{ "data": { "a": { "slug": "bigarrow", "name": "Big Arrow", "vendor": "Franz Enzenhofer", "vendorUrl": "https://github.com/franzenzenhofer/big-arrow-on-the-screen", "kind": "sdk", "category": "human-in-the-loop", "summary": "bigarrow is an open-source macOS command-line tool, with a skill for Claude Code and Codex, that lets an agent point at any window with a click-through arrow and sign, or hand a person values and questions on a floating card.", "url": "https://www.anchorterminal.com/tools/bigarrow", "markdownUrl": "https://www.anchorterminal.com/tools/bigarrow.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/bigarrow.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/bigarrow.json", "dns": "bigarrow.grade.anchorterminal.com", "repo": "https://github.com/franzenzenhofer/big-arrow-on-the-screen", "license": "MIT", "transports": [], "packages": [], "auth": "none", "authNotes": "No account, key or network access. Drawing needs no macOS permission. Pointing at a UI element by label (`--element`, `elements`, `--until-click`, `--app App:title`) needs Accessibility, and `--window App:title` needs Screen Recording, both granted to the app that runs the shell (Terminal, Ghostty, VS Code), never to bigarrow itself. Card secrets are read from `pass:`, `keychain:`, `op:` (1Password), `env:` or `file:` sources, never passed on the command line.", "pricing": "free", "pricingNotes": "Free under MIT with nothing to buy. Installed from the author's Homebrew tap, which builds from source, or as an ad hoc signed universal binary from GitHub Releases.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the source, the README or the skill (checked 2026-10-15). The tool has no paid tier and makes no network calls.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 747, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-15" }, "docsUrl": "https://github.com/franzenzenhofer/big-arrow-on-the-screen#readme", "capabilities": [ "hitl.handoff", "hitl.ask", "hitl.approve" ], "tags": [ "open-source", "local", "free", "no-card", "mit", "macos", "swift", "cli", "agent-skill", "json-output", "pre-1.0", "new" ], "lastRelease": "2026-10-26", "graded": true, "anchor": { "graded": true, "score": 71.1, "grade": "BB", "agentReady": true, "rank": 146, "ranked": true, "rankOf": 1253, "categoryRank": 3, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 77, "maintenance": 70, "payments": 60, "reliability": 75, "schema": 78, "security": 67, "transparency": 63 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": 0, "verdict": "An agent can show a person which control to click, with a labelled arrow that needs no permission to draw and removes itself, and since 0.5.0 can collect an answer on a cue card. The tool is under a month old at version 0.5.1, runs only on macOS, and has no security policy.", "bestFor": "An agent on a person's Mac that reaches a step only the person may do, such as a permission prompt, 2FA code or payment, and needs to show where or hand over values and get a yes or no.", "strengths": [ "Drawing needs no macOS permission, and the overlay never takes keyboard focus, which integration tests on the real window server check", "Every arrow ends on a time limit, when its agent process exits, on `stop`, or on a click, so none outlives the session by default", "Cue cards return the person's button, choice or typed answer to the agent as JSON through `bigarrow wait`", "Card secrets come from the keychain, pass, 1Password, an environment variable or a file, never the command line, and leave the clipboard after 30 s", "No network code, telemetry or account. The only dependency is Apple's swift-argument-parser" ], "weaknesses": [ "First commit 8 October 2026 and version 0.5.1, with flags removed or renamed between minor versions", "macOS 14 or later only. Windows and Linux exist only as third-party ports", "Answers reach only an agent on the same Mac. No chat, email or phone channel, and no persistent decision log", "No SECURITY.md or disclosure route, and the release binary is signed ad hoc, not notarised", "The README's skill token counts date from 10 October and predate the card sections, which grew SKILL.md by 44 per cent in words" ], "agentNotes": [ "Open the exact System Settings pane or URL first, then point at the one control left for the person", "Write the sign as a full sentence that names the action and, for approvals or payments, what the click does", "Pass secrets to `bigarrow card` as `--secret Label=keychain:service/account` or another source, never as a literal value", "After `bigarrow card`, run `bigarrow wait`. Exit 1 means the person closed the card without answering, so ask in the terminal", "On exit 4, run `bigarrow doctor` and ask the person to grant Accessibility to the app running your shell, not to bigarrow" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 3.3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 71.1 } ], "editorialScores": { "ergonomics": 77, "maintenance": 70, "payments": 60, "reliability": 75, "schema": 78, "security": 67, "transparency": 65 }, "provenanceScore": 61, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-10-27", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "brew install franzenzenhofer/tap/bigarrow \u0026\u0026 bigarrow install-skill", "headless": { "check": "bigarrow doctor --json", "point": "bigarrow point --element \"Allow\" --app \"System Settings\" --text \"Franz, click Allow\" --json", "start": "bigarrow start --window \"Safari:Inbox\" --text \"This window\"", "stop": "bigarrow stop" } }, "letme": { "capability": "https://letme.dev/hitl.handoff", "tool": "https://letme.dev/bigarrow" }, "area": "agent-runtime", "provenance": { "legalEntity": "Franz Enzenhofer (individual, Vienna)", "domain": "", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/franzenzenhofer/big-arrow-on-the-screen/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-01", "notes": [ "The project has no website. The licence reads Copyright (c) 2026 Franz Enzenhofer. His GitHub account (created 2010) gives Vienna and links fullstackoptimization.com, and commits come from addresses at that domain.", "18 of 170 commits are by Arthur Ficial, with an address at the same domain, the account behind the merged README and guide pull requests.", "No terms, privacy policy, SECURITY.md or security.txt. The README says the tool has no account and no telemetry.", "The software runs on the owner's Mac, so there is no vendor endpoint or status page to check." ], "score": 61 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/bigarrow.json", "live": { "slug": "bigarrow", "versions": [ { "registry": "github", "name": "franzenzenhofer/big-arrow-on-the-screen", "version": "v0.5.1", "released": "2026-10-26", "seenAt": "2026-11-01T16:46:23.389151366Z" } ], "githubStars": 828, "pages": [ { "url": "https://raw.githubusercontent.com/franzenzenhofer/big-arrow-on-the-screen/main/CHANGELOG.md", "kind": "changelog", "status": 304, "checkedAt": "2026-11-01T06:53:05.007077861Z", "changedAt": "2026-10-27T03:54:35.601454619Z", "fingerprint": "5350cb703cf8" } ], "github": { "repo": "franzenzenhofer/big-arrow-on-the-screen", "checkedAt": "2026-10-26T07:28:44.937265773Z", "stars": 817, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-18T15:42:23Z", "openIssues": 3, "openPRs": 1, "issuesOpened90d": 43, "issuesClosed90d": 40, "prsMerged90d": 26, "ci": { "branch": "main", "runs": 50, "success": 50, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-10-12T16:41:03Z" }, "replies": { "sampled": 25, "unanswered": 3, "medianDays": 0.1 } }, "updatedAt": "2026-11-01T16:46:23.389151366Z" } }, "answer": "Big Arrow scores 71.1 (BB) on agent readiness against withHuman's 52.1 (D), and leads in 5 of 7 scored categories. withHuman leads on security \u0026 auth.", "b": { "slug": "withhuman", "name": "withHuman", "vendor": "Metoro Inc", "vendorUrl": "https://withhuman.ai", "kind": "http-api", "category": "human-in-the-loop", "summary": "withHuman is a hosted approval service for AI agents from Metoro Inc. It holds an agent's tool calls for a person to approve or deny through the Agent Approval Protocol API, coding-agent hooks, an MCP gateway and an MCP server.", "url": "https://www.anchorterminal.com/tools/withhuman", "markdownUrl": "https://www.anchorterminal.com/tools/withhuman.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/withhuman.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/withhuman.json", "dns": "withhuman.grade.anchorterminal.com", "license": "Proprietary hosted service under Metoro Inc's terms. The site describes an open-source edition, but the repository it links to returned 404 on 8 October 2026", "transports": [ "http" ], "remoteUrl": "https://app.withhuman.ai", "packages": [], "auth": "mixed", "authNotes": "Five credentials, all sent as `Authorization: Bearer`. An agent credential (`whc_`) is bound to one agent instance and can only create approval requests and wait for decisions. A provisioner token (`whp_`) can only create and manage instances of its agent. A personal API key (`whk_`) follows its owner's permissions, can be narrowed to chosen actions and expires after 90 days by default. An organisation API key (`who_`, Scale plan and above) carries its own permission policies and cannot decide requests. The MCP server at `/api/mcp/v1` signs in with OAuth (authorisation code with PKCE and dynamic client registration) or takes an API key as a bearer token. A person signs up in the browser and connects the first agent.", "pricing": "freemium", "pricingNotes": "Free hosted plan at $0 for up to 5 members, with unlimited agents and approval requests, email, Slack and Discord, the audit log and the MCP gateway. Scale is $20 per user a month and adds the phone apps, organisation and scoped API keys, single sign-on and directory sync. Enterprise is a custom annual contract. New organisations start on a trial and move to Free without a subscription. Monthly allowances for gateway tool calls and phone messages exist but their numbers aren't on the pricing page (https://withhuman.ai/pricing, checked 2026-10-08).", "priceSummary": "$20 / seat-mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the OpenAPI document or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://withhuman.ai/docs", "llmsTxt": "https://withhuman.ai/llms.txt", "openapi": "https://withhuman.ai/openapi.yaml", "capabilities": [ "hitl.approve", "hitl.channels", "hitl.audit" ], "tags": [ "hosted", "freemium", "free-tier", "mcp", "oauth", "openapi", "llms-txt", "webhooks", "enterprise", "early-access" ], "lastRelease": "2026-10-08", "graded": true, "anchor": { "graded": true, "score": 52.1, "grade": "D", "agentReady": false, "rank": 906, "ranked": true, "rankOf": 1253, "categoryRank": 9, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 49, "payments": 30, "reliability": 16, "schema": 81, "security": 73, "transparency": 56 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -2, "negativeNotes": [ "8 October 2026. The home page and pricing page describe an open-source, self-hostable edition and link https://github.com/withHumanAI/withHuman, which returned 404. The withHumanAI organisation listed no public repositories and the protocol repository https://github.com/agentapprovalprotocol/agentapprovalprotocol also returned 404. Counted as a claim the public cannot verify today (-2). Sources https://withhuman.ai/pricing and https://github.com/withHumanAI" ], "verdict": "The approval API is small and carefully specified, with a public OpenAPI 3.1 document, mandatory idempotency keys and agent credentials that can never approve. The service is in early access under its own terms, with no status page, published rate limits or changelog, and the open-source repository the site links to returned 404 on 8 October 2026.", "bestFor": "Teams that want tool calls from coding agents or their own agents held for approval by rules, with escalation and an audit log, and no review UI to build.", "strengths": [ "Public OpenAPI 3.1 document with 116 operations and 148 schemas, plus llms.txt and a Markdown copy of every docs page", "`Idempotency-Key` is required on request creation, instance creation and decisions, and a reused key with changed input answers 409", "An agent credential can only create requests and wait for decisions. Approving or denying needs a signed-in person or a personal key", "The MCP server signs in with OAuth, PKCE and dynamic client registration, across 35 scopes, with access lasting 90 days or until revoked", "Free hosted plan at $0 for up to 5 members with unlimited agents and approval requests, per the pricing page" ], "weaknesses": [ "The terms say the service is in early access, and the API document is version 0.1.0", "No status page, published request rate limits, SLA outside an enterprise contract, or changelog found", "The GitHub repository the site links as its open-source edition returned 404 on 8 October 2026, and the organisation lists no public repositories", "No SDK found on npm or PyPI. Integration is the HTTP API, the CLI hooks or the MCP gateway", "The site footer says SOC 2 Type II with no report, auditor or trust page, and neither host serves a security.txt" ], "agentNotes": [ "Send an `Idempotency-Key` header on `POST /api/aap/v1/requests`. The call answers 400 without