{ "data": { "a": { "slug": "clawboo", "name": "Clawboo", "vendor": "Sanreds", "vendorUrl": "https://www.claw.boo", "kind": "harness", "category": "agent-harnesses", "summary": "Clawboo is an open-source, self-hosted dashboard and server that runs a team of AI agents on one task board. A lead agent, Boo Zero, hands tasks to Claude Code, Codex, Hermes, OpenClaw or Clawboo's own built-in agents.", "url": "https://www.anchorterminal.com/tools/clawboo", "markdownUrl": "https://www.anchorterminal.com/tools/clawboo.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/clawboo.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/clawboo.json", "dns": "clawboo.grade.anchorterminal.com", "repo": "https://github.com/clawboo/clawboo", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "clawboo" } ], "auth": "none", "authNotes": "No Clawboo account. On the default loopback bind the API needs no credential. An optional shared token, `STUDIO_ACCESS_TOKEN`, puts every `/api/` route behind a `clawboo_access` cookie, with no users, roles or per-person revocation. Agents Clawboo starts reach its MCP servers through signed attach URLs.", "pricing": "free", "pricingNotes": "Free and MIT, self-hosted, with nothing to buy. The owner pays the model providers or plans each runtime uses, or runs a local Ollama model with no key. No hosted option is offered.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the documentation (llms-full.txt), the README or the npm package metadata (checked 2026-11-01).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 100, "pypiWeekly": null, "asOf": "2026-11-01" }, "docsUrl": "https://docs.claw.boo", "llmsTxt": "https://docs.claw.boo/llms.txt", "capabilities": [ "agent.multi-agent", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "llms-txt", "mcp", "typescript" ], "lastRelease": "2026-10-21", "graded": true, "anchor": { "graded": true, "score": 61.4, "grade": "C", "agentReady": false, "rank": 555, "ranked": true, "rankOf": 1251, "categoryRank": 15, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 75, "maintenance": 51, "payments": 60, "reliability": 52, "schema": 83, "security": 70, "transparency": 58 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -4, "negativeNotes": [ "Undated advisory on the security page, read 1 November 2026. On 0.5.0 (21 October 2026) and older, any request from 127.0.0.1 reaches `/api/mcp/` without the access cookie, so a reverse proxy on the same machine exposes the boards, memory, team chat, tools and signed attach URLs for any agent, even with `STUDIO_ACCESS_TOKEN` set. Published by the maintainer with a proxy rule to block it, fixed on main and not released, in a setup that isn't the default, -3. https://docs.claw.boo/operating/security", "Listed under Unreleased in the changelog, read 1 November 2026. On 0.5.0 and older, an access token containing a character outside letters, digits and `.`, `_`, `~`, `-` turned the access check off while the server kept running, leaving a proxied dashboard open. Fixed on main and not released, -1. https://docs.claw.boo/appendices/changelog" ], "verdict": "Tasks, memory, team chat and connectors are shared across five runtimes through four MCP servers, with documentation that states each default and limit. Claude Code, Codex and Hermes run with their sandboxes and approval prompts off and no setting to change it, and a reverse-proxy exposure of the MCP servers is fixed only on the unreleased main branch.", "bestFor": "One person on one computer who wants several coding and general agents on one board, with shared memory and a lead agent that routes work.", "strengths": [ "One board, one team chat and one shared memory across Clawboo Native, Claude Code, Codex, Hermes and OpenClaw agents", "No telemetry per the docs, which list the three requests the server makes itself and the two the dashboard makes", "Loopback bind by default, a same-origin guard against browser and DNS-rebinding attacks, and a refusal to start on a network bind without a token", "About 120 documentation pages, served as Markdown with llms.txt and llms-full.txt, including a known-issues page and every built-in limit with its source line", "npm releases carry SLSA provenance from the repository's publish workflow, with CodeQL and Dependabot in the repository" ], "weaknesses": [ "Claude Code runs in `bypassPermissions`, Codex with `danger-full-access` and Hermes with `--yolo`, with no setting to change it and no sandbox", "On 0.5.0 and older, a same-machine reverse proxy exposes `/api/mcp/` without the access cookie. The fix is on main and unreleased on 1 November 2026", "No access token by default, so any local program can call the API and answer approval cards", "Keys saved under Providers are also written in plain text to `~/.openclaw/.env` and each OpenClaw agent's `auth-profiles.json`", "Version 0.5.0, with two releases in the 90 days to 1 November 2026 and budgets that only warn unless set to a hard cap" ], "agentNotes": [ "Run `npx clawboo@latest`, not a bare `npx clawboo`, which can reuse an older cached build. Node.js 22.12 or newer is required", "On 0.5.0 behind nginx, Caddy or a Cloudflare Tunnel, deny `/api/mcp/` at the proxy and set `STUDIO_ACCESS_TOKEN` from `openssl rand -hex 24`", "Give Claude Code, Codex and Hermes teammates only work you would let run unattended, or run Clawboo under a separate user account or VM", "Create a hard-cap budget in Settings \u003e Insights \u003e Governance before long runs. A fresh install has no budget and new budgets only warn", "Install `@anthropic-ai/claude-agent-sdk` globally beside Clawboo for Claude Code teammates. A one-off `npx` run cannot load it" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 61.4 } ], "editorialScores": { "ergonomics": 75, "maintenance": 51, "payments": 60, "reliability": 52, "schema": 83, "security": 70, "transparency": 80 }, "provenanceScore": 36, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npx clawboo@latest # Node.js 22.12 or newer", "http": "curl http://localhost:18790/api/health", "headless": { "command": "curl -X POST http://localhost:18790/api/teams/\u003cteam-id\u003e/chat -H 'Content-Type: application/json' -d '{\"message\":\"Plan the launch checklist.\"}'" } }, "letme": { "capability": "https://letme.dev/agent.multi-agent", "tool": "https://letme.dev/clawboo" }, "area": "frameworks", "provenance": { "legalEntity": "", "domain": "claw.boo", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://docs.claw.boo/appendices/changelog", "securityTxt": "none", "checked": "2026-11-01", "notes": [ "No legal entity is named in the repository, the docs or the npm package. The MIT licence reads Copyright (c) 2026 Sanreds, and the npm package's only maintainer is sanreds.", "www.claw.boo was not read. Its robots.txt disallows Claude-Web in Cloudflare's managed block and later allows ClaudeBot and anthropic-ai, so the site's terms and privacy pages, if any, are unchecked.", "docs.claw.boo/.well-known/security.txt answered 404 on 1 November 2026. SECURITY.md sends reports to GitHub private vulnerability reporting.", "The software is self-hosted, so there is no vendor endpoint or status page to check. The domain registration date was not looked up." ], "score": 36 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/clawboo.json" }, "answer": "Clawboo scores 61.4 (C) on agent readiness against Crush's 56.7 (C), and leads in 4 of 7 scored categories. Crush leads on maintenance \u0026 community.", "b": { "slug": "crush", "name": "Crush", "vendor": "Charm", "vendorUrl": "https://charm.land", "kind": "harness", "category": "agent-harnesses", "summary": "Terminal coding agent from Charm, written in Go, that works with the model of the owner's choice. It has a TUI, a one-shot `crush run` mode, LSP context, MCP servers, Agent Skills and an optional local client-server mode.", "url": "https://www.anchorterminal.com/tools/crush", "markdownUrl": "https://www.anchorterminal.com/tools/crush.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/crush.