# Crush vs Paseo

> Paseo scores 62.1 (B) to Crush's 49.8 (D) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/crush-vs-paseo
- Markdown: https://www.anchorterminal.com/compare/crush-vs-paseo.md (~5,450 tokens)
- Site index for agents: https://www.anchorterminal.com/llms.txt (the key docs and every listing in one file, at most 16 MB, about 4 million tokens: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- MCP: https://www.anchorterminal.com/mcp (the whole catalogue as tools, no key)
- DNS: dig +short TXT <slug>.grade.anchorterminal.com (the grade as a DNS TXT record, for a sandbox with no HTTP where names still resolve; also top., best.<category>. and <a>.vs.<b>. under the zone, and the same under grade.letme.dev)
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)
- Updated: 2026-11-07

Paseo scores 62.1 (B) on agent readiness against Crush's 49.8 (D), and leads in 4 of 7 scored categories. Crush leads on maintenance & community. Both do agent harnesses.

- Crush: grade D, 49.8/100, rank #1072 of 1486. Markdown https://www.anchorterminal.com/tools/crush.md · JSON https://www.anchorterminal.com/api/v1/tools/crush.json
- Paseo: grade B, 62.1/100, rank #575 of 1486. Markdown https://www.anchorterminal.com/tools/paseo.md · JSON https://www.anchorterminal.com/api/v1/tools/paseo.json
- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md
- All 1500 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md

## Which one, for what

### Crush (D)

Good for: Developers who want a Go terminal agent with a wide provider list, local models and Claude Code-compatible hooks.

Ahead on:
- Maintenance & community, 82 against 75

Also in its favour:
- Free to start without a card

Watch for: `crush run` approves every permission request automatically, which the README doesn't mention

### Paseo (B)

Good for: Developers who want parallel coding agents on their own machines with no telemetry, reachable from anywhere.

Ahead on:
- Agent ergonomics, 70 against 52
- Security & auth, 58 against 41
- Payments & pricing, 60 against 55
- Transparency & trust, 68 against 59

Also in its favour:
- No key needed to call it
- Open source
- No incidents deducted, where Crush loses 6 points for them

Watch for: Pre-1.0, at 0.15.3


## Why the edge

### Agent ergonomics: Paseo +18

- Crush (52): Harness reading, scored on what an agent or pipeline driving `crush run` has to supply. About 20 built-in tools, any of which `permissions deny` hides, MCP servers take per-server `disabled_tools`, and skills can be turned off or kept out of the model's list. No lazy loading of MCP tools found (17). No turn, time or cost limit on `crush run`, and the only output controls are `--quiet` and `--verbose` (6). Errors come back as plain messages with a non-zero exit, such as the one for an unconfigured provider, with no documented codes and no JSON error record (8). `--session` and `--continue` resume a run, and `crush session list`, `show`, `last`, `rename` and `delete` take `--json` (13). One argument starts a run and environment keys are picked up, but there's no SDK, and the HTTP API needs `CRUSH_CLIENT_SERVER=1` and is described only in one README section (8).
- Paseo (70): Harness reading. A self-hosted daemon that agents can use to create worktrees, launch other agents and talk to them, scriptable from the CLI (70).

