{ "data": { "a": { "slug": "claude-code", "name": "Claude Code", "vendor": "Anthropic", "vendorUrl": "https://www.anthropic.com", "kind": "harness", "category": "agent-harnesses", "summary": "Anthropic's coding agent as a terminal program, also in VS Code, JetBrains, the desktop app and Anthropic-hosted cloud sessions.", "url": "https://www.anchorterminal.com/tools/claude-code", "markdownUrl": "https://www.anchorterminal.com/tools/claude-code.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/claude-code.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/claude-code.json", "dns": "claude-code.grade.anchorterminal.com", "repo": "https://github.com/anthropics/claude-code", "license": "Proprietary. `LICENSE.md` says All rights reserved, with use under Anthropic's Commercial Terms. The GitHub repository holds the changelog, plugins and examples, not the source", "transports": [], "packages": [ { "registry": "npm", "name": "@anthropic-ai/claude-code" } ], "auth": "mixed", "authNotes": "Sign in through the browser with a Pro, Max, Team or Enterprise claude.ai account, or use a Claude Console API key (`ANTHROPIC_API_KEY`), or Amazon Bedrock, Google Cloud, Microsoft Foundry or Claude Platform on AWS credentials. The free claude.ai plan doesn't include Claude Code.", "pricing": "paid", "pricingNotes": "Free to download, and it needs a paid plan or API tokens to run. Pro is $17 a month billed annually or $20 monthly, Max $100 a month, Ultra $200 a month, Team $20 or $25 a standard seat and $100 or $125 a premium seat, Enterprise $20 a seat billed annually with a 20-seat minimum, plus usage at API rates, or pay as you go at Claude API token prices. On a plan Claude Code shares the plan's usage limits, and the pricing page gives no number for them (checked 2026-11-04).", "priceSummary": "$20 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the pricing page (checked 2026-10-02).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 141000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-02" }, "docsUrl": "https://code.claude.com/docs/en/overview", "llmsTxt": "https://code.claude.com/docs/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "official", "harness", "coding-agent", "cli", "closed-source", "claude-only", "mcp", "llms-txt", "telemetry-default-on", "status-page", "card-required" ], "lastRelease": "2026-11-04", "graded": true, "disclosure": "Anthropic makes the models this research run and the review panel run on. This listing was graded by agents running on Claude, by the same published checklist as every other listing, and re-checked on 15 October 2026 with every judgement call written in the note. Since that date the panel reviews it too, at our founder's request, and every review carries a conflict label, because every reviewer and the arbiter run on Claude.", "anchor": { "graded": true, "score": 53.6, "grade": "D", "agentReady": false, "rank": 937, "ranked": true, "rankOf": 1486, "categoryRank": 36, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 91, "maintenance": 82, "payments": 20, "reliability": 50, "schema": 80, "security": 80, "transparency": 81 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-04" }, "negative": -15, "negativeNotes": [ "2025-11-19 to 2026-10-15, the 12 months to 4 November. GitHub's reviewed database, read through OSV on 4 November, holds 29 advisories for @anthropic-ai/claude-code; 19 fall in the window, 14 High, 4 Moderate and 1 Low, and the repository's GHSA-5j29-h97v-84ch (High, 5 October) and GHSA-gfvf-j8jh-jxxw (Low, 29 September), per the 15 October reading, make 21, 15 of them High. Among them are approval-prompt bypasses through command injection (GHSA-qgqw-h4xq-7w8w, GHSA-mhg7-666j-cqg4, GHSA-66q4-vfjg-2qhh, GHSA-xq4m-mc3c-vvg3), sandbox escapes (GHSA-ff64-7w26-62rf, GHSA-vp62-r36r-9xqp, GHSA-7835-87q9-rgvv), workspace-trust bypasses that ran code from a cloned repository (GHSA-5hhx-v7f6-x7gv, GHSA-mmgp-wc2j-qcv7, GHSA-q5hj-mxqh-vv77), a WebFetch exfiltration path (GHSA-fg94-h982-f3mm) and a plugin hash-pin bypass (GHSA-pq7j-f95f-qfcv, 15 October). All fixed and published by Anthropic. Judgement call. This run counts published advisories per advisory (fixed Lows 0, a fixed High over two months old 1, under two months 2, a vendor-published fixed Moderate 1), which gives 13 + 4 + 4 = 21. The 17 October check and the Claude Agent SDK listing applied a cap of -6 to the same advisories, a cap this run's settled reading doesn't have. We took the per-advisory reading, the stricter one, which alone reaches the -15 floor; with the cap the listing would carry -11 (https://api.osv.dev/v1/query and https://github.com/anthropics/claude-code/security/advisories). -21 before the floor", "2026-10-02 to 2026-11-04. Changelog-only fixes with no advisory found, folded into one term as on 17 October and on the Claude Agent SDK listing. 2.1.288 to 2.1.300 (2 to 14 October) fixed a dangerous `rm` inside `bash -c` running without a prompt, deny and ask rules missed behind an environment-variable prefix, hook approvals and auto mode skipping the prompt for UNC-path reads (marked Security), sandbox gaps through `--plugin-dir` and symlinks, and agent hooks allowing an action when their model was unavailable. Since then 2.1.314 (30 October) fixed sandbox protections not applying to a worktree entered by `claude -p --resume` and `forceRemoteSettingsRefresh` letting sessions start without policy, 2.1.316 (31 October) a managed `autoMode.allow` list getting built-in exceptions back, and 2.1.318 (4 November) permission prompts answered by keys typed just after sending a message. All released. We applied the -2 GitHub Copilot CLI got for one changelog-only enforcement-gap fix (https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md). -2", "2026-10-14 to 2026-10-20. Breaking changes in 2.1.x patch releases with no advance notice found. 2.1.300 (14 October) removed `--sandbox` and `--no-sandbox` from `claude remote-control`, and \"passing either now exits with an error\", with no earlier deprecation in the changelog. 2.1.302 (16 October) changed the starting permission mode of `claude -p` and Agent SDK runs, and 2.1.305 (20 October) stopped `allowedMcpServers` filtering managed stdio servers that use `${VAR}` only in `env`, so one an allowlist left out \"now loads on upgrade\". The founder's 1 November reading takes -3 for breaking changes in a release below a major with no notice, even where earlier checks read them only through the semver line, as cline's 3.0.70 took. Repeats fold into one term. Judgement call. The same changes, published with the release that made them, could also be read under the same-day rule as a second term (-6 in all); this run counts one event under one kind, as cline's was, so one -3 (https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md). -3" ], "verdict": "Six permission modes, allow, ask and deny rules down to command arguments, PreToolUse hooks, and managed settings that can disable bypass and auto mode. The sandbox is off by default and native Windows has none, 21 advisories were published in the last year, and breaking changes ship unmarked in patch releases.", "bestFor": "A developer or a pipeline that wants Claude doing repository work with fine-grained, centrally managed permissions and an SDK for the same loop.", "disclosure": "Anthropic makes the models this research run and the review panel run on. This listing was graded by agents running on Claude, by the same published checklist as every other listing, and re-checked on 15 October 2026 with every judgement call written in the note. Since that date the panel reviews it too, at our founder's request, and every review carries a conflict label, because every reviewer and the arbiter run on Claude.", "strengths": [ "Six permission modes, allow, ask and deny rules down to command arguments, PreToolUse hooks, and managed settings that can disable bypass and auto mode", "An OS sandbox (Seatbelt, bubblewrap) whose network proxy denies every host outside an allowlist that starts empty", "`claude -p` with json and stream-json output, `--max-turns`, `--max-budget-usd`, resume and fork, and Python and TypeScript SDKs for the same loop", "Signed apt, dnf and apk repositories, a GPG-signed checksum manifest and a stable channel that skips releases with major regressions", "Telemetry documented per provider and per service, each with its own opt-out" ], "weaknesses": [ "The sandbox is off by default and native Windows has none", "Auto mode, a classifier rather than a person, is the built-in starting mode for terminal and VS Code sessions since 2.1.283", "21 published advisories from 19 November 2025 to 15 October 2026, 15 High, and changelog-only sandbox and permission fixes through 2.1.318", "Breaking changes ship unmarked in 2.1.x patch releases, such as 2.1.300's removed flags that now exit with an error", "Closed source, Claude models only, and no free plan includes it" ], "agentNotes": [ "Pass `--permission-mode`, `--max-turns` and `--max-budget-usd` on every `claude -p` run. With no mode set, `-p` starts in Manual and denies calls that need approval", "Turn on the sandbox with `sandbox.enabled` and set `allowUnsandboxedCommands` to false, or Claude can retry a blocked command outside it", "Pin a version or use the stable channel in CI and read the changelog before upgrading, since flags and defaults change in patch releases", "Set `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1` on a Claude login to stop metrics and error reports in one go", "Read `credential_expires_at` in `-p` JSON results and renew a claude.ai login before it lapses mid-run" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 53.6 } ], "editorialScores": { "ergonomics": 91, "maintenance": 82, "payments": 20, "reliability": 50, "schema": 80, "security": 80, "transparency": 68 }, "provenanceScore": 94, "checked": { "categories": { "ergonomics": "2026-11-04", "maintenance": "2026-11-04", "payments": "2026-11-04", "reliability": "2026-11-04", "schema": "2026-11-04", "security": "2026-11-04", "transparency": "2026-11-04" }, "last": "2026-11-04", "lastMoved": "2026-11-04", "oldest": "2026-11-04", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "curl -fsSL https://claude.ai/install.sh | bash # or: brew install --cask claude-code", "headless": { "run": "claude -p \"fix the failing test\" --output-format json --permission-mode acceptEdits --max-turns 20" } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/claude-code" }, "sameCompany": [ "anthropic-api", "claude-agent-sdk" ], "area": "frameworks", "unitPrices": [ { "item": "Pro plan", "unit": "month", "usd": 20, "note": "$17 a month billed annually" }, { "item": "Max plan", "unit": "month", "usd": 100, "note": "lowest Max tier" } ], "provenance": { "legalEntity": "Anthropic, PBC", "domain": "claude.com", "domainRegistered": "1995-05-24", "domainNote": "claude.com was registered in 1995, long before Anthropic bought it. Free, Pro, Max and Ultra users are under the Consumer Terms, Team, Enterprise and API users under the Commercial Terms. The security.txt state is anthropic.com's, read on 4 November 2026 (HackerOne contact, Expires 2026-12-31). claude.com served none on 17 October. The terms and privacy URLs weren't re-read. The status page was read through history.atom, since status.claude.com's robots.txt disallows /api/ and /embed/.", "endpointOnVendorDomain": null, "terms": "https://www.anthropic.com/legal/commercial-terms", "privacy": "https://www.anthropic.com/legal/privacy", "statusPage": "https://status.claude.com", "changelog": "https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md", "securityTxt": "valid", "checked": "2026-11-04", "score": 94 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/claude-code.json", "live": { "slug": "claude-code", "vendorStatus": { "page": "https://status.claude.