# BotGauge vs LangSmith API + MCP (slim)

> LangSmith scores 71.6 (BB) to BotGauge's 40.7 (E) for agent tracing. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/botgauge-vs-langsmith.md (~5,800 tokens) · this version ~3,530 tokens · JSON https://www.anchorterminal.com/compare/botgauge-vs-langsmith.json · canonical https://www.anchorterminal.com/compare/botgauge-vs-langsmith
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-01
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

LangSmith API + MCP scores 71.6 (BB) on agent readiness against BotGauge's 40.7 (E), and leads in every scored category. Both do agent tracing.

- BotGauge: E 40.7, rank #1132 of 1260 · https://www.anchorterminal.com/tools/botgauge.min.md
- LangSmith API + MCP: BB 71.6, rank #130 of 1260 · https://www.anchorterminal.com/tools/langsmith.min.md
- BotGauge, good for A team that wants adversarial testing of a tool-calling agent before release, with traces and AI-judge evals in the same place, and that is outside the countries the terms exclude.
- LangSmith API + MCP, good for Teams on LangChain or LangGraph, and for any team that wants mature hosted evals with clear limits and deprecation rules. Ahead on Reliability, 81 against 18; Schema & documentation, 86 against 53; Agent ergonomics, 76 against 55; Security & auth, 79 against 56; Payments & pricing, 40 against 10; Maintenance & community, 85 against 67; Transparency & trust, 78 against 64. Also Agent-ready, a grade of BB or better.

| Category | BotGauge | LangSmith API + MCP |
| --- | --- | --- |
| Reliability (16%) | 18 | 81 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 53 | 86 |
| Agent ergonomics (13%) | 55 | 76 |
| Security & auth (14%) | 56 | 79 |
| Payments & pricing (10%) | 10 | 40 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 67 | 85 |
| Transparency & trust (7%) | 64 | 78 |

| Fact (where they differ) | BotGauge | LangSmith API + MCP |
| --- | --- | --- |
| Vendor | BotGauge AI Inc. | LangChain |
| Hosted endpoint | `https://api.botgauge.com` | `https://api.smith.langchain.com` |
| Transports | HTTP | HTTP, Streamable HTTP |
| Auth | API key | OAuth or key |
| Price for agent tracing | not published | $2.50 per 1,000 requests |
| Licence | Proprietary hosted service under BotGauge's terms (last updated 28 October 2026). The Python SDK on PyPI is source-available under FSL-1.1-ALv2, which allows any use except a competing commercial product and turns each release into Apache-2.0 two years after publication. Its repository isn't public | MIT (SDK only, platform closed source) |
| Terms last updated | 2026-10-28 | 2026-06-02 |
| Privacy policy last updated | 2026-10-28 | 2024-04-28 |
| Terms restrict benchmarking | not found in the text | yes |
| Popularity | none | 1.1k stars, 7.6M npm/wk, 17.8M PyPI/wk |
| Agent reviews | none | 3/5 (2) |

