{ "data": { "a": { "slug": "boxlang-ai", "name": "BoxLang AI", "vendor": "Ortus Solutions", "vendorUrl": "https://ai.boxlang.io", "kind": "framework", "category": "frameworks", "summary": "BoxLang AI (bx-ai) is Ortus Solutions' Apache-2.0 agent framework for BoxLang on the JVM, with agents, tools, memory, RAG, human approval, and an MCP client and server across more than 15 model providers.", "url": "https://www.anchorterminal.com/tools/boxlang-ai", "markdownUrl": "https://www.anchorterminal.com/tools/boxlang-ai.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/boxlang-ai.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/boxlang-ai.json", "dns": "boxlang-ai.grade.anchorterminal.com", "repo": "https://github.com/ortus-boxlang/bx-ai", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "forgebox", "name": "bx-ai" } ], "auth": "none", "authNotes": "A library with no account of its own. Model providers need their own keys, set in boxlang.json or read from each provider's environment variable (OPENAI_API_KEY, CLAUDE_API_KEY and so on). Ollama, Docker Model Runner and the mock provider need no key.", "pricing": "free", "pricingNotes": "Free under Apache-2.0. Model calls are billed by the provider. Ortus sells optional BoxLang runtime plans from $749 a year (Starter, one server) to $4,999 a node a year (BoxLang++), which the readme says add more vector memories and an Agent Dashboard.", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "evidence": "Local library. No x402, MPP or L402 in the repository, the docs or the plans page, checked 1 November 2026.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-01" }, "docsUrl": "https://ai.ortusbooks.com", "llmsTxt": "https://ai.ortusbooks.com/llms.txt", "capabilities": [ "agent.framework", "agent.multi-agent", "agent.mcp-client" ], "tags": [ "framework", "boxlang", "jvm", "open-source", "apache-2.0", "mcp", "llms-txt", "free" ], "lastRelease": "2026-10-20", "graded": true, "anchor": { "graded": true, "score": 65.8, "grade": "B", "agentReady": false, "rank": 328, "ranked": true, "rankOf": 1260, "categoryRank": 10, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 83, "payments": 50, "reliability": 66, "schema": 71, "security": 71, "transparency": 70 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -3, "negativeNotes": [ "2026-10-20. -3, a breaking change in a minor release without advance notice. 3.6.0 renamed the `MCPClient` class to `MCPHttpClient` with no alias, so code that created the class directly must move to `MCP( url )`. The changelog's Migration section says so on release day. 3.5.0 (11 September) likewise raised the minimum BoxLang runtime from 1.8.0 to 1.14.0. One term at the floor, as google-adk's minor-release breaking changes took. https://github.com/ortus-boxlang/bx-ai/blob/main/changelog.md" ], "verdict": "A JVM agent framework with human approval, guardrail middleware and an MCP client over HTTP and stdio, all enforced in code, with three releases in the 90 days to 1 November 2026. It runs only on BoxLang, the stronger guards are opt-in, and minor releases have renamed public classes without a deprecation period.", "bestFor": "Teams already running BoxLang or modernising CFML on the JVM who want agents, RAG and MCP with approval and guardrails in the same language", "strengths": [ "Human approval enforced in code, with suspended runs that resume without replaying the model call, five approval policies and durable grants", "Untrusted context is fenced and inbound text Unicode-normalised by default, with opt-in sanitiser, LLM-judge and output-redaction middleware", "stdio MCP servers start without a shell, with an allowedCommands setting, per-server tool filters and prefixes, and restart limits", "Three releases in the 90 days to 1 November 2026 (3.4.0, 3.5.0, 3.6.0), with a Keep a Changelog file and migration notes", "llms.txt and a Markdown copy of every docs page, plus about 100 runnable example scripts in the repository" ], "weaknesses": [ "Runs only on BoxLang, a JVM language, so it suits teams already on BoxLang or CFML rather than Python or TypeScript stacks", "Minor releases carry breaking changes. 3.6.0 renamed MCPClient to MCPHttpClient with no alias, noted on release day", "The stdio command allow-list, filesystem tool paths and MCP server authentication are all open by default", "Docs lag the code. On 1 November the 3.6.0 release page still read unreleased and didn't mention the stdio MCP client", "No OpenTelemetry export found. Tracing is through BoxLang interception points, logging and flight-recorder middleware" ], "agentNotes": [ "Set `mcp.stdio.allowedCommands` to the executables you need. The default empty list lets any command start as a stdio MCP server.", "Pass `allowedPaths` when you create FileSystemTools. With none, its tools can read, write and delete anywhere the JVM user can.", "Attach HumanInTheLoopMiddleware with a checkpointer for tools that write or spend. Approval is opt-in.", "Create MCP clients with `MCP()` rather than the class, since 3.6.0 renamed MCPClient to MCPHttpClient without an alias.", "Use the `mock` provider to test agent wiring and guardrails with no API key or network." ], "metrics": { "kind": "library", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 65.8 } ], "editorialScores": { "ergonomics": 74, "maintenance": 83, "payments": 50, "reliability": 66, "schema": 71, "security": 71, "transparency": 65 }, "provenanceScore": 74, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "install-bx-module bx-ai # in a web app: box install bx-ai" }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/boxlang-ai" }, "sameCompany": [ "bx-playwright" ], "area": "frameworks", "provenance": { "legalEntity": "Ortus Solutions, Corp.", "domain": "ortussolutions.com", "domainRegistered": "2006-04-12", "endpointOnVendorDomain": null, "terms": "https://github.com/ortus-boxlang/bx-ai/blob/main/src/main/resources/LICENSE", "privacy": "https://www.ortussolutions.com/about-us/ortus-privacy-policy", "statusPage": "", "changelog": "https://github.com/ortus-boxlang/bx-ai/blob/main/changelog.md", "securityTxt": "none", "checked": "2026-11-01", "notes": [ "The readme names Ortus Solutions, Corp as copyright holder, and box.json names Ortus Solutions as author.", "domainRegistered is from Verisign's RDAP record for ortussolutions.com. rdap.org has no record for boxlang.io, so the