one", "Read the decision with `GET /api/aap/v1/requests/{id}?wait=30s` and repeat while `status` is `pending`. `wait` is capped at 30 seconds", "Set `timeout` between one second and seven days, and treat `expired` and `cancelled` as a refusal", "Start an approved call within five minutes of `decided_at`, because the decision carries an `expires_at`", "Cancel a request when you stop waiting, so reviewers stop seeing it" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 52.1 } ], "editorialScores": { "ergonomics": 74, "maintenance": 49, "payments": 30, "reliability": 16, "schema": 81, "security": 73, "transparency": 52 }, "provenanceScore": 59, "checked": { "categories": { "ergonomics": "2026-10-08", "maintenance": "2026-10-08", "payments": "2026-10-08", "reliability": "2026-10-08", "schema": "2026-10-08", "security": "2026-10-08", "transparency": "2026-10-08" }, "last": "2026-10-08", "lastMoved": "2026-10-27", "oldest": "2026-10-08", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "curl -fsSL https://downloads.withhuman.ai/install.sh | sh -s -- onboard", "http": "curl -X POST \"https://app.withhuman.ai/api/aap/v1/requests\" \\\n -H \"Authorization: Bearer $WITHHUMAN_TOKEN\" \\\n -H \"Idempotency-Key: 4f1c9a2e-7b3d-4e8f-a1c5-2d6b8e0f9a31\" \\\n -H \"Content-Type: application/json\" \\\n -d '{ \"tool\": \"Bash\", \"arguments\": { \"command\": \"rm -rf build\" }, \"timeout\": \"30m\" }'", "claudeCode": "claude mcp add --transport http --scope user withhuman https://app.withhuman.ai/api/mcp/v1", "config": { "mcpServers": { "withhuman": { "url": "https://app.withhuman.ai/api/mcp/v1" } } } }, "letme": { "capability": "https://letme.dev/hitl.approve", "tool": "https://letme.dev/withhuman" }, "area": "agent-runtime", "unitPrices": [ { "item": "Scale plan", "unit": "seat-month", "usd": 20, "note": "Free plan covers up to 5 members" } ], "provenance": { "legalEntity": "Metoro Inc", "domain": "withhuman.ai", "domainRegistered": "2026-07-13", "endpointOnVendorDomain": true, "terms": "https://withhuman.ai/terms", "privacy": "https://withhuman.ai/privacy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The terms (effective 4 September 2026) are between the user and Metoro Inc, which operates withHuman, and cover the hosted service, the iPhone app and the website. Delaware law governs.", "The privacy policy (effective 4 September 2026) calls Metoro Inc a Delaware corporation and covers approval requests, decisions and audit records as well as the website.", "RDAP for withhuman.ai gives a registration date of 2026-07-13.", "https://withhuman.ai/.well-known/security.txt and https://app.withhuman.ai/.well-known/security.txt both returned 404 on 2026-10-08.", "No status page is linked from the site, the docs or the support page, and status.withhuman.ai did not connect. No changelog was found, and the blog says coming soon.", "The API and the MCP server answer at app.withhuman.ai, and the CLI downloads from downloads.withhuman.ai." ], "score": 59 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/withhuman.json", "live": { "slug": "withhuman", "probe": { "target": "https://app.withhuman.ai", "method": "get", "lastAt": "2026-11-01T22:08:53.951135684Z", "lastOk": true, "lastStatus": 200, "lastMs": 120, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 115, "p95ms24h": 189, "samples24h": 250, "samples30d": 6044, "days": [ { "date": "2026-10-08", "probes": 50, "ok": 50 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 250, "ok": 250 }, { "date": "2026-10-29", "probes": 249, "ok": 249 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 230, "ok": 230 } ] }, "securityTxt": { "url": "https://withhuman.ai/.well-known/security.txt", "state": "valid", "expires": "2027-10-29T17:00:11Z", "checkedAt": "2026-11-01T15:42:09.470920257Z" }, "llmsTxt": { "url": "https://withhuman.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-01T15:15:20.184283312Z" }, "domain": { "domain": "withhuman.ai", "registered": "2026-07-13", "source": "https://rdap.identitydigital.services/rdap/domain/withhuman.ai", "checkedAt": "2026-11-01T14:26:56.209725579Z" }, "pages": [ { "url": "https://withhuman.ai/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-01T06:55:48.971105817Z", "changedAt": "2026-10-30T05:51:38.264133444Z", "fingerprint": "55869bf2897c" }, { "url": "https://withhuman.ai/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-01T06:55:51.314608017Z", "changedAt": "2026-10-30T05:51:40.490484049Z", "fingerprint": "0683b06edfed" }, { "url": "https://withhuman.ai/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-01T06:55:53.187492796Z", "changedAt": "2026-10-30T05:51:42.557543829Z", "fingerprint": "e3b42409498c" } ], "updatedAt": "2026-11-01T22:08:53.951135684Z" } }, "edges": [ { "by": 59, "category": "reliability", "leads": "bigarrow", "name": "Reliability", "reasons": { "a": "Read with the local-software lines, since the owner runs the binary. First commit 8 October 2026. Installs from the author's Homebrew tap, which builds v0.5.1 from the tagged source and since 0.5.1 needs only the Command Line Tools, not Xcode, or as an ad hoc signed universal binary on GitHub Releases, with macOS 14 stated (20). CI runs SwiftLint in strict mode, a release build and `swift test` with the window-server tests switched on. The last 25 runs on main had passed by 15 October 2026, per the 15 October check, not re-read on 1 November because GitHub's pages answered 403 (25). Per the 15 October check, two open issues, a request for Windows and Linux and a note of thanks, and no open bug, with the one outside bug report fixed with a regression test in v0.4.3 the day it arrived. The issue list wasn't re-read on 1 November. The 0.5.1 changelog closes out #70 (the ports) and #71 (the Homebrew formula) (20). Keep a Changelog and semantic version tags, but flags removed or replaced in 0.2.0, 0.3.0 and 0.5.1 (`--raise`, `--shadow`, `--duration` on cards) are listed under Changed, not marked as breaking (10). Version 0.5.1, not 1.0 and not declared stable (0).", "b": "Graded as a hosted service. No status page is linked from the site, the docs or the support page, and status.withhuman.ai did not connect (0), so there is no incident history to read (5). No request rate limits are published. 