{ "data": { "a": { "slug": "boxlang-ai", "name": "BoxLang AI", "vendor": "Ortus Solutions", "vendorUrl": "https://ai.boxlang.io", "kind": "framework", "category": "frameworks", "summary": "BoxLang AI (bx-ai) is Ortus Solutions' Apache-2.0 agent framework for BoxLang on the JVM, with agents, tools, memory, RAG, human approval, and an MCP client and server across more than 15 model providers.", "url": "https://www.anchorterminal.com/tools/boxlang-ai", "markdownUrl": "https://www.anchorterminal.com/tools/boxlang-ai.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/boxlang-ai.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/boxlang-ai.json", "dns": "boxlang-ai.grade.anchorterminal.com", "repo": "https://github.com/ortus-boxlang/bx-ai", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "forgebox", "name": "bx-ai" } ], "auth": "none", "authNotes": "A library with no account of its own. Model providers need their own keys, set in boxlang.json or read from each provider's environment variable (OPENAI_API_KEY, CLAUDE_API_KEY and so on). Ollama, Docker Model Runner and the mock provider need no key.", "pricing": "free", "pricingNotes": "Free under Apache-2.0. Model calls are billed by the provider. Ortus sells optional BoxLang runtime plans from $749 a year (Starter, one server) to $4,999 a node a year (BoxLang++), which the readme says add more vector memories and an Agent Dashboard.", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "evidence": "Local library. No x402, MPP or L402 in the repository, the docs or the plans page, checked 1 November 2026.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-01" }, "docsUrl": "https://ai.ortusbooks.com", "llmsTxt": "https://ai.ortusbooks.com/llms.txt", "capabilities": [ "agent.framework", "agent.multi-agent", "agent.mcp-client" ], "tags": [ "framework", "boxlang", "jvm", "open-source", "apache-2.0", "mcp", "llms-txt", "free" ], "lastRelease": "2026-10-20", "graded": true, "anchor": { "graded": true, "score": 65.8, "grade": "B", "agentReady": false, "rank": 328, "ranked": true, "rankOf": 1260, "categoryRank": 10, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 74, "maintenance": 83, "payments": 50, "reliability": 66, "schema": 71, "security": 71, "transparency": 70 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -3, "negativeNotes": [ "2026-10-20. -3, a breaking change in a minor release without advance notice. 3.6.0 renamed the `MCPClient` class to `MCPHttpClient` with no alias, so code that created the class directly must move to `MCP( url )`. The changelog's Migration section says so on release day. 3.5.0 (11 September) likewise raised the minimum BoxLang runtime from 1.8.0 to 1.14.0. One term at the floor, as google-adk's minor-release breaking changes took. https://github.com/ortus-boxlang/bx-ai/blob/main/changelog.md" ], "verdict": "A JVM agent framework with human approval, guardrail middleware and an MCP client over HTTP and stdio, all enforced in code, with three releases in the 90 days to 1 November 2026. It runs only on BoxLang, the stronger guards are opt-in, and minor releases have renamed public classes without a deprecation period.", "bestFor": "Teams already running BoxLang or modernising CFML on the JVM who want agents, RAG and MCP with approval and guardrails in the same language", "strengths": [ "Human approval enforced in code, with suspended runs that resume without replaying the model call, five approval policies and durable grants", "Untrusted context is fenced and inbound text Unicode-normalised by default, with opt-in sanitiser, LLM-judge and output-redaction middleware", "stdio MCP servers start without a shell, with an allowedCommands setting, per-server tool filters and prefixes, and restart limits", "Three releases in the 90 days to 1 November 2026 (3.4.0, 3.5.0, 3.6.0), with a Keep a Changelog file and migration notes", "llms.txt and a Markdown copy of every docs page, plus about 100 runnable example scripts in the repository" ], "weaknesses": [ "Runs only on BoxLang, a JVM language, so it suits teams already on BoxLang or CFML rather than Python or TypeScript stacks", "Minor releases carry breaking changes. 3.6.0 renamed MCPClient to MCPHttpClient with no alias, noted on release day", "The stdio command allow-list, filesystem tool paths and MCP server authentication are all open by default", "Docs lag the code. On 1 November the 3.6.0 release page still read unreleased and didn't mention the stdio MCP client", "No OpenTelemetry export found. Tracing is through BoxLang interception points, logging and flight-recorder middleware" ], "agentNotes": [ "Set `mcp.stdio.allowedCommands` to the executables you need. The default empty list lets any command start as a stdio MCP server.", "Pass `allowedPaths` when you create FileSystemTools. With none, its tools can read, write and delete anywhere the JVM user can.", "Attach HumanInTheLoopMiddleware with a checkpointer for tools that write or spend. Approval is opt-in.", "Create MCP clients with `MCP()` rather than the class, since 3.6.0 renamed MCPClient to MCPHttpClient without an alias.", "Use the `mock` provider to test agent wiring and guardrails with no API key or network." ], "metrics": { "kind": "library", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 65.8 } ], "editorialScores": { "ergonomics": 74, "maintenance": 83, "payments": 50, "reliability": 66, "schema": 71, "security": 71, "transparency": 65 }, "provenanceScore": 74, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "install-bx-module bx-ai # in a web app: box install bx-ai" }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/boxlang-ai" }, "sameCompany": [ "bx-playwright" ], "area": "frameworks", "provenance": { "legalEntity": "Ortus Solutions, Corp.", "domain": "ortussolutions.com", "domainRegistered": "2006-04-12", "endpointOnVendorDomain": null, "terms": "https://github.com/ortus-boxlang/bx-ai/blob/main/src/main/resources/LICENSE", "privacy": "https://www.ortussolutions.com/about-us/ortus-privacy-policy", "statusPage": "", "changelog": "https://github.com/ortus-boxlang/bx-ai/blob/main/changelog.md", "securityTxt": "none", "checked": "2026-11-01", "notes": [ "The readme names Ortus Solutions, Corp as copyright holder, and box.json names Ortus Solutions as author.", "domainRegistered is from Verisign's RDAP record for ortussolutions.com. rdap.org has no record for boxlang.io, so the product domain's date wasn't read.", "security.txt answers 410 on www.ortussolutions.com and boxlang.io. CONTRIBUTING.md asks for vulnerability reports to security@ortussolutions.com.", "The Apache 2.0 licence stands in for terms. The privacy policy covers Ortus's website and customers, not the module.", "Local software, so there is no endpoint or status page." ], "score": 74 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/boxlang-ai.json" }, "answer": "Microsoft Agent Framework scores 79.4 (A) on agent readiness against BoxLang AI's 65.8 (B), and leads in every scored category.", "b": { "slug": "microsoft-agent-framework", "name": "Microsoft Agent Framework", "vendor": "Microsoft", "vendorUrl": "https://www.microsoft.com", "kind": "framework", "category": "frameworks", "summary": "Microsoft Agent Framework is an open-source SDK for building AI agents and multi-agent workflows in Python and .NET, with a Go version in public preview. Microsoft names it the successor to AutoGen and Semantic Kernel.", "url": "https://www.anchorterminal.com/tools/microsoft-agent-framework", "markdownUrl": "https://www.anchorterminal.com/tools/microsoft-agent-framework.