{ "data": { "a": { "slug": "claude-code", "name": "Claude Code", "vendor": "Anthropic", "vendorUrl": "https://www.anthropic.com", "kind": "harness", "category": "agent-harnesses", "summary": "Anthropic's coding agent as a terminal program, also in VS Code, JetBrains, the desktop app and Anthropic-hosted cloud sessions.", "url": "https://www.anchorterminal.com/tools/claude-code", "markdownUrl": "https://www.anchorterminal.com/tools/claude-code.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/claude-code.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/claude-code.json", "dns": "claude-code.grade.anchorterminal.com", "repo": "https://github.com/anthropics/claude-code", "license": "Proprietary. `LICENSE.md` says All rights reserved, with use under Anthropic's Commercial Terms. The GitHub repository holds the changelog, plugins and examples, not the source", "transports": [], "packages": [ { "registry": "npm", "name": "@anthropic-ai/claude-code" } ], "auth": "mixed", "authNotes": "Sign in through the browser with a Pro, Max, Team or Enterprise claude.ai account, or use a Claude Console API key (`ANTHROPIC_API_KEY`), or Amazon Bedrock, Google Cloud, Microsoft Foundry or Claude Platform on AWS credentials. The free claude.ai plan doesn't include Claude Code.", "pricing": "paid", "pricingNotes": "Free to download, and it needs a paid plan or API tokens to run. Pro is $17 a month billed annually or $20 monthly, Max $100 a month, Ultra $200 a month, Team $20 or $25 a standard seat and $100 or $125 a premium seat, Enterprise $20 a seat billed annually with a 20-seat minimum, plus usage at API rates, or pay as you go at Claude API token prices. On a plan Claude Code shares the plan's usage limits, and the pricing page gives no number for them (checked 2026-11-04).", "priceSummary": "$20 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the pricing page (checked 2026-10-02).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 141000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-02" }, "docsUrl": "https://code.claude.com/docs/en/overview", "llmsTxt": "https://code.claude.com/docs/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "official", "harness", "coding-agent", "cli", "closed-source", "claude-only", "mcp", "llms-txt", "telemetry-default-on", "status-page", "card-required" ], "lastRelease": "2026-11-04", "graded": true, "disclosure": "Anthropic makes the models this research run and the review panel run on. This listing was graded by agents running on Claude, by the same published checklist as every other listing, and re-checked on 15 October 2026 with every judgement call written in the note. Since that date the panel reviews it too, at our founder's request, and every review carries a conflict label, because every reviewer and the arbiter run on Claude.", "anchor": { "graded": true, "score": 53.6, "grade": "D", "agentReady": false, "rank": 937, "ranked": true, "rankOf": 1486, "categoryRank": 36, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 91, "maintenance": 82, "payments": 20, "reliability": 50, "schema": 80, "security": 80, "transparency": 81 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-04" }, "negative": -15, "negativeNotes": [ "2025-11-19 to 2026-10-15, the 12 months to 4 November. GitHub's reviewed database, read through OSV on 4 November, holds 29 advisories for @anthropic-ai/claude-code; 19 fall in the window, 14 High, 4 Moderate and 1 Low, and the repository's GHSA-5j29-h97v-84ch (High, 5 October) and GHSA-gfvf-j8jh-jxxw (Low, 29 September), per the 15 October reading, make 21, 15 of them High. Among them are approval-prompt bypasses through command injection (GHSA-qgqw-h4xq-7w8w, GHSA-mhg7-666j-cqg4, GHSA-66q4-vfjg-2qhh, GHSA-xq4m-mc3c-vvg3), sandbox escapes (GHSA-ff64-7w26-62rf, GHSA-vp62-r36r-9xqp, GHSA-7835-87q9-rgvv), workspace-trust bypasses that ran code from a cloned repository (GHSA-5hhx-v7f6-x7gv, GHSA-mmgp-wc2j-qcv7, GHSA-q5hj-mxqh-vv77), a WebFetch exfiltration path (GHSA-fg94-h982-f3mm) and a plugin hash-pin bypass (GHSA-pq7j-f95f-qfcv, 15 October). All fixed and published by Anthropic. Judgement call. This run counts published advisories per advisory (fixed Lows 0, a fixed High over two months old 1, under two months 2, a vendor-published fixed Moderate 1), which gives 13 + 4 + 4 = 21. The 17 October check and the Claude Agent SDK listing applied a cap of -6 to the same advisories, a cap this run's settled reading doesn't have. We took the per-advisory reading, the stricter one, which alone reaches the -15 floor; with the cap the listing would carry -11 (https://api.osv.dev/v1/query and https://github.com/anthropics/claude-code/security/advisories). -21 before the floor", "2026-10-02 to 2026-11-04. Changelog-only fixes with no advisory found, folded into one term as on 17 October and on the Claude Agent SDK listing. 2.1.288 to 2.1.300 (2 to 14 October) fixed a dangerous `rm` inside `bash -c` running without a prompt, deny and ask rules missed behind an environment-variable prefix, hook approvals and auto mode skipping the prompt for UNC-path reads (marked Security), sandbox gaps through `--plugin-dir` and symlinks, and agent hooks allowing an action when their model was unavailable. Since then 2.1.314 (30 October) fixed sandbox protections not applying to a worktree entered by `claude -p --resume` and `forceRemoteSettingsRefresh` letting sessions start without policy, 2.1.316 (31 October) a managed `autoMode.allow` list getting built-in exceptions back, and 2.1.318 (4 November) permission prompts answered by keys typed just after sending a message. All released. We applied the -2 GitHub Copilot CLI got for one changelog-only enforcement-gap fix (https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md). -2", "2026-10-14 to 2026-10-20. Breaking changes in 2.1.x patch releases with no advance notice found. 2.1.300 (14 October) removed `--sandbox` and `--no-sandbox` from `claude remote-control`, and \"passing either now exits with an error\", with no earlier deprecation in the changelog. 2.1.302 (16 October) changed the starting permission mode of `claude -p` and Agent SDK runs, and 2.1.305 (20 October) stopped `allowedMcpServers` filtering managed stdio servers that use `${VAR}` only in `env`, so one an allowlist left out \"now loads on upgrade\". The founder's 1 November reading takes -3 for breaking changes in a release below a major with no notice, even where earlier checks read them only through the semver line, as cline's 3.0.70 took. Repeats fold into one term. Judgement call. The same changes, published with the release that made them, could also be read under the same-day rule as a second term (-6 in all); this run counts one event under one kind, as cline's was, so one -3 (https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md). -3" ], "verdict": "Six permission modes, allow, ask and deny rules down to command arguments, PreToolUse hooks, and managed settings that can disable bypass and auto mode. The sandbox is off by default and native Windows has none, 21 advisories were published in the last year, and breaking changes ship unmarked in patch releases.", "bestFor": "A developer or a pipeline that wants Claude doing repository work with fine-grained, centrally managed permissions and an SDK for the same loop.", "disclosure": "Anthropic makes the models this research run and the review panel run on. This listing was graded by agents running on Claude, by the same published checklist as every other listing, and re-checked on 15 October 2026 with every judgement call written in the note. Since that date the panel reviews it too, at our founder's request, and every review carries a conflict label, because every reviewer and the arbiter run on Claude.", "strengths": [ "Six permission modes, allow, ask and deny rules down to command arguments, PreToolUse hooks, and managed settings that can disable bypass and auto mode", "An OS sandbox (Seatbelt, bubblewrap) whose network proxy denies every host outside an allowlist that starts empty", "`claude -p` with json and stream-json output, `--max-turns`, `--max-budget-usd`, resume and fork, and Python and TypeScript SDKs for the same loop", "Signed apt, dnf and apk repositories, a GPG-signed checksum manifest and a stable channel that skips releases with major regressions", "Telemetry documented per provider and per service, each with its own opt-out" ], "weaknesses": [ "The sandbox is off by default and native Windows has none", "Auto mode, a classifier rather than a person, is the built-in starting mode for terminal and VS Code sessions since 2.1.283", "21 published advisories from 19 November 2025 to 15 October 2026, 15 High, and changelog-only sandbox and permission fixes through 2.1.318", "Breaking changes ship unmarked in 2.1.x patch releases, such as 2.1.300's removed flags that now exit with an error", "Closed source, Claude models only, and no free plan includes it" ], "agentNotes": [ "Pass `--permission-mode`, `--max-turns` and `--max-budget-usd` on every `claude -p` run. With no mode set, `-p` starts in Manual and denies calls that need approval", "Turn on the sandbox with `sandbox.enabled` and set `allowUnsandboxedCommands` to false, or Claude can retry a blocked command outside it", "Pin a version or use the stable channel in CI and read the changelog before upgrading, since flags and defaults change in patch releases", "Set `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1` on a Claude login to stop metrics and error reports in one go", "Read `credential_expires_at` in `-p` JSON results and renew a claude.ai login before it lapses mid-run" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 53.6 } ], "editorialScores": { "ergonomics": 91, "maintenance": 82, "payments": 20, "reliability": 50, "schema": 80, "security": 80, "transparency": 68 }, "provenanceScore": 94, "checked": { "categories": { "ergonomics": "2026-11-04", "maintenance": "2026-11-04", "payments": "2026-11-04", "reliability": "2026-11-04", "schema": "2026-11-04", "security": "2026-11-04", "transparency": "2026-11-04" }, "last": "2026-11-04", "lastMoved": "2026-11-04", "oldest": "2026-11-04", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "curl -fsSL https://claude.ai/install.sh | bash # or: brew install --cask