429 is documented only for the plan's limit on pending requests or active agents, with no numbers in the docs (0). `Idempotency-Key` is required on four write commands with documented replay and conflict behaviour, and the long-poll guide says to call again after a dropped connection, but no Retry-After or backoff guidance was found for 429 (11 of 15). The terms give no uptime guarantee outside an enterprise agreement (0). The terms say the service is in early access and the API document is version 0.1.0 (0)." }, "scores": { "a": 75, "b": 16 } }, { "by": 30, "category": "payments", "leads": "bigarrow", "name": "Payments \u0026 pricing", "reasons": { "a": "No payment protocol (0). Read with the self-hosted rule. Free under MIT with nothing to buy (20). No card or account (20). Installs with one Homebrew command and needs no signup (20).", "b": "No machine payment protocol (0). Public plan prices, Free at $0 for up to 5 members and Scale at $20 per user a month, with no per-request price and unpublished monthly allowances for gateway calls and phone messages (10). The Free plan and trial need no subscription per the billing docs. We did not sign up to confirm that no card is asked for (20). A person signs up in a browser and approves each agent's enrolment. Provisioner tokens then issue instance credentials by API (0)." }, "scores": { "a": 60, "b": 30 } }, { "by": 21, "category": "maintenance", "leads": "bigarrow", "name": "Maintenance \u0026 community", "reasons": { "a": "v0.5.1 on 26 October 2026 (30). Fifteen tagged releases between 8 and 26 October 2026 (20). The Hacker News thread was triaged into ten tickets, closed the same day, and two outside pull requests were declined with reasons in the triage note. Two outside issues opened on 12 and 13 October had no maintainer reply by 15 October, per the 15 October check. On 26 October 0.5.1 linked the ports made by people from #70 and dropped the Xcode requirement after an outside pull request to the tap (#71), but the issue pages couldn't be re-read on 1 November (12 of 25). Not an MCP server and no SDK, and the skill is not in a registry (0). One dependency, current Swift 6 tooling, CI on every push to main. No Dependabot configuration found (8).", "b": "The CLI's `latest` build files were last modified on 8 October 2026, and the sitemap dates docs changes to 6 October (30). No versioned release notes or changelog were found. The sitemap shows docs edits on eight dates between 22 September and 6 October, which we count in part (5 of 20). Closed service with email support said to reply within one working day and a Discord for the protocol. The linked GitHub repositories returned 404 (6 of 15). No official SDK found. The CLI is the only client (5 of 15). CLI builds for four platforms ship with SHA256SUMS, and no public CI was found (3 of 10)." }, "scores": { "a": 70, "b": 49 } }, { "by": 7, "category": "transparency", "leads": "bigarrow", "name": "Transparency \u0026 trust", "reasons": { "a": "MIT in LICENSE and in the Homebrew formula, with the bundled Feather icons' MIT licence in THIRD_PARTY_NOTICES.md (30). No privacy policy. The README says there is no daemon, account or telemetry and that card secrets never reach disk, and the source we read has no network code, which agrees. Sign text, which can hold a value to paste, sits in a per-user temporary file while the arrow is shown, which the README does not mention (15). No deprecation policy. Removed and renamed flags are named in the dated changelog (4). No telemetry to disclose, and the README says so. Nothing is sent, so there is nothing to opt out of (16).", "b": "Closed hosted service with short, clear terms. The site calls the core open source, but the repository it links to returned 404 on 8 October 2026, so no licence could be read (15 of 30). The privacy policy and terms agree on no model training, server logs kept 30 days and records kept for the life of the organisation. The purge after deletion is only 'a short grace period', no DPA was found, and the AI Judge docs name OpenAI model keys while the processor list names no model provider (18 of 30). The terms promise notice of removals and 14 days' email notice of material changes to the terms, with no dated deprecation policy (5 of 20). Eight processors are named with purposes and hosting is stated as Azure UK South, less the missing model provider (14 of 20)." }, "scores": { "a": 63, "b": 56 } }, { "by": 6, "category": "security", "leads": "withhuman", "name": "Security \u0026 auth", "reasons": { "a": "No credential model to grade, since the tool holds no secret of its own and makes no network call, so read with the framework lines as for other local agent tools. 30 for what leaves the machine by default, 20 for least privilege and approvals, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. No network code, telemetry or account found in the source, and the only dependency is swift-argument-parser. A card's link row opens in the browser only when the person clicks it (30). It never clicks, types or captures, drawing needs no permission, and Accessibility is needed only for label targeting. Boxes and rings are outlines, the sign keeps clear of its target, and a click on the sign removes it. Since 0.5.0 a card can put a decision to the person with buttons and return it to the agent, and secrets go on a card from `pass:`, `keychain:`, `op:`, `env:` or `file:`, never the command line, show masked, copy as concealed and leave the clipboard after 30 s, per the README and source. Raising the target app is on by default with `--no-raise` to opt out (18). The skill tells the agent to put on the sign what an approval, payment or deletion does. Element labels read from other apps return as text the agent reads, with no guidance on treating them as untrusted (9). Live arrows are recorded in `$TMPDIR/bigarrow/\u003cpid\u003e.json`, sign text included, while shown, and a card's reply is written there with mode 0600 and no secret values until `wait` reads it. `--json` reports how each ended. No persistent log (6). No SECURITY.md, security.txt, bug bounty or advisories. The main branch is protected against force pushes and deletion, and the release binary is signed ad hoc and not notarised (4).", "b": "Purpose-limited credentials. An agent credential can only create and read its own requests, a provisioner token only manages instances, personal keys can be narrowed and expire after 90 days by default, and the MCP server uses OAuth with PKCE, dynamic client registration and 35 scopes. Choosing specific actions is limited to the hosted paid plans (28 of 30). Agents and organisation keys can never decide a request, sensitive grants need a recent sign-in, and the docs say the required-MFA settings don't yet work with the built-in sign-in methods (16 of 20). Reviewers see agent reasoning as a claim separate from the arguments, `server` is documented as an unverified label, and notifications never carry arguments (11 of 15). Append-only audit log with search by API, and every key's changes