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/microsoft-agent-framework.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/microsoft-agent-framework.json", "dns": "microsoft-agent-framework.grade.anchorterminal.com", "repo": "https://github.com/microsoft/agent-framework", "license": "MIT", "transports": [], "packages": [ { "registry": "pypi", "name": "agent-framework" }, { "registry": "nuget", "name": "Microsoft.Agents.AI" } ], "auth": "none", "authNotes": "A library with no account of its own. Credentials are for the model provider and the tools used. The quickstarts sign in to Microsoft Foundry with an Azure credential, and the OpenAI, Anthropic and other clients take their own keys from the environment.", "pricing": "free", "pricingNotes": "Free under MIT, with model calls paid to the provider. Foundry hosted agents, the managed hosting option, is a separate Azure service at $0.0994 a vCPU-hour and $0.0118 an hour for memory in East US, per Azure's retail price API on 8 October 2026.", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "evidence": "No x402, MPP or L402 found in the repository or the docs (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 14015, "npmWeekly": null, "pypiWeekly": 47507, "asOf": "2026-10-08" }, "docsUrl": "https://learn.microsoft.com/en-us/agent-framework/overview/", "capabilities": [ "agent.framework", "agent.multi-agent", "agent.durable", "agent.mcp-client" ], "tags": [ "official", "framework", "python", "dotnet", "go", "open-source", "durable", "free", "no-card" ], "lastRelease": "2026-10-30", "graded": true, "anchor": { "graded": true, "score": 79.4, "grade": "A", "agentReady": true, "rank": 12, "ranked": true, "rankOf": 1260, "categoryRank": 3, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 87, "maintenance": 91, "payments": 60, "reliability": 78, "schema": 95, "security": 93, "transparency": 85 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "high", "date": "2026-11-01" }, "negative": -5, "negativeNotes": [ "2026-10-07. High-severity advisory GHSA-9f26-7mqc-9vc4 (CVSS 7.5). Microsoft.Agents.AI.Workflows.Declarative before 1.24.0 could forward values marked sensitive, including environment-scoped secrets, to an external MCP server from an InvokeMcpTool action. Fixed in 1.24.0 and published the same day, so 2 points. Two medium advisories published the same day (GHSA-q7g7-7c7x-frcq, approval not bound to transport headers, and GHSA-r2mq-wgc9-vgh3, Foundry toolbox bearer token sent to an unintended origin) weren't deducted. https://github.com/microsoft/agent-framework/security/advisories/GHSA-9f26-7mqc-9vc4", "2026-10-22. agent-framework 1.23.0, a minor release of packages PACKAGE_STATUS.md calls released and says shouldn't break between versions, marks three breaking changes (MCP 2.x in agent-framework-core, a required AG-UI authorisation scope and a renamed Docker `extra_run_args`) with no advance notice found, and 1.24.0 on 30 October marks one more. A breaking change in a minor release without notice, so 3 points, the floor, because each is marked in the changelog on the day. https://github.com/microsoft/agent-framework/blob/main/python/CHANGELOG.md" ], "verdict": "Python 1.24.0 and .NET 1.27.0 are MIT, past 1.0 and released about weekly, with an MCP client, tool approval, checkpointed graph workflows and OpenTelemetry. Breaking changes ship in minor releases, a version User-Agent and a feature-usage token are sent by default, and a high-severity advisory in the .NET declarative workflows package was published on 7 October 2026.", "bestFor": "Teams on Azure or .NET, and for teams moving off AutoGen or Semantic Kernel, that want MCP, approval, checkpointed workflows and OpenTelemetry in one SDK.", "strengths": [ "MIT, with Python 1.24.0 and .NET 1.27.0 both tagged on 30 October 2026, past 1.0 since 2 April 2026", "22 tagged releases in the 90 days to 1 November 2026, 11 for Python and 11 for .NET", "MCP client in the core package over stdio and streamable HTTP, with a tool allow-list, per-tool approval and optional progressive disclosure", "Graph workflows with checkpoints, in-memory and file storage in core, and five orchestration patterns (sequential, concurrent, handoff, group chat, Magentic)", "A safety page and FIDES, an information-flow control middleware for prompt injection, which is experimental and Python only" ], "weaknesses": [ "Changes marked [BREAKING] shipped in minor releases of released packages, including agent-framework-core in 1.22.0 on 15 October and 1.23.0 on 22 October 2026", "A package and version User-Agent goes out on client requests by default, with a feature-usage token on Foundry and Azure OpenAI paths. Two environment variables turn them off", "Three advisories were published on 7 October 2026 against .NET packages, one high (CVSS 7.5), all with fixed versions", "Tools run without approval unless approval is set on each tool, per the safety page", "610 open issues and 229 open pull requests on 1 November 2026, and 37 of 45 Python packages are alpha or beta" ], "agentNotes": [ "Pin exact versions. Minor releases have carried [BREAKING] changes, 1.23.0 moved MCP to the 2.x SDK, and 1.22.0 writes stored state older runtimes can't read, so read python/CHANGELOG.md first", "Set `approval_mode=\"always_require\"` on tools and MCP servers that write. Tools run without approval unless set, and 1.24.0 warns when the MCP default is left implicit", "Pass `allowed_tools` to `MCPStdioTool` or `MCPStreamableHTTPTool` so only the named MCP tools reach the model", "Set `AGENT_FRAMEWORK_USER_AGENT_DISABLED=true` to drop the framework's User-Agent and feature token, or `AGENT_FRAMEWORK_FEATURE_MASK_DISABLED=true` for the token alone", "On .NET, use Microsoft.Agents.AI.Workflows.Declarative 1.24.0 or later. Earlier versions could forward protected workflow values to an external MCP server" ], "metrics": { "kind": "library", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "high", "grade": "A", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 79.4 } ], "editorialScores": { "ergonomics": 87, "maintenance": 91, "payments": 60, "reliability": 78, "schema": 95, "security": 93, "transparency": 86 }, "provenanceScore": 83, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install agent-framework # or: dotnet add package Microsoft.Agents.AI" }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/microsoft-agent-framework" }, "sameCompany": [ "azure-foundry-fine-tuning", "azure-ai-content-safety", "azure-speech-to-text", "azure-text-to-speech", "microsoft-execution-containers", "microsoft-entra-agent-id", "azure-key-vault", "azure-document-intelligence", "azure-devops-mcp", "microsoft-learn-mcp", "tokeneconomizer", "playwright-mcp", "azure-mcp", "azure-maps", "azure-translator", "microsoft-graph-calendar", "azure-blob-storage", "onedrive-sharepoint", "microsoft-teams", "dynamics-365-sales", "copilot-studio-mcp", "power-automate", "foundry-local", "microsoft-decision-1", "microsoft-advertising-api", "microsoft-excel-graph", "outlook-mail-graph", "microsoft-graph-people", "mage-vl-cowork" ], "area": "frameworks", "unitPrices": [ { "item": "Foundry hosted agents", "unit": "vcpu-hour", "usd": 0.0994, "note": "East US, plus $0.0118 an hour for memory. A separate Azure service" } ], "provenance": { "legalEntity": "Microsoft Corporation", "domain": "microsoft.com", "domainRegistered": "1991-05-02", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/microsoft/agent-framework/blob/main/python/CHANGELOG.md", "securityTxt": "expired", "checked": "2026-10-08", "notes": [ "The repository is under GitHub's microsoft organisation and its licence file reads Copyright (c) Microsoft Corporation.", "No terms or privacy document for the framework itself was found. The MIT licence is the only document that governs the packages, and neither the repository README nor the core package README links a privacy statement, so both fields are left out.", "www.microsoft.com/.well-known/security.txt loads and points to the MSRC researcher portal, but its Expires field is 2026-09-23T16:00:00.000Z, which had passed on 8 October 2026. learn.microsoft.com has none.", "RDAP gives microsoft.com a registration date of 1991-05-02.", "The changelog link is the Python one. No changelog file was found for .NET in the repository." ], "score": 83 }, "requirements": { "card": "unknown", "freeTier": true, "minutes": 5, "credential": "mixed", "hosting": [ "self-hosted" ], "euResidency": "unknown", "trainsOnData": "no", "zeroRetention": "unknown", "selfHost": "yes" }, "pageJsonUrl": "https://www.anchorterminal.com/tools/microsoft-agent-framework.json", "live": { "slug": "microsoft-agent-framework", "versions": [ { "registry": "github", "name": "microsoft/agent-framework", "version": "python-1.24.0", "released": "2026-10-30", "seenAt": "2026-11-01T17:14:40.871302083Z" }, { "registry": "pypi", "name": "agent-framework", "version": "1.24.0", "released": "2026-10-30", "seenAt": "2026-11-01T17:14:40.618765217Z" } ], "githubStars": 14475, "pypiWeekly": 47337, "securityTxt": { "url": "https://microsoft.com/.well-known/security.txt", "state": "expired", "expires": "2026-09-23T16:00:00.000Z", "checkedAt": "2026-11-01T15:42:11.539407168Z" }, "domain": { "domain": "microsoft.com", "registered": "1991-05-02", "source": "https://rdap.verisign.com/com/v1/domain/microsoft.com", "checkedAt": "2026-11-01T14:14:19.336136409Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/microsoft/agent-framework/main/python/CHANGELOG.md", "kind": "deprecations", "status": 304, "checkedAt": "2026-11-01T06:53:39.001363933Z", "changedAt": "2026-10-31T06:21:51.221217613Z", "fingerprint": "bb4687fefbd8" } ], "github": { "repo": "microsoft/agent-framework", "checkedAt": "2026-10-26T07:45:13.634008665Z", "stars": 14317, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-25T14:38:45Z", "openIssues": 636, "openPRs": 220, "issuesOpened90d": 826, "issuesClosed90d": 699, "prsMerged90d": 1025, "ci": { "branch": "main", "runs": 50, "success": 35, "failure": 14, "other": 1, "latest": "failure", "latestAt": "2026-10-24T10:17:37Z" }, "advisories": [ { "ghsa": "GHSA-4532-fhjf-wq2q", "severity": "medium", "published": "2026-10-23T16:28:52Z" }, { "ghsa": "GHSA-8j78-92fm-c727", "severity": "medium", "published": "2026-10-23T16:20:27Z" }, { "ghsa": "GHSA-f92h-h85c-p8w6", "severity": "medium", "published": "2026-10-23T16:14:35Z" }, { "ghsa": "GHSA-68cw-g4g7-7h9f", "severity": "medium", "published": "2026-10-23T16:09:51Z" }, { "ghsa": "GHSA-r8fg-8q6m-6c5m", "severity": "medium", "published": "2026-10-23T16:04:39Z" }, { "ghsa": "GHSA-r2mq-wgc9-vgh3", "severity": "medium", "published": "2026-10-07T13:55:48Z" }, { "ghsa": "GHSA-9f26-7mqc-9vc4", "severity": "high", "published": "2026-10-07T13:41:40Z" }, { "ghsa": "GHSA-q7g7-7c7x-frcq", "severity": "medium", "published": "2026-10-07T13:41:36Z" } ], "replies": { "sampled": 2, "unanswered": 2 } }, "updatedAt": "2026-11-01T17:14:40.871302083Z" } }, "edges": [ { "by": 24, "category": "schema", "leads": "microsoft-agent-framework", "name": "Schema \u0026 documentation", "reasons": { "a": "Framework reading. A reference page for each built-in function with its arguments, and tool schemas generated from typed function arguments with required fields since 3.3.1. BoxLang is dynamically typed and no published API reference was found, though the repository builds DocBox API docs (15 of 25). llms.txt with about 150 entries and a Markdown copy of every page (10). The FAQ says when to use aiChat() or aiAgent() and the security guide says which guards to use when, though some FAQ links still say coming soon for pages that exist (14 of 20). Tool arguments are typed with required lists, and stdio options a server doesn't have throw InvalidArgument (11 of 15). About 100 example scripts in the repository and a gallery on ai.boxlang.io, but the production guide catches RateLimitException, TimeoutException and AuthenticationException, which the module's source never throws, and there is no exception reference (9 of 15). Keep a Changelog and a release-history page per version, but the 3.6.0 page still read unreleased on 1 November and two old versions appear twice in the changelog (12 of 15). 71 in all.", "b": "Typed in both languages, with py.typed markers and API references for Python and .NET on Microsoft Learn (25). Learn returns each docs page as Markdown when asked with an Accept header. No llms.txt was found (10). The overview has a table for when to use an agent or a workflow, and says to write a function instead where one would do (20). Tools are Python functions typed with Annotated and Pydantic Field, or AIFunction in .NET (15). Samples for every area and a typed exception hierarchy in the source, but we found no exception reference in the docs pages we read (12). A dated Python changelog and four upgrade guides. No changelog file was found for .NET (13)." }, "scores": { "a": 71, "b": 95 } }, { "by": 22, "category": "security", "leads": "microsoft-agent-framework", "name": "Security \u0026 auth", "reasons": { "a": "Framework reading. 30 for what leaves the machine and credentials, 20 for approvals and sandboxing, 15 for prompt injection, 15 for audit and 20 for the security programme. No telemetry in the module's source, requests go only to configured providers, keys come from settings or environment variables, and request logging is off by default. 3.4.0 fixed a Gemini key leaking into logs through the request URL (27 of 30). Approval is enforced in code by HumanInTheLoopMiddleware with five policies, GuardrailMiddleware blocks tools by name and argument pattern, and stdio commands never use a shell. All of it is opt-in. `allowedCommands` allows any executable by default, FileSystemTools allows any path without `allowedPaths`, and the MCP server has no authentication unless configured (12 of 20). Unicode hygiene and fencing of `${context}` are on by default, with opt-in input sanitiser, LLM judge and output guard. Streaming guards detect after the fact, which the changelog says (14 of 15). About 70 interception points, LoggingMiddleware, FlightRecorderMiddleware and MCP server statistics, with no OpenTelemetry export (11 of 15). CONTRIBUTING.md asks for reports to security@ortussolutions.com and the Slack #security channel. No security.txt (410), no bounty, and no published advisory found, while 3.6.0 lists a SQL injection fix in MySQL vector memory under Fixed (7 of 20). 