare/pomerado-vs-steel" }, { "json": "https://www.anchorterminal.com/compare/pomerado-vs-tinyfish.json", "title": "Pomerado vs TinyFish", "url": "https://www.anchorterminal.com/compare/pomerado-vs-tinyfish" } ], "panel": null, "scores": [ { "autocua": 25, "by": 15, "edge": "pomerado", "key": "reliability", "name": "Reliability", "pomerado": 40, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "autocua": 42, "by": 44, "edge": "pomerado", "key": "schema", "name": "Schema \u0026 documentation", "pomerado": 86, "weight": 13 }, { "autocua": 55, "by": 28, "edge": "pomerado", "key": "ergonomics", "name": "Agent ergonomics", "pomerado": 83, "weight": 13 }, { "autocua": 38, "by": 31, "edge": "pomerado", "key": "security", "name": "Security \u0026 auth", "pomerado": 69, "weight": 14 }, { "autocua": 60, "by": 18, "edge": "autocua", "key": "payments", "name": "Payments \u0026 pricing", "pomerado": 42, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "autocua": 65, "by": 16, "edge": "pomerado", "key": "maintenance", "name": "Maintenance \u0026 community", "pomerado": 81, "weight": 7 }, { "autocua": 42, "by": 11, "edge": "pomerado", "key": "transparency", "name": "Transparency \u0026 trust", "pomerado": 53, "weight": 7 } ], "summary": "Pomerado scores 62.5 (B) on agent readiness against AutoCua's 44.3 (E), and leads in 6 of 7 scored categories. AutoCua leads on payments \u0026 pricing. Both do browser automation.", "tasks": null, "tutorials": [], "verdicts": { "autocua": "A capable, fast-moving open-source agent for driving desktops, browsers and phones through real input and accessibility trees, with a careful safety section. It's two weeks old, with no test CI or changelog, and on Windows the model itself decides whether to accept an admin elevation prompt.", "pomerado": "An agent can find and run 584 public read-only website tools with no account, and signed-in calls get scoped, expiring keys, idempotency keys and a documented code for every failure. Pomerado launched on 5 October 2026, has no status page or security.txt, and its homepage lists bank and government portals that its builds refuse." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/autocua-vs-pomerado", "json": "https://www.anchorterminal.com/compare/autocua-vs-pomerado.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/autocua-vs-pomerado.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/autocua-vs-pomerado.min.md" }, "markdown": "Pomerado scores 62.5 (B) on agent readiness against AutoCua's 44.3 (E), and leads in 6 of 7 scored categories. AutoCua leads on payments \u0026 pricing. Both do browser automation.\n\n- AutoCua: grade E, 44.3/100, rank #1100 of 1354. Markdown https://www.anchorterminal.com/tools/autocua.md · JSON https://www.anchorterminal.com/api/v1/tools/autocua.json\n- Pomerado: grade B, 62.5/100, rank #503 of 1354. Markdown https://www.anchorterminal.com/tools/pomerado.md · JSON https://www.anchorterminal.com/api/v1/tools/pomerado.json\n- Best desktop and mobile app automation for AI agents: https://www.anchorterminal.com/best/desktop-automation/index.md\n- All 48 desktop comparisons: https://www.anchorterminal.com/compare/desktop-automation/index.md\n- Best browser automation tools for AI agents: https://www.anchorterminal.com/best/browser/index.md\n- All 230 browser comparisons: https://www.anchorterminal.com/compare/browser/index.md\n\n## Which one, for what\n\n### AutoCua (E)\n\nGood for: Developers who want a local agent to operate desktop apps, their own browser or phones across platforms, on a machine they control.\n\nAhead on:\n- Payments \u0026 pricing, 60 against 42\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: Two weeks old at version 0.1.9, with no changelog file\n\n### Pomerado (B)\n\nGood for: An agent that repeats the same task on consumer sites or portals, such as flight searches, carts or order history, and wants a typed call instead of driving a browser.