recorded under the key, in the hosted edition (13 of 15). The footer says SOC 2 Type II with no report, auditor or trust page. No security.txt (404 on both hosts), disclosure policy or bounty found (5 of 20)." }, "scores": { "a": 67, "b": 73 } } ], "facts": [ { "a": "SDK + MCP", "b": "HTTP API", "name": "Kind" }, { "a": "Franz Enzenhofer", "b": "Metoro Inc", "name": "Vendor" }, { "a": "no (local only)", "b": "https://app.withhuman.ai", "name": "Hosted endpoint" }, { "a": "", "b": "HTTP", "name": "Transports" }, { "a": "None", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Proprietary hosted service under Metoro Inc's terms. The site describes an open-source edition, but the repository it links to returned 404 on 8 October 2026", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-26", "b": "2026-10-08", "name": "Last release" }, { "a": "no document linked", "b": "2026-09-04", "name": "Terms last updated" }, { "a": "no document linked", "b": "2026-09-04", "name": "Privacy policy last updated" }, { "a": "not read yet", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not read yet", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "747 stars", "b": "none", "name": "Popularity" }, { "a": "3.3/5 (4)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Big Arrow scores 71.1 (BB) on agent readiness against withHuman's 52.1 (D), and leads in 5 of 7 scored categories. withHuman leads on security \u0026 auth.", "question": "Which is better for AI agents, Big Arrow or withHuman?" }, { "answer": "No hosted endpoint is listed for Big Arrow. withHuman has a hosted endpoint at https://app.withhuman.ai.", "question": "Can an agent call Big Arrow and withHuman without installing anything?" }, { "answer": "Big Arrow is open source (MIT). No open-source release is listed for withHuman.", "question": "Are Big Arrow and withHuman open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 75 against 16", "Payments \u0026 pricing, 60 against 30", "Maintenance \u0026 community, 70 against 49", "Transparency \u0026 trust, 63 against 56" ], "also": [ "Agent-ready, a grade of BB or better", "No key needed to call it", "Free to start without a card", "Open source" ], "goodFor": "An agent on a person's Mac that reaches a step only the person may do, such as a permission prompt, 2FA code or payment, and needs to show where or hand over values and get a yes or no.", "slug": "bigarrow", "watchFor": "First commit 8 October 2026 and version 0.5.1, with flags removed or renamed between minor versions" }, { "aheadOn": [ "Security \u0026 auth, 73 against 67" ], "also": [ "A hosted endpoint, with nothing to install" ], "goodFor": "Teams that want tool calls from coding agents or their own agents held for approval by rules, with escalation and an audit log, and no review UI to build.", "slug": "withhuman", "watchFor": "The terms say the service is in early access, and the API document is version 0.1.0" } ], "history": { "bigarrow": [ { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.4, "from": 70.7, "fromGrade": "BB", "to": 71.1, "toGrade": "BB" } ], "withhuman": [ { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.3, "from": 51.8, "fromGrade": "D", "to": 52.1, "toGrade": "D" } ] }, "job": { "capability": "hitl.approve", "name": "Human approval" }, "others": [ { "json": "https://www.anchorterminal.com/compare/bigarrow-vs-gotohuman.json", "title": "Big Arrow vs gotoHuman", "url": "https://www.anchorterminal.com/compare/bigarrow-vs-gotohuman" }, { "json": "https://www.anchorterminal.com/compare/bigarrow-vs-hatchet.json", "title": "Big Arrow vs Hatchet", "url": "https://www.anchorterminal.com/compare/bigarrow-vs-hatchet" }, { "json": "https://www.anchorterminal.com/compare/bigarrow-vs-inngest.json", "title": "Big Arrow vs Inngest", "url": "https://www.anchorterminal.com/compare/bigarrow-vs-inngest" }, { "json": "https://www.anchorterminal.com/compare/bigarrow-vs-permit-mcp-gateway.json", "title": "Big Arrow vs Permit MCP Gateway", "url": "https://www.anchorterminal.com/compare/bigarrow-vs-permit-mcp-gateway" }, { "json": "https://www.anchorterminal.com/compare/bigarrow-vs-pushary.json", "title": "Big Arrow vs Pushary", "url": "https://www.anchorterminal.com/compare/bigarrow-vs-pushary" }, { "json": "https://www.anchorterminal.com/compare/bigarrow-vs-restate.json", "title": "Big Arrow vs Restate", "url": "https://www.anchorterminal.com/compare/bigarrow-vs-restate" }, { "json": "https://www.anchorterminal.com/compare/bigarrow-vs-temporal.json", "title": "Big Arrow vs Temporal", "url": "https://www.anchorterminal.com/compare/bigarrow-vs-temporal" }, { "json": "https://www.anchorterminal.com/compare/bigarrow-vs-trigger-dev.json", "title": "Big Arrow vs Trigger.dev", "url": "https://www.anchorterminal.com/compare/bigarrow-vs-trigger-dev" }, { "json": "https://www.anchorterminal.com/compare/gotohuman-vs-withhuman.json", "title": "gotoHuman vs withHuman", "url": "https://www.anchorterminal.com/compare/gotohuman-vs-withhuman" }, { "json": "https://www.anchorterminal.com/compare/hatchet-vs-withhuman.json", "title": "Hatchet vs withHuman", "url": "https://www.anchorterminal.com/compare/hatchet-vs-withhuman" }, { "json": "https://www.anchorterminal.com/compare/inngest-vs-withhuman.json", "title": "Inngest vs withHuman", "url": "https://www.anchorterminal.com/compare/inngest-vs-withhuman" }, { "json": "https://www.anchorterminal.com/compare/orkes-conductor-vs-withhuman.json", "title": "Orkes Conductor Human tasks vs withHuman", "url": "https://www.anchorterminal.com/compare/orkes-conductor-vs-withhuman" }, { "json": "https://www.anchorterminal.com/compare/permit-mcp-gateway-vs-withhuman.json", "title": "Permit MCP Gateway vs withHuman", "url": "https://www.anchorterminal.com/compare/permit-mcp-gateway-vs-withhuman" }, { "json": "https://www.anchorterminal.com/compare/pushary-vs-withhuman.json", "title": "Pushary vs withHuman", "url": "https://www.anchorterminal.com/compare/pushary-vs-withhuman" }, { "json": "https://www.anchorterminal.com/compare/restate-vs-withhuman.json", "title": "Restate vs withHuman", "url": "https://www.anchorterminal.com/compare/restate-vs-withhuman" }, { "json": "https://www.anchorterminal.com/compare/temporal-vs-withhuman.json", "title": "Temporal vs withHuman", "url": "https://www.anchorterminal.com/compare/temporal-vs-withhuman" }, { "json": "https://www.anchorterminal.com/compare/trigger-dev-vs-withhuman.json", "title": "Trigger.dev vs withHuman", "url": "https://www.anchorterminal.com/compare/trigger-dev-vs-withhuman" }, { "json": "https://www.anchorterminal.com/compare/bigarrow-vs-orkes-conductor.json", "title": "Big Arrow vs Orkes Conductor