claude-code", "headless": { "run": "claude -p \"fix the failing test\" --output-format json --permission-mode acceptEdits --max-turns 20" } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/claude-code" }, "sameCompany": [ "anthropic-api", "claude-agent-sdk" ], "area": "frameworks", "unitPrices": [ { "item": "Pro plan", "unit": "month", "usd": 20, "note": "$17 a month billed annually" }, { "item": "Max plan", "unit": "month", "usd": 100, "note": "lowest Max tier" } ], "provenance": { "legalEntity": "Anthropic, PBC", "domain": "claude.com", "domainRegistered": "1995-05-24", "domainNote": "claude.com was registered in 1995, long before Anthropic bought it. Free, Pro, Max and Ultra users are under the Consumer Terms, Team, Enterprise and API users under the Commercial Terms. The security.txt state is anthropic.com's, read on 4 November 2026 (HackerOne contact, Expires 2026-12-31). claude.com served none on 17 October. The terms and privacy URLs weren't re-read. The status page was read through history.atom, since status.claude.com's robots.txt disallows /api/ and /embed/.", "endpointOnVendorDomain": null, "terms": "https://www.anthropic.com/legal/commercial-terms", "privacy": "https://www.anthropic.com/legal/privacy", "statusPage": "https://status.claude.com", "changelog": "https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md", "securityTxt": "valid", "checked": "2026-11-04", "score": 94 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/claude-code.json", "live": { "slug": "claude-code", "vendorStatus": { "page": "https://status.claude.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T18:20:39.66660558Z" }, "versions": [ { "registry": "github", "name": "anthropics/claude-code", "version": "v2.1.319", "released": "2026-11-06", "seenAt": "2026-11-06T23:14:38.733468625Z" }, { "registry": "npm", "name": "@anthropic-ai/claude-code", "version": "2.1.319", "seenAt": "2026-11-06T23:14:38.510959631Z" } ], "githubStars": 154800, "npmWeekly": 13612394, "securityTxt": { "url": "https://claude.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:46.200748618Z" }, "llmsTxt": { "url": "https://code.claude.com/docs/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:31:50.898605587Z" }, "domain": { "domain": "claude.com", "registered": "1995-05-24", "source": "https://rdap.verisign.com/com/v1/domain/claude.com", "checkedAt": "2026-11-01T14:09:10.467098064Z" }, "pages": [ { "url": "https://code.claude.com/docs/en/changelog", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:01:36.806191107Z", "changedAt": "2026-11-07T14:01:36.806191107Z", "fingerprint": "47becb9556d3" }, { "url": "https://raw.githubusercontent.com/anthropics/claude-code/main/CHANGELOG.md", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:19:59.969745148Z", "changedAt": "2026-11-07T14:19:59.969745148Z", "fingerprint": "12797120784e" } ], "github": { "repo": "anthropics/claude-code", "checkedAt": "2026-11-02T08:30:57.247733704Z", "stars": 154214, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-02T07:12:58Z", "openIssues": 15558, "openPRs": 641, "issuesOpened90d": 22763, "issuesClosed90d": 20839, "prsMerged90d": 42, "ci": { "branch": "main", "runs": 50, "success": 50, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-11-02T07:13:09Z" }, "advisories": [ { "ghsa": "GHSA-5xjx-9qx6-jcrv", "cve": "CVE-2026-88968", "severity": "high", "published": "2026-10-26T11:43:04Z" }, { "ghsa": "GHSA-4p2j-qj3c-6x84", "cve": "CVE-2026-88066", "severity": "high", "published": "2026-10-13T12:24:43Z" }, { "ghsa": "GHSA-pq7j-f95f-qfcv", "cve": "CVE-2026-86063", "severity": "high", "published": "2026-10-09T15:14:01Z" }, { "ghsa": "GHSA-5j29-h97v-84ch", "cve": "CVE-2026-103435", "severity": "high", "published": "2026-10-05T12:45:33Z" }, { "ghsa": "GHSA-gfvf-j8jh-jxxw", "cve": "CVE-2026-103012", "severity": "low", "published": "2026-09-29T21:44:55Z" }, { "ghsa": "GHSA-v234-4jrq-mgg6", "severity": "high", "published": "2026-09-25T21:54:09Z" }, { "ghsa": "GHSA-4vp2-6q8c-pvq2", "cve": "CVE-2026-46406", "severity": "medium", "published": "2026-06-25T13:29:49Z" }, { "ghsa": "GHSA-7835-87q9-rgvv", "cve": "CVE-2026-55607", "severity": "high", "published": "2026-06-25T13:14:35Z" }, { "ghsa": "GHSA-fg94-h982-f3mm", "cve": "CVE-2026-54316", "severity": "medium", "published": "2026-06-13T11:40:00Z" }, { "ghsa": "GHSA-3rwf-2g6p-c2f9", "cve": "CVE-2026-44467", "severity": "high", "published": "2026-05-06T20:27:32Z" }, { "ghsa": "GHSA-5p5x-5294-qhp3", "cve": "CVE-2026-44470", "severity": "high", "published": "2026-05-06T20:25:23Z" }, { "ghsa": "GHSA-q5hj-mxqh-vv77", "cve": "CVE-2026-40068", "severity": "high", "published": "2026-04-24T11:53:10Z" }, { "ghsa": "GHSA-vp62-r36r-9xqp", "cve": "CVE-2026-39861", "severity": "high", "published": "2026-04-20T10:19:11Z" }, { "ghsa": "GHSA-5cwg-9f6j-9jvx", "cve": "CVE-2026-35603", "severity": "medium", "published": "2026-04-17T10:41:05Z" }, { "ghsa": "GHSA-mmgp-wc2j-qcv7", "cve": "CVE-2026-33068", "severity": "high", "published": "2026-03-18T21:35:35Z" }, { "ghsa": "GHSA-66q4-vfjg-2qhh", "cve": "CVE-2026-25722", "severity": "high", "published": "2026-02-06T00:15:51Z" }, { "ghsa": "GHSA-mhg7-666j-cqg4", "cve": "CVE-2026-25723", "severity": "high", "published": "2026-02-06T00:14:51Z" }, { "ghsa": "GHSA-ff64-7w26-62rf", "cve": "CVE-2026-25725", "severity": "high", "published": "2026-02-06T00:13:40Z" }, { "ghsa": "GHSA-4q92-rfm6-2cqx", "cve": "CVE-2026-25724", "severity": "low", "published": "2026-02-06T00:12:26Z" }, { "ghsa": "GHSA-qgqw-h4xq-7w8w", "cve": "CVE-2026-24887", "severity": "high", "published": "2026-02-03T19:13:11Z" }, { "ghsa": "GHSA-q728-gf8j-w49r", "cve": "CVE-2026-24053", "severity": "high", "published": "2026-02-03T19:10:25Z" }, { "ghsa": "GHSA-vhw5-3g5m-8ggf", "cve": "CVE-2026-24052", "severity": "high", "published": "2026-02-03T19:05:06Z" }, { "ghsa": "GHSA-jh7p-qr78-84p7", "cve": "CVE-2026-21852", "severity": "medium", "published": "2026-01-20T22:31:15Z" }, { "ghsa": "GHSA-xq4m-mc3c-vvg3", "cve": "CVE-2025-66032", "severity": "high", "published": "2025-12-03T00:54:43Z" }, { "ghsa": "GHSA-7mv8-j34q-vp7q", "cve": "CVE-2025-64755", "severity": "high", "published": "2025-11-20T18:54:54Z" }, { "ghsa": "GHSA-5hhx-v7f6-x7gv", "cve": "CVE-2025-65099", "severity": "high", "published": "2025-11-19T02:34:10Z" }, { "ghsa": "GHSA-4fgq-fpq9-mr3g", "cve": "CVE-2025-59536", "severity": "high", "published": "2025-10-03T04:41:02Z" }, { "ghsa": "GHSA-66m2-gx93-v996", "cve": "CVE-2025-59829", "severity": "low", "published": "2025-10-03T04:36:40Z" }, { "ghsa": "GHSA-2jjv-qf24-vfm4", "cve": "CVE-2025-59828", "severity": "high", "published": "2025-09-24T12:49:58Z" }, { "ghsa": "GHSA-qxfv-fcpc-w36x", "cve": "CVE-2025-58764", "severity": "high", "published": "2025-09-09T23:58:42Z" }, { "ghsa": "GHSA-j4h9-wv2m-wrf7", "cve": "CVE-2025-59041", "severity": "high", "published": "2025-09-09T23:58:39Z" }, { "ghsa": "GHSA-ph6w-f82w-28w6", "severity": "high", "published": "2025-09-02T21:21:00Z" }, { "ghsa": "GHSA-x5gv-jw7f-j6xj", "cve": "CVE-2025-55284", "severity": "high", "published": "2025-08-15T21:36:43Z" }, { "ghsa": "GHSA-pmw4-pwvc-3hx2", "cve": "CVE-2025-54794", "severity": "high", "published": "2025-08-01T23:38:37Z" }, { "ghsa": "GHSA-x56v-x2h6-7j34", "cve": "CVE-2025-54795", "severity": "high", "published": "2025-08-01T23:38:23Z" }, { "ghsa": "GHSA-9f65-56v6-gxw7", "cve": "CVE-2025-52882", "severity": "high", "published": "2025-06-23T15:00:37Z" } ] }, "updatedAt": "2026-11-07T18:20:39.66660558Z" } }, "answer": "Claude Code and Sculptor score within a point of each other on agent readiness, 53.6 (D) and 53.1 (D). Sculptor leads on payments \u0026 pricing.", "b": { "slug": "sculptor", "name": "Sculptor", "vendor": "Imbue, Inc.", "vendorUrl": "https://imbue.com", "kind": "harness", "category": "agent-harnesses", "summary": "Sculptor is Imbue's open-source desktop app for running coding agents in parallel, each in an isolated copy of your code, with built-in skills for agentic development. It's labelled an experimental research preview.", "url": "https://www.anchorterminal.com/tools/sculptor", "markdownUrl": "https://www.anchorterminal.com/tools/sculptor.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/sculptor.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/sculptor.json", "dns": "sculptor.grade.anchorterminal.com", "repo": "https://github.com/imbue-ai/sculptor", "license": "MIT", "transports": [], "packages": [], "auth": "none", "pricing": "free", "pricingNotes": "Free and open source. You pay for the coding agents it runs, through your own subscriptions or API keys (checked 2026-11-07).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No payment protocol in the repository or README (checked 2026-11-07).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-07" }, "docsUrl": "https://github.com/imbue-ai/sculptor#readme", "capabilities": [ "agent.harness", "agent.multi-agent" ], "tags": [ "open-source", "mit", "desktop-app", "new" ], "lastRelease": "2026-11-06", "graded": true, "anchor": { "graded": true, "score": 53.1, "grade": "D", "agentReady": false, "rank": 960, "ranked": true, "rankOf": 1486, "categoryRank": 37, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 50, "maintenance": 75, "payments": 60, "reliability": 43, "schema": 45, "security": 57, "transparency": 57 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "low", "date": "2026-11-07" }, "negative": 0, "verdict": "Imbue's open-source app for parallel coding agents in isolated workspaces, with telemetry off until you choose otherwise. It's an experimental research preview that warns of bugs and drastic changes, Mac and Linux only, with no changelog.", "bestFor": "Developers who want parallel coding agents in isolated workspaces and are fine with a research preview.", "strengths": [ "Each workspace is an isolated copy of the code, reviewed and merged back", "Analytics, error reporting and session recording default to off, with consent at first run", "Built-in skills for agentic development", "MIT from Imbue, with CI on pull requests" ], "weaknesses": [ "Labelled an experimental research preview that may change drastically", "Mac (Apple Silicon) and Linux only", "No changelog file", "Few outside contributions accepted for now" ], "agentNotes": [ "Download from the README's links, connect a repository and create a workspace before prompting", "Review the diff before merging a workspace back to main" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "D", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 53.1 } ], "editorialScores": { "ergonomics": 50, "maintenance": 75, "payments": 60, "reliability": 43, "schema": 45, "security": 57, "transparency": 73 }, "provenanceScore": 40, "checked": { "categories": { "ergonomics": "2026-11-07", "maintenance": "2026-11-07", "payments": "2026-11-07", "reliability": "2026-11-07", "schema": "2026-11-07", "security": "2026-11-07", "transparency": "2026-11-07" }, "last": "2026-11-07", "oldest": "2026-11-07", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "Download for Mac (Apple Silicon) or Linux from the README" }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/sculptor" }, "area": "frameworks", "provenance": { "legalEntity": "Imbue, Inc.", "domain": "imbue.com", "domainRegistered": "", "domainNote": "Not looked up: RDAP isn't requested under the 1 November 2026 rules.", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-11-07", "notes": [ "The licence names Imbue, Inc.. The repository is github.com/imbue-ai/sculptor." ], "score": 40 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/sculptor.json", "live": { "slug": "sculptor", "securityTxt": { "url": "https://imbue.