{ "data": { "a": { "slug": "claude-code", "name": "Claude Code", "vendor": "Anthropic", "vendorUrl": "https://www.anthropic.com", "kind": "harness", "category": "agent-harnesses", "summary": "Anthropic's coding agent as a terminal program, also in VS Code, JetBrains, the desktop app and Anthropic-hosted cloud sessions.", "url": "https://www.anchorterminal.com/tools/claude-code", "markdownUrl": "https://www.anchorterminal.com/tools/claude-code.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/claude-code.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/claude-code.json", "repo": "https://github.com/anthropics/claude-code", "license": "Proprietary. `LICENSE.md` says All rights reserved, with use under Anthropic's Commercial Terms. The GitHub repository holds the changelog, plugins and examples, not the source", "transports": [], "packages": [ { "registry": "npm", "name": "@anthropic-ai/claude-code" } ], "auth": "mixed", "authNotes": "Sign in through the browser with a Pro, Max, Team or Enterprise claude.ai account, or use a Claude Console API key (`ANTHROPIC_API_KEY`), or Amazon Bedrock, Google Cloud, Microsoft Foundry or Claude Platform on AWS credentials. The free claude.ai plan doesn't include Claude Code.", "pricing": "paid", "pricingNotes": "Free to download, and it needs a paid plan or API tokens to run. Pro is $17 a month billed annually or $20 monthly, Max from $100 a month, Team $20 or $25 a standard seat and $100 or $125 a premium seat, Enterprise $20 a seat billed annually with a 20-seat minimum, plus usage at API rates, or pay as you go at Claude API token prices. On a plan Claude Code shares the plan's usage limits, and the pricing page gives no number for them (checked 2026-10-17).", "priceSummary": "$20 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the pricing page (checked 2026-10-02).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 141000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-02" }, "docsUrl": "https://code.claude.com/docs/en/overview", "llmsTxt": "https://code.claude.com/docs/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "official", "harness", "coding-agent", "cli", "closed-source", "claude-only", "mcp", "llms-txt", "telemetry-default-on", "status-page", "card-required" ], "lastRelease": "2026-10-16", "graded": true, "disclosure": "Anthropic makes the models this research run and the review panel run on. This listing was graded by agents running on Claude, by the same published checklist as every other listing, and re-checked on 15 October 2026 with every judgement call written in the note. Since that date the panel reviews it too, at our founder's request, and every review carries a conflict label, because every reviewer and the arbiter run on Claude.", "anchor": { "graded": true, "score": 59.9, "grade": "C", "agentReady": false, "rank": 603, "ranked": true, "rankOf": 1210, "categoryRank": 19, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 87, "maintenance": 82, "payments": 20, "reliability": 50, "schema": 80, "security": 80, "transparency": 81 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": -8, "negativeNotes": [ "2025-10-03 to 2026-06-25. 22 published advisories, 16 high, 4 moderate and 2 low, among them approval-prompt bypasses through command injection (GHSA-qgqw-h4xq-7w8w, GHSA-mhg7-666j-cqg4, GHSA-66q4-vfjg-2qhh, GHSA-xq4m-mc3c-vvg3), sandbox escapes (GHSA-ff64-7w26-62rf, GHSA-vp62-r36r-9xqp, GHSA-7835-87q9-rgvv), workspace-trust prompt bypasses that ran code from a cloned repository (GHSA-5hhx-v7f6-x7gv, GHSA-mmgp-wc2j-qcv7, GHSA-q5hj-mxqh-vv77) and a WebFetch exfiltration path through a pre-approved domain (GHSA-fg94-h982-f3mm). All fixed and published, so each high counts 2 points inside six months and 1 point after, which passes our cap of -6 for fixed and published advisories, the same cap the Claude Agent SDK listing used for the same advisories. Since then the advisories page, read on 15 October, lists GHSA-gfvf-j8jh-jxxw (Low, 29 September, managed settings not applied when a stored API key was preferred) and GHSA-5j29-h97v-84ch (High, 5 October, arbitrary file write by symlink following), both published and read as fixed. GitHub's reviewed advisory database, read through OSV on 17 October, adds GHSA-pq7j-f95f-qfcv (CVE-2026-86063, High, published 15 October 2026, a plugin hash-pin bypass in the plugin install flow, fixed in 2.1.179). All three sit under the same cap (https://github.com/anthropics/claude-code/security/advisories and https://api.osv.dev/v1/vulns/GHSA-pq7j-f95f-qfcv). -6", "2026-10-02 to 2026-10-14. The changelog for 2.1.288 to 2.1.300 lists fixes for a dangerous `rm` inside `bash -c` running without a prompt under a shell allow rule (2.1.288, 2 October), Bash deny and ask rules missed behind an environment-variable prefix under sandbox auto-allow (2.1.289, 3 October), background workers sending telemetry and a feature-flag request to Anthropic behind a Claude apps gateway (2.1.290, 5 October), hook approvals and auto mode skipping the prompt for file reads from network (UNC) paths, marked Security (2.1.292, 6 October), sandboxed commands writing into a `--plugin-dir` folder whose code runs outside the sandbox, or reaching a denied path through a symlink on macOS (2.1.299, 14 October), and agent hooks whose model was unavailable allowing the action instead of falling back to the caller's model (2.1.300, 14 October). All fixed. Judgement call. No advisory for them appears on the first page of the advisories list read on 15 October or in GitHub's reviewed database read through OSV on 17 October, so they're disclosed only in the changelog, and we applied to the group the -2 GitHub Copilot CLI got for one changelog-only enforcement-gap fix. Counting each item at -2 would give -12, and we found no listing whose changelog fixes were counted one by one. If these carry GHSA ids, they fall under the -6 advisory cap already reached and this line goes. 2.1.301 and 2.1.302 (15 and 16 October) list no comparable fix (https://code.claude.com/docs/en/changelog). -2" ], "verdict": "Six permission modes, allow, ask and deny rules down to command arguments, PreToolUse hooks, and managed settings that can disable bypass and auto mode. The sandbox is off by default and native Windows has none.", "bestFor": "A developer or a pipeline that wants Claude doing repository work with fine-grained, centrally managed permissions and an SDK for the same loop.", "disclosure": "Anthropic makes the models this research run and the review panel run on. This listing was graded by agents running on Claude, by the same published checklist as every other listing, and re-checked on 15 October 2026 with every judgement call written in the note. Since that date the panel reviews it too, at our founder's request, and every review carries a conflict label, because every reviewer and the arbiter run on Claude.", "strengths": [ "Six permission modes, allow, ask and deny rules down to command arguments, PreToolUse hooks, and managed settings that can disable bypass and auto mode", "An OS sandbox (Seatbelt, bubblewrap) whose network proxy denies every host outside an allowlist that starts empty", "`claude -p` with