Human tasks", "url": "https://www.anchorterminal.com/compare/bigarrow-vs-orkes-conductor" } ], "panel": null, "scores": [ { "bigarrow": 75, "by": 59, "edge": "bigarrow", "key": "reliability", "name": "Reliability", "weight": 16, "withhuman": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "bigarrow": 78, "by": 3, "edge": "withhuman", "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "withhuman": 81 }, { "bigarrow": 77, "by": 3, "edge": "bigarrow", "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "withhuman": 74 }, { "bigarrow": 67, "by": 6, "edge": "withhuman", "key": "security", "name": "Security \u0026 auth", "weight": 14, "withhuman": 73 }, { "bigarrow": 60, "by": 30, "edge": "bigarrow", "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "withhuman": 30 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "bigarrow": 70, "by": 21, "edge": "bigarrow", "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "withhuman": 49 }, { "bigarrow": 63, "by": 7, "edge": "bigarrow", "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "withhuman": 56 } ], "summary": "Big Arrow scores 71.1 (BB) on agent readiness against withHuman's 52.1 (D), and leads in 5 of 7 scored categories. withHuman leads on security \u0026 auth. Both do human approval.", "tasks": null, "tutorials": [], "verdicts": { "bigarrow": "An agent can show a person which control to click, with a labelled arrow that needs no permission to draw and removes itself, and since 0.5.0 can collect an answer on a cue card. The tool is under a month old at version 0.5.1, runs only on macOS, and has no security policy.", "withhuman": "The approval API is small and carefully specified, with a public OpenAPI 3.1 document, mandatory idempotency keys and agent credentials that can never approve. The service is in early access under its own terms, with no status page, published rate limits or changelog, and the open-source repository the site links to returned 404 on 8 October 2026." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/bigarrow-vs-withhuman", "json": "https://www.anchorterminal.com/compare/bigarrow-vs-withhuman.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/bigarrow-vs-withhuman.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/bigarrow-vs-withhuman.min.md" }, "markdown": "Big Arrow scores 71.1 (BB) on agent readiness against withHuman's 52.1 (D), and leads in 5 of 7 scored categories. withHuman leads on security \u0026 auth. Both do human approval.\n\n- Big Arrow: grade BB, 71.1/100, rank #146 of 1253. Markdown https://www.anchorterminal.com/tools/bigarrow.md · JSON https://www.anchorterminal.com/api/v1/tools/bigarrow.json\n- withHuman: grade D, 52.1/100, rank #906 of 1253. Markdown https://www.anchorterminal.com/tools/withhuman.md · JSON https://www.anchorterminal.com/api/v1/tools/withhuman.json\n- Best human approval and handoff for AI agents: https://www.anchorterminal.com/best/human-in-the-loop/index.md\n- All 55 human approval comparisons: https://www.anchorterminal.com/compare/human-in-the-loop/index.md\n\n## Which one, for what\n\n### Big Arrow (BB)\n\nGood for: An agent on a person's Mac that reaches a step only the person may do, such as a permission prompt, 2FA code or payment, and needs to show where or hand over values and get a yes or no.\n\nAhead on:\n- Reliability, 75 against 16\n- Payments \u0026 pricing, 60 against 30\n- Maintenance \u0026 community, 70 against 49\n- Transparency \u0026 trust, 63 against 56\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- No key needed to call it\n- Free to start without a card\n- Open source\n\nWatch for: First commit 8 October 2026 and version 0.5.1, with flags removed or renamed between minor versions\n\n### withHuman (D)\n\nGood for: Teams that want tool calls from coding agents or their own agents held for approval by rules, with escalation and an audit log, and no review UI to build.\n\nAhead on:\n- Security \u0026 auth, 73 against 67\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n\nWatch for: The terms say the service is in early access, and the API document is version 0.1.0\n\n\n## Why the edge\n\n### Reliability: Big Arrow +59\n\n- Big Arrow (75): Read with the local-software lines, since the owner runs the binary. First commit 8 October 2026. Installs from the author's Homebrew tap, which builds v0.5.1 from the tagged source and since 0.5.1 needs only the Command Line Tools, not Xcode, or as an ad hoc signed universal binary on GitHub Releases, with macOS 14 stated (20). CI runs SwiftLint in strict mode, a release build and `swift test` with the window-server tests switched on. The last 25 runs on main had passed by 15 October 2026, per the 15 October check, not re-read on 1 November because GitHub's pages answered 403 (25). Per the 15 October check, two open issues, a request for Windows and Linux and a note of thanks, and no open bug, with the one outside bug report fixed with a regression test in v0.4.3 the day it arrived. The issue list wasn't re-read on 1 November. The 0.5.1 changelog closes out #70 (the ports) and #71 (the Homebrew formula) (20). Keep a Changelog and semantic version tags, but flags removed or replaced in 0.2.0, 0.3.0 and 0.5.1 (`--raise`, `--shadow`, `--duration` on cards) are listed under Changed, not marked as breaking (10). Version 0.5.1, not 1.0 and not declared stable (0).\n- withHuman (16): Graded as a hosted service. No status page is linked from the site, the docs or the support page, and status.withhuman.ai did not connect (0), so there is no incident history to read (5). No request rate limits are published. 429 is documented only for the plan's limit on pending requests or active agents, with no numbers in the docs (0). `Idempotency-Key` is required on four write commands with documented replay and conflict behaviour, and the long-poll guide says to call again after a dropped connection, but no Retry-After or backoff guidance was found for 429 (11 of 15). The terms give no uptime guarantee outside an enterprise agreement (0). The terms say the service is in early access and the API document is version 0.1.0 (0).\n\n### Payments \u0026 pricing: Big Arrow +30\n\n- Big Arrow (60): No payment protocol (0). Read with the self-hosted rule. Free under MIT with nothing to buy (20). No card or account (20). Installs with one Homebrew command and needs no signup (20).\n- withHuman (30): No machine payment protocol (0). Public plan prices, Free at $0 for up to 5 members and Scale at $20 per user a month, with no per-request price and unpublished monthly allowances for gateway calls and phone messages (10). The Free plan and trial need no subscription per the billing docs. We did not sign up to confirm that no card is asked for (20). A person signs up in a browser and approves each agent's enrolment. Provisioner tokens then issue instance credentials by API (0).