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:32.925074454Z" }, "updatedAt": "2026-11-07T16:01:32.925074454Z" } }, "edges": [ { "by": 41, "category": "ergonomics", "leads": "claude-code", "name": "Agent ergonomics", "reasons": { "a": "Framework reading, adapted to a harness driven by a pipeline. One command (`claude -p`) runs a task with MCP servers from `--mcp-config`, and MCP tools can be deferred behind tool search (25). `--max-turns`, `--max-budget-usd` and a background-command timeout stop runs, and large MCP results go to a file (20). json and stream-json output, `-p` errors name the cause, and since 2.1.318 `-p` JSON results carry `credential_expires_at` and a timed-out claude.ai login names `claude auth login` and `claude setup-token` (16). `--resume`, `--continue` and `--fork-session`, and one retry limit per model call of at most 14 requests (18). Python and TypeScript Agent SDKs. The permission-modes page re-read on 4 November says `claude -p` and Agent SDK runs with no mode set start in Manual (`default`) on every provider since 2.1.302, so the 17 October cost (a starting mode that varied by version, plan, provider and telemetry, with the docs behind) is gone. One cost remains, as for the Claude Agent SDK listing, since calls needing approval are denied until the pipeline adds allow rules or picks a mode. Judgement call. Other vendors lost 3 of 15 for one such cost (muse-code 12, \"a pipeline has to choose a posture\"), and the Anthropic brief asks for the reading other vendors got, so 12 (8 on 17 October). Keeping 8 would count the remaining cost twice, the double count the Claude Agent SDK's verifier corrected on 1 November (12). 25 + 20 + 16 + 18 + 12 = 91.", "b": "Harness reading. Workspaces as isolated copies, review and merge back, and built-in skills (50)." }, "scores": { "a": 91, "b": 50 } }, { "by": 40, "category": "payments", "leads": "sculptor", "name": "Payments \u0026 pricing", "reasons": { "a": "Harness reading of the published rubric. No payment protocol (0). Plan prices and per-token API prices are public without a login, re-read on claude.com/pricing on 4 November (Pro $17 a month annually or $20 monthly, Max $100, a new Ultra plan at $200, Team seats from $20), though plan usage limits aren't given as numbers (20). No free route. The Free plan's list on the pricing page doesn't include Claude Code, which first appears under Pro, and the API, Bedrock, Google Cloud and Foundry are paid (0). A person signs in through a browser or creates a key, and there's no supported local-model mode (0). 0 + 20 + 0 + 0 = 20. Judgement call, against Anthropic's own product. The Claude Agent SDK earned 20 for a free package because a framework is the thing you install, whereas a harness is useless without the paid account, so we didn't credit the free download here.", "b": "Free self-hosted software with nothing to buy, so 0 for a protocol and 20 each for public pricing, a free tier and onboarding with no sign-up, 60." }, "scores": { "a": 20, "b": 60 } }, { "by": 35, "category": "schema", "leads": "claude-code", "name": "Schema \u0026 documentation", "reasons": { "a": "Framework reading. No published JSON Schema for settings that we checked (per the 1 October check, not re-read), but the settings reference types every key, and the stream-json output has typed message classes in the Python and TypeScript Agent SDKs (18). llms.txt at code.claude.com/docs/llms.txt with a Markdown version of each page; code.claude.com's robots.txt carries Content-Signal ai-train=yes, search=yes, ai-input=yes (10). The permission-mode table says what each mode is best for and, re-read on 4 November, now gives `default` as the starting mode for `claude -p` and the Agent SDK, matching 2.1.302. The rules still carry many version-specific exceptions (mods, protected paths, carve-outs by settings source) that a model has to read closely. Judgement call. The page catching up removes the reason given on 17 October but not the one given before it, so the line stays at 15 rather than rising; the lighter reading gives 17 and schema 82 (15). Permission modes, sandbox settings and rule syntax are enumerated, though rules are strings parsed at runtime (12). Examples on every page and a troubleshooting section for install and auth errors (13). A changelog for every release. CHANGELOG.md in the repository has no dates, feed.xml dates the latest 20 (2.1.318 at 00:00 UTC on 4 November), and the code.claude.com changelog page dated every release on 17 October. Breaking changes still aren't marked (12). 18 + 10 + 15 + 12 + 13 + 12 = 80.", "b": "Harness reading. A README, specs and agent docs in the repository; no API reference (45)." }, "scores": { "a": 80, "b": 45 } }, { "by": 24, "category": "transparency", "leads": "claude-code", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed source with clear terms, `LICENSE.md` pointing to the Commercial Terms, unchanged in the clone on 4 November (15). The data-usage page, re-read on 4 November, states retention per account type (consumer 30 days or 5 years with training on, commercial 30 days, zero retention for qualified Enterprise), 30 days of plaintext local transcripts, 5 years for /feedback reports and up to 6 months for shared survey transcripts, and these agree with the privacy policy links, but the logging and error-tracking services are named only as third parties. The page still doesn't say that since 2.1.300 local transcripts also record each API request's system prompt, tools and parameters, read as an omission rather than a contradiction (25). No written deprecation policy. The README still marks npm installs deprecated without a date. 2.1.316 gives Claude Code's first dated advance notice of its own, fast mode for Opus 4.8 deprecated on 30 October and removed on 30 November 2026, 31 days' notice. Judgement call. One dated notice and no policy; we kept 8, the stricter reading, and crediting the notice would give 10 and transparency 70 (8). Telemetry is documented per provider and per service with an opt-out for each, re-read on 4 November (20). 15 + 25 + 8 + 20 = 68.", "b": "MIT (30). Consent-based telemetry documented in the repository (18 of 30). The README warns of drastic changes during the research preview, with no deprecation policy (5). Opt-in telemetry (20). 30 + 18 + 5 + 20 = 73." }, "scores": { "a": 81, "b": 57 } }, { "by": 23, "category": "security", "leads": "claude-code", "name": "Security \u0026 auth", "reasons": { "a": "Framework reading (telemetry defaults, approvals, guardrails, sandboxing), five lines. The data-usage page, re-read on 4 November, says usage metrics are on by default on the Claude API without code, prompts or file paths, error reports are on by default for Pro, Max and Ultra sign-ins since v2.1.198, /feedback reports are on, session quality surveys run on every provider, and every provider sends WebFetch hostnames to api.anthropic.com for a blocklist check, each with an opt-out. Metrics, error reports and /feedback are off by default on Bedrock, Google Cloud, Foundry and Claude Platform on AWS unless a host sets `CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST` (18). Six modes, allow, ask and deny rules, protected paths, and managed settings that can disable bypass and auto mode. 2.1.314 added `permissions.blockWritesOutsideWorkingDirectories`. The sandbox is opt-in and absent on native Windows, and auto mode, a classifier rather than a person, is the built-in starting mode for terminal and VS Code sessions on 2.1.283 or later, per the permission-modes page re-read on 4 November; sandboxing per 17 October (16). The auto-mode classifier blocks named exfiltration patterns, the sandbox proxy denies hosts outside an allowlist that starts empty, and WebFetch checks a blocklist, but since 1 October 2026 a mod can approve a call a deny rule refuses unless managed settings or a Team or Enterprise sign-in hold it (11). Opt-in OpenTelemetry with tool content behind `OTEL_LOG_TOOL_CONTENT`, local transcripts for 30 days, and cloud sessions logged through a proxy; 2.1.317 adds plan, seat type and provider attributes (15). HackerOne bug bounty and SECURITY.md (unchanged since 15 May 2026 in the clone), advisories published with GHSA ids, the newest in GitHub's reviewed database GHSA-pq7j-f95f-qfcv (High, 15 October; OSV holds 29 for the package on 4 November, none newer), and anthropic.com's security.txt valid to 31 December 2026, re-read on 4 November (20). 18 + 16 + 11 + 15 + 20 = 80. SOC 2 isn't scored on the framework reading. Advisories and the changelog-only sandbox and permission fixes count under negative events. Judgement call, written by an agent on Claude, on the same checklist the other harnesses got.", "b": "Harness reading. Product analytics, error reporting and session recording default to off in the user config, and the app asks for a telemetry level and privacy consent at first run; PostHog runs on the front end only for now (25 of 30). Each workspace is an isolated copy of the code (14 of 20). No prompt-injection guidance (5). No audit log (5). SECURITY.md (8). 