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/crush.json", "dns": "crush.grade.anchorterminal.com", "repo": "https://github.com/charmbracelet/crush", "license": "FSL-1.1-MIT (source-available, each release converts to MIT two years after it is made available)", "transports": [], "packages": [ { "registry": "npm", "name": "@charmland/crush" }, { "registry": "go", "name": "github.com/charmbracelet/crush" } ], "auth": "mixed", "authNotes": "No Charm account is needed. Provider keys come from environment variables such as `ANTHROPIC_API_KEY` or `OPENAI_API_KEY`, the model picker or a `crushrc`, local models need none, and Charm's Hyper provider uses a device login. `crush server` has no authentication and listens on a per-user Unix socket by default.", "pricing": "freemium", "pricingNotes": "The CLI is free to use under FSL-1.1-MIT. You pay your model provider, or Charm's Hyper subscription, which the README says has a free tier. Hyper's public provider file lists per-million-token figures for 22 models. Plan prices sit in a script-rendered app and weren't read.", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs folder or the source (checked 2026-10-18).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 29000, "npmWeekly": 5594, "pypiWeekly": null, "asOf": "2026-10-18" }, "docsUrl": "https://github.com/charmbracelet/crush#readme", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "harness", "coding-agent", "cli", "source-available", "go", "mcp", "telemetry-default-on", "pre-1.0", "freemium", "no-card", "local" ], "lastRelease": "2026-10-09", "graded": true, "anchor": { "graded": true, "score": 56.7, "grade": "C", "agentReady": false, "rank": 750, "ranked": true, "rankOf": 1251, "categoryRank": 30, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 52, "maintenance": 82, "payments": 55, "reliability": 54, "schema": 65, "security": 44, "transparency": 59 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-18" }, "negative": 0, "verdict": "Works with almost any provider or a local model and needs no Charm account. `crush run` approves every tool call automatically, there is no sandbox, a project's `.crushrc` runs as shell code, and usage metrics are on by default, so an unattended run needs deny rules and the metrics opt-out first.", "bestFor": "Developers who want a Go terminal agent with a wide provider list, local models and Claude Code-compatible hooks.", "strengths": [ "Any OpenAI- or Anthropic-compatible provider, Bedrock, Vertex, Azure and local models through Ollama, llama.cpp, LM Studio or LiteLLM, with no Charm account", "PreToolUse hooks, compatible with Claude Code's format, can block or rewrite tool calls", "Releases cosign-signed, with CodeQL, Grype and govulncheck in CI", "20 releases in the 90 days to 18 October 2026, the latest on 9 October", "Built for macOS, Linux, Windows, Android and three BSDs, with packages for npm, Homebrew, Winget, Scoop, apt, yum and Nix" ], "weaknesses": [ "`crush run` approves every permission request automatically, which the README doesn't mention", "No sandbox, only a fixed list of refused shell commands", "A project's `.crushrc` and `$(...)` in `crush.json` run as code when Crush starts", "Usage metrics are on by default and are linked to the Hyper account after a Hyper login", "No JSON output, turn limit or cost limit for `crush run`, and the client-server API is opt-in and has no authentication" ], "agentNotes": [ "Add `permissions deny` rules or a PreToolUse hook before `crush run`. It approves every permission request in its session", "Read `.crushrc`, `crushrc` and `crush.json` in a cloned repository before running Crush there. They execute as shell code at startup", "Set `CRUSH_DISABLE_METRICS=1` or `DO_NOT_TRACK=1` to stop usage metrics to data.charm.land", "Wrap `crush run` in your own timeout. It has no turn, time or cost limit flag", "Configure a provider by environment variable or `crushrc` first. With none, `crush run` exits with an error asking for interactive setup" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 2.3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 56.7 } ], "editorialScores": { "ergonomics": 52, "maintenance": 82, "payments": 55, "reliability": 54, "schema": 65, "security": 44, "transparency": 49 }, "provenanceScore": 69, "checked": { "categories": { "ergonomics": "2026-10-18", "maintenance": "2026-10-18", "payments": "2026-10-18", "reliability": "2026-10-18", "schema": "2026-10-18", "security": "2026-10-18", "transparency": "2026-10-18" }, "last": "2026-10-18", "lastMoved": "2026-10-27", "oldest": "2026-10-18", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install -g @charmland/crush # or: brew install charmbracelet/tap/crush", "headless": { "command": "crush run --quiet \"$TASK\"", "env": { "CRUSH_DISABLE_METRICS": "1" } } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/crush" }, "area": "frameworks", "unitPrices": [ { "item": "Hyper, qwen3.8-max (default large model), input", "unit": "1m-tokens", "usd": 2, "note": "output $6, from Hyper's public provider file" }, { "item": "Hyper, deepseek-v4.1-flash (default small model), input", "unit": "1m-tokens", "usd": 0.33, "note": "output $1.31, from Hyper's public provider file" } ], "provenance": { "legalEntity": "Charmbracelet, Inc.", "domain": "charm.land", "domainRegistered": "2023-08-17", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/charmbracelet/crush/releases", "securityTxt": "none", "checked": "2026-10-18", "notes": [ "LICENSE.md and the charm.land footer name Charmbracelet, Inc.", "charm.land/privacy, charm.land/terms and charm.land/.well-known/security.txt return Charm's not-found page. Hyper links Terms of Service and a Privacy Policy at hyper.charm.land/legal, which render by script and weren't read.", "The organisation's SECURITY.md gives vt100@charm.sh for reports. The crush repository has no SECURITY.md of its own.", "Release notes are generated from commit messages on GitHub releases. There is no CHANGELOG file in the repository." ], "score": 69 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/crush.json", "live": { "slug": "crush", "versions": [ { "registry": "github", "name": "charmbracelet/crush", "version": "v0.99.0", "released": "2026-10-29", "seenAt": "2026-10-31T15:46:23.07506402Z" }, { "registry": "npm", "name": "@charmland/crush", "version": "0.99.0", "seenAt": "2026-10-31T15:46:22.856902443Z" } ], "githubStars": 28895, "npmWeekly": 22371, "securityTxt": { "url": "https://charm.land/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-31T15:39:46.692542571Z" }, "domain": { "domain": "charm.land", "registered": "2023-08-17", "source": "https://rdap.identitydigital.services/rdap/domain/charm.land", "checkedAt": "2026-10-25T14:05:25.254674404Z" }, "github": { "repo": "charmbracelet/crush", "checkedAt": "2026-10-26T07:17:11.551328261Z", "stars": 28815, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-26T01:54:32Z", "openIssues": 310, "openPRs": 241, "issuesOpened90d": 173, "issuesClosed90d": 229, "prsMerged90d": 198, "ci": { "branch": "main", "runs": 50, "success": 41, "failure": 1, "other": 8, "latest": "success", "latestAt": "2026-10-25T15:25:37Z" }, "replies": { "sampled": 25, "unanswered": 13, "medianDays": 5.3 } }, "updatedAt": "2026-10-31T15:46:23.07506402Z" } }, "edges": [ { "by": 31, "category": "maintenance", "leads": "crush", "name": "Maintenance \u0026 community", "reasons": { "a": "0.5.0 was published to npm on 21 October 2026 (30). Two releases in the 90 days to 1 November 2026, 0.4.0 on 28 September and 0.5.0, below the three the line asks for (0). github.com was unreachable, so replies to issues, pull requests and Discussions are unchecked. The CI file cites issue #140 as fixed (3). One public npm package, current, with no entry in the official MCP registry for its four servers (10). CI, CodeQL, weekly Dependabot and SLSA provenance on 0.4.0 and 0.5.0, with `@composio/client` pinned to an alpha (8).", "b": "v0.98.1 on 9 October 2026 on npm (30). 