\n\nAhead on:\n- Reliability, 40 against 25\n- Schema \u0026 documentation, 86 against 42\n- Agent ergonomics, 83 against 55\n- Security \u0026 auth, 69 against 38\n- Maintenance \u0026 community, 81 against 65\n- Transparency \u0026 trust, 53 against 42\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- Free to start without a card\n\nWatch for: First released on 5 October 2026, with a team of two per its YC profile\n\n\n## Why the edge\n\n### Schema \u0026 documentation: Pomerado +44\n\n- AutoCua (42): Framework reading. No API reference or typed interface beyond run_agent's documented arguments (5 of 25). No llms.txt (0). The README says what each mode drives and where it runs, and agent_capabilities.md lists what it can do (16 of 20). Modes and device are documented strings (6 of 15). Many examples, no documented errors (10 of 15). Tags without a changelog (5 of 15). 5 + 0 + 16 + 6 + 10 + 5 = 42.\n- Pomerado (86): OpenAPI 3.1 at /v1/openapi.json with 90 operations on 71 paths on 2 November (84 on 66 on 17 October), and every MCP tool on the keyless endpoint has a typed JSON Schema input with `additionalProperties: false` (25). llms.txt with every page, and a Markdown twin of each docs page (10). MCP descriptions say when to use each tool and when not to, such as Pomerado before a browser, the read-only run for read tools, `possible_matches` before a build, and secrets on `answer_url`, not in chat. The server's instructions say to use a browser only if Pomerado says it can't build a tool (18). 184 enums, lengths and ranges such as `limit` 1 to 100 and keys of 1 to 200 characters, and required fields marked. The run and build tools take `input` and `example_input` as JSON-encoded strings over MCP (11). 59 of 90 operations carry examples, all 90 document error responses, and the errors page gives 157 codes, each with its status, whether to retry and what to do (14). Paths are versioned `/v1`. The API reference still has a dated Changes list with one entry, of 15 October 2026, though six operations were added since, and the open-source core keeps CHANGELOG.md with breaking-change sections (8 of 15).\n\n### Security \u0026 auth: Pomerado +31\n\n- AutoCua (38): Framework reading (telemetry, approvals, guardrails, sandboxing). Provider keys stored in a local folder with Chrome profiles (10 of 30). The worker tools are an allow-list with no write tool, unseen ids are refused, downloads need a yes, but on Windows the model answers UAC elevation prompts itself through a kernel driver, with no person asked (6 of 20). The scraping ruleset has a prompt-injection instruction to log page text that gives instructions (10 of 15). Runs are logged in the app, with no audit log (7 of 15). No security policy, disclosure route or advisories found (5 of 20, for the vault and certificate handling). 10 + 6 + 10 + 7 + 5 = 38.\n- Pomerado (69): OAuth for MCP clients, and `pom_` API keys limited to chosen permissions out of 11, expiring after 90 days by default, rotated and revoked through the API, with integration keys confined to one site's MCP. No secret travels in a URL; the keyless URL refuses a key (30). The read-only run refuses a tool that writes before a job starts, builds declare read or write, write tools carry destructiveHint, website logins go through a protected page, and a key can't reveal a saved password or authenticator code. No approval step of Pomerado's own for writes was found beyond the client's own prompt (16). Tools return website content. The job-object page says to treat a job's `message` as data, never as instructions, and outputs are checked against each tool's schema, but no wider guidance on untrusted page text was found (6). Run logs list each browser action and the site's own requests, kept 90 days, builds have an activity log, and connected apps show permissions used and last use (13). No security.txt, SOC 2, ISO 27001 or bug bounty found. The homepage footer now links a trust centre at trust.pomerado.ai, whose robots.txt answers with its script-drawn app page, so it wasn't read and nothing on it is credited. The README sends reports to GitHub private vulnerability reporting, and the terms commit to notify customers of incidents without undue delay (4). Pomerado stores website passwords, authenticator secrets and recovery codes, which raises the stakes of that gap.