{ "data": { "a": { "slug": "boxlang-ai", "name": "BoxLang AI", "vendor": "Ortus Solutions", "vendorUrl": "https://ai.boxlang.io", "kind": "framework", "category": "frameworks", "summary": "BoxLang AI (bx-ai) is Ortus Solutions' Apache-2.0 agent framework for BoxLang on the JVM, with agents, tools, memory, RAG, human approval, and an MCP client and server across more than 15 model providers.", "url": "https://www.anchorterminal.com/tools/boxlang-ai", "markdownUrl": "https://www.anchorterminal.com/tools/boxlang-ai.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/boxlang-ai.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/boxlang-ai.json", "dns": "boxlang-ai.grade.anchorterminal.com", "repo": "https://github.com/ortus-boxlang/bx-ai", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "forgebox", "name": "bx-ai" } ], "auth": "none", "authNotes": "A library with no account of its own. Model providers need their own keys, set in boxlang.json or read from each provider's environment variable (OPENAI_API_KEY, CLAUDE_API_KEY and so on). Ollama, Docker Model Runner and the mock provider need no key.", "pricing": "free", "pricingNotes": "Free under Apache-2.0. Model calls are billed by the provider. Ortus sells optional BoxLang runtime plans from $749 a year (Starter, one server) to $4,999 a node a year (BoxLang++), which the readme says add more vector memories and an Agent Dashboard.", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "evidence": "Local library. No x402, MPP or L402 in the repository, the docs or the plans page, checked 1 November 2026.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-01" }, "docsUrl": "https://ai.ortusbooks.com", "llmsTxt": "https://ai.ortusbooks.com/llms.txt", "capabilities": [ "agent.framework", "agent.multi-agent", "agent.mcp-client" ], "tags": [ "framework", "boxlang", "jvm", "open-source", "apache-2.0", "mcp", "llms-txt", "free" ], "lastRelease": "2026-10-20", "graded": true, "anchor": { "graded": true, "score": 65.8, "grade": "B", "agentReady": false, "rank": 328, "ranked": true, "rankOf": 1260, "categoryRank": 10, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 83, "payments": 50, "reliability": 66, "schema": 71, "security": 71, "transparency": 70 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -3, "negativeNotes": [ "2026-10-20. -3, a breaking change in a minor release without advance notice. 3.6.0 renamed the `MCPClient` class to `MCPHttpClient` with no alias, so code that created the class directly must move to `MCP( url )`. The changelog's Migration section says so on release day. 3.5.0 (11 September) likewise raised the minimum BoxLang runtime from 1.8.0 to 1.14.0. One term at the floor, as google-adk's minor-release breaking changes took. https://github.com/ortus-boxlang/bx-ai/blob/main/changelog.md" ], "verdict": "A JVM agent framework with human approval, guardrail middleware and an MCP client over HTTP and stdio, all enforced in code, with three releases in the 90 days to 1 November 2026. It runs only on BoxLang, the stronger guards are opt-in, and minor releases have renamed public classes without a deprecation period.", "bestFor": "Teams already running BoxLang or modernising CFML on the JVM who want agents, RAG and MCP with approval and guardrails in the same language", "strengths": [ "Human approval enforced in code, with suspended runs that resume without replaying the model call, five approval policies and durable grants", "Untrusted context is fenced and inbound text Unicode-normalised by default, with opt-in sanitiser, LLM-judge and output-redaction middleware", "stdio MCP servers start without a shell, with an allowedCommands setting, per-server tool filters and prefixes, and restart limits", "Three releases in the 90 days to 1 November 2026 (3.4.0, 3.5.0, 3.6.0), with a Keep a Changelog file and migration notes", "llms.txt and a Markdown copy of every docs page, plus about 100 runnable example scripts in the repository" ], "weaknesses": [ "Runs only on BoxLang, a JVM language, so it suits teams already on BoxLang or CFML rather than Python or TypeScript stacks", "Minor releases carry breaking changes. 3.6.0 renamed MCPClient to MCPHttpClient with no alias, noted on release day", "The stdio command allow-list, filesystem tool paths and MCP server authentication are all open by default", "Docs lag the code. On 1 November the 3.6.0 release page still read unreleased and didn't mention the stdio MCP client", "No OpenTelemetry export found. Tracing is through BoxLang interception points, logging and flight-recorder middleware" ], "agentNotes": [ "Set `mcp.stdio.allowedCommands` to the executables you need. The default empty list lets any command start as a stdio MCP server.", "Pass `allowedPaths` when you create FileSystemTools. With none, its tools can read, write and delete anywhere the JVM user can.", "Attach HumanInTheLoopMiddleware with a checkpointer for tools that write or spend. Approval is opt-in.", "Create MCP clients with `MCP()` rather than the class, since 3.6.0 renamed MCPClient to MCPHttpClient without an alias.", "Use the `mock` provider to test agent wiring and guardrails with no API key or network." ], "metrics": { "kind": "library", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 65.8 } ], "editorialScores": { "ergonomics": 74, "maintenance": 83, "payments": 50, "reliability": 66, "schema": 71, "security": 71, "transparency": 65 }, "provenanceScore": 74, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "install-bx-module bx-ai # in a web app: box install bx-ai" }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/boxlang-ai" }, "sameCompany": [ "bx-playwright" ], "area": "frameworks", "provenance": { "legalEntity": "Ortus Solutions, Corp.", "domain": "ortussolutions.com", "domainRegistered": "2006-04-12", "endpointOnVendorDomain": null, "terms": "https://github.com/ortus-boxlang/bx-ai/blob/main/src/main/resources/LICENSE", "privacy": "https://www.ortussolutions.com/about-us/ortus-privacy-policy", "statusPage": "", "changelog": "https://github.com/ortus-boxlang/bx-ai/blob/main/changelog.md", "securityTxt": "none", "checked": "2026-11-01", "notes": [ "The readme names Ortus Solutions, Corp as copyright holder, and box.json names Ortus Solutions as author.", "domainRegistered is from Verisign's RDAP record for ortussolutions.com. rdap.org has no record for boxlang.io, so the product domain's date wasn't