Why the edge:
- Reliability, LangSmith API + MCP +63: BotGauge 18 (No status page. status.botgauge.com doesn't resolve and neither the site nor the docs link one (0). With no history to read, 5. No request rate limits for ingest or the eval API. The docs give a monthly quota of 5,000 evaluations on Free, size caps (500 items a query, 2,000-character filters) and 30 red-team connection tests an hour per project (5). No 429 or Retry-After guidance. `score-now` returns the same request when asked twice, and the SDK exports on a background thread that never crashes the app (3). The service is supplied "as is" and "as available" under the terms, and no SLA was found for this product. The 99.9 per cent SLA on the /ai-agents page belongs to the QA service (0). The service isn't labelled beta, but the SDK is 0.x, marked "4 - Beta" on PyPI, and the docs say API shapes may change before 1.0 (5). 0+5+5+3+0+5 = 18.); LangSmith API + MCP 81 (incident.io status page per region, GCP US, GCP EU, GCP APAC and AWS US, each with component history (20). The incident feeds and incident pages, read on 1 November, cover the 90 days from 3 August. GCP US lists 13 incidents and two maintenance windows, all on one component or feature or under an hour. The longest are Fleet agent tool calls on Claude models (6 hours 25 minutes, degraded, 5 August), deployment database provisioning in GCP regions (5 hours 3 minutes, partial, 3 October) and Fleet sandboxes (3 hours 27 minutes, partial, 2 September). The LLM Gateway was fully down for 35 minutes on 8 October and the API partially for 2 minutes on 29 October. The other regions repeat the same shared incidents plus APAC run querying on 12 October and AWS US run-query latency on 8 October. Minor only (20). Per-key limits published by endpoint (5,000 run writes, 30 `GET /runs/:id` and 2,000 other calls a minute, 10 semantic queries a minute per workspace) plus hourly event and data limits per plan (15). The docs explain each kind of 429 and recommend exponential backoff with jitter, and the SDKs retry and batch. Retry-After is documented only for the semantic query limit added in October (13). Enterprise has a support SLA. We found no uptime SLA (3). API and remote MCP are GA (10). 20+20+15+13+3+10 = 81.)
- Schema & documentation, LangSmith API + MCP +33: BotGauge 53 (No OpenAPI file for the eval or red-team endpoints was found in the docs or llms-full.txt. Ingest uses the published OpenTelemetry OTLP/HTTP protobuf contract, so partial credit (8). llms.txt, llms-full.txt and Markdown for every page on Mintlify (10). The docs explain when to choose each path with tables and troubleshooting, but the red-teaming FAQ says the API supports every step (probe, recon, plan, approve, run, report, compliance) and none of those endpoints is documented (12). The eval API documents its enums (`evaluation_state`, `single_outcome`, `subject_kind`) and ranges (sampling 0 to 1, 500 items, 50,000-character tests) but gives no request or response schema per endpoint, and only four endpoints have examples (7). A documented error envelope with `code`, `message` and `request_id`, role errors (403, 404, 409, 422), a failure-cause table with retry flags and worked OTLP setups for Python, environment variables and a Collector. No list of error codes (11). `/v1` paths, and PyPI holds the version history, but no changelog or release notes page was found (5). 8+10+12+7+11+5 = 53.); LangSmith API + MCP 86 (Public OpenAPI 3.1 at api.smith.langchain.com/openapi.json, re-read on 1 November with 413 paths and 613 operations, 40 of them flagged deprecated (25). llms.txt and Markdown docs (10). MCP tool docstrings are long and practical. `fetch_runs` explains character-budget paging, FQL operators and gives five filter examples. But four tools named like actions (`push_prompt`, `create_dataset`, `update_examples`, `run_experiment`) only return how-to text, which the docstrings say and the names don't, per the open-source server at its last commit of 11 August (16). Several MCP parameters take strings where a type would do, such as `error` and `is_root` as "true" or "false", a JSON array inside `project_name` and free-form FQL in `filter` (9). Examples throughout the docs and docstrings. Only 8 of the 613 operations declare a 429 and error bodies get little documentation (11). Versioned `/api/v1` and `/v2` routes, a weekly dated changelog with an RSS feed and a published deprecation policy (15). 25+10+16+9+11+15 = 86.)
- Payments & pricing, LangSmith API + MCP +30: BotGauge 10 (No x402 or other machine payment (0). Paid plans for the agent product have no published prices, and botgauge.com/pricing prices the separate QA service (0). The Free plan exists with 5,000 evaluations a month, but the docs and sign-up page don't say whether a card is needed, so half (10). A person signs up in a browser at cloud.botgauge.com and creates keys in the console (0). 0+0+10+0 = 10.); LangSmith API + MCP 40 (No x402 or other machine payment (0). Per-trace pricing is public, a base trace at 0.005 LSU and the extended-retention upgrade at 0.0025 LSU, with LSU = $1, Developer $0 with 5,000 base traces and Plus $39 a seat with 10,000, re-read on 1 November (20). Developer is free for 5,000 traces a month with no payment method on file, per the usage docs (20). A person signs up in a browser to create a key (0). 0+20+20+0 = 40.)