product domain's date wasn't read.", "security.txt answers 410 on www.ortussolutions.com and boxlang.io. CONTRIBUTING.md asks for vulnerability reports to security@ortussolutions.com.", "The Apache 2.0 licence stands in for terms. The privacy policy covers Ortus's website and customers, not the module.", "Local software, so there is no endpoint or status page." ], "score": 74 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/boxlang-ai.json" }, "answer": "BoxLang AI scores 65.8 (B) on agent readiness against CrewAI's 59 (C), and leads in 2 of 7 scored categories. CrewAI leads on reliability, agent ergonomics, maintenance \u0026 community and transparency \u0026 trust.", "b": { "slug": "crewai", "name": "CrewAI", "vendor": "CrewAI", "vendorUrl": "https://www.crewai.com", "kind": "framework", "category": "frameworks", "summary": "Python framework for teams of role-playing agents in Crews, plus event-driven Flows for stateful workflows.", "url": "https://www.anchorterminal.com/tools/crewai", "markdownUrl": "https://www.anchorterminal.com/tools/crewai.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/crewai.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/crewai.json", "dns": "crewai.grade.anchorterminal.com", "repo": "https://github.com/crewAIInc/crewAI", "license": "MIT", "transports": [], "packages": [ { "registry": "pypi", "name": "crewai" } ], "auth": "none", "authNotes": "A library. Credentials are for the models and tools you use.", "pricing": "free", "pricingNotes": "Free and open source. You pay for the model calls it makes. CrewAI AMP hosting has a free tier of 50 executions a month. Enterprise is priced by sales.", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 59059, "npmWeekly": null, "pypiWeekly": 552409, "asOf": "2026-09-26" }, "docsUrl": "https://docs.crewai.com", "llmsTxt": "https://docs.crewai.com/llms.txt", "capabilities": [ "agent.framework", "agent.multi-agent", "agent.durable", "agent.mcp-client" ], "tags": [ "framework", "python", "open-source", "telemetry-default-on" ], "lastRelease": "2026-10-29", "graded": true, "anchor": { "graded": true, "score": 59, "grade": "C", "agentReady": false, "rank": 662, "ranked": true, "rankOf": 1260, "categoryRank": 13, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 80, "maintenance": 88, "payments": 40, "reliability": 75, "schema": 74, "security": 65, "transparency": 79 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -12, "negativeNotes": [ "2026-03-30. CERT/CC VU#221883 published four CVEs in CrewAI 1.0, remote code execution when the code interpreter fell back from Docker to its Python sandbox (CVE-2026-2275, 9.6, and CVE-2026-2287, 9.8), SSRF in the RAG search tools (CVE-2026-2286, 9.8) and local file read in the JSON loader tool (CVE-2026-2285, 7.5). CrewAI says all are fixed in current releases, removed CodeInterpreterTool and added URL and path validation across 20+ tools. Fixed, published and more than two months old, so 1 point each. https://www.kb.cert.org/vuls/id/221883", "2026-09-13. CVE-2026-37008 (High), a ctypes bypass of the in-process Python sandbox, which the record calls a different vulnerability than CVE-2026-2275. Fixed by commit fb2323b, first in 1.11.0. A fixed, published High under two months old, so 2 points. The 1 October check had folded it into the March CVEs. https://api.osv.dev/v1/vulns/CVE-2026-37008", "2026-10-23. crewai 1.15.29, a patch release, removed `CrewAgentExecutor` and the public import paths around it and changed how every agent runs (oversized tool results deferred to files, the conversation summarised before it overflows, the fifth identical tool call stopping the task). The release notes listed none of it as breaking. The changelog marked it breaking on 28 October, and 1.15.33 restored some imports on 29 October. A breaking change shipped without notice, so 3 points. https://github.com/crewAIInc/crewAI/releases/tag/1.15.29", "2026-10-23. 1.15.29 also shipped fixes for two described flaws in the crewai package with no advisory, LanceDB memory filters built by interpolating scope and id values into SQL strings (#7820) and private memories saved without a source returned to every recall (#8400). Neither commit cites a GHSA id. Released fixes with no advisory, so 3 points. https://github.com/crewAIInc/crewAI/releases/tag/1.15.29" ], "verdict": "The mcps field connects an agent to an MCP server in a few lines, with static and dynamic tool filters. Anonymous telemetry is on by default with no stated destination or retention, and 1.15.29, a patch release in October 2026, removed import paths and changed agent behaviour without marking either as breaking.", "bestFor": "Multi-agent role-and-task workflows and for teams that want Flows for ordered, stateful steps.", "strengths": [ "An MCP server in five lines through the mcps field, with static and dynamic tool filters", "Pre-tool-call hooks that can block a call or ask a person to approve it", "Run caps on by default (max_iter 20, respect_context_window) and two retries on error", "23 stable releases between 4 August and 29 October 2026", "A security policy with response times, safe harbour and a valid security.txt" ], "weaknesses": [ "Anonymous telemetry on by default, with no stated destination or retention", "1.15.29, a patch release, removed import paths and changed agent behaviour, marked breaking only five days later", "Four CVEs in March 2026 and one in September, published through CERT/CC and NVD rather than GitHub advisories", "No sandbox for model-written code since CodeInterpreterTool was removed", "Python only, and Python 3.14 isn't supported yet" ], "agentNotes": [ "Set CREWAI_DISABLE_TELEMETRY=true before the first run", "Pin an exact version and read the changelog before upgrading. Patch releases have carried breaking changes", "Put MCP keys in headers, not in the URL as the docs' Exa example does", "Add a PRE_TOOL_CALL hook for any tool that writes or sends", "Set use_better_compaction=False if the agent needs whole tool results in its context" ], "metrics": { "kind": "library", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59 } ], "editorialScores": { "ergonomics": 80, "maintenance": 88, "payments": 40, "reliability": 75, "schema": 74, "security": 65, "transparency": 75 }, "provenanceScore": 82, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install