25 + 14 + 5 + 5 + 8 = 57." }, "scores": { "a": 80, "b": 57 } }, { "by": 7, "category": "reliability", "leads": "claude-code", "name": "Reliability", "reasons": { "a": "Local-package reading. Official installers for macOS 13+, Windows 10 1809+, Ubuntu 20.04+, Debian 10+ and Alpine 3.19+, signed apt, dnf and apk repositories and a GPG-signed manifest of checksums for every binary, per the 17 October reading of the setup page, not re-read on 4 November (20). No public CI or test suite for the program, since the source isn't published. The repository's workflows on 4 November are issue triage and housekeeping plus mod-tests.yml, which runs on pull requests that touch the mods folder, installs the published package, type-checks the mods and runs each mod's own tests (skipped when the installed CLI has no `plugin test`), so it doesn't test the program (0). Over 5,000 open issues and 735 open pull requests, with area, platform and regression labels on new reports but no maintainer replies visible on the first page, per the 1 October check, not re-read since because github.com answers our proxy with 403 (10). Every change still ships as a 2.1.x patch with no breaking-change heading. 2.1.300 (14 October) made two removed `claude remote-control` flags exit with an error, 2.1.302 (16 October) changed the starting permission mode of `claude -p` and Agent SDK sessions, and 2.1.305 (20 October) stopped `allowedMcpServers` filtering some managed stdio servers, so servers an allowlist left out load on upgrade. A stable channel skips releases with major regressions (5). 2.1.318, so 1.0 or later (15). 20 + 0 + 10 + 5 + 15 = 50. Same reading as Cursor CLI and GitHub Copilot CLI, which are also closed source.", "b": "Local software. Desktop downloads for Mac (Apple Silicon), Linux and Linux ARM64 (20). checks.yml and a PR gate run on the repository; pass state not read (15). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent (0). sculptor-v tags up to v0.49.0, no changelog file (8). 0.x and labelled a research preview (0). 20 + 15 + 0 + 8 + 0 = 43." }, "scores": { "a": 50, "b": 43 } } ], "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Anthropic", "b": "Imbue, Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "None", "name": "Auth" }, { "a": "Paid", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary. `LICENSE.md` says All rights reserved, with use under Anthropic's Commercial Terms. The GitHub repository holds the changelog, plugins and examples, not the source", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-11-04", "b": "2026-11-06", "name": "Last release" }, { "a": "no date given", "b": "no document linked", "name": "Terms last updated" }, { "a": "no date given", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "yes, with an opt-out", "b": "not read yet", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "not read yet", "name": "Arbitration or class-action waiver" }, { "a": "141k stars", "b": "none", "name": "Popularity" }, { "a": "2.5/5 (4)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Claude Code and Sculptor score within a point of each other on agent readiness, 53.6 (D) and 53.1 (D). Sculptor leads on payments \u0026 pricing.", "question": "Which is better for AI agents, Claude Code or Sculptor?" }, { "answer": "No open-source release is listed for Claude Code. Sculptor is open source (MIT).", "question": "Are Claude Code and Sculptor open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 50 against 43", "Schema \u0026 documentation, 80 against 45", "Agent ergonomics, 91 against 50", "Security \u0026 auth, 80 against 57", "Maintenance \u0026 community, 82 against 75", "Transparency \u0026 trust, 81 against 57" ], "also": null, "goodFor": "A developer or a pipeline that wants Claude doing repository work with fine-grained, centrally managed permissions and an SDK for the same loop.", "slug": "claude-code", "watchFor": "The sandbox is off by default and native Windows has none" }, { "aheadOn": [ "Payments \u0026 pricing, 60 against 20" ], "also": [ "No key needed to call it", "Open source", "No incidents deducted, where Claude Code loses 15 points for them" ], "goodFor": "Developers who want parallel coding agents in isolated workspaces and are fine with a research preview.", "slug": "sculptor", "watchFor": "Labelled an experimental research preview that may change drastically" } ], "history": { "claude-code": [ { "causes": [ "correction" ], "date": "2026-11-04", "delta": -6.3, "from": 59.9, "fromGrade": "C", "to": 53.6, "toGrade": "D" }, { "causes": [ "event" ], "date": "2026-10-15", "delta": -2, "from": 61.9, "fromGrade": "C", "to": 59.9, "toGrade": "C" }, { "causes": [ "method" ], "date": "2026-10-08", "delta": -0.3, "from": 62.2, "fromGrade": "B", "to": 61.9, "toGrade": "C" } ], "sculptor": null }, "job": { "capability": "agent.harness", "name": "Agent harnesses" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-claude-code.json", "title": "Agent Zero vs Claude Code", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-sculptor.json", "title": "Agent Zero vs Sculptor", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-claude-code.json", "title": "Aider vs Claude Code", "url": "https://www.anchorterminal.com/compare/aider-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-sculptor.json", "title": "Aider vs Sculptor", "url": "https://www.anchorterminal.com/compare/aider-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-claude-code.json", "title": "Amp vs Claude Code", "url": "https://www.anchorterminal.com/compare/amp-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-sculptor.json", "title": "Amp vs Sculptor", "url": "https://www.anchorterminal.com/compare/amp-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-claude-code.json", "title": "Antigravity CLI vs Claude Code", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-sculptor.json", "title": "Antigravity CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-claude-code.json", "title": "Auggie CLI vs Claude Code", "url": "https://www.anchorterminal.com/compare/auggie-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-sculptor.json", "title": "Auggie CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/auggie-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/axlr-vs-claude-code.json", "title": "AXLR vs Claude Code", "url": "https://www.anchorterminal.com/compare/axlr-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/axlr-vs-sculptor.json", "title": "AXLR vs Sculptor", "url": "https://www.anchorterminal.com/compare/axlr-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-cline.json", "title": "Claude Code vs Cline", "url": "https://www.anchorterminal.com/compare/claude-code-vs-cline" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-conductor.json", "title": "Claude Code vs Conductor", "url": "https://www.anchorterminal.com/compare/claude-code-vs-conductor" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-crush.json", "title": "Claude Code vs Crush", "url": "https://www.anchorterminal.com/compare/claude-code-vs-crush" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-cursor-cli.json", "title": "Claude Code vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-deepseek-harness.json", "title": "Claude Code vs DeepSeek Harness (dsh)", "url": "https://www.anchorterminal.com/compare/claude-code-vs-deepseek-harness" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-deepseek-superagent.json", "title": "Claude Code vs dsh-superagent (DeepSeek)", "url": "https://www.anchorterminal.com/compare/claude-code-vs-deepseek-superagent" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-devin.json", "title": "Claude Code vs Devin", "url": "https://www.anchorterminal.com/compare/claude-code-vs-devin" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-droid-cli.json", "title": "Claude Code vs Droid CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-droid-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-earendil-pi.json", "title": "Claude Code vs Pi", "url": "https://www.anchorterminal.com/compare/claude-code-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-emdash.json", "title": "Claude Code vs Emdash", "url": "https://www.anchorterminal.com/compare/claude-code-vs-emdash" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-gemini-cli.json", "title": "Claude Code vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-github-copilot-cli.json", "title": "Claude Code vs GitHub Copilot CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-github-copilot-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-goose.json", "title": "Claude Code vs goose", "url": "https://www.anchorterminal.com/compare/claude-code-vs-goose" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-harness2.json", "title": "Claude Code vs Harness²", "url": "https://www.anchorterminal.com/compare/claude-code-vs-harness2" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-harnessrouter.json", "title": "Claude Code vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/claude-code-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-jules.json", "title": "Claude Code vs Jules", "url": "https://www.anchorterminal.com/compare/claude-code-vs-jules" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-junie.json", "title": "Claude Code vs Junie CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-junie" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli.json", "title": "Claude Code vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-kimi-code-cli.json", "title": "Claude Code vs Kimi Code CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-kimi-code-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-kiro-cli.json", "title": "Claude Code vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-letta.json", "title": "Claude Code vs Letta", "url": "https://www.anchorterminal.com/compare/claude-code-vs-letta" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-mini-swe-agent.json", "title": "Claude Code vs mini-swe-agent", "url": "https://www.anchorterminal.com/compare/claude-code-vs-mini-swe-agent" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-minimax-code.json", "title": "Claude Code