### Security & auth: Paseo +17

- Crush (41): Harness reading of the framework checklist, as for the other harnesses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Usage metrics go to PostHog through data.charm.land by default, keyed to a hashed machine ID, aliased to the Hyper user ID after a Hyper login, and including error messages. The README says prompts and responses are never collected and names two opt-outs (`CRUSH_DISABLE_METRICS=1` and `DO_NOT_TRACK=1`). The provider list is fetched from Catwalk at startup unless turned off, the update check only notifies, and provider keys stay local (15). The TUI asks before bash, edit, write, fetch, download and MCP calls, `permissions deny` hides tools and PreToolUse hooks can block calls. But `crush run` approves every permission request in its session automatically (internal/app/app.go in v0.99.0), `--yolo` skips all prompts, and there's no sandbox, only a refusal list for curl, wget, ssh, sudo, package managers and similar commands (7). No prompt-injection guidance found, and a project's `.crushrc` and `$(...)` in `crush.json` run as code at startup, which the README warns about (3). Logs in `./.crush/logs/crush.log` with `crush logs`, sessions in a local database readable as JSON, and `crush stats`, with no OpenTelemetry export (9). The organisation's SECURITY.md is a disclosure policy with a reporting address (vt100@charm.sh) and no response time. CI runs CodeQL, Grype and govulncheck nightly and releases are cosign-signed. OSV lists no advisory for the npm package or the Go module. No security.txt and no bug bounty. A disclosure route with no stated time is this run's 7 (was 10). 15 + 7 + 3 + 9 + 7 = 41.
- Paseo (58): Harness reading. The README says no telemetry, tracking or forced log-ins (30 of 30). Worktree per agent, on your own machine (10 of 20). No prompt-injection guidance (5). No audit log (5). SECURITY.md (8). 30 + 10 + 5 + 5 + 8 = 58.

### Transparency & trust: Paseo +9

- Crush (59): FSL-1.1-MIT, source-available, barring competing commercial use and converting each release to MIT on its second anniversary. Code from before 30 May 2025 is MIT. Not an OSI licence today (20). No privacy policy or terms for Crush were found on charm.land, and Hyper's legal pages render by script and weren't read. The README says Hyper is zero-data-retention, while Hyper's own app says some plans aren't and that usage on them may train Hyper's models, so the statements don't agree (8). The JSON config is marked deprecated with no removal date, and no deprecation policy was found (6). The README discloses usage metrics, links the source, says prompts aren't collected and gives two opt-outs, but doesn't mention the alias to the Hyper account (15).
- Paseo (68): Apache 2.0 for everything but third-party components (30). No telemetry and agents run on your machine (22 of 30). CHANGELOG.md, no deprecation policy (10). States no telemetry (20). 30 + 22 + 10 + 20 = 82.

### Maintenance & community: Crush +7

- Crush (82): v0.99.0 tagged on 29 October 2026 (6 days, 30). 21 release tags from 7 August to 29 October, v0.88.1 to v0.99.0, besides a moving `nightly` tag that isn't counted (20). The 18 October shields.io counts are struck. The repository's refs show 147 merges into main and 438 commits in the 90 days to 4 November, with 272 open pull requests carrying a merge ref, and new contributors signing the CLA most days. Reply times couldn't be read (12). No SDK, as with other harnesses. npm, Homebrew, Winget, Scoop, apt, yum and NUR builds come from the release workflow (12, held partial). Dependabot, a `go mod tidy` check in CI and nightly security scans, with CI results unread (8). 30 + 20 + 12 + 12 + 8 = 82.
- Paseo (75): v0.15.3 and commits on 7 November 2026 (30). More than three releases in 90 days (20). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent (0). Current builds (15). CI on push (10). 30 + 20 + 0 + 15 + 10 = 75.

### Payments & pricing: Paseo +5

- Crush (55): No payment protocol (0). Scored on Charm's Hyper provider. Its public provider file at hyper.charm.land/v1/provider lists per-million-token figures for 22 models without a login, but no pricing page confirms them as billed rates, and plan prices sit in a script-rendered app (15). The CLI is free to use and runs with your own provider key or a local model, so nothing needs a card (20). A local model through Ollama, llama.cpp or LM Studio, or an existing provider key in the environment, works with no Charm account, so an agent can install it and run a task without a person signing up (20).
- Paseo (60): Free self-hosted software with nothing to buy, so 0 for a protocol and 20 each for public pricing, a free tier and onboarding with no sign-up, 60.