read.", "security.txt answers 410 on www.ortussolutions.com and boxlang.io. CONTRIBUTING.md asks for vulnerability reports to security@ortussolutions.com.", "The Apache 2.0 licence stands in for terms. The privacy policy covers Ortus's website and customers, not the module.", "Local software, so there is no endpoint or status page." ], "score": 74 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/boxlang-ai.json" }, "answer": "BoxLang AI scores 65.8 (B) on agent readiness against guilds.run's 56.6 (C), and leads in 6 of 7 scored categories. guilds.run leads on payments \u0026 pricing.", "b": { "slug": "guilds-run", "name": "guilds.run", "vendor": "Cigale AI", "vendorUrl": "https://guilds.run", "kind": "framework", "category": "frameworks", "summary": "Open-source, self-hosted system from Cigale AI for standing teams of AI agents, each with its own role, model and tools. A guild shares chat, notes and tables, and every run keeps the prompt, tool calls and memory changes.", "url": "https://www.anchorterminal.com/tools/guilds-run", "markdownUrl": "https://www.anchorterminal.com/tools/guilds-run.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/guilds-run.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/guilds-run.json", "dns": "guilds-run.grade.anchorterminal.com", "repo": "https://github.com/CigaleAI/guilds", "license": "AGPL-3.0-only", "transports": [], "packages": [], "auth": "api-key", "authNotes": "The box has no model key of its own. Each organisation pastes a key for OpenAI, OpenRouter, xAI, DeepInfra or Kimi Code, or points at a local OpenAI-compatible endpoint, and the key is sent only to that provider. The web app on 127.0.0.1:8080 has no login by default; whoever reaches the port is the operator. AUTH_MODE=trusted-header takes identity from an authenticating proxy with a shared secret.", "pricing": "free", "pricingNotes": "Free under AGPL-3.0 to run yourself, with model usage billed by your own provider and no spend cap set by guilds.run. A hosted edition from $19 a month is listed as coming soon and not available on 14 October 2026 (https://www.guilds.run/pricing).", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the repository, the docs or on guilds.run (checked 2026-10-14).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 57, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-14" }, "docsUrl": "https://docs.guilds.run/", "capabilities": [ "agent.framework", "agent.multi-agent", "agent.mcp-client", "agent.durable" ], "tags": [ "framework", "open-source", "self-hosted", "local", "docker", "typescript", "free", "no-card", "pre-1.0" ], "graded": true, "anchor": { "graded": true, "score": 56.6, "grade": "C", "agentReady": false, "rank": 761, "ranked": true, "rankOf": 1260, "categoryRank": 14, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 41, "payments": 60, "reliability": 53, "schema": 58, "security": 68, "transparency": 54 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-14" }, "negative": -2, "negativeNotes": [ "2026-10-14. The home page says each agent has its own computer, and its script example reads sandboxed in scout's workspace. Since the change of 13 October 2026 (pull request #8, per-org machines), agents are placed on shared machines, and the vendor's own register (SEC-24, open and accepted) says agents on one machine can read each other's homes, git tokens, browser sessions and running commands' environments. The footer also links to terms and privacy pages that return 404. The docs state the shared-machine risk plainly, so 2 points. https://www.guilds.run/ and https://github.com/CigaleAI/guilds/blob/main/docs/architecture/security-register.md" ], "verdict": "A self-hosted multi-agent system that records each run's prompt, tool calls and memory changes, with per-agent models and tools and no telemetry by default. Public since 9 October 2026, it has no tagged release or published package, its own security register lists 13 open issues, and the site's terms and privacy links return 404.", "bestFor": "A person or small team that wants a standing, inspectable team of agents with schedules, shared tables and a web app, run on one machine, and is comfortable tracking main.", "strengths": [ "Every run stores the prompt the model saw, each tool call and result, and versioned memory with the author of each change", "Free under AGPL-3.0, with Sentry off unless SENTRY_DSN is set and no other telemetry found in the source", "MCP tools that write or are marked destructive start Off for a new login, and each agent is offered only the tools turned on for it", "CI runs typecheck, lint, unit tests and a smoke test of the Compose stack, and all 13 runs on main passed", "A public security register records 26 issues with status, exposure and residual risk" ], "weaknesses": [ "No tagged release, version number, changelog or published image. Users install whatever is on main", "13 issues in the vendor's security register are open, among them shared machines (SEC-24), root shells (SEC-6) and prompt injection into coding agents (SEC-8)", "No login on the default box. Whoever reaches port 8080 is the operator, and remote use needs a proxy or tailnet", "Terms and privacy links on guilds.run return 404, and no privacy statement for the software was found", "Five days of public history on 14 October 2026, with 57 stars and eight issues and pull requests" ], "agentNotes": [ "Keep the box on loopback or behind an authenticating proxy with AUTH_MODE=trusted-header. The default mode does not authenticate", "Put agents that hold different secrets or GitHub tokens on different machines. Agents on one machine can read each other's homes and tokens", "Back up the .env file written by ./setup.sh. It holds the only copy of the key that encrypts stored credentials", "Set a spend limit at your model provider. guilds.run sets no spend cap, and max_tool_calls defaults to 50 per run", "Pin a commit of main when you deploy. There are no tagged releases or versioned images yet" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 56.6 } ], "editorialScores": { "ergonomics": 67, "maintenance": 41, "payments": 60, "reliability": 53, "schema": 58, "security": 68, "transparency": 63 }, "provenanceScore": 44, "checked": { "categories": { "ergonomics": "2026-10-14", "maintenance": "2026-10-14", "payments": "2026-10-14", "reliability": "2026-10-14", "schema": "2026-10-14", "security": "2026-10-14", "transparency": "2026-10-14" }, "last": "2026-10-14", "lastMoved": "2026-10-27", "oldest": "2026-10-14", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "git clone https://github.com/CigaleAI/guilds.git \u0026\u0026 cd guilds \u0026\u0026 ./setup.sh \u0026\u0026 docker compose up --detach --wait" }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/guilds-run" }, "area": "frameworks", "provenance": { "legalEntity": "Cigale AI", "domain": "guilds.run", "domainRegistered": "2026-09-19", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-14", "notes": [ "The site footer says Cigale is the company behind guilds.run, and THIRD_PARTY_NOTICES.md reads copyright Cigale AI. No legal form or address was found.", "The footer links to https://www.guilds.run/terms and https://www.guilds.run/privacy, and both returned 404 on 14 October 2026.", "www.guilds.run/.well-known/security.txt returns 404. The repository has SECURITY.md with GitHub private vulnerability reporting.", "RDAP gives guilds.run a registration date of 2026-09-19.", "The GitHub organisation CigaleAI was created on 2025-02-17 and is not verified." ], "score": 44 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/guilds-run.json", "live": { "slug": "guilds-run", "githubStars": 67, "securityTxt": { "url": "https://guilds.run/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-01T15:43:45.926638353Z" }, "domain": { "domain": "guilds.run", "registered": "2026-09-19", "source": "https://rdap.identitydigital.services/rdap/domain/guilds.run", "checkedAt": "2026-11-01T14:12:07.621535185Z" }, "pages": [ { "url": "https://www.guilds.run/pricing", "kind": "pricing", "status": 304, "checkedAt": "2026-11-01T07:00:07.922096005Z", "changedAt": "2026-10-15T22:10:00.990326283Z", "fingerprint": "e3efa801ad24" } ], "github": { "repo": "cigaleai/guilds", "checkedAt": "2026-10-26T07:17:53.658031094Z", "stars": 65, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-25T16:55:50Z", "openIssues": 0, "openPRs": 0, "issuesOpened90d": 5, "issuesClosed90d": 5, "prsMerged90d": 9, "ci": { "branch": "main", "runs": 40, "success": 39, "failure": 1, "other": 0, "latest": "success", "latestAt": "2026-10-25T17:00:27Z" }, "replies": { "sampled": 5, "unanswered": 0, "medianDays": 0 } }, "updatedAt": "2026-11-01T17:04:02.539141095Z" } }, "edges": [ { "by": 42, "category": "maintenance", "leads": "boxlang-ai", "name": "Maintenance \u0026 community", "reasons": { "a": "3.6.0 on 2026-10-20 (30). Three releases in the 90 days to 1 November, 3.4.0 on 1 September, 3.5.0 on 11 September and 3.6.0 on 20 October (20). 79 commits on the development branch in those 90 days from Luis Majano, Doug Cain, Copilot and dependency bots, with pull requests up to #326 merged on 1 November. Issue reply times couldn't be read (10 of 25). The ForgeBox package is current at 3.6.0 (15). Dependabot for Gradle monthly and Actions quarterly, tests on pull requests and development, and a format check (8 of 10). 83 in all.", "b": "No tagged release. Main, which the install clones and SECURITY.md names as the supported version, last changed on 13 October 2026, so 20 of 30 rather than full marks for a release. No releases or dated changelog entries (0). Eight issues and pull requests, all closed, the three issues closed within an hour, one with two comments, on five days of history (15 of 25). No published package (0). CI on every push with a frozen pnpm lockfile, no Dependabot configuration in the repository (6 of 10)." }, "scores": { "a": 83, "b": 41 } }, { "by": 16, "category": "transparency", "leads": "boxlang-ai", "name": "Transparency \u0026 trust", "reasons": { "a": "Apache-2.0, OSI approved, though the licence file sits in src/main/resources rather than the repository root (30). The FAQ says prompts and history go to the chosen cloud provider and that Ollama keeps data local, and we found no telemetry in the source, but there's no statement for the module of what, if anything, Ortus receives. Ortus's privacy policy covers its website and customers and says data is collected when you use its products without naming which (15 of 30). Migration notes are dated in the changelog, and default models were moved off a Groq model on its removal date, but there's no written deprecation policy or support window (10 of 20). No telemetry statement either way in the docs (10 of 20). 65 in all.", "b": "AGPL-3.0-only, OSI approved (30). No privacy policy or terms. The footer links to both and they return 404. The docs say where data lives (PostgreSQL and STATE_ROOT on your host), that model keys go only to their provider, and that stored credentials are encrypted under one master key in .env (12 of 30). No deprecation policy or notices. The security register is dated (3 of 20). Sentry is opt-in and documented on the Configure page, and the Graft telemetry setting and its version lookup are disclosed on the code tools page (18 of 20)." }, "scores": { "a": 70, "b": 54 } }, { "by": 13, "category": "reliability", "leads": "boxlang-ai", "name": "Reliability", "reasons": { "a": "Read with the local-software lines. Official package on ForgeBox, installed with `install-bx-module bx-ai` or `box install bx-ai`, with BoxLang 1.14.0 or later in box.json and JDK 21 in CONTRIBUTING.md, but the 3.6 announcement says BoxLang 1.18 or later (18 of 20). tests.yml runs about 140 test classes against Ollama and the vector stores in Docker Compose, and against paid providers on development and releases, on pull requests and pushes to development. Whether runs pass wasn't read, since WebFetch refused github.com (15 of 25). Open issues and replies weren't read for the same reason. The changelog closes issues #182 to #259 in 3.3.1 to 3.4.0, and bugs also go to Ortus's Jira (10 of 25). Keep a Changelog with semantic versioning stated and Migration sections, but breaking changes ship in minor releases (8 of 15). 3.6.0, past 1.0 (15). 