{ "data": { "a": { "slug": "crewai", "name": "CrewAI", "vendor": "CrewAI", "vendorUrl": "https://www.crewai.com", "kind": "framework", "category": "frameworks", "summary": "Python framework for teams of role-playing agents in Crews, plus event-driven Flows for stateful workflows.", "url": "https://www.anchorterminal.com/tools/crewai", "markdownUrl": "https://www.anchorterminal.com/tools/crewai.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/crewai.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/crewai.json", "dns": "crewai.grade.anchorterminal.com", "repo": "https://github.com/crewAIInc/crewAI", "license": "MIT", "transports": [], "packages": [ { "registry": "pypi", "name": "crewai" } ], "auth": "none", "authNotes": "A library. Credentials are for the models and tools you use.", "pricing": "free", "pricingNotes": "Free and open source. You pay for the model calls it makes. CrewAI AMP hosting has a free tier of 50 executions a month. Enterprise is priced by sales.", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 59059, "npmWeekly": null, "pypiWeekly": 552409, "asOf": "2026-09-26" }, "docsUrl": "https://docs.crewai.com", "llmsTxt": "https://docs.crewai.com/llms.txt", "capabilities": [ "agent.framework", "agent.multi-agent", "agent.durable", "agent.mcp-client" ], "tags": [ "framework", "python", "open-source", "telemetry-default-on" ], "lastRelease": "2026-10-29", "graded": true, "anchor": { "graded": true, "score": 59, "grade": "C", "agentReady": false, "rank": 720, "ranked": true, "rankOf": 1510, "categoryRank": 17, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 80, "maintenance": 88, "payments": 40, "reliability": 75, "schema": 74, "security": 65, "transparency": 79 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -12, "negativeNotes": [ "2026-03-30. CERT/CC VU#221883 published four CVEs in CrewAI 1.0, remote code execution when the code interpreter fell back from Docker to its Python sandbox (CVE-2026-2275, 9.6, and CVE-2026-2287, 9.8), SSRF in the RAG search tools (CVE-2026-2286, 9.8) and local file read in the JSON loader tool (CVE-2026-2285, 7.5). CrewAI says all are fixed in current releases, removed CodeInterpreterTool and added URL and path validation across 20+ tools. Fixed, published and more than two months old, so 1 point each. https://www.kb.cert.org/vuls/id/221883", "2026-09-13. CVE-2026-37008 (High), a ctypes bypass of the in-process Python sandbox, which the record calls a different vulnerability than CVE-2026-2275. Fixed by commit fb2323b, first in 1.11.0. A fixed, published High under two months old, so 2 points. The 1 October check had folded it into the March CVEs. https://api.osv.dev/v1/vulns/CVE-2026-37008", "2026-10-23. crewai 1.15.29, a patch release, removed `CrewAgentExecutor` and the public import paths around it and changed how every agent runs (oversized tool results deferred to files, the conversation summarised before it overflows, the fifth identical tool call stopping the task). The release notes listed none of it as breaking. The changelog marked it breaking on 28 October, and 1.15.33 restored some imports on 29 October. A breaking change shipped without notice, so 3 points. https://github.com/crewAIInc/crewAI/releases/tag/1.15.29", "2026-10-23. 1.15.29 also shipped fixes for two described flaws in the crewai package with no advisory, LanceDB memory filters built by interpolating scope and id values into SQL strings (#7820) and private memories saved without a source returned to every recall (#8400). Neither commit cites a GHSA id. Released fixes with no advisory, so 3 points. https://github.com/crewAIInc/crewAI/releases/tag/1.15.29" ], "verdict": "The mcps field connects an agent to an MCP server in a few lines, with static and dynamic tool filters. Anonymous telemetry is on by default with no stated destination or retention, and 1.15.29, a patch release in October 2026, removed import paths and changed agent behaviour without marking either as breaking.", "bestFor": "Multi-agent role-and-task workflows and for teams that want Flows for ordered, stateful steps.", "strengths": [ "An MCP server in five lines through the mcps field, with static and dynamic tool filters", "Pre-tool-call hooks that can block a call or ask a person to approve it", "Run caps on by default (max_iter 20, respect_context_window) and two retries on error", "23 stable releases between 4 August and 29 October 2026", "A security policy with response times, safe harbour and a valid security.txt" ], "weaknesses": [ "Anonymous telemetry on by default, with no stated destination or retention", "1.15.29, a patch release, removed import paths and changed agent behaviour, marked breaking only five days later", "Four CVEs in March 2026 and one in September, published through CERT/CC and NVD rather than GitHub advisories", "No sandbox for model-written code since CodeInterpreterTool was removed", "Python only, and Python 3.14 isn't supported yet" ], "agentNotes": [ "Set CREWAI_DISABLE_TELEMETRY=true before the first run", "Pin an exact version and read the changelog before upgrading. Patch releases have carried breaking changes", "Put MCP keys in headers, not in the URL as the docs' Exa example does", "Add a PRE_TOOL_CALL hook for any tool that writes or sends", "Set use_better_compaction=False if the agent needs whole tool results in its context" ], "metrics": { "kind": "library", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59 } ], "editorialScores": { "ergonomics": 80, "maintenance": 88, "payments": 40, "reliability": 75, "schema": 74, "security": 65, "transparency": 75 }, "provenanceScore": 82, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install crewai" }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/crewai" }, "area": "frameworks", "provenance": { "legalEntity": "CrewAI, Inc.", "domain": "crewai.com", "domainRegistered": "2017-07-25", "domainNote": "crewai.com was registered in 2017, before CrewAI existed.", "endpointOnVendorDomain": null, "terms": "https://crewai.com/terms-of-use", "privacy": "https://crewai.com/privacy-policy", "statusPage": "https://status.crewai.com", "changelog": "https://docs.crewai.com/en/changelog", "securityTxt": "valid", "checked": "2026-11-01", "notes": [ "The terms of use name CrewAI, Inc., a Delaware corporation, and both the terms and the privacy policy carry an effective date of 24 September 2025. They cover the CrewAI platform (AMP); the framework itself is under MIT.", "crewai.com/.well-known/security.txt gives security@crewai.com as the contact, expires 2027-05-27 and points to the repository's security policy.", "status.crewai.com, linked from the crewai.com footer, is an incident.io status page for the hosted platform, not the library." ], "score": 82 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/crewai.json", "live": { "slug": "crewai", "vendorStatus": { "page": "https://status.crewai.