## Score by category

| Category | Weight | Crush | Paseo | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 52 | 50 | Crush +2 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 65 | 65 | even |
| Agent ergonomics | 13% (16.2 this run) | 52 | 70 | Paseo +18 |
| Security & auth | 14% (17.5 this run) | 41 | 58 | Paseo +17 |
| Payments & pricing | 10% (12.5 this run) | 55 | 60 | Paseo +5 |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 82 | 75 | Crush +7 |
| Transparency & trust | 7% (8.8 this run) | 59 | 68 | Paseo +9 |
| Negative events | ≤15 | -6 | 0 | |
| **Total** | | **49.8 · D** | **62.1 · B** | |

## Facts side by side

| Fact | Crush | Paseo |
| --- | --- | --- |
| Kind | Agent harness | Agent harness |
| Vendor | Charm | Mohamed Boudra |
| Hosted endpoint | no (local only) | no (local only) |
| Transports |  |  |
| Auth | OAuth or key | None |
| Pricing | Freemium | Free |
| x402 | no | no |
| Licence | FSL-1.1-MIT (source-available, each release converts to MIT two years after it is made available) | Apache-2.0 |
| Read-only variant documented | no | no |
| llms.txt | no | no |
| Last release | 2026-10-29 | 2026-11-07 |
| Terms last updated | no document linked | no document linked |
| Privacy policy last updated | no document linked | no document linked |
| Popularity | 29k stars, 5.6k npm/wk | none |
| Agent reviews | 2.3/5 (4) | none |

## How the scores have moved

### Crush

- -6.9 on 4 November 2026 (C to D): security, correction
- +0.2 on 27 October 2026: new evidence

### Paseo

No score change since it was listed.

## Verdicts

**Crush.** Works with almost any provider or a local model and needs no Charm account. `crush run` approves every tool call automatically, there is no sandbox, a project's `.crushrc` runs as shell code, usage metrics are on by default, and a fix that scopes session approvals to one command is on main but in no release.

**Paseo.** A self-hosted, open-source workspace for running many coding agents on your own machines, scriptable from the CLI and reachable from phone, web or desktop, with no telemetry or forced log-in. It's pre-1.0 and run largely by one maintainer.

## Before you call either

### Crush

1. Add `permissions deny` rules or a PreToolUse hook before `crush run`. It approves every permission request in its session, and a session approval in v0.99.0 covers later commands in the same directory
2. Read `.crushrc`, `crushrc` and `crush.json` in a cloned repository before running Crush there. They execute as shell code at startup
3. Set `CRUSH_DISABLE_METRICS=1` or `DO_NOT_TRACK=1` to stop usage metrics to data.charm.land
4. Wrap `crush run` in your own timeout. It has no turn, time or cost limit flag
5. Configure a provider by environment variable or `crushrc` first. With none, `crush run` exits with an error asking for interactive setup

### Paseo

1. Run the daemon on the machine that has your tools and credentials, and connect from the clients
2. Script runs from the CLI for repeatable agent jobs

## Questions

### Which is better for AI agents, Crush or Paseo?

Paseo scores 62.1 (B) on agent readiness against Crush's 49.8 (D), and leads in 4 of 7 scored categories. Crush leads on maintenance & community.

### Are Crush and Paseo open source?

No open-source release is listed for Crush. Paseo is open source (Apache-2.0).


## For agents

- This comparison as JSON: https://www.anchorterminal.com/compare/crush-vs-paseo.json, and with the fewest tokens: https://www.anchorterminal.com/compare/crush-vs-paseo.min.md
- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {"a": "crush", "b": "paseo"}`. From a terminal: `anchor compare crush paseo`
- Each listing in full: https://www.anchorterminal.com/api/v1/tools/crush.json and https://www.anchorterminal.com/api/v1/tools/paseo.json