20 npm releases in the 90 days to 18 October, 0.86.0 to 0.98.1 (20). About 2,100 pull requests closed against 375 open, and 828 issues closed against 482 open, per shields.io badge counts read on 18 October (our GitHub record), with 514 commits in the 90 days to 18 October and new contributors signing the CLA most days. Reply times couldn't be read (12). No SDK, as with other harnesses. npm, Homebrew, Winget, Scoop, apt, yum and NUR builds track releases, and the latest npm version matches the latest tag (12). Dependabot, a `go mod tidy` check in CI and scheduled security scans, with the current CI state unconfirmed (8)." }, "scores": { "a": 51, "b": 82 } }, { "by": 26, "category": "security", "leads": "clawboo", "name": "Security \u0026 auth", "reasons": { "a": "Harness reading of the framework checklist, as for the other harnesses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. The docs say Clawboo sends no telemetry and list the GitHub catalogue fetch, the npm version check, OpenRouter's public model list, Google Fonts and the GitHub star count, of which only the catalogue address can be changed (27). Clawboo Native shell commands are off by default and asked one at a time, and connector grants are per agent with approval on writes. Claude Code, Codex and Hermes run with their prompts and sandboxes off and no setting to change it, they can read Clawboo's database and key vault, and with no access token by default any local program can answer approval cards (8). Images in agent text don't load on their own, peer posts are marked as evidence, and a run that has read private data and untrusted content asks before any outbound connector call (11). An audit log of budget, breaker, approval, verification, tool-call and install events, with secrets masked (13). SECURITY.md with private reporting, CodeQL, Dependabot and npm provenance. No security.txt or bug bounty, OSV lists no advisory for `clawboo`, and the proxy advisory is on the docs with a workaround while its fix is unreleased (11).", "b": "Harness reading of the framework checklist, as for the other harnesses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Usage metrics go to PostHog through data.charm.land by default, keyed to a hashed machine ID, aliased to the Hyper user ID after a Hyper login, and including error messages. The README says prompts and responses are never collected and names three opt-outs. The provider list is fetched from Catwalk at startup unless turned off, the update check only notifies, and provider keys stay local (15). The TUI asks before bash, edit, write, fetch, download and MCP calls, `permissions deny` hides tools and PreToolUse hooks can block calls. But `crush run` approves every permission request in its session automatically (internal/app/app.go), `--yolo` skips all prompts, and there's no sandbox, only a fixed refusal list for curl, wget, ssh, sudo, package managers and similar commands (7). No prompt-injection guidance found, and a project's `.crushrc` and `$(...)` in `crush.json` run as code at startup, which the README warns about (3). Logs in `./.crush/logs/crush.log` with `crush logs`, sessions in a local database readable as JSON, and `crush stats`, with no OpenTelemetry export (9). The organisation's SECURITY.md gives an email address, CI runs CodeQL, Grype and govulncheck, releases are cosign-signed, and OSV (the GitHub Advisory Database's public mirror) and NVD list no vulnerability for Crush, rechecked in our GitHub record, which also finds no SECURITY.md in the repository. No security.txt and no bug bounty (10)." }, "scores": { "a": 70, "b": 44 } }, { "by": 23, "category": "ergonomics", "leads": "clawboo", "name": "Agent ergonomics", "reasons": { "a": "Harness reading, scored on what an agent or pipeline driving it has to supply. Four MCP servers keep tool lists small (12 Tasks tools, 4 Memory tools, 2 or 3 TeamChat tools, and Tools with four demonstration builtins plus granted connectors), Clawboo Native gets a read-only Tasks subset, and Tools results over 16 KiB are trimmed with a handle to read the rest (22). Circuit breakers stop task-runner runs after more than 30 tool calls or 200,000 tokens a minute, and team chat caps hand-offs at 8 a turn and three levels. Budgets warn only unless set to a hard cap, and a hard cap stops most runs only between runs (14). REST errors use one `{error}` shape, refused MCP calls return `denied:` with a reason prefix, and 429s carry `Retry-After` (16). `claim_task` and `assign_task` are atomic, illegal status changes are refused by name, the board survives restarts and routines resume after failure. No MCP tool annotations are documented (14). One `npx` command and a provider key or a local Ollama, but Claude Code teammates need a global install with the Agent SDK, and there is no client SDK (9).", "b": "Harness reading, scored on what an agent or pipeline driving `crush run` has to supply. About 20 built-in tools, any of which `permissions deny` hides, MCP servers take per-server `disabled_tools`, and skills can be turned off or kept out of the model's list. No lazy loading of MCP tools found (17). No turn, time or cost limit on `crush run`, and the only output controls are `--quiet` and `--verbose` (6). Errors come back as plain messages with a non-zero exit, such as the one for an unconfigured provider, with no documented codes and no JSON error record (8). `--session` and `--continue` resume a run, and `crush session list`, `show`, `last`, `rename` and `delete` take `--json` (13). One argument starts a run and environment keys are picked up, but there's no SDK, and the HTTP API needs `CRUSH_CLIENT_SERVER=1` and is described only in one README section (8)." }, "scores": { "a": 75, "b": 52 } }, { "by": 18, "category": "schema", "leads": "clawboo", "name": "Schema \u0026 documentation", "reasons": { "a": "Harness reading of the framework line, as for Paperclip. The REST API's 199 routes are documented per resource with parameters, bodies and responses, and the MCP tools reference gives typed arguments for every tool on the four servers, but no OpenAPI file was found (17). llms.txt, llms-full.txt and a Markdown copy of every page at `.md` on docs.claw.boo (10). The docs say what each part does and does not cover, with known issues, production defaults and a limits page that names the code line behind each number (17). Tool arguments are typed with required and optional fields and documented caps, such as 24 live subtasks per parent and limits lowered to 1,000, with free-text task bodies (12). curl examples on each API page, an events and errors reference, and the exact error strings each MCP tool returns (14). A dated changelog for every release with an Unreleased section, though API paths carry no version and every MCP server reports 0.1.0 (13).", "b": "Harness reading of the framework line. A JSON Schema for the config at https://charm.land/crush.json (also printed by `crush schema`), `--json` on the session commands, and an OpenAPI document that `crush server` generates from its endpoint list and serves at `/v1/docs/openapi.json`, which isn't published anywhere we could fetch. `crush run` output has no typed form (20). No llms.txt (charm.land/llms.txt is a not-found page). The docs are Markdown in the repository and the hooks guide says it was written for humans and agents (5). The README and config docs explain when to allow, deny or hook a tool and warn that configs run as code (12). The schema carries enums and defaults, such as the attribution trailer style, while permissions take bare tool names with no command patterns (11). Many examples for providers, MCP, hooks and local models, with no reference for error messages or exit codes (9). Version tags and GitHub releases with generated notes, which we couldn't open, and no changelog file (8)." }, "scores": { "a": 83, "b": 65 } }, { "by": 5, "category": "payments", "leads": "clawboo", "name": "Payments \u0026 pricing", "reasons": { "a": "No payment protocol (0). Read with the self-hosted rule. Free under MIT with nothing to buy (20). No card and no Clawboo account (20). One `npx` command installs and starts it with no sign-up (20). Model costs belong to the providers the owner connects.", "b": "No payment protocol (0). Scored on Charm's Hyper provider. Its public