vs MiniMax Code", "url": "https://www.anchorterminal.com/compare/claude-code-vs-minimax-code" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-mistral-vibe-cli.json", "title": "Claude Code vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-muse-code.json", "title": "Claude Code vs Muse Code", "url": "https://www.anchorterminal.com/compare/claude-code-vs-muse-code" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-openai-agents-api.json", "title": "Claude Code vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/claude-code-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-openai-codex.json", "title": "Claude Code vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/claude-code-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-opencode.json", "title": "Claude Code vs OpenCode", "url": "https://www.anchorterminal.com/compare/claude-code-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-openhands.json", "title": "Claude Code vs OpenHands", "url": "https://www.anchorterminal.com/compare/claude-code-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-openmausbot.json", "title": "Claude Code vs OpenMausBot", "url": "https://www.anchorterminal.com/compare/claude-code-vs-openmausbot" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-orca.json", "title": "Claude Code vs Orca", "url": "https://www.anchorterminal.com/compare/claude-code-vs-orca" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-paseo.json", "title": "Claude Code vs Paseo", "url": "https://www.anchorterminal.com/compare/claude-code-vs-paseo" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-prime-agent.json", "title": "Claude Code vs Prime Agent", "url": "https://www.anchorterminal.com/compare/claude-code-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-qoder-cli.json", "title": "Claude Code vs Qoder CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-qoder-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-qwen-code.json", "title": "Claude Code vs Qwen Code", "url": "https://www.anchorterminal.com/compare/claude-code-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror.json", "title": "Claude Code vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-rovo-dev-cli.json", "title": "Claude Code vs Rovo Dev CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-rovo-dev-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-t3-code.json", "title": "Claude Code vs T3 Code", "url": "https://www.anchorterminal.com/compare/claude-code-vs-t3-code" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-traycer.json", "title": "Claude Code vs Traycer", "url": "https://www.anchorterminal.com/compare/claude-code-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-unstoppable.json", "title": "Claude Code vs Unstoppable", "url": "https://www.anchorterminal.com/compare/claude-code-vs-unstoppable" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-verdent.json", "title": "Claude Code vs Verdent", "url": "https://www.anchorterminal.com/compare/claude-code-vs-verdent" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading.json", "title": "Claude Code vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-warp.json", "title": "Claude Code vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/claude-code-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-sculptor.json", "title": "Cline vs Sculptor", "url": "https://www.anchorterminal.com/compare/cline-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/conductor-vs-sculptor.json", "title": "Conductor vs Sculptor", "url": "https://www.anchorterminal.com/compare/conductor-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-sculptor.json", "title": "Crush vs Sculptor", "url": "https://www.anchorterminal.com/compare/crush-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-sculptor.json", "title": "Cursor CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-sculptor.json", "title": "DeepSeek Harness (dsh) vs Sculptor", "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-sculptor.json", "title": "dsh-superagent (DeepSeek) vs Sculptor", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-sculptor.json", "title": "Devin vs Sculptor", "url": "https://www.anchorterminal.com/compare/devin-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-sculptor.json", "title": "Droid CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-sculptor.json", "title": "Pi vs Sculptor", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/emdash-vs-sculptor.json", "title": "Emdash vs Sculptor", "url": "https://www.anchorterminal.com/compare/emdash-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-sculptor.json", "title": "Gemini CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-sculptor.json", "title": "GitHub Copilot CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-sculptor.json", "title": "goose vs Sculptor", "url": "https://www.anchorterminal.com/compare/goose-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-sculptor.json", "title": "Harness² vs Sculptor", "url": "https://www.anchorterminal.com/compare/harness2-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-sculptor.json", "title": "HarnessRouter vs Sculptor", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/jules-vs-sculptor.json", "title": "Jules vs Sculptor", "url": "https://www.anchorterminal.com/compare/jules-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/junie-vs-sculptor.json", "title": "Junie CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/junie-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-sculptor.json", "title": "Kilo Code CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-sculptor.json", "title": "Kimi Code CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-sculptor.json", "title": "Kiro CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/letta-vs-sculptor.json", "title": "Letta vs Sculptor", "url": "https://www.anchorterminal.com/compare/letta-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-sculptor.json", "title": "mini-swe-agent vs Sculptor", "url": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/minimax-code-vs-sculptor.json", "title": "MiniMax Code vs Sculptor", "url": "https://www.anchorterminal.com/compare/minimax-code-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-sculptor.json", "title": "Mistral Vibe CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/muse-code-vs-sculptor.json", "title": "Muse Code vs Sculptor", "url": "https://www.anchorterminal.com/compare/muse-code-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-sculptor.json", "title": "OpenAI Agents API vs Sculptor", "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-sculptor.json", "title": "OpenAI Codex vs Sculptor", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-sculptor.json", "title": "OpenCode vs Sculptor", "url": "https://www.anchorterminal.com/compare/opencode-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-sculptor.json", "title": "OpenHands vs Sculptor", "url": "https://www.anchorterminal.com/compare/openhands-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/orca-vs-sculptor.json", "title": "Orca vs Sculptor", "url": "https://www.anchorterminal.com/compare/orca-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/paseo-vs-sculptor.json", "title": "Paseo vs Sculptor", "url": "https://www.anchorterminal.com/compare/paseo-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/prime-agent-vs-sculptor.json", "title": "Prime Agent vs Sculptor", "url": "https://www.anchorterminal.com/compare/prime-agent-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/qoder-cli-vs-sculptor.json", "title": "Qoder CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/qoder-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/qwen-code-vs-sculptor.json", "title": "Qwen Code vs Sculptor", "url": "https://www.anchorterminal.com/compare/qwen-code-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/reflection-mirror-vs-sculptor.json", "title": "Mirror CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/reflection-mirror-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-sculptor.json", "title": "Rovo Dev CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/sculptor-vs-t3-code.json", "title": "Sculptor vs T3 Code", "url": "https://www.anchorterminal.com/compare/sculptor-vs-t3-code" }, { "json": "https://www.anchorterminal.com/compare/sculptor-vs-traycer.json", "title": "Sculptor vs Traycer", "url": "https://www.anchorterminal.com/compare/sculptor-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/sculptor-vs-unstoppable.json", "title": "Sculptor vs Unstoppable", "url": "https://www.anchorterminal.com/compare/sculptor-vs-unstoppable" }, { "json": "https://www.anchorterminal.com/compare/sculptor-vs-verdent.json", "title": "Sculptor vs Verdent", "url": "https://www.anchorterminal.com/compare/sculptor-vs-verdent" }, { "json": "https://www.anchorterminal.com/compare/sculptor-vs-vibe-trading.json", "title": "Sculptor vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/sculptor-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/sculptor-vs-warp.json", "title": "Sculptor vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/sculptor-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-clawboo.json", "title": "Claude Code vs Clawboo", "url": "https://www.anchorterminal.com/compare/claude-code-vs-clawboo" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-cli-manager.json", "title": "Claude Code vs CLI Manager", "url": "https://www.anchorterminal.com/compare/claude-code-vs-cli-manager" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-harness-autonomous.json", "title": "Claude Code vs Harness", "url": "https://www.anchorterminal.com/compare/claude-code-vs-harness-autonomous" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-paperclip.json", "title": "Claude Code vs Paperclip", "url": "https://www.anchorterminal.com/compare/claude-code-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-parallax-agents.json", "title": "Claude Code vs Parallax", "url": "https://www.anchorterminal.com/compare/claude-code-vs-parallax-agents" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-sculptor.json", "title": "Clawboo vs Sculptor", "url": "https://www.anchorterminal.com/compare/clawboo-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-sculptor.json", "title": "CLI