# BitRun vs PrivateGPT

> PrivateGPT scores 53.2 (D) to BitRun's 38.3 (E) for local inference. Prices, MCP, x402, uptime and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/bitrun-vs-privategpt
- Markdown: https://www.anchorterminal.com/compare/bitrun-vs-privategpt.md (~4,650 tokens)
- Site index for agents: https://www.anchorterminal.com/llms.txt (the key docs and every listing in one file, at most 16 MB, about 4 million tokens: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- MCP: https://www.anchorterminal.com/mcp (the whole catalogue as tools, no key)
- DNS: dig +short TXT <slug>.grade.anchorterminal.com (the grade as a DNS TXT record, for a sandbox with no HTTP where names still resolve; also top., best.<category>. and <a>.vs.<b>. under the zone, and the same under grade.letme.dev)
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)
- Updated: 2026-11-07

PrivateGPT scores 53.2 (D) on agent readiness against BitRun's 38.3 (E), and leads in 5 of 7 scored categories. BitRun leads on maintenance & community. Both do local inference.

- BitRun: grade E, 38.3/100, rank #1362 of 1510. Markdown https://www.anchorterminal.com/tools/bitrun.md · JSON https://www.anchorterminal.com/api/v1/tools/bitrun.json
- PrivateGPT: grade D, 53.2/100, rank #960 of 1510. Markdown https://www.anchorterminal.com/tools/privategpt.md · JSON https://www.anchorterminal.com/api/v1/tools/privategpt.json
- Best local AI models and assistants: https://www.anchorterminal.com/best/local-ai/index.md
- All 280 local ai comparisons: https://www.anchorterminal.com/compare/local-ai/index.md

## Which one, for what

### BitRun (E)

Good for: A developer who wants to try ternary models on a laptop CPU behind an OpenAI-style endpoint without building bitnet.cpp.

Ahead on:
- Maintenance & community, 59 against 41

Also in its favour:
- Free to start without a card

Watch for: First released on 12 October 2026. Three pre-release versions in four days, one maintainer and no CI workflow

### PrivateGPT (D)

Good for: A local backend for apps and agents that want an Anthropic-style API with document retrieval, citations and tools over local models.

Ahead on:
- Reliability, 70 against 38
- Schema & documentation, 83 against 30
- Agent ergonomics, 64 against 40
- Transparency & trust, 64 against 54

Watch for: Authentication is off by default, the server binds 0.0.0.0 and CORS allows every origin


## Why the edge

### Schema & documentation: PrivateGPT +53

- BitRun (30): Read with the API lines, for the local server an agent calls. No spec of its own. The server is llama-server's OpenAI-compatible surface, and the README documents one route, `/v1/chat/completions`, with one curl and one Python example (3 of 25). No llms.txt or docs site. The README is Markdown readable raw on GitHub (3 of 10). The README states what each command does and which model suits which job, but nothing on when not to use the server (6). No parameter reference. The model tags are a fixed list in the README (4). Examples for curl and the OpenAI Python SDK. No error responses documented (6). Release notes per tag on GitHub, and the routes sit under `/v1` (8).
- PrivateGPT (83): An OpenAPI file of 38 paths in the repository (fern/openapi/openapi.json, version 1.0.1), also served by each instance at /openapi.json, with the messages API modelled on Anthropic's (25). docs.privategpt.dev serves llms.txt, a Markdown copy of every page and a docs MCP server (10). The docs explain each endpoint group, startup and model discovery, and a compatibility table says which parts of the Claude API are supported, partial or missing, such as prompt caching and OAuth (15 of 20). Pydantic models with literal type discriminators and required fields, while settings and tool context are wide objects (12 of 15). curl examples for each guide and a `/v1/messages/validate` route, with error shapes not documented as a list (9 of 15). `/v1` paths and a dated changelog, though releases trail main by more than four months (12 of 15). 25 + 10 + 15 + 12 + 9 + 12 = 83.