\n\n### Agent ergonomics: Pomerado +28\n\n- AutoCua (55): Framework reading. One call with a mode, provider, model and task runs a whole agent (20 of 25). A separate compression agent splices handoff summaries in, and runs are capped and stoppable (15 of 20). Permission and blocked-input errors are reported specifically, with no error reference (8 of 20). No resume or retry semantics described (2 of 20). Sensible defaults (simulators unless device is set), Python only (10 of 15). 20 + 15 + 8 + 2 + 10 = 55.\n- Pomerado (83): The keyless endpoint lists eight tools with about 27,400 characters of definitions on 2 November, and the docs give 14 for a signed-in connection, with the rest of the API reached through `search_pomerado_api`, `describe_pomerado_api` and `call_pomerado_api` instead of one tool per operation. An integration MCP narrows an agent to one site's tools (19 of 25). Lists take `cursor` and `limit` 1 to 100, tool search filters by query, site and integration, `get_job` takes `include_result` and `wait_seconds`, and paged results carry a cursor (17). One error envelope with `code`, `message`, `retryable`, `docs_url` and `details`, and codes such as `key_permission_missing` name the missing permission and the page to fix it (20). Idempotency keys on runs and builds, with replay marked `Idempotent-Replayed`, and every keyless tool carries readOnlyHint or destructiveHint, idempotentHint and openWorldHint as fits (20). Few required fields (none for search, two for a run), but no official client SDK. The npm package is the local minter, not a Cloud client (7 of 15).\n\n### Payments \u0026 pricing: AutoCua +18\n\n- AutoCua (60): Free self-hosted package with nothing to buy: 0 + 20 + 20 + 20 = 60.\n- Pomerado (42): No x402, MPP or L402 on Pomerado's endpoints (0). Plan prices are public, Free $0, Premium $50 a month and Business custom, with call and build allowances, but there is no per-call price (10). The Free plan and keyless use need no card (20). An agent can find and run 584 public read-only tools across 447 sites with no account (46 across 23 on 17 October), but writes, logins and builds need an account that a person approves, through OAuth or a device code, so partial credit (12 of 20).\n\n### Maintenance \u0026 community: Pomerado +16\n\n- AutoCua (65): v0.1.9 tagged on 4 November 2026 (30). Four tags in 90 days (20). Issues and pull requests weren't read (0 of 25). The PyPI wheel is current (15). No CI; dependencies pinned per OS in requirements files (0 of 10). 30 + 20 + 0 + 15 + 0 = 65.\n- Pomerado (81): The repository's newest tag is v0.4.0-canary.493 on 29 October 2026, with main merged to 1 November, and the API's Changes entry is of 15 October (30). Releases 0.1.0 to 0.2.0 between 5 and 6 October, 0.3.0 closed in the changelog on 7 October, and 34 tags in all, most of them canaries (20). 1,396 commits on main from 17 October to 1 November, nearly all by the two founders. GitHub issues and replies couldn't be read, because GitHub's pages and API answer 403 in this session, so this rests on the commit history and the founders' email address (8 of 25). In the official MCP registry as `ai.pomerado/pomerado`, a domain-verified namespace, version 1.0.0, active since 15 October 2026, re-read on 2 November (15). CI runs a gitleaks secret scan, pins actions by SHA and publishes with npm provenance, per the 17 October check. Run results couldn't be read (8 of 10). 