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T18:20:39.66660558Z" }, "versions": [ { "registry": "github", "name": "anthropics/claude-code", "version": "v2.1.319", "released": "2026-11-06", "seenAt": "2026-11-06T23:14:38.733468625Z" }, { "registry": "npm", "name": "@anthropic-ai/claude-code", "version": "2.1.319", "seenAt": "2026-11-06T23:14:38.510959631Z" } ], "githubStars": 154800, "npmWeekly": 13612394, "securityTxt": { "url": "https://claude.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:46.200748618Z" }, "llmsTxt": { "url": "https://code.claude.com/docs/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:31:50.898605587Z" }, "domain": { "domain": "claude.com", "registered": "1995-05-24", "source": "https://rdap.verisign.com/com/v1/domain/claude.com", "checkedAt": "2026-11-01T14:09:10.467098064Z" }, "pages": [ { "url": "https://code.claude.com/docs/en/changelog", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:01:36.806191107Z", "changedAt": "2026-11-07T14:01:36.806191107Z", "fingerprint": "47becb9556d3" }, { "url": "https://raw.githubusercontent.com/anthropics/claude-code/main/CHANGELOG.md", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:19:59.969745148Z", "changedAt": "2026-11-07T14:19:59.969745148Z", "fingerprint": "12797120784e" } ], "github": { "repo": "anthropics/claude-code", "checkedAt": "2026-11-02T08:30:57.247733704Z", "stars": 154214, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-02T07:12:58Z", "openIssues": 15558, "openPRs": 641, "issuesOpened90d": 22763, "issuesClosed90d": 20839, "prsMerged90d": 42, "ci": { "branch": "main", "runs": 50, "success": 50, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-11-02T07:13:09Z" }, "advisories": [ { "ghsa": "GHSA-5xjx-9qx6-jcrv", "cve": "CVE-2026-88968", "severity": "high", "published": "2026-10-26T11:43:04Z" }, { "ghsa": "GHSA-4p2j-qj3c-6x84", "cve": "CVE-2026-88066", "severity": "high", "published": "2026-10-13T12:24:43Z" }, { "ghsa": "GHSA-pq7j-f95f-qfcv", "cve": "CVE-2026-86063", "severity": "high", "published": "2026-10-09T15:14:01Z" }, { "ghsa": "GHSA-5j29-h97v-84ch", "cve": "CVE-2026-103435", "severity": "high", "published": "2026-10-05T12:45:33Z" }, { "ghsa": "GHSA-gfvf-j8jh-jxxw", "cve": "CVE-2026-103012", "severity": "low", "published": "2026-09-29T21:44:55Z" }, { "ghsa": "GHSA-v234-4jrq-mgg6", "severity": "high", "published": "2026-09-25T21:54:09Z" }, { "ghsa": "GHSA-4vp2-6q8c-pvq2", "cve": "CVE-2026-46406", "severity": "medium", "published": "2026-06-25T13:29:49Z" }, { "ghsa": "GHSA-7835-87q9-rgvv", "cve": "CVE-2026-55607", "severity": "high", "published": "2026-06-25T13:14:35Z" }, { "ghsa": "GHSA-fg94-h982-f3mm", "cve": "CVE-2026-54316", "severity": "medium", "published": "2026-06-13T11:40:00Z" }, { "ghsa": "GHSA-3rwf-2g6p-c2f9", "cve": "CVE-2026-44467", "severity": "high", "published": "2026-05-06T20:27:32Z" }, { "ghsa": "GHSA-5p5x-5294-qhp3", "cve": "CVE-2026-44470", "severity": "high", "published": "2026-05-06T20:25:23Z" }, { "ghsa": "GHSA-q5hj-mxqh-vv77", "cve": "CVE-2026-40068", "severity": "high", "published": "2026-04-24T11:53:10Z" }, { "ghsa": "GHSA-vp62-r36r-9xqp", "cve": "CVE-2026-39861", "severity": "high", "published": "2026-04-20T10:19:11Z" }, { "ghsa": "GHSA-5cwg-9f6j-9jvx", "cve": "CVE-2026-35603", "severity": "medium", "published": "2026-04-17T10:41:05Z" }, { "ghsa": "GHSA-mmgp-wc2j-qcv7", "cve": "CVE-2026-33068", "severity": "high", "published": "2026-03-18T21:35:35Z" }, { "ghsa": "GHSA-66q4-vfjg-2qhh", "cve": "CVE-2026-25722", "severity": "high", "published": "2026-02-06T00:15:51Z" }, { "ghsa": "GHSA-mhg7-666j-cqg4", "cve": "CVE-2026-25723", "severity": "high", "published": "2026-02-06T00:14:51Z" }, { "ghsa": "GHSA-ff64-7w26-62rf", "cve": "CVE-2026-25725", "severity": "high", "published": "2026-02-06T00:13:40Z" }, { "ghsa": "GHSA-4q92-rfm6-2cqx", "cve": "CVE-2026-25724", "severity": "low", "published": "2026-02-06T00:12:26Z" }, { "ghsa": "GHSA-qgqw-h4xq-7w8w", "cve": "CVE-2026-24887", "severity": "high", "published": "2026-02-03T19:13:11Z" }, { "ghsa": "GHSA-q728-gf8j-w49r", "cve": "CVE-2026-24053", "severity": "high", "published": "2026-02-03T19:10:25Z" }, { "ghsa": "GHSA-vhw5-3g5m-8ggf", "cve": "CVE-2026-24052", "severity": "high", "published": "2026-02-03T19:05:06Z" }, { "ghsa": "GHSA-jh7p-qr78-84p7", "cve": "CVE-2026-21852", "severity": "medium", "published": "2026-01-20T22:31:15Z" }, { "ghsa": "GHSA-xq4m-mc3c-vvg3", "cve": "CVE-2025-66032", "severity": "high", "published": "2025-12-03T00:54:43Z" }, { "ghsa": "GHSA-7mv8-j34q-vp7q", "cve": "CVE-2025-64755", "severity": "high", "published": "2025-11-20T18:54:54Z" }, { "ghsa": "GHSA-5hhx-v7f6-x7gv", "cve": "CVE-2025-65099", "severity": "high", "published": "2025-11-19T02:34:10Z" }, { "ghsa": "GHSA-4fgq-fpq9-mr3g", "cve": "CVE-2025-59536", "severity": "high", "published": "2025-10-03T04:41:02Z" }, { "ghsa": "GHSA-66m2-gx93-v996", "cve": "CVE-2025-59829", "severity": "low", "published": "2025-10-03T04:36:40Z" }, { "ghsa": "GHSA-2jjv-qf24-vfm4", "cve": "CVE-2025-59828", "severity": "high", "published": "2025-09-24T12:49:58Z" }, { "ghsa": "GHSA-qxfv-fcpc-w36x", "cve": "CVE-2025-58764", "severity": "high", "published": "2025-09-09T23:58:42Z" }, { "ghsa": "GHSA-j4h9-wv2m-wrf7", "cve": "CVE-2025-59041", "severity": "high", "published": "2025-09-09T23:58:39Z" }, { "ghsa": "GHSA-ph6w-f82w-28w6", "severity": "high", "published": "2025-09-02T21:21:00Z" }, { "ghsa": "GHSA-x5gv-jw7f-j6xj", "cve": "CVE-2025-55284", "severity": "high", "published": "2025-08-15T21:36:43Z" }, { "ghsa": "GHSA-pmw4-pwvc-3hx2", "cve": "CVE-2025-54794", "severity": "high", "published": "2025-08-01T23:38:37Z" }, { "ghsa": "GHSA-x56v-x2h6-7j34", "cve": "CVE-2025-54795", "severity": "high", "published": "2025-08-01T23:38:23Z" }, { "ghsa": "GHSA-9f65-56v6-gxw7", "cve": "CVE-2025-52882", "severity": "high", "published": "2025-06-23T15:00:37Z" } ] }, "updatedAt": "2026-11-07T18:20:39.66660558Z" } }, "answer": "Traycer scores 57 (C) on agent readiness against Claude Code's 53.6 (D), and leads in 2 of 7 scored categories. Claude Code leads on schema \u0026 documentation, agent ergonomics, security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust.", "b": { "slug": "traycer", "name": "Traycer", "vendor": "Traycer AI", "vendorUrl": "https://traycer.ai", "kind": "harness", "category": "agent-harnesses", "summary": "Traycer is an open-source orchestration app that runs coding agents you already pay for, or its own inference, in parallel with shared context across models, agent-to-agent messaging, shareable boards and cross-device sync.", "url": "https://www.anchorterminal.com/tools/traycer", "markdownUrl": "https://www.anchorterminal.com/tools/traycer.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/traycer.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/traycer.json", "dns": "traycer.grade.anchorterminal.com", "repo": "https://github.com/traycerai/traycer", "license": "MIT", "transports": [], "packages": [], "auth": "none", "pricing": "free", "pricingNotes": "Free and open source. You pay for the coding agents it runs, through your own subscriptions or API keys (checked 2026-11-07).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No payment protocol in the repository or README (checked 2026-11-07).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-07" }, "docsUrl": "https://docs.traycer.ai", "capabilities": [ "agent.harness", "agent.multi-agent" ], "tags": [ "open-source", "mit", "desktop-app", "cli", "telemetry", "new" ], "lastRelease": "2026-11-06", "graded": true, "anchor": { "graded": true, "score": 57, "grade": "C", "agentReady": false, "rank": 811, "ranked": true, "rankOf": 1486, "categoryRank": 29, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 65, "maintenance": 75, "payments": 30, "reliability": 65, "schema": 65, "security": 42, "transparency": 60 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "low", "date": "2026-11-07" }, "negative": 0, "verdict": "An open-source app for running several coding agents together with shared context, agent-to-agent messaging and team boards, on every desktop OS. Privacy Mode is opt-in for individuals, and the README says Sentry and PostHog may be on in release builds.", "bestFor": "Teams who want several coding agents working together with shared context and boards.", "strengths": [ "Runs agents you already pay for, or Traycer's own inference", "Shares context across models and lets agents message each other", "macOS, Linux and Windows builds, with package-manager installs", "MIT, with CodeQL, Scorecard and secret scanning" ], "weaknesses": [ "Privacy Mode is opt-in for individuals; with it off, prompts may be logged", "Sentry and PostHog may be enabled in release builds, with no opt-out in the README", "Inference subscription price not found on the pages read" ], "agentNotes": [ "Turn on Privacy Mode if you're an individual user and don't want prompts logged", "CLI agents you configure send requests straight to their provider; Traycer's