71 in all.", "b": "Framework reading, so SOC 2 isn't scored. A package and version User-Agent goes out on client requests by default, with a feature-usage token on Foundry and Azure OpenAI paths. Both are documented with opt-out variables, and the observability module says the framework contacts no external system itself, with message content in traces off by default (25). `approval_mode` on function and MCP tools, an MCP tool allow-list, and Hyperlight and Monty sandboxes for model-written code in beta. Tools run without approval unless set (20). An Agent Safety page treats model-supplied arguments as untrusted, and FIDES labels content and enforces policy before sensitive tools run, though it is experimental and Python only (15). OpenTelemetry traces, metrics and logs to any exporter (15). SECURITY.md routes reports to MSRC with a bounty programme and coordinated disclosure, CodeQL runs in CI and three advisories were published with fixed versions on 7 October 2026. Microsoft's security.txt still carries an Expires of 23 September 2026 on 1 November. On 1 November the repository's advisories list showed none to our reader, while the GHSA-9f26-7mqc-9vc4 page still loads as published on 7 October, so no advisory after 17 October was found (18)." }, "scores": { "a": 71, "b": 93 } }, { "by": 15, "category": "transparency", "leads": "microsoft-agent-framework", "name": "Transparency \u0026 trust", "reasons": { "a": "Apache-2.0, OSI approved, though the licence file sits in src/main/resources rather than the repository root (30). The FAQ says prompts and history go to the chosen cloud provider and that Ollama keeps data local, and we found no telemetry in the source, but there's no statement for the module of what, if anything, Ortus receives. Ortus's privacy policy covers its website and customers and says data is collected when you use its products without naming which (15 of 30). Migration notes are dated in the changelog, and default models were moved off a Groq model on its removal date, but there's no written deprecation policy or support window (10 of 20). No telemetry statement either way in the docs (10 of 20). 65 in all.", "b": "MIT (30). The core README says what the User-Agent and feature token are, and a design spec in the repository says the token goes only to Foundry and Azure OpenAI pipelines and not to third-party providers. That spec is still marked proposed on 1 November, and we found no statement of how long Microsoft keeps the data and no privacy document for the framework (22). Package lifecycle states are published per package, experimental APIs raise warnings, breaking changes are dated in the Python changelog and there are upgrade guides, but we found no written support window (14). Telemetry is disclosed with two opt-out variables (20)." }, "scores": { "a": 70, "b": 85 } }, { "by": 13, "category": "ergonomics", "leads": "microsoft-agent-framework", "name": "Agent ergonomics", "reasons": { "a": "Framework reading, scored on what a tool-calling agent with MCP takes. An agent with an MCP server is one `aiAgent()` call with `mcpServers`, and `toolFilter` and `prefix` limit what each server adds. Skills can load lazily, but `autoLoadSkills` is on by default and injects every SKILL.md under /.agents/skills into every agent (20 of 25). MaxToolCallsMiddleware caps tool calls, window and summary memory bound history by messages or tokens, `withMaxResponseBytes` caps MCP answers and `listTools( cursor )` pages tools (17 of 20). Named exceptions (ProviderError, UnsupportedCapability, InvalidArgument, MCPCommandRefused, BXAI.SecurityViolation) but no reference page, and the changelog says a timed-out call still surfaces as a JSON parse error (12 of 20). RetryMiddleware with exponential backoff, approval resumes that don't replay the model call or rerun executed tools, and a stdio client that never repeats an in-flight call. MCP tool annotations such as readOnlyHint aren't read (15 of 20). An agent needs a name and works with defaults, and a mock provider runs with no key, but it is one language (10 of 15). 74 in all.", "b": "The documented Python agent with one MCP server is about 12 lines with `MCPStdioTool` from the core package, and `allowed_tools`, `load_tools` and progressive disclosure limit what reaches the model (25). The function loop stops at 40 iterations by default with a `max_function_calls` option, and compaction has its own docs page (20). A typed exception hierarchy, and the loop stops after three consecutive tool errors by default. We didn't find MCP failures documented (16). Workflows resume from checkpoints and sessions serialise, but we found no retry setting for model calls in the core client (14). An agent needs a client and instructions. Python and .NET are stable, Go is in preview, and the quickstarts assume a Microsoft Foundry project (12)." }, "scores": { "a": 74, "b": 87 } }, { "by": 12, "category": "reliability", "leads": "microsoft-agent-framework", "name": "Reliability", "reasons": { "a": "Read with the local-software lines. Official package on ForgeBox, installed with `install-bx-module bx-ai` or `box install bx-ai`, with BoxLang 1.14.0 or later in box.json and JDK 21 in CONTRIBUTING.md, but the 3.6 announcement says BoxLang 1.18 or later (18 of 20). tests.yml runs about 140 test classes against Ollama and the vector stores in Docker Compose, and against paid providers on development and releases, on pull requests and pushes to development. Whether runs pass wasn't read, since WebFetch refused github.com (15 of 25). Open issues and replies weren't read for the same reason. The changelog closes issues #182 to #259 in 3.3.1 to 3.4.0, and bugs also go to Ortus's Jira (10 of 25). Keep a Changelog with semantic versioning stated and Migration sections, but breaking changes ship in minor releases (8 of 15). 3.6.0, past 1.0 (15). 66 in all.", "b": "Read with the local-software lines. Official packages on PyPI (Requires-Python \u003e=3.10 in the repository, though 1.24.0 makes Python 3.11 the supported baseline and says the next release drops 3.10) and NuGet (net8.0 to net10.0, netstandard2.0, net472) (20). Of the 15 most recent .NET build and test runs on 1 November 2026, 10 passed, 2 were cancelled and 4 wait for approval on a pull request, with none failed, and the scheduled runs on main passed on 31 October and 1 November (25). 610 open issues and 229 open pull requests on 1 November, up from 575 and 201 on 8 October. Closures and bug labels weren't re-counted (10). The Python changelog follows Keep a Changelog and states semantic versioning, and marks breaking changes, but they keep shipping in minor releases of released packages, such as agent-framework-core in 1.22.0 on 15 October and 1.23.0 on 22 October 2026 (8). Python 1.24.0 and .NET 1.27.0, with the root and core packages classed 5 - Production/Stable (15)." }, "scores": { "a": 66, "b": 78 } }, { "by": 10, "category": "payments", "leads": "microsoft-agent-framework", "name": "Payments \u0026 pricing", "reasons": { "a": "Self-hosted rule, scored on the paid option. No payment protocol (0). BoxLang runtime plans are public without a login, Starter $749 a year and BoxLang+ and BoxLang++ from $1,999 to $4,999 a server or node a year, plan pricing rather than per unit (10). The Apache-2.0 module installs with no card (20) and no account or sign-up (20). 