66 in all.", "b": "Read with the local-software lines, because the owner runs it. Docker with Compose is the stated requirement, and the install is a git clone of main plus ./setup.sh, which builds the images. No package, tagged release or published image exists, since the image workflow runs only on a v* tag and there are none (10 of 20). The verify workflow runs typecheck, lint, orchestrator, UI and web tests and a smoke test of the Compose stack, and all 13 runs on main from 9 to 13 October 2026 passed. The clone has 196 test files (25). No open issues, and the three issues filed were closed within an hour, on five days of public history (18 of 25). No version numbers, tags or changelog (0). Not versioned or declared stable (0)." }, "scores": { "a": 66, "b": 53 } }, { "by": 13, "category": "schema", "leads": "boxlang-ai", "name": "Schema \u0026 documentation", "reasons": { "a": "Framework reading. A reference page for each built-in function with its arguments, and tool schemas generated from typed function arguments with required fields since 3.3.1. BoxLang is dynamically typed and no published API reference was found, though the repository builds DocBox API docs (15 of 25). llms.txt with about 150 entries and a Markdown copy of every page (10). The FAQ says when to use aiChat() or aiAgent() and the security guide says which guards to use when, though some FAQ links still say coming soon for pages that exist (14 of 20). Tool arguments are typed with required lists, and stdio options a server doesn't have throw InvalidArgument (11 of 15). About 100 example scripts in the repository and a gallery on ai.boxlang.io, but the production guide catches RateLimitException, TimeoutException and AuthenticationException, which the module's source never throws, and there is no exception reference (9 of 15). Keep a Changelog and a release-history page per version, but the 3.6.0 page still read unreleased on 1 November and two old versions appear twice in the changelog (12 of 15). 71 in all.", "b": "Framework reading. No OpenAPI document for the HTTP API. The recipe format guilds.recipe v2 rejects unknown keys, and connector manifests are validated with TypeBox at load (12 of 25). No llms.txt on guilds.run or docs.guilds.run (404). The docs are Markdown in the repository with an AGENTS.md (5 of 10). Pages state what the code does today, which page to read for which job, and the trust boundary in numbered rules (15 of 20). Tool input schemas, recipe caps and typed manifest fields (11 of 15). The getting-started walk says what you should see at each step, and the Operate page explains each startup error message (11 of 15). No changelog or versioned releases. The security register is the one page that keeps dated history (4 of 15)." }, "scores": { "a": 71, "b": 58 } }, { "by": 10, "category": "payments", "leads": "guilds-run", "name": "Payments \u0026 pricing", "reasons": { "a": "Self-hosted rule, scored on the paid option. No payment protocol (0). BoxLang runtime plans are public without a login, Starter $749 a year and BoxLang+ and BoxLang++ from $1,999 to $4,999 a server or node a year, plan pricing rather than per unit (10). The Apache-2.0 module installs with no card (20) and no account or sign-up (20). 50 in all.", "b": "No payment protocol (0). Self-hosted rule. The software is free under AGPL-3.0 with nothing to buy today (20), needs no card (20) and needs no account with Cigale AI (20). The hosted edition at $19 a month is listed as coming soon and was not scored." }, "scores": { "a": 50, "b": 60 } }, { "by": 7, "category": "ergonomics", "leads": "boxlang-ai", "name": "Agent ergonomics", "reasons": { "a": "Framework reading, scored on what a tool-calling agent with MCP takes. An agent with an MCP server is one `aiAgent()` call with `mcpServers`, and `toolFilter` and `prefix` limit what each server adds. Skills can load lazily, but `autoLoadSkills` is on by default and injects every SKILL.md under /.agents/skills into every agent (20 of 25). MaxToolCallsMiddleware caps tool calls, window and summary memory bound history by messages or tokens, `withMaxResponseBytes` caps MCP answers and `listTools( cursor )` pages tools (17 of 20). Named exceptions (ProviderError, UnsupportedCapability, InvalidArgument, MCPCommandRefused, BXAI.SecurityViolation) but no reference page, and the changelog says a timed-out call still surfaces as a JSON parse error (12 of 20). RetryMiddleware with exponential backoff, approval resumes that don't replay the model call or rerun executed tools, and a stdio client that never repeats an in-flight call. MCP tool annotations such as readOnlyHint aren't read (15 of 20). An agent needs a name and works with defaults, and a mock provider runs with no key, but it is one language (10 of 15). 74 in all.", "b": "Framework reading, scored on what it takes to run a tool-calling team with MCP. No code is needed. Three commands and a model key start a guild, and each agent is offered only the tools turned on for it (18 of 25). max_tool_calls defaults to 50 per run, max_input_tokens trims old tool results and hands off to a new run, and remaining_tool_calls is appended to each result after the platform cap (15 of 20). Runs end with named codes such as generation.max_tool_calls and workspace.full, and interrupted tool calls get an error result so the next model request is valid (13 of 20). readOnlyHint and destructiveHint are stored for each MCP tool and writing tools start Off. Startup does not replay a model call (14 of 20). Sensible defaults and a guided first-run dialog, but it is an application with an HTTP API and no SDK in any language (7 of 15)." }, "scores": { "a": 74, "b": 67 } } ], "facts": [ { "a": "Agent framework", "b": "Agent framework", "name": "Kind" }, { "a": "Ortus Solutions", "b": "Cigale AI", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "API key", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "AGPL-3.0-only", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-10-20", "b": "none", "name": "Last release" }, { "a": "no date given", "b": "no document linked", "name": "Terms last updated" }, { "a": "no date given", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not read yet", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not read yet", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "57 stars", "name": "Popularity" } ], "faq": [ { "answer": "BoxLang AI scores 65.8 (B) on agent readiness against guilds.run's 56.6 (C), and leads in 6 of 7 scored categories. guilds.run leads on payments \u0026 pricing.", "question": "Which is better for AI agents, BoxLang AI or guilds.run?" }, { "answer": "Yes. BoxLang AI is open source (Apache-2.0). guilds.run is open source (AGPL-3.0-only).", "question": "Are BoxLang AI and guilds.run open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 66 against 53", "Schema \u0026 documentation, 71 against 58", "Agent ergonomics, 74 against 67", "Maintenance \u0026 community, 