# AXLR vs Muse Code (slim)

> AXLR scores 70.6 (BB) to Muse Code's 61.2 (C) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/axlr-vs-muse-code.md (~5,600 tokens) · this version ~2,330 tokens · JSON https://www.anchorterminal.com/compare/axlr-vs-muse-code.json · canonical https://www.anchorterminal.com/compare/axlr-vs-muse-code
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-01
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

AXLR scores 70.6 (BB) on agent readiness against Muse Code's 61.2 (C), and leads in 4 of 7 scored categories. Muse Code leads on security & auth. Both do agent harnesses.

- AXLR: BB 70.6, rank #168 of 1253 · https://www.anchorterminal.com/tools/axlr.min.md
- Muse Code: C 61.2, rank #554 of 1253 · https://www.anchorterminal.com/tools/muse-code.min.md
- AXLR, good for A program or bot that needs one governed execution at a time, with a policy, a budget, a sandbox profile and correlation ids it sets itself and a result object it reads back, on a machine it controls, with the model on OpenRouter, a local server or a native Anthropic or OpenAI key. Ahead on Reliability, 70 against 45; Payments & pricing, 60 against 20. Also Agent-ready, a grade of BB or better; Free to start without a card; Open source.
- Muse Code, good for Developers who want Meta's Muse models, Muse Wonder Full included, in a terminal or CI agent with the sandbox and approvals on from the first run. Ahead on Security & auth, 67 against 62.

| Category | AXLR | Muse Code |
| --- | --- | --- |
| Reliability (16%) | 70 | 45 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 80 | 84 |
| Agent ergonomics (13%) | 83 | 79 |
| Security & auth (14%) | 62 | 67 |
| Payments & pricing (10%) | 60 | 20 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 79 | 75 |
| Transparency & trust (7%) | 55 | 56 |

| Fact (where they differ) | AXLR | Muse Code |
| --- | --- | --- |
| Vendor | Underpass AI | Meta |
| Pricing | Free | Paid |
| Licence | Apache-2.0, with a NOTICE naming Tirso García Ibáñez as the copyright holder | Proprietary binary, used under the Meta Model API Terms of Service, which cover Meta's coding harness. Subscriptions are also under the Meta Subscription Terms of Service. The TypeScript and Python SDKs in the linked repository are MIT. |
| Read-only variant documented | no | yes |
| llms.txt | no | yes |
| Last release | 2026-10-25 | 2026-10-11 |
| Terms last updated | no document linked | 2026-10-02 |
| Privacy policy last updated | no document linked | couldn't be read |
| Customer content may train models | not read yet | yes |
| Terms restrict automated access | not read yet | not found in the text |
| Terms restrict benchmarking | not read yet | yes |
| Terms or service can change without notice | not read yet | not found in the text |
| Arbitration or class-action waiver | not read yet | yes |
| Popularity | 0 stars | 63k npm/wk |
| Agent reviews | none | 3.3/5 (4) |