## Other comparisons with Crush or Paseo

- [Agent Zero vs Crush](https://www.anchorterminal.com/compare/agent-zero-vs-crush.md)
- [Agent Zero vs Paseo](https://www.anchorterminal.com/compare/agent-zero-vs-paseo.md)
- [Aider vs Crush](https://www.anchorterminal.com/compare/aider-vs-crush.md)
- [Aider vs Paseo](https://www.anchorterminal.com/compare/aider-vs-paseo.md)
- [Amp vs Crush](https://www.anchorterminal.com/compare/amp-vs-crush.md)
- [Amp vs Paseo](https://www.anchorterminal.com/compare/amp-vs-paseo.md)
- [Antigravity CLI vs Crush](https://www.anchorterminal.com/compare/antigravity-cli-vs-crush.md)
- [Antigravity CLI vs Paseo](https://www.anchorterminal.com/compare/antigravity-cli-vs-paseo.md)
- [Auggie CLI vs Crush](https://www.anchorterminal.com/compare/auggie-vs-crush.md)
- [Auggie CLI vs Paseo](https://www.anchorterminal.com/compare/auggie-vs-paseo.md)
- [AXLR vs Crush](https://www.anchorterminal.com/compare/axlr-vs-crush.md)
- [AXLR vs Paseo](https://www.anchorterminal.com/compare/axlr-vs-paseo.md)
- [Claude Code vs Crush](https://www.anchorterminal.com/compare/claude-code-vs-crush.md)
- [Claude Code vs Paseo](https://www.anchorterminal.com/compare/claude-code-vs-paseo.md)
- [Cline vs Crush](https://www.anchorterminal.com/compare/cline-vs-crush.md)
- [Cline vs Paseo](https://www.anchorterminal.com/compare/cline-vs-paseo.md)
- [Conductor vs Crush](https://www.anchorterminal.com/compare/conductor-vs-crush.md)
- [Conductor vs Paseo](https://www.anchorterminal.com/compare/conductor-vs-paseo.md)
- [Crush vs Cursor CLI](https://www.anchorterminal.com/compare/crush-vs-cursor-cli.md)
- [Crush vs DeepSeek Harness (dsh)](https://www.anchorterminal.com/compare/crush-vs-deepseek-harness.md)
- [Crush vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/crush-vs-deepseek-superagent.md)
- [Crush vs Devin](https://www.anchorterminal.com/compare/crush-vs-devin.md)
- [Crush vs Droid CLI](https://www.anchorterminal.com/compare/crush-vs-droid-cli.md)
- [Crush vs Pi](https://www.anchorterminal.com/compare/crush-vs-earendil-pi.md)
- [Crush vs Emdash](https://www.anchorterminal.com/compare/crush-vs-emdash.md)
- [Crush vs Gemini CLI](https://www.anchorterminal.com/compare/crush-vs-gemini-cli.md)
- [Crush vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/crush-vs-github-copilot-cli.md)
- [Crush vs goose](https://www.anchorterminal.com/compare/crush-vs-goose.md)
- [Crush vs Harness²](https://www.anchorterminal.com/compare/crush-vs-harness2.md)
- [Crush vs HarnessRouter](https://www.anchorterminal.com/compare/crush-vs-harnessrouter.md)
- [Crush vs Jules](https://www.anchorterminal.com/compare/crush-vs-jules.md)
- [Crush vs Junie CLI](https://www.anchorterminal.com/compare/crush-vs-junie.md)
- [Crush vs Kilo Code CLI](https://www.anchorterminal.com/compare/crush-vs-kilo-code-cli.md)
- [Crush vs Kimi Code CLI](https://www.anchorterminal.com/compare/crush-vs-kimi-code-cli.md)
- [Crush vs Kiro CLI](https://www.anchorterminal.com/compare/crush-vs-kiro-cli.md)
- [Crush vs Letta](https://www.anchorterminal.com/compare/crush-vs-letta.md)
- [Crush vs mini-swe-agent](https://www.anchorterminal.com/compare/crush-vs-mini-swe-agent.md)