83 against 41", "Transparency \u0026 trust, 70 against 54" ], "also": [ "No key needed to call it" ], "goodFor": "Teams already running BoxLang or modernising CFML on the JVM who want agents, RAG and MCP with approval and guardrails in the same language", "slug": "boxlang-ai", "watchFor": "Runs only on BoxLang, a JVM language, so it suits teams already on BoxLang or CFML rather than Python or TypeScript stacks" }, { "aheadOn": [ "Payments \u0026 pricing, 60 against 50" ], "also": [ "Free to start without a card" ], "goodFor": "A person or small team that wants a standing, inspectable team of agents with schedules, shared tables and a web app, run on one machine, and is comfortable tracking main.", "slug": "guilds-run", "watchFor": "No tagged release, version number, changelog or published image. Users install whatever is on main" } ], "history": { "boxlang-ai": null, "guilds-run": [ { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 56.5, "fromGrade": "C", "to": 56.6, "toGrade": "C" } ] }, "job": { "capability": "agent.framework", "name": "Agent frameworks" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai.json", "title": "AgentOS vs BoxLang AI", "url": "https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-guilds-run.json", "title": "AgentOS vs guilds.run", "url": "https://www.anchorterminal.com/compare/agentos-vs-guilds-run" }, { "json": "https://www.anchorterminal.com/compare/agno-vs-boxlang-ai.json", "title": "Agno vs BoxLang AI", "url": "https://www.anchorterminal.com/compare/agno-vs-boxlang-ai" }, { "json": "https://www.anchorterminal.com/compare/agno-vs-guilds-run.json", "title": "Agno vs guilds.run", "url": "https://www.anchorterminal.com/compare/agno-vs-guilds-run" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-claude-agent-sdk.json", "title": "BoxLang AI vs Claude Agent SDK", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-claude-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai.json", "title": "BoxLang AI vs CrewAI", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-cursor-agent-sdk.json", "title": "BoxLang AI vs Cursor Agent SDK", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-cursor-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-docker-agent.json", "title": "BoxLang AI vs Docker Agent", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-docker-agent" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-google-adk.json", "title": "BoxLang AI vs Agent Development Kit (ADK)", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-google-adk" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-langgraph.json", "title": "BoxLang AI vs LangGraph", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-microsoft-agent-framework.json", "title": "BoxLang AI vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-openai-agents-sdk.json", "title": "BoxLang AI vs OpenAI Agents SDK", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-openai-agents-sdk" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-pydantic-ai.json", "title": "BoxLang AI vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-tradingagents.json", "title": "BoxLang AI vs TradingAgents", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-tradingagents" }, { "json": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-guilds-run.json", "title": "Claude Agent SDK vs guilds.run", "url": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-guilds-run" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-guilds-run.json", "title": "CrewAI vs guilds.run", "url": "https://www.anchorterminal.com/compare/crewai-vs-guilds-run" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-guilds-run.json", "title": "Cursor Agent SDK vs guilds.run", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-guilds-run" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-guilds-run.json", "title": "Docker Agent vs guilds.run", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-guilds-run" }, { "json": "https://www.anchorterminal.com/compare/google-adk-vs-guilds-run.json", "title": "Agent Development Kit (ADK) vs guilds.run", "url": "https://www.anchorterminal.com/compare/google-adk-vs-guilds-run" }, { "json": "https://www.anchorterminal.com/compare/guilds-run-vs-langgraph.json", "title": "guilds.run vs LangGraph", "url": "https://www.anchorterminal.com/compare/guilds-run-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/guilds-run-vs-microsoft-agent-framework.json", "title": "guilds.run vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/guilds-run-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/guilds-run-vs-openai-agents-sdk.json", "title": "guilds.run vs OpenAI Agents SDK", "url": "https://www.anchorterminal.com/compare/guilds-run-vs-openai-agents-sdk" }, { "json": "https://www.anchorterminal.com/compare/guilds-run-vs-pydantic-ai.json", "title": "guilds.run vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/guilds-run-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/guilds-run-vs-tradingagents.json", "title": "guilds.run vs TradingAgents", "url": "https://www.anchorterminal.com/compare/guilds-run-vs-tradingagents" } ], "panel": null, "scores": [ { "boxlang-ai": 66, "by": 13, "edge": "boxlang-ai", "guilds-run": 53, "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "boxlang-ai": 71, "by": 13, "edge": "boxlang-ai", "guilds-run": 58, "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "boxlang-ai": 74, "by": 7, "edge": "boxlang-ai", "guilds-run": 67, "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "boxlang-ai": 71, "by": 3, "edge": "boxlang-ai", "guilds-run": 68, "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "boxlang-ai": 50, "by": 10, "edge": "guilds-run", "guilds-run": 60, "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "boxlang-ai": 83, "by": 42, "edge": "boxlang-ai", "guilds-run": 41, "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "boxlang-ai": 70, "by": 16, "edge": "boxlang-ai", "guilds-run": 54, "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "BoxLang AI scores 65.8 (B) on agent readiness against guilds.run's 56.6 (C), and leads in 6 of 7 scored categories. guilds.run leads on payments \u0026 pricing. Both do agent frameworks.", "tasks": null, "tutorials": [], "verdicts": { "boxlang-ai": "A JVM agent framework with human approval, guardrail middleware and an MCP client over HTTP and stdio, all enforced in code, with three releases in the 90 days to 1 November 2026. It runs only on BoxLang, the stronger guards are opt-in, and minor releases have renamed public classes without a deprecation period.", "guilds-run": "A self-hosted multi-agent system that records each run's prompt, tool calls and memory changes, with per-agent models and tools and no telemetry by default. Public since 9 October 2026, it has no tagged release or published package, its own security register lists 13 open issues, and the site's terms and privacy links return 404." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/boxlang-ai-vs-guilds-run", "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-guilds-run.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/boxlang-ai-vs-guilds-run.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/boxlang-ai-vs-guilds-run.min.md" }, "markdown": "BoxLang AI scores 65.8 (B) on agent readiness against guilds.run's 56.6 (C), and leads in 6 of 7 scored categories. guilds.run leads on payments \u0026 pricing. Both do agent frameworks.\n\n- BoxLang AI: grade B, 65.8/100, rank #328 of 1260. Markdown https://www.anchorterminal.com/tools/boxlang-ai.md · JSON https://www.anchorterminal.com/api/v1/tools/boxlang-ai.json\n- guilds.run: grade C, 56.6/100, rank #761 of 1260. Markdown https://www.anchorterminal.com/tools/guilds-run.md · JSON https://www.anchorterminal.com/api/v1/tools/guilds-run.json\n- Best agent frameworks and SDKs: https://www.anchorterminal.com/best/frameworks/index.md\n- All 91 frameworks comparisons: https://www.anchorterminal.com/compare/frameworks/index.md\n\n## Which one, for what\n\n### BoxLang AI (B)\n\nGood for: Teams already running BoxLang or modernising CFML on the JVM who want agents, RAG and MCP with approval and guardrails in the same language\n\nAhead on:\n- Reliability, 66 against 53\n- Schema \u0026 documentation, 71 against 58\n- Agent ergonomics, 74 against 67\n- Maintenance \u0026 community, 83 against 41\n- Transparency \u0026 trust, 70 against 54\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: Runs only on BoxLang, a JVM language, so it suits teams already on BoxLang or CFML rather than Python or TypeScript stacks\n\n### guilds.run (C)\n\nGood for: A person or small team that wants a standing, inspectable team of agents with schedules, shared tables and a web app, run on one machine, and is comfortable tracking main.\n\nAhead on:\n- Payments \u0026 pricing, 60 against 50\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: No tagged release, version number, changelog or published image. Users install whatever is on main\n\n\n## Why the edge\n\n### Maintenance \u0026 community: BoxLang AI +42\n\n- BoxLang AI (83): 3.6.0 on 2026-10-20 (30). Three releases in the 90 days to 1 November, 3.4.0 on 1 September, 3.5.0 on 11 September and 3.6.0 on 20 October (20). 79 commits on the development branch in those 90 days from Luis Majano, Doug Cain, Copilot and dependency bots, with pull requests up to #326 merged on 1 November. Issue reply times couldn't be read (10 of 25). The ForgeBox package is current at 3.6.0 (15). Dependabot for Gradle monthly and Actions quarterly, tests on pull requests and development, and a format check (8 of 10). 83 in all.\n- guilds.run (41): No tagged release. Main, which the install clones and SECURITY.md names as the supported version, last changed on 13 October 2026, so 20 of 30 rather than full marks for a release. No releases or dated changelog entries (0). Eight issues and pull requests, all closed, the three issues closed within an hour, one with two comments, on five days of history (15 of 25). No published package (0). CI on every push with a frozen pnpm lockfile, no Dependabot configuration in the repository (6 of 10).\n\n### Transparency \u0026 trust: BoxLang AI +16\n\n- BoxLang AI (70): Apache-2.0, OSI approved, though the licence file sits in src/main/resources rather than the repository root (30). The FAQ says prompts and history go to the chosen cloud provider and that Ollama keeps data local, and we found no telemetry in the source, but there's no statement for the module of what, if anything, Ortus receives. Ortus's privacy policy covers its website and customers and says data is collected when you use its products without naming which (15 of 30). Migration notes are dated in the changelog, and default models were moved off a Groq model on its removal date, but there's no written deprecation policy or support window (10 of 20). No telemetry statement either way in the docs (10 of 20). 65 in all.\n- guilds.run (54): AGPL-3.0-only, OSI approved (30). No privacy policy or terms. The footer links to both and they return 404. The docs say where data lives (PostgreSQL and STATE_ROOT on your host), that model keys go only to their provider, and that stored credentials are encrypted under one master key in .env (12 of 30). No deprecation policy or notices. The security register is dated (3 of 20). Sentry is opt-in and documented on the Configure page, and the Graft telemetry setting and its version lookup are disclosed on the code tools page (18 of 20).\n\n### Reliability: BoxLang AI +13\n\n- BoxLang AI (66): Read with the local-software lines. Official package on ForgeBox, installed with `install-bx-module bx-ai` or `box install bx-ai`, with BoxLang 1.14.0 or later in box.json and JDK 21 in CONTRIBUTING.md, but the 3.6 announcement says BoxLang 1.18 or later (18 of 20). tests.yml runs about 140 test classes against Ollama and the vector stores in Docker Compose, and against paid providers on development and releases, on pull requests and pushes to development. Whether runs pass wasn't read, since WebFetch refused github.com (15 of 25). Open issues and replies weren't read for the same reason. The changelog closes issues #182 to #259 in 3.3.1 to 3.4.0, and bugs also go to Ortus's Jira (10 of 25). Keep a Changelog with semantic versioning stated and Migration sections, but breaking changes ship in minor releases (8 of 15). 3.6.0, past 1.0 (15). 66 in all.\n- guilds.run (53): Read with the local-software lines, because the owner runs it. Docker with Compose is the stated requirement, and the install is a git clone of main plus ./setup.sh, which builds the images. No package, tagged release or published image exists, since the image workflow runs only on a v* tag and there are none (10 of 20). The verify workflow runs typecheck, lint, orchestrator, UI and web tests and a smoke test of the Compose stack, and all 13 runs on main from 9 to 13 October 2026 passed. The clone has 196 test files (25). No open issues, and the three issues filed were closed within an hour, on five days of public history (18 of 25). No version numbers, tags or changelog (0). Not versioned or declared stable (0).