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T19:21:40.019383352Z" }, "versions": [ { "registry": "github", "name": "crewAIInc/crewAI", "version": "1.15.36", "released": "2026-11-06", "seenAt": "2026-11-06T23:18:20.2395136Z" }, { "registry": "pypi", "name": "crewai", "version": "1.15.36", "released": "2026-11-06", "seenAt": "2026-11-06T23:18:20.099328206Z" } ], "githubStars": 60583, "pypiWeekly": 588229, "securityTxt": { "url": "https://crewai.com/.well-known/security.txt", "state": "valid", "expires": "2027-05-27T23:59:59.000Z", "checkedAt": "2026-11-07T16:00:50.473985264Z" }, "llmsTxt": { "url": "https://docs.crewai.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:13.532765901Z" }, "domain": { "domain": "crewai.com", "registered": "2017-07-25", "source": "https://rdap.verisign.com/com/v1/domain/crewai.com", "checkedAt": "2026-11-01T14:25:44.848100367Z" }, "pages": [ { "url": "https://docs.crewai.com/en/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:05:56.144704351Z", "changedAt": "2026-11-07T14:05:56.144704351Z", "fingerprint": "0af42d71f70d" }, { "url": "https://crewai.com/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:02:05.841896582Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "08ea3c8d522c" }, { "url": "https://crewai.com/terms-of-use", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:02:08.252235034Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "ba1be78a1ea0" } ], "github": { "repo": "crewaiinc/crewai", "checkedAt": "2026-11-02T08:41:58.31375138Z", "stars": 60409, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-02T06:37:07Z", "openIssues": 406, "openPRs": 588, "issuesOpened90d": 662, "issuesClosed90d": 358, "prsMerged90d": 424, "ci": { "branch": "main", "runs": 50, "success": 50, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-11-01T22:35:16Z" } }, "updatedAt": "2026-11-07T19:21:40.019383352Z" } }, "answer": "Mastra scores 74.2 (BB) on agent readiness against CrewAI's 59 (C), and leads in 6 of 7 scored categories. CrewAI leads on transparency \u0026 trust.", "b": { "slug": "mastra", "name": "Mastra", "vendor": "Kepler Software, Inc.", "vendorUrl": "https://mastra.ai", "kind": "framework", "category": "frameworks", "summary": "Open-source TypeScript framework from Mastra for building agents and workflows, with memory, RAG, evals, tracing, an MCP client and server, and a local Studio. An optional hosted platform runs deployments and observability.", "url": "https://www.anchorterminal.com/tools/mastra", "markdownUrl": "https://www.anchorterminal.com/tools/mastra.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/mastra.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/mastra.json", "dns": "mastra.grade.anchorterminal.com", "repo": "https://github.com/mastra-ai/mastra", "license": "Apache-2.0 for the core. Code under ee/ directories is source-available under the Mastra Enterprise License, free for development and testing", "transports": [], "packages": [ { "registry": "npm", "name": "@mastra/core" }, { "registry": "npm", "name": "@mastra/mcp" }, { "registry": "npm", "name": "mastra" } ], "auth": "api-key", "authNotes": "The framework has no account of its own. The model router takes `provider/model` strings and each provider's own key. The hosted Mastra platform needs an account.", "pricing": "free", "pricingNotes": "Free and open source. You pay for model calls. The hosted platform has a $0 Starter plan with 100K observability events and 24 CPU hours, then $10 per 100K events and $0.35 a CPU hour, and Teams at $250 a month (https://mastra.ai/pricing, checked 2026-11-06).", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Mastra docs, the repository or the pricing page (checked 2026-10-06).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 29383, "npmWeekly": 3116983, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://mastra.ai/docs", "llmsTxt": "https://mastra.ai/llms.txt", "capabilities": [ "agent.framework", "agent.durable", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "framework", "typescript", "open-source", "llms-txt", "mcp", "telemetry-default-on" ], "lastRelease": "2026-11-04", "graded": true, "anchor": { "graded": true, "score": 74.2, "grade": "BB", "agentReady": true, "rank": 91, "ranked": true, "rankOf": 1510, "categoryRank": 7, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 92, "maintenance": 96, "payments": 60, "reliability": 87, "schema": 98, "security": 67, "transparency": 72 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": -8, "negativeNotes": [ "2026-06-17. Malicious versions of Mastra's npm packages were published, among them @mastra/core 1.42.1 at 01:15 UTC, and GitHub malware advisories that day (GHSA-pp62-grrw-hvfp and others) say any machine that installed one should be treated as fully compromised. All 21 Mastra packages we checked on OSV carry one. Mastra published clean versions the same day and the changelogs name an \"easy-day-js\" supply-chain incident, but we found no advisory or post-mortem from Mastra. Fixed and under four months old, so 8 points. https://osv.dev/vulnerability/MAL-2026-6011" ], "verdict": "A TypeScript framework with agents, workflows with suspend and resume, memory, an MCP client and server, per-server tool approval and built-in guardrail processors including a prompt-injection detector. On 17 June 2026 malicious versions of its npm packages were published, and the CLI, server and Studio send usage analytics by default, with token counts every 15 minutes.", "bestFor": "TypeScript teams that want agents, workflows, memory, evals and a local Studio in one framework.", "strengths": [ "MCP client with requireToolApproval per server or per tool, allowedHosts and a curated environment for stdio servers", "Guardrail processors for prompt injection, PII, moderation and cost limits, run on input and output", "Workflows with snapshots, suspend and resume, and durable agents on Inngest or an evented