json and stream-json output, `--max-turns`, `--max-budget-usd`, resume and fork, and Python and TypeScript SDKs for the same loop", "Signed apt, dnf and apk repositories, a GPG-signed checksum manifest and a stable channel that skips releases with major regressions", "Telemetry documented per provider and per service, each with its own opt-out" ], "weaknesses": [ "The sandbox is off by default and native Windows has none", "Auto mode, a classifier rather than a person, has been the starting mode for interactive sessions on every plan since 28 September 2026", "22 security advisories in the year to 25 June 2026, 16 high, further highs on 5 and 15 October 2026, and sandbox and deny-rule fixes in October releases", "Usage metrics on by default on the Claude API, and error reports on Pro and Max sign-ins", "Closed source, Claude models only, and no free plan includes it" ], "agentNotes": [ "Pass `--permission-mode`, `--max-turns` and `--max-budget-usd` on every `claude -p` run. The unset mode changed again in 2.1.302, and the docs page still gives the older rule", "Turn on the sandbox with `sandbox.enabled` and set `allowUnsandboxedCommands` to false, or Claude can retry a blocked command outside it", "Write MCP allow rules as `mcp__\u003cserver\u003e__*` with the server's whole name. Since 2.1.299 a rule for `mcp__a` no longer covers a server named `a__b`", "Set `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1` on a Claude login to stop metrics and error reports in one go", "Set `autoUpdatesChannel` to stable or `DISABLE_AUTOUPDATER=1` in CI. Native installs update themselves about once a day" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59.9 } ], "editorialScores": { "ergonomics": 87, "maintenance": 82, "payments": 20, "reliability": 50, "schema": 80, "security": 80, "transparency": 68 }, "provenanceScore": 94, "checked": { "categories": { "ergonomics": "2026-10-17", "maintenance": "2026-10-17", "payments": "2026-10-17", "reliability": "2026-10-17", "schema": "2026-10-17", "security": "2026-10-17", "transparency": "2026-10-17" }, "last": "2026-10-17", "lastMoved": "2026-10-15", "oldest": "2026-10-17", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "curl -fsSL https://claude.ai/install.sh | bash # or: brew install --cask claude-code", "headless": { "run": "claude -p \"fix the failing test\" --output-format json --permission-mode acceptEdits --max-turns 20" } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/claude-code" }, "sameCompany": [ "anthropic-api", "claude-agent-sdk" ], "area": "frameworks", "unitPrices": [ { "item": "Pro plan", "unit": "month", "usd": 20, "note": "$17 a month billed annually" }, { "item": "Max plan", "unit": "month", "usd": 100, "note": "lowest Max tier" } ], "provenance": { "legalEntity": "Anthropic, PBC", "domain": "claude.com", "domainRegistered": "1995-05-24", "domainNote": "claude.com was registered in 1995, long before Anthropic bought it. Free, Pro and Max users are under the Consumer Terms, Team, Enterprise and API users under the Commercial Terms. The security.txt state is anthropic.com's, read on 17 October 2026 (HackerOne contact, Expires 2026-12-31). claude.com serves none (404 on 17 October). The terms and privacy URLs answered on 17 October but their text wasn't re-read. The status page was read through its RSS feed.", "endpointOnVendorDomain": null, "terms": "https://www.anthropic.com/legal/commercial-terms", "privacy": "https://www.anthropic.com/legal/privacy", "statusPage": "https://status.claude.com", "changelog": "https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md", "securityTxt": "valid", "checked": "2026-10-17", "score": 94 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/claude-code.json", "live": { "slug": "claude-code", "vendorStatus": { "page": "https://status.claude.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-25T20:47:24.139389789Z" }, "versions": [ { "registry": "github", "name": "anthropics/claude-code", "version": "v2.1.310", "released": "2026-10-23", "seenAt": "2026-10-25T08:41:25.722423289Z" }, { "registry": "npm", "name": "@anthropic-ai/claude-code", "version": "2.1.310", "seenAt": "2026-10-25T08:41:25.509689582Z" } ], "githubStars": 153323, "npmWeekly": 7234137, "securityTxt": { "url": "https://claude.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-25T15:28:36.938942663Z" }, "llmsTxt": { "url": "https://code.claude.com/docs/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-25T14:51:29.098806789Z" }, "domain": { "domain": "claude.com", "registered": "1995-05-24", "source": "https://rdap.verisign.com/com/v1/domain/claude.com", "checkedAt": "2026-10-25T14:02:13.02452861Z" }, "pages": [ { "url": "https://code.claude.com/docs/en/changelog", "kind": "deprecations", "status": 200, "checkedAt": "2026-10-25T02:41:43.227874622Z", "changedAt": "2026-10-24T02:12:00.280458013Z", "fingerprint": "0dffe548eb73" }, { "url": "https://raw.githubusercontent.com/anthropics/claude-code/main/CHANGELOG.md", "kind": "deprecations", "status": 304, "checkedAt": "2026-10-25T02:54:40.977793854Z", "changedAt": "2026-10-24T02:25:09.906762369Z", "fingerprint": "e822338c539f" } ], "github": { "repo": "anthropics/claude-code", "checkedAt": "2026-10-19T05:52:58.182119631Z", "stars": 152288, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-18T22:26:53Z", "openIssues": 14545, "openPRs": 698, "issuesOpened90d": 23544, "issuesClosed90d": 20782, "prsMerged90d": 41, "ci": { "branch": "main", "runs": 36, "success": 36, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-10-18T22:26:49Z" }, "advisories": [ { "ghsa": "GHSA-4p2j-qj3c-6x84", "cve": "CVE-2026-88066", "severity": "high", "published": "2026-10-13T12:24:43Z" }, { "ghsa": "GHSA-pq7j-f95f-qfcv", "cve": "CVE-2026-86063", "severity": "high", "published": "2026-10-09T15:14:01Z" }, { "ghsa": "GHSA-5j29-h97v-84ch", "cve": "CVE-2026-103435", "severity": "high", "published": "2026-10-05T12:45:33Z" }, { "ghsa": "GHSA-gfvf-j8jh-jxxw", "cve": "CVE-2026-103012", "severity": "low", "published": "2026-09-29T21:44:55Z" }, { "ghsa": "GHSA-v234-4jrq-mgg6", "severity": "high", "published": "2026-09-25T21:54:09Z" }, { "ghsa": "GHSA-4vp2-6q8c-pvq2", "cve": "CVE-2026-46406", "severity": "medium", "published": "2026-06-25T13:29:49Z" }, { "ghsa": "GHSA-7835-87q9-rgvv", "cve": "CVE-2026-55607", "severity": "high", "published": "2026-06-25T13:14:35Z" }, { "ghsa": "GHSA-fg94-h982-f3mm", "cve": "CVE-2026-54316", "severity": "medium", "published": "2026-06-13T11:40:00Z" }, { "ghsa": "GHSA-3rwf-2g6p-c2f9", "cve": "CVE-2026-44467", "severity": "high", "published": "2026-05-06T20:27:32Z" }, { "ghsa": "GHSA-5p5x-5294-qhp3", "cve": "CVE-2026-44470", "severity": "high", "published": "2026-05-06T20:25:23Z" }, { "ghsa": "GHSA-q5hj-mxqh-vv77", "cve": "CVE-2026-40068", "severity": "high", "published": "2026-04-24T11:53:10Z" }, { "ghsa": "GHSA-vp62-r36r-9xqp", "cve": "CVE-2026-39861", "severity": "high", "published": "2026-04-20T10:19:11Z" }, { "ghsa": "GHSA-5cwg-9f6j-9jvx", "cve": "CVE-2026-35603", "severity": "medium", "published": "2026-04-17T10:41:05Z" }, { "ghsa": "GHSA-mmgp-wc2j-qcv7", "cve": "CVE-2026-33068", "severity": "high", "published": "2026-03-18T21:35:35Z" }, { "