own inference goes through Traycer" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 57 } ], "editorialScores": { "ergonomics": 65, "maintenance": 75, "payments": 30, "reliability": 65, "schema": 65, "security": 42, "transparency": 66 }, "provenanceScore": 53, "checked": { "categories": { "ergonomics": "2026-11-07", "maintenance": "2026-11-07", "payments": "2026-11-07", "reliability": "2026-11-07", "schema": "2026-11-07", "security": "2026-11-07", "transparency": "2026-11-07" }, "last": "2026-11-07", "oldest": "2026-11-07", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "Download for macOS, Linux or Windows from the releases page" }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/traycer" }, "area": "frameworks", "provenance": { "legalEntity": "Traycer AI", "domain": "traycer.ai", "domainRegistered": "", "domainNote": "Not looked up: RDAP isn't requested under the 1 November 2026 rules.", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/traycerai/traycer/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-07", "notes": [ "The licence names Traycer AI. The repository is github.com/traycerai/traycer." ], "score": 53 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/traycer.json", "live": { "slug": "traycer", "securityTxt": { "url": "https://traycer.ai/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T15:59:47.880384121Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/traycerai/traycer/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:23:51.024738302Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "d3f389f721e9" } ], "updatedAt": "2026-11-07T15:59:47.880384121Z" } }, "edges": [ { "by": 38, "category": "security", "leads": "claude-code", "name": "Security \u0026 auth", "reasons": { "a": "Framework reading (telemetry defaults, approvals, guardrails, sandboxing), five lines. The data-usage page, re-read on 4 November, says usage metrics are on by default on the Claude API without code, prompts or file paths, error reports are on by default for Pro, Max and Ultra sign-ins since v2.1.198, /feedback reports are on, session quality surveys run on every provider, and every provider sends WebFetch hostnames to api.anthropic.com for a blocklist check, each with an opt-out. Metrics, error reports and /feedback are off by default on Bedrock, Google Cloud, Foundry and Claude Platform on AWS unless a host sets `CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST` (18). Six modes, allow, ask and deny rules, protected paths, and managed settings that can disable bypass and auto mode. 2.1.314 added `permissions.blockWritesOutsideWorkingDirectories`. The sandbox is opt-in and absent on native Windows, and auto mode, a classifier rather than a person, is the built-in starting mode for terminal and VS Code sessions on 2.1.283 or later, per the permission-modes page re-read on 4 November; sandboxing per 17 October (16). The auto-mode classifier blocks named exfiltration patterns, the sandbox proxy denies hosts outside an allowlist that starts empty, and WebFetch checks a blocklist, but since 1 October 2026 a mod can approve a call a deny rule refuses unless managed settings or a Team or Enterprise sign-in hold it (11). Opt-in OpenTelemetry with tool content behind `OTEL_LOG_TOOL_CONTENT`, local transcripts for 30 days, and cloud sessions logged through a proxy; 2.1.317 adds plan, seat type and provider attributes (15). HackerOne bug bounty and SECURITY.md (unchanged since 15 May 2026 in the clone), advisories published with GHSA ids, the newest in GitHub's reviewed database GHSA-pq7j-f95f-qfcv (High, 15 October; OSV holds 29 for the package on 4 November, none newer), and anthropic.com's security.txt valid to 31 December 2026, re-read on 4 November (20). 18 + 16 + 11 + 15 + 20 = 80. SOC 2 isn't scored on the framework reading. Advisories and the changelog-only sandbox and permission fixes count under negative events. Judgement call, written by an agent on Claude, on the same checklist the other harnesses got.", "b": "Harness reading. Code is processed in memory and not used for training, but Privacy Mode is opt-in for individuals, prompts may be logged with it off, and Sentry and PostHog 'may be enabled in release builds' (10 of 30). No approval model described in the README (8 of 20). No prompt-injection guidance (5). No audit log found (5). SECURITY.md, CodeQL, Scorecard and secret scanning (14 of 20). 10 + 8 + 5 + 5 + 14 = 42." }, "scores": { "a": 80, "b": 42 } }, { "by": 26, "category": "ergonomics", "leads": "claude-code", "name": "Agent ergonomics", "reasons": { "a": "Framework reading, adapted to a harness driven by a pipeline. One command (`claude -p`) runs a task with MCP servers from `--mcp-config`, and MCP tools can be deferred behind tool search (25). `--max-turns`, `--max-budget-usd` and a background-command timeout stop runs, and large MCP results go to a file (20). json and stream-json output, `-p` errors name the cause, and since 2.1.318 `-p` JSON results carry `credential_expires_at` and a timed-out claude.ai login names `claude auth login` and `claude setup-token` (16). `--resume`, `--continue` and `--fork-session`, and one retry limit per model call of at most 14 requests (18). Python and TypeScript Agent SDKs. The permission-modes page re-read on 4 November says `claude -p` and Agent SDK runs with no mode set start in Manual (`default`) on every provider since 2.1.302, so the 17 October cost (a starting mode that varied by version, plan, provider and telemetry, with the docs behind) is gone. One cost remains, as for the Claude Agent SDK listing, since calls needing approval are denied until the pipeline adds allow rules or picks a mode. Judgement call. Other vendors lost 3 of 15 for one such cost (muse-code 12, \"a pipeline has to choose a posture\"), and the Anthropic brief asks for the reading other vendors got, so 12 (8 on 17 October). Keeping 8 would count the remaining cost twice, the double count the Claude Agent SDK's verifier corrected on 1 November (12). 25 + 20 + 16 + 18 + 12 = 91.", "b": "Harness reading. Model switching within an agent, agent-to-agent loops, a CLI and cross-device sync (65)." }, "scores": { "a": 91, "b": 65 } }, { "by": 21, "category": "transparency", "leads": "claude-code", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed source with clear terms, `LICENSE.md` pointing to the Commercial Terms, unchanged in the clone on 4 November (15). The data-usage page, re-read on 4 November, states retention per account type (consumer 30 days or 5 years with training on, commercial 30 days, zero retention for qualified Enterprise), 30 days of plaintext local transcripts, 5 years for /feedback reports and up to 6 months for shared survey transcripts, and these agree with the privacy policy links, but the logging and error-tracking services are named only as third parties. The page still doesn't say that since 2.1.300 local transcripts also record each API request's system prompt, tools and parameters, read as an omission rather than a contradiction (25). No written deprecation policy. The README still marks npm installs deprecated without a date. 2.1.316 gives Claude Code's first dated advance notice of its own, fast mode for Opus 4.8 deprecated on 30 October and removed on 30 November 2026, 31 days' notice. Judgement call. One dated notice and no policy; we kept 8, the stricter reading, and crediting the notice would give 10 and transparency 70 (8). Telemetry is documented per provider and per service with an opt-out for each, re-read on 4 November (20). 15 + 25 + 8 + 20 = 68.", "b": "MIT (30). README privacy section and a linked privacy policy (not read) (18 of 30). CHANGELOG.md, no deprecation policy (10). Analytics described as 'may be enabled', with no opt-out given in the README (8 of 20). 30 + 18 + 10 + 8 = 66." }, "scores": { "a": 81, "b": 60 } }, { "by": 15, "category": "reliability", "leads": "traycer", "name": "Reliability", "reasons": { "a": "Local-package reading. Official installers for macOS 13+, Windows 10 1809+, Ubuntu 20.04+, Debian 10+ and Alpine 3.19+, signed apt, dnf and apk repositories and a GPG-signed manifest of checksums for every binary, per the 17 October reading of the setup page, not re-read on 4 November (20). No public CI or test suite for the program, since the source isn't published. The repository's workflows on 4 November are issue triage and housekeeping plus mod-tests.yml, which runs on pull requests that touch the mods folder, installs the published package, type-checks the mods and runs each mod's own tests (skipped when the installed CLI has no `plugin test`), so it doesn't test the program (0). Over 5,000 open issues and 735 open pull requests, with area, platform and regression labels on new reports but no maintainer replies visible on the first page, per the 1 October check, not re-read since because github.com answers our proxy with 403 (10). Every change still ships as a 2.1.x patch with no breaking-change heading. 2.1.300 (14 October) made two removed `claude remote-control` flags exit with an error, 2.1.302 (16 October) changed the starting permission mode of `claude -p` and Agent SDK sessions, and 2.1.305 (20 October) stopped `allowedMcpServers` filtering some managed stdio servers, so servers an allowlist left out load on upgrade. A stable channel skips releases with major regressions (5). 2.1.318, so 1.0 or later (15). 20 + 0 + 10 + 5 + 15 = 50. Same reading as Cursor CLI and GitHub Copilot CLI, which are also closed source.", "b": "Local software. Builds for macOS, Linux and Windows, and package-manager publishing workflows (20). test.yml, CodeQL, OpenSSF Scorecard and secret scanning run on the repository; pass state not read (15). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent (0). CHANGELOG.md (15). Host 1.5.3 (15). 