\n\n### Maintenance \u0026 community: Big Arrow +21\n\n- Big Arrow (70): v0.5.1 on 26 October 2026 (30). Fifteen tagged releases between 8 and 26 October 2026 (20). The Hacker News thread was triaged into ten tickets, closed the same day, and two outside pull requests were declined with reasons in the triage note. Two outside issues opened on 12 and 13 October had no maintainer reply by 15 October, per the 15 October check. On 26 October 0.5.1 linked the ports made by people from #70 and dropped the Xcode requirement after an outside pull request to the tap (#71), but the issue pages couldn't be re-read on 1 November (12 of 25). Not an MCP server and no SDK, and the skill is not in a registry (0). One dependency, current Swift 6 tooling, CI on every push to main. No Dependabot configuration found (8).\n- withHuman (49): The CLI's `latest` build files were last modified on 8 October 2026, and the sitemap dates docs changes to 6 October (30). No versioned release notes or changelog were found. The sitemap shows docs edits on eight dates between 22 September and 6 October, which we count in part (5 of 20). Closed service with email support said to reply within one working day and a Discord for the protocol. The linked GitHub repositories returned 404 (6 of 15). No official SDK found. The CLI is the only client (5 of 15). CLI builds for four platforms ship with SHA256SUMS, and no public CI was found (3 of 10).\n\n### Transparency \u0026 trust: Big Arrow +7\n\n- Big Arrow (63): MIT in LICENSE and in the Homebrew formula, with the bundled Feather icons' MIT licence in THIRD_PARTY_NOTICES.md (30). No privacy policy. The README says there is no daemon, account or telemetry and that card secrets never reach disk, and the source we read has no network code, which agrees. Sign text, which can hold a value to paste, sits in a per-user temporary file while the arrow is shown, which the README does not mention (15). No deprecation policy. Removed and renamed flags are named in the dated changelog (4). No telemetry to disclose, and the README says so. Nothing is sent, so there is nothing to opt out of (16).\n- withHuman (56): Closed hosted service with short, clear terms. The site calls the core open source, but the repository it links to returned 404 on 8 October 2026, so no licence could be read (15 of 30). The privacy policy and terms agree on no model training, server logs kept 30 days and records kept for the life of the organisation. The purge after deletion is only 'a short grace period', no DPA was found, and the AI Judge docs name OpenAI model keys while the processor list names no model provider (18 of 30). The terms promise notice of removals and 14 days' email notice of material changes to the terms, with no dated deprecation policy (5 of 20). Eight processors are named with purposes and hosting is stated as Azure UK South, less the missing model provider (14 of 20).\n\n### Security \u0026 auth: withHuman +6\n\n- Big Arrow (67): No credential model to grade, since the tool holds no secret of its own and makes no network call, so read with the framework lines as for other local agent tools. 30 for what leaves the machine by default, 20 for least privilege and approvals, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. No network code, telemetry or account found in the source, and the only dependency is swift-argument-parser. A card's link row opens in the browser only when the person clicks it (30). It never clicks, types or captures, drawing needs no permission, and Accessibility is needed only for label targeting. Boxes and rings are outlines, the sign keeps clear of its target, and a click on the sign removes it. Since 0.5.0 a card can put a decision to the person with buttons and return it to the agent, and secrets go on a card from `pass:`, `keychain:`, `op:`, `env:` or `file:`, never the command line, show masked, copy as concealed and leave the clipboard after 30 s, per the README and source. Raising the target app is on by default with `--no-raise` to opt out (18). The skill tells the agent to put on the sign what an approval, payment or deletion does. Element labels read from other apps return as text the agent reads, with no guidance on treating them as untrusted (9). Live arrows are recorded in `$TMPDIR/bigarrow/\u003cpid\u003e.json`, sign text included, while shown, and a card's reply is written there with mode 0600 and no secret values until `wait` reads it. `--json` reports how each ended. No persistent log (6). No SECURITY.md, security.txt, bug bounty or advisories. The main branch is protected against force pushes and deletion, and the release binary is signed ad hoc and not notarised (4).\n- withHuman (73): Purpose-limited credentials. An agent credential can only create and read its own requests, a provisioner token only manages instances, personal keys can be narrowed and expire after 90 days by default, and the MCP server uses OAuth with PKCE, dynamic client registration and 35 scopes. Choosing specific actions is limited to the hosted paid plans (28 of 30). Agents and organisation keys can never decide a request, sensitive grants need a recent sign-in, and the docs say the required-MFA settings don't yet work with the built-in sign-in methods (16 of 20). Reviewers see agent reasoning as a claim separate from the arguments, `server` is documented as an unverified label, and notifications never carry arguments (11 of 15). Append-only audit log with search by API, and every key's changes recorded under the key, in the hosted edition (13 of 15). The footer says SOC 2 Type II with no report, auditor or trust page. No security.txt (404 on both hosts), disclosure policy or bounty found (5 of 20).