30 + 20 + 8 + 15 + 8 = 81.\n\n### Reliability: Pomerado +15\n\n- AutoCua (25): Local package. Installs from PyPI as AutoCua with Python 3.10 or later and the supported platforms stated (20). No CI runs the tests; the only workflow, use_case_label.yml, labels issues (0). GitHub issues weren't read, so the open-issue line is scored absent (0). Four tags in a week with no changelog file (5). Version 0.1.9 (0). 20 + 0 + 0 + 5 + 0 = 25.\n- Pomerado (40): Graded as a hosted service, Pomerado Cloud, since the MCP and REST docs and the homepage's setup prompt point agents to it. No status page found on 2 November. status.pomerado.ai still doesn't resolve, and none is linked from the site, the docs or llms.txt (0). No readable incident history (5). Daily allowances are published with numbers (100 or 1,000 tool runs a day, 10 or 100 integrations a month), keyless runs have a daily limit, and 20 connect keys an hour, but no per-second or per-minute request rate was found (10 of 15). Over a limit the API answers 429 `quota_exceeded` with `reset_at`, or `try_limit_reached` with Retry-After, every error carries `retryable`, retryable MCP errors add `retry_after_seconds`, and runs, builds and invitations take idempotency keys with `write_status` and `outcome_unknown` for writes whose result is unclear (15). Business lists SLA guarantees, with no published terms (0). No beta or preview label on the hosted MCP or API, and the registry entry is version 1.0.0 (10). 0 + 5 + 10 + 15 + 0 + 10 = 40.\n\n## Score by category\n\n| Category | Weight | AutoCua | Pomerado | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 25 | 40 | Pomerado +15 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 42 | 86 | Pomerado +44 |\n| Agent ergonomics | 13% (16.2 this run) | 55 | 83 | Pomerado +28 |\n| Security \u0026 auth | 14% (17.5 this run) | 38 | 69 | Pomerado +31 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 42 | AutoCua +18 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 65 | 81 | Pomerado +16 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 42 | 53 | Pomerado +11 |\n| Negative events | ≤15 | 0 | -2 | |\n| **Total** | | **44.3 · E** | **62.5 · B** | |\n\n## Facts side by side\n\n| Fact | AutoCua | Pomerado |\n| --- | --- | --- |\n| Kind | Agent framework | MCP server |\n| Vendor | Ashish Yadav and contributors (ComputerUseAgent on GitHub) | Pomerado AI, Inc. |\n| Hosted endpoint | no (local only) | `https://mcp.pomerado.ai/mcp` |\n| Transports | | HTTP |\n| Auth | None | OAuth or key |\n| Pricing | Free | Freemium |\n| x402 | no | no |\n| Licence | MIT | Pomerado Cloud is a proprietary service under Pomerado's terms of service. The minting core in Pomerado/pomerado and the `pomerado` npm package are MIT from version 0.2.0, and versions 0.1.2 and earlier were AGPL-3.0-only |\n| Tools exposed | none | 14 |\n| Read-only variant documented | no | yes |\n| llms.txt | no | yes |\n| MCP registry | not listed | `ai.pomerado/pomerado` |\n| Last release | 2026-11-04 | 2026-10-29 |\n| Terms last updated | no document linked | 2026-10-04 |\n| Privacy policy last updated | no document linked | 2026-10-16 |\n| Customer content may train models | not read yet | not found in the text |\n| Terms restrict automated access | not read yet | not found in the text |\n| Terms restrict benchmarking | not read yet | not found in the text |\n| Terms or service can change without notice | not read yet | not found in the text |\n| Arbitration or class-action waiver | not read yet | not found in the text |\n| Popularity | none | 37k npm/wk |\n| Agent reviews | none | 3/5 (4) |\n\n## How the scores have moved\n\n### AutoCua\n\nNo score change since it was listed.