20 + 15 + 0 + 15 + 15 = 65." }, "scores": { "a": 50, "b": 65 } }, { "by": 15, "category": "schema", "leads": "claude-code", "name": "Schema \u0026 documentation", "reasons": { "a": "Framework reading. No published JSON Schema for settings that we checked (per the 1 October check, not re-read), but the settings reference types every key, and the stream-json output has typed message classes in the Python and TypeScript Agent SDKs (18). llms.txt at code.claude.com/docs/llms.txt with a Markdown version of each page; code.claude.com's robots.txt carries Content-Signal ai-train=yes, search=yes, ai-input=yes (10). The permission-mode table says what each mode is best for and, re-read on 4 November, now gives `default` as the starting mode for `claude -p` and the Agent SDK, matching 2.1.302. The rules still carry many version-specific exceptions (mods, protected paths, carve-outs by settings source) that a model has to read closely. Judgement call. The page catching up removes the reason given on 17 October but not the one given before it, so the line stays at 15 rather than rising; the lighter reading gives 17 and schema 82 (15). Permission modes, sandbox settings and rule syntax are enumerated, though rules are strings parsed at runtime (12). Examples on every page and a troubleshooting section for install and auth errors (13). A changelog for every release. CHANGELOG.md in the repository has no dates, feed.xml dates the latest 20 (2.1.318 at 00:00 UTC on 4 November), and the code.claude.com changelog page dated every release on 17 October. Breaking changes still aren't marked (12). 18 + 10 + 15 + 12 + 13 + 12 = 80.", "b": "Harness reading. Mintlify docs, a protocol package and a CLI (65)." }, "scores": { "a": 80, "b": 65 } }, { "by": 10, "category": "payments", "leads": "traycer", "name": "Payments \u0026 pricing", "reasons": { "a": "Harness reading of the published rubric. No payment protocol (0). Plan prices and per-token API prices are public without a login, re-read on claude.com/pricing on 4 November (Pro $17 a month annually or $20 monthly, Max $100, a new Ultra plan at $200, Team seats from $20), though plan usage limits aren't given as numbers (20). No free route. The Free plan's list on the pricing page doesn't include Claude Code, which first appears under Pro, and the API, Bedrock, Google Cloud and Foundry are paid (0). A person signs in through a browser or creates a key, and there's no supported local-model mode (0). 0 + 20 + 0 + 0 = 20. Judgement call, against Anthropic's own product. The Claude Agent SDK earned 20 for a free package because a framework is the thing you install, whereas a harness is useless without the paid account, so we didn't credit the free download here.", "b": "Scored on the paid option, Traycer's own inference subscription, whose price wasn't read (0 of 20). No protocol (0). Bring-your-own-agent use is free (20). Accounts for sync and teams weren't checked, half (10). 0 + 0 + 20 + 10 = 30." }, "scores": { "a": 20, "b": 30 } } ], "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Anthropic", "b": "Traycer AI", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "None", "name": "Auth" }, { "a": "Paid", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary. `LICENSE.md` says All rights reserved, with use under Anthropic's Commercial Terms. The GitHub repository holds the changelog, plugins and examples, not the source", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-11-04", "b": "2026-11-06", "name": "Last release" }, { "a": "no date given", "b": "no document linked", "name": "Terms last updated" }, { "a": "no date given", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "yes, with an opt-out", "b": "not read yet", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "not read yet", "name": "Arbitration or class-action waiver" }, { "a": "141k stars", "b": "none", "name": "Popularity" }, { "a": "2.5/5 (4)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Traycer scores 57 (C) on agent readiness against Claude Code's 53.6 (D), and leads in 2 of 7 scored categories. Claude Code leads on schema \u0026 documentation, agent ergonomics, security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust.", "question": "Which is better for AI agents, Claude Code or Traycer?" }, { "answer": "No open-source release is listed for Claude Code. Traycer is open source (MIT).", "question": "Are Claude Code and Traycer open source?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 80 against 65", "Agent ergonomics, 91 against 65", "Security \u0026 auth, 80 against 42", "Maintenance \u0026 community, 82 against 75", "Transparency \u0026 trust, 81 against 60" ], "also": null, "goodFor": "A developer or a pipeline that wants Claude doing repository work with fine-grained, centrally managed permissions and an SDK for the same loop.", "slug": "claude-code", "watchFor": "The sandbox is off by default and native Windows has none" }, { "aheadOn": [ "Reliability, 65 against 50", "Payments \u0026 pricing, 30 against 20" ], "also": [ "No key needed to call it", "Open source", "No incidents deducted, where Claude Code loses 15 points for them" ], "goodFor": "Teams who want several coding agents working together with shared context and boards.", "slug": "traycer", "watchFor": "Privacy Mode is opt-in for individuals; with it off, prompts may be logged" } ], "history": { "claude-code": [ { "causes": [ "correction" ], "date": "2026-11-04", "delta": -6.3, "from": 59.9, "fromGrade": "C", "to": 53.6, "toGrade": "D" }, { "causes": [ "event" ], "date": "2026-10-15", "delta": -2, "from": 61.9, "fromGrade": "C", "to": 59.9, "toGrade": "C" }, { "causes": [ "method" ], "date": "2026-10-08", "delta": -0.3, "from": 62.2, "fromGrade": "B", "to": 61.9, "toGrade": "C" } ], "traycer": null }, "job": { "capability": "agent.harness", "name": "Agent harnesses" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-claude-code.json", "title": "Agent Zero vs Claude Code", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-traycer.json", "title": "Agent Zero vs Traycer", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-claude-code.json", "title": "Aider vs Claude Code", "url": "https://www.anchorterminal.com/compare/aider-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-traycer.json", "title": "Aider vs Traycer", "url": "https://www.anchorterminal.com/compare/aider-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-claude-code.json", "title": "Amp vs Claude Code", "url": "https://www.anchorterminal.com/compare/amp-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-traycer.json", "title": "Amp vs Traycer", "url": "https://www.anchorterminal.com/compare/amp-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-claude-code.json", "title": "Antigravity CLI vs Claude Code", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-traycer.json", "title": "Antigravity CLI vs Traycer", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-claude-code.json", "title": "Auggie CLI vs Claude Code", "url": "https://www.anchorterminal.com/compare/auggie-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-traycer.json", "title": "Auggie CLI vs Traycer", "url": "https://www.anchorterminal.com/compare/auggie-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/axlr-vs-claude-code.json", "title": "AXLR vs Claude Code", "url": "https://www.anchorterminal.com/compare/axlr-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/axlr-vs-traycer.json", "title": "AXLR vs Traycer", "url": "https://www.anchorterminal.com/compare/axlr-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-cline.json", "title": "Claude Code vs Cline", "url": "https://www.anchorterminal.com/compare/claude-code-vs-cline" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-conductor.json", "title": "Claude Code vs Conductor", "url": "https://www.anchorterminal.com/compare/claude-code-vs-conductor" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-crush.json", "title": "Claude Code vs Crush", "url": "https://www.anchorterminal.com/compare/claude-code-vs-crush" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-cursor-cli.json", "title": "Claude Code vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-deepseek-harness.json", "title": "Claude Code vs DeepSeek Harness (dsh)", "url": "https://www.anchorterminal.com/compare/claude-code-vs-deepseek-harness" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-deepseek-superagent.json", "title": "Claude Code vs dsh-superagent (DeepSeek)", "url": "https://www.anchorterminal.com/compare/claude-code-vs-deepseek-superagent" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-devin.json", "title": "Claude Code vs Devin", "url": "https://www.anchorterminal.com/compare/claude-code-vs-devin" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-droid-cli.json", "title": "Claude Code vs Droid CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-droid-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-earendil-pi.json", "title": "Claude Code vs Pi", "url": "https://www.anchorterminal.com/compare/claude-code-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-emdash.json", "title": "Claude Code vs Emdash", "url": "https://www.anchorterminal.com/compare/claude-code-vs-emdash" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-gemini-cli.json", "title": "Claude Code vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-github-copilot-cli.json", "title": "Claude Code vs GitHub Copilot CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-github-copilot-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-goose.json", "title": "Claude Code vs goose", "url": "https://www.anchorterminal.com/compare/claude-code-vs-goose" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-harness2.json", "title": "Claude Code vs Harness²", "url": "https://www.anchorterminal.com/compare/claude-code-vs-harness2" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-harnessrouter.json", "title": "Claude Code vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/claude-code-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-jules.json", "title": "Claude Code vs Jules", "url": "https://www.anchorterminal.com/compare/claude-code-vs-jules" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-junie.json", "title": "Claude Code vs Junie CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-junie" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli.json", "title": "Claude Code vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-kimi-code-cli.json", "title": "Claude Code vs Kimi Code CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-kimi-code-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-kiro-cli.json", "title": "Claude Code vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-letta.json", "title": "Claude Code vs Letta", "url": "https://www.anchorterminal.com/compare/claude-code-vs-letta" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-mini-swe-agent.json", "title": "Claude Code vs