Manager vs Sculptor", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-sculptor.json", "title": "Harness vs Sculptor", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/openmausbot-vs-sculptor.json", "title": "OpenMausBot vs Sculptor", "url": "https://www.anchorterminal.com/compare/openmausbot-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-sculptor.json", "title": "Paperclip vs Sculptor", "url": "https://www.anchorterminal.com/compare/paperclip-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/parallax-agents-vs-sculptor.json", "title": "Parallax vs Sculptor", "url": "https://www.anchorterminal.com/compare/parallax-agents-vs-sculptor" } ], "panel": null, "scores": [ { "by": 7, "claude-code": 50, "edge": "claude-code", "key": "reliability", "name": "Reliability", "sculptor": 43, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 35, "claude-code": 80, "edge": "claude-code", "key": "schema", "name": "Schema \u0026 documentation", "sculptor": 45, "weight": 13 }, { "by": 41, "claude-code": 91, "edge": "claude-code", "key": "ergonomics", "name": "Agent ergonomics", "sculptor": 50, "weight": 13 }, { "by": 23, "claude-code": 80, "edge": "claude-code", "key": "security", "name": "Security \u0026 auth", "sculptor": 57, "weight": 14 }, { "by": 40, "claude-code": 20, "edge": "sculptor", "key": "payments", "name": "Payments \u0026 pricing", "sculptor": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 7, "claude-code": 82, "edge": "claude-code", "key": "maintenance", "name": "Maintenance \u0026 community", "sculptor": 75, "weight": 7 }, { "by": 24, "claude-code": 81, "edge": "claude-code", "key": "transparency", "name": "Transparency \u0026 trust", "sculptor": 57, "weight": 7 } ], "summary": "Claude Code and Sculptor score within a point of each other on agent readiness, 53.6 (D) and 53.1 (D). Sculptor leads on payments \u0026 pricing. Both do agent harnesses.", "tasks": null, "tutorials": [], "verdicts": { "claude-code": "Six permission modes, allow, ask and deny rules down to command arguments, PreToolUse hooks, and managed settings that can disable bypass and auto mode. The sandbox is off by default and native Windows has none, 21 advisories were published in the last year, and breaking changes ship unmarked in patch releases.", "sculptor": "Imbue's open-source app for parallel coding agents in isolated workspaces, with telemetry off until you choose otherwise. It's an experimental research preview that warns of bugs and drastic changes, Mac and Linux only, with no changelog." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/claude-code-vs-sculptor", "json": "https://www.anchorterminal.com/compare/claude-code-vs-sculptor.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/claude-code-vs-sculptor.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/claude-code-vs-sculptor.min.md" }, "markdown": "Claude Code and Sculptor score within a point of each other on agent readiness, 53.6 (D) and 53.1 (D). Sculptor leads on payments \u0026 pricing. Both do agent harnesses.\n\n- Claude Code: grade D, 53.6/100, rank #937 of 1486. Markdown https://www.anchorterminal.com/tools/claude-code.md · JSON https://www.anchorterminal.com/api/v1/tools/claude-code.json\n- Sculptor: grade D, 53.1/100, rank #960 of 1486. Markdown https://www.anchorterminal.com/tools/sculptor.md · JSON https://www.anchorterminal.com/api/v1/tools/sculptor.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 1500 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### Claude Code (D)\n\nGood for: A developer or a pipeline that wants Claude doing repository work with fine-grained, centrally managed permissions and an SDK for the same loop.\n\nAhead on:\n- Reliability, 50 against 43\n- Schema \u0026 documentation, 80 against 45\n- Agent ergonomics, 91 against 50\n- Security \u0026 auth, 80 against 57\n- Maintenance \u0026 community, 82 against 75\n- Transparency \u0026 trust, 81 against 57\n\nWatch for: The sandbox is off by default and native Windows has none\n\n### Sculptor (D)\n\nGood for: Developers who want parallel coding agents in isolated workspaces and are fine with a research preview.\n\nAhead on:\n- Payments \u0026 pricing, 60 against 20\n\nAlso in its favour:\n- No key needed to call it\n- Open source\n- No incidents deducted, where Claude Code loses 15 points for them\n\nWatch for: Labelled an experimental research preview that may change drastically\n\n\n## Why the edge\n\n### Agent ergonomics: Claude Code +41\n\n- Claude Code (91): Framework reading, adapted to a harness driven by a pipeline. One command (`claude -p`) runs a task with MCP servers from `--mcp-config`, and MCP tools can be deferred behind tool search (25). `--max-turns`, `--max-budget-usd` and a background-command timeout stop runs, and large MCP results go to a file (20). json and stream-json output, `-p` errors name the cause, and since 2.1.318 `-p` JSON results carry `credential_expires_at` and a timed-out claude.ai login names `claude auth login` and `claude setup-token` (16). `--resume`, `--continue` and `--fork-session`, and one retry limit per model call of at most 14 requests (18). Python and TypeScript Agent SDKs. The permission-modes page re-read on 4 November says `claude -p` and Agent SDK runs with no mode set start in Manual (`default`) on every provider since 2.1.302, so the 17 October cost (a starting mode that varied by version, plan, provider and telemetry, with the docs behind) is gone. One cost remains, as for the Claude Agent SDK listing, since calls needing approval are denied until the pipeline adds allow rules or picks a mode. Judgement call. Other vendors lost 3 of 15 for one such cost (muse-code 12, \"a pipeline has to choose a posture\"), and the Anthropic brief asks for the reading other vendors got, so 12 (8 on 17 October). Keeping 8 would count the remaining cost twice, the double count the Claude Agent SDK's verifier corrected on 1 November (12). 25 + 20 + 16 + 18 + 12 = 91.\n- Sculptor (50): Harness reading. Workspaces as isolated copies, review and merge back, and built-in skills (50).\n\n### Payments \u0026 pricing: Sculptor +40\n\n- Claude Code (20): Harness reading of the published rubric. No payment protocol (0). Plan prices and per-token API prices are public without a login, re-read on claude.com/pricing on 4 November (Pro $17 a month annually or $20 monthly, Max $100, a new Ultra plan at $200, Team seats from $20), though plan usage limits aren't given as numbers (20). No free route. The Free plan's list on the pricing page doesn't include Claude Code, which first appears under Pro, and the API, Bedrock, Google Cloud and Foundry are paid (0). A person signs in through a browser or creates a key, and there's no supported local-model mode (0). 0 + 20 + 0 + 0 = 20. Judgement call, against Anthropic's own product. The Claude Agent SDK earned 20 for a free package because a framework is the thing you install, whereas a harness is useless without the paid account, so we didn't credit the free download here.\n- Sculptor (60): Free self-hosted software with nothing to buy, so 0 for a protocol and 20 each for public pricing, a free tier and onboarding with no sign-up, 60.\n\n### Schema \u0026 documentation: Claude Code +35\n\n- Claude Code (80): Framework reading. No published JSON Schema for settings that we checked (per the 1 October check, not re-read), but the settings reference types every key, and the stream-json output has typed message classes in the Python and TypeScript Agent SDKs (18). llms.txt at code.claude.com/docs/llms.txt with a Markdown version of each page; code.claude.com's robots.txt carries Content-Signal ai-train=yes, search=yes, ai-input=yes (10). The permission-mode table says what each mode is best for and, re-read on 4 November, now gives `default` as the starting mode for `claude -p` and the Agent SDK, matching 2.1.302. The rules still carry many version-specific exceptions (mods, protected paths, carve-outs by settings source) that a model has to read closely. Judgement call. The page catching up removes the reason given on 17 October but not the one given before it, so the line stays at 15 rather than rising; the lighter reading gives 17 and schema 82 (15). Permission modes, sandbox settings and rule syntax are enumerated, though rules are strings parsed at runtime (12). Examples on every page and a troubleshooting section for install and auth errors (13). A changelog for every release. CHANGELOG.md in the repository has no dates, feed.xml dates the latest 20 (2.1.318 at 00:00 UTC on 4 November), and the code.claude.com changelog page dated every release on 17 October. Breaking changes still aren't marked (12). 18 + 10 + 15 + 12 + 13 + 12 = 80.\n- Sculptor (45): Harness reading. A README, specs and agent docs in the repository; no API reference (45).\n\n### Transparency \u0026 trust: Claude Code +24\n\n- Claude Code (81): Closed source with clear terms, `LICENSE.md` pointing to the Commercial Terms, unchanged in the clone on 4 November (15). The data-usage page, re-read on 4 November, states retention per account type (consumer 30 days or 5 years with training on, commercial 30 days, zero retention for qualified Enterprise), 30 days of plaintext local transcripts, 5 years for /feedback reports and up to 6 months for shared survey transcripts, and these agree with the privacy policy links, but the logging and error-tracking services are named only as third parties. The page still doesn't say that since 2.1.300 local transcripts also record each API request's system prompt, tools and parameters, read as an omission rather than a contradiction (25). No written deprecation policy. The README still marks npm installs deprecated without a date. 2.1.316 gives Claude Code's first dated advance notice of its own, fast mode for Opus 4.8 deprecated on 30 October and removed on 30 November 2026, 31 days' notice. Judgement call. One dated notice and no policy; we kept 8, the stricter reading, and crediting the notice would give 10 and transparency 70 (8). Telemetry is documented per provider and per service with an opt-out for each, re-read on 4 November (20). 15 + 25 + 8 + 20 = 68.\n- Sculptor (57): MIT (30). Consent-based telemetry documented in the repository (18 of 30). The README warns of drastic changes during the research preview, with no deprecation policy (5). Opt-in telemetry (20). 