50 in all.", "b": "Read with the self-hosted rule. No payment protocol (0). The package is free under MIT, and Foundry hosted agents, the managed option, has per-unit prices in Azure's public retail price API ($0.0994 a vCPU-hour and $0.0118 an hour for memory in East US). Those meters are per the 17 October check, not re-read on 1 November. The pricing web page still showed placeholders to our reader on 1 November (20). The packages install with no card (20) and no account, and run local models through the Ollama and Foundry Local connectors (20)." }, "scores": { "a": 50, "b": 60 } } ], "facts": [ { "a": "Agent framework", "b": "Agent framework", "name": "Kind" }, { "a": "Ortus Solutions", "b": "Microsoft", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-10-20", "b": "2026-10-30", "name": "Last release" }, { "a": "no date given", "b": "no document linked", "name": "Terms last updated" }, { "a": "no date given", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not read yet", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not read yet", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "14k stars, 48k PyPI/wk", "name": "Popularity" }, { "a": "none", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Microsoft Agent Framework scores 79.4 (A) on agent readiness against BoxLang AI's 65.8 (B), and leads in every scored category.", "question": "Which is better for AI agents, BoxLang AI or Microsoft Agent Framework?" }, { "answer": "Yes. BoxLang AI is open source (Apache-2.0). Microsoft Agent Framework is open source (MIT).", "question": "Are BoxLang AI and Microsoft Agent Framework open source?" } ], "goodFor": [ { "aheadOn": null, "also": null, "goodFor": "Teams already running BoxLang or modernising CFML on the JVM who want agents, RAG and MCP with approval and guardrails in the same language", "slug": "boxlang-ai", "watchFor": "Runs only on BoxLang, a JVM language, so it suits teams already on BoxLang or CFML rather than Python or TypeScript stacks" }, { "aheadOn": [ "Reliability, 78 against 66", "Schema \u0026 documentation, 95 against 71", "Agent ergonomics, 87 against 74", "Security \u0026 auth, 93 against 71", "Payments \u0026 pricing, 60 against 50", "Maintenance \u0026 community, 91 against 83", "Transparency \u0026 trust, 85 against 70" ], "also": [ "Agent-ready, a grade of BB or better", "Free to start without a card" ], "goodFor": "Teams on Azure or .NET, and for teams moving off AutoGen or Semantic Kernel, that want MCP, approval, checkpointed workflows and OpenTelemetry in one SDK.", "slug": "microsoft-agent-framework", "watchFor": "Changes marked [BREAKING] shipped in minor releases of released packages, including agent-framework-core in 1.22.0 on 15 October and 1.23.0 on 22 October 2026" } ], "history": { "boxlang-ai": null, "microsoft-agent-framework": [ { "causes": [ "event" ], "date": "2026-11-01", "delta": -3, "from": 82.4, "fromGrade": "A", "to": 79.4, "toGrade": "A" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.2, "from": 82.2, "fromGrade": "A", "to": 82.4, "toGrade": "A" } ] }, "job": { "capability": "agent.framework", "name": "Agent frameworks" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai.json", "title": "AgentOS vs BoxLang AI", "url": "https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-microsoft-agent-framework.json", "title": "AgentOS vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/agentos-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/agno-vs-boxlang-ai.json", "title": "Agno vs BoxLang AI", "url": "https://www.anchorterminal.com/compare/agno-vs-boxlang-ai" }, { "json": "https://www.anchorterminal.com/compare/agno-vs-microsoft-agent-framework.json", "title": "Agno vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/agno-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-claude-agent-sdk.json", "title": "BoxLang AI vs Claude Agent SDK", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-claude-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai.json", "title": "BoxLang AI vs CrewAI", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-cursor-agent-sdk.json", "title": "BoxLang AI vs Cursor Agent SDK", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-cursor-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-docker-agent.json", "title": "BoxLang AI vs Docker Agent", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-docker-agent" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-google-adk.json", "title": "BoxLang AI vs Agent Development Kit (ADK)", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-google-adk" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-guilds-run.json", "title": "BoxLang AI vs guilds.run", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-guilds-run" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-langgraph.json", "title": "BoxLang AI vs LangGraph", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-openai-agents-sdk.json", "title": "BoxLang AI vs OpenAI Agents SDK", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-openai-agents-sdk" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-pydantic-ai.json", "title": "BoxLang AI vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-tradingagents.json", "title": "BoxLang AI vs TradingAgents", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-tradingagents" }, { "json": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-microsoft-agent-framework.json", "title": "Claude Agent SDK vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-microsoft-agent-framework.json", "title": "CrewAI vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/crewai-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-microsoft-agent-framework.json", "title": "Cursor Agent SDK vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-microsoft-agent-framework.json", "title": "Docker Agent vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/google-adk-vs-microsoft-agent-framework.json", "title": "Agent Development Kit (ADK) vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/google-adk-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/guilds-run-vs-microsoft-agent-framework.json", "title": "guilds.run vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/guilds-run-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/langgraph-vs-microsoft-agent-framework.json", "title": "LangGraph vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/langgraph-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-openai-agents-sdk.json", "title": "Microsoft Agent Framework vs OpenAI Agents SDK", "url": "https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-openai-agents-sdk" }, { "json": "https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-pydantic-ai.json", "title": "Microsoft Agent Framework vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-tradingagents.json", "title": "Microsoft Agent Framework vs TradingAgents", "url": "https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-tradingagents" } ], "panel": null, "scores": [ { "boxlang-ai": 66, "by": 12, "edge": "microsoft-agent-framework", "key": "reliability", "microsoft-agent-framework": 78, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "boxlang-ai": 71, "by": 24, "edge": "microsoft-agent-framework", "key": "schema", "microsoft-agent-framework": 95, "name": "Schema \u0026 documentation", "weight": 13 }, { "boxlang-ai": 74, "by": 13, "edge": "microsoft-agent-framework", "key": "ergonomics", "microsoft-agent-framework": 87, "name": "Agent ergonomics", "weight": 13 }, { "boxlang-ai": 71, "by": 22, "edge": "microsoft-agent-framework", "key": "security", "microsoft-agent-framework": 93, "name": "Security \u0026 auth", "weight": 14 }, { "boxlang-ai": 50, "by": 10, "edge": "microsoft-agent-framework", "key": "payments", "microsoft-agent-framework": 60, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "boxlang-ai": 83, "by": 8, "edge": "microsoft-agent-framework", "key": "maintenance", "microsoft-agent-framework": 91, "name": "Maintenance \u0026 community", "weight": 7 }, { "boxlang-ai": 70, "by": 15, "edge": "microsoft-agent-framework", "key": "transparency", "microsoft-agent-framework": 85, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Microsoft Agent Framework scores 79.4 (A) on agent readiness against BoxLang AI's 65.8 (B), and leads in every scored category. Both do agent frameworks.", "tasks": null, "tutorials": [], "verdicts": { "boxlang-ai": "A JVM agent framework with human approval, guardrail middleware and an MCP client over HTTP and stdio, all enforced in code, with three releases in the 90 days to 1 November 2026. It runs only on BoxLang, the stronger guards are opt-in, and minor releases have renamed public classes without a deprecation period.", "microsoft-agent-framework": "Python 1.24.0 and .NET 1.27.0 are MIT, past 1.0 and released about weekly, with an MCP client, tool approval, checkpointed graph workflows and OpenTelemetry. Breaking changes ship in minor releases, a version User-Agent and a feature-usage token are sent by default, and a high-severity advisory in the .NET declarative workflows package was published on 7 October 2026." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/boxlang-ai-vs-microsoft-agent-framework", "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-microsoft-agent-framework.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/boxlang-ai-vs-microsoft-agent-framework.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/boxlang-ai-vs-microsoft-agent-framework.min.md" }, "markdown": "Microsoft Agent Framework scores 79.4 (A) on agent readiness against BoxLang AI's 65.8 (B), and leads in every scored category. Both do agent frameworks.\n\n- BoxLang AI: grade B, 65.8/100, rank #328 of 1260. Markdown https://www.anchorterminal.com/tools/boxlang-ai.md · JSON https://www.anchorterminal.com/api/v1/tools/boxlang-ai.json\n- Microsoft Agent Framework: grade A, 79.4/100, rank #12 of 1260. Markdown https://www.anchorterminal.com/tools/microsoft-agent-framework.md · JSON https://www.anchorterminal.com/api/v1/tools/microsoft-agent-framework.json\n- Best agent frameworks and SDKs: https://www.anchorterminal.com/best/frameworks/index.md\n- All 91 frameworks comparisons: https://www.anchorterminal.com/compare/frameworks/index.md\n\n## Which one, for what\n\n### BoxLang AI (B)\n\nGood for: Teams already running BoxLang or modernising CFML on the JVM who want agents, RAG and MCP with approval and guardrails in the same language\n\nWatch for: Runs only on BoxLang, a JVM language, so it suits teams already on BoxLang or CFML rather than Python or TypeScript stacks\n\n### Microsoft Agent Framework (A)\n\nGood for: Teams on Azure or .NET, and for teams moving off AutoGen or Semantic Kernel, that want MCP, approval, checkpointed workflows and OpenTelemetry in one SDK.\n\nAhead on:\n- Reliability, 78 against 66\n- Schema \u0026 documentation, 95 against 71\n- Agent ergonomics, 87 against 74\n- Security \u0026 auth, 93 against 71\n- Payments \u0026 pricing, 60 against 50\n- Maintenance \u0026 community, 91 against 83\n- Transparency \u0026 trust, 85 against 70\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- Free to start without a card\n\nWatch for: Changes marked [BREAKING] shipped in minor releases of released packages, including agent-framework-core in 1.22.0 on 15 October and 1.23.0 on 22 October 2026\n\n\n## Why the edge\n\n### Schema \u0026 documentation: Microsoft Agent Framework +24\n\n- BoxLang AI (71): Framework reading. A reference page for each built-in function with its arguments, and tool schemas generated from typed function arguments with required fields since 3.3.1. BoxLang is dynamically typed and no published API reference was found, though the repository builds DocBox API docs (15 of 25). llms.txt with about 150 entries and a Markdown copy of every page (10). The FAQ says when to use aiChat() or aiAgent() and the security guide says which guards to use when, though some FAQ links still say coming soon for pages that exist (14 of 20). Tool arguments are typed with required lists, and stdio options a server doesn't have throw InvalidArgument (11 of 15). About 100 example scripts in the repository and a gallery on ai.boxlang.io, but the production guide catches RateLimitException, TimeoutException and AuthenticationException, which the module's source never throws, and there is no exception reference (9 of 15). Keep a Changelog and a release-history page per version, but the 3.6.0 page still read unreleased on 1 November and two old versions appear twice in the changelog (12 of 15). 71 in all.\n- Microsoft Agent Framework (95): Typed in both languages, with py.typed markers and API references for Python and .NET on Microsoft Learn (25). Learn returns each docs page as Markdown when asked with an Accept header. No llms.txt was found (10). The overview has a table for when to use an agent or a workflow, and says to write a function instead where one would do (20). Tools are Python functions typed with Annotated and Pydantic Field, or AIFunction in .NET (15). Samples for every area and a typed exception hierarchy in the source, but we found no exception reference in the docs pages we read (12). A dated Python changelog and four upgrade guides. No changelog file was found for .NET (13).\n\n### Security \u0026 auth: Microsoft Agent Framework +22\n\n- BoxLang AI (71): Framework reading. 30 for what leaves the machine and credentials, 20 for approvals and sandboxing, 15 for prompt injection, 15 for audit and 20 for the security programme. No telemetry in the module's source, requests go only to configured providers, keys come from settings or environment variables, and request logging is off by default. 3.4.0 fixed a Gemini key leaking into logs through the request URL (27 of 30). Approval is enforced in code by HumanInTheLoopMiddleware with five policies, GuardrailMiddleware blocks tools by name and argument pattern, and stdio commands never use a shell. All of it is opt-in. `allowedCommands` allows any executable by default, FileSystemTools allows any path without `allowedPaths`, and the MCP server has no authentication unless configured (12 of 20). Unicode hygiene and fencing of `${context}` are on by default, with opt-in input sanitiser, LLM judge and output guard. Streaming guards detect after the fact, which the changelog says (14 of 15). About 70 interception points, LoggingMiddleware, FlightRecorderMiddleware and MCP server statistics, with no OpenTelemetry export (11 of 15). CONTRIBUTING.md asks for reports to security@ortussolutions.com and the Slack #security channel. No security.txt (410), no bounty, and no published advisory found, while 3.6.0 lists a SQL injection fix in MySQL vector memory under Fixed (7 of 20). 71 in all.\n- Microsoft Agent Framework (93): Framework reading, so SOC 2 isn't scored. A package and version User-Agent goes out on client requests by default, with a feature-usage token on Foundry and Azure OpenAI paths. Both are documented with opt-out variables, and the observability module says the framework contacts no external system itself, with message content in traces off by default (25). `approval_mode` on function and MCP tools, an MCP tool allow-list, and Hyperlight and Monty sandboxes for model-written code in beta. Tools run without approval unless set (20). An Agent Safety page treats model-supplied arguments as untrusted, and FIDES labels content and enforces policy before sensitive tools run, though it is experimental and Python only (15). OpenTelemetry traces, metrics and logs to any exporter (15). SECURITY.md routes reports to MSRC with a bounty programme and coordinated disclosure, CodeQL runs in CI and three advisories were published with fixed versions on 7 October 2026. Microsoft's security.txt still carries an Expires of 23 September 2026 on 1 November. On 1 November the repository's advisories list showed none to our reader, while the GHSA-9f26-7mqc-9vc4 page still loads as published on 7 October, so no advisory after 17 October was found (18).