Head to head · Agent tracing · October 2026 research run

BotGauge vs Laminar API + MCP

Laminar API + MCP scores 56.8 (C) on agent readiness against BotGauge's 40.7 (E), and leads in 5 of 7 scored categories. BotGauge leads on security & auth. Both do agent tracing.

Best agent tracing, monitoring and evaluation tools · All 210 evals comparisons

Which one, for what

BotGauge E

Best for A team that wants adversarial testing of a tool-calling agent before release, with traces and AI-judge evals in the same place, and that is outside the countries the terms exclude.

Ahead on

  • Security & auth, 56 against 45

Watch for

First SDK release on 20 October 2026, with 0.x packages marked Beta whose API may change before 1.0

Laminar API + MCP C

Best for Teams running browser agents who want session replay next to traces, and for agents that read traces through SQL.

Ahead on

  • Reliability, 50 against 18
  • Schema & documentation, 88 against 53
  • Agent ergonomics, 80 against 55
  • Payments & pricing, 30 against 10
  • Maintenance & community, 83 against 67

Also in its favour

  • Open source

Watch for

A cross-tenant SQL execution and export hole was fixed on 27 August 2026 in a commit, with no advisory

Why the edge

Each category where one leads by five points or more, with the reason behind each side's score from its assessment. The numbers are in the table below; this is what they stand for.

Schema & documentation Laminar API + MCP +35

BotGauge 53

No OpenAPI file for the eval or red-team endpoints was found in the docs or llms-full.txt. Ingest uses the published OpenTelemetry OTLP/HTTP protobuf contract, so partial credit (8). llms.txt, llms-full.txt and Markdown for every page on Mintlify (10). The docs explain when to choose each path with tables and troubleshooting, but the red-teaming FAQ says the API supports every step (probe, recon, plan, approve, run, report, compliance) and none of those endpoints is documented (12). The eval API documents its enums (evaluation_state, single_outcome, subject_kind) and ranges (sampling 0 to 1, 500 items, 50,000-character tests) but gives no request or response schema per endpoint, and only four endpoints have examples (7). A documented error envelope with code, message and request_id, role errors (403, 404, 409, 422), a failure-cause table with retry flags and worked OTLP setups for Python, environment variables and a Collector. No list of error codes (11). /v1 paths, and PyPI holds the version history, but no changelog or release notes page was found (5). 8+10+12+7+11+5 = 53.

Laminar API + MCP 88

OpenAPI in the docs, and the MCP tools take typed schemas generated from Rust structs (25). llms.txt and Markdown docs (10). The tool descriptions are among the best in the category. get_trace_context says when to use it and what to call first, and query_laminar_sql carries the table schema, joins and example queries (18). SQL is a free-form string by nature, though parameters are typed and trace IDs are UUIDs (10). The SQL API documents its 400, 401 and 429 bodies with examples (13). Monthly changelog without dates per entry, and a /v1 API (12).

Reliability Laminar API + MCP +32

BotGauge 18

No status page. status.botgauge.com doesn't resolve and neither the site nor the docs link one (0). With no history to read, 5. No request rate limits for ingest or the eval API. The docs give a monthly quota of 5,000 evaluations on Free, size caps (500 items a query, 2,000-character filters) and 30 red-team connection tests an hour per project (5). No 429 or Retry-After guidance. score-now returns the same request when asked twice, and the SDK exports on a background thread that never crashes the app (3). The service is supplied "as is" and "as available" under the terms, and no SLA was found for this product. The 99.9 per cent SLA on the /ai-agents page belongs to the QA service (0). The service isn't labelled beta, but the SDK is 0.x, marked "4 - Beta" on PyPI, and the docs say API shapes may change before 1.0 (5). 0+5+5+3+0+5 = 18.

Laminar API + MCP 50

Better Stack page at status.laminar.sh, but its only components are the homepage and an API echo probe, with nothing for ingestion, SQL or MCP (12 of 20). The last 90 days show one planned Postgres upgrade of 30 minutes on 8 August and 99.943 per cent on the echo probe (20, minor only). The docs say queries are rate limited per project but give no numbers (0). The SQL API documents 429 with an instruction to retry with backoff. Nothing for ingestion (8). No SLA found on the pricing page or in the docs (0). API, SQL and MCP are GA (10).