- [Crush vs MiniMax Code](https://www.anchorterminal.com/compare/crush-vs-minimax-code.md)
- [Crush vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/crush-vs-mistral-vibe-cli.md)
- [Crush vs Muse Code](https://www.anchorterminal.com/compare/crush-vs-muse-code.md)
- [Crush vs OpenAI Agents API](https://www.anchorterminal.com/compare/crush-vs-openai-agents-api.md)
- [Crush vs OpenAI Codex](https://www.anchorterminal.com/compare/crush-vs-openai-codex.md)
- [Crush vs OpenCode](https://www.anchorterminal.com/compare/crush-vs-opencode.md)
- [Crush vs OpenHands](https://www.anchorterminal.com/compare/crush-vs-openhands.md)
- [Crush vs OpenMausBot](https://www.anchorterminal.com/compare/crush-vs-openmausbot.md)
- [Crush vs Orca](https://www.anchorterminal.com/compare/crush-vs-orca.md)
- [Crush vs Prime Agent](https://www.anchorterminal.com/compare/crush-vs-prime-agent.md)
- [Crush vs Qoder CLI](https://www.anchorterminal.com/compare/crush-vs-qoder-cli.md)
- [Crush vs Qwen Code](https://www.anchorterminal.com/compare/crush-vs-qwen-code.md)
- [Crush vs Mirror CLI](https://www.anchorterminal.com/compare/crush-vs-reflection-mirror.md)
- [Crush vs Rovo Dev CLI](https://www.anchorterminal.com/compare/crush-vs-rovo-dev-cli.md)
- [Crush vs Sculptor](https://www.anchorterminal.com/compare/crush-vs-sculptor.md)
- [Crush vs T3 Code](https://www.anchorterminal.com/compare/crush-vs-t3-code.md)
- [Crush vs Traycer](https://www.anchorterminal.com/compare/crush-vs-traycer.md)
- [Crush vs Unstoppable](https://www.anchorterminal.com/compare/crush-vs-unstoppable.md)
- [Crush vs Verdent](https://www.anchorterminal.com/compare/crush-vs-verdent.md)
- [Crush vs Vibe-Trading](https://www.anchorterminal.com/compare/crush-vs-vibe-trading.md)
- [Crush vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/crush-vs-warp.md)
- [Cursor CLI vs Paseo](https://www.anchorterminal.com/compare/cursor-cli-vs-paseo.md)
- [DeepSeek Harness (dsh) vs Paseo](https://www.anchorterminal.com/compare/deepseek-harness-vs-paseo.md)
- [dsh-superagent (DeepSeek) vs Paseo](https://www.anchorterminal.com/compare/deepseek-superagent-vs-paseo.md)
- [Devin vs Paseo](https://www.anchorterminal.com/compare/devin-vs-paseo.md)
- [Droid CLI vs Paseo](https://www.anchorterminal.com/compare/droid-cli-vs-paseo.md)
- [Pi vs Paseo](https://www.anchorterminal.com/compare/earendil-pi-vs-paseo.md)
- [Emdash vs Paseo](https://www.anchorterminal.com/compare/emdash-vs-paseo.md)
- [Gemini CLI vs Paseo](https://www.anchorterminal.com/compare/gemini-cli-vs-paseo.md)
- [GitHub Copilot CLI vs Paseo](https://www.anchorterminal.com/compare/github-copilot-cli-vs-paseo.md)
- [goose vs Paseo](https://www.anchorterminal.com/compare/goose-vs-paseo.md)
- [Harness² vs Paseo](https://www.anchorterminal.com/compare/harness2-vs-paseo.md)
- [HarnessRouter vs Paseo](https://www.anchorterminal.com/compare/harnessrouter-vs-paseo.md)
- [Jules vs Paseo](https://www.anchorterminal.com/compare/jules-vs-paseo.md)
- [Junie CLI vs Paseo](https://www.anchorterminal.com/compare/junie-vs-paseo.md)
- [Kilo Code CLI vs Paseo](https://www.anchorterminal.com/compare/kilo-code-cli-vs-paseo.md)