\n\n### Transparency \u0026 trust: Microsoft Agent Framework +15\n\n- BoxLang AI (70): Apache-2.0, OSI approved, though the licence file sits in src/main/resources rather than the repository root (30). The FAQ says prompts and history go to the chosen cloud provider and that Ollama keeps data local, and we found no telemetry in the source, but there's no statement for the module of what, if anything, Ortus receives. Ortus's privacy policy covers its website and customers and says data is collected when you use its products without naming which (15 of 30). Migration notes are dated in the changelog, and default models were moved off a Groq model on its removal date, but there's no written deprecation policy or support window (10 of 20). No telemetry statement either way in the docs (10 of 20). 65 in all.\n- Microsoft Agent Framework (85): MIT (30). The core README says what the User-Agent and feature token are, and a design spec in the repository says the token goes only to Foundry and Azure OpenAI pipelines and not to third-party providers. That spec is still marked proposed on 1 November, and we found no statement of how long Microsoft keeps the data and no privacy document for the framework (22). Package lifecycle states are published per package, experimental APIs raise warnings, breaking changes are dated in the Python changelog and there are upgrade guides, but we found no written support window (14). Telemetry is disclosed with two opt-out variables (20).\n\n### Agent ergonomics: Microsoft Agent Framework +13\n\n- BoxLang AI (74): Framework reading, scored on what a tool-calling agent with MCP takes. An agent with an MCP server is one `aiAgent()` call with `mcpServers`, and `toolFilter` and `prefix` limit what each server adds. Skills can load lazily, but `autoLoadSkills` is on by default and injects every SKILL.md under /.agents/skills into every agent (20 of 25). MaxToolCallsMiddleware caps tool calls, window and summary memory bound history by messages or tokens, `withMaxResponseBytes` caps MCP answers and `listTools( cursor )` pages tools (17 of 20). Named exceptions (ProviderError, UnsupportedCapability, InvalidArgument, MCPCommandRefused, BXAI.SecurityViolation) but no reference page, and the changelog says a timed-out call still surfaces as a JSON parse error (12 of 20). RetryMiddleware with exponential backoff, approval resumes that don't replay the model call or rerun executed tools, and a stdio client that never repeats an in-flight call. MCP tool annotations such as readOnlyHint aren't read (15 of 20). An agent needs a name and works with defaults, and a mock provider runs with no key, but it is one language (10 of 15). 74 in all.\n- Microsoft Agent Framework (87): The documented Python agent with one MCP server is about 12 lines with `MCPStdioTool` from the core package, and `allowed_tools`, `load_tools` and progressive disclosure limit what reaches the model (25). The function loop stops at 40 iterations by default with a `max_function_calls` option, and compaction has its own docs page (20). A typed exception hierarchy, and the loop stops after three consecutive tool errors by default. We didn't find MCP failures documented (16). Workflows resume from checkpoints and sessions serialise, but we found no retry setting for model calls in the core client (14). An agent needs a client and instructions. Python and .NET are stable, Go is in preview, and the quickstarts assume a Microsoft Foundry project (12).\n\n### Reliability: Microsoft Agent Framework +12\n\n- BoxLang AI (66): Read with the local-software lines. Official package on ForgeBox, installed with `install-bx-module bx-ai` or `box install bx-ai`, with BoxLang 1.14.0 or later in box.json and JDK 21 in CONTRIBUTING.md, but the 3.6 announcement says BoxLang 1.18 or later (18 of 20). tests.yml runs about 140 test classes against Ollama and the vector stores in Docker Compose, and against paid providers on development and releases, on pull requests and pushes to development. Whether runs pass wasn't read, since WebFetch refused github.com (15 of 25). Open issues and replies weren't read for the same reason. The changelog closes issues #182 to #259 in 3.3.1 to 3.4.0, and bugs also go to Ortus's Jira (10 of 25). Keep a Changelog with semantic versioning stated and Migration sections, but breaking changes ship in minor releases (8 of 15). 3.6.0, past 1.0 (15). 66 in all.\n- Microsoft Agent Framework (78): Read with the local-software lines. Official packages on PyPI (Requires-Python \u003e=3.10 in the repository, though 1.24.0 makes Python 3.11 the supported baseline and says the next release drops 3.10) and NuGet (net8.0 to net10.0, netstandard2.0, net472) (20). Of the 15 most recent .NET build and test runs on 1 November 2026, 10 passed, 2 were cancelled and 4 wait for approval on a pull request, with none failed, and the scheduled runs on main passed on 31 October and 1 November (25). 610 open issues and 229 open pull requests on 1 November, up from 575 and 201 on 8 October. Closures and bug labels weren't re-counted (10). The Python changelog follows Keep a Changelog and states semantic versioning, and marks breaking changes, but they keep shipping in minor releases of released packages, such as agent-framework-core in 1.22.0 on 15 October and 1.23.0 on 22 October 2026 (8). Python 1.24.0 and .NET 1.27.0, with the root and core packages classed 5 - Production/Stable (15).\n\n### Payments \u0026 pricing: Microsoft Agent Framework +10\n\n- BoxLang AI (50): Self-hosted rule, scored on the paid option. No payment protocol (0). BoxLang runtime plans are public without a login, Starter $749 a year and BoxLang+ and BoxLang++ from $1,999 to $4,999 a server or node a year, plan pricing rather than per unit (10). The Apache-2.0 module installs with no card (20) and no account or sign-up (20). 50 in all.\n- Microsoft Agent Framework (60): Read with the self-hosted rule. No payment protocol (0). The package is free under MIT, and Foundry hosted agents, the managed option, has per-unit prices in Azure's public retail price API ($0.0994 a vCPU-hour and $0.0118 an hour for memory in East US). Those meters are per the 17 October check, not re-read on 1 November. The pricing web page still showed placeholders to our reader on 1 November (20). The packages install with no card (20) and no account, and run local models through the Ollama and Foundry Local connectors (20).\n\n## Score by category\n\n| Category | Weight | BoxLang AI | Microsoft Agent Framework | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 66 | 78 | Microsoft Agent Framework +12 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 71 | 95 | Microsoft Agent Framework +24 |\n| Agent ergonomics | 13% (16.2 this run) | 74 | 87 | Microsoft Agent Framework +13 |\n| Security \u0026 auth | 14% (17.5 this run) | 71 | 93 | Microsoft Agent Framework +22 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 50 | 60 | Microsoft Agent Framework +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 83 | 91 | Microsoft Agent Framework +8 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 70 | 85 | Microsoft Agent Framework +15 |\n| Negative events | ≤15 | -3 | -5 | |\n| **Total** | | **65.8 · B** | **79.4 · A** | |\n\n## Facts side by side\n\n| Fact | BoxLang AI | Microsoft Agent Framework |\n| --- | --- | --- |\n| Kind | Agent framework | Agent framework |\n| Vendor | Ortus Solutions | Microsoft |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | Apache-2.0 | MIT |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-10-20 | 2026-10-30 |\n| Terms last updated | no date given | no document linked |\n| Privacy policy last updated | no date given | no document linked |\n| Customer content may train models | not found in the text | not read yet |\n| Terms restrict automated access | not found in the text | not read yet |\n| Terms restrict benchmarking | not found in the text | not read yet |\n| Terms or service can change without notice | not found in the text | not read yet |\n| Arbitration or class-action waiver | not found in the text | not read yet |\n| Popularity | none | 14k stars, 48k PyPI/wk |\n| Agent reviews | none | 3/5 (4) |\n\n## How the scores have moved\n\n### BoxLang AI\n\nNo score change since it was listed.