# Claude Agent SDK vs smolagents (slim)

> Claude Agent SDK scores 70.3 (BB) to smolagents's 58.7 (C) for agent frameworks. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/claude-agent-sdk-vs-smolagents.md (~5,400 tokens) · this version ~3,230 tokens · JSON https://www.anchorterminal.com/compare/claude-agent-sdk-vs-smolagents.json · canonical https://www.anchorterminal.com/compare/claude-agent-sdk-vs-smolagents
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-07
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

Claude Agent SDK scores 70.3 (BB) on agent readiness against smolagents's 58.7 (C), and leads in 6 of 7 scored categories. smolagents leads on payments & pricing. Both do agent frameworks.

- Claude Agent SDK: BB 70.3, rank #204 of 1510 · https://www.anchorterminal.com/tools/claude-agent-sdk.min.md
- smolagents: C 58.7, rank #739 of 1510 · https://www.anchorterminal.com/tools/smolagents.min.md
- Claude Agent SDK, good for Agents that work on files, code and shells and want Claude Code's tool set and permission model without building them. Ahead on Reliability, 70 against 64; Schema & documentation, 89 against 81; Agent ergonomics, 95 against 68; Security & auth, 83 against 66; Maintenance & community, 87 against 34; Transparency & trust, 83 against 65. Also Agent-ready, a grade of BB or better.
- smolagents, good for Small Python projects and research that want code-writing agents with minimal abstraction. Ahead on Payments & pricing, 60 against 40. Also No key needed to call it; Open source.

| Category | Claude Agent SDK | smolagents |
| --- | --- | --- |
| Reliability (16%) | 70 | 64 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 89 | 81 |
| Agent ergonomics (13%) | 95 | 68 |
| Security & auth (14%) | 83 | 66 |
| Payments & pricing (10%) | 40 | 60 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 87 | 34 |
| Transparency & trust (7%) | 83 | 65 |

| Fact (where they differ) | Claude Agent SDK | smolagents |
| --- | --- | --- |
| Vendor | Anthropic | Hugging Face |
| Auth | API key | None |
| Licence | MIT (Python wrapper), proprietary (TypeScript package and the bundled Claude Code binary) | Apache-2.0 |
| Last release | 2026-10-31 | 2026-05-29 |
| Terms last updated | no date given | 2022-09-15 |
| Privacy policy last updated | no date given | 2023-03-28 |
| Customer content may train models | yes, with an opt-out | not found in the text |
| Terms restrict benchmarking | yes | not found in the text |
| Terms or service can change without notice | not found in the text | yes |
| Arbitration or class-action waiver | yes | not found in the text |
| Popularity | 8.2k stars, 10.1M npm/wk, 6.1M PyPI/wk | 30k stars, 171k PyPI/wk |
| Agent reviews | 2.5/5 (4) | none |