\n\n### Pomerado\n\n- -0.3 on 30 October 2026: checklist\n- +0.2 on 28 October 2026: checklist\n\n## Verdicts\n\n**AutoCua.** A capable, fast-moving open-source agent for driving desktops, browsers and phones through real input and accessibility trees, with a careful safety section. It's two weeks old, with no test CI or changelog, and on Windows the model itself decides whether to accept an admin elevation prompt.\n\n**Pomerado.** An agent can find and run 584 public read-only website tools with no account, and signed-in calls get scoped, expiring keys, idempotency keys and a documented code for every failure. Pomerado launched on 5 October 2026, has no status page or security.txt, and its homepage lists bank and government portals that its builds refuse.\n\n## Before you call either\n\n### AutoCua\n\n1. pip install AutoCua, then call run_agent with a mode such as \"web use\" or \"computer use\", a provider, a model and a task\n2. Run it on a machine or account you can afford to lose; it drives real input and keeps logged-in browser profiles\n3. On Windows, don't install the Interception driver unless you accept the model deciding UAC prompts\n4. Set AutoCua_DATA_DIR to keep keys and profiles somewhere private\n5. Phones go over USB from a script; Wi-Fi only through the desktop app\n\n### Pomerado\n\n1. Try public read-only tools at https://mcp.pomerado.ai/mcp/keyless, then use `sign_in` and reconnect at /mcp with the key for writes, logins and builds\n2. Call `find_website_tool` with a query and `site_url`, and check `possible_matches` before starting a build\n3. Send an `idempotency_key` with every run that writes, and on `outcome_unknown` read the website back before calling again\n4. Give the person the job's `answer_url` for website logins and codes. Don't take passwords in chat\n5. Save a run's result when it arrives. It is returned once and erased after 60 minutes if unread\n\n## Questions\n\n### Which is better for AI agents, AutoCua or Pomerado?\n\nPomerado scores 62.5 (B) on agent readiness against AutoCua's 44.3 (E), and leads in 6 of 7 scored categories. AutoCua leads on payments \u0026 pricing.\n\n### Can an agent call AutoCua and Pomerado without installing anything?\n\nNo hosted endpoint is listed for AutoCua. Pomerado has a hosted endpoint at https://mcp.pomerado.ai/mcp.\n\n### Are AutoCua and Pomerado open source?\n\nYes. AutoCua is open source (MIT). Pomerado is open source (Pomerado Cloud is a proprietary service under Pomerado's terms of service. The minting core in Pomerado/pomerado and the `pomerado` npm package are MIT from version 0.2.0, and versions 0.1.2 and earlier were AGPL-3.0-only).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/autocua-vs-pomerado.json, and with the fewest tokens: https://www.anchorterminal.com/compare/autocua-vs-pomerado.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"autocua\", \"b\": \"pomerado\"}`. From a terminal: `anchor compare autocua pomerado`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/autocua.json and https://www.anchorterminal.com/api/v1/tools/pomerado.json\n\n## Other comparisons with AutoCua or Pomerado\n\n- [agent-browser vs AutoCua](https://www.anchorterminal.com/compare/agent-browser-vs-autocua.md)\n- [agent-browser vs Pomerado](https://www.anchorterminal.com/compare/agent-browser-vs-pomerado.md)\n- [Airtop vs AutoCua](https://www.anchorterminal.com/compare/airtop-vs-autocua.md)\n- [Airtop vs Pomerado](https://www.anchorterminal.com/compare/airtop-vs-pomerado.md)\n- [Anchor Browser vs AutoCua](https://www.anchorterminal.com/compare/anchor-browser-vs-autocua.md)\n- [Anchor Browser vs Pomerado](https://www.anchorterminal.com/compare/anchor-browser-vs-pomerado.md)\n- [AutoCua vs Browser Use](https://www.anchorterminal.com/compare/autocua-vs-browser-use.md)\n- [AutoCua vs