\n\n### Microsoft Agent Framework\n\n- -3.0 on 1 November 2026: negative event\n- +0.2 on 27 October 2026: checklist\n\n## Verdicts\n\n**BoxLang AI.** A JVM agent framework with human approval, guardrail middleware and an MCP client over HTTP and stdio, all enforced in code, with three releases in the 90 days to 1 November 2026. It runs only on BoxLang, the stronger guards are opt-in, and minor releases have renamed public classes without a deprecation period.\n\n**Microsoft Agent Framework.** Python 1.24.0 and .NET 1.27.0 are MIT, past 1.0 and released about weekly, with an MCP client, tool approval, checkpointed graph workflows and OpenTelemetry. Breaking changes ship in minor releases, a version User-Agent and a feature-usage token are sent by default, and a high-severity advisory in the .NET declarative workflows package was published on 7 October 2026.\n\n## Before you call either\n\n### BoxLang AI\n\n1. Set `mcp.stdio.allowedCommands` to the executables you need. The default empty list lets any command start as a stdio MCP server.\n2. Pass `allowedPaths` when you create FileSystemTools. With none, its tools can read, write and delete anywhere the JVM user can.\n3. Attach HumanInTheLoopMiddleware with a checkpointer for tools that write or spend. Approval is opt-in.\n4. Create MCP clients with `MCP()` rather than the class, since 3.6.0 renamed MCPClient to MCPHttpClient without an alias.\n5. Use the `mock` provider to test agent wiring and guardrails with no API key or network.\n\n### Microsoft Agent Framework\n\n1. Pin exact versions. Minor releases have carried [BREAKING] changes, 1.23.0 moved MCP to the 2.x SDK, and 1.22.0 writes stored state older runtimes can't read, so read python/CHANGELOG.md first\n2. Set `approval_mode=\"always_require\"` on tools and MCP servers that write. Tools run without approval unless set, and 1.24.0 warns when the MCP default is left implicit\n3. Pass `allowed_tools` to `MCPStdioTool` or `MCPStreamableHTTPTool` so only the named MCP tools reach the model\n4. Set `AGENT_FRAMEWORK_USER_AGENT_DISABLED=true` to drop the framework's User-Agent and feature token, or `AGENT_FRAMEWORK_FEATURE_MASK_DISABLED=true` for the token alone\n5. On .NET, use Microsoft.Agents.AI.Workflows.Declarative 1.24.0 or later. Earlier versions could forward protected workflow values to an external MCP server\n\n## Questions\n\n### Which is better for AI agents, BoxLang AI or Microsoft Agent Framework?\n\nMicrosoft Agent Framework scores 79.4 (A) on agent readiness against BoxLang AI's 65.8 (B), and leads in every scored category.\n\n### Are BoxLang AI and Microsoft Agent Framework open source?\n\nYes. BoxLang AI is open source (Apache-2.0). Microsoft Agent Framework is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/boxlang-ai-vs-microsoft-agent-framework.json, and with the fewest tokens: https://www.anchorterminal.com/compare/boxlang-ai-vs-microsoft-agent-framework.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"boxlang-ai\", \"b\": \"microsoft-agent-framework\"}`. From a terminal: `anchor compare boxlang-ai microsoft-agent-framework`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/boxlang-ai.json and https://www.anchorterminal.com/api/v1/tools/microsoft-agent-framework.json\n\n## Other comparisons with BoxLang AI or Microsoft Agent Framework\n\n- [AgentOS vs BoxLang AI](https://www.anchorterminal.com/compare/agentos-vs-boxlang-ai.md)\n- [AgentOS vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/agentos-vs-microsoft-agent-framework.md)\n- [Agno vs BoxLang AI](https://www.anchorterminal.com/compare/agno-vs-boxlang-ai.md)\n- [Agno vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/agno-vs-microsoft-agent-framework.md)\n- [BoxLang AI vs Claude Agent SDK](https://www.anchorterminal.com/compare/boxlang-ai-vs-claude-agent-sdk.md)\n- [BoxLang AI vs CrewAI](https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai.md)\n- [BoxLang AI vs Cursor Agent SDK](https://www.anchorterminal.com/compare/boxlang-ai-vs-cursor-agent-sdk.md)\n- [BoxLang AI vs Docker Agent](https://www.anchorterminal.com/compare/boxlang-ai-vs-docker-agent.md)\n- [BoxLang AI vs Agent Development Kit (ADK)](https://www.anchorterminal.com/compare/boxlang-ai-vs-google-adk.md)\n- [BoxLang AI vs guilds.run](https://www.anchorterminal.com/compare/boxlang-ai-vs-guilds-run.md)\n- [BoxLang AI vs LangGraph](https://www.anchorterminal.com/compare/boxlang-ai-vs-langgraph.md)\n- [BoxLang AI vs OpenAI Agents SDK](https://www.anchorterminal.com/compare/boxlang-ai-vs-openai-agents-sdk.md)\n- [BoxLang AI vs Pydantic AI](https://www.anchorterminal.com/compare/boxlang-ai-vs-pydantic-ai.md)\n- [BoxLang AI vs TradingAgents](https://www.anchorterminal.com/compare/boxlang-ai-vs-tradingagents.md)\n- [Claude Agent SDK vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/claude-agent-sdk-vs-microsoft-agent-framework.md)\n- [CrewAI vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/crewai-vs-microsoft-agent-framework.md)\n- [Cursor Agent SDK vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-microsoft-agent-framework.md)\n- [Docker Agent vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/docker-agent-vs-microsoft-agent-framework.md)\n- [Agent Development Kit (ADK) vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/google-adk-vs-microsoft-agent-framework.md)\n- [guilds.run vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/guilds-run-vs-microsoft-agent-framework.md)\n- [LangGraph vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/langgraph-vs-microsoft-agent-framework.md)\n- [Microsoft Agent Framework vs OpenAI Agents SDK](https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-openai-agents-sdk.md)\n- [Microsoft Agent Framework vs Pydantic AI](https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-pydantic-ai.md)\n- [Microsoft Agent Framework vs TradingAgents](https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-tradingagents.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-02", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "BoxLang AI vs Microsoft Agent Framework", "url": "" } ], "description": "Microsoft Agent Framework scores 79.4 (A) to BoxLang AI's 65.8 (B) for agent frameworks. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "BoxLang AI B 65.8", "Microsoft Agent Framework A 79.4", "scores" ], "h1": "BoxLang AI vs Microsoft Agent Framework", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/boxlang-ai-vs-microsoft-agent-framework", "published": "2026-10-01", "section": "tools", "title": "BoxLang AI vs Microsoft Agent Framework for AI agents (2026)", "toc": null, "updated": "2026-11-01", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-microsoft-agent-framework" }, "tokens": { "markdown": 5450, "slim": 3430 }, "version": 1 }