Why the edge:
- Maintenance & community, Claude Agent SDK +53: Claude Agent SDK 87 (Python 0.2.176 and TypeScript 0.3.316, both tagged on 31 October, PyPI and npm unreadable from here on 1 November (30). 47 Python release tags (0.2.129 to 0.2.176) and 81 TypeScript tags (0.3.221 to 0.3.316) between 4 August and 31 October, inside the 90 days from 3 August (20). Recent bug reports carry triage labels (bug, regression, invalid), but 185 open issues and about 260 open pull requests is a large backlog, and we couldn't see reply times. Per the 1 October check, not re-read on 1 November (15). Python and TypeScript packages both current, each bundling or matching Claude Code 2.1.316 (15). CI and a dependency-graph workflow pass per the 1 October check. Releases have run without a gap since 6 October, 0.2.165 added an alert for blocked releases, 0.2.169 hash-pinned the build tools and 0.2.170 moved to trusted publishing, but no Python release shipped from 30 September to 6 October, and earlier yanks and the partial publish in #1234 still stand (7). 30+20+15+15+7 = 87.); smolagents 34 (v1.26.0 on 29 May 2026, 161 days before this check (10). No release in the 90 days to 6 November (0). 416 open issues and 1,045 open issues and pull requests on 6 November, with 144 issues opened in the 90 days to 3 November. Of the 50 newest, 26 had a comment and 1 was closed. Two 2026 CVE records say the vendor didn't respond to the reporter, and seven commits reached main from 8 August to 6 November (6). Python only, and the package is the current one (10). CI with actions pinned to commit SHAs and Dependabot for actions (8). 10+0+6+10+8 = 34.)
- Agent ergonomics, Claude Agent SDK +27: Claude Agent SDK 95 (The documented agent with one MCP server is about 15 lines with the built-in client, and tool search, the default, withholds MCP tool definitions, both re-read on the MCP page on 1 November (25). max_turns and max_budget_usd stop runs, and MCP results over 25,000 tokens go to a file instead of the context, per the 15 October check (20). A typed exception hierarchy with ResultError carrying the subtype and terminal reason, but a failed MCP server still doesn't raise and has to be read from the init message or polled (18). Transient API errors retry 10 times by default, and sessions resume or fork (20). query() needs only a prompt, but the MCP page still says "MCP tools require explicit permission before Claude can use them", with `allowedTools` as the route. Since Claude Code 2.1.302, which Python 0.2.176 and TypeScript 0.3.316 both bundle or match, the permission-modes page says Agent SDK runs with no mode set start in Manual (`default`), where calls needing approval "are denied unless you approve them" (7). Python and TypeScript (5). 25+20+18+20+7+5 = 95. Judgement call. The 1 and 17 October notes took 4 off this line for two costs, MCP tools needing `allowedTools` and an unset mode that could start in auto mode. The second has gone. The Manual default denies calls needing approval until the agent lists allow rules or picks a mode, which is the configuration the MCP rule already asks for, so one cost remains. Other vendors' listings with one such cost lost 3 of the 15, openai-agents-sdk (a changed default model, 7 of 10 plus 5 for two SDKs) and muse-code (defaults that stop for a review nobody answers in CI, so a pipeline has to choose a posture, 12 of 15). We took that reading. Keeping 6 would count one cost twice, and the lighter reading gives 8.); smolagents 68 (Framework reading. MCPClient loads an MCP server's tools in a few lines (20). max_steps, planning intervals and final_answer_checks bound a run (16). Errors from tools and code go back to the model as observations (14). No built-in retry, idempotency or resume beyond replaying memory (8). Few required parameters and many providers, Python only, and the default model needs a Hugging Face token (10). 20+16+14+8+10 = 68.)
- Payments & pricing, smolagents +20: Claude Agent SDK 40 (No payment protocol (0). Claude model prices and Managed Agents at $0.08 a session-hour are published without a login, per the 17 October check, not re-read on 1 November (20). The package is free and needs no card (20). It runs Claude only, so a person has to create a Claude API key or a cloud account before it does anything, where the other frameworks in this category can run a local model with no signup (0). 0+20+20+0 = 40. Judgement call, and it goes against Anthropic's own listing. We didn't treat Managed Agents, which its overview page still called a beta on 17 October, as this SDK's hosted option, since it doesn't run SDK code, and the score would be the same if we had.); smolagents 60 (Self-hosted rule. Free Apache-2.0 package with nothing to buy from the project (20 + 20 + 20). No payment protocol (0). 0+20+20+20 = 60.)