provider file at hyper.charm.land/v1/provider lists per-million-token figures for 22 models without a login, but no pricing page confirms them as billed rates, and plan prices sit in a script-rendered app (15). The CLI is free to use and runs with your own provider key or a local model, so nothing needs a card (20). A local model through Ollama, llama.cpp or LM Studio, or an existing provider key in the environment, works with no Charm account, so an agent can install it and run a task without a person signing up (20)." }, "scores": { "a": 60, "b": 55 } } ], "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Sanreds", "b": "Charm", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "FSL-1.1-MIT (source-available, each release converts to MIT two years after it is made available)", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-10-21", "b": "2026-10-09", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "100 npm/wk", "b": "29k stars, 5.6k npm/wk", "name": "Popularity" }, { "a": "none", "b": "2.3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Clawboo scores 61.4 (C) on agent readiness against Crush's 56.7 (C), and leads in 4 of 7 scored categories. Crush leads on maintenance \u0026 community.", "question": "Which is better for AI agents, Clawboo or Crush?" }, { "answer": "Clawboo is open source (MIT). No open-source release is listed for Crush.", "question": "Are Clawboo and Crush open source?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 83 against 65", "Agent ergonomics, 75 against 52", "Security \u0026 auth, 70 against 44", "Payments \u0026 pricing, 60 against 55" ], "also": [ "No key needed to call it", "Open source" ], "goodFor": "One person on one computer who wants several coding and general agents on one board, with shared memory and a lead agent that routes work.", "slug": "clawboo", "watchFor": "Claude Code runs in `bypassPermissions`, Codex with `danger-full-access` and Hermes with `--yolo`, with no setting to change it and no sandbox" }, { "aheadOn": [ "Maintenance \u0026 community, 82 against 51" ], "also": [ "No incidents deducted, where Clawboo loses 4 points for them" ], "goodFor": "Developers who want a Go terminal agent with a wide provider list, local models and Claude Code-compatible hooks.", "slug": "crush", "watchFor": "`crush run` approves every permission request automatically, which the README doesn't mention" } ], "history": { "clawboo": null, "crush": [ { "causes": [ "evidence" ], "date": "2026-10-27", "delta": 0.2, "from": 56.5, "fromGrade": "C", "to": 56.7, "toGrade": "C" } ] }, "job": { "capability": "agent.multi-agent", "name": "Multi-agent orchestration" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-crush.json", "title": "Agent Zero vs Crush", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-crush" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-crush.json", "title": "Aider vs Crush", "url": "https://www.anchorterminal.com/compare/aider-vs-crush" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-crush.json", "title": "Amp vs Crush", "url": "https://www.anchorterminal.com/compare/amp-vs-crush" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-crush.json", "title": "Antigravity CLI vs Crush", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-crush" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-crush.json", "title": "Auggie CLI vs Crush", "url": "https://www.anchorterminal.com/compare/auggie-vs-crush" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-crush.json", "title": "Claude Code vs Crush", "url": "https://www.anchorterminal.com/compare/claude-code-vs-crush" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-crush.json", "title": "Cline vs Crush", "url": "https://www.anchorterminal.com/compare/cline-vs-crush" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-cursor-cli.json", "title": "Crush vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/crush-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-deepseek-harness.json", "title": "Crush vs DeepSeek Harness (dsh)", "url": "https://www.anchorterminal.com/compare/crush-vs-deepseek-harness" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-deepseek-superagent.json", "title": "Crush vs dsh-superagent (DeepSeek)", "url": "https://www.anchorterminal.com/compare/crush-vs-deepseek-superagent" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-devin.json", "title": "Crush vs Devin", "url": "https://www.anchorterminal.com/compare/crush-vs-devin" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-droid-cli.json", "title": "Crush vs Droid CLI", "url": "https://www.anchorterminal.com/compare/crush-vs-droid-cli" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-earendil-pi.json", "title": "Crush vs Pi", "url": "https://www.anchorterminal.com/compare/crush-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-gemini-cli.json", "title": "Crush vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/crush-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-github-copilot-cli.json", "title": "Crush vs GitHub Copilot CLI", "url": "https://www.anchorterminal.com/compare/crush-vs-github-copilot-cli" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-goose.json", "title": "Crush vs goose", "url": "https://www.anchorterminal.com/compare/crush-vs-goose" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-harness2.json", "title": "Crush vs Harness²", "url": "https://www.anchorterminal.com/compare/crush-vs-harness2" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-harnessrouter.json", "title": "Crush vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/crush-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-jules.json", "title": "Crush vs Jules", "url": "https://www.anchorterminal.com/compare/crush-vs-jules" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-junie.json", "title": "Crush vs Junie CLI", "url": "https://www.anchorterminal.com/compare/crush-vs-junie" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-kilo-code-cli.json", "title": "Crush vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/crush-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-kimi-code-cli.json", "title": "Crush vs Kimi Code CLI", "url": "https://www.anchorterminal.com/compare/crush-vs-kimi-code-cli" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-kiro-cli.json", "title": "Crush vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/crush-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-mini-swe-agent.json", "title": "Crush vs mini-swe-agent", "url": "https://www.anchorterminal.com/compare/crush-vs-mini-swe-agent" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-minimax-code.json", "title": "Crush vs MiniMax Code", "url": "https://www.anchorterminal.com/compare/crush-vs-minimax-code" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-mistral-vibe-cli.json", "title": "Crush vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/crush-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-muse-code.json", "title": "Crush vs Muse Code", "url": "https://www.anchorterminal.com/compare/crush-vs-muse-code" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-openai-codex.json", "title": "Crush vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/crush-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-opencode.json", "title": "Crush vs OpenCode", "url": "https://www.anchorterminal.com/compare/crush-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-openhands.json", "title": "Crush vs OpenHands", "url": "https://www.anchorterminal.com/compare/crush-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-openmausbot.json", "title": "Crush vs OpenMausBot", "url": "https://www.anchorterminal.com/compare/crush-vs-openmausbot" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-prime-agent.json", "title": "Crush vs Prime Agent", "url": "https://www.anchorterminal.com/compare/crush-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-qoder-cli.json", "title": "Crush vs Qoder CLI", "url": "https://www.anchorterminal.com/compare/crush-vs-qoder-cli" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-qwen-code.json", "title": "Crush