engine", "Apache 2.0 core, 1.0 since 20 January 2026, with 27 releases of @mastra/core in 90 days to 6 November", "llms.txt with a when-to-use section and condensed instructions for coding agents" ], "weaknesses": [ "Malicious versions of Mastra npm packages, including @mastra/core 1.42.1, were published on 17 June 2026", "CLI, server and Studio send usage analytics by default, including token counts every 15 minutes, off with MASTRA_TELEMETRY_DISABLED=1", "No SECURITY.md, no security.txt and no bug bounty found", "Code under ee/ is source-available under the Mastra Enterprise License, not Apache 2.0", "TypeScript only, Node 22.13 or newer" ], "agentNotes": [ "Set MASTRA_TELEMETRY_DISABLED=1 in every environment that runs the CLI, the server or Studio", "Pin exact versions with a lockfile, and make sure no 17 June 2026 release such as @mastra/core 1.42.1 is installed", "Set requireToolApproval on MCP servers that write, and allowedHosts when server URLs come from configuration", "Add PromptInjectionDetector as an input processor when tools return web or user content", "Use supervisor agents through generate() or stream(). `.network()` is deprecated" ], "metrics": { "kind": "library", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 74.2 } ], "editorialScores": { "ergonomics": 92, "maintenance": 96, "payments": 60, "reliability": 87, "schema": 98, "security": 67, "transparency": 72 }, "provenanceScore": 71, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm create mastra@latest # or: npm i @mastra/core @mastra/mcp" }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/mastra" }, "area": "frameworks", "provenance": { "legalEntity": "Kepler Software, Inc.", "domain": "mastra.ai", "domainRegistered": "2024-10-01", "endpointOnVendorDomain": null, "terms": "https://mastra.ai/terms-of-service", "privacy": "https://mastra.ai/privacy-policy", "statusPage": "https://statuspage.incident.io/mastra-platform", "changelog": "https://github.com/mastra-ai/mastra/blob/main/packages/core/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The privacy policy names Kepler Software Inc as operator of mastra.ai and shows a last-published date of 25 April 2025.", "The licence file is copyright Kepler Software, Inc.", "mastra.ai/.well-known/security.txt returns 404 (rechecked 6 November 2026), and the repository has no SECURITY.md.", "RDAP gives mastra.ai a registration date of 2024-10-01.", "The status page covers the hosted platform, not the framework." ], "score": 71 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/mastra.json", "live": { "slug": "mastra", "vendorStatus": { "page": "https://statuspage.incident.io/mastra-platform", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T19:22:27.41396844Z" }, "versions": [ { "registry": "github", "name": "mastra-ai/mastra", "version": "@mastra/core@1.82.0", "released": "2026-11-04", "seenAt": "2026-11-06T23:43:05.299046627Z" }, { "registry": "npm", "name": "@mastra/core", "version": "1.82.0", "seenAt": "2026-11-06T23:43:01.102546802Z" }, { "registry": "npm", "name": "@mastra/mcp", "version": "2.8.0", "seenAt": "2026-11-06T23:43:01.962943277Z" }, { "registry": "npm", "name": "mastra", "version": "1.38.0", "seenAt": "2026-11-06T23:43:03.330470883Z" } ], "githubStars": 29384, "npmWeekly": 3116983, "securityTxt": { "url": "https://mastra.ai/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:45.130857018Z" }, "llmsTxt": { "url": "https://mastra.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:57.501317652Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/mastra-ai/mastra/main/packages/core/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:21:37.959722321Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0bdb3498f7aa" }, { "url": "https://mastra.ai/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:13:54.312763229Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0204673a21a8" }, { "url": "https://mastra.ai/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:13:56.829832485Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "1621ce3063d8" }, { "url": "https://mastra.ai/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:13:58.580048861Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "edbcf520f26c" } ], "updatedAt": "2026-11-07T19:22:27.41396844Z" } }, "edges": [ { "by": 24, "category": "schema", "leads": "mastra", "name": "Schema \u0026 documentation", "reasons": { "a": "Agent, Task and tool classes are Pydantic-typed, but we found no generated API reference for the Python library (15). llms.txt at docs.crewai.com, per the listing's earlier check (10). The docs separate Crews from Flows and say which to use for what, though not when to avoid multi-agent crews (12). Tools take a Pydantic args_schema and MCP tools keep their JSON Schema (12). Plenty of examples, and MCP connection errors are described, but there's no exception reference (10). Dated changelog at docs.crewai.com/en/changelog (15).", "b": "Typed TypeScript API with a reference section (25). llms.txt with a when-to-use list and condensed instructions for coding agents (10). The docs say when to use durable agents, and point multi-agent users from `.network()` to supervisor agents (20). Tools take Zod schemas (15). Examples on every page, and MastraError with ids and categories documented, though errors are spread across pages (13). Per-package changelogs and migration guides (15)." }, "scores": { "a": 74, "b": 98 } }, { "by": 20, "category": "payments", "leads": "mastra", "name": "Payments \u0026 pricing", "reasons": { "a": "No payment protocol (0). Scored on CrewAI AMP, the hosted option. Its free Basic plan is public but the only paid plan is contact-sales (0). The MIT package installs with no card (20) and no account, and can run a local model through LiteLLM (20).", "b": "No payment protocol (0). Scored on the hosted platform, whose per-unit prices are public without a login ($10 per 100K observability events and $0.35 a CPU hour on Starter) (20). The Apache 2.0 packages install with no card (20) and no account, and run any model (20)." }, "scores": { "a": 40, "b": 60 } }, { "by": 12, "category": "reliability", "leads": "mastra", "name": "Reliability", "reasons": { "a": "Official package on PyPI with Requires-Python \u003e=3.10,\u003c3.14 in the pyproject at 1.15.33 (20). The Run Tests workflow runs the suite on pull requests only, and CodeQL, a vulnerability scan and a nightly canary run on main; run results weren't re-read on 1 November because GitHub's pages answer 403 (15). Between 99 and 184 open issues, triaged with labels and a stale bot, per the 1 October check, not re-read on 1 November (18). A dated changelog that notes deprecations, but no written versioning policy, new capabilities ship in patch releases, and 1.15.29, a patch release on 23 October 2026, removed public import paths and changed how every agent runs, marked as breaking only on 28 October (7). 