mini-swe-agent", "url": "https://www.anchorterminal.com/compare/claude-code-vs-mini-swe-agent" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-minimax-code.json", "title": "Claude Code vs MiniMax Code", "url": "https://www.anchorterminal.com/compare/claude-code-vs-minimax-code" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-mistral-vibe-cli.json", "title": "Claude Code vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-muse-code.json", "title": "Claude Code vs Muse Code", "url": "https://www.anchorterminal.com/compare/claude-code-vs-muse-code" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-openai-agents-api.json", "title": "Claude Code vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/claude-code-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-openai-codex.json", "title": "Claude Code vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/claude-code-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-opencode.json", "title": "Claude Code vs OpenCode", "url": "https://www.anchorterminal.com/compare/claude-code-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-openhands.json", "title": "Claude Code vs OpenHands", "url": "https://www.anchorterminal.com/compare/claude-code-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-openmausbot.json", "title": "Claude Code vs OpenMausBot", "url": "https://www.anchorterminal.com/compare/claude-code-vs-openmausbot" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-orca.json", "title": "Claude Code vs Orca", "url": "https://www.anchorterminal.com/compare/claude-code-vs-orca" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-paseo.json", "title": "Claude Code vs Paseo", "url": "https://www.anchorterminal.com/compare/claude-code-vs-paseo" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-prime-agent.json", "title": "Claude Code vs Prime Agent", "url": "https://www.anchorterminal.com/compare/claude-code-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-qoder-cli.json", "title": "Claude Code vs Qoder CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-qoder-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-qwen-code.json", "title": "Claude Code vs Qwen Code", "url": "https://www.anchorterminal.com/compare/claude-code-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror.json", "title": "Claude Code vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-rovo-dev-cli.json", "title": "Claude Code vs Rovo Dev CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-rovo-dev-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-sculptor.json", "title": "Claude Code vs Sculptor", "url": "https://www.anchorterminal.com/compare/claude-code-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-t3-code.json", "title": "Claude Code vs T3 Code", "url": "https://www.anchorterminal.com/compare/claude-code-vs-t3-code" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-unstoppable.json", "title": "Claude Code vs Unstoppable", "url": "https://www.anchorterminal.com/compare/claude-code-vs-unstoppable" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-verdent.json", "title": "Claude Code vs Verdent", "url": "https://www.anchorterminal.com/compare/claude-code-vs-verdent" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading.json", "title": "Claude Code vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-warp.json", "title": "Claude Code vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/claude-code-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-traycer.json", "title": "Cline vs Traycer", "url": "https://www.anchorterminal.com/compare/cline-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/conductor-vs-traycer.json", "title": "Conductor vs Traycer", "url": "https://www.anchorterminal.com/compare/conductor-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-traycer.json", "title": "Crush vs Traycer", "url": "https://www.anchorterminal.com/compare/crush-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-traycer.json", "title": "Cursor CLI vs Traycer", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-traycer.json", "title": "DeepSeek Harness (dsh) vs Traycer", "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-traycer.json", "title": "dsh-superagent (DeepSeek) vs Traycer", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-traycer.json", "title": "Devin vs Traycer", "url": "https://www.anchorterminal.com/compare/devin-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-traycer.json", "title": "Droid CLI vs Traycer", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-traycer.json", "title": "Pi vs Traycer", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/emdash-vs-traycer.json", "title": "Emdash vs Traycer", "url": "https://www.anchorterminal.com/compare/emdash-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-traycer.json", "title": "Gemini CLI vs Traycer", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-traycer.json", "title": "GitHub Copilot CLI vs Traycer", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-traycer.json", "title": "goose vs Traycer", "url": "https://www.anchorterminal.com/compare/goose-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-traycer.json", "title": "Harness² vs Traycer", "url": "https://www.anchorterminal.com/compare/harness2-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-traycer.json", "title": "HarnessRouter vs Traycer", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/jules-vs-traycer.json", "title": "Jules vs Traycer", "url": "https://www.anchorterminal.com/compare/jules-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/junie-vs-traycer.json", "title": "Junie CLI vs Traycer", "url": "https://www.anchorterminal.com/compare/junie-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-traycer.json", "title": "Kilo Code CLI vs Traycer", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-traycer.json", "title": "Kimi Code CLI vs Traycer", "url": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-traycer.json", "title": "Kiro CLI vs Traycer", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/letta-vs-traycer.json", "title": "Letta vs Traycer", "url": "https://www.anchorterminal.com/compare/letta-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-traycer.json", "title": "mini-swe-agent vs Traycer", "url": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/minimax-code-vs-traycer.json", "title": "MiniMax Code vs Traycer", "url": "https://www.anchorterminal.com/compare/minimax-code-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-traycer.json", "title": "Mistral Vibe CLI vs Traycer", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/muse-code-vs-traycer.json", "title": "Muse Code vs Traycer", "url": "https://www.anchorterminal.com/compare/muse-code-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-traycer.json", "title": "OpenAI Agents API vs Traycer", "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-traycer.json", "title": "OpenAI Codex vs Traycer", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-traycer.json", "title": "OpenCode vs Traycer", "url": "https://www.anchorterminal.com/compare/opencode-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-traycer.json", "title": "OpenHands vs Traycer", "url": "https://www.anchorterminal.com/compare/openhands-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/orca-vs-traycer.json", "title": "Orca vs Traycer", "url": "https://www.anchorterminal.com/compare/orca-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/paseo-vs-traycer.json", "title": "Paseo vs Traycer", "url": "https://www.anchorterminal.com/compare/paseo-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/prime-agent-vs-traycer.json", "title": "Prime Agent vs Traycer", "url": "https://www.anchorterminal.com/compare/prime-agent-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/qoder-cli-vs-traycer.json", "title": "Qoder CLI vs Traycer", "url": "https://www.anchorterminal.com/compare/qoder-cli-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/qwen-code-vs-traycer.json", "title": "Qwen Code vs Traycer", "url": "https://www.anchorterminal.com/compare/qwen-code-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/reflection-mirror-vs-traycer.json", "title": "Mirror CLI vs Traycer", "url": "https://www.anchorterminal.com/compare/reflection-mirror-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-traycer.json", "title": "Rovo Dev CLI vs Traycer", "url": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/sculptor-vs-traycer.json", "title": "Sculptor vs Traycer", "url": "https://www.anchorterminal.com/compare/sculptor-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/t3-code-vs-traycer.json", "title": "T3 Code vs Traycer", "url": "https://www.anchorterminal.com/compare/t3-code-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/traycer-vs-unstoppable.json", "title": "Traycer vs Unstoppable", "url": "https://www.anchorterminal.com/compare/traycer-vs-unstoppable" }, { "json": "https://www.anchorterminal.com/compare/traycer-vs-verdent.json", "title": "Traycer vs Verdent", "url": "https://www.anchorterminal.com/compare/traycer-vs-verdent" }, { "json": "https://www.anchorterminal.com/compare/traycer-vs-vibe-trading.json", "title": "Traycer vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/traycer-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/traycer-vs-warp.json", "title": "Traycer vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/traycer-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-clawboo.json", "title": "Claude Code vs Clawboo", "url": "https://www.anchorterminal.com/compare/claude-code-vs-clawboo" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-cli-manager.json", "title": "Claude Code vs CLI Manager", "url": "https://www.anchorterminal.com/compare/claude-code-vs-cli-manager" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-harness-autonomous.json", "title": "Claude Code vs Harness", "url": "https://www.anchorterminal.com/compare/claude-code-vs-harness-autonomous" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-paperclip.json", "title": "Claude Code vs Paperclip", "url": "https://www.anchorterminal.com/compare/claude-code-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-parallax-agents.json", "title": "Claude Code vs Parallax", "url": "https://www.anchorterminal.com/compare/claude-code-vs-parallax-agents" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-traycer.json", "title": "Clawboo vs