ghsa": "GHSA-66q4-vfjg-2qhh", "cve": "CVE-2026-25722", "severity": "high", "published": "2026-02-06T00:15:51Z" }, { "ghsa": "GHSA-mhg7-666j-cqg4", "cve": "CVE-2026-25723", "severity": "high", "published": "2026-02-06T00:14:51Z" }, { "ghsa": "GHSA-ff64-7w26-62rf", "cve": "CVE-2026-25725", "severity": "high", "published": "2026-02-06T00:13:40Z" }, { "ghsa": "GHSA-4q92-rfm6-2cqx", "cve": "CVE-2026-25724", "severity": "low", "published": "2026-02-06T00:12:26Z" }, { "ghsa": "GHSA-qgqw-h4xq-7w8w", "cve": "CVE-2026-24887", "severity": "high", "published": "2026-02-03T19:13:11Z" }, { "ghsa": "GHSA-q728-gf8j-w49r", "cve": "CVE-2026-24053", "severity": "high", "published": "2026-02-03T19:10:25Z" }, { "ghsa": "GHSA-vhw5-3g5m-8ggf", "cve": "CVE-2026-24052", "severity": "high", "published": "2026-02-03T19:05:06Z" }, { "ghsa": "GHSA-jh7p-qr78-84p7", "cve": "CVE-2026-21852", "severity": "medium", "published": "2026-01-20T22:31:15Z" }, { "ghsa": "GHSA-xq4m-mc3c-vvg3", "cve": "CVE-2025-66032", "severity": "high", "published": "2025-12-03T00:54:43Z" }, { "ghsa": "GHSA-7mv8-j34q-vp7q", "cve": "CVE-2025-64755", "severity": "high", "published": "2025-11-20T18:54:54Z" }, { "ghsa": "GHSA-5hhx-v7f6-x7gv", "cve": "CVE-2025-65099", "severity": "high", "published": "2025-11-19T02:34:10Z" }, { "ghsa": "GHSA-4fgq-fpq9-mr3g", "cve": "CVE-2025-59536", "severity": "high", "published": "2025-10-03T04:41:02Z" }, { "ghsa": "GHSA-66m2-gx93-v996", "cve": "CVE-2025-59829", "severity": "low", "published": "2025-10-03T04:36:40Z" }, { "ghsa": "GHSA-2jjv-qf24-vfm4", "cve": "CVE-2025-59828", "severity": "high", "published": "2025-09-24T12:49:58Z" }, { "ghsa": "GHSA-qxfv-fcpc-w36x", "cve": "CVE-2025-58764", "severity": "high", "published": "2025-09-09T23:58:42Z" }, { "ghsa": "GHSA-j4h9-wv2m-wrf7", "cve": "CVE-2025-59041", "severity": "high", "published": "2025-09-09T23:58:39Z" }, { "ghsa": "GHSA-ph6w-f82w-28w6", "severity": "high", "published": "2025-09-02T21:21:00Z" }, { "ghsa": "GHSA-x5gv-jw7f-j6xj", "cve": "CVE-2025-55284", "severity": "high", "published": "2025-08-15T21:36:43Z" }, { "ghsa": "GHSA-pmw4-pwvc-3hx2", "cve": "CVE-2025-54794", "severity": "high", "published": "2025-08-01T23:38:37Z" }, { "ghsa": "GHSA-x56v-x2h6-7j34", "cve": "CVE-2025-54795", "severity": "high", "published": "2025-08-01T23:38:23Z" }, { "ghsa": "GHSA-9f65-56v6-gxw7", "cve": "CVE-2025-52882", "severity": "high", "published": "2025-06-23T15:00:37Z" } ] }, "updatedAt": "2026-10-25T20:47:24.139389789Z" } }, "answer": "Vibe-Trading scores 62.2 (B) on agent readiness against Claude Code's 59.9 (C), and leads in 2 of 7 scored categories. Claude Code leads on schema \u0026 documentation, agent ergonomics, security \u0026 auth and transparency \u0026 trust.", "b": { "slug": "vibe-trading", "name": "Vibe-Trading", "vendor": "HKUDS", "vendorUrl": "https://vibetrading.wiki", "kind": "harness", "category": "agent-harnesses", "summary": "Vibe-Trading is an open-source, self-hosted finance research agent from HKUDS. It turns plain-English questions into market data pulls, strategy code and backtests, through a CLI, a web UI, chat apps or its MCP server.", "url": "https://www.anchorterminal.com/tools/vibe-trading", "markdownUrl": "https://www.anchorterminal.com/tools/vibe-trading.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/vibe-trading.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/vibe-trading.json", "repo": "https://github.com/HKUDS/Vibe-Trading", "license": "MIT", "transports": [ "stdio", "streamable-http", "sse" ], "packages": [ { "registry": "pypi", "name": "vibe-trading-ai" } ], "auth": "none", "authNotes": "No account with the project. The owner supplies a model provider key in `agent/.env`, or uses Ollama, a ChatGPT OAuth sign-in for OpenAI Codex, a GitHub Copilot login or a local Claude Code login. The API server answers loopback clients without a key; any other client needs `API_AUTH_KEY` as `Authorization: Bearer \u003ckey\u003e`. The MCP server's HTTP transport binds 127.0.0.1 with a Host and Origin allow-list and no token. Broker connector credentials are stored in the OS keyring by `vibe-trading connector setup` (https://github.com/HKUDS/Vibe-Trading/blob/main/README.md).", "pricing": "free", "pricingNotes": "Free under the MIT licence, with nothing to buy from the project. The owner pays the model provider, or nothing with a local model through Ollama. 29 market-data sources are built in and most need no key. QVeris, an optional paid data marketplace, is a third party and is reached only in paid mode; the README carries a QVeris referral link and discloses it (checked 2026-10-25).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs or the source at v0.1.18 (checked 2026-10-25).", "endpoints": [] }, "toolCount": 82, "popularity": { "githubStars": 36500, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-25" }, "docsUrl": "https://vibetrading.wiki/docs/", "capabilities": [ "agent.harness", "agent.multi-agent", "agent.mcp-client", "data.markets", "market.crypto", "market.news", "assistant.messaging", "assistant.proactive" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "mit", "mcp", "cli", "harness", "docker", "no-card", "no-sandbox", "pre-1.0", "beta" ], "lastRelease": "2026-10-21", "graded": true, "anchor": { "graded": true, "score": 62.2, "grade": "B", "agentReady": false, "rank": 502, "ranked": true, "rankOf": 1210, "categoryRank": 12, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 82, "payments": 60, "reliability": 63, "schema": 72, "security": 70, "transparency": 47 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-25" }, "negative": -4, "negativeNotes": [ "2026-10-02. GHSA-v2f8-6655-7grj (CVE-2026-114108, critical). In 0.1.0 to 0.1.6 the API server answered every client without authentication when `API_AUTH_KEY` was unset, the shipped default, with the Docker container running as root on 0.0.0.0:8899, which the advisory chains to remote code execution. Fixed in 0.1.7 of 6 May 2026 and published five months later, -2. https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-v2f8-6655-7grj", "2026-10-02. GHSA-jqmf-mx4f-hfr6 (CVE-2026-114107, critical). Shell and code injection in the LLM-callable `bash`, `background_run` and backtest tools, and SSRF in `read_url`, reachable through the unauthenticated API or prompt injection in a processed document, in 0.1.0 to 0.1.6. Fixed in the same 0.1.7 release, -1. https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-jqmf-mx4f-hfr6", "2026-10-02. GHSA-5rmq-chc7-m22f (CVE-2026-114106, high). `read_document` read any file the process could reach and `safe_user_path()` accepted the whole home directory, in 0.1.0 to 0.1.6. Fixed in 0.1.7, -1. https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-5rmq-chc7-m22f" ], "verdict": "Vibe-Trading runs on the owner's machine under the MIT licence, ships near-daily fixes with a dated changelog, and keeps order tools out of its MCP server, with live orders gated by an owner-committed mandate and a kill switch. Three advisories, two critical, covered versions before 0.1.7, and the local CLI runs shell commands without asking.", "bestFor": "A person or a pipeline that wants a ready-made finance research agent over