crewai" }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/crewai" }, "area": "frameworks", "provenance": { "legalEntity": "CrewAI, Inc.", "domain": "crewai.com", "domainRegistered": "2017-07-25", "domainNote": "crewai.com was registered in 2017, before CrewAI existed.", "endpointOnVendorDomain": null, "terms": "https://crewai.com/terms-of-use", "privacy": "https://crewai.com/privacy-policy", "statusPage": "https://status.crewai.com", "changelog": "https://docs.crewai.com/en/changelog", "securityTxt": "valid", "checked": "2026-11-01", "notes": [ "The terms of use name CrewAI, Inc., a Delaware corporation, and both the terms and the privacy policy carry an effective date of 24 September 2025. They cover the CrewAI platform (AMP); the framework itself is under MIT.", "crewai.com/.well-known/security.txt gives security@crewai.com as the contact, expires 2027-05-27 and points to the repository's security policy.", "status.crewai.com, linked from the crewai.com footer, is an incident.io status page for the hosted platform, not the library." ], "score": 82 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/crewai.json", "live": { "slug": "crewai", "vendorStatus": { "page": "https://status.crewai.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-02T01:00:40.90908455Z" }, "versions": [ { "registry": "github", "name": "crewAIInc/crewAI", "version": "1.15.33", "released": "2026-10-29", "seenAt": "2026-11-01T16:52:29.979540991Z" }, { "registry": "pypi", "name": "crewai", "version": "1.15.33", "released": "2026-10-28", "seenAt": "2026-11-01T16:52:29.836990804Z" } ], "githubStars": 60384, "pypiWeekly": 589367, "securityTxt": { "url": "https://crewai.com/.well-known/security.txt", "state": "valid", "expires": "2027-05-27T23:59:59.000Z", "checkedAt": "2026-11-01T15:43:26.07951663Z" }, "llmsTxt": { "url": "https://docs.crewai.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-01T15:13:31.597634966Z" }, "domain": { "domain": "crewai.com", "registered": "2017-07-25", "source": "https://rdap.verisign.com/com/v1/domain/crewai.com", "checkedAt": "2026-11-01T14:25:44.848100367Z" }, "pages": [ { "url": "https://docs.crewai.com/en/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-01T06:41:21.074500883Z", "changedAt": "2026-10-29T05:04:07.243177168Z", "fingerprint": "22e51f63c333" } ], "github": { "repo": "crewaiinc/crewai", "checkedAt": "2026-10-26T07:21:11.975949147Z", "stars": 60109, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-26T07:21:03Z", "openIssues": 352, "openPRs": 551, "issuesOpened90d": 581, "issuesClosed90d": 311, "prsMerged90d": 369, "ci": { "branch": "main", "runs": 50, "success": 50, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-10-26T07:02:52Z" } }, "updatedAt": "2026-11-02T01:00:40.90908455Z" } }, "edges": [ { "by": 10, "category": "payments", "leads": "boxlang-ai", "name": "Payments \u0026 pricing", "reasons": { "a": "Self-hosted rule, scored on the paid option. No payment protocol (0). BoxLang runtime plans are public without a login, Starter $749 a year and BoxLang+ and BoxLang++ from $1,999 to $4,999 a server or node a year, plan pricing rather than per unit (10). The Apache-2.0 module installs with no card (20) and no account or sign-up (20). 50 in all.", "b": "No payment protocol (0). Scored on CrewAI AMP, the hosted option. Its free Basic plan is public but the only paid plan is contact-sales (0). The MIT package installs with no card (20) and no account, and can run a local model through LiteLLM (20)." }, "scores": { "a": 50, "b": 40 } }, { "by": 9, "category": "reliability", "leads": "crewai", "name": "Reliability", "reasons": { "a": "Read with the local-software lines. Official package on ForgeBox, installed with `install-bx-module bx-ai` or `box install bx-ai`, with BoxLang 1.14.0 or later in box.json and JDK 21 in CONTRIBUTING.md, but the 3.6 announcement says BoxLang 1.18 or later (18 of 20). tests.yml runs about 140 test classes against Ollama and the vector stores in Docker Compose, and against paid providers on development and releases, on pull requests and pushes to development. Whether runs pass wasn't read, since WebFetch refused github.com (15 of 25). Open issues and replies weren't read for the same reason. The changelog closes issues #182 to #259 in 3.3.1 to 3.4.0, and bugs also go to Ortus's Jira (10 of 25). Keep a Changelog with semantic versioning stated and Migration sections, but breaking changes ship in minor releases (8 of 15). 3.6.0, past 1.0 (15). 66 in all.", "b": "Official package on PyPI with Requires-Python \u003e=3.10,\u003c3.14 in the pyproject at 1.15.33 (20). The Run Tests workflow runs the suite on pull requests only, and CodeQL, a vulnerability scan and a nightly canary run on main; run results weren't re-read on 1 November because GitHub's pages answer 403 (15). Between 99 and 184 open issues, triaged with labels and a stale bot, per the 1 October check, not re-read on 1 November (18). A dated changelog that notes deprecations, but no written versioning policy, new capabilities ship in patch releases, and 1.15.29, a patch release on 23 October 2026, removed public import paths and changed how every agent runs, marked as breaking only on 28 October (7). 1.15.33, stable (15)." }, "scores": { "a": 66, "b": 75 } }, { "by": 9, "category": "transparency", "leads": "crewai", "name": "Transparency \u0026 trust", "reasons": { "a": "Apache-2.0, OSI approved, though the licence file sits in src/main/resources rather than the repository root (30). The FAQ says prompts and history go to the chosen cloud provider and that Ollama keeps data local, and we found no telemetry in the source, but there's no statement for the module of what, if anything, Ortus receives. Ortus's privacy policy covers its website and customers and says data is collected when you use its products without naming which (15 of 30). Migration notes are dated in the changelog, and default models were moved off a Groq model on its removal date, but there's no written deprecation policy or support window (10 of 20). No telemetry statement either way in the docs (10 of 20). 