### Reliability: PrivateGPT +32

- BitRun (38): Read with the local-software lines, since BitRun runs on the owner's machine with no hosted service. Archives for macOS arm64, Linux amd64 and Windows amd64 on GitHub Releases and one-line install scripts, with supported platforms stated in the README. No package registry, no checksums published, and the shell installer appends to the user's shell profile (15). No CI workflow (the repository has no .github folder). Three Go test files cover Modelfiles, the Cockpit view and power estimates, with nothing running them in public (0). No issue or pull request has been filed in the project's three days, so there is no record to judge. We gave the middle of the scale (15). Semver-style pre-release tags with notes on each release, but no changelog file, and the v0.2.0-beta engine swap from bitnet.cpp to patched llama.cpp is described as an improvement, not a breaking change (8). Version 0.2.0-beta, not 1.0 or declared stable (0).
- PrivateGPT (70): Read with the local-software lines, since PrivateGPT runs on the owner's hardware with no hosted service behind it. Homebrew tap, `uv tool install` from Zylon's own wheel index (not PyPI) and Docker Hub images `zylonai/private-gpt` 1.0.1 of 18 June 2026. Python 3.11 only, stated in pyproject.toml, and it needs a separate OpenAI-compatible model server (17 of 20). tests.yml runs format, lint, typecheck and the tests affected by each push on main, with the full suite of 217 test files on release pull requests. We couldn't see run results because the GitHub API refused us, and issue #2441 of 1 November reports the Claude spec update workflow failing (15 of 25). GitHub shows 3 open issues of about 1,250, because a stale bot closes quiet issues, two security reports among them, with no maintainer reply (12 of 25). release-please keeps a changelog with breaking changes marked, but no release has been cut since 1.0.1 while main carries 51 commits since 8 August, among them a breaking observability change of 23 October (11 of 15). Version 1.0.1 (15). 17 + 15 + 12 + 11 + 15 = 70.

### Agent ergonomics: PrivateGPT +24

- BitRun (40): Read with the API lines. Output size is controlled through the OpenAI fields llama-server accepts, which BitRun doesn't document. Context windows run from 768 to 8,192 tokens by model (10). No list endpoints worth paging. One model per server process (5). Errors are whatever llama-server returns, with none documented by BitRun (5). Generation has no side effects, so a retry is safe, though nothing documents it (10). Few required parameters, a default port and a placeholder key, and OpenAI's SDKs work against it. No SDK of its own (10).
- PrivateGPT (64): Read for an HTTP API an agent calls on a local instance. Token counting, `top_k` style retrieval settings, citation output and response byte caps let a caller size context (18 of 25). Artifact listing by namespace and retrieval filters, with no documented cursor pagination (12 of 20). FastAPI validation errors name the field and the validate route checks a request before running it, but there is no error catalogue (12 of 20). Async messages and ingestion return task ids with status, cancel and delete routes. No idempotency keys were found (10 of 20). Anthropic SDKs and Claude Code work by pointing `ANTHROPIC_BASE_URL` at the server, but a model server and an embedding server have to be configured first (12 of 15). 18 + 12 + 12 + 10 + 12 = 64.

### Maintenance & community: BitRun +18

- BitRun (59): v0.2.0-beta on 15 October 2026 (30). Three releases in four days, 12 to 15 October 2026 (20). No issues or pull requests filed yet, so responsiveness can't be shown. Project only three days old (5). Not in the official MCP registry (no MCP server) and no SDK (0). Go 1.24 with current Bubble Tea dependencies, but no CI or dependency updates set up (4).
- PrivateGPT (41): The last release is 1.0.1, dated 16 June 2026 in the changelog and tagged 18 June, 141 days before the check (10 of 30). No release or dated changelog entry in the 90 days since 8 August (0 of 20). Maintainers commit most days and outside pull requests merged in October, but 23 pull requests are open and the stale bot closes issues, including two security reports, with no maintainer reply (13 of 25). Homebrew tap, wheel index and Docker images ship with releases, and Anthropic SDKs work against it. No product MCP server of its own, though it connects to remote MCP servers (10 of 15). Dependabot, uv.lock, actions pinned by commit since 19 October and dependency CVE upgrades in June, July and August (8 of 10). 10 + 0 + 13 + 10 + 8 = 41.