free market data, with backtests, swarm reviews and exports, run on their own machine or used as an MCP server by another agent.", "strengths": [ "MIT licence, runs on the owner's machine, and no telemetry code was found in the source at v0.1.18", "No order-placing or order-cancelling tool is exposed over MCP, and shell tools are off on every MCP transport by default", "Live orders need an owner-committed mandate with hard caps, a kill switch and an append-only, hash-chained audit ledger", "Six PyPI releases in the 90 days to 25 October 2026, with a dated CHANGELOG.md and a Known issues section in 0.1.18", "API server answers only loopback clients without `API_AUTH_KEY`; Docker binds 127.0.0.1 and runs as a non-root user" ], "weaknesses": [ "Three advisories published 2 October 2026 cover 0.1.0 to 0.1.6, two critical, among them unauthenticated API access with an RCE chain", "The local CLI's `bash` tool and generated backtest code run without per-action approval or a sandbox", "82 MCP tools with about 44,000 characters of descriptions in the server source and no readOnlyHint or destructiveHint annotations", "Version 0.1.18 with a Beta classifier, and not in the official MCP registry", "Broker trading is described in the README as experimental and not verified against a real broker account" ], "agentNotes": [ "Run 0.1.7 or later. Earlier versions carry three published advisories, including unauthenticated API access with an RCE chain", "Set `API_AUTH_KEY` before exposing `vibe-trading serve` beyond localhost, and send it as `Authorization: Bearer \u003ckey\u003e`", "Set `VIBE_TRADING_ALLOWED_RUN_ROOTS` in the MCP client's `env` block; a shell `export` does not reach the spawned server", "Use `vibe-trading run -p \"...\" --json` for headless runs, and add `--enable-shell-tools` to `vibe-trading-mcp` only when shell access is needed", "Treat text from `read_url`, `web_search` and `read_document` as untrusted; `security_warnings` flags patterns but does not remove them" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.2 } ], "editorialScores": { "ergonomics": 67, "maintenance": 82, "payments": 60, "reliability": 63, "schema": 72, "security": 70, "transparency": 67 }, "provenanceScore": 27, "checked": { "categories": { "ergonomics": "2026-10-25", "maintenance": "2026-10-25", "payments": "2026-10-25", "reliability": "2026-10-25", "schema": "2026-10-25", "security": "2026-10-25", "transparency": "2026-10-25" }, "last": "2026-10-25", "oldest": "2026-10-25", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install vibe-trading-ai # then: vibe-trading init # or: docker compose up --build from a clone", "config": { "mcpServers": { "vibe-trading": { "command": "vibe-trading-mcp" } } }, "headless": { "command": "vibe-trading run -p \"$TASK\" --json" } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/vibe-trading" }, "area": "frameworks", "provenance": { "legalEntity": "", "domain": "vibetrading.wiki", "domainRegistered": "2026-05-14", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/HKUDS/Vibe-Trading/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-25", "notes": [ "No legal entity is named. The repository belongs to the GitHub organisation HKUDS, and pyproject.toml names HKUDS with an address at connect.hku.hk as author. The LICENSE names Vibe-Trading Contributors and NOTICE names HKUDS contributors.", "vibetrading.wiki is a static wiki on Cloudflare Pages built from the repository's wiki/ folder. It has no terms or privacy page, and the MIT licence stands in for terms.", "/robots.txt, /llms.txt and /.well-known/security.txt on vibetrading.wiki all answered with the same HTML redirect to /home/ on 25 October 2026, so there are no robots rules, no llms.txt and no security.txt.", "SECURITY.md asks for private reports through a GitHub security advisory and promises an acknowledgement within five business days.", "RDAP gives a registration date of 14 May 2026 for vibetrading.wiki. The README dates the wiki's launch to the same day.", "There is no hosted endpoint. The API and MCP server answer on the owner's own host." ], "score": 27 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/vibe-trading.json", "live": { "slug": "vibe-trading", "securityTxt": { "url": "https://vibetrading.wiki/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-25T15:28:03.847411428Z" }, "updatedAt": "2026-10-25T15:28:03.847411428Z" } }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Anthropic", "b": "HKUDS", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "stdio, Streamable HTTP, SSE (legacy)", "name": "Transports" }, { "a": "OAuth or key", "b": "None", "name": "Auth" }, { "a": "Paid", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary. `LICENSE.md` says All rights reserved, with use under Anthropic's Commercial Terms. The GitHub repository holds the changelog, plugins and examples, not the source", "b": "MIT", "name": "Licence" }, { "a": "none", "b": "82", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-10-16", "b": "2026-10-21", "name": "Last release" }, { "a": "no date given", "b": "no document linked", "name": "Terms last updated" }, { "a": "no date given", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "yes, with an opt-out", "b": "", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "", "name": "Terms restrict automated access" }, { "a": "yes", "b": "", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "141k stars", "b": "37k stars", "name": "Popularity" }, { "a": "2.5/5 (4)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Vibe-Trading scores 62.2 (B) on agent readiness against Claude Code's 59.9 (C), and leads in 2 of 7 scored categories. Claude Code leads on schema \u0026 documentation, agent ergonomics, security \u0026 auth and transparency \u0026 trust.", "question": "Which is better for AI agents, Claude Code or Vibe-Trading?" }, { "answer": "No open-source release is listed for Claude Code. Vibe-Trading is open source (MIT).", "question": "Are Claude Code and Vibe-Trading open source?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 80 against 72", "Agent ergonomics, 87 against 67", "Security \u0026 auth, 80 against 70", "Transparency \u0026 trust, 81 against 47" ], "also": null, "goodFor": "A developer or a pipeline that wants Claude doing repository work with fine-grained, centrally managed permissions and an SDK for the same loop.", "slug": "claude-code", "watchFor": "The sandbox is off by default and native Windows has none" }, { "aheadOn": [ "Reliability, 63 against 50", "Payments \u0026 pricing, 60 against 20" ], "also": [ "No key needed to call it", "Runs on your own machine", "Free to start without a card", "Open source" ], "goodFor": "A person or a pipeline that wants a ready-made finance research agent over free market data, with backtests, swarm reviews and exports, run on their own machine or used as an MCP server by another agent.", "slug": "vibe-trading", "watchFor": "Three advisories published 2 October 2026 cover 0.1.0 to 0.1.6, two critical, among them unauthenticated API access with an RCE chain" } ], "job": { "capability": "agent.harness", "name": "Agent harnesses" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-claude-code.json", "title": "Agent