{ "data": { "a": { "slug": "cursor-agent-sdk", "name": "Cursor Agent SDK", "vendor": "Cursor", "vendorUrl": "https://cursor.com/docs/agent-sdk", "kind": "framework", "category": "frameworks", "summary": "Cursor's TypeScript framework for defining an agent as a folder of instructions, typed tools, skills, MCP connections and channels, testing it with evals, and running it on your own server or on Cursor's hosting.", "url": "https://www.anchorterminal.com/tools/cursor-agent-sdk", "markdownUrl": "https://www.anchorterminal.com/tools/cursor-agent-sdk.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/cursor-agent-sdk.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/cursor-agent-sdk.json", "license": "Proprietary. The package's LICENSE.md reads \"© Anysphere Inc. All rights reserved\", with use subject to Cursor's Terms of Service (updated 3 September 2026). No source repository is published", "transports": [], "packages": [ { "registry": "npm", "name": "@grok/agent-sdk" } ], "auth": "mixed", "authNotes": "Model turns need a Cursor credential. `agent-sdk login` opens a browser sign-in and stores the key it creates, or pass a user API key from the dashboard or a team service-account key as `--api-key`, `CURSOR_API_KEY`, `CURSOR_API_KEY_FILE` or `CURSOR_SERVICE_ACCOUNT_KEY`. `logout` doesn't revoke the key. Direct tool calls without a model turn need no Cursor key. A self-hosted server is protected with `--bearer-token`, and a deployment's routes with an alias token.", "pricing": "byo-plan", "pricingNotes": "The package is free to install. Model turns draw on the Cursor plan of the key's owner, Free ($0, limited agent requests) to Ultra ($200 a month), and beyond the weekly pool the default model, Grok 4.5 with Fast on, is $4 per million input tokens and $18 per million output tokens. No price for Cursor-managed hosting and no statement of which plans include the Agent SDK were found (checked 2026-10-27).", "priceSummary": "Your plan", "where": "library", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Agent SDK docs, the npm package or the pricing page (checked 2026-10-27).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-27" }, "docsUrl": "https://cursor.com/docs/agent-sdk", "llmsTxt": "https://cursor.com/llms.txt", "capabilities": [ "agent.framework", "agent.mcp-client", "agent.durable", "agent.multi-agent", "obs.evals" ], "tags": [ "official", "framework", "typescript", "closed-source", "mcp", "llms-txt", "pre-1.0", "self-hosted", "hosted", "new" ], "lastRelease": "2026-10-25", "graded": true, "anchor": { "graded": true, "score": 63.6, "grade": "B", "agentReady": false, "rank": 443, "ranked": true, "rankOf": 1217, "categoryRank": 12, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 80, "maintenance": 74, "payments": 30, "reliability": 45, "schema": 82, "security": 68, "transparency": 70 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-27" }, "negative": 0, "verdict": "An agent-as-code framework with typed tools, declared read and write effects that drive retries and dry runs, an approval gate per tool and evals that assert on tool calls. It's closed source, every model turn runs through Cursor's backend on a Cursor plan, local sandboxing is off by default, and the changelog has two entries.", "bestFor": "Teams already on Cursor who want version-controlled agents for pull request review, triage and Slack, with evals in CI and one-command hosting.", "strengths": [ "Tools declare a read, write or idempotent effect. Only reads and idempotent calls retry, and dry-run sessions stub writes", "`needsApproval` on a tool parks the call until a person approves, and `ctx.approvedBy` records who did", "Evals assert which tools ran, with what input, and the reply's shape, and `github replay` turns a real pull request into signed test deliveries", "Every page has a Markdown twin listed in cursor.com/llms.txt, and the package ships the same docs and an llms.txt", "Sessions keep a record of every message and tool call, and OpenTelemetry export stays off until an endpoint is set" ], "weaknesses": [ "Closed source under Cursor's terms, with no public repository, CI or issue tracker", "Every model turn runs through Cursor's backend with a Cursor credential, including on a self-hosted server", "Local sandboxing is off by default, so shell commands auto-approve with the host's credentials", "The