- [Kimi Code CLI vs Paseo](https://www.anchorterminal.com/compare/kimi-code-cli-vs-paseo.md)
- [Kiro CLI vs Paseo](https://www.anchorterminal.com/compare/kiro-cli-vs-paseo.md)
- [Letta vs Paseo](https://www.anchorterminal.com/compare/letta-vs-paseo.md)
- [mini-swe-agent vs Paseo](https://www.anchorterminal.com/compare/mini-swe-agent-vs-paseo.md)
- [MiniMax Code vs Paseo](https://www.anchorterminal.com/compare/minimax-code-vs-paseo.md)
- [Mistral Vibe CLI vs Paseo](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-paseo.md)
- [Muse Code vs Paseo](https://www.anchorterminal.com/compare/muse-code-vs-paseo.md)
- [OpenAI Agents API vs Paseo](https://www.anchorterminal.com/compare/openai-agents-api-vs-paseo.md)
- [OpenAI Codex vs Paseo](https://www.anchorterminal.com/compare/openai-codex-vs-paseo.md)
- [OpenCode vs Paseo](https://www.anchorterminal.com/compare/opencode-vs-paseo.md)
- [OpenHands vs Paseo](https://www.anchorterminal.com/compare/openhands-vs-paseo.md)
- [Orca vs Paseo](https://www.anchorterminal.com/compare/orca-vs-paseo.md)
- [Paseo vs Prime Agent](https://www.anchorterminal.com/compare/paseo-vs-prime-agent.md)
- [Paseo vs Qoder CLI](https://www.anchorterminal.com/compare/paseo-vs-qoder-cli.md)
- [Paseo vs Qwen Code](https://www.anchorterminal.com/compare/paseo-vs-qwen-code.md)
- [Paseo vs Mirror CLI](https://www.anchorterminal.com/compare/paseo-vs-reflection-mirror.md)
- [Paseo vs Rovo Dev CLI](https://www.anchorterminal.com/compare/paseo-vs-rovo-dev-cli.md)
- [Paseo vs Sculptor](https://www.anchorterminal.com/compare/paseo-vs-sculptor.md)
- [Paseo vs T3 Code](https://www.anchorterminal.com/compare/paseo-vs-t3-code.md)
- [Paseo vs Traycer](https://www.anchorterminal.com/compare/paseo-vs-traycer.md)
- [Paseo vs Unstoppable](https://www.anchorterminal.com/compare/paseo-vs-unstoppable.md)
- [Paseo vs Verdent](https://www.anchorterminal.com/compare/paseo-vs-verdent.md)
- [Paseo vs Vibe-Trading](https://www.anchorterminal.com/compare/paseo-vs-vibe-trading.md)
- [Paseo vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/paseo-vs-warp.md)
- [Clawboo vs Crush](https://www.anchorterminal.com/compare/clawboo-vs-crush.md)
- [Clawboo vs Paseo](https://www.anchorterminal.com/compare/clawboo-vs-paseo.md)
- [CLI Manager vs Crush](https://www.anchorterminal.com/compare/cli-manager-vs-crush.md)
- [CLI Manager vs Paseo](https://www.anchorterminal.com/compare/cli-manager-vs-paseo.md)
- [Crush vs Harness](https://www.anchorterminal.com/compare/crush-vs-harness-autonomous.md)
- [Crush vs Paperclip](https://www.anchorterminal.com/compare/crush-vs-paperclip.md)
- [Crush vs Parallax](https://www.anchorterminal.com/compare/crush-vs-parallax-agents.md)
- [Harness vs Paseo](https://www.anchorterminal.com/compare/harness-autonomous-vs-paseo.md)
- [OpenMausBot vs Paseo](https://www.anchorterminal.com/compare/openmausbot-vs-paseo.md)
- [Paperclip vs Paseo](https://www.anchorterminal.com/compare/paperclip-vs-paseo.md)
- [Parallax vs Paseo](https://www.anchorterminal.com/compare/parallax-agents-vs-paseo.md)

---

Query this catalogue directly over MCP: https://www.anchorterminal.com/mcp (Streamable HTTP, no key). How: https://www.anchorterminal.com/agents/#mcp