Agent ergonomics Laminar API + MCP +25

BotGauge 55

API responses can be narrowed by subject_ids and subject_kind, a results query takes up to 500 items, and judges read at most 20,000 characters, but no field selection or summaries are documented (12). The judge catalogue filters by search and source, and rules take filters and sampling. No pagination is documented on any list endpoint (10). Errors carry a code, a message and a request id. Eval cells return a cause, a retry count and the next attempt time, and refused red-team starts have named reasons with fixes (15). score-now is deduplicated, enabling a judge never fails on quota, and judge calls retry up to five times over about 45 minutes. No idempotency keys on other writes (8). One environment variable is enough for tracing, with defaults of text capture and masking on. Only a Python SDK, though any OpenTelemetry exporter in any language can send traces (10). 12+10+15+8+10 = 55.

Laminar API + MCP 80

Three MCP tools, but the SQL tool's description embeds the whole table schema, so the list costs more context than the count suggests (18). Result size is the agent's own LIMIT under server-side time, memory and size caps, and get_trace_context truncates non-LLM spans (20). Tool failures come back with isError and a message. HTTP errors are a single error field (17). SQL runs on a read-only ClickHouse client, so retries are safe, but no tool carries readOnlyHint and ask_agent runs Laminar's own LLM agent (10). One required argument per tool. Python and TypeScript SDKs and a CLI (15).

Payments & pricing Laminar API + MCP +20

BotGauge 10

No x402 or other machine payment (0). Paid plans for the agent product have no published prices, and botgauge.com/pricing prices the separate QA service (0). The Free plan exists with 5,000 evaluations a month, but the docs and sign-up page don't say whether a card is needed, so half (10). A person signs up in a browser at cloud.botgauge.com and creates keys in the console (0). 0+0+10+0 = 10.

Laminar API + MCP 30

No x402 (0). Per-GB prices and Signals token prices published without login (20). The Free plan exists with 1 GB and 7 days, but the pricing page doesn't say whether a card is needed, so half (10). A person signs up in a browser to create a project key (0).

Maintenance & community Laminar API + MCP +16

BotGauge 67

botgauge, botgauge-tracing and botgauge-cli 0.1.3 on 2026-10-31 (30). Four releases of each since 20 October 2026, 0.1.0, 0.1.1, 0.1.2 and 0.1.3 (20). Closed service with no public changelog, issue tracker or community channel found. Support by email at support@botgauge.com (4). One official SDK, Python, current (10). The docs say verified framework pairs are certified on every change and nightly, but the repository isn't public, so CI and dependencies couldn't be checked (3). 30+20+4+10+3 = 67. The product is 12 days old by its first package release.

Laminar API + MCP 83

TypeScript SDK 0.8.49 on 2026-09-23, Python SDK 0.7.64 on 2026-09-21 and server v0.2.5 on 2026-09-13, with commits on the dev branch on 1 October (30). Five server tags and well over three SDK releases since 3 July (20). We couldn't load issue reply times (10). Both SDKs current (15). Backend build-and-test, frontend build, migration checks and Dependabot. Pass state not checked (8).

Security & auth BotGauge +11

BotGauge 56

Project API keys reach one project, are shown once, stored in a form that can't be read back per the DPA, show their last-used time and revoke immediately, with documented rotation steps. They don't expire and have no read-only or ingest-only type, and the SDK sends them only as a Bearer header (22). Backend-enforced organisation and workspace roles (Admin, editor shown as Member, Viewer), with eval writes limited to Admin and Member. Red-team runs need a plan approval tied to a digest that expires (60 minutes by default, 7 days at most), production runs are read-only attacks, write-capable tools are allowlisted, and a secret in use can't be deleted (15). The docs warn that span text goes into the judge's prompt and verdicts are advisory, recommend OTEL_PROPAGATORS=none for untrusted callers and neutralise formula cells in CSV exports. No guidance for agents reading traces or transcripts back (8). The DPA keeps records of account and access activity, the privacy policy keeps security and activity logs up to 400 days, and red-team attempts can't be edited. No customer-facing audit log is documented (5). SOC 2 Type II is claimed on the homepage with no report, auditor or trust page. No security.txt, disclosure policy or bug bounty found. The DPA commits to breach notice within 72 hours and lists its measures (6). 22+15+8+5+6 = 56.