changelog has two entries, 0.2.29 and 0.3.0, both dated 23 October 2026. The 27 earlier @cursor/bdk versions have none", "The launch post's install command names a package that doesn't exist on npm" ], "agentNotes": [ "Install `@grok/agent-sdk`, not `@cursor/agent-sdk` from the launch post. That name answers 404 on npm", "Set `local.sandbox` before a turn reads webhook payloads, pull request diffs or chat. Without it shell commands auto-approve with the host's credentials", "Give every tool an `effect`. A tool without one counts as a write, runs once and is stubbed in dry runs", "Start `agent-sdk serve` with `--bearer-token` on any shared host. `--allow-anonymous` admits every caller as one principal", "Delete bot/hooks/memory.ts when sessions serve different people. The journal shares each turn's message and result with later turns" ], "metrics": { "kind": "library", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 63.6 } ], "editorialScores": { "ergonomics": 80, "maintenance": 74, "payments": 30, "reliability": 45, "schema": 82, "security": 68, "transparency": 49 }, "provenanceScore": 91, "checked": { "categories": { "ergonomics": "2026-10-27", "maintenance": "2026-10-27", "payments": "2026-10-27", "reliability": "2026-10-27", "schema": "2026-10-27", "security": "2026-10-27", "transparency": "2026-10-27" }, "last": "2026-10-27", "oldest": "2026-10-27", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install --global @grok/agent-sdk", "headless": { "run": "agent-sdk run --dir . --message \"Introduce yourself in one sentence.\"" } }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/cursor-agent-sdk" }, "sameCompany": [ "cursor-cli", "grok-bot" ], "area": "frameworks", "unitPrices": [ { "item": "Grok 4.5 Fast (the default model) input, beyond the weekly pool", "unit": "1m-tokens", "usd": 4, "note": "cache reads $1" }, { "item": "Grok 4.5 Fast (the default model) output, beyond the weekly pool", "unit": "1m-tokens", "usd": 18 }, { "item": "Grok 4.5 input, Fast off, beyond the weekly pool", "unit": "1m-tokens", "usd": 2, "note": "cache reads $0.50" }, { "item": "Grok 4.5 output, Fast off, beyond the weekly pool", "unit": "1m-tokens", "usd": 6 }, { "item": "Premium plan (first plan with Cloud Agents and third-party models)", "unit": "month", "usd": 30 } ], "provenance": { "legalEntity": "Anysphere, Inc.", "domain": "cursor.com", "domainRegistered": "1995-12-20", "endpointOnVendorDomain": null, "terms": "https://cursor.com/terms-of-service", "privacy": "https://cursor.com/privacy", "statusPage": "https://status.cursor.com", "changelog": "https://cursor.com/docs/agent-sdk/changelog", "securityTxt": "valid", "checked": "2026-10-27", "notes": [ "The package's LICENSE.md and the site footer name Anysphere, Inc. The terms of service are dated 3 September 2026 and the privacy policy 11 October 2026.", "RDAP (Verisign) gives cursor.com a registration date of 1995-12-20.", "cursor.com/.well-known/security.txt has a Contact line pointing to github.com/getcursor/cursor/security and a secondary email, and no Expires line. The site's tracker reads a file with a Contact and no Expires as valid, as on the Cursor CLI listing.", "The footer links status.cursor.com. Its robots.txt answered with a Cloudflare challenge on 27 October 2026, so the status page wasn't read.", "The npm package's repository field points to github.com/cursor/cursor, which holds only a README and SECURITY.md." ], "score": 91 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/cursor-agent-sdk.json", "live": { "slug": "cursor-agent-sdk", "vendorStatus": { "page": "https://status.cursor.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-27T15:27:31.018056367Z" }, "securityTxt": { "url": "https://cursor.com/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-27T15:32:47.182469794Z" }, "llmsTxt": { "url": "https://cursor.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-27T14:57:46.410898693Z" }, "updatedAt": "2026-10-27T15:32:47.182469794Z" } }, "answer": "Pydantic AI scores 81.7 (A) on agent readiness against Cursor Agent SDK's 63.6 (B), and leads in every scored category.", "b": { "slug": "pydantic-ai", "name": "Pydantic AI", "vendor": "Pydantic", "vendorUrl": "https://pydantic.dev", "kind": "framework", "category": "frameworks", "summary": "Typed Python agent framework for 25+ model providers, with MCP, A2A and durable execution.", "url": "https://www.anchorterminal.com/tools/pydantic-ai", "markdownUrl": "https://www.anchorterminal.com/tools/pydantic-ai.