Traycer", "url": "https://www.anchorterminal.com/compare/clawboo-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-traycer.json", "title": "CLI Manager vs Traycer", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-traycer.json", "title": "Harness vs Traycer", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/openmausbot-vs-traycer.json", "title": "OpenMausBot vs Traycer", "url": "https://www.anchorterminal.com/compare/openmausbot-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-traycer.json", "title": "Paperclip vs Traycer", "url": "https://www.anchorterminal.com/compare/paperclip-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/parallax-agents-vs-traycer.json", "title": "Parallax vs Traycer", "url": "https://www.anchorterminal.com/compare/parallax-agents-vs-traycer" } ], "panel": null, "scores": [ { "by": 15, "claude-code": 50, "edge": "traycer", "key": "reliability", "name": "Reliability", "traycer": 65, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 15, "claude-code": 80, "edge": "claude-code", "key": "schema", "name": "Schema \u0026 documentation", "traycer": 65, "weight": 13 }, { "by": 26, "claude-code": 91, "edge": "claude-code", "key": "ergonomics", "name": "Agent ergonomics", "traycer": 65, "weight": 13 }, { "by": 38, "claude-code": 80, "edge": "claude-code", "key": "security", "name": "Security \u0026 auth", "traycer": 42, "weight": 14 }, { "by": 10, "claude-code": 20, "edge": "traycer", "key": "payments", "name": "Payments \u0026 pricing", "traycer": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 7, "claude-code": 82, "edge": "claude-code", "key": "maintenance", "name": "Maintenance \u0026 community", "traycer": 75, "weight": 7 }, { "by": 21, "claude-code": 81, "edge": "claude-code", "key": "transparency", "name": "Transparency \u0026 trust", "traycer": 60, "weight": 7 } ], "summary": "Traycer scores 57 (C) on agent readiness against Claude Code's 53.6 (D), and leads in 2 of 7 scored categories. Claude Code leads on schema \u0026 documentation, agent ergonomics, security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust. Both do agent harnesses.", "tasks": null, "tutorials": [], "verdicts": { "claude-code": "Six permission modes, allow, ask and deny rules down to command arguments, PreToolUse hooks, and managed settings that can disable bypass and auto mode. The sandbox is off by default and native Windows has none, 21 advisories were published in the last year, and breaking changes ship unmarked in patch releases.", "traycer": "An open-source app for running several coding agents together with shared context, agent-to-agent messaging and team boards, on every desktop OS. Privacy Mode is opt-in for individuals, and the README says Sentry and PostHog may be on in release builds." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/claude-code-vs-traycer", "json": "https://www.anchorterminal.com/compare/claude-code-vs-traycer.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/claude-code-vs-traycer.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/claude-code-vs-traycer.min.md" }, "markdown": "Traycer scores 57 (C) on agent readiness against Claude Code's 53.6 (D), and leads in 2 of 7 scored categories. Claude Code leads on schema \u0026 documentation, agent ergonomics, security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust. Both do agent harnesses.\n\n- Claude Code: grade D, 53.6/100, rank #937 of 1486. Markdown https://www.anchorterminal.com/tools/claude-code.md · JSON https://www.anchorterminal.com/api/v1/tools/claude-code.json\n- Traycer: grade C, 57/100, rank #811 of 1486. Markdown https://www.anchorterminal.com/tools/traycer.md · JSON https://www.anchorterminal.com/api/v1/tools/traycer.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 1500 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### Claude Code (D)\n\nGood for: A developer or a pipeline that wants Claude doing repository work with fine-grained, centrally managed permissions and an SDK for the same loop.\n\nAhead on:\n- Schema \u0026 documentation, 80 against 65\n- Agent ergonomics, 91 against 65\n- Security \u0026 auth, 80 against 42\n- Maintenance \u0026 community, 82 against 75\n- Transparency \u0026 trust, 81 against 60\n\nWatch for: The sandbox is off by default and native Windows has none\n\n### Traycer (C)\n\nGood for: Teams who want several coding agents working together with shared context and boards.\n\nAhead on:\n- Reliability, 65 against 50\n- Payments \u0026 pricing, 30 against 20\n\nAlso in its favour:\n- No key needed to call it\n- Open source\n- No incidents deducted, where Claude Code loses 15 points for them\n\nWatch for: Privacy Mode is opt-in for individuals; with it off, prompts may be logged\n\n\n## Why the edge\n\n### Security \u0026 auth: Claude Code +38\n\n- Claude Code (80): Framework reading (telemetry defaults, approvals, guardrails, sandboxing), five lines. The data-usage page, re-read on 4 November, says usage metrics are on by default on the Claude API without code, prompts or file paths, error reports are on by default for Pro, Max and Ultra sign-ins since v2.1.198, /feedback reports are on, session quality surveys run on every provider, and every provider sends WebFetch hostnames to api.anthropic.com for a blocklist check, each with an opt-out. Metrics, error reports and /feedback are off by default on Bedrock, Google Cloud, Foundry and Claude Platform on AWS unless a host sets `CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST` (18). Six modes, allow, ask and deny rules, protected paths, and managed settings that can disable bypass and auto mode. 2.1.314 added `permissions.blockWritesOutsideWorkingDirectories`. The sandbox is opt-in and absent on native Windows, and auto mode, a classifier rather than a person, is the built-in starting mode for terminal and VS Code sessions on 2.1.283 or later, per the permission-modes page re-read on 4 November; sandboxing per 17 October (16). The auto-mode classifier blocks named exfiltration patterns, the sandbox proxy denies hosts outside an allowlist that starts empty, and WebFetch checks a blocklist, but since 1 October 2026 a mod can approve a call a deny rule refuses unless managed settings or a Team or Enterprise sign-in hold it (11). Opt-in OpenTelemetry with tool content behind `OTEL_LOG_TOOL_CONTENT`, local transcripts for 30 days, and cloud sessions logged through a proxy; 2.1.317 adds plan, seat type and provider attributes (15). HackerOne bug bounty and SECURITY.md (unchanged since 15 May 2026 in the clone), advisories published with GHSA ids, the newest in GitHub's reviewed database GHSA-pq7j-f95f-qfcv (High, 15 October; OSV holds 29 for the package on 4 November, none newer), and anthropic.com's security.txt valid to 31 December 2026, re-read on 4 November (20). 18 + 16 + 11 + 15 + 20 = 80. SOC 2 isn't scored on the framework reading. Advisories and the changelog-only sandbox and permission fixes count under negative events. Judgement call, written by an agent on Claude, on the same checklist the other harnesses got.\n- Traycer (42): Harness reading. Code is processed in memory and not used for training, but Privacy Mode is opt-in for individuals, prompts may be logged with it off, and Sentry and PostHog 'may be enabled in release builds' (10 of 30). No approval model described in the README (8 of 20). No prompt-injection guidance (5). No audit log found (5). SECURITY.md, CodeQL, Scorecard and secret scanning (14 of 20). 10 + 8 + 5 + 5 + 14 = 42.\n\n### Agent ergonomics: Claude Code +26\n\n- Claude Code (91): Framework reading, adapted to a harness driven by a pipeline. One command (`claude -p`) runs a task with MCP servers from `--mcp-config`, and MCP tools can be deferred behind tool search (25). `--max-turns`, `--max-budget-usd` and a background-command timeout stop runs, and large MCP results go to a file (20). json and stream-json output, `-p` errors name the cause, and since 2.1.318 `-p` JSON results carry `credential_expires_at` and a timed-out claude.ai login names `claude auth login` and `claude setup-token` (16). `--resume`, `--continue` and `--fork-session`, and one retry limit per model call of at most 14 requests (18). Python and TypeScript Agent SDKs. The permission-modes page re-read on 4 November says `claude -p` and Agent SDK runs with no mode set start in Manual (`default`) on every provider since 2.1.302, so the 17 October cost (a starting mode that varied by version, plan, provider and telemetry, with the docs behind) is gone. One cost remains, as for the Claude Agent SDK listing, since calls needing approval are denied until the pipeline adds allow rules or picks a mode. Judgement call. Other vendors lost 3 of 15 for one such cost (muse-code 12, \"a pipeline has to choose a posture\"), and the Anthropic brief asks for the reading other vendors got, so 12 (8 on 17 October). Keeping 8 would count the remaining cost twice, the double count the Claude Agent SDK's verifier corrected on 1 November (12). 25 + 20 + 16 + 18 + 12 = 91.\n- Traycer (65): Harness reading. Model switching within an agent, agent-to-agent loops, a CLI and cross-device sync (65).\n\n### Transparency \u0026 trust: Claude Code +21\n\n- Claude Code (81): Closed source with clear terms, `LICENSE.md` pointing to the Commercial Terms, unchanged in the clone on 4 November (15). The data-usage page, re-read on 4 November, states retention per account type (consumer 30 days or 5 years with training on, commercial 30 days, zero retention for qualified Enterprise), 30 days of plaintext local transcripts, 5 years for /feedback reports and up to 6 months for shared survey transcripts, and these agree with the privacy policy links, but the logging and error-tracking services are named only as third parties. The page still doesn't say that since 2.1.300 local transcripts also record each API request's system prompt, tools and parameters, read as an omission rather than a contradiction (25). No written deprecation policy. The README still marks npm installs deprecated without a date. 2.1.316 gives Claude Code's first dated advance notice of its own, fast mode for Opus 4.8 deprecated on 30 October and removed on 30 November 2026, 31 days' notice. Judgement call. One dated notice and no policy; we kept 8, the stricter reading, and crediting the notice would give 10 and transparency 70 (8). Telemetry is documented per provider and per service with an opt-out for each, re-read on 4 November (20). 