vs Qwen Code", "url": "https://www.anchorterminal.com/compare/crush-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-reflection-mirror.json", "title": "Crush vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/crush-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-rovo-dev-cli.json", "title": "Crush vs Rovo Dev CLI", "url": "https://www.anchorterminal.com/compare/crush-vs-rovo-dev-cli" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-unstoppable.json", "title": "Crush vs Unstoppable", "url": "https://www.anchorterminal.com/compare/crush-vs-unstoppable" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-vibe-trading.json", "title": "Crush vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/crush-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-warp.json", "title": "Crush vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/crush-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-clawboo.json", "title": "Amp vs Clawboo", "url": "https://www.anchorterminal.com/compare/amp-vs-clawboo" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-clawboo.json", "title": "Antigravity CLI vs Clawboo", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-clawboo" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-clawboo.json", "title": "Auggie CLI vs Clawboo", "url": "https://www.anchorterminal.com/compare/auggie-vs-clawboo" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-clawboo.json", "title": "Claude Code vs Clawboo", "url": "https://www.anchorterminal.com/compare/claude-code-vs-clawboo" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-cli-manager.json", "title": "Clawboo vs CLI Manager", "url": "https://www.anchorterminal.com/compare/clawboo-vs-cli-manager" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-cline.json", "title": "Clawboo vs Cline", "url": "https://www.anchorterminal.com/compare/clawboo-vs-cline" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-deepseek-harness.json", "title": "Clawboo vs DeepSeek Harness (dsh)", "url": "https://www.anchorterminal.com/compare/clawboo-vs-deepseek-harness" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-deepseek-superagent.json", "title": "Clawboo vs dsh-superagent (DeepSeek)", "url": "https://www.anchorterminal.com/compare/clawboo-vs-deepseek-superagent" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-devin.json", "title": "Clawboo vs Devin", "url": "https://www.anchorterminal.com/compare/clawboo-vs-devin" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-droid-cli.json", "title": "Clawboo vs Droid CLI", "url": "https://www.anchorterminal.com/compare/clawboo-vs-droid-cli" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-gemini-cli.json", "title": "Clawboo vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/clawboo-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-github-copilot-cli.json", "title": "Clawboo vs GitHub Copilot CLI", "url": "https://www.anchorterminal.com/compare/clawboo-vs-github-copilot-cli" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-goose.json", "title": "Clawboo vs goose", "url": "https://www.anchorterminal.com/compare/clawboo-vs-goose" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-harness-autonomous.json", "title": "Clawboo vs Harness", "url": "https://www.anchorterminal.com/compare/clawboo-vs-harness-autonomous" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-harnessrouter.json", "title": "Clawboo vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/clawboo-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-jules.json", "title": "Clawboo vs Jules", "url": "https://www.anchorterminal.com/compare/clawboo-vs-jules" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-junie.json", "title": "Clawboo vs Junie CLI", "url": "https://www.anchorterminal.com/compare/clawboo-vs-junie" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-kilo-code-cli.json", "title": "Clawboo vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/clawboo-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-kimi-code-cli.json", "title": "Clawboo vs Kimi Code CLI", "url": "https://www.anchorterminal.com/compare/clawboo-vs-kimi-code-cli" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-kiro-cli.json", "title": "Clawboo vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/clawboo-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-minimax-code.json", "title": "Clawboo vs MiniMax Code", "url": "https://www.anchorterminal.com/compare/clawboo-vs-minimax-code" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-mistral-vibe-cli.json", "title": "Clawboo vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/clawboo-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-muse-code.json", "title": "Clawboo vs Muse Code", "url": "https://www.anchorterminal.com/compare/clawboo-vs-muse-code" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-opencode.json", "title": "Clawboo vs OpenCode", "url": "https://www.anchorterminal.com/compare/clawboo-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-openhands.json", "title": "Clawboo vs OpenHands", "url": "https://www.anchorterminal.com/compare/clawboo-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-openmausbot.json", "title": "Clawboo vs OpenMausBot", "url": "https://www.anchorterminal.com/compare/clawboo-vs-openmausbot" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-paperclip.json", "title": "Clawboo vs Paperclip", "url": "https://www.anchorterminal.com/compare/clawboo-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-parallax-agents.json", "title": "Clawboo vs Parallax", "url": "https://www.anchorterminal.com/compare/clawboo-vs-parallax-agents" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-prime-agent.json", "title": "Clawboo vs Prime Agent", "url": "https://www.anchorterminal.com/compare/clawboo-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-qoder-cli.json", "title": "Clawboo vs Qoder CLI", "url": "https://www.anchorterminal.com/compare/clawboo-vs-qoder-cli" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-qwen-code.json", "title": "Clawboo vs Qwen Code", "url": "https://www.anchorterminal.com/compare/clawboo-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-reflection-mirror.json", "title": "Clawboo vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/clawboo-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-rovo-dev-cli.json", "title": "Clawboo vs Rovo Dev CLI", "url": "https://www.anchorterminal.com/compare/clawboo-vs-rovo-dev-cli" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-unstoppable.json", "title": "Clawboo vs Unstoppable", "url": "https://www.anchorterminal.com/compare/clawboo-vs-unstoppable" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-vibe-trading.json", "title": "Clawboo vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/clawboo-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-warp.json", "title": "Clawboo vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/clawboo-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-crush.json", "title": "CLI Manager vs Crush", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-crush" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-harness-autonomous.json", "title": "Crush vs Harness", "url": "https://www.anchorterminal.com/compare/crush-vs-harness-autonomous" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-paperclip.json", "title": "Crush vs Paperclip", "url": "https://www.anchorterminal.com/compare/crush-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-parallax-agents.json", "title": "Crush vs Parallax", "url": "https://www.anchorterminal.com/compare/crush-vs-parallax-agents" } ], "panel": null, "scores": [ { "by": 2, "clawboo": 52, "crush": 54, "edge": "crush", "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 18, "clawboo": 83, "crush": 65, "edge": "clawboo", "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 23, "clawboo": 75, "crush": 52, "edge": "clawboo", "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "by": 26, "clawboo": 70, "crush": 44, "edge": "clawboo", "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "by": 5, "clawboo": 60, "crush": 55, "edge": "clawboo", "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 31, "clawboo": 51, "crush": 82, "edge": "crush", "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 1, "clawboo": 58, "crush": 59, "edge": "crush", "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Clawboo scores 61.4 (C) on agent readiness against Crush's 56.7 (C), and leads in 4 of 7 scored categories. Crush leads on maintenance \u0026 community. Both do multi-agent orchestration.", "tasks": null, "tutorials": [], "verdicts": { "clawboo": "Tasks, memory, team chat and connectors are shared across five runtimes through four MCP servers, with documentation that states each default and limit. Claude Code, Codex and Hermes run with their sandboxes and approval prompts off and no setting to change it, and a reverse-proxy exposure of the MCP servers is fixed only on the unreleased main branch.", "crush": "Works with almost any provider or a local model and needs no Charm account. `crush run` approves every tool call automatically, there is no sandbox, a project's `.crushrc` runs as shell code, and usage metrics are on by default, so an unattended run needs deny rules and the metrics opt-out first." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/clawboo-vs-crush", "json": "https://www.anchorterminal.com/compare/clawboo-vs-crush.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/clawboo-vs-crush.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/clawboo-vs-crush.min.md" }, "markdown": "Clawboo scores 61.4 (C) on agent readiness against Crush's 56.7 (C), and leads in 4 of 7 scored categories. Crush leads on maintenance \u0026 community. Both do multi-agent orchestration.\n\n- Clawboo: grade C, 61.4/100, rank #555 of 1251. Markdown https://www.anchorterminal.com/tools/clawboo.md · JSON https://www.anchorterminal.com/api/v1/tools/clawboo.json\n- Crush: grade C, 56.7/100, rank #750 of 1251. Markdown https://www.anchorterminal.com/tools/crush.md · JSON https://www.anchorterminal.com/api/v1/tools/crush.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 955 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### Clawboo (C)\n\nGood for: One person on one computer who wants several coding and general agents on one board, with shared memory and a lead agent that routes work.\n\nAhead on:\n- Schema \u0026 documentation, 83 against 65\n- Agent ergonomics, 75 against 52\n- Security \u0026 auth, 70 against 44\n- Payments \u0026 pricing, 60 against 55\n\nAlso in its favour:\n- No key needed to call it\n- Open source\n\nWatch for: Claude Code runs in `bypassPermissions`, Codex with `danger-full-access` and Hermes with `--yolo`, with no setting to change it and no sandbox\n\n### Crush (C)\n\nGood for: Developers who want a Go terminal agent with a wide provider list, local models and Claude Code-compatible hooks.\n\nAhead on:\n- Maintenance \u0026 community, 82 against 51\n\nAlso in its favour:\n- No incidents deducted, where Clawboo loses 4 points for them\n\nWatch for: `crush run` approves every permission request automatically, which the README doesn't mention\n\n\n## Why the edge\n\n### Maintenance \u0026 community: Crush +31\n\n- Clawboo (51): 0.5.0 was published to npm on 21 October 2026 (30). Two releases in the 90 days to 1 November 2026, 0.4.0 on 28 September and 0.5.0, below the three the line asks for (0). github.com was unreachable, so replies to issues, pull requests and Discussions are unchecked. The CI file cites issue #140 as fixed (3). One public npm package, current, with no entry in the official MCP registry for its four servers (10). CI, CodeQL, weekly Dependabot and SLSA provenance on 0.4.0 and 0.5.0, with `@composio/client` pinned to an alpha (8).\n- Crush (82): v0.98.1 on 9 October 2026 on npm (30). 20 npm releases in the 90 days to 18 October, 0.86.0 to 0.98.1 (20). About 2,100 pull requests closed against 375 open, and 828 issues closed against 482 open, per shields.io badge counts read on 18 October (our GitHub record), with 514 commits in the 90 days to 18 October and new contributors signing the CLA most days. Reply times couldn't be read (12). No SDK, as with other harnesses. npm, Homebrew, Winget, Scoop, apt, yum and NUR builds track releases, and the latest npm version matches the latest tag (12). Dependabot, a `go mod tidy` check in CI and scheduled security scans, with the current CI state unconfirmed (8).\n\n### Security \u0026 auth: Clawboo +26\n\n- Clawboo (70): Harness reading of the framework checklist, as for the other harnesses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. The docs say Clawboo sends no telemetry and list the GitHub catalogue fetch, the npm version check, OpenRouter's public model list, Google Fonts and the GitHub star count, of which only the catalogue address can be changed (27). Clawboo Native shell commands are off by default and asked one at a time, and connector grants are per agent with approval on writes. Claude Code, Codex and Hermes run with their prompts and sandboxes off and no setting to change it, they can read Clawboo's database and key vault, and with no access token by default any local program can answer approval cards (8). Images in agent text don't load on their own, peer posts are marked as evidence, and a run that has read private data and untrusted content asks before any outbound connector call (11). An audit log of budget, breaker, approval, verification, tool-call and install events, with secrets masked (13). SECURITY.md with private reporting, CodeQL, Dependabot and npm provenance. No security.txt or bug bounty, OSV lists no advisory for `clawboo`, and the proxy advisory is on the docs with a workaround while its fix is unreleased (11).\n- Crush (44): Harness reading of the framework checklist, as for the other harnesses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Usage metrics go to PostHog through data.charm.land by default, keyed to a hashed machine ID, aliased to the Hyper user ID after a Hyper login, and including error messages. The README says prompts and responses are never collected and names three opt-outs. The provider list is fetched from Catwalk at startup unless turned off, the update check only notifies, and provider keys stay local (15). The TUI asks before bash, edit, write, fetch, download and MCP calls, `permissions deny` hides tools and PreToolUse hooks can block calls. But `crush run` approves every permission request in its session automatically (internal/app/app.go), `--yolo` skips all prompts, and there's no sandbox, only a fixed refusal list for curl, wget, ssh, sudo, package managers and similar commands (7). No prompt-injection guidance found, and a project's `.crushrc` and `$(...)` in `crush.json` run as code at startup, which the README warns about (3). Logs in `./.crush/logs/crush.log` with `crush logs`, sessions in a local database readable as JSON, and `crush stats`, with no OpenTelemetry export (9). The organisation's SECURITY.md gives an email address, CI runs CodeQL, Grype and govulncheck, releases are cosign-signed, and OSV (the GitHub Advisory Database's public mirror) and NVD list no vulnerability for Crush, rechecked in our GitHub record, which also finds no SECURITY.md in the repository. No security.txt and no bug bounty (10).\n\n### Agent ergonomics: Clawboo +23\n\n- Clawboo (75): Harness reading, scored on what an agent or pipeline driving it has to supply. Four MCP servers keep tool lists small (12 Tasks tools, 4 Memory tools, 2 or 3 TeamChat tools, and Tools with four demonstration builtins plus granted connectors), Clawboo Native gets a read-only Tasks subset, and Tools results over 16 KiB are trimmed with a handle to read the rest (22). Circuit breakers stop task-runner runs after more than 30 tool calls or 200,000 tokens a minute, and team chat caps hand-offs at 8 a turn and three levels. Budgets warn only unless set to a hard cap, and a hard cap stops most runs only between runs (14). REST errors use one `{error}` shape, refused MCP calls return `denied:` with a reason prefix, and 429s carry `Retry-After` (16). `claim_task` and `assign_task` are atomic, illegal status changes are refused by name, the board survives restarts and routines resume after failure. No MCP tool annotations are documented (14). One `npx` command and a provider key or a local Ollama, but Claude Code teammates need a global install with the Agent SDK, and there is no client SDK (9).