65 in all.", "b": "MIT (30). The telemetry page lists what's collected and what isn't, but doesn't say where it goes or how long it's kept (15). Deprecations such as function_calling_llm and allow_code_execution appear in the dated changelog and docs, with no written deprecation policy (10). Telemetry disclosed in the docs and README with two opt-out variables (20)." }, "scores": { "a": 70, "b": 79 } }, { "by": 6, "category": "ergonomics", "leads": "crewai", "name": "Agent ergonomics", "reasons": { "a": "Framework reading, scored on what a tool-calling agent with MCP takes. An agent with an MCP server is one `aiAgent()` call with `mcpServers`, and `toolFilter` and `prefix` limit what each server adds. Skills can load lazily, but `autoLoadSkills` is on by default and injects every SKILL.md under /.agents/skills into every agent (20 of 25). MaxToolCallsMiddleware caps tool calls, window and summary memory bound history by messages or tokens, `withMaxResponseBytes` caps MCP answers and `listTools( cursor )` pages tools (17 of 20). Named exceptions (ProviderError, UnsupportedCapability, InvalidArgument, MCPCommandRefused, BXAI.SecurityViolation) but no reference page, and the changelog says a timed-out call still surfaces as a JSON parse error (12 of 20). RetryMiddleware with exponential backoff, approval resumes that don't replay the model call or rerun executed tools, and a stdio client that never repeats an in-flight call. MCP tool annotations such as readOnlyHint aren't read (15 of 20). An agent needs a name and works with defaults, and a mock provider runs with no key, but it is one language (10 of 15). 74 in all.", "b": "The mcps field gives an agent an MCP server in five lines, with static and dynamic tool filters and tool-list caching (25). max_iter defaults to 20, max_execution_time and max_rpm cap runs, and respect_context_window is on by default (20). MCP connection failures are logged as warnings and the agent carries on without those tools, and we found no exception reference (10). max_retry_limit retries an agent twice on error, and Flows persist state with @persist (20). An agent needs role, goal and backstory before it does anything, and it's Python only (5)." }, "scores": { "a": 74, "b": 80 } }, { "by": 6, "category": "security", "leads": "boxlang-ai", "name": "Security \u0026 auth", "reasons": { "a": "Framework reading. 30 for what leaves the machine and credentials, 20 for approvals and sandboxing, 15 for prompt injection, 15 for audit and 20 for the security programme. No telemetry in the module's source, requests go only to configured providers, keys come from settings or environment variables, and request logging is off by default. 3.4.0 fixed a Gemini key leaking into logs through the request URL (27 of 30). Approval is enforced in code by HumanInTheLoopMiddleware with five policies, GuardrailMiddleware blocks tools by name and argument pattern, and stdio commands never use a shell. All of it is opt-in. `allowedCommands` allows any executable by default, FileSystemTools allows any path without `allowedPaths`, and the MCP server has no authentication unless configured (12 of 20). Unicode hygiene and fencing of `${context}` are on by default, with opt-in input sanitiser, LLM judge and output guard. Streaming guards detect after the fact, which the changelog says (14 of 15). About 70 interception points, LoggingMiddleware, FlightRecorderMiddleware and MCP server statistics, with no OpenTelemetry export (11 of 15). CONTRIBUTING.md asks for reports to security@ortussolutions.com and the Slack #security channel. No security.txt (410), no bounty, and no published advisory found, while 3.6.0 lists a SQL injection fix in MySQL vector memory under Fixed (7 of 20). 71 in all.", "b": "Anonymous telemetry on by default (versions, crew and agent configuration, tool usage, agent roles and tool names, no prompts or task descriptions), off with CREWAI_DISABLE_TELEMETRY or OTEL_SDK_DISABLED (20). Pre-tool-call hooks can block a call or ask a person to approve it, and MCP tools can be allow-listed, but there's no sandbox now that CodeInterpreterTool is gone (15). Task guardrails and hooks, and the MCP page says to trust a server before using it, but we found no prompt-injection guidance (10). Tracing to CrewAI AMP or third-party tools such as Langfuse and MLflow (12). A security policy in the repository with private reporting through GitHub, security@crewai.com, response times, safe harbour and a CVE commitment through GitHub's CNA, and a valid security.txt that points to it. No paid bug bounty. The four March 2026 CVEs came through CERT/CC, and October fixes cite two GHSA ids that OSV didn't list on 1 November (8). Framework reading, so SOC 2 isn't scored." }, "scores": { "a": 71, "b": 65 } }, { "by": 5, "category": "maintenance", "leads": "crewai", "name": "Maintenance \u0026 community", "reasons": { "a": "3.6.0 on 2026-10-20 (30). Three releases in the 90 days to 1 November, 3.4.0 on 1 September, 3.5.0 on 11 September and 3.6.0 on 20 October (20). 79 commits on the development branch in those 90 days from Luis Majano, Doug Cain, Copilot and dependency bots, with pull requests up to #326 merged on 1 November. Issue reply times couldn't be read (10 of 25). The ForgeBox package is current at 3.6.0 (15). Dependabot for Gradle monthly and Actions quarterly, tests on pull requests and development, and a format check (8 of 10). 83 in all.", "b": "1.15.33, tagged on 2026-10-29 (30). 23 stable releases tagged in the 90 days from 3 August, 1.15.11 (4 August) to 1.15.33, and no pre-release in that window (20). Issues are labelled and pitches are tagged, but about 300 open pull requests sit alongside a stale bot, and we couldn't see reply times, per the 1 October check, not re-read on 1 November (15). The Python package is current (15). CodeQL, a vulnerability scan and Dependabot run on main, but Python 3.14 isn't supported yet and dev builds share the PyPI name (8)." }, "scores": { "a": 83, "b": 88 } } ], "facts": [ { "a": "Agent framework", "b": "Agent framework", "name": "Kind" }, { "a": "Ortus Solutions", "b": "CrewAI", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-20", "b": "2026-10-29", "name": "Last release" }, { "a": "no date given", "b": "not read yet", "name": "Terms last updated" }, { "a": "no date given", "b": "not read yet", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not read yet", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not read yet", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "59k stars, 552k PyPI/wk", "name": "Popularity" }, { "a": "none", "b": "3/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "BoxLang AI scores 65.8 (B) on agent