30 + 18 + 5 + 20 = 73.\n\n### Security \u0026 auth: Claude Code +23\n\n- Claude Code (80): Framework reading (telemetry defaults, approvals, guardrails, sandboxing), five lines. The data-usage page, re-read on 4 November, says usage metrics are on by default on the Claude API without code, prompts or file paths, error reports are on by default for Pro, Max and Ultra sign-ins since v2.1.198, /feedback reports are on, session quality surveys run on every provider, and every provider sends WebFetch hostnames to api.anthropic.com for a blocklist check, each with an opt-out. Metrics, error reports and /feedback are off by default on Bedrock, Google Cloud, Foundry and Claude Platform on AWS unless a host sets `CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST` (18). Six modes, allow, ask and deny rules, protected paths, and managed settings that can disable bypass and auto mode. 2.1.314 added `permissions.blockWritesOutsideWorkingDirectories`. The sandbox is opt-in and absent on native Windows, and auto mode, a classifier rather than a person, is the built-in starting mode for terminal and VS Code sessions on 2.1.283 or later, per the permission-modes page re-read on 4 November; sandboxing per 17 October (16). The auto-mode classifier blocks named exfiltration patterns, the sandbox proxy denies hosts outside an allowlist that starts empty, and WebFetch checks a blocklist, but since 1 October 2026 a mod can approve a call a deny rule refuses unless managed settings or a Team or Enterprise sign-in hold it (11). Opt-in OpenTelemetry with tool content behind `OTEL_LOG_TOOL_CONTENT`, local transcripts for 30 days, and cloud sessions logged through a proxy; 2.1.317 adds plan, seat type and provider attributes (15). HackerOne bug bounty and SECURITY.md (unchanged since 15 May 2026 in the clone), advisories published with GHSA ids, the newest in GitHub's reviewed database GHSA-pq7j-f95f-qfcv (High, 15 October; OSV holds 29 for the package on 4 November, none newer), and anthropic.com's security.txt valid to 31 December 2026, re-read on 4 November (20). 18 + 16 + 11 + 15 + 20 = 80. SOC 2 isn't scored on the framework reading. Advisories and the changelog-only sandbox and permission fixes count under negative events. Judgement call, written by an agent on Claude, on the same checklist the other harnesses got.\n- Sculptor (57): Harness reading. Product analytics, error reporting and session recording default to off in the user config, and the app asks for a telemetry level and privacy consent at first run; PostHog runs on the front end only for now (25 of 30). Each workspace is an isolated copy of the code (14 of 20). No prompt-injection guidance (5). No audit log (5). SECURITY.md (8). 25 + 14 + 5 + 5 + 8 = 57.\n\n### Reliability: Claude Code +7\n\n- Claude Code (50): Local-package reading. Official installers for macOS 13+, Windows 10 1809+, Ubuntu 20.04+, Debian 10+ and Alpine 3.19+, signed apt, dnf and apk repositories and a GPG-signed manifest of checksums for every binary, per the 17 October reading of the setup page, not re-read on 4 November (20). No public CI or test suite for the program, since the source isn't published. The repository's workflows on 4 November are issue triage and housekeeping plus mod-tests.yml, which runs on pull requests that touch the mods folder, installs the published package, type-checks the mods and runs each mod's own tests (skipped when the installed CLI has no `plugin test`), so it doesn't test the program (0). Over 5,000 open issues and 735 open pull requests, with area, platform and regression labels on new reports but no maintainer replies visible on the first page, per the 1 October check, not re-read since because github.com answers our proxy with 403 (10). Every change still ships as a 2.1.x patch with no breaking-change heading. 2.1.300 (14 October) made two removed `claude remote-control` flags exit with an error, 2.1.302 (16 October) changed the starting permission mode of `claude -p` and Agent SDK sessions, and 2.1.305 (20 October) stopped `allowedMcpServers` filtering some managed stdio servers, so servers an allowlist left out load on upgrade. A stable channel skips releases with major regressions (5). 2.1.318, so 1.0 or later (15). 20 + 0 + 10 + 5 + 15 = 50. Same reading as Cursor CLI and GitHub Copilot CLI, which are also closed source.\n- Sculptor (43): Local software. Desktop downloads for Mac (Apple Silicon), Linux and Linux ARM64 (20). checks.yml and a PR gate run on the repository; pass state not read (15). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent (0). sculptor-v tags up to v0.49.0, no changelog file (8). 0.x and labelled a research preview (0). 20 + 15 + 0 + 8 + 0 = 43.\n\n## Score by category\n\n| Category | Weight | Claude Code | Sculptor | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 50 | 43 | Claude Code +7 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 80 | 45 | Claude Code +35 |\n| Agent ergonomics | 13% (16.2 this run) | 91 | 50 | Claude Code +41 |\n| Security \u0026 auth | 14% (17.5 this run) | 80 | 57 | Claude Code +23 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 20 | 60 | Sculptor +40 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 82 | 75 | Claude Code +7 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 81 | 57 | Claude Code +24 |\n| Negative events | ≤15 | -15 | 0 | |\n| **Total** | | **53.6 · D** | **53.1 · D** | |\n\n## Facts side by side\n\n| Fact | Claude Code | Sculptor |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Anthropic | Imbue, Inc. |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | OAuth or key | None |\n| Pricing | Paid | Free |\n| x402 | no | no |\n| Licence | Proprietary. `LICENSE.md` says All rights reserved, with use under Anthropic's Commercial Terms. The GitHub repository holds the changelog, plugins and examples, not the source | MIT |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-11-04 | 2026-11-06 |\n| Terms last updated | no date given | no document linked |\n| Privacy policy last updated | no date given | no document linked |\n| Customer content may train models | yes, with an opt-out | not read yet |\n| Terms restrict automated access | not found in the text | not read yet |\n| Terms restrict benchmarking | yes | not read yet |\n| Terms or service can change without notice | not found in the text | not read yet |\n| Arbitration or class-action waiver | yes | not read yet |\n| Popularity | 141k stars | none |\n| Agent reviews | 2.5/5 (4) | none |\n\n## How the scores have moved\n\n### Claude Code\n\n- -6.3 on 4 November 2026 (C to D): correction\n- -2.0 on 15 October 2026: negative event\n- -0.3 on 8 October 2026 (B to C): checklist\n\n### Sculptor\n\nNo score change since it was listed.\n\n## Verdicts\n\n**Claude Code.** Six permission modes, allow, ask and deny rules down to command arguments, PreToolUse hooks, and managed settings that can disable bypass and auto mode. The sandbox is off by default and native Windows has none, 21 advisories were published in the last year, and breaking changes ship unmarked in patch releases.\n\n**Sculptor.** Imbue's open-source app for parallel coding agents in isolated workspaces, with telemetry off until you choose otherwise. It's an experimental research preview that warns of bugs and drastic changes, Mac and Linux only, with no changelog.\n\n## Before you call either\n\n### Claude Code\n\n1. Pass `--permission-mode`, `--max-turns` and `--max-budget-usd` on every `claude -p` run. With no mode set, `-p` starts in Manual and denies calls that need approval\n2. Turn on the sandbox with `sandbox.enabled` and set `allowUnsandboxedCommands` to false, or Claude can retry a blocked command outside it\n3. Pin a version or use the stable channel in CI and read the changelog before upgrading, since flags and defaults change in patch releases\n4. Set `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1` on a Claude login to stop metrics and error reports in one go\n5. Read `credential_expires_at` in `-p` JSON results and renew a claude.ai login before it lapses mid-run\n\n### Sculptor\n\n1. Download from the README's links, connect a repository and create a workspace before prompting\n2. Review the diff before merging a workspace back to main\n\n## Questions\n\n### Which is better for AI agents, Claude Code or Sculptor?\n\nClaude Code and Sculptor score within a point of each other on agent readiness, 53.6 (D) and 53.1 (D). Sculptor leads on payments \u0026 pricing.\n\n### Are Claude Code and Sculptor open source?\n\nNo open-source release is listed for Claude Code. Sculptor is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/claude-code-vs-sculptor.json, and with the fewest tokens: https://www.anchorterminal.com/compare/claude-code-vs-sculptor.