\n- Crush (52): Harness reading, scored on what an agent or pipeline driving `crush run` has to supply. About 20 built-in tools, any of which `permissions deny` hides, MCP servers take per-server `disabled_tools`, and skills can be turned off or kept out of the model's list. No lazy loading of MCP tools found (17). No turn, time or cost limit on `crush run`, and the only output controls are `--quiet` and `--verbose` (6). Errors come back as plain messages with a non-zero exit, such as the one for an unconfigured provider, with no documented codes and no JSON error record (8). `--session` and `--continue` resume a run, and `crush session list`, `show`, `last`, `rename` and `delete` take `--json` (13). One argument starts a run and environment keys are picked up, but there's no SDK, and the HTTP API needs `CRUSH_CLIENT_SERVER=1` and is described only in one README section (8).\n\n### Schema \u0026 documentation: Clawboo +18\n\n- Clawboo (83): Harness reading of the framework line, as for Paperclip. The REST API's 199 routes are documented per resource with parameters, bodies and responses, and the MCP tools reference gives typed arguments for every tool on the four servers, but no OpenAPI file was found (17). llms.txt, llms-full.txt and a Markdown copy of every page at `.md` on docs.claw.boo (10). The docs say what each part does and does not cover, with known issues, production defaults and a limits page that names the code line behind each number (17). Tool arguments are typed with required and optional fields and documented caps, such as 24 live subtasks per parent and limits lowered to 1,000, with free-text task bodies (12). curl examples on each API page, an events and errors reference, and the exact error strings each MCP tool returns (14). A dated changelog for every release with an Unreleased section, though API paths carry no version and every MCP server reports 0.1.0 (13).\n- Crush (65): Harness reading of the framework line. A JSON Schema for the config at https://charm.land/crush.json (also printed by `crush schema`), `--json` on the session commands, and an OpenAPI document that `crush server` generates from its endpoint list and serves at `/v1/docs/openapi.json`, which isn't published anywhere we could fetch. `crush run` output has no typed form (20). No llms.txt (charm.land/llms.txt is a not-found page). The docs are Markdown in the repository and the hooks guide says it was written for humans and agents (5). The README and config docs explain when to allow, deny or hook a tool and warn that configs run as code (12). The schema carries enums and defaults, such as the attribution trailer style, while permissions take bare tool names with no command patterns (11). Many examples for providers, MCP, hooks and local models, with no reference for error messages or exit codes (9). Version tags and GitHub releases with generated notes, which we couldn't open, and no changelog file (8).\n\n### Payments \u0026 pricing: Clawboo +5\n\n- Clawboo (60): No payment protocol (0). Read with the self-hosted rule. Free under MIT with nothing to buy (20). No card and no Clawboo account (20). One `npx` command installs and starts it with no sign-up (20). Model costs belong to the providers the owner connects.\n- Crush (55): No payment protocol (0). Scored on Charm's Hyper provider. Its public provider file at hyper.charm.land/v1/provider lists per-million-token figures for 22 models without a login, but no pricing page confirms them as billed rates, and plan prices sit in a script-rendered app (15). The CLI is free to use and runs with your own provider key or a local model, so nothing needs a card (20). A local model through Ollama, llama.cpp or LM Studio, or an existing provider key in the environment, works with no Charm account, so an agent can install it and run a task without a person signing up (20).\n\n## Score by category\n\n| Category | Weight | Clawboo | Crush | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 52 | 54 | Crush +2 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 83 | 65 | Clawboo +18 |\n| Agent ergonomics | 13% (16.2 this run) | 75 | 52 | Clawboo +23 |\n| Security \u0026 auth | 14% (17.5 this run) | 70 | 44 | Clawboo +26 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 55 | Clawboo +5 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 51 | 82 | Crush +31 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 58 | 59 | Crush +1 |\n| Negative events | ≤15 | -4 | 0 | |\n| **Total** | | **61.4 · C** | **56.7 · C** | |\n\n## Facts side by side\n\n| Fact | Clawboo | Crush |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Sanreds | Charm |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | OAuth or key |\n| Pricing | Free | Freemium |\n| x402 | no | no |\n| Licence | MIT | FSL-1.1-MIT (source-available, each release converts to MIT two years after it is made available) |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-10-21 | 2026-10-09 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Popularity | 100 npm/wk | 29k stars, 5.6k npm/wk |\n| Agent reviews | none | 2.3/5 (4) |\n\n## How the scores have moved\n\n### Clawboo\n\nNo score change since it was listed.\n\n### Crush\n\n- +0.2 on 27 October 2026: new evidence\n\n## Verdicts\n\n**Clawboo.** Tasks, memory, team chat and connectors are shared across five runtimes through four MCP servers, with documentation that states each default and limit. Claude Code, Codex and Hermes run with their sandboxes and approval prompts off and no setting to change it, and a reverse-proxy exposure of the MCP servers is fixed only on the unreleased main branch.\n\n**Crush.** Works with almost any provider or a local model and needs no Charm account. `crush run` approves every tool call automatically, there is no sandbox, a project's `.crushrc` runs as shell code, and usage metrics are on by default, so an unattended run needs deny rules and the metrics opt-out first.\n\n## Before you call either\n\n### Clawboo\n\n1. Run `npx clawboo@latest`, not a bare `npx clawboo`, which can reuse an older cached build. Node.js 22.12 or newer is required\n2. On 0.5.0 behind nginx, Caddy or a Cloudflare Tunnel, deny `/api/mcp/` at the proxy and set `STUDIO_ACCESS_TOKEN` from `openssl rand -hex 24`\n3. Give Claude Code, Codex and Hermes teammates only work you would let run unattended, or run Clawboo under a separate user account or VM\n4. Create a hard-cap budget in Settings \u003e Insights \u003e Governance before long runs. A fresh install has no budget and new budgets only warn\n5. Install `@anthropic-ai/claude-agent-sdk` globally beside Clawboo for Claude Code teammates. A one-off `npx` run cannot load it\n\n### Crush\n\n1. Add `permissions deny` rules or a PreToolUse hook before `crush run`. It approves every permission request in its session\n2. Read `.crushrc`, `crushrc` and `crush.json` in a cloned repository before running Crush there. They execute as shell code at startup\n3. Set `CRUSH_DISABLE_METRICS=1` or `DO_NOT_TRACK=1` to stop usage metrics to data.charm.land\n4. Wrap `crush run` in your own timeout. It has no turn, time or cost limit flag\n5. Configure a provider by environment variable or `crushrc` first. With none, `crush run` exits with an error asking for interactive setup\n\n## Questions\n\n### Which is better for AI agents, Clawboo or Crush?\n\nClawboo scores 61.4 (C) on agent readiness against Crush's 56.7 (C), and leads in 4 of 7 scored categories. Crush leads on maintenance \u0026 community.\n\n### Are Clawboo and Crush open source?\n\nClawboo is open source (MIT). No open-source release is listed for Crush.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/clawboo-vs-crush.json, and with the fewest tokens: https://www.anchorterminal.com/compare/clawboo-vs-crush.