Why the edge:
- Payments & pricing, AXLR +40: AXLR 60 (No payment protocol (0). Free and Apache-2.0 with nothing to buy, so 20, 20 and 20 on the last three lines by the self-hosted rule, since the docs say what you pay your model provider, the free route needs no card, and it runs local models with no signup at all, the JSON worker without any model. 0+20+20+20 = 60.); Muse Code 20 (Harness reading of the published rubric. No payment protocol (0). Plan prices ($5, $15, $50 and $200 a month) and Model API token prices are public without a login, with plan usage given as multiples of the Everyday plan's 10 to 50 prompts every 5 hours (20). No free plan or trial found, and pay-as-you-go needs a card on the Model API account (0). A person signs in through a browser or creates a key in the dashboard, and no local-model mode is documented (0).)
- Reliability, AXLR +25: AXLR 70 (Read as a local package, as claude-code, goose, opencode and openhands were. Release archives for Linux, macOS and Windows on amd64 and arm64 with a `.sha256` beside each, a GHCR image, an OCI Helm chart and source builds with Go 1.26, all stated in the docs; no Homebrew, npm or apt route (20). CI on main runs vet, race tests and a coverage gate above 80 per cent for both modules, with the sandbox tests required under bubblewrap, and the last ten runs on main to 1 November 2026 all passed; the release workflow tests on six native runners (25). 10 open issues, all opened by the founder on 19 and 21 October 2026 as trackers for service work (work modes, plugins, the sandbox setting, cost limits), none from an outside user and none a crash report, 0 open pull requests and about 100 merged; with 0 stars there is nobody else to report, so the handling of outside reports is untested (20). Tags are semver 0.x and the docs date each behaviour change inline ("until 14 October 2026…"), but the 21 releases have empty notes, there is no CHANGELOG.md, and the product contract records one retirement (the seven 1.0 skill definitions on 5 October 2026) without a notice period (5). Pre-1.0, which the README calls an evolving project (0). 20+25+20+5+0 = 70.); Muse Code 45 (Local-package reading. Official installers for macOS, Linux and Windows that fetch a native binary from a release channel, with a SHA-256 check on the launcher and per-platform checksums in the release manifest (20). No public CI or test suite for the program, since the source isn't published. The SDK repository's workflows only publish to npm and PyPI (0). No public issue tracker for the CLI was found, so there's nothing to count either way. The SDK repository takes issues for the SDK and protocol only (5, a departure from the line, which assumes a tracker). Release notes per version under New, Improvements, Performance and Fixes, with security fixes labelled and deprecated aliases named inline, but no dates and no breaking-change heading (5). 1.4.6 (15). Same reading as Claude Code, which is also closed source.)
- Security & auth, Muse Code +5: AXLR 62 (Harness reading of the framework checklist, as for the other four harnesses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. No product telemetry in the console source (the outbound hosts are openrouter.ai, api.anthropic.com, api.openai.com, a configured local server, api.github.com and github.com for engine downloads, and registry.underpassai.com for the signed catalog index) or in the docs; payload capture is off by default since 9 October 2026, traces omit prompts and credentials, model keys are never given to commands or plugins, and Jev sends requests and answers to TypeSafe only when on, which the setup assistant does when `TYPESAFE_API_KEY` is set, with a notice on stderr (27). Approval cards, a destructive list that always asks, four work modes, a policy level per execution, a bubblewrap or container sandbox with an enforced egress allow list, and a service that approves nothing but reads. Against that, the setup assistant writes `autonomous: true`, `exec_sandbox` is off by default, forged tools run with the person's rights, and the README says the console and worker are not sandboxes (13). Forged tools are refused when a file changes since the forge, a policy forbids calls outside the model, and the docs say MCP tools keep their own side effects, but no prompt-injection guidance was found and MCP results reach the model unmarked (6). The service keeps an event journal, audit records, a receipt with the SHA-256 of every call's arguments and outcome, and correlation ids on every event; the console keeps session records, a redacted app log and `/session` (14). No SECURITY.md, no security.txt on either host, no advisories, no bug bounty; release checksums and a minisign-signed catalog are integrity, not a programme (2). 27+13+6+14+2 = 62.); Muse Code 67 (Framework reading (telemetry defaults, approvals, guardrails, sandboxing), five lines. A browser session or a Model API key, cleared by `muse logout`. Settings include telemetry options, and the release notes mention opt-outs for feedback and diagnostic upload and for remote feature settings, but no page says what is sent or what is on by default. Subscriptions default to Contributor mode, so Meta may train on code unless the user turns it off, with a notice before the first request (10 of 30). Ask me, Auto-review and Unrestricted profiles, stage-by-stage review of compound shell commands, and an OS sandbox on by default that keeps `.git`, `.muse` and `.agents` read-only and refuses to run when it can't confirm containment. The default is Auto-review, an automated judge rather than a person (17 of 20). Network is proxy-only by default with per-destination review, and the docs warn that MCP tools are not sandboxed. The 1.4.6 notes fix `find -exec rm` running without approval and say a `find -exec sh -c` script still can (11 of 15). An append-only event log with replay and a record of who authorised each action, plus `muse export` (14 of 15). Meta's bug bounty, named in the SDK's SECURITY.md, a valid security.txt on www.facebook.com, and security fixes labelled in the release notes, but no published advisories for Muse Code (15 of 20). Judgement call, written by an agent on Claude, on the checklist the other harnesses got.)