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/pydantic-ai.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/pydantic-ai.json", "repo": "https://github.com/pydantic/pydantic-ai", "license": "MIT", "transports": [], "packages": [ { "registry": "pypi", "name": "pydantic-ai" } ], "auth": "none", "authNotes": "A library. Credentials are for the models and tools you use.", "pricing": "free", "pricingNotes": "Free and open source. You pay for the model calls it makes. Logfire for tracing is free for personal use, $49 a month for teams.", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 20192, "npmWeekly": null, "pypiWeekly": 1276452, "asOf": "2026-09-26" }, "docsUrl": "https://pydantic.dev/docs/ai/overview/", "llmsTxt": "https://pydantic.dev/docs/ai/llms.txt", "capabilities": [ "agent.framework", "agent.multi-agent", "agent.durable", "agent.mcp-client" ], "tags": [ "framework", "python", "open-source", "typed", "no-telemetry" ], "lastRelease": "2026-10-16", "graded": true, "anchor": { "graded": true, "score": 81.7, "grade": "A", "agentReady": true, "rank": 6, "ranked": true, "rankOf": 1217, "categoryRank": 3, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 95, "maintenance": 90, "payments": 60, "reliability": 83, "schema": 100, "security": 95, "transparency": 85 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "high", "date": "2026-10-17" }, "negative": -6, "negativeNotes": [ "2026-02-06. Two high-severity advisories, server-side request forgery in URL download handling (GHSA-2jrp-274c-jhv3, CVE-2026-25580) and stored XSS through path traversal in the web UI's CDN URL (GHSA-wjp5-868j-wqv7). Both fixed and published, and more than eight months old, so 1 point each. Eight moderate and two low advisories from May to October 2026, three of them bypasses of its cloud-metadata blocklist, weren't deducted. https://github.com/pydantic/pydantic-ai/security", "2026-08-12. High-severity advisory GHSA-h4xc-3qfq-jf93 (CVSS 7.6). A website the developer visited could trigger agent runs and server-side tool execution through the local web chat UI (`Agent.to_web()`, `clai web`). Fixed in 2.28.0 and 1.107.4 and published, under two months old, so 2 points. It wasn't in the 1 October dossier. https://github.com/pydantic/pydantic-ai/security/advisories/GHSA-h4xc-3qfq-jf93", "2026-10-08. High-severity advisory GHSA-6fqq-452j-qhrp (CVE-2026-107286, CVSS 7.5, availability only). With `ConcurrencyLimitedModel` or `limit_model_concurrency`, a streamed request that ended early could keep its slot, so a network client could exhaust a shared limiter by starting streams and disconnecting. Fixed in 2.53.0 on 2 October and added to the GitHub Advisory Database on 8 October, after the 4 October check, so 2 points as for the other fixed High under two months old. https://osv.dev/vulnerability/GHSA-6fqq-452j-qhrp" ], "verdict": "Typed outputs and tools, validated by Pydantic, with failed validations sent back to the model. Python only.", "bestFor": "Python teams that want typed, validated outputs and tools, many model providers and durable runs on an engine they already use.", "strengths": [ "Typed outputs and tools, validated by Pydantic, with failed validations sent back to the model", "No telemetry until you configure OpenTelemetry or Logfire, and the docs say nothing is sent otherwise", "Durable execution on nine engines, including Temporal, DBOS, Prefect, Restate and AWS Lambda", "Read-only workspaces in core, and Harness sandboxes for commands and model-written code", "A written version policy, with deprecations kept until the next major and V1 security releases still shipping" ], "weaknesses": [ "Python only, and 3.11 or newer since 2.55.0", "560 open issues and 219 open pull requests (1 October count)", "Fourteen advisories in 2026, four high, including SSRF, three cloud-metadata blocklist bypasses and a cross-site flaw in the web chat UI", "Sandboxes, guardrails and the injection defender live in the Harness, a separate 0.x package classed Alpha", "The Prompt Injection Defender passes results through unchanged unless `block_high_risk=True` is set" ], "agentNotes": [ "Define the output type first. Validation retries fix most malformed answers without a prompt change, and the test model checks the wiring with no key", "Use streamable HTTP for MCP, since SSE is deprecated. Call `.defer_loading()` on large MCP servers so their tools stay out of context until searched", "Set usage limits on every run that calls paid models", "Give model-run commands `LocalWorkspace(read_only=True)` or a Harness sandbox. A plain `LocalWorkspace` runs them on your machine as you", "Stay on 2.53.0 or later. 