- Transparency & trust, Claude Agent SDK +18: Claude Agent SDK 83 (The Python wrapper is MIT, but its wheel bundles the proprietary Claude Code binary, and the TypeScript package's LICENSE.md still says All rights reserved under Anthropic's Commercial Terms, both re-read in the clones on 1 November (18). The data-usage page, re-read on 1 November, states 30-day retention for commercial and API users, zero data retention for qualified accounts, no training on commercial data and 30 days of local transcripts in ~/.claude/projects, but still names the logging and error-tracking services only as third parties (25). Deprecations appear in the changelogs without dates, and there's no written deprecation policy for the SDK (8). Telemetry is documented per provider, with an opt-out for each service (20). 18+25+8+20 = 71. Judgement call on the licence line, written on Claude.); smolagents 65 (Apache-2.0 (30). The library stores nothing itself; the default model sends prompts to Hugging Face's inference providers, which the docs show (20). Breaking removals such as WasmExecutor shipped in minor releases, without a written deprecation policy (5). No telemetry, though no page states it (12). 30+20+5+12 = 67.)
- Security & auth, Claude Agent SDK +17: Claude Agent SDK 83 (Usage metrics go to Anthropic and third-party logging by default on the Claude API, without code, prompts or file paths, and DISABLE_TELEMETRY=1 turns them off. They're off by default on Google Cloud, Bedrock, Foundry and Claude Platform on AWS, unless a host platform sets CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST. WebFetch sends hostnames to api.anthropic.com for a blocklist check on every provider, with its own opt-out. All re-read on the data-usage page on 1 November (20). canUseTool approval callback and PreToolUse hooks, plan and dontAsk modes with deny rules, and sandbox settings for shell commands, re-read on the permissions page on 1 November. TypeScript 0.3.301 added per-tool `always_ask` and `always_deny` policies for in-process MCP servers, and 0.3.314 and 0.3.316 typed `blockWritesOutsideWorkingDirectories` and `blockReadsExemptPaths` (20). Hooks can block a call and auto mode runs a classifier on actions, but there's no input or output guardrail primitive (10). OpenTelemetry export to your own collector stays off until CLAUDE_CODE_ENABLE_TELEMETRY=1 is set, prompt and tool content need separate flags, and tool_decision and permission_mode_changed events can form a per-user audit trail, per the observability page read on 15 October (15). HackerOne bug bounty, advisories published on the claude-code repository, whose SECURITY.md is unchanged in the clone, and anthropic.com's security.txt valid to 31 December 2026, re-read on 1 November, but neither the Python nor the TypeScript SDK repository has a SECURITY.md, checked again in both clones on 1 November (18). 20+20+10+15+18 = 83. Framework reading, so SOC 2 isn't scored, as for claude-code. The bundled CLI's advisories are counted under negative events, not here.); smolagents 66 (Framework reading (telemetry defaults, approvals, guardrails, sandboxing). No telemetry found in the source (25). No human approval hook beyond step callbacks; the local executor restricts imports but the guide says it isn't a security tool, and isolation needs a remote executor (10). The secure execution guide covers LLM-generated code risks, without prompt-injection guidance for tool output (7). OpenTelemetry tracing through OpenInference and run inspection (12). SECURITY.md with private reporting and CVE credit, and the remote-executor RCE was fixed in public, but two 2026 CVE records say the vendor didn't respond (12). 25+10+7+12+12 = 66.)
- Schema & documentation, Claude Agent SDK +8: Claude Agent SDK 89 (Typed public interfaces with a full Python and TypeScript reference, options as dataclasses and TypedDicts (25). llms.txt at code.claude.com/docs/llms.txt and Markdown pages, the permissions, permission-modes and MCP pages read as .md on 1 November (10). The overview, per the 15 October check, has a table of when to use the Agent SDK, the CLI, the Client SDK or Managed Agents, and each permission mode says when to use it, but permissions still run through a six-step evaluation order with many exceptions, re-read on 1 November, and open issue #1220 says as much per the 1 October check (15). Permission modes and MCP server configs are typed variants, Python 0.2.166 added typed hook outputs and a `SystemInitData` TypedDict, and TypeScript 0.3.312 to 0.3.316 added typed `Settings` keys for auto mode and working-directory read and write blocks, though TypedDicts still aren't validated at runtime (12). Python and TypeScript examples on every page, with the exception classes and terminal reasons documented (15). A changelog per package, with version headings and no dates, re-read in both repositories on 1 November (12). 25+10+15+12+15+12 = 89.); smolagents 81 (Framework reading. A typed Python API with reference pages for agents, models, tools and executors (22). llms.txt and Markdown pages on huggingface.co (10). The docs say when to use CodeAgent or ToolCallingAgent and when a sandbox is needed (17). Tools declare typed inputs in a schema dictionary or from a decorated function (12). Many runnable examples; error classes exist but aren't catalogued (10). Versions tagged with release notes, no changelog file (10). 22+10+17+12+10+10 = 81.)