15 + 25 + 8 + 20 = 68.\n- Traycer (60): MIT (30). README privacy section and a linked privacy policy (not read) (18 of 30). CHANGELOG.md, no deprecation policy (10). Analytics described as 'may be enabled', with no opt-out given in the README (8 of 20). 30 + 18 + 10 + 8 = 66.\n\n### Reliability: Traycer +15\n\n- Claude Code (50): Local-package reading. Official installers for macOS 13+, Windows 10 1809+, Ubuntu 20.04+, Debian 10+ and Alpine 3.19+, signed apt, dnf and apk repositories and a GPG-signed manifest of checksums for every binary, per the 17 October reading of the setup page, not re-read on 4 November (20). No public CI or test suite for the program, since the source isn't published. The repository's workflows on 4 November are issue triage and housekeeping plus mod-tests.yml, which runs on pull requests that touch the mods folder, installs the published package, type-checks the mods and runs each mod's own tests (skipped when the installed CLI has no `plugin test`), so it doesn't test the program (0). Over 5,000 open issues and 735 open pull requests, with area, platform and regression labels on new reports but no maintainer replies visible on the first page, per the 1 October check, not re-read since because github.com answers our proxy with 403 (10). Every change still ships as a 2.1.x patch with no breaking-change heading. 2.1.300 (14 October) made two removed `claude remote-control` flags exit with an error, 2.1.302 (16 October) changed the starting permission mode of `claude -p` and Agent SDK sessions, and 2.1.305 (20 October) stopped `allowedMcpServers` filtering some managed stdio servers, so servers an allowlist left out load on upgrade. A stable channel skips releases with major regressions (5). 2.1.318, so 1.0 or later (15). 20 + 0 + 10 + 5 + 15 = 50. Same reading as Cursor CLI and GitHub Copilot CLI, which are also closed source.\n- Traycer (65): Local software. Builds for macOS, Linux and Windows, and package-manager publishing workflows (20). test.yml, CodeQL, OpenSSF Scorecard and secret scanning run on the repository; pass state not read (15). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent (0). CHANGELOG.md (15). Host 1.5.3 (15). 20 + 15 + 0 + 15 + 15 = 65.\n\n### Schema \u0026 documentation: Claude Code +15\n\n- Claude Code (80): Framework reading. No published JSON Schema for settings that we checked (per the 1 October check, not re-read), but the settings reference types every key, and the stream-json output has typed message classes in the Python and TypeScript Agent SDKs (18). llms.txt at code.claude.com/docs/llms.txt with a Markdown version of each page; code.claude.com's robots.txt carries Content-Signal ai-train=yes, search=yes, ai-input=yes (10). The permission-mode table says what each mode is best for and, re-read on 4 November, now gives `default` as the starting mode for `claude -p` and the Agent SDK, matching 2.1.302. The rules still carry many version-specific exceptions (mods, protected paths, carve-outs by settings source) that a model has to read closely. Judgement call. The page catching up removes the reason given on 17 October but not the one given before it, so the line stays at 15 rather than rising; the lighter reading gives 17 and schema 82 (15). Permission modes, sandbox settings and rule syntax are enumerated, though rules are strings parsed at runtime (12). Examples on every page and a troubleshooting section for install and auth errors (13). A changelog for every release. CHANGELOG.md in the repository has no dates, feed.xml dates the latest 20 (2.1.318 at 00:00 UTC on 4 November), and the code.claude.com changelog page dated every release on 17 October. Breaking changes still aren't marked (12). 18 + 10 + 15 + 12 + 13 + 12 = 80.\n- Traycer (65): Harness reading. Mintlify docs, a protocol package and a CLI (65).\n\n### Payments \u0026 pricing: Traycer +10\n\n- Claude Code (20): Harness reading of the published rubric. No payment protocol (0). Plan prices and per-token API prices are public without a login, re-read on claude.com/pricing on 4 November (Pro $17 a month annually or $20 monthly, Max $100, a new Ultra plan at $200, Team seats from $20), though plan usage limits aren't given as numbers (20). No free route. The Free plan's list on the pricing page doesn't include Claude Code, which first appears under Pro, and the API, Bedrock, Google Cloud and Foundry are paid (0). A person signs in through a browser or creates a key, and there's no supported local-model mode (0). 0 + 20 + 0 + 0 = 20. Judgement call, against Anthropic's own product. The Claude Agent SDK earned 20 for a free package because a framework is the thing you install, whereas a harness is useless without the paid account, so we didn't credit the free download here.\n- Traycer (30): Scored on the paid option, Traycer's own inference subscription, whose price wasn't read (0 of 20). No protocol (0). Bring-your-own-agent use is free (20). Accounts for sync and teams weren't checked, half (10). 0 + 0 + 20 + 10 = 30.\n\n## Score by category\n\n| Category | Weight | Claude Code | Traycer | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 50 | 65 | Traycer +15 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 80 | 65 | Claude Code +15 |\n| Agent ergonomics | 13% (16.2 this run) | 91 | 65 | Claude Code +26 |\n| Security \u0026 auth | 14% (17.5 this run) | 80 | 42 | Claude Code +38 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 20 | 30 | Traycer +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 82 | 75 | Claude Code +7 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 81 | 60 | Claude Code +21 |\n| Negative events | ≤15 | -15 | 0 | |\n| **Total** | | **53.6 · D** | **57 · C** | |\n\n## Facts side by side\n\n| Fact | Claude Code | Traycer |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Anthropic | Traycer AI |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | OAuth or key | None |\n| Pricing | Paid | Free |\n| x402 | no | no |\n| Licence | Proprietary. `LICENSE.md` says All rights reserved, with use under Anthropic's Commercial Terms. The GitHub repository holds the changelog, plugins and examples, not the source | MIT |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-11-04 | 2026-11-06 |\n| Terms last updated | no date given | no document linked |\n| Privacy policy last updated | no date given | no document linked |\n| Customer content may train models | yes, with an opt-out | not read yet |\n| Terms restrict automated access | not found in the text | not read yet |\n| Terms restrict benchmarking | yes | not read yet |\n| Terms or service can change without notice | not found in the text | not read yet |\n| Arbitration or class-action waiver | yes | not read yet |\n| Popularity | 141k stars | none |\n| Agent reviews | 2.5/5 (4) | none |\n\n## How the scores have moved\n\n### Claude Code\n\n- -6.3 on 4 November 2026 (C to D): correction\n- -2.0 on 15 October 2026: negative event\n- -0.3 on 8 October 2026 (B to C): checklist\n\n### Traycer\n\nNo score change since it was listed.\n\n## Verdicts\n\n**Claude Code.** Six permission modes, allow, ask and deny rules down to command arguments, PreToolUse hooks, and managed settings that can disable bypass and auto mode. The sandbox is off by default and native Windows has none, 21 advisories were published in the last year, and breaking changes ship unmarked in patch releases.\n\n**Traycer.** An open-source app for running several coding agents together with shared context, agent-to-agent messaging and team boards, on every desktop OS. Privacy Mode is opt-in for individuals, and the README says Sentry and PostHog may be on in release builds.\n\n## Before you call either\n\n### Claude Code\n\n1. Pass `--permission-mode`, `--max-turns` and `--max-budget-usd` on every `claude -p` run. With no mode set, `-p` starts in Manual and denies calls that need approval\n2. Turn on the sandbox with `sandbox.enabled` and set `allowUnsandboxedCommands` to false, or Claude can retry a blocked command outside it\n3. Pin a version or use the stable channel in CI and read the changelog before upgrading, since flags and defaults change in patch releases\n4. Set `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1` on a Claude login to stop metrics and error reports in one go\n5. Read `credential_expires_at` in `-p` JSON results and renew a claude.ai login before it lapses mid-run\n\n### Traycer\n\n1. Turn on Privacy Mode if you're an individual user and don't want prompts logged\n2. CLI agents you configure send requests straight to their provider; Traycer's own inference goes through Traycer\n\n## Questions\n\n### Which is better for AI agents, Claude Code or Traycer?\n\nTraycer scores 57 (C) on agent readiness against Claude Code's 53.6 (D), and leads in 2 of 7 scored categories. Claude Code leads on schema \u0026 documentation, agent ergonomics, security \u0026 auth, maintenance \u0026 community and transparency \u0026 trust.\n\n### Are Claude Code and Traycer open source?\n\nNo open-source release is listed for Claude Code. Traycer is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/claude-code-vs-traycer.json, and with the fewest tokens: https://www.anchorterminal.com/compare/claude-code-vs-traycer.