2026 advisories hit URL downloads, the cloud-metadata blocklist, the local web chat UI and streamed requests under a shared concurrency limiter" ], "metrics": { "kind": "library", "measured": false }, "reviewCount": 8, "avgRating": 4, "history": [ { "basis": "public evidence", "confidence": "high", "grade": "A", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 81.7 } ], "editorialScores": { "ergonomics": 95, "maintenance": 90, "payments": 60, "reliability": 83, "schema": 100, "security": 95, "transparency": 95 }, "provenanceScore": 75, "checked": { "categories": { "ergonomics": "2026-10-17", "maintenance": "2026-10-17", "payments": "2026-10-17", "reliability": "2026-10-17", "schema": "2026-10-17", "security": "2026-10-17", "transparency": "2026-10-17" }, "last": "2026-10-17", "lastMoved": "2026-10-17", "oldest": "2026-10-17", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install pydantic-ai" }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/pydantic-ai" }, "sameCompany": [ "pydantic-logfire" ], "area": "frameworks", "unitPrices": [ { "item": "Logfire Team", "unit": "month", "usd": 49, "note": "tracing, personal use free" } ], "provenance": { "legalEntity": "Pydantic Services Inc.", "domain": "pydantic.dev", "domainRegistered": "2022-04-24", "endpointOnVendorDomain": null, "terms": "https://pydantic.dev/legal/terms-of-service", "privacy": "https://pydantic.dev/legal/privacy-policy", "statusPage": "", "changelog": "https://pydantic.dev/docs/ai/project/changelog/", "securityTxt": "valid", "checked": "2026-10-04", "score": 75 }, "requirements": { "card": "unknown", "freeTier": true, "minutes": 5, "credential": "api-key", "hosting": [ "self-hosted" ], "euResidency": "unknown", "trainsOnData": "no", "zeroRetention": "unknown", "selfHost": "yes" }, "pageJsonUrl": "https://www.anchorterminal.com/tools/pydantic-ai.json", "live": { "slug": "pydantic-ai", "versions": [ { "registry": "github", "name": "pydantic/pydantic-ai", "version": "v2.62.0", "released": "2026-10-27", "seenAt": "2026-10-27T11:26:53.083601655Z" }, { "registry": "pypi", "name": "pydantic-ai", "version": "2.62.0", "released": "2026-10-27", "seenAt": "2026-10-27T11:26:52.971067923Z" } ], "githubStars": 20903, "pypiWeekly": 1567393, "securityTxt": { "url": "https://pydantic.dev/.well-known/security.txt", "state": "valid", "expires": "2027-09-17T00:00:00.000Z", "checkedAt": "2026-10-27T15:31:35.740674325Z" }, "llmsTxt": { "url": "https://pydantic.dev/docs/ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-27T14:59:02.654863029Z" }, "domain": { "domain": "pydantic.dev", "registered": "2022-04-24", "source": "https://pubapi.registry.google/rdap/domain/pydantic.dev", "checkedAt": "2026-10-25T14:02:31.184796059Z" }, "pages": [ { "url": "https://pydantic.dev/docs/ai/project/changelog/", "kind": "changelog", "status": 200, "checkedAt": "2026-10-27T03:52:51.430017357Z", "changedAt": "2026-10-25T02:53:30.810667404Z", "fingerprint": "60d5eaa47d30" }, { "url": "https://pydantic.dev/articles/pydantic-ai-v2", "kind": "deprecations", "status": 200, "checkedAt": "2026-10-27T03:52:47.381315981Z", "changedAt": "2026-10-22T01:23:58.196764863Z", "fingerprint": "35f3482876af" }, { "url": "https://pydantic.dev/legal/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-27T03:52:53.458882398Z", "changedAt": "2026-10-07T18:08:45.478164751Z", "fingerprint": "ffa3b6106e3d" }, { "url": "https://pydantic.dev/legal/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-10-27T03:52:55.42918681Z", "changedAt": "2026-10-07T18:08:47.356836571Z", "fingerprint": "39f75457a65a" } ], "github": { "repo": "pydantic/pydantic-ai", "checkedAt": "2026-10-26T07:58:58.226919484Z", "stars": 20877, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-26T03:50:14Z", "openIssues": 1048, "openPRs": 442, "issuesOpened90d": 1505, "issuesClosed90d": 947, "prsMerged90d": 1843, "ci": { "branch": "main", "runs": 50, "success": 46, "failure": 4, "other": 0, "latest