1.15.33, stable (15).", "b": "Official npm packages, Node 22.13 or newer (20). Public CI workflows for unit, store, workspace and e2e tests; on 6 November the newest runs on main (Version Packages, Trigger Cloud Integration Tests) succeeded, while the test workflows themselves run on pull requests (22). 436 open issues and 795 open issues and pull requests on 6 November from GitHub's API, with 2,077 issues opened in the 90 days to 3 November; all 50 newest had a comment and 24 were closed, with issue-triage automation (18). A changesets CHANGELOG per package, a CI gate that needs approval for any major bump and migration guides, but no written versioning policy found, and `.network()` is deprecated without a removal date (12). 1.82.0 (15). 20+22+18+12+15 = 87, up from 74 on 6 October, when GitHub couldn't be read." }, "scores": { "a": 75, "b": 87 } }, { "by": 12, "category": "ergonomics", "leads": "mastra", "name": "Agent ergonomics", "reasons": { "a": "The mcps field gives an agent an MCP server in five lines, with static and dynamic tool filters and tool-list caching (25). max_iter defaults to 20, max_execution_time and max_rpm cap runs, and respect_context_window is on by default (20). MCP connection failures are logged as warnings and the agent carries on without those tools, and we found no exception reference (10). max_retry_limit retries an agent twice on error, and Flows persist state with @persist (20). An agent needs role, goal and backstory before it does anything, and it's Python only (5).", "b": "An MCP client in about ten lines with listTools() for static or listToolsets() for per-request tools, and ToolSearchProcessor for loading tools on demand (25). Step limits, memory windows and processors such as a token limiter control what reaches the model (20). MastraError with ids and categories, and processors can abort with a reason the caller can read (17). Workflow step retries, snapshots and durable agents for resuming (20). create-mastra scaffolds a project and the model router takes a plain string, but it's TypeScript only (10)." }, "scores": { "a": 80, "b": 92 } }, { "by": 8, "category": "maintenance", "leads": "mastra", "name": "Maintenance \u0026 community", "reasons": { "a": "1.15.33, tagged on 2026-10-29 (30). 23 stable releases tagged in the 90 days from 3 August, 1.15.11 (4 August) to 1.15.33, and no pre-release in that window (20). Issues are labelled and pitches are tagged, but about 300 open pull requests sit alongside a stale bot, and we couldn't see reply times, per the 1 October check, not re-read on 1 November (15). The Python package is current (15). CodeQL, a vulnerability scan and Dependabot run on main, but Python 3.14 isn't supported yet and dev builds share the PyPI name (8).", "b": "@mastra/core 1.82.0 on 2026-11-04 (30). 27 stable releases in the 90 days to 6 November, 8 of them since 6 October (20). 436 open issues on 6 November, all 50 newest issues commented and 24 of them closed (22). Client, MCP and store packages are current, and @mastra/mcp 1.x stays supported beside 2.x (15). Renovate and CI configured, with the newest runs on main passing (9). 30+20+22+15+9 = 96." }, "scores": { "a": 88, "b": 96 } }, { "by": 7, "category": "transparency", "leads": "crewai", "name": "Transparency \u0026 trust", "reasons": { "a": "MIT (30). The telemetry page lists what's collected and what isn't, but doesn't say where it goes or how long it's kept (15). Deprecations such as function_calling_llm and allow_code_execution appear in the dated changelog and docs, with no written deprecation policy (10). Telemetry disclosed in the docs and README with two opt-out variables (20).", "b": "Apache 2.0 for the core, with ee/ directories source-available under the Mastra Enterprise License (25). The privacy policy (last published 25 April 2025) covers the website, the Teams plan states six months' retention, and the subprocessor list sits in a trust centre our reader couldn't render (15). Migration guides and deprecation warnings, without dated removal windows (12). Every telemetry stream is documented with links to its source and one opt-out, and the reference now spells out what the project identifiers can be correlated with (20)." }, "scores": { "a": 79, "b": 72 } } ], "facts": [ { "a": "Agent framework", "b": "Agent framework", "name": "Kind" }, { "a": "CrewAI", "b": "Kepler Software, Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "API key", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Apache-2.0 for the core. Code under ee/ directories is source-available under the Mastra Enterprise License, free for development and testing", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-29", "b": "2026-11-04", "name": "Last release" }, { "a": "not read yet", "b": "2026-10-26", "name": "Terms last updated" }, { "a": "not read yet", "b": "no date given", "name": "Privacy policy last updated" }, { "a": "not read yet", "b": "yes", "name": "Customer content may train models" }, { "a": "not read yet", "b": "yes", "name": "Terms restrict automated access" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not read yet", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "not read yet", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "59k stars, 552k PyPI/wk", "b": "29k stars, 3.1M npm/wk", "name": "Popularity" }, { "a": "3/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Mastra scores 74.2 (BB) on agent readiness against CrewAI's 59 (C), and leads in 6 of 7 scored categories. CrewAI leads on transparency \u0026 trust.", "question": "Which is better for AI agents, CrewAI or Mastra?" }, { "answer": "Yes. CrewAI is open source (MIT). Mastra is open source (Apache-2.0 for the core. Code under ee/ directories is source-available under the Mastra Enterprise License, free for development and testing).", "question": "Are CrewAI and Mastra open source?" } ], "goodFor": [ { "aheadOn": [ "Transparency \u0026 