\n\n### Schema \u0026 documentation: BoxLang AI +13\n\n- BoxLang AI (71): Framework reading. A reference page for each built-in function with its arguments, and tool schemas generated from typed function arguments with required fields since 3.3.1. BoxLang is dynamically typed and no published API reference was found, though the repository builds DocBox API docs (15 of 25). llms.txt with about 150 entries and a Markdown copy of every page (10). The FAQ says when to use aiChat() or aiAgent() and the security guide says which guards to use when, though some FAQ links still say coming soon for pages that exist (14 of 20). Tool arguments are typed with required lists, and stdio options a server doesn't have throw InvalidArgument (11 of 15). About 100 example scripts in the repository and a gallery on ai.boxlang.io, but the production guide catches RateLimitException, TimeoutException and AuthenticationException, which the module's source never throws, and there is no exception reference (9 of 15). Keep a Changelog and a release-history page per version, but the 3.6.0 page still read unreleased on 1 November and two old versions appear twice in the changelog (12 of 15). 71 in all.\n- guilds.run (58): Framework reading. No OpenAPI document for the HTTP API. The recipe format guilds.recipe v2 rejects unknown keys, and connector manifests are validated with TypeBox at load (12 of 25). No llms.txt on guilds.run or docs.guilds.run (404). The docs are Markdown in the repository with an AGENTS.md (5 of 10). Pages state what the code does today, which page to read for which job, and the trust boundary in numbered rules (15 of 20). Tool input schemas, recipe caps and typed manifest fields (11 of 15). The getting-started walk says what you should see at each step, and the Operate page explains each startup error message (11 of 15). No changelog or versioned releases. The security register is the one page that keeps dated history (4 of 15).\n\n### Payments \u0026 pricing: guilds.run +10\n\n- BoxLang AI (50): Self-hosted rule, scored on the paid option. No payment protocol (0). BoxLang runtime plans are public without a login, Starter $749 a year and BoxLang+ and BoxLang++ from $1,999 to $4,999 a server or node a year, plan pricing rather than per unit (10). The Apache-2.0 module installs with no card (20) and no account or sign-up (20). 50 in all.\n- guilds.run (60): No payment protocol (0). Self-hosted rule. The software is free under AGPL-3.0 with nothing to buy today (20), needs no card (20) and needs no account with Cigale AI (20). The hosted edition at $19 a month is listed as coming soon and was not scored.\n\n### Agent ergonomics: BoxLang AI +7\n\n- BoxLang AI (74): Framework reading, scored on what a tool-calling agent with MCP takes. An agent with an MCP server is one `aiAgent()` call with `mcpServers`, and `toolFilter` and `prefix` limit what each server adds. Skills can load lazily, but `autoLoadSkills` is on by default and injects every SKILL.md under /.agents/skills into every agent (20 of 25). MaxToolCallsMiddleware caps tool calls, window and summary memory bound history by messages or tokens, `withMaxResponseBytes` caps MCP answers and `listTools( cursor )` pages tools (17 of 20). Named exceptions (ProviderError, UnsupportedCapability, InvalidArgument, MCPCommandRefused, BXAI.SecurityViolation) but no reference page, and the changelog says a timed-out call still surfaces as a JSON parse error (12 of 20). RetryMiddleware with exponential backoff, approval resumes that don't replay the model call or rerun executed tools, and a stdio client that never repeats an in-flight call. MCP tool annotations such as readOnlyHint aren't read (15 of 20). An agent needs a name and works with defaults, and a mock provider runs with no key, but it is one language (10 of 15). 74 in all.\n- guilds.run (67): Framework reading, scored on what it takes to run a tool-calling team with MCP. No code is needed. Three commands and a model key start a guild, and each agent is offered only the tools turned on for it (18 of 25). max_tool_calls defaults to 50 per run, max_input_tokens trims old tool results and hands off to a new run, and remaining_tool_calls is appended to each result after the platform cap (15 of 20). Runs end with named codes such as generation.max_tool_calls and workspace.full, and interrupted tool calls get an error result so the next model request is valid (13 of 20). readOnlyHint and destructiveHint are stored for each MCP tool and writing tools start Off. Startup does not replay a model call (14 of 20). Sensible defaults and a guided first-run dialog, but it is an application with an HTTP API and no SDK in any language (7 of 15).\n\n## Score by category\n\n| Category | Weight | BoxLang AI | guilds.run | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 66 | 53 | BoxLang AI +13 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 71 | 58 | BoxLang AI +13 |\n| Agent ergonomics | 13% (16.2 this run) | 74 | 67 | BoxLang AI +7 |\n| Security \u0026 auth | 14% (17.5 this run) | 71 | 68 | BoxLang AI +3 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 50 | 60 | guilds.run +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 83 | 41 | BoxLang AI +42 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 70 | 54 | BoxLang AI +16 |\n| Negative events | ≤15 | -3 | -2 | |\n| **Total** | | **65.8 · B** | **56.6 · C** | |\n\n## Facts side by side\n\n| Fact | BoxLang AI | guilds.run |\n| --- | --- | --- |\n| Kind | Agent framework | Agent framework |\n| Vendor | Ortus Solutions | Cigale AI |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | API key |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | Apache-2.0 | AGPL-3.0-only |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-10-20 | none |\n| Terms last updated | no date given | no document linked |\n| Privacy policy last updated | no date given | no document linked |\n| Customer content may train models | not found in the text | not read yet |\n| Terms restrict automated access | not found in the text | not read yet |\n| Terms restrict benchmarking | not found in the text | not read yet |\n| Terms or service can change without notice | not found in the text | not read yet |\n| Arbitration or class-action waiver | not found in the text | not read yet |\n| Popularity | none | 57 stars |\n\n## How the scores have moved\n\n### BoxLang AI\n\nNo score change since it was listed.