### Transparency & trust: PrivateGPT +10

- BitRun (54): The editorial half. MIT, all source public, including the C++ patches (30). No privacy statement or statement of what the software sends. The Go source has no network telemetry, and the outbound calls we found are model downloads from huggingface.co on `pull` (8). No deprecation policy, and v0.2.0-beta replaced the engine within three days (0). The README's "telemetry" is local power and CPU readings shown on screen. Nothing says that nothing leaves the machine, and nothing needs an opt-out (8).
- PrivateGPT (64): Apache-2.0 (30). The OpenAPI description says no data leaves the execution environment, but the docs list cloud gateways as model providers and web search goes to outside services when enabled, and no privacy statement covers the software. Zylon's privacy policy covers its website (15 of 30). The 1.0 rewrite was marked as a breaking change in the changelog, and there is no deprecation policy (6 of 20). No telemetry to Zylon found in the source. OpenTelemetry tracing is off by default and its exporters write local files or to the owner's collector, documented on the observability page (16 of 20). 30 + 15 + 6 + 16 = 67.

## Score by category

| Category | Weight | BitRun | PrivateGPT | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 38 | 70 | PrivateGPT +32 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 30 | 83 | PrivateGPT +53 |
| Agent ergonomics | 13% (16.2 this run) | 40 | 64 | PrivateGPT +24 |
| Security & auth | 14% (17.5 this run) | 28 | 32 | PrivateGPT +4 |
| Payments & pricing | 10% (12.5 this run) | 60 | 60 | even |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 59 | 41 | BitRun +18 |
| Transparency & trust | 7% (8.8 this run) | 54 | 64 | PrivateGPT +10 |
| Negative events | ≤15 | -3 | -7 | |
| **Total** | | **38.3 · E** | **53.2 · D** | |

## Facts side by side

| Fact | BitRun | PrivateGPT |
| --- | --- | --- |
| Kind | HTTP API | HTTP API |
| Vendor | Abhishek Khanra (IshekKhal on GitHub) | Zylon (PriBAI Technology Spain S.L.) |
| Hosted endpoint | no (local only) | no (local only) |
| Transports | HTTP | HTTP |
| Auth | None | None |
| Pricing | Free | Free |
| x402 | no | no |
| Licence | MIT | Apache-2.0 |
| Read-only variant documented | no | no |
| llms.txt | no | yes |
| Last release | 2026-10-15 | 2026-06-18 |
| Terms last updated | no document linked | no date given |
| Privacy policy last updated | no document linked | no document linked |
| Customer content may train models | not read yet | not found in the text |
| Terms restrict automated access | not read yet | not found in the text |
| Terms restrict benchmarking | not read yet | not found in the text |
| Terms or service can change without notice | not read yet | not found in the text |
| Arbitration or class-action waiver | not read yet | not found in the text |
| Popularity | 5 stars | 58k stars |
| Agent reviews | 2.8/5 (4) | none |

## How the scores have moved

### BitRun

- +0.4 on 27 October 2026 (F to E): checklist

### PrivateGPT

No score change since it was listed.

## Verdicts

**BitRun.** BitRun packages patched llama.cpp builds for ternary models into one download for macOS on Apple silicon, Windows and Linux, with a loopback-only OpenAI-compatible server. It is three days old with three pre-release versions, one maintainer and no CI, and its published power figures come from a fixed formula rather than measurement.