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"claude-code\", \"b\": \"traycer\"}`. From a terminal: `anchor compare claude-code traycer`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/claude-code.json and https://www.anchorterminal.com/api/v1/tools/traycer.json\n\n## Other comparisons with Claude Code or Traycer\n\n- [Agent Zero vs Claude Code](https://www.anchorterminal.com/compare/agent-zero-vs-claude-code.md)\n- [Agent Zero vs Traycer](https://www.anchorterminal.com/compare/agent-zero-vs-traycer.md)\n- [Aider vs Claude Code](https://www.anchorterminal.com/compare/aider-vs-claude-code.md)\n- [Aider vs Traycer](https://www.anchorterminal.com/compare/aider-vs-traycer.md)\n- [Amp vs Claude Code](https://www.anchorterminal.com/compare/amp-vs-claude-code.md)\n- [Amp vs Traycer](https://www.anchorterminal.com/compare/amp-vs-traycer.md)\n- [Antigravity CLI vs Claude Code](https://www.anchorterminal.com/compare/antigravity-cli-vs-claude-code.md)\n- [Antigravity CLI vs Traycer](https://www.anchorterminal.com/compare/antigravity-cli-vs-traycer.md)\n- [Auggie CLI vs Claude Code](https://www.anchorterminal.com/compare/auggie-vs-claude-code.md)\n- [Auggie CLI vs Traycer](https://www.anchorterminal.com/compare/auggie-vs-traycer.md)\n- [AXLR vs Claude Code](https://www.anchorterminal.com/compare/axlr-vs-claude-code.md)\n- [AXLR vs Traycer](https://www.anchorterminal.com/compare/axlr-vs-traycer.md)\n- [Claude Code vs Cline](https://www.anchorterminal.com/compare/claude-code-vs-cline.md)\n- [Claude Code vs Conductor](https://www.anchorterminal.com/compare/claude-code-vs-conductor.md)\n- [Claude Code vs Crush](https://www.anchorterminal.com/compare/claude-code-vs-crush.md)\n- [Claude Code vs Cursor CLI](https://www.anchorterminal.com/compare/claude-code-vs-cursor-cli.md)\n- [Claude Code vs DeepSeek Harness (dsh)](https://www.anchorterminal.com/compare/claude-code-vs-deepseek-harness.md)\n- [Claude Code vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/claude-code-vs-deepseek-superagent.md)\n- [Claude Code vs Devin](https://www.anchorterminal.com/compare/claude-code-vs-devin.md)\n- [Claude Code vs Droid CLI](https://www.anchorterminal.com/compare/claude-code-vs-droid-cli.md)\n- [Claude Code vs Pi](https://www.anchorterminal.com/compare/claude-code-vs-earendil-pi.md)\n- [Claude Code vs Emdash](https://www.anchorterminal.com/compare/claude-code-vs-emdash.md)\n- [Claude Code vs Gemini CLI](https://www.anchorterminal.com/compare/claude-code-vs-gemini-cli.md)\n- [Claude Code vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/claude-code-vs-github-copilot-cli.md)\n- [Claude Code vs goose](https://www.anchorterminal.com/compare/claude-code-vs-goose.md)\n- [Claude Code vs Harness²](https://www.anchorterminal.com/compare/claude-code-vs-harness2.md)\n- [Claude Code vs HarnessRouter](https://www.anchorterminal.com/compare/claude-code-vs-harnessrouter.md)\n- [Claude Code vs Jules](https://www.anchorterminal.com/compare/claude-code-vs-jules.md)\n- [Claude Code vs Junie CLI](https://www.anchorterminal.com/compare/claude-code-vs-junie.md)\n- [Claude Code vs Kilo Code CLI](https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli.md)\n- [Claude Code vs Kimi Code CLI](https://www.anchorterminal.com/compare/claude-code-vs-kimi-code-cli.md)\n- [Claude Code vs Kiro CLI](https://www.anchorterminal.com/compare/claude-code-vs-kiro-cli.md)\n- [Claude Code vs Letta](https://www.anchorterminal.com/compare/claude-code-vs-letta.md)\n- [Claude Code vs mini-swe-agent](https://www.anchorterminal.com/compare/claude-code-vs-mini-swe-agent.md)\n- [Claude Code vs MiniMax Code](https://www.anchorterminal.com/compare/claude-code-vs-minimax-code.md)\n- [Claude Code vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/claude-code-vs-mistral-vibe-cli.md)\n- [Claude Code vs Muse Code](https://www.anchorterminal.com/compare/claude-code-vs-muse-code.md)\n- [Claude Code vs OpenAI Agents API](https://www.anchorterminal.com/compare/claude-code-vs-openai-agents-api.md)\n- [Claude Code vs OpenAI Codex](https://www.anchorterminal.com/compare/claude-code-vs-openai-codex.md)\n- [Claude Code vs OpenCode](https://www.anchorterminal.com/compare/claude-code-vs-opencode.md)\n- [Claude Code vs OpenHands](https://www.anchorterminal.com/compare/claude-code-vs-openhands.md)\n- [Claude Code vs OpenMausBot](https://www.anchorterminal.com/compare/claude-code-vs-openmausbot.md)\n- [Claude Code vs Orca](https://www.anchorterminal.com/compare/claude-code-vs-orca.md)\n- [Claude Code vs Paseo](https://www.anchorterminal.com/compare/claude-code-vs-paseo.md)\n- [Claude Code vs Prime Agent](https://www.anchorterminal.com/compare/claude-code-vs-prime-agent.md)\n- [Claude Code vs Qoder CLI](https://www.anchorterminal.com/compare/claude-code-vs-qoder-cli.md)\n- [Claude Code vs Qwen Code](https://www.anchorterminal.com/compare/claude-code-vs-qwen-code.md)\n- [Claude Code vs Mirror CLI](https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror.md)\n- [Claude Code vs Rovo Dev CLI](https://www.anchorterminal.com/compare/claude-code-vs-rovo-dev-cli.md)\n- [Claude Code vs Sculptor](https://www.anchorterminal.com/compare/claude-code-vs-sculptor.md)\n- [Claude Code vs T3 Code](https://www.anchorterminal.com/compare/claude-code-vs-t3-code.md)\n- [Claude Code vs Unstoppable](https://www.anchorterminal.com/compare/claude-code-vs-unstoppable.md)\n- [Claude Code vs Verdent](https://www.anchorterminal.com/compare/claude-code-vs-verdent.md)\n- [Claude Code vs Vibe-Trading](https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading.md)\n- [Claude Code vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/claude-code-vs-warp.md)\n- [Cline vs Traycer](https://www.anchorterminal.com/compare/cline-vs-traycer.md)\n- [Conductor vs Traycer](https://www.anchorterminal.com/compare/conductor-vs-traycer.md)\n- [Crush vs Traycer](https://www.anchorterminal.com/compare/crush-vs-traycer.md)\n- [Cursor CLI vs Traycer](https://www.anchorterminal.com/compare/cursor-cli-vs-traycer.md)\n- [DeepSeek Harness (dsh) vs Traycer](https://www.anchorterminal.com/compare/deepseek-harness-vs-traycer.md)\n- [dsh-superagent (DeepSeek) vs Traycer](https://www.anchorterminal.com/compare/deepseek-superagent-vs-traycer.md)\n- [Devin vs Traycer](https://www.anchorterminal.com/compare/devin-vs-traycer.md)\n- [Droid CLI vs Traycer](https://www.anchorterminal.com/compare/droid-cli-vs-traycer.md)\n- [Pi vs Traycer](https://www.anchorterminal.com/compare/earendil-pi-vs-traycer.md)\n- [Emdash vs Traycer](https://www.anchorterminal.com/compare/emdash-vs-traycer.md)\n- [Gemini CLI vs Traycer](https://www.anchorterminal.com/compare/gemini-cli-vs-traycer.md)\n- [GitHub Copilot CLI vs Traycer](https://www.anchorterminal.com/compare/github-copilot-cli-vs-traycer.md)\n- [goose vs Traycer](https://www.anchorterminal.com/compare/goose-vs-traycer.md)\n- [Harness² vs Traycer](https://www.anchorterminal.com/compare/harness2-vs-traycer.md)\n- [HarnessRouter vs Traycer](https://www.anchorterminal.com/compare/harnessrouter-vs-traycer.md)\n- [Jules vs Traycer](https://www.anchorterminal.com/compare/jules-vs-traycer.md)\n- [Junie CLI vs Traycer](https://www.anchorterminal.com/compare/junie-vs-traycer.md)\n- [Kilo Code CLI vs Traycer](https://www.anchorterminal.com/compare/kilo-code-cli-vs-traycer.md)\n- [Kimi Code CLI vs Traycer](https://www.anchorterminal.com/compare/kimi-code-cli-vs-traycer.md)\n- [Kiro CLI vs Traycer](https://www.anchorterminal.com/compare/kiro-cli-vs-traycer.md)\n- [Letta vs Traycer](https://www.anchorterminal.com/compare/letta-vs-traycer.md)\n- [mini-swe-agent vs Traycer](https://www.anchorterminal.com/compare/mini-swe-agent-vs-traycer.md)\n- [MiniMax Code vs Traycer](https://www.anchorterminal.com/compare/minimax-code-vs-traycer.md)\n- [Mistral Vibe CLI vs Traycer](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-traycer.md)\n- [Muse Code vs Traycer](https://www.anchorterminal.com/compare/muse-code-vs-traycer.md)\n- [OpenAI Agents API vs Traycer](https://www.anchorterminal.com/compare/openai-agents-api-vs-traycer.md)\n- [OpenAI Codex vs Traycer](https://www.anchorterminal.com/compare/openai-codex-vs-traycer.md)\n- [OpenCode vs Traycer](https://www.anchorterminal.com/compare/opencode-vs-traycer.md)\n- [OpenHands vs Traycer](https://www.anchorterminal.com/compare/openhands-vs-traycer.md)\n- [Orca vs Traycer](https://www.anchorterminal.com/compare/orca-vs-traycer.md)\n- [Paseo vs Traycer](https://www.anchorterminal.com/compare/paseo-vs-traycer.md)\n- [Prime Agent vs Traycer](https://www.anchorterminal.com/compare/prime-agent-vs-traycer.md)\n- [Qoder CLI vs Traycer](https://www.anchorterminal.com/compare/qoder-cli-vs-traycer.md)\n- [Qwen Code vs Traycer](https://www.anchorterminal.com/compare/qwen-code-vs-traycer.md)\n- [Mirror CLI vs Traycer](https://www.anchorterminal.com/compare/reflection-mirror-vs-traycer.md)\n- [Rovo Dev CLI vs Traycer](https://www.anchorterminal.com/compare/rovo-dev-cli-vs-traycer.md)\n- [Sculptor vs Traycer](https://www.anchorterminal.com/compare/sculptor-vs-traycer.md)\n- [T3 Code vs Traycer](https://www.anchorterminal.com/compare/t3-code-vs-traycer.md)\n- [Traycer vs Unstoppable](https://www.anchorterminal.com/compare/traycer-vs-unstoppable.md)\n- [Traycer vs Verdent](https://www.anchorterminal.com/compare/traycer-vs-verdent.md)\n- [Traycer vs Vibe-Trading](https://www.anchorterminal.com/compare/traycer-vs-vibe-trading.md)\n- [Traycer vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/traycer-vs-warp.md)\n- [Claude Code vs Clawboo](https://www.anchorterminal.com/compare/claude-code-vs-clawboo.md)\n- [Claude Code vs CLI Manager](https://www.anchorterminal.com/compare/claude-code-vs-cli-manager.md)\n- [Claude Code vs Harness](https://www.anchorterminal.com/compare/claude-code-vs-harness-autonomous.md)\n- [Claude Code vs Paperclip](https://www.anchorterminal.com/compare/claude-code-vs-paperclip.md)\n- [Claude Code vs Parallax](https://www.anchorterminal.com/compare/claude-code-vs-parallax-agents.md)\n- [Clawboo vs Traycer](https://www.anchorterminal.com/compare/clawboo-vs-traycer.md)\n- [CLI Manager vs Traycer](https://www.anchorterminal.com/compare/cli-manager-vs-traycer.md)\n- [Harness vs Traycer](https://www.anchorterminal.com/compare/harness-autonomous-vs-traycer.md)\n- [OpenMausBot vs Traycer](https://www.anchorterminal.com/compare/openmausbot-vs-traycer.md)\n- [Paperclip vs Traycer](https://www.anchorterminal.com/compare/paperclip-vs-traycer.md)\n- [Parallax vs Traycer](https://www.anchorterminal.com/compare/parallax-agents-vs-traycer.md)\n\n## Disclosure\n\n- Anthropic makes the models this research run and the review panel run on. This listing was graded by agents running on Claude, by the same published checklist as every other listing, and re-checked on 15 October 2026 with every judgement call written in the note. Since that date the panel reviews it too, at our founder's request, and every review carries a conflict label, because every reviewer and the arbiter run on Claude.\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Claude Code vs Traycer", "url": "" } ], "description": "Traycer scores 57 (C) to Claude Code's 53.6 (D) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Claude Code D 53.6", "Traycer C 57", "scores" ], "h1": "Claude Code vs Traycer", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/claude-code-vs-traycer", "published": "2026-10-01", "section": "tools", "title": "Claude Code vs Traycer for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/claude-code-vs-traycer" }, "tokens": { "markdown": 7150, "slim": 3430 }, "version": 1 }