readiness against CrewAI's 59 (C), and leads in 2 of 7 scored categories. CrewAI leads on reliability, agent ergonomics, maintenance \u0026 community and transparency \u0026 trust.", "question": "Which is better for AI agents, BoxLang AI or CrewAI?" }, { "answer": "Yes. BoxLang AI is open source (Apache-2.0). CrewAI is open source (MIT).", "question": "Are BoxLang AI and CrewAI open source?" } ], "goodFor": [ { "aheadOn": [ "Security \u0026 auth, 71 against 65", "Payments \u0026 pricing, 50 against 40" ], "also": null, "goodFor": "Teams already running BoxLang or modernising CFML on the JVM who want agents, RAG and MCP with approval and guardrails in the same language", "slug": "boxlang-ai", "watchFor": "Runs only on BoxLang, a JVM language, so it suits teams already on BoxLang or CFML rather than Python or TypeScript stacks" }, { "aheadOn": [ "Reliability, 75 against 66", "Agent ergonomics, 80 against 74", "Maintenance \u0026 community, 88 against 83", "Transparency \u0026 trust, 79 against 70" ], "also": null, "goodFor": "Multi-agent role-and-task workflows and for teams that want Flows for ordered, stateful steps.", "slug": "crewai", "watchFor": "Anonymous telemetry on by default, with no stated destination or retention" } ], "history": { "boxlang-ai": null, "crewai": [ { "causes": [ "product", "evidence", "event" ], "date": "2026-11-01", "delta": -8.1, "from": 67.1, "fromGrade": "B", "to": 59, "toGrade": "C" }, { "causes": [ "correction" ], "date": "2026-10-28", "delta": -0.1, "from": 67.2, "fromGrade": "B", "to": 67.1, "toGrade": "B" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.2, "from": 67, "fromGrade": "B", "to": 67.2, "toGrade": "B" } ] }, "job": { "capability": "agent.framework", "name": "Agent frameworks" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai.json", "title": "AgentOS vs BoxLang AI", "url": "https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-crewai.json", "title": "AgentOS vs CrewAI", "url": "https://www.anchorterminal.com/compare/agentos-vs-crewai" }, { "json": "https://www.anchorterminal.com/compare/agno-vs-boxlang-ai.json", "title": "Agno vs BoxLang AI", "url": "https://www.anchorterminal.com/compare/agno-vs-boxlang-ai" }, { "json": "https://www.anchorterminal.com/compare/agno-vs-crewai.json", "title": "Agno vs CrewAI", "url": "https://www.anchorterminal.com/compare/agno-vs-crewai" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-claude-agent-sdk.json", "title": "BoxLang AI vs Claude Agent SDK", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-claude-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-cursor-agent-sdk.json", "title": "BoxLang AI vs Cursor Agent SDK", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-cursor-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-docker-agent.json", "title": "BoxLang AI vs Docker Agent", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-docker-agent" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-google-adk.json", "title": "BoxLang AI vs Agent Development Kit (ADK)", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-google-adk" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-guilds-run.json", "title": "BoxLang AI vs guilds.run", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-guilds-run" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-langgraph.json", "title": "BoxLang AI vs LangGraph", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-microsoft-agent-framework.json", "title": "BoxLang AI vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-openai-agents-sdk.json", "title": "BoxLang AI vs OpenAI Agents SDK", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-openai-agents-sdk" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-pydantic-ai.json", "title": "BoxLang AI vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-tradingagents.json", "title": "BoxLang AI vs TradingAgents", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-tradingagents" }, { "json": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-crewai.json", "title": "Claude Agent SDK vs CrewAI", "url": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-crewai" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-cursor-agent-sdk.json", "title": "CrewAI vs Cursor Agent SDK", "url": "https://www.anchorterminal.com/compare/crewai-vs-cursor-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-docker-agent.json", "title": "CrewAI vs Docker Agent", "url": "https://www.anchorterminal.com/compare/crewai-vs-docker-agent" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-google-adk.json", "title": "CrewAI vs Agent Development Kit (ADK)", "url": "https://www.anchorterminal.com/compare/crewai-vs-google-adk" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-guilds-run.json", "title": "CrewAI vs guilds.run", "url": "https://www.anchorterminal.com/compare/crewai-vs-guilds-run" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-langgraph.json", "title": "CrewAI vs LangGraph", "url": "https://www.anchorterminal.com/compare/crewai-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-microsoft-agent-framework.json", "title": "CrewAI vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/crewai-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-openai-agents-sdk.json", "title": "CrewAI vs OpenAI Agents SDK", "url": "https://www.anchorterminal.com/compare/crewai-vs-openai-agents-sdk" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-pydantic-ai.json", "title": "CrewAI vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/crewai-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-tradingagents.json", "title": "CrewAI vs TradingAgents", "url": "https://www.anchorterminal.com/compare/crewai-vs-tradingagents" } ], "panel": null, "scores": [ { "boxlang-ai": 66, "by": 9, "crewai": 75, "edge": "crewai", "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "boxlang-ai": 71, "by": 3, "crewai": 74, "edge": "crewai", "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "boxlang-ai": 74, "by": 6, "crewai": 80, "edge": "crewai", "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "boxlang-ai": 71, "by": 6, "crewai": 65, "edge": "boxlang-ai", "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "boxlang-ai": 50, "by": 10, "crewai": 40, "edge": "boxlang-ai", "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "boxlang-ai": 83, "by": 5, "crewai": 