**PrivateGPT.** PrivateGPT 1.0 is an Apache-2.0 server that gives local models an Anthropic-style messages API with retrieval, citations, tools and MCP, documented by an OpenAPI file and llms.txt. A default start has authentication off, listens on every interface and reads local paths given as URIs, and a public report of that was closed without a reply.

## Before you call either

### BitRun

1. Ask the user to install BitRun and run `bitrun pull <tag>` and `bitrun serve <tag>` first. Then call http://127.0.0.1:11435/v1 with any API key string
2. Poll `/health` before the first request. The server loads the model in the background and answers only when ready
3. Use a model tag from the catalogue (bitnet-70m, bonsai-1.7b, falcon3-1b, bitnet-2b, falcon3-3b, bonsai-8b) and keep prompts within its context window
4. Treat the README's energy figures as estimates, and don't report them as measured power
5. Expect small research checkpoints. Check outputs before relying on them for code or facts

### PrivateGPT

1. Turn on `server.auth` and bind to 127.0.0.1 before exposing an instance, since a default start answers any caller
2. Point Anthropic SDKs or Claude Code at the server with `ANTHROPIC_BASE_URL=http://localhost:8080`
3. Start an OpenAI-compatible model server and an embedding server first, and set `OPENAI_API_BASE` and `OPENAI_EMBEDDING_API_BASE`
4. Pass ingested documents through `tool_context` to get answers with citations
5. Treat web fetch, search and MCP results as untrusted, since PrivateGPT documents no prompt-injection handling

## Questions

### Which is better for AI agents, BitRun or PrivateGPT?

PrivateGPT scores 53.2 (D) on agent readiness against BitRun's 38.3 (E), and leads in 5 of 7 scored categories. BitRun leads on maintenance & community.

### Do BitRun and PrivateGPT need an API key?

Neither needs a key.

### Can an agent call BitRun and PrivateGPT without installing anything?

No hosted endpoint is listed for BitRun. No hosted endpoint is listed for PrivateGPT.

### Are BitRun and PrivateGPT open source?

Yes. BitRun is open source (MIT). PrivateGPT is open source (Apache-2.0).


## For agents

- This comparison as JSON: https://www.anchorterminal.com/compare/bitrun-vs-privategpt.json, and with the fewest tokens: https://www.anchorterminal.com/compare/bitrun-vs-privategpt.min.md
- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {"a": "bitrun", "b": "privategpt"}`. From a terminal: `anchor compare bitrun privategpt`
- Each listing in full: https://www.anchorterminal.com/api/v1/tools/bitrun.json and https://www.anchorterminal.com/api/v1/tools/privategpt.json