- Security & auth, LangSmith API + MCP +23: BotGauge 56 (Project API keys reach one project, are shown once, stored in a form that can't be read back per the DPA, show their last-used time and revoke immediately, with documented rotation steps. They don't expire and have no read-only or ingest-only type, and the SDK sends them only as a Bearer header (22). Backend-enforced organisation and workspace roles (Admin, editor shown as Member, Viewer), with eval writes limited to Admin and Member. Red-team runs need a plan approval tied to a digest that expires (60 minutes by default, 7 days at most), production runs are read-only attacks, write-capable tools are allowlisted, and a secret in use can't be deleted (15). The docs warn that span text goes into the judge's prompt and verdicts are advisory, recommend `OTEL_PROPAGATORS=none` for untrusted callers and neutralise formula cells in CSV exports. No guidance for agents reading traces or transcripts back (8). The DPA keeps records of account and access activity, the privacy policy keeps security and activity logs up to 400 days, and red-team attempts can't be edited. No customer-facing audit log is documented (5). SOC 2 Type II is claimed on the homepage with no report, auditor or trust page. No security.txt, disclosure policy or bug bounty found. The DPA commits to breach notice within 72 hours and lists its measures (6). 22+15+8+5+6 = 56.); LangSmith API + MCP 79 (Personal access tokens inherit the user's permissions. Service keys are scoped to the organisation or chosen workspaces, carry an expiry, and on Enterprise can take a workspace role. Since the week of 12 October, tracing-only keys are scoped to chosen workspaces with fixed `runs:create` and `projects:create` permissions, can't read stored traces, carry their own maximum expiry and are revoked through the UI or `/orgs/current/tracing-keys`, and the key docs name no plan limit. The remote MCP uses OAuth 2.1 with dynamic client registration or the same key in `X-Api-Key`, and since October accepts tokens issued for the API. Scoped, revocable keys with expiry, read as langfuse's permission sets are (30, was 28). The MCP server only reads in practice, but there's no read-only key type below Enterprise RBAC (15). The Engine security page warns that trace content can carry prompt injection. The MCP page says nothing about it (6). Audit logs on Enterprise, queryable by API (10). SOC 2 Type II, HIPAA and GDPR with annual third-party audits and penetration tests per the docs, SECURITY.md files pointing to the SDK generator's and LangChain's reporting routes, and five SDK advisories published with CVEs since February, per the 1 October check (GitHub's advisory pages weren't reachable on 1 November). www.langchain.com answers "Invalid .well-known request" for security.txt, so none (18). 30+15+6+10+18 = 79.)
- Agent ergonomics, LangSmith API + MCP +21: BotGauge 55 (API responses can be narrowed by `subject_ids` and `subject_kind`, a results query takes up to 500 items, and judges read at most 20,000 characters, but no field selection or summaries are documented (12). The judge catalogue filters by `search` and `source`, and rules take filters and sampling. No pagination is documented on any list endpoint (10). Errors carry a code, a message and a request id. Eval cells return a cause, a retry count and the next attempt time, and refused red-team starts have named reasons with fixes (15). `score-now` is deduplicated, enabling a judge never fails on quota, and judge calls retry up to five times over about 45 minutes. No idempotency keys on other writes (8). One environment variable is enough for tracing, with defaults of text capture and masking on. Only a Python SDK, though any OpenTelemetry exporter in any language can send traces (10). 12+10+15+8+10 = 55.); LangSmith API + MCP 76 (The remote MCP lists 15 tools in its docs, and the changelog has since added `list_model_price_maps` and Engine issue tools, so roughly 16 to 20, with no toolsets or allowlist header (15). `fetch_runs` caps `limit` at 100, pages by a 25,000-character budget, trims fields to 150-character previews and takes time bounds (20). 429s are typed by cause in the docs, run-query timeouts return without retrying, and MCP errors come back as messages (14). The MCP server has no `readOnlyHint` or `destructiveHint` annotations in its source. In practice it only reads, since the write-named tools return documentation (12). Python and TypeScript SDKs. `LANGSMITH_TRACING=true` and a key are the only setup for LangChain apps (15).)
- Maintenance & community, LangSmith API + MCP +18: BotGauge 67 (botgauge, botgauge-tracing and botgauge-cli 0.1.3 on 2026-10-31 (30). Four releases of each since 20 October 2026, 0.1.0, 0.1.1, 0.1.2 and 0.1.3 (20). Closed service with no public changelog, issue tracker or community channel found. Support by email at support@botgauge.com (4). One official SDK, Python, current (10). The docs say verified framework pairs are certified on every change and nightly, but the repository isn't public, so CI and dependencies couldn't be checked (3). 30+20+4+10+3 = 67. The product is 12 days old by its first package release.); LangSmith API + MCP 85 (The SDKs moved on 16 October from langsmith-sdk (now archived) to langsmith-python and langsmith-javascript, with the same PyPI and npm packages. Python 0.14.16 on 29 October and JavaScript 0.11.6 dated 31 October in its changelog (30). 31 Python SDK tags in the 90 days to 1 November, 0.10.16 (5 August) to 0.14.16 across the old and new repositories, and JavaScript releases to 0.11.6 (20). Both new repositories take commits daily and auto-label new issues. We didn't load reply times (12). Python and TypeScript SDKs both current (15). CI, release and benchmark workflows run in public in both repositories. Pass state not checked (8). 30+20+12+15+8 = 85.)