88, "edge": "crewai", "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "boxlang-ai": 70, "by": 9, "crewai": 79, "edge": "crewai", "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "BoxLang AI scores 65.8 (B) on agent readiness against CrewAI's 59 (C), and leads in 2 of 7 scored categories. CrewAI leads on reliability, agent ergonomics, maintenance \u0026 community and transparency \u0026 trust. Both do agent frameworks.", "tasks": null, "tutorials": [], "verdicts": { "boxlang-ai": "A JVM agent framework with human approval, guardrail middleware and an MCP client over HTTP and stdio, all enforced in code, with three releases in the 90 days to 1 November 2026. It runs only on BoxLang, the stronger guards are opt-in, and minor releases have renamed public classes without a deprecation period.", "crewai": "The mcps field connects an agent to an MCP server in a few lines, with static and dynamic tool filters. Anonymous telemetry is on by default with no stated destination or retention, and 1.15.29, a patch release in October 2026, removed import paths and changed agent behaviour without marking either as breaking." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai", "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai.min.md" }, "markdown": "BoxLang AI scores 65.8 (B) on agent readiness against CrewAI's 59 (C), and leads in 2 of 7 scored categories. CrewAI leads on reliability, agent ergonomics, maintenance \u0026 community and transparency \u0026 trust. Both do agent frameworks.\n\n- BoxLang AI: grade B, 65.8/100, rank #328 of 1260. Markdown https://www.anchorterminal.com/tools/boxlang-ai.md · JSON https://www.anchorterminal.com/api/v1/tools/boxlang-ai.json\n- CrewAI: grade C, 59/100, rank #662 of 1260. Markdown https://www.anchorterminal.com/tools/crewai.md · JSON https://www.anchorterminal.com/api/v1/tools/crewai.json\n- Best agent frameworks and SDKs: https://www.anchorterminal.com/best/frameworks/index.md\n- All 91 frameworks comparisons: https://www.anchorterminal.com/compare/frameworks/index.md\n\n## Which one, for what\n\n### BoxLang AI (B)\n\nGood for: Teams already running BoxLang or modernising CFML on the JVM who want agents, RAG and MCP with approval and guardrails in the same language\n\nAhead on:\n- Security \u0026 auth, 71 against 65\n- Payments \u0026 pricing, 50 against 40\n\nWatch for: Runs only on BoxLang, a JVM language, so it suits teams already on BoxLang or CFML rather than Python or TypeScript stacks\n\n### CrewAI (C)\n\nGood for: Multi-agent role-and-task workflows and for teams that want Flows for ordered, stateful steps.\n\nAhead on:\n- Reliability, 75 against 66\n- Agent ergonomics, 80 against 74\n- Maintenance \u0026 community, 88 against 83\n- Transparency \u0026 trust, 79 against 70\n\nWatch for: Anonymous telemetry on by default, with no stated destination or retention\n\n\n## Why the edge\n\n### Payments \u0026 pricing: BoxLang AI +10\n\n- BoxLang AI (50): Self-hosted rule, scored on the paid option. No payment protocol (0). BoxLang runtime plans are public without a login, Starter $749 a year and BoxLang+ and BoxLang++ from $1,999 to $4,999 a server or node a year, plan pricing rather than per unit (10). The Apache-2.0 module installs with no card (20) and no account or sign-up (20). 50 in all.\n- CrewAI (40): No payment protocol (0). Scored on CrewAI AMP, the hosted option. Its free Basic plan is public but the only paid plan is contact-sales (0). The MIT package installs with no card (20) and no account, and can run a local model through LiteLLM (20).\n\n### Reliability: CrewAI +9\n\n- BoxLang AI (66): Read with the local-software lines. Official package on ForgeBox, installed with `install-bx-module bx-ai` or `box install bx-ai`, with BoxLang 1.14.0 or later in box.json and JDK 21 in CONTRIBUTING.md, but the 3.6 announcement says BoxLang 1.18 or later (18 of 20). tests.yml runs about 140 test classes against Ollama and the vector stores in Docker Compose, and against paid providers on development and releases, on pull requests and pushes to development. Whether runs pass wasn't read, since WebFetch refused github.com (15 of 25). Open issues and replies weren't read for the same reason. The changelog closes issues #182 to #259 in 3.3.1 to 3.4.0, and bugs also go to Ortus's Jira (10 of 25). Keep a Changelog with semantic versioning stated and Migration sections, but breaking changes ship in minor releases (8 of 15). 3.6.0, past 1.0 (15). 66 in all.\n- CrewAI (75): Official package on PyPI with Requires-Python \u003e=3.10,\u003c3.14 in the pyproject at 1.15.33 (20). The Run Tests workflow runs the suite on pull requests only, and CodeQL, a vulnerability scan and a nightly canary run on main; run results weren't re-read on 1 November because GitHub's pages answer 403 (15). Between 99 and 184 open issues, triaged with labels and a stale bot, per the 1 October check, not re-read on 1 November (18). A dated changelog that notes deprecations, but no written versioning policy, new capabilities ship in patch releases, and 1.15.29, a patch release on 23 October 2026, removed public import paths and changed how every agent runs, marked as breaking only on 28 October (7). 1.15.33, stable (15).\n\n### Transparency \u0026 trust: CrewAI +9\n\n- BoxLang AI (70): Apache-2.0, OSI approved, though the licence file sits in src/main/resources rather than the repository root (30). The FAQ says prompts and history go to the chosen cloud provider and that Ollama keeps data local, and we found no telemetry in the source, but there's no statement for the module of what, if anything, Ortus receives. Ortus's privacy policy covers its website and customers and says data is collected when you use its products without naming which (15 of 30). Migration notes are dated in the changelog, and default models were moved off a Groq model on its removal date, but there's no written deprecation policy or support window (10 of 20). No telemetry statement either way in the docs (10 of 20). 65 in all.\n- CrewAI (79): MIT (30). The telemetry page lists what's collected and what isn't, but doesn't say where it goes or how long it's kept (15). Deprecations such as function_calling_llm and allow_code_execution appear in the dated changelog and docs, with no written deprecation policy (10). Telemetry disclosed in the docs and README with two opt-out variables (20).