\n\n### guilds.run\n\n- +0.1 on 27 October 2026: checklist\n\n## Verdicts\n\n**BoxLang AI.** A JVM agent framework with human approval, guardrail middleware and an MCP client over HTTP and stdio, all enforced in code, with three releases in the 90 days to 1 November 2026. It runs only on BoxLang, the stronger guards are opt-in, and minor releases have renamed public classes without a deprecation period.\n\n**guilds.run.** A self-hosted multi-agent system that records each run's prompt, tool calls and memory changes, with per-agent models and tools and no telemetry by default. Public since 9 October 2026, it has no tagged release or published package, its own security register lists 13 open issues, and the site's terms and privacy links return 404.\n\n## Before you call either\n\n### BoxLang AI\n\n1. Set `mcp.stdio.allowedCommands` to the executables you need. The default empty list lets any command start as a stdio MCP server.\n2. Pass `allowedPaths` when you create FileSystemTools. With none, its tools can read, write and delete anywhere the JVM user can.\n3. Attach HumanInTheLoopMiddleware with a checkpointer for tools that write or spend. Approval is opt-in.\n4. Create MCP clients with `MCP()` rather than the class, since 3.6.0 renamed MCPClient to MCPHttpClient without an alias.\n5. Use the `mock` provider to test agent wiring and guardrails with no API key or network.\n\n### guilds.run\n\n1. Keep the box on loopback or behind an authenticating proxy with AUTH_MODE=trusted-header. The default mode does not authenticate\n2. Put agents that hold different secrets or GitHub tokens on different machines. Agents on one machine can read each other's homes and tokens\n3. Back up the .env file written by ./setup.sh. It holds the only copy of the key that encrypts stored credentials\n4. Set a spend limit at your model provider. guilds.run sets no spend cap, and max_tool_calls defaults to 50 per run\n5. Pin a commit of main when you deploy. There are no tagged releases or versioned images yet\n\n## Questions\n\n### Which is better for AI agents, BoxLang AI or guilds.run?\n\nBoxLang AI scores 65.8 (B) on agent readiness against guilds.run's 56.6 (C), and leads in 6 of 7 scored categories. guilds.run leads on payments \u0026 pricing.\n\n### Are BoxLang AI and guilds.run open source?\n\nYes. BoxLang AI is open source (Apache-2.0). guilds.run is open source (AGPL-3.0-only).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/boxlang-ai-vs-guilds-run.json, and with the fewest tokens: https://www.anchorterminal.com/compare/boxlang-ai-vs-guilds-run.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"boxlang-ai\", \"b\": \"guilds-run\"}`. From a terminal: `anchor compare boxlang-ai guilds-run`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/boxlang-ai.json and https://www.anchorterminal.com/api/v1/tools/guilds-run.json\n\n## Other comparisons with BoxLang AI or guilds.run\n\n- [AgentOS vs BoxLang AI](https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai.md)\n- [AgentOS vs guilds.run](https://www.anchorterminal.com/compare/agentos-vs-guilds-run.md)\n- [Agno vs BoxLang AI](https://www.anchorterminal.com/compare/agno-vs-boxlang-ai.md)\n- [Agno vs guilds.run](https://www.anchorterminal.com/compare/agno-vs-guilds-run.md)\n- [BoxLang AI vs Claude Agent SDK](https://www.anchorterminal.com/compare/boxlang-ai-vs-claude-agent-sdk.md)\n- [BoxLang AI vs CrewAI](https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai.md)\n- [BoxLang AI vs Cursor Agent SDK](https://www.anchorterminal.com/compare/boxlang-ai-vs-cursor-agent-sdk.md)\n- [BoxLang AI vs Docker Agent](https://www.anchorterminal.com/compare/boxlang-ai-vs-docker-agent.md)\n- [BoxLang AI vs Agent Development Kit (ADK)](https://www.anchorterminal.com/compare/boxlang-ai-vs-google-adk.md)\n- [BoxLang AI vs LangGraph](https://www.anchorterminal.com/compare/boxlang-ai-vs-langgraph.md)\n- [BoxLang AI vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/boxlang-ai-vs-microsoft-agent-framework.md)\n- [BoxLang AI vs OpenAI Agents SDK](https://www.anchorterminal.com/compare/boxlang-ai-vs-openai-agents-sdk.md)\n- [BoxLang AI vs Pydantic AI](https://www.anchorterminal.com/compare/boxlang-ai-vs-pydantic-ai.md)\n- [BoxLang AI vs TradingAgents](https://www.anchorterminal.com/compare/boxlang-ai-vs-tradingagents.md)\n- [Claude Agent SDK vs guilds.run](https://www.anchorterminal.com/compare/claude-agent-sdk-vs-guilds-run.md)\n- [CrewAI vs guilds.run](https://www.anchorterminal.com/compare/crewai-vs-guilds-run.md)\n- [Cursor Agent SDK vs guilds.run](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-guilds-run.md)\n- [Docker Agent vs guilds.run](https://www.anchorterminal.com/compare/docker-agent-vs-guilds-run.md)\n- [Agent Development Kit (ADK) vs guilds.run](https://www.anchorterminal.com/compare/google-adk-vs-guilds-run.md)\n- [guilds.run vs LangGraph](https://www.anchorterminal.com/compare/guilds-run-vs-langgraph.md)\n- [guilds.run vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/guilds-run-vs-microsoft-agent-framework.md)\n- [guilds.run vs OpenAI Agents SDK](https://www.anchorterminal.com/compare/guilds-run-vs-openai-agents-sdk.md)\n- [guilds.run vs Pydantic AI](https://www.anchorterminal.com/compare/guilds-run-vs-pydantic-ai.md)\n- [guilds.run vs TradingAgents](https://www.anchorterminal.com/compare/guilds-run-vs-tradingagents.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-02", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "BoxLang AI vs guilds.run", "url": "" } ], "description": "BoxLang AI scores 65.8 (B) to guilds.run's 56.6 (C) for agent frameworks. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "BoxLang AI B 65.8", "guilds.run C 56.6", "scores" ], "h1": "BoxLang AI vs guilds.run", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/boxlang-ai-vs-guilds-run", "published": "2026-10-01", "section": "tools", "title": "BoxLang AI vs guilds.run for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-01", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-guilds-run" }, "tokens": { "markdown": 4650, "slim": 2880 }, "version": 1 }