trust, 79 against 72" ], "also": [ "No key needed to call it" ], "goodFor": "Multi-agent role-and-task workflows and for teams that want Flows for ordered, stateful steps.", "slug": "crewai", "watchFor": "Anonymous telemetry on by default, with no stated destination or retention" }, { "aheadOn": [ "Reliability, 87 against 75", "Schema \u0026 documentation, 98 against 74", "Agent ergonomics, 92 against 80", "Payments \u0026 pricing, 60 against 40", "Maintenance \u0026 community, 96 against 88" ], "also": [ "Agent-ready, a grade of BB or better" ], "goodFor": "TypeScript teams that want agents, workflows, memory, evals and a local Studio in one framework.", "slug": "mastra", "watchFor": "Malicious versions of Mastra npm packages, including @mastra/core 1.42.1, were published on 17 June 2026" } ], "history": { "crewai": [ { "causes": [ "product", "evidence", "event" ], "date": "2026-11-01", "delta": -8.1, "from": 67.1, "fromGrade": "B", "to": 59, "toGrade": "C" }, { "causes": [ "correction" ], "date": "2026-10-28", "delta": -0.1, "from": 67.2, "fromGrade": "B", "to": 67.1, "toGrade": "B" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.2, "from": 67, "fromGrade": "B", "to": 67.2, "toGrade": "B" } ], "mastra": null }, "job": { "capability": "agent.framework", "name": "Agent frameworks" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentos-vs-crewai.json", "title": "AgentOS vs CrewAI", "url": "https://www.anchorterminal.com/compare/agentos-vs-crewai" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-mastra.json", "title": "AgentOS vs Mastra", "url": "https://www.anchorterminal.com/compare/agentos-vs-mastra" }, { "json": "https://www.anchorterminal.com/compare/agno-vs-crewai.json", "title": "Agno vs CrewAI", "url": "https://www.anchorterminal.com/compare/agno-vs-crewai" }, { "json": "https://www.anchorterminal.com/compare/agno-vs-mastra.json", "title": "Agno vs Mastra", "url": "https://www.anchorterminal.com/compare/agno-vs-mastra" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai.json", "title": "BoxLang AI vs CrewAI", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-mastra.json", "title": "BoxLang AI vs Mastra", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-mastra" }, { "json": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-crewai.json", "title": "Claude Agent SDK vs CrewAI", "url": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-crewai" }, { "json": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-mastra.json", "title": "Claude Agent SDK vs Mastra", "url": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-mastra" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-cursor-agent-sdk.json", "title": "CrewAI vs Cursor Agent SDK", "url": "https://www.anchorterminal.com/compare/crewai-vs-cursor-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-docker-agent.json", "title": "CrewAI vs Docker Agent", "url": "https://www.anchorterminal.com/compare/crewai-vs-docker-agent" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-google-adk.json", "title": "CrewAI vs Agent Development Kit (ADK)", "url": "https://www.anchorterminal.com/compare/crewai-vs-google-adk" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-guilds-run.json", "title": "CrewAI vs guilds.run", "url": "https://www.anchorterminal.com/compare/crewai-vs-guilds-run" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-langgraph.json", "title": "CrewAI vs LangGraph", "url": "https://www.anchorterminal.com/compare/crewai-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-llamaindex.json", "title": "CrewAI vs LlamaIndex Framework", "url": "https://www.anchorterminal.com/compare/crewai-vs-llamaindex" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-microsoft-agent-framework.json", "title": "CrewAI vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/crewai-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-openai-agents-sdk.json", "title": "CrewAI vs OpenAI Agents SDK", "url": "https://www.anchorterminal.com/compare/crewai-vs-openai-agents-sdk" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-pydantic-ai.json", "title": "CrewAI vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/crewai-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-smolagents.json", "title": "CrewAI vs smolagents", "url": "https://www.anchorterminal.com/compare/crewai-vs-smolagents" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-strands-agents.json", "title": "CrewAI vs Strands Agents", "url": "https://www.anchorterminal.com/compare/crewai-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-tradingagents.json", "title": "CrewAI vs TradingAgents", "url": "https://www.anchorterminal.com/compare/crewai-vs-tradingagents" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-vercel-ai-sdk.json", "title": "CrewAI vs AI SDK", "url": "https://www.anchorterminal.com/compare/crewai-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-mastra.json", "title": "Cursor Agent SDK vs Mastra", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-mastra" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-mastra.json", "title": "Docker Agent vs Mastra", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-mastra" }, { "json": "https://www.anchorterminal.com/compare/google-adk-vs-mastra.json", "title": "Agent Development Kit (ADK) vs Mastra", "url": "https://www.anchorterminal.com/compare/google-adk-vs-mastra" }, { "json": "https://www.anchorterminal.com/compare/guilds-run-vs-mastra.json", "title": "guilds.run vs Mastra", "url": "https://www.anchorterminal.com/compare/guilds-run-vs-mastra" }, { "json": "https://www.anchorterminal.com/compare/langgraph-vs-mastra.json", "title": "LangGraph vs Mastra", "url": "https://www.anchorterminal.com/compare/langgraph-vs-mastra" }, { "json": "https://www.anchorterminal.com/compare/llamaindex-vs-mastra.json", "title": "LlamaIndex Framework vs Mastra", "url": "https://www.anchorterminal.com/compare/llamaindex-vs-mastra" }, { "json": "https://www.anchorterminal.com/compare/mastra-vs-microsoft-agent-framework.json", "title": "Mastra vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/mastra-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/mastra-vs-openai-agents-sdk.json", "title": "Mastra vs OpenAI Agents SDK", "url": "https://www.anchorterminal.com/compare/mastra-vs-openai-agents-sdk" }, { "json": "https://www.anchorterminal.com/compare/mastra-vs-pydantic-ai.json", "title": "Mastra vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/mastra-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/mastra-vs-smolagents.json", "title": "Mastra vs smolagents", "url": "https://www.anchorterminal.com/compare/mastra-vs-smolagents" }, { "json": "https://www.anchorterminal.com/compare/mastra-vs-strands-agents.json", "title": "Mastra vs Strands Agents", "url": "https://www.anchorterminal.com/compare/mastra-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/mastra-vs-tradingagents.json", "title": "Mastra vs TradingAgents", "url": "https://www.anchorterminal.com/compare/mastra-vs-tradingagents" }, { "json": "https://www.anchorterminal.com/compare/mastra-vs-vercel-ai-sdk.json", "title": "Mastra vs AI SDK", "url": "https://www.anchorterminal.com/compare/mastra-vs-vercel-ai-sdk" } ], "panel": null, "scores": [ { "by": 12, "crewai": 75, "edge": "mastra", "key": "reliability", "mastra": 87, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 24, "crewai": 74, "edge": "mastra", "key": "schema", "mastra": 98, "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 12, "crewai": 80, "edge": "mastra", "key": "ergonomics", "mastra": 92, "name": "Agent ergonomics", "weight": 13 }, { "by": 2, "crewai": 65, "edge": "mastra", "key": "security", "mastra": 67, "name": "Security \u0026 auth", "weight": 14 }, { "by": 20, "crewai": 40, "edge": "mastra", "key": "payments", "mastra": 60, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 8, "crewai": 88, "edge": "mastra", "key": "maintenance", "mastra": 96, "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 7, "crewai": 79, "edge": "crewai", "key": "transparency", "mastra": 72, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Mastra scores 74.2 (BB) on agent readiness against CrewAI's 59 (C), and leads in 6 of 7 scored categories. CrewAI leads on transparency \u0026 trust. Both do agent frameworks.", "tasks": null, "tutorials": [], "verdicts": { "crewai": "The mcps field connects an agent to an MCP server in a few lines, with static and dynamic tool filters. Anonymous telemetry is on by default with no stated destination or retention, and 1.15.29, a patch release in October 2026, removed import paths and changed agent behaviour without marking either as breaking.", "mastra": "A TypeScript framework with agents, workflows with suspend and resume, memory, an MCP client and server, per-server tool approval and built-in guardrail processors including a prompt-injection detector. On 17 June 2026 malicious versions of its npm packages were published, and the CLI, server and Studio send usage analytics by default, with token counts every 15 minutes." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/crewai-vs-mastra", "json": "https://www.anchorterminal.com/compare/crewai-vs-mastra.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/crewai-vs-mastra.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/crewai-vs-mastra.min.md" }, "markdown": "Mastra scores 74.2 (BB) on agent readiness against CrewAI's 59 (C), and leads in 6 of 7 scored categories. CrewAI leads on transparency \u0026 trust. Both do agent frameworks.\n\n- CrewAI: grade C, 59/100, rank #720 of 1510. Markdown https://www.anchorterminal.com/tools/crewai.md · JSON https://www.anchorterminal.com/api/v1/tools/crewai.json\n- Mastra: grade BB, 74.2/100, rank #91 of 1510. Markdown https://www.anchorterminal.com/tools/mastra.md · JSON https://www.anchorterminal.com/api/v1/tools/mastra.json\n- Best agent frameworks and SDKs: https://www.anchorterminal.com/best/frameworks/index.md\n- All 171 frameworks comparisons: https://www.anchorterminal.com/compare/frameworks/index.md\n\n## Which one, for what\n\n### CrewAI (C)\n\nGood for: Multi-agent role-and-task workflows and for teams that want Flows for ordered, stateful steps.\n\nAhead on:\n- Transparency \u0026 trust, 79 against 72\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: Anonymous telemetry on by default, with no stated destination or retention\n\n### Mastra (BB)\n\nGood for: TypeScript teams that want agents, workflows, memory, evals and a local Studio in one framework.\n\nAhead on:\n- Reliability, 87 against 75\n- Schema \u0026 documentation, 98 against 74\n- Agent ergonomics, 92 against 80\n- Payments \u0026 pricing, 60 against 40\n- Maintenance \u0026 community, 96 against 88\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n\nWatch for: Malicious versions of Mastra npm packages, including @mastra/core 1.42.1, were published on 17 June 2026\n\n\n## Why the edge\n\n### Schema \u0026 documentation: Mastra +24\n\n- CrewAI (74): Agent, Task and tool classes are Pydantic-typed, but we found no generated API reference for the Python library (15). llms.txt at docs.crewai.com, per the listing's earlier check (10). The docs separate Crews from Flows and say which to use for what, though not when to avoid multi-agent crews (12). Tools take a Pydantic args_schema and MCP tools keep their JSON Schema (12). Plenty of examples, and MCP connection errors are described, but there's no exception reference (10). Dated changelog at docs.crewai.com/en/changelog (15).\n- Mastra (98): Typed TypeScript API with a reference section (25). llms.txt with a when-to-use list and condensed instructions for coding agents (10). The docs say when to use durable agents, and point multi-agent users from `.network()` to supervisor agents (20). Tools take Zod schemas (15). Examples on every page, and MastraError with ids and categories documented, though errors are spread across pages (13). Per-package changelogs and migration guides (15).\n\n### Payments \u0026 pricing: Mastra +20\n\n- CrewAI (40): No payment protocol (0). Scored on CrewAI AMP, the hosted option. Its free Basic plan is public but the only paid plan is contact-sales (0). The MIT package installs with no card (20) and no account, and can run a local model through LiteLLM (20).\n- Mastra (60): No payment protocol (0). Scored on the hosted platform, whose per-unit prices are public without a login ($10 per 100K observability events and $0.35 a CPU hour on Starter) (20). The Apache 2.0 packages install with no card (20) and no account, and run any model (20).