\n\n### Agent ergonomics: CrewAI +6\n\n- BoxLang AI (74): Framework reading, scored on what a tool-calling agent with MCP takes. An agent with an MCP server is one `aiAgent()` call with `mcpServers`, and `toolFilter` and `prefix` limit what each server adds. Skills can load lazily, but `autoLoadSkills` is on by default and injects every SKILL.md under /.agents/skills into every agent (20 of 25). MaxToolCallsMiddleware caps tool calls, window and summary memory bound history by messages or tokens, `withMaxResponseBytes` caps MCP answers and `listTools( cursor )` pages tools (17 of 20). Named exceptions (ProviderError, UnsupportedCapability, InvalidArgument, MCPCommandRefused, BXAI.SecurityViolation) but no reference page, and the changelog says a timed-out call still surfaces as a JSON parse error (12 of 20). RetryMiddleware with exponential backoff, approval resumes that don't replay the model call or rerun executed tools, and a stdio client that never repeats an in-flight call. MCP tool annotations such as readOnlyHint aren't read (15 of 20). An agent needs a name and works with defaults, and a mock provider runs with no key, but it is one language (10 of 15). 74 in all.\n- CrewAI (80): The mcps field gives an agent an MCP server in five lines, with static and dynamic tool filters and tool-list caching (25). max_iter defaults to 20, max_execution_time and max_rpm cap runs, and respect_context_window is on by default (20). MCP connection failures are logged as warnings and the agent carries on without those tools, and we found no exception reference (10). max_retry_limit retries an agent twice on error, and Flows persist state with @persist (20). An agent needs role, goal and backstory before it does anything, and it's Python only (5).\n\n### Security \u0026 auth: BoxLang AI +6\n\n- BoxLang AI (71): Framework reading. 30 for what leaves the machine and credentials, 20 for approvals and sandboxing, 15 for prompt injection, 15 for audit and 20 for the security programme. No telemetry in the module's source, requests go only to configured providers, keys come from settings or environment variables, and request logging is off by default. 3.4.0 fixed a Gemini key leaking into logs through the request URL (27 of 30). Approval is enforced in code by HumanInTheLoopMiddleware with five policies, GuardrailMiddleware blocks tools by name and argument pattern, and stdio commands never use a shell. All of it is opt-in. `allowedCommands` allows any executable by default, FileSystemTools allows any path without `allowedPaths`, and the MCP server has no authentication unless configured (12 of 20). Unicode hygiene and fencing of `${context}` are on by default, with opt-in input sanitiser, LLM judge and output guard. Streaming guards detect after the fact, which the changelog says (14 of 15). About 70 interception points, LoggingMiddleware, FlightRecorderMiddleware and MCP server statistics, with no OpenTelemetry export (11 of 15). CONTRIBUTING.md asks for reports to security@ortussolutions.com and the Slack #security channel. No security.txt (410), no bounty, and no published advisory found, while 3.6.0 lists a SQL injection fix in MySQL vector memory under Fixed (7 of 20). 71 in all.\n- CrewAI (65): Anonymous telemetry on by default (versions, crew and agent configuration, tool usage, agent roles and tool names, no prompts or task descriptions), off with CREWAI_DISABLE_TELEMETRY or OTEL_SDK_DISABLED (20). Pre-tool-call hooks can block a call or ask a person to approve it, and MCP tools can be allow-listed, but there's no sandbox now that CodeInterpreterTool is gone (15). Task guardrails and hooks, and the MCP page says to trust a server before using it, but we found no prompt-injection guidance (10). Tracing to CrewAI AMP or third-party tools such as Langfuse and MLflow (12). A security policy in the repository with private reporting through GitHub, security@crewai.com, response times, safe harbour and a CVE commitment through GitHub's CNA, and a valid security.txt that points to it. No paid bug bounty. The four March 2026 CVEs came through CERT/CC, and October fixes cite two GHSA ids that OSV didn't list on 1 November (8). Framework reading, so SOC 2 isn't scored.\n\n### Maintenance \u0026 community: CrewAI +5\n\n- BoxLang AI (83): 3.6.0 on 2026-10-20 (30). Three releases in the 90 days to 1 November, 3.4.0 on 1 September, 3.5.0 on 11 September and 3.6.0 on 20 October (20). 79 commits on the development branch in those 90 days from Luis Majano, Doug Cain, Copilot and dependency bots, with pull requests up to #326 merged on 1 November. Issue reply times couldn't be read (10 of 25). The ForgeBox package is current at 3.6.0 (15). Dependabot for Gradle monthly and Actions quarterly, tests on pull requests and development, and a format check (8 of 10). 83 in all.\n- CrewAI (88): 1.15.33, tagged on 2026-10-29 (30). 23 stable releases tagged in the 90 days from 3 August, 1.15.11 (4 August) to 1.15.33, and no pre-release in that window (20). Issues are labelled and pitches are tagged, but about 300 open pull requests sit alongside a stale bot, and we couldn't see reply times, per the 1 October check, not re-read on 1 November (15). The Python package is current (15). CodeQL, a vulnerability scan and Dependabot run on main, but Python 3.14 isn't supported yet and dev builds share the PyPI name (8).\n\n## Score by category\n\n| Category | Weight | BoxLang AI | CrewAI | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 66 | 75 | CrewAI +9 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 71 | 74 | CrewAI +3 |\n| Agent ergonomics | 13% (16.2 this run) | 74 | 80 | CrewAI +6 |\n| Security \u0026 auth | 14% (17.5 this run) | 71 | 65 | BoxLang AI +6 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 50 | 40 | BoxLang AI +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 83 | 88 | CrewAI +5 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 70 | 79 | CrewAI +9 |\n| Negative events | ≤15 | -3 | -12 | |\n| **Total** | | **65.8 · B** | **59 · C** | |\n\n## Facts side by side\n\n| Fact | BoxLang AI | CrewAI |\n| --- | --- | --- |\n| Kind | Agent framework | Agent framework |\n| Vendor | Ortus Solutions | CrewAI |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | Apache-2.0 | MIT |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-20 | 2026-10-29 |\n| Terms last updated | no date given | not read yet |\n| Privacy policy last updated | no date given | not read yet |\n| Customer content may train models | not found in the text | not read yet |\n| Terms restrict automated access | not found in the text | not read yet |\n| Terms restrict benchmarking | not found in the text | not read yet |\n| Terms or service can change without notice | not found in the text | not read yet |\n| Arbitration or class-action waiver | not found in the text | not read yet |\n| Popularity | none | 59k stars, 552k PyPI/wk |\n| Agent reviews | none | 3/5 (2) |\n\n## How the scores have moved\n\n### BoxLang AI\n\nNo score change since it was listed.