\n\n## Score by category\n\n| Category | Weight | Big Arrow | withHuman | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 75 | 16 | Big Arrow +59 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 78 | 81 | withHuman +3 |\n| Agent ergonomics | 13% (16.2 this run) | 77 | 74 | Big Arrow +3 |\n| Security \u0026 auth | 14% (17.5 this run) | 67 | 73 | withHuman +6 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 30 | Big Arrow +30 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 70 | 49 | Big Arrow +21 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 63 | 56 | Big Arrow +7 |\n| Negative events | ≤15 | 0 | -2 | |\n| **Total** | | **71.1 · BB** | **52.1 · D** | |\n\n## Facts side by side\n\n| Fact | Big Arrow | withHuman |\n| --- | --- | --- |\n| Kind | SDK + MCP | HTTP API |\n| Vendor | Franz Enzenhofer | Metoro Inc |\n| Hosted endpoint | no (local only) | `https://app.withhuman.ai` |\n| Transports | | HTTP |\n| Auth | None | OAuth or key |\n| Pricing | Free | Freemium |\n| x402 | no | no |\n| Licence | MIT | Proprietary hosted service under Metoro Inc's terms. The site describes an open-source edition, but the repository it links to returned 404 on 8 October 2026 |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| Last release | 2026-10-26 | 2026-10-08 |\n| Terms last updated | no document linked | 2026-09-04 |\n| Privacy policy last updated | no document linked | 2026-09-04 |\n| Customer content may train models | not read yet | not found in the text |\n| Terms restrict automated access | not read yet | not found in the text |\n| Terms restrict benchmarking | not read yet | not found in the text |\n| Terms or service can change without notice | not read yet | not found in the text |\n| Arbitration or class-action waiver | not read yet | not found in the text |\n| Popularity | 747 stars | none |\n| Agent reviews | 3.3/5 (4) | none |\n\n## How the scores have moved\n\n### Big Arrow\n\n- +0.4 on 27 October 2026: checklist\n\n### withHuman\n\n- +0.3 on 27 October 2026: checklist\n\n## Verdicts\n\n**Big Arrow.** An agent can show a person which control to click, with a labelled arrow that needs no permission to draw and removes itself, and since 0.5.0 can collect an answer on a cue card. The tool is under a month old at version 0.5.1, runs only on macOS, and has no security policy.\n\n**withHuman.** The approval API is small and carefully specified, with a public OpenAPI 3.1 document, mandatory idempotency keys and agent credentials that can never approve. The service is in early access under its own terms, with no status page, published rate limits or changelog, and the open-source repository the site links to returned 404 on 8 October 2026.\n\n## Before you call either\n\n### Big Arrow\n\n1. Open the exact System Settings pane or URL first, then point at the one control left for the person\n2. Write the sign as a full sentence that names the action and, for approvals or payments, what the click does\n3. Pass secrets to `bigarrow card` as `--secret Label=keychain:service/account` or another source, never as a literal value\n4. After `bigarrow card`, run `bigarrow wait`. Exit 1 means the person closed the card without answering, so ask in the terminal\n5. On exit 4, run `bigarrow doctor` and ask the person to grant Accessibility to the app running your shell, not to bigarrow\n\n### withHuman\n\n1. Send an `Idempotency-Key` header on `POST /api/aap/v1/requests`. The call answers 400 without one\n2. Read the decision with `GET /api/aap/v1/requests/{id}?wait=30s` and repeat while `status` is `pending`. `wait` is capped at 30 seconds\n3. Set `timeout` between one second and seven days, and treat `expired` and `cancelled` as a refusal\n4. Start an approved call within five minutes of `decided_at`, because the decision carries an `expires_at`\n5. Cancel a request when you stop waiting, so reviewers stop seeing it\n\n## Questions\n\n### Which is better for AI agents, Big Arrow or withHuman?\n\nBig Arrow scores 71.1 (BB) on agent readiness against withHuman's 52.1 (D), and leads in 5 of 7 scored categories. withHuman leads on security \u0026 auth.\n\n### Can an agent call Big Arrow and withHuman without installing anything?\n\nNo hosted endpoint is listed for Big Arrow. withHuman has a hosted endpoint at https://app.withhuman.ai.\n\n### Are Big Arrow and withHuman open source?\n\nBig Arrow is open source (MIT). No open-source release is listed for withHuman.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/bigarrow-vs-withhuman.json, and with the fewest tokens: https://www.anchorterminal.com/compare/bigarrow-vs-withhuman.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"bigarrow\", \"b\": \"withhuman\"}`. From a terminal: `anchor compare bigarrow withhuman`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/bigarrow.json and https://www.anchorterminal.com/api/v1/tools/withhuman.json\n\n## Other comparisons with Big Arrow or withHuman\n\n- [Big Arrow vs gotoHuman](https://www.anchorterminal.com/compare/bigarrow-vs-gotohuman.md)\n- [Big Arrow vs Hatchet](https://www.anchorterminal.com/compare/bigarrow-vs-hatchet.md)\n- [Big Arrow vs Inngest](https://www.anchorterminal.com/compare/bigarrow-vs-inngest.md)\n- [Big Arrow vs Permit MCP Gateway](https://www.anchorterminal.com/compare/bigarrow-vs-permit-mcp-gateway.md)\n- [Big Arrow vs Pushary](https://www.anchorterminal.com/compare/bigarrow-vs-pushary.md)\n- [Big Arrow vs Restate](https://www.anchorterminal.com/compare/bigarrow-vs-restate.md)\n- [Big Arrow vs Temporal](https://www.anchorterminal.com/compare/bigarrow-vs-temporal.md)\n- [Big Arrow vs Trigger.dev](https://www.anchorterminal.com/compare/bigarrow-vs-trigger-dev.md)\n- [gotoHuman vs withHuman](https://www.anchorterminal.com/compare/gotohuman-vs-withhuman.md)\n- [Hatchet vs withHuman](https://www.anchorterminal.com/compare/hatchet-vs-withhuman.md)\n- [Inngest vs withHuman](https://www.anchorterminal.com/compare/inngest-vs-withhuman.md)\n- [Orkes Conductor Human tasks vs withHuman](https://www.anchorterminal.com/compare/orkes-conductor-vs-withhuman.md)\n- [Permit MCP Gateway vs withHuman](https://www.anchorterminal.com/compare/permit-mcp-gateway-vs-withhuman.md)\n- [Pushary vs withHuman](https://www.anchorterminal.com/compare/pushary-vs-withhuman.md)\n- [Restate vs withHuman](https://www.anchorterminal.com/compare/restate-vs-withhuman.md)\n- [Temporal vs withHuman](https://www.anchorterminal.com/compare/temporal-vs-withhuman.md)\n- [Trigger.dev vs withHuman](https://www.anchorterminal.com/compare/trigger-dev-vs-withhuman.md)\n- [Big Arrow vs Orkes Conductor Human tasks](https://www.anchorterminal.com/compare/bigarrow-vs-orkes-conductor.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-01", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Big Arrow vs withHuman", "url": "" } ], "description": "Big Arrow scores 71.1 (BB) to withHuman's 52.1 (D) for human approval. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Big Arrow BB 71.1", "withHuman D 52.1", "scores" ], "h1": "Big Arrow vs withHuman", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/bigarrow-vs-withhuman", "published": "2026-10-01", "section": "tools", "title": "Big Arrow vs withHuman for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-01", "url": "https://www.anchorterminal.com/compare/bigarrow-vs-withhuman" }, "tokens": { "markdown": 4450, "slim": 2880 }, "version": 1 }