\n\n### Reliability: Mastra +12\n\n- CrewAI (75): Official package on PyPI with Requires-Python \u003e=3.10,\u003c3.14 in the pyproject at 1.15.33 (20). The Run Tests workflow runs the suite on pull requests only, and CodeQL, a vulnerability scan and a nightly canary run on main; run results weren't re-read on 1 November because GitHub's pages answer 403 (15). Between 99 and 184 open issues, triaged with labels and a stale bot, per the 1 October check, not re-read on 1 November (18). A dated changelog that notes deprecations, but no written versioning policy, new capabilities ship in patch releases, and 1.15.29, a patch release on 23 October 2026, removed public import paths and changed how every agent runs, marked as breaking only on 28 October (7). 1.15.33, stable (15).\n- Mastra (87): Official npm packages, Node 22.13 or newer (20). Public CI workflows for unit, store, workspace and e2e tests; on 6 November the newest runs on main (Version Packages, Trigger Cloud Integration Tests) succeeded, while the test workflows themselves run on pull requests (22). 436 open issues and 795 open issues and pull requests on 6 November from GitHub's API, with 2,077 issues opened in the 90 days to 3 November; all 50 newest had a comment and 24 were closed, with issue-triage automation (18). A changesets CHANGELOG per package, a CI gate that needs approval for any major bump and migration guides, but no written versioning policy found, and `.network()` is deprecated without a removal date (12). 1.82.0 (15). 20+22+18+12+15 = 87, up from 74 on 6 October, when GitHub couldn't be read.\n\n### Agent ergonomics: Mastra +12\n\n- CrewAI (80): The mcps field gives an agent an MCP server in five lines, with static and dynamic tool filters and tool-list caching (25). max_iter defaults to 20, max_execution_time and max_rpm cap runs, and respect_context_window is on by default (20). MCP connection failures are logged as warnings and the agent carries on without those tools, and we found no exception reference (10). max_retry_limit retries an agent twice on error, and Flows persist state with @persist (20). An agent needs role, goal and backstory before it does anything, and it's Python only (5).\n- Mastra (92): An MCP client in about ten lines with listTools() for static or listToolsets() for per-request tools, and ToolSearchProcessor for loading tools on demand (25). Step limits, memory windows and processors such as a token limiter control what reaches the model (20). MastraError with ids and categories, and processors can abort with a reason the caller can read (17). Workflow step retries, snapshots and durable agents for resuming (20). create-mastra scaffolds a project and the model router takes a plain string, but it's TypeScript only (10).\n\n### Maintenance \u0026 community: Mastra +8\n\n- CrewAI (88): 1.15.33, tagged on 2026-10-29 (30). 23 stable releases tagged in the 90 days from 3 August, 1.15.11 (4 August) to 1.15.33, and no pre-release in that window (20). Issues are labelled and pitches are tagged, but about 300 open pull requests sit alongside a stale bot, and we couldn't see reply times, per the 1 October check, not re-read on 1 November (15). The Python package is current (15). CodeQL, a vulnerability scan and Dependabot run on main, but Python 3.14 isn't supported yet and dev builds share the PyPI name (8).\n- Mastra (96): @mastra/core 1.82.0 on 2026-11-04 (30). 27 stable releases in the 90 days to 6 November, 8 of them since 6 October (20). 436 open issues on 6 November, all 50 newest issues commented and 24 of them closed (22). Client, MCP and store packages are current, and @mastra/mcp 1.x stays supported beside 2.x (15). Renovate and CI configured, with the newest runs on main passing (9). 30+20+22+15+9 = 96.\n\n### Transparency \u0026 trust: CrewAI +7\n\n- CrewAI (79): MIT (30). The telemetry page lists what's collected and what isn't, but doesn't say where it goes or how long it's kept (15). Deprecations such as function_calling_llm and allow_code_execution appear in the dated changelog and docs, with no written deprecation policy (10). Telemetry disclosed in the docs and README with two opt-out variables (20).\n- Mastra (72): Apache 2.0 for the core, with ee/ directories source-available under the Mastra Enterprise License (25). The privacy policy (last published 25 April 2025) covers the website, the Teams plan states six months' retention, and the subprocessor list sits in a trust centre our reader couldn't render (15). Migration guides and deprecation warnings, without dated removal windows (12). Every telemetry stream is documented with links to its source and one opt-out, and the reference now spells out what the project identifiers can be correlated with (20).\n\n## Score by category\n\n| Category | Weight | CrewAI | Mastra | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 75 | 87 | Mastra +12 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 74 | 98 | Mastra +24 |\n| Agent ergonomics | 13% (16.2 this run) | 80 | 92 | Mastra +12 |\n| Security \u0026 auth | 14% (17.5 this run) | 65 | 67 | Mastra +2 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 60 | Mastra +20 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 88 | 96 | Mastra +8 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 79 | 72 | CrewAI +7 |\n| Negative events | ≤15 | -12 | -8 | |\n| **Total** | | **59 · C** | **74.2 · BB** | |\n\n## Facts side by side\n\n| Fact | CrewAI | Mastra |\n| --- | --- | --- |\n| Kind | Agent framework | Agent framework |\n| Vendor | CrewAI | Kepler Software, Inc. |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | API key |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | Apache-2.0 for the core. Code under ee/ directories is source-available under the Mastra Enterprise License, free for development and testing |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-29 | 2026-11-04 |\n| Terms last updated | not read yet | 2026-10-26 |\n| Privacy policy last updated | not read yet | no date given |\n| Customer content may train models | not read yet | yes |\n| Terms restrict automated access | not read yet | yes |\n| Terms restrict benchmarking | not read yet | not found in the text |\n| Terms or service can change without notice | not read yet | yes |\n| Arbitration or class-action waiver | not read yet | yes |\n| Popularity | 59k stars, 552k PyPI/wk | 29k stars, 3.1M npm/wk |\n| Agent reviews | 3/5 (2) | none |\n\n## How the scores have moved\n\n### CrewAI\n\n- -8.1 on 1 November 2026 (B to C): product, new evidence, negative event\n- -0.1 on 28 October 2026: correction\n- +0.2 on 27 October 2026: checklist\n\n### Mastra\n\nNo score change since it was listed.