\n\n### CrewAI\n\n- -8.1 on 1 November 2026 (B to C): product, new evidence, negative event\n- -0.1 on 28 October 2026: correction\n- +0.2 on 27 October 2026: checklist\n\n## Verdicts\n\n**BoxLang AI.** A JVM agent framework with human approval, guardrail middleware and an MCP client over HTTP and stdio, all enforced in code, with three releases in the 90 days to 1 November 2026. It runs only on BoxLang, the stronger guards are opt-in, and minor releases have renamed public classes without a deprecation period.\n\n**CrewAI.** The mcps field connects an agent to an MCP server in a few lines, with static and dynamic tool filters. Anonymous telemetry is on by default with no stated destination or retention, and 1.15.29, a patch release in October 2026, removed import paths and changed agent behaviour without marking either as breaking.\n\n## Before you call either\n\n### BoxLang AI\n\n1. Set `mcp.stdio.allowedCommands` to the executables you need. The default empty list lets any command start as a stdio MCP server.\n2. Pass `allowedPaths` when you create FileSystemTools. With none, its tools can read, write and delete anywhere the JVM user can.\n3. Attach HumanInTheLoopMiddleware with a checkpointer for tools that write or spend. Approval is opt-in.\n4. Create MCP clients with `MCP()` rather than the class, since 3.6.0 renamed MCPClient to MCPHttpClient without an alias.\n5. Use the `mock` provider to test agent wiring and guardrails with no API key or network.\n\n### CrewAI\n\n1. Set CREWAI_DISABLE_TELEMETRY=true before the first run\n2. Pin an exact version and read the changelog before upgrading. Patch releases have carried breaking changes\n3. Put MCP keys in headers, not in the URL as the docs' Exa example does\n4. Add a PRE_TOOL_CALL hook for any tool that writes or sends\n5. Set use_better_compaction=False if the agent needs whole tool results in its context\n\n## Questions\n\n### Which is better for AI agents, BoxLang AI or CrewAI?\n\nBoxLang AI scores 65.8 (B) on agent readiness against CrewAI's 59 (C), and leads in 2 of 7 scored categories. CrewAI leads on reliability, agent ergonomics, maintenance \u0026 community and transparency \u0026 trust.\n\n### Are BoxLang AI and CrewAI open source?\n\nYes. BoxLang AI is open source (Apache-2.0). CrewAI is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai.json, and with the fewest tokens: https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"boxlang-ai\", \"b\": \"crewai\"}`. From a terminal: `anchor compare boxlang-ai crewai`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/boxlang-ai.json and https://www.anchorterminal.com/api/v1/tools/crewai.json\n\n## Other comparisons with BoxLang AI or CrewAI\n\n- [AgentOS vs BoxLang AI](https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai.md)\n- [AgentOS vs CrewAI](https://www.anchorterminal.com/compare/agentos-vs-crewai.md)\n- [Agno vs BoxLang AI](https://www.anchorterminal.com/compare/agno-vs-boxlang-ai.md)\n- [Agno vs CrewAI](https://www.anchorterminal.com/compare/agno-vs-crewai.md)\n- [BoxLang AI vs Claude Agent SDK](https://www.anchorterminal.com/compare/boxlang-ai-vs-claude-agent-sdk.md)\n- [BoxLang AI vs Cursor Agent SDK](https://www.anchorterminal.com/compare/boxlang-ai-vs-cursor-agent-sdk.md)\n- [BoxLang AI vs Docker Agent](https://www.anchorterminal.com/compare/boxlang-ai-vs-docker-agent.md)\n- [BoxLang AI vs Agent Development Kit (ADK)](https://www.anchorterminal.com/compare/boxlang-ai-vs-google-adk.md)\n- [BoxLang AI vs guilds.run](https://www.anchorterminal.com/compare/boxlang-ai-vs-guilds-run.md)\n- [BoxLang AI vs LangGraph](https://www.anchorterminal.com/compare/boxlang-ai-vs-langgraph.md)\n- [BoxLang AI vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/boxlang-ai-vs-microsoft-agent-framework.md)\n- [BoxLang AI vs OpenAI Agents SDK](https://www.anchorterminal.com/compare/boxlang-ai-vs-openai-agents-sdk.md)\n- [BoxLang AI vs Pydantic AI](https://www.anchorterminal.com/compare/boxlang-ai-vs-pydantic-ai.md)\n- [BoxLang AI vs TradingAgents](https://www.anchorterminal.com/compare/boxlang-ai-vs-tradingagents.md)\n- [Claude Agent SDK vs CrewAI](https://www.anchorterminal.com/compare/claude-agent-sdk-vs-crewai.md)\n- [CrewAI vs Cursor Agent SDK](https://www.anchorterminal.com/compare/crewai-vs-cursor-agent-sdk.md)\n- [CrewAI vs Docker Agent](https://www.anchorterminal.com/compare/crewai-vs-docker-agent.md)\n- [CrewAI vs Agent Development Kit (ADK)](https://www.anchorterminal.com/compare/crewai-vs-google-adk.md)\n- [CrewAI vs guilds.run](https://www.anchorterminal.com/compare/crewai-vs-guilds-run.md)\n- [CrewAI vs LangGraph](https://www.anchorterminal.com/compare/crewai-vs-langgraph.md)\n- [CrewAI vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/crewai-vs-microsoft-agent-framework.md)\n- [CrewAI vs OpenAI Agents SDK](https://www.anchorterminal.com/compare/crewai-vs-openai-agents-sdk.md)\n- [CrewAI vs Pydantic AI](https://www.anchorterminal.com/compare/crewai-vs-pydantic-ai.md)\n- [CrewAI vs TradingAgents](https://www.anchorterminal.com/compare/crewai-vs-tradingagents.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-02", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "BoxLang AI vs CrewAI", "url": "" } ], "description": "BoxLang AI scores 65.8 (B) to CrewAI's 59 (C) for agent frameworks. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "BoxLang AI B 65.8", "CrewAI C 59", "scores" ], "h1": "BoxLang AI vs CrewAI", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/boxlang-ai-vs-crewai", "published": "2026-10-01", "section": "tools", "title": "BoxLang AI vs CrewAI for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-01", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai" }, "tokens": { "markdown": 4550, "slim": 2830 }, "version": 1 }