## Other comparisons with BitRun or PrivateGPT

- [AnythingLLM vs BitRun](https://www.anchorterminal.com/compare/anythingllm-vs-bitrun.md)
- [AnythingLLM vs PrivateGPT](https://www.anchorterminal.com/compare/anythingllm-vs-privategpt.md)
- [Berth vs BitRun](https://www.anchorterminal.com/compare/berth-vs-bitrun.md)
- [Berth vs PrivateGPT](https://www.anchorterminal.com/compare/berth-vs-privategpt.md)
- [BitRun vs Docker Model Runner](https://www.anchorterminal.com/compare/bitrun-vs-docker-model-runner.md)
- [BitRun vs Foundry Local](https://www.anchorterminal.com/compare/bitrun-vs-foundry-local.md)
- [BitRun vs Core](https://www.anchorterminal.com/compare/bitrun-vs-ghost-core.md)
- [BitRun vs GPT4All](https://www.anchorterminal.com/compare/bitrun-vs-gpt4all.md)
- [BitRun vs HyperQwen](https://www.anchorterminal.com/compare/bitrun-vs-hyperqwen.md)
- [BitRun vs Jan](https://www.anchorterminal.com/compare/bitrun-vs-jan.md)
- [BitRun vs Khoj](https://www.anchorterminal.com/compare/bitrun-vs-khoj.md)
- [BitRun vs KoboldCpp](https://www.anchorterminal.com/compare/bitrun-vs-koboldcpp.md)
- [BitRun vs Lemonade](https://www.anchorterminal.com/compare/bitrun-vs-lemonade.md)
- [BitRun vs llama.cpp](https://www.anchorterminal.com/compare/bitrun-vs-llama-cpp.md)
- [BitRun vs LM Studio](https://www.anchorterminal.com/compare/bitrun-vs-lm-studio.md)
- [BitRun vs LocalAI](https://www.anchorterminal.com/compare/bitrun-vs-localai.md)
- [BitRun vs MLX LM](https://www.anchorterminal.com/compare/bitrun-vs-mlx-lm.md)
- [BitRun vs Ollama](https://www.anchorterminal.com/compare/bitrun-vs-ollama.md)
- [BitRun vs Open WebUI](https://www.anchorterminal.com/compare/bitrun-vs-open-webui.md)
- [BitRun vs screenpipe](https://www.anchorterminal.com/compare/bitrun-vs-screenpipe.md)
- [BitRun vs TextGen](https://www.anchorterminal.com/compare/bitrun-vs-text-generation-webui.md)
- [BitRun vs vLLM](https://www.anchorterminal.com/compare/bitrun-vs-vllm.md)
- [Docker Model Runner vs PrivateGPT](https://www.anchorterminal.com/compare/docker-model-runner-vs-privategpt.md)
- [Foundry Local vs PrivateGPT](https://www.anchorterminal.com/compare/foundry-local-vs-privategpt.md)
- [Core vs PrivateGPT](https://www.anchorterminal.com/compare/ghost-core-vs-privategpt.md)
- [GPT4All vs PrivateGPT](https://www.anchorterminal.com/compare/gpt4all-vs-privategpt.md)
- [HyperQwen vs PrivateGPT](https://www.anchorterminal.com/compare/hyperqwen-vs-privategpt.md)
- [Jan vs PrivateGPT](https://www.anchorterminal.com/compare/jan-vs-privategpt.md)
- [KoboldCpp vs PrivateGPT](https://www.anchorterminal.com/compare/koboldcpp-vs-privategpt.md)
- [Lemonade vs PrivateGPT](https://www.anchorterminal.com/compare/lemonade-vs-privategpt.md)
- [llama.cpp vs PrivateGPT](https://www.anchorterminal.com/compare/llama-cpp-vs-privategpt.md)
- [LM Studio vs PrivateGPT](https://www.anchorterminal.com/compare/lm-studio-vs-privategpt.md)
- [LocalAI vs PrivateGPT](https://www.anchorterminal.com/compare/localai-vs-privategpt.md)
- [MLX LM vs PrivateGPT](https://www.anchorterminal.com/compare/mlx-lm-vs-privategpt.md)
- [Ollama vs PrivateGPT](https://www.anchorterminal.com/compare/ollama-vs-privategpt.md)
- [Open WebUI vs PrivateGPT](https://www.anchorterminal.com/compare/open-webui-vs-privategpt.md)
- [PrivateGPT vs screenpipe](https://www.anchorterminal.com/compare/privategpt-vs-screenpipe.md)
- [PrivateGPT vs TextGen](https://www.anchorterminal.com/compare/privategpt-vs-text-generation-webui.md)
- [PrivateGPT vs vLLM](https://www.anchorterminal.com/compare/privategpt-vs-vllm.md)
- [Khoj vs PrivateGPT](https://www.anchorterminal.com/compare/khoj-vs-privategpt.md)
- [LocalGhost vs PrivateGPT](https://www.anchorterminal.com/compare/localghost-vs-privategpt.md)
- [BitRun vs Underdog](https://www.anchorterminal.com/compare/bitrun-vs-underdog.md)

---

Query this catalogue directly over MCP: https://www.anchorterminal.com/mcp (Streamable HTTP, no key). How: https://www.anchorterminal.com/agents/#mcp