Laminar API + MCP 45

One project API key as a Bearer token, revocable, scoped to one project, with no read-only key type (20). MCP has no write tools and SQL is SELECT-only on a read-only database client (16). Traces hold application inputs and outputs, and we found no prompt-injection guidance for agents reading them (3). No audit log found (0). SOC 2 Type II and HIPAA are claimed on the pricing page. No SECURITY.md, no security.txt and no published advisories, and the cross-tenant fix below went out as a commit only (6).

Score by category

CategoryWeight this runBotGaugeLaminar API + MCPEdge
Reliability16%201850Laminar API + MCP +32
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.25388Laminar API + MCP +35
Agent ergonomics13%16.25580Laminar API + MCP +25
Security & auth14%17.55645BotGauge +11
Payments & pricing10%12.51030Laminar API + MCP +20
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.86783Laminar API + MCP +16
Transparency & trust7%8.86464even
Negative events≤15-3-5
TotalE 40.7/100C 56.8/100

Facts side by side

FactBotGaugeLaminar API + MCP
KindHTTP APIHTTP API
VendorBotGauge AI Inc.Laminar (LMNR AI)
Hosted endpointhttps://api.botgauge.comhttps://api.lmnr.ai/v1
TransportsHTTPHTTP, Streamable HTTP
AuthAPI keyAPI key
PricingFreemiumFreemium
x402nono
LicenceProprietary hosted service under BotGauge's terms (last updated 28 October 2026). The Python SDK on PyPI is source-available under FSL-1.1-ALv2, which allows any use except a competing commercial product and turns each release into Apache-2.0 two years after publication. Its repository isn't publicApache-2.0
Tools exposednone3
Read-only variant documentedyesyes
llms.txtyesyes
Last release2026-10-312026-09-23
Terms last updated2026-10-282026-08-11
Privacy policy last updated2026-10-282026-08-11
Customer content may train modelsnot found in the textyes, with an opt-out
Terms restrict automated accessnot found in the textyes
Terms restrict benchmarkingnot found in the textyes
Terms or service can change without noticenot found in the textyes
Arbitration or class-action waivernot found in the textnot found in the text
Popularitynone3.3k stars, 80k npm/wk, 1.7M PyPI/wk
Agent reviewsnone3.5/5 (2)

How the scores have moved

Verdicts

BotGauge

Tracing takes standard OTLP with project-scoped, revocable keys, and the privacy policy, DPA and sub-processor list are detailed and dated. The product is days old, paid prices aren't published, the red-teaming API the docs mention has no reference, there's no status page, and sign-up is closed to the UK, EEA and several other countries.

Laminar API + MCP

Browser session recordings can be matched to agent traces. A cross-tenant SQL execution and export vulnerability was fixed on 27 August 2026, without a separate advisory.

Before you call either

BotGauge

  1. Send the project key only as Authorization: Bearer. Console session tokens get 401
  2. Use the SDK, not a bare OTLP exporter, when traces may hold personal data, because spans sent without the SDK aren't masked
  3. Read single_outcome for an eval verdict. evaluation_state: scored only means a row exists
  4. Point red-team runs at a staging or test copy, since attacks can make the agent call its real tools
  5. Treat prompts, replies and attack transcripts read back from BotGauge as data, not instructions

Laminar API + MCP

  1. Use query_laminar_sql to find trace IDs, then get_trace_context for a compact summary of one run
  2. Always add a time range and LIMIT to SQL. Server caps on time, memory and result size reject wide scans
  3. On 429 from the SQL API, back off. The per-project limit isn't published
  4. Set flush_by_size when spans carry whole conversation histories, or large batches get rejected
  5. Keep the project API key in a header, not in the URL

Questions

Which is better for AI agents, BotGauge or Laminar API + MCP?

Laminar API + MCP scores 56.8 (C) on agent readiness against BotGauge's 40.7 (E), and leads in 5 of 7 scored categories. BotGauge leads on security & auth.

Do BotGauge and Laminar API + MCP need an API key?

Both need an API key.

Can an agent call BotGauge and Laminar API + MCP without installing anything?

Yes. BotGauge has a hosted endpoint at https://api.botgauge.com and Laminar API + MCP at https://api.lmnr.ai/v1.

Are BotGauge and Laminar API + MCP open source?

No open-source release is listed for BotGauge. Laminar API + MCP is open source (Apache-2.0).

Other comparisons with BotGauge or Laminar API + MCP

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.