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"clawboo\", \"b\": \"crush\"}`. From a terminal: `anchor compare clawboo crush`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/clawboo.json and https://www.anchorterminal.com/api/v1/tools/crush.json\n\n## Other comparisons with Clawboo or Crush\n\n- [Agent Zero vs Crush](https://www.anchorterminal.com/compare/agent-zero-vs-crush.md)\n- [Aider vs Crush](https://www.anchorterminal.com/compare/aider-vs-crush.md)\n- [Amp vs Crush](https://www.anchorterminal.com/compare/amp-vs-crush.md)\n- [Antigravity CLI vs Crush](https://www.anchorterminal.com/compare/antigravity-cli-vs-crush.md)\n- [Auggie CLI vs Crush](https://www.anchorterminal.com/compare/auggie-vs-crush.md)\n- [Claude Code vs Crush](https://www.anchorterminal.com/compare/claude-code-vs-crush.md)\n- [Cline vs Crush](https://www.anchorterminal.com/compare/cline-vs-crush.md)\n- [Crush vs Cursor CLI](https://www.anchorterminal.com/compare/crush-vs-cursor-cli.md)\n- [Crush vs DeepSeek Harness (dsh)](https://www.anchorterminal.com/compare/crush-vs-deepseek-harness.md)\n- [Crush vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/crush-vs-deepseek-superagent.md)\n- [Crush vs Devin](https://www.anchorterminal.com/compare/crush-vs-devin.md)\n- [Crush vs Droid CLI](https://www.anchorterminal.com/compare/crush-vs-droid-cli.md)\n- [Crush vs Pi](https://www.anchorterminal.com/compare/crush-vs-earendil-pi.md)\n- [Crush vs Gemini CLI](https://www.anchorterminal.com/compare/crush-vs-gemini-cli.md)\n- [Crush vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/crush-vs-github-copilot-cli.md)\n- [Crush vs goose](https://www.anchorterminal.com/compare/crush-vs-goose.md)\n- [Crush vs Harness²](https://www.anchorterminal.com/compare/crush-vs-harness2.md)\n- [Crush vs HarnessRouter](https://www.anchorterminal.com/compare/crush-vs-harnessrouter.md)\n- [Crush vs Jules](https://www.anchorterminal.com/compare/crush-vs-jules.md)\n- [Crush vs Junie CLI](https://www.anchorterminal.com/compare/crush-vs-junie.md)\n- [Crush vs Kilo Code CLI](https://www.anchorterminal.com/compare/crush-vs-kilo-code-cli.md)\n- [Crush vs Kimi Code CLI](https://www.anchorterminal.com/compare/crush-vs-kimi-code-cli.md)\n- [Crush vs Kiro CLI](https://www.anchorterminal.com/compare/crush-vs-kiro-cli.md)\n- [Crush vs mini-swe-agent](https://www.anchorterminal.com/compare/crush-vs-mini-swe-agent.md)\n- [Crush vs MiniMax Code](https://www.anchorterminal.com/compare/crush-vs-minimax-code.md)\n- [Crush vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/crush-vs-mistral-vibe-cli.md)\n- [Crush vs Muse Code](https://www.anchorterminal.com/compare/crush-vs-muse-code.md)\n- [Crush vs OpenAI Codex](https://www.anchorterminal.com/compare/crush-vs-openai-codex.md)\n- [Crush vs OpenCode](https://www.anchorterminal.com/compare/crush-vs-opencode.md)\n- [Crush vs OpenHands](https://www.anchorterminal.com/compare/crush-vs-openhands.md)\n- [Crush vs OpenMausBot](https://www.anchorterminal.com/compare/crush-vs-openmausbot.md)\n- [Crush vs Prime Agent](https://www.anchorterminal.com/compare/crush-vs-prime-agent.md)\n- [Crush vs Qoder CLI](https://www.anchorterminal.com/compare/crush-vs-qoder-cli.md)\n- [Crush vs Qwen Code](https://www.anchorterminal.com/compare/crush-vs-qwen-code.md)\n- [Crush vs Mirror CLI](https://www.anchorterminal.com/compare/crush-vs-reflection-mirror.md)\n- [Crush vs Rovo Dev CLI](https://www.anchorterminal.com/compare/crush-vs-rovo-dev-cli.md)\n- [Crush vs Unstoppable](https://www.anchorterminal.com/compare/crush-vs-unstoppable.md)\n- [Crush vs Vibe-Trading](https://www.anchorterminal.com/compare/crush-vs-vibe-trading.md)\n- [Crush vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/crush-vs-warp.md)\n- [Amp vs Clawboo](https://www.anchorterminal.com/compare/amp-vs-clawboo.md)\n- [Antigravity CLI vs Clawboo](https://www.anchorterminal.com/compare/antigravity-cli-vs-clawboo.md)\n- [Auggie CLI vs Clawboo](https://www.anchorterminal.com/compare/auggie-vs-clawboo.md)\n- [Claude Code vs Clawboo](https://www.anchorterminal.com/compare/claude-code-vs-clawboo.md)\n- [Clawboo vs CLI Manager](https://www.anchorterminal.com/compare/clawboo-vs-cli-manager.md)\n- [Clawboo vs Cline](https://www.anchorterminal.com/compare/clawboo-vs-cline.md)\n- [Clawboo vs DeepSeek Harness (dsh)](https://www.anchorterminal.com/compare/clawboo-vs-deepseek-harness.md)\n- [Clawboo vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/clawboo-vs-deepseek-superagent.md)\n- [Clawboo vs Devin](https://www.anchorterminal.com/compare/clawboo-vs-devin.md)\n- [Clawboo vs Droid CLI](https://www.anchorterminal.com/compare/clawboo-vs-droid-cli.md)\n- [Clawboo vs Gemini CLI](https://www.anchorterminal.com/compare/clawboo-vs-gemini-cli.md)\n- [Clawboo vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/clawboo-vs-github-copilot-cli.md)\n- [Clawboo vs goose](https://www.anchorterminal.com/compare/clawboo-vs-goose.md)\n- [Clawboo vs Harness](https://www.anchorterminal.com/compare/clawboo-vs-harness-autonomous.md)\n- [Clawboo vs HarnessRouter](https://www.anchorterminal.com/compare/clawboo-vs-harnessrouter.md)\n- [Clawboo vs Jules](https://www.anchorterminal.com/compare/clawboo-vs-jules.md)\n- [Clawboo vs Junie CLI](https://www.anchorterminal.com/compare/clawboo-vs-junie.md)\n- [Clawboo vs Kilo Code CLI](https://www.anchorterminal.com/compare/clawboo-vs-kilo-code-cli.md)\n- [Clawboo vs Kimi Code CLI](https://www.anchorterminal.com/compare/clawboo-vs-kimi-code-cli.md)\n- [Clawboo vs Kiro CLI](https://www.anchorterminal.com/compare/clawboo-vs-kiro-cli.md)\n- [Clawboo vs MiniMax Code](https://www.anchorterminal.com/compare/clawboo-vs-minimax-code.md)\n- [Clawboo vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/clawboo-vs-mistral-vibe-cli.md)\n- [Clawboo vs Muse Code](https://www.anchorterminal.com/compare/clawboo-vs-muse-code.md)\n- [Clawboo vs OpenCode](https://www.anchorterminal.com/compare/clawboo-vs-opencode.md)\n- [Clawboo vs OpenHands](https://www.anchorterminal.com/compare/clawboo-vs-openhands.md)\n- [Clawboo vs OpenMausBot](https://www.anchorterminal.com/compare/clawboo-vs-openmausbot.md)\n- [Clawboo vs Paperclip](https://www.anchorterminal.com/compare/clawboo-vs-paperclip.md)\n- [Clawboo vs Parallax](https://www.anchorterminal.com/compare/clawboo-vs-parallax-agents.md)\n- [Clawboo vs Prime Agent](https://www.anchorterminal.com/compare/clawboo-vs-prime-agent.md)\n- [Clawboo vs Qoder CLI](https://www.anchorterminal.com/compare/clawboo-vs-qoder-cli.md)\n- [Clawboo vs Qwen Code](https://www.anchorterminal.com/compare/clawboo-vs-qwen-code.md)\n- [Clawboo vs Mirror CLI](https://www.anchorterminal.com/compare/clawboo-vs-reflection-mirror.md)\n- [Clawboo vs Rovo Dev CLI](https://www.anchorterminal.com/compare/clawboo-vs-rovo-dev-cli.md)\n- [Clawboo vs Unstoppable](https://www.anchorterminal.com/compare/clawboo-vs-unstoppable.md)\n- [Clawboo vs Vibe-Trading](https://www.anchorterminal.com/compare/clawboo-vs-vibe-trading.md)\n- [Clawboo vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/clawboo-vs-warp.md)\n- [CLI Manager vs Crush](https://www.anchorterminal.com/compare/cli-manager-vs-crush.md)\n- [Crush vs Harness](https://www.anchorterminal.com/compare/crush-vs-harness-autonomous.md)\n- [Crush vs Paperclip](https://www.anchorterminal.com/compare/crush-vs-paperclip.md)\n- [Crush vs Parallax](https://www.anchorterminal.com/compare/crush-vs-parallax-agents.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-01", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Clawboo vs Crush", "url": "" } ], "description": "Clawboo scores 61.4 (C) to Crush's 56.7 (C) for multi-agent orchestration. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Clawboo C 61.4", "Crush C 56.7", "scores" ], "h1": "Clawboo vs Crush", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/clawboo-vs-crush", "published": "2026-10-01", "section": "tools", "title": "Clawboo vs Crush for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-01", "url": "https://www.anchorterminal.com/compare/clawboo-vs-crush" }, "tokens": { "markdown": 5850, "slim": 2880 }, "version": 1 }