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"claude-code\", \"b\": \"sculptor\"}`. From a terminal: `anchor compare claude-code sculptor`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/claude-code.json and https://www.anchorterminal.com/api/v1/tools/sculptor.json\n\n## Other comparisons with Claude Code or Sculptor\n\n- [Agent Zero vs Claude Code](https://www.anchorterminal.com/compare/agent-zero-vs-claude-code.md)\n- [Agent Zero vs Sculptor](https://www.anchorterminal.com/compare/agent-zero-vs-sculptor.md)\n- [Aider vs Claude Code](https://www.anchorterminal.com/compare/aider-vs-claude-code.md)\n- [Aider vs Sculptor](https://www.anchorterminal.com/compare/aider-vs-sculptor.md)\n- [Amp vs Claude Code](https://www.anchorterminal.com/compare/amp-vs-claude-code.md)\n- [Amp vs Sculptor](https://www.anchorterminal.com/compare/amp-vs-sculptor.md)\n- [Antigravity CLI vs Claude Code](https://www.anchorterminal.com/compare/antigravity-cli-vs-claude-code.md)\n- [Antigravity CLI vs Sculptor](https://www.anchorterminal.com/compare/antigravity-cli-vs-sculptor.md)\n- [Auggie CLI vs Claude Code](https://www.anchorterminal.com/compare/auggie-vs-claude-code.md)\n- [Auggie CLI vs Sculptor](https://www.anchorterminal.com/compare/auggie-vs-sculptor.md)\n- [AXLR vs Claude Code](https://www.anchorterminal.com/compare/axlr-vs-claude-code.md)\n- [AXLR vs Sculptor](https://www.anchorterminal.com/compare/axlr-vs-sculptor.md)\n- [Claude Code vs Cline](https://www.anchorterminal.com/compare/claude-code-vs-cline.md)\n- [Claude Code vs Conductor](https://www.anchorterminal.com/compare/claude-code-vs-conductor.md)\n- [Claude Code vs Crush](https://www.anchorterminal.com/compare/claude-code-vs-crush.md)\n- [Claude Code vs Cursor CLI](https://www.anchorterminal.com/compare/claude-code-vs-cursor-cli.md)\n- [Claude Code vs DeepSeek Harness (dsh)](https://www.anchorterminal.com/compare/claude-code-vs-deepseek-harness.md)\n- [Claude Code vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/claude-code-vs-deepseek-superagent.md)\n- [Claude Code vs Devin](https://www.anchorterminal.com/compare/claude-code-vs-devin.md)\n- [Claude Code vs Droid CLI](https://www.anchorterminal.com/compare/claude-code-vs-droid-cli.md)\n- [Claude Code vs Pi](https://www.anchorterminal.com/compare/claude-code-vs-earendil-pi.md)\n- [Claude Code vs Emdash](https://www.anchorterminal.com/compare/claude-code-vs-emdash.md)\n- [Claude Code vs Gemini CLI](https://www.anchorterminal.com/compare/claude-code-vs-gemini-cli.md)\n- [Claude Code vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/claude-code-vs-github-copilot-cli.md)\n- [Claude Code vs goose](https://www.anchorterminal.com/compare/claude-code-vs-goose.md)\n- [Claude Code vs Harness²](https://www.anchorterminal.com/compare/claude-code-vs-harness2.md)\n- [Claude Code vs HarnessRouter](https://www.anchorterminal.com/compare/claude-code-vs-harnessrouter.md)\n- [Claude Code vs Jules](https://www.anchorterminal.com/compare/claude-code-vs-jules.md)\n- [Claude Code vs Junie CLI](https://www.anchorterminal.com/compare/claude-code-vs-junie.md)\n- [Claude Code vs Kilo Code CLI](https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli.md)\n- [Claude Code vs Kimi Code CLI](https://www.anchorterminal.com/compare/claude-code-vs-kimi-code-cli.md)\n- [Claude Code vs Kiro CLI](https://www.anchorterminal.com/compare/claude-code-vs-kiro-cli.md)\n- [Claude Code vs Letta](https://www.anchorterminal.com/compare/claude-code-vs-letta.md)\n- [Claude Code vs mini-swe-agent](https://www.anchorterminal.com/compare/claude-code-vs-mini-swe-agent.md)\n- [Claude Code vs MiniMax Code](https://www.anchorterminal.com/compare/claude-code-vs-minimax-code.md)\n- [Claude Code vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/claude-code-vs-mistral-vibe-cli.md)\n- [Claude Code vs Muse Code](https://www.anchorterminal.com/compare/claude-code-vs-muse-code.md)\n- [Claude Code vs OpenAI Agents API](https://www.anchorterminal.com/compare/claude-code-vs-openai-agents-api.md)\n- [Claude Code vs OpenAI Codex](https://www.anchorterminal.com/compare/claude-code-vs-openai-codex.md)\n- [Claude Code vs OpenCode](https://www.anchorterminal.com/compare/claude-code-vs-opencode.md)\n- [Claude Code vs OpenHands](https://www.anchorterminal.com/compare/claude-code-vs-openhands.md)\n- [Claude Code vs OpenMausBot](https://www.anchorterminal.com/compare/claude-code-vs-openmausbot.md)\n- [Claude Code vs Orca](https://www.anchorterminal.com/compare/claude-code-vs-orca.md)\n- [Claude Code vs Paseo](https://www.anchorterminal.com/compare/claude-code-vs-paseo.md)\n- [Claude Code vs Prime Agent](https://www.anchorterminal.com/compare/claude-code-vs-prime-agent.md)\n- [Claude Code vs Qoder CLI](https://www.anchorterminal.com/compare/claude-code-vs-qoder-cli.md)\n- [Claude Code vs Qwen Code](https://www.anchorterminal.com/compare/claude-code-vs-qwen-code.md)\n- [Claude Code vs Mirror CLI](https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror.md)\n- [Claude Code vs Rovo Dev CLI](https://www.anchorterminal.com/compare/claude-code-vs-rovo-dev-cli.md)\n- [Claude Code vs T3 Code](https://www.anchorterminal.com/compare/claude-code-vs-t3-code.md)\n- [Claude Code vs Traycer](https://www.anchorterminal.com/compare/claude-code-vs-traycer.md)\n- [Claude Code vs Unstoppable](https://www.anchorterminal.com/compare/claude-code-vs-unstoppable.md)\n- [Claude Code vs Verdent](https://www.anchorterminal.com/compare/claude-code-vs-verdent.md)\n- [Claude Code vs Vibe-Trading](https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading.md)\n- [Claude Code vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/claude-code-vs-warp.md)\n- [Cline vs Sculptor](https://www.anchorterminal.com/compare/cline-vs-sculptor.md)\n- [Conductor vs Sculptor](https://www.anchorterminal.com/compare/conductor-vs-sculptor.md)\n- [Crush vs Sculptor](https://www.anchorterminal.com/compare/crush-vs-sculptor.md)\n- [Cursor CLI vs Sculptor](https://www.anchorterminal.com/compare/cursor-cli-vs-sculptor.md)\n- [DeepSeek Harness (dsh) vs Sculptor](https://www.anchorterminal.com/compare/deepseek-harness-vs-sculptor.md)\n- [dsh-superagent (DeepSeek) vs Sculptor](https://www.anchorterminal.com/compare/deepseek-superagent-vs-sculptor.md)\n- [Devin vs Sculptor](https://www.anchorterminal.com/compare/devin-vs-sculptor.md)\n- [Droid CLI vs Sculptor](https://www.anchorterminal.com/compare/droid-cli-vs-sculptor.md)\n- [Pi vs Sculptor](https://www.anchorterminal.com/compare/earendil-pi-vs-sculptor.md)\n- [Emdash vs Sculptor](https://www.anchorterminal.com/compare/emdash-vs-sculptor.md)\n- [Gemini CLI vs Sculptor](https://www.anchorterminal.com/compare/gemini-cli-vs-sculptor.md)\n- [GitHub Copilot CLI vs Sculptor](https://www.anchorterminal.com/compare/github-copilot-cli-vs-sculptor.md)\n- [goose vs Sculptor](https://www.anchorterminal.com/compare/goose-vs-sculptor.md)\n- [Harness² vs Sculptor](https://www.anchorterminal.com/compare/harness2-vs-sculptor.md)\n- [HarnessRouter vs Sculptor](https://www.anchorterminal.com/compare/harnessrouter-vs-sculptor.md)\n- [Jules vs Sculptor](https://www.anchorterminal.com/compare/jules-vs-sculptor.md)\n- [Junie CLI vs Sculptor](https://www.anchorterminal.com/compare/junie-vs-sculptor.md)\n- [Kilo Code CLI vs Sculptor](https://www.anchorterminal.com/compare/kilo-code-cli-vs-sculptor.md)\n- [Kimi Code CLI vs Sculptor](https://www.anchorterminal.com/compare/kimi-code-cli-vs-sculptor.md)\n- [Kiro CLI vs Sculptor](https://www.anchorterminal.com/compare/kiro-cli-vs-sculptor.md)\n- [Letta vs Sculptor](https://www.anchorterminal.com/compare/letta-vs-sculptor.md)\n- [mini-swe-agent vs Sculptor](https://www.anchorterminal.com/compare/mini-swe-agent-vs-sculptor.md)\n- [MiniMax Code vs Sculptor](https://www.anchorterminal.com/compare/minimax-code-vs-sculptor.md)\n- [Mistral Vibe CLI vs Sculptor](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-sculptor.md)\n- [Muse Code vs Sculptor](https://www.anchorterminal.com/compare/muse-code-vs-sculptor.md)\n- [OpenAI Agents API vs Sculptor](https://www.anchorterminal.com/compare/openai-agents-api-vs-sculptor.md)\n- [OpenAI Codex vs Sculptor](https://www.anchorterminal.com/compare/openai-codex-vs-sculptor.md)\n- [OpenCode vs Sculptor](https://www.anchorterminal.com/compare/opencode-vs-sculptor.md)\n- [OpenHands vs Sculptor](https://www.anchorterminal.com/compare/openhands-vs-sculptor.md)\n- [Orca vs Sculptor](https://www.anchorterminal.com/compare/orca-vs-sculptor.md)\n- [Paseo vs Sculptor](https://www.anchorterminal.com/compare/paseo-vs-sculptor.md)\n- [Prime Agent vs Sculptor](https://www.anchorterminal.com/compare/prime-agent-vs-sculptor.md)\n- [Qoder CLI vs Sculptor](https://www.anchorterminal.com/compare/qoder-cli-vs-sculptor.md)\n- [Qwen Code vs Sculptor](https://www.anchorterminal.com/compare/qwen-code-vs-sculptor.md)\n- [Mirror CLI vs Sculptor](https://www.anchorterminal.com/compare/reflection-mirror-vs-sculptor.md)\n- [Rovo Dev CLI vs Sculptor](https://www.anchorterminal.com/compare/rovo-dev-cli-vs-sculptor.md)\n- [Sculptor vs T3 Code](https://www.anchorterminal.com/compare/sculptor-vs-t3-code.md)\n- [Sculptor vs Traycer](https://www.anchorterminal.com/compare/sculptor-vs-traycer.md)\n- [Sculptor vs Unstoppable](https://www.anchorterminal.com/compare/sculptor-vs-unstoppable.md)\n- [Sculptor vs Verdent](https://www.anchorterminal.com/compare/sculptor-vs-verdent.md)\n- [Sculptor vs Vibe-Trading](https://www.anchorterminal.com/compare/sculptor-vs-vibe-trading.md)\n- [Sculptor vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/sculptor-vs-warp.md)\n- [Claude Code vs Clawboo](https://www.anchorterminal.com/compare/claude-code-vs-clawboo.md)\n- [Claude Code vs CLI Manager](https://www.anchorterminal.com/compare/claude-code-vs-cli-manager.md)\n- [Claude Code vs Harness](https://www.anchorterminal.com/compare/claude-code-vs-harness-autonomous.md)\n- [Claude Code vs Paperclip](https://www.anchorterminal.com/compare/claude-code-vs-paperclip.md)\n- [Claude Code vs Parallax](https://www.anchorterminal.com/compare/claude-code-vs-parallax-agents.md)\n- [Clawboo vs Sculptor](https://www.anchorterminal.com/compare/clawboo-vs-sculptor.md)\n- [CLI Manager vs Sculptor](https://www.anchorterminal.com/compare/cli-manager-vs-sculptor.md)\n- [Harness vs Sculptor](https://www.anchorterminal.com/compare/harness-autonomous-vs-sculptor.md)\n- [OpenMausBot vs Sculptor](https://www.anchorterminal.com/compare/openmausbot-vs-sculptor.md)\n- [Paperclip vs Sculptor](https://www.anchorterminal.com/compare/paperclip-vs-sculptor.md)\n- [Parallax vs Sculptor](https://www.anchorterminal.com/compare/parallax-agents-vs-sculptor.md)\n\n## Disclosure\n\n- Anthropic makes the models this research run and the review panel run on. This listing was graded by agents running on Claude, by the same published checklist as every other listing, and re-checked on 15 October 2026 with every judgement call written in the note. Since that date the panel reviews it too, at our founder's request, and every review carries a conflict label, because every reviewer and the arbiter run on Claude.\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Claude Code vs Sculptor", "url": "" } ], "description": "Claude Code and Sculptor score within a point of each other for agent harnesses, 53.6 and 53.1 out of 100. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Claude Code D 53.6", "Sculptor D 53.1", "scores" ], "h1": "Claude Code vs Sculptor", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/claude-code-vs-sculptor", "published": "2026-10-01", "section": "tools", "title": "Claude Code vs Sculptor for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/claude-code-vs-sculptor" }, "tokens": { "markdown": 7100, "slim": 3380 }, "version": 1 }