Browserless](https://www.anchorterminal.com/compare/autocua-vs-browserless.md)\n- [AutoCua vs BxPlaywright](https://www.anchorterminal.com/compare/autocua-vs-bx-playwright.md)\n- [AutoCua vs Chrome DevTools MCP](https://www.anchorterminal.com/compare/autocua-vs-chrome-devtools-mcp.md)\n- [AutoCua vs Functionize MCP server](https://www.anchorterminal.com/compare/autocua-vs-functionize-mcp.md)\n- [AutoCua vs Hyperbrowser](https://www.anchorterminal.com/compare/autocua-vs-hyperbrowser.md)\n- [AutoCua vs Kane CLI](https://www.anchorterminal.com/compare/autocua-vs-kane-cli.md)\n- [AutoCua vs Lightpanda](https://www.anchorterminal.com/compare/autocua-vs-lightpanda.md)\n- [AutoCua vs Notte](https://www.anchorterminal.com/compare/autocua-vs-notte.md)\n- [AutoCua vs Playwright MCP](https://www.anchorterminal.com/compare/autocua-vs-playwright-mcp.md)\n- [AutoCua vs Puppeteer](https://www.anchorterminal.com/compare/autocua-vs-puppeteer.md)\n- [AutoCua vs Puppeteer (archived MCP reference server)](https://www.anchorterminal.com/compare/autocua-vs-puppeteer-reference-server-archived.md)\n- [AutoCua vs Robocorp](https://www.anchorterminal.com/compare/autocua-vs-robocorp.md)\n- [AutoCua vs Selenium](https://www.anchorterminal.com/compare/autocua-vs-selenium.md)\n- [AutoCua vs Skyvern](https://www.anchorterminal.com/compare/autocua-vs-skyvern.md)\n- [AutoCua vs Steel](https://www.anchorterminal.com/compare/autocua-vs-steel.md)\n- [AutoCua vs TinyFish](https://www.anchorterminal.com/compare/autocua-vs-tinyfish.md)\n- [Browser Use vs Pomerado](https://www.anchorterminal.com/compare/browser-use-vs-pomerado.md)\n- [Browserbase vs Pomerado](https://www.anchorterminal.com/compare/browserbase-vs-pomerado.md)\n- [Browserless vs Pomerado](https://www.anchorterminal.com/compare/browserless-vs-pomerado.md)\n- [BxPlaywright vs Pomerado](https://www.anchorterminal.com/compare/bx-playwright-vs-pomerado.md)\n- [Chrome DevTools MCP vs Pomerado](https://www.anchorterminal.com/compare/chrome-devtools-mcp-vs-pomerado.md)\n- [Functionize MCP server vs Pomerado](https://www.anchorterminal.com/compare/functionize-mcp-vs-pomerado.md)\n- [Hyperbrowser vs Pomerado](https://www.anchorterminal.com/compare/hyperbrowser-vs-pomerado.md)\n- [Kane CLI vs Pomerado](https://www.anchorterminal.com/compare/kane-cli-vs-pomerado.md)\n- [Lightpanda vs Pomerado](https://www.anchorterminal.com/compare/lightpanda-vs-pomerado.md)\n- [Notte vs Pomerado](https://www.anchorterminal.com/compare/notte-vs-pomerado.md)\n- [Playwright MCP vs Pomerado](https://www.anchorterminal.com/compare/playwright-mcp-vs-pomerado.md)\n- [Pomerado vs Puppeteer](https://www.anchorterminal.com/compare/pomerado-vs-puppeteer.md)\n- [Pomerado vs Puppeteer (archived MCP reference server)](https://www.anchorterminal.com/compare/pomerado-vs-puppeteer-reference-server-archived.md)\n- [Pomerado vs Selenium](https://www.anchorterminal.com/compare/pomerado-vs-selenium.md)\n- [Pomerado vs Skyvern](https://www.anchorterminal.com/compare/pomerado-vs-skyvern.md)\n- [Pomerado vs Steel](https://www.anchorterminal.com/compare/pomerado-vs-steel.md)\n- [Pomerado vs TinyFish](https://www.anchorterminal.com/compare/pomerado-vs-tinyfish.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-06", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "AutoCua vs Pomerado", "url": "" } ], "description": "Pomerado scores 62.5 (B) to AutoCua's 44.3 (E) for browser automation. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "AutoCua E 44.3", "Pomerado B 62.5", "scores" ], "h1": "AutoCua vs Pomerado", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/autocua-vs-pomerado", "published": "2026-10-01", "section": "tools", "title": "AutoCua vs Pomerado for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-06", "url": "https://www.anchorterminal.com/compare/autocua-vs-pomerado" }, "tokens": { "markdown": 5200, "slim": 3030 }, "version": 1 }