Zero vs Claude Code", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading.json", "title": "Agent Zero vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-claude-code.json", "title": "Aider vs Claude Code", "url": "https://www.anchorterminal.com/compare/aider-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-vibe-trading.json", "title": "Aider vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/aider-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-claude-code.json", "title": "Amp vs Claude Code", "url": "https://www.anchorterminal.com/compare/amp-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-vibe-trading.json", "title": "Amp vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/amp-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-claude-code.json", "title": "Antigravity CLI vs Claude Code", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-vibe-trading.json", "title": "Antigravity CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-claude-code.json", "title": "Auggie CLI vs Claude Code", "url": "https://www.anchorterminal.com/compare/auggie-vs-claude-code" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-vibe-trading.json", "title": "Auggie CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/auggie-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-cline.json", "title": "Claude Code vs Cline", "url": "https://www.anchorterminal.com/compare/claude-code-vs-cline" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-crush.json", "title": "Claude Code vs Crush", "url": "https://www.anchorterminal.com/compare/claude-code-vs-crush" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-cursor-cli.json", "title": "Claude Code vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-deepseek-harness.json", "title": "Claude Code vs DeepSeek Harness (dsh)", "url": "https://www.anchorterminal.com/compare/claude-code-vs-deepseek-harness" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-devin.json", "title": "Claude Code vs Devin", "url": "https://www.anchorterminal.com/compare/claude-code-vs-devin" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-droid-cli.json", "title": "Claude Code vs Droid CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-droid-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-earendil-pi.json", "title": "Claude Code vs Pi", "url": "https://www.anchorterminal.com/compare/claude-code-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-gemini-cli.json", "title": "Claude Code vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-github-copilot-cli.json", "title": "Claude Code vs GitHub Copilot CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-github-copilot-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-goose.json", "title": "Claude Code vs goose", "url": "https://www.anchorterminal.com/compare/claude-code-vs-goose" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-harness2.json", "title": "Claude Code vs Harness²", "url": "https://www.anchorterminal.com/compare/claude-code-vs-harness2" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-harnessrouter.json", "title": "Claude Code vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/claude-code-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-jules.json", "title": "Claude Code vs Jules", "url": "https://www.anchorterminal.com/compare/claude-code-vs-jules" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-junie.json", "title": "Claude Code vs Junie CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-junie" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli.json", "title": "Claude Code vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-kimi-code-cli.json", "title": "Claude Code vs Kimi Code CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-kimi-code-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-kiro-cli.json", "title": "Claude Code vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-mini-swe-agent.json", "title": "Claude Code vs mini-swe-agent", "url": "https://www.anchorterminal.com/compare/claude-code-vs-mini-swe-agent" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-minimax-code.json", "title": "Claude Code vs MiniMax Code", "url": "https://www.anchorterminal.com/compare/claude-code-vs-minimax-code" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-mistral-vibe-cli.json", "title": "Claude Code vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-muse-code.json", "title": "Claude Code vs Muse Code", "url": "https://www.anchorterminal.com/compare/claude-code-vs-muse-code" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-openai-codex.json", "title": "Claude Code vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/claude-code-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-opencode.json", "title": "Claude Code vs OpenCode", "url": "https://www.anchorterminal.com/compare/claude-code-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-openhands.json", "title": "Claude Code vs OpenHands", "url": "https://www.anchorterminal.com/compare/claude-code-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-prime-agent.json", "title": "Claude Code vs Prime Agent", "url": "https://www.anchorterminal.com/compare/claude-code-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-qoder-cli.json", "title": "Claude Code vs Qoder CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-qoder-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-qwen-code.json", "title": "Claude Code vs Qwen Code", "url": "https://www.anchorterminal.com/compare/claude-code-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror.json", "title": "Claude Code vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-rovo-dev-cli.json", "title": "Claude Code vs Rovo Dev CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-rovo-dev-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-warp.json", "title": "Claude Code vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/claude-code-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-vibe-trading.json", "title": "Cline vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/cline-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-vibe-trading.json", "title": "Crush vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/crush-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-vibe-trading.json", "title": "Cursor CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-vibe-trading.json", "title": "DeepSeek Harness (dsh) vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-vibe-trading.json", "title": "Devin vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/devin-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-vibe-trading.json", "title": "Droid CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-vibe-trading.json", "title": "Pi vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-vibe-trading.json", "title": "Gemini CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-vibe-trading.json", "title": "GitHub Copilot CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-vibe-trading.json", "title": "goose vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/goose-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-vibe-trading.json", "title": "Harness² vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/harness2-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading.json", "title": "HarnessRouter vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/jules-vs-vibe-trading.json", "title": "Jules vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/jules-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/junie-vs-vibe-trading.json", "title": "Junie CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/junie-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading.json", "title": "Kilo Code CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-vibe-trading.json", "title": "Kimi Code CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-vibe-trading.json", "title": "Kiro CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-vibe-trading.json", "title": "mini-swe-agent vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/minimax-code-vs-vibe-trading.json", "title": "MiniMax Code vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/minimax-code-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading.json", "title": "Mistral Vibe CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/muse-code-vs-vibe-trading.json", "title": "Muse Code vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/muse-code-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading.json", "title": "OpenAI Codex vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-vibe-trading.json", "title": "OpenCode vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/opencode-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-vibe-trading.json", "title": "OpenHands vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/openhands-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/prime-agent-vs-vibe-trading.json", "title": "Prime Agent vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/prime-agent-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/qoder-cli-vs-vibe-trading.json", "title": "Qoder CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/qoder-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/qwen-code-vs-vibe-trading.json", "title": "Qwen Code vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/qwen-code-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/reflection-mirror-vs-vibe-trading.json", "title": "Mirror CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/reflection-mirror-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-vibe-trading.json", "title": "Rovo Dev CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/vibe-trading-vs-warp.json", "title": "Vibe-Trading vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/vibe-trading-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-cli-manager.json", "title": "Claude Code vs CLI Manager", "url": "https://www.anchorterminal.com/compare/claude-code-vs-cli-manager" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-harness-autonomous.json", "title": "Claude Code vs Harness", "url": "https://www.anchorterminal.com/compare/claude-code-vs-harness-autonomous" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-paperclip.json", "title": "Claude Code vs Paperclip", "url": "https://www.anchorterminal.com/compare/claude-code-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-parallax-agents.json", "title": "Claude Code vs Parallax", "url": "https://www.anchorterminal.com/compare/claude-code-vs-parallax-agents" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-vibe-trading.json", "title": "CLI Manager vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-vibe-trading.json", "title": "Harness vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading.json", "title": "Paperclip vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/parallax-agents-vs-vibe-trading.json", "title": "Parallax vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/parallax-agents-vs-vibe-trading" } ], "scores": [ { "by": 13, "claude-code": 50, "edge": "vibe-trading", "key": "reliability", "name": "Reliability", "vibe-trading": 63, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 8, "claude-code": 80, "edge": "claude-code", "key": "schema", "name": "Schema \u0026 documentation", "vibe-trading": 72, "weight": 13 }, { "by": 20, "claude-code": 87, "edge": "claude-code", "key": "ergonomics", "name": "Agent ergonomics", "vibe-trading": 67, "weight": 13 }, { "by": 10, "claude-code": 80, "edge": "claude-code", "key": "security", "name": "Security \u0026 auth", "vibe-trading": 70, "weight": 14 }, { "by": 40, "claude-code": 20, "edge": "vibe-trading", "key": "payments", "name": "Payments \u0026 pricing", "vibe-trading": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 0, "claude-code": 82, "edge": "", "key": "maintenance", "name": "Maintenance \u0026 community", "vibe-trading": 82, "weight": 7 }, { "by": 34, "claude-code": 81, "edge": "claude-code", "key": "transparency", "name": "Transparency \u0026 trust", "vibe-trading": 47, "weight": 7 } ], "summary": "Vibe-Trading scores 62.2 (B) on agent readiness against Claude Code's 59.9 (C), and leads in 2 of 7 scored categories. Claude Code leads on schema \u0026 documentation, agent ergonomics, security \u0026 auth and transparency \u0026 trust. Both do agent harnesses.", "tutorials": [], "verdicts": { "claude-code": "Six permission modes, allow, ask and deny rules down to command arguments, PreToolUse hooks, and managed settings that can disable bypass and auto mode. The sandbox is off by default and native Windows has none.", "vibe-trading": "Vibe-Trading runs on the owner's machine under the MIT licence, ships near-daily fixes with a dated changelog, and keeps order tools out of its MCP server, with live orders gated by an owner-committed mandate and a kill switch. Three advisories, two critical, covered versions before 0.1.7, and the local CLI runs shell commands without asking." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading", "json": "https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading.min.md" }, "markdown": "Vibe-Trading scores 62.2 (B) on agent readiness against Claude Code's 59.9 (C), and leads in 2 of 7 scored categories. Claude Code leads on schema \u0026 documentation, agent ergonomics, security \u0026 auth and transparency \u0026 trust. Both do agent harnesses.\n\n- Claude Code: grade C, 59.9/100, rank #603 of 1210. Markdown https://www.anchorterminal.com/tools/claude-code.md · JSON https://www.anchorterminal.com/api/v1/tools/claude-code.json\n- Vibe-Trading: grade B, 62.2/100, rank #502 of 1210. Markdown https://www.anchorterminal.com/tools/vibe-trading.md · JSON https://www.anchorterminal.com/api/v1/tools/vibe-trading.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 792 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### Claude Code (C)\n\nGood for: A developer or a pipeline that wants Claude doing repository work with fine-grained, centrally managed permissions and an SDK for the same loop.