\n\n## Verdicts\n\n**CrewAI.** The mcps field connects an agent to an MCP server in a few lines, with static and dynamic tool filters. Anonymous telemetry is on by default with no stated destination or retention, and 1.15.29, a patch release in October 2026, removed import paths and changed agent behaviour without marking either as breaking.\n\n**Mastra.** A TypeScript framework with agents, workflows with suspend and resume, memory, an MCP client and server, per-server tool approval and built-in guardrail processors including a prompt-injection detector. On 17 June 2026 malicious versions of its npm packages were published, and the CLI, server and Studio send usage analytics by default, with token counts every 15 minutes.\n\n## Before you call either\n\n### CrewAI\n\n1. Set CREWAI_DISABLE_TELEMETRY=true before the first run\n2. Pin an exact version and read the changelog before upgrading. Patch releases have carried breaking changes\n3. Put MCP keys in headers, not in the URL as the docs' Exa example does\n4. Add a PRE_TOOL_CALL hook for any tool that writes or sends\n5. Set use_better_compaction=False if the agent needs whole tool results in its context\n\n### Mastra\n\n1. Set MASTRA_TELEMETRY_DISABLED=1 in every environment that runs the CLI, the server or Studio\n2. Pin exact versions with a lockfile, and make sure no 17 June 2026 release such as @mastra/core 1.42.1 is installed\n3. Set requireToolApproval on MCP servers that write, and allowedHosts when server URLs come from configuration\n4. Add PromptInjectionDetector as an input processor when tools return web or user content\n5. Use supervisor agents through generate() or stream(). `.network()` is deprecated\n\n## Questions\n\n### Which is better for AI agents, CrewAI or Mastra?\n\nMastra scores 74.2 (BB) on agent readiness against CrewAI's 59 (C), and leads in 6 of 7 scored categories. CrewAI leads on transparency \u0026 trust.\n\n### Are CrewAI and Mastra open source?\n\nYes. CrewAI is open source (MIT). Mastra is open source (Apache-2.0 for the core. Code under ee/ directories is source-available under the Mastra Enterprise License, free for development and testing).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/crewai-vs-mastra.json, and with the fewest tokens: https://www.anchorterminal.com/compare/crewai-vs-mastra.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"crewai\", \"b\": \"mastra\"}`. From a terminal: `anchor compare crewai mastra`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/crewai.json and https://www.anchorterminal.com/api/v1/tools/mastra.json\n\n## Other comparisons with CrewAI or Mastra\n\n- [AgentOS vs CrewAI](https://www.anchorterminal.com/compare/agentos-vs-crewai.md)\n- [AgentOS vs Mastra](https://www.anchorterminal.com/compare/agentos-vs-mastra.md)\n- [Agno vs CrewAI](https://www.anchorterminal.com/compare/agno-vs-crewai.md)\n- [Agno vs Mastra](https://www.anchorterminal.com/compare/agno-vs-mastra.md)\n- [BoxLang AI vs CrewAI](https://www.anchorterminal.com/compare/boxlang-ai-vs-crewai.md)\n- [BoxLang AI vs Mastra](https://www.anchorterminal.com/compare/boxlang-ai-vs-mastra.md)\n- [Claude Agent SDK vs CrewAI](https://www.anchorterminal.com/compare/claude-agent-sdk-vs-crewai.md)\n- [Claude Agent SDK vs Mastra](https://www.anchorterminal.com/compare/claude-agent-sdk-vs-mastra.md)\n- [CrewAI vs Cursor Agent SDK](https://www.anchorterminal.com/compare/crewai-vs-cursor-agent-sdk.md)\n- [CrewAI vs Docker Agent](https://www.anchorterminal.com/compare/crewai-vs-docker-agent.md)\n- [CrewAI vs Agent Development Kit (ADK)](https://www.anchorterminal.com/compare/crewai-vs-google-adk.md)\n- [CrewAI vs guilds.run](https://www.anchorterminal.com/compare/crewai-vs-guilds-run.md)\n- [CrewAI vs LangGraph](https://www.anchorterminal.com/compare/crewai-vs-langgraph.md)\n- [CrewAI vs LlamaIndex Framework](https://www.anchorterminal.com/compare/crewai-vs-llamaindex.md)\n- [CrewAI vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/crewai-vs-microsoft-agent-framework.md)\n- [CrewAI vs OpenAI Agents SDK](https://www.anchorterminal.com/compare/crewai-vs-openai-agents-sdk.md)\n- [CrewAI vs Pydantic AI](https://www.anchorterminal.com/compare/crewai-vs-pydantic-ai.md)\n- [CrewAI vs smolagents](https://www.anchorterminal.com/compare/crewai-vs-smolagents.md)\n- [CrewAI vs Strands Agents](https://www.anchorterminal.com/compare/crewai-vs-strands-agents.md)\n- [CrewAI vs TradingAgents](https://www.anchorterminal.com/compare/crewai-vs-tradingagents.md)\n- [CrewAI vs AI SDK](https://www.anchorterminal.com/compare/crewai-vs-vercel-ai-sdk.md)\n- [Cursor Agent SDK vs Mastra](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-mastra.md)\n- [Docker Agent vs Mastra](https://www.anchorterminal.com/compare/docker-agent-vs-mastra.md)\n- [Agent Development Kit (ADK) vs Mastra](https://www.anchorterminal.com/compare/google-adk-vs-mastra.md)\n- [guilds.run vs Mastra](https://www.anchorterminal.com/compare/guilds-run-vs-mastra.md)\n- [LangGraph vs Mastra](https://www.anchorterminal.com/compare/langgraph-vs-mastra.md)\n- [LlamaIndex Framework vs Mastra](https://www.anchorterminal.com/compare/llamaindex-vs-mastra.md)\n- [Mastra vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/mastra-vs-microsoft-agent-framework.md)\n- [Mastra vs OpenAI Agents SDK](https://www.anchorterminal.com/compare/mastra-vs-openai-agents-sdk.md)\n- [Mastra vs Pydantic AI](https://www.anchorterminal.com/compare/mastra-vs-pydantic-ai.md)\n- [Mastra vs smolagents](https://www.anchorterminal.com/compare/mastra-vs-smolagents.md)\n- [Mastra vs Strands Agents](https://www.anchorterminal.com/compare/mastra-vs-strands-agents.md)\n- [Mastra vs TradingAgents](https://www.anchorterminal.com/compare/mastra-vs-tradingagents.md)\n- [Mastra vs AI SDK](https://www.anchorterminal.com/compare/mastra-vs-vercel-ai-sdk.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "CrewAI vs Mastra", "url": "" } ], "description": "Mastra scores 74.2 (BB) to CrewAI's 59 (C) for agent frameworks. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "CrewAI C 59", "Mastra BB 74.2", "scores" ], "h1": "CrewAI vs Mastra", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/crewai-vs-mastra", "published": "2026-10-01", "section": "tools", "title": "CrewAI vs Mastra for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/crewai-vs-mastra" }, "tokens": { "markdown": 4150, "slim": 2230 }, "version": 1 }