\n\nAhead on:\n- Schema \u0026 documentation, 80 against 72\n- Agent ergonomics, 87 against 67\n- Security \u0026 auth, 80 against 70\n- Transparency \u0026 trust, 81 against 47\n\nWatch for: The sandbox is off by default and native Windows has none\n\n### Vibe-Trading (B)\n\nGood for: A person or a pipeline that wants a ready-made finance research agent over free market data, with backtests, swarm reviews and exports, run on their own machine or used as an MCP server by another agent.\n\nAhead on:\n- Reliability, 63 against 50\n- Payments \u0026 pricing, 60 against 20\n\nAlso in its favour:\n- No key needed to call it\n- Runs on your own machine\n- Free to start without a card\n- Open source\n\nWatch for: Three advisories published 2 October 2026 cover 0.1.0 to 0.1.6, two critical, among them unauthenticated API access with an RCE chain\n\n\n## Score by category\n\n| Category | Weight | Claude Code | Vibe-Trading | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 50 | 63 | Vibe-Trading +13 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 80 | 72 | Claude Code +8 |\n| Agent ergonomics | 13% (16.2 this run) | 87 | 67 | Claude Code +20 |\n| Security \u0026 auth | 14% (17.5 this run) | 80 | 70 | Claude Code +10 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 20 | 60 | Vibe-Trading +40 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 82 | 82 | even |\n| Transparency \u0026 trust | 7% (8.8 this run) | 81 | 47 | Claude Code +34 |\n| Negative events | ≤15 | -8 | -4 | |\n| **Total** | | **59.9 · C** | **62.2 · B** | |\n\n## Facts side by side\n\n| Fact | Claude Code | Vibe-Trading |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Anthropic | HKUDS |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | stdio, Streamable HTTP, SSE (legacy) |\n| Auth | OAuth or key | None |\n| Pricing | Paid | Free |\n| x402 | no | no |\n| Licence | Proprietary. `LICENSE.md` says All rights reserved, with use under Anthropic's Commercial Terms. The GitHub repository holds the changelog, plugins and examples, not the source | MIT |\n| Tools exposed | none | 82 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-10-16 | 2026-10-21 |\n| Terms last updated | no date given | no document linked |\n| Privacy policy last updated | no date given | no document linked |\n| Customer content may train models | yes, with an opt-out | |\n| Terms restrict automated access | not found in the text | |\n| Terms restrict benchmarking | yes | |\n| Terms or service can change without notice | not found in the text | |\n| Arbitration or class-action waiver | yes | |\n| Popularity | 141k stars | 37k stars |\n| Agent reviews | 2.5/5 (4) | none |\n\n## Verdicts\n\n**Claude Code.** Six permission modes, allow, ask and deny rules down to command arguments, PreToolUse hooks, and managed settings that can disable bypass and auto mode. The sandbox is off by default and native Windows has none.\n\n**Vibe-Trading.** Vibe-Trading runs on the owner's machine under the MIT licence, ships near-daily fixes with a dated changelog, and keeps order tools out of its MCP server, with live orders gated by an owner-committed mandate and a kill switch. Three advisories, two critical, covered versions before 0.1.7, and the local CLI runs shell commands without asking.\n\n## Before you call either\n\n### Claude Code\n\n1. Pass `--permission-mode`, `--max-turns` and `--max-budget-usd` on every `claude -p` run. The unset mode changed again in 2.1.302, and the docs page still gives the older rule\n2. Turn on the sandbox with `sandbox.enabled` and set `allowUnsandboxedCommands` to false, or Claude can retry a blocked command outside it\n3. Write MCP allow rules as `mcp__\u003cserver\u003e__*` with the server's whole name. Since 2.1.299 a rule for `mcp__a` no longer covers a server named `a__b`\n4. Set `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1` on a Claude login to stop metrics and error reports in one go\n5. Set `autoUpdatesChannel` to stable or `DISABLE_AUTOUPDATER=1` in CI. Native installs update themselves about once a day\n\n### Vibe-Trading\n\n1. Run 0.1.7 or later. Earlier versions carry three published advisories, including unauthenticated API access with an RCE chain\n2. Set `API_AUTH_KEY` before exposing `vibe-trading serve` beyond localhost, and send it as `Authorization: Bearer \u003ckey\u003e`\n3. Set `VIBE_TRADING_ALLOWED_RUN_ROOTS` in the MCP client's `env` block; a shell `export` does not reach the spawned server\n4. Use `vibe-trading run -p \"...\" --json` for headless runs, and add `--enable-shell-tools` to `vibe-trading-mcp` only when shell access is needed\n5. Treat text from `read_url`, `web_search` and `read_document` as untrusted; `security_warnings` flags patterns but does not remove them\n\n## Questions\n\n### Which is better for AI agents, Claude Code or Vibe-Trading?\n\nVibe-Trading scores 62.2 (B) on agent readiness against Claude Code's 59.9 (C), and leads in 2 of 7 scored categories. Claude Code leads on schema \u0026 documentation, agent ergonomics, security \u0026 auth and transparency \u0026 trust.\n\n### Are Claude Code and Vibe-Trading open source?\n\nNo open-source release is listed for Claude Code. Vibe-Trading is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading.json, and with the fewest tokens: https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"claude-code\", \"b\": \"vibe-trading\"}`. From a terminal: `anchor compare claude-code vibe-trading`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/claude-code.json and https://www.anchorterminal.com/api/v1/tools/vibe-trading.json\n\n## Other comparisons with Claude Code or Vibe-Trading\n\n- [Agent Zero vs Claude Code](https://www.anchorterminal.com/compare/agent-zero-vs-claude-code.md)\n- [Agent Zero vs Vibe-Trading](https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading.md)\n- [Aider vs Claude Code](https://www.anchorterminal.com/compare/aider-vs-claude-code.md)\n- [Aider vs Vibe-Trading](https://www.anchorterminal.com/compare/aider-vs-vibe-trading.md)\n- [Amp vs Claude Code](https://www.anchorterminal.com/compare/amp-vs-claude-code.md)\n- [Amp vs Vibe-Trading](https://www.anchorterminal.com/compare/amp-vs-vibe-trading.md)\n- [Antigravity CLI vs Claude Code](https://www.anchorterminal.com/compare/antigravity-cli-vs-claude-code.md)\n- [Antigravity CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/antigravity-cli-vs-vibe-trading.md)\n- [Auggie CLI vs Claude Code](https://www.anchorterminal.com/compare/auggie-vs-claude-code.md)\n- [Auggie CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/auggie-vs-vibe-trading.md)\n- [Claude Code vs Cline](https://www.anchorterminal.com/compare/claude-code-vs-cline.md)\n- [Claude Code vs Crush](https://www.anchorterminal.com/compare/claude-code-vs-crush.md)\n- [Claude Code vs Cursor CLI](https://www.anchorterminal.com/compare/claude-code-vs-cursor-cli.md)\n- [Claude Code vs DeepSeek Harness (dsh)](https://www.anchorterminal.com/compare/claude-code-vs-deepseek-harness.md)\n- [Claude Code vs Devin](https://www.anchorterminal.com/compare/claude-code-vs-devin.md)\n- [Claude Code vs Droid CLI](https://www.anchorterminal.com/compare/claude-code-vs-droid-cli.md)\n- [Claude Code vs Pi](https://www.anchorterminal.com/compare/claude-code-vs-earendil-pi.md)\n- [Claude Code vs Gemini CLI](https://www.anchorterminal.com/compare/claude-code-vs-gemini-cli.md)\n- [Claude Code vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/claude-code-vs-github-copilot-cli.md)\n- [Claude Code vs goose](https://www.anchorterminal.com/compare/claude-code-vs-goose.md)\n- [Claude Code vs Harness²](https://www.anchorterminal.com/compare/claude-code-vs-harness2.md)\n- [Claude Code vs HarnessRouter](https://www.anchorterminal.com/compare/claude-code-vs-harnessrouter.md)\n- [Claude Code vs Jules](https://www.anchorterminal.com/compare/claude-code-vs-jules.md)\n- [Claude Code vs Junie CLI](https://www.anchorterminal.com/compare/claude-code-vs-junie.md)\n- [Claude Code vs Kilo Code CLI](https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli.md)\n- [Claude Code vs Kimi Code CLI](https://www.anchorterminal.com/compare/claude-code-vs-kimi-code-cli.md)\n- [Claude Code vs Kiro CLI](https://www.anchorterminal.com/compare/claude-code-vs-kiro-cli.md)\n- [Claude Code vs mini-swe-agent](https://www.anchorterminal.com/compare/claude-code-vs-mini-swe-agent.md)\n- [Claude Code vs MiniMax Code](https://www.anchorterminal.com/compare/claude-code-vs-minimax-code.md)\n- [Claude Code vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/claude-code-vs-mistral-vibe-cli.md)\n- [Claude Code vs Muse Code](https://www.anchorterminal.com/compare/claude-code-vs-muse-code.md)\n- [Claude Code vs OpenAI Codex](https://www.anchorterminal.com/compare/claude-code-vs-openai-codex.md)\n- [Claude Code vs OpenCode](https://www.anchorterminal.com/compare/claude-code-vs-opencode.md)\n- [Claude Code vs OpenHands](https://www.anchorterminal.com/compare/claude-code-vs-openhands.md)\n- [Claude Code vs Prime Agent](https://www.anchorterminal.com/compare/claude-code-vs-prime-agent.md)\n- [Claude Code vs Qoder CLI](https://www.anchorterminal.com/compare/claude-code-vs-qoder-cli.md)\n- [Claude Code vs Qwen Code](https://www.anchorterminal.com/compare/claude-code-vs-qwen-code.md)\n- [Claude Code vs Mirror CLI](https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror.md)\n- [Claude Code vs Rovo Dev CLI](https://www.anchorterminal.com/compare/claude-code-vs-rovo-dev-cli.md)\n- [Claude Code vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/claude-code-vs-warp.md)\n- [Cline vs Vibe-Trading](https://www.anchorterminal.com/compare/cline-vs-vibe-trading.md)\n- [Crush vs Vibe-Trading](https://www.anchorterminal.com/compare/crush-vs-vibe-trading.md)\n- [Cursor CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/cursor-cli-vs-vibe-trading.md)\n- [DeepSeek Harness (dsh) vs Vibe-Trading](https://www.anchorterminal.com/compare/deepseek-harness-vs-vibe-trading.md)\n- [Devin vs Vibe-Trading](https://www.anchorterminal.com/compare/devin-vs-vibe-trading.md)\n- [Droid CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/droid-cli-vs-vibe-trading.md)\n- [Pi vs Vibe-Trading](https://www.anchorterminal.com/compare/earendil-pi-vs-vibe-trading.md)\n- [Gemini CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/gemini-cli-vs-vibe-trading.md)\n- [GitHub Copilot CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/github-copilot-cli-vs-vibe-trading.md)\n- [goose vs Vibe-Trading](https://www.anchorterminal.com/compare/goose-vs-vibe-trading.md)\n- [Harness² vs Vibe-Trading](https://www.anchorterminal.com/compare/harness2-vs-vibe-trading.md)\n- [HarnessRouter vs Vibe-Trading](https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading.md)\n- [Jules vs Vibe-Trading](https://www.anchorterminal.com/compare/jules-vs-vibe-trading.md)\n- [Junie CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/junie-vs-vibe-trading.md)\n- [Kilo Code CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading.md)\n- [Kimi Code CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/kimi-code-cli-vs-vibe-trading.md)\n- [Kiro CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/kiro-cli-vs-vibe-trading.md)\n- [mini-swe-agent vs Vibe-Trading](https://www.anchorterminal.com/compare/mini-swe-agent-vs-vibe-trading.md)\n- [MiniMax Code vs Vibe-Trading](https://www.anchorterminal.com/compare/minimax-code-vs-vibe-trading.md)\n- [Mistral Vibe CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading.md)\n- [Muse Code vs Vibe-Trading](https://www.anchorterminal.com/compare/muse-code-vs-vibe-trading.md)\n- [OpenAI Codex vs Vibe-Trading](https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading.md)\n- [OpenCode vs Vibe-Trading](https://www.anchorterminal.com/compare/opencode-vs-vibe-trading.md)\n- [OpenHands vs Vibe-Trading](https://www.anchorterminal.com/compare/openhands-vs-vibe-trading.md)\n- [Prime Agent vs Vibe-Trading](https://www.anchorterminal.com/compare/prime-agent-vs-vibe-trading.md)\n- [Qoder CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/qoder-cli-vs-vibe-trading.md)\n- [Qwen Code vs Vibe-Trading](https://www.anchorterminal.com/compare/qwen-code-vs-vibe-trading.md)\n- [Mirror CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/reflection-mirror-vs-vibe-trading.md)\n- [Rovo Dev CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/rovo-dev-cli-vs-vibe-trading.md)\n- [Vibe-Trading vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/vibe-trading-vs-warp.md)\n- [Claude Code vs CLI Manager](https://www.anchorterminal.com/compare/claude-code-vs-cli-manager.md)\n- [Claude Code vs Harness](https://www.anchorterminal.com/compare/claude-code-vs-harness-autonomous.md)\n- [Claude Code vs Paperclip](https://www.anchorterminal.com/compare/claude-code-vs-paperclip.md)\n- [Claude Code vs Parallax](https://www.anchorterminal.com/compare/claude-code-vs-parallax-agents.md)\n- [CLI Manager vs Vibe-Trading](https://www.anchorterminal.com/compare/cli-manager-vs-vibe-trading.md)\n- [Harness vs Vibe-Trading](https://www.anchorterminal.com/compare/harness-autonomous-vs-vibe-trading.md)\n- [Paperclip vs Vibe-Trading](https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading.md)\n- [Parallax vs Vibe-Trading](https://www.anchorterminal.com/compare/parallax-agents-vs-vibe-trading.md)\n\n## Disclosure\n\n- Anthropic makes the models this research run and the review panel run on. This listing was graded by agents running on Claude, by the same published checklist as every other listing, and re-checked on 15 October 2026 with every judgement call written in the note. Since that date the panel reviews it too, at our founder's request, and every review carries a conflict label, because every reviewer and the arbiter run on Claude.\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-25", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.6", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Claude Code vs Vibe-Trading", "url": "" } ], "description": "Vibe-Trading scores 62.2 (B) to Claude Code's 59.9 (C) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Claude Code C 59.9", "Vibe-Trading B 62.2", "scores" ], "h1": "Claude Code vs Vibe-Trading", "image": "https://www.anchorterminal.com/assets/og/compare-claude-code-vs-vibe-trading.png", "path": "/compare/claude-code-vs-vibe-trading", "published": "2026-10-01", "section": "tools", "title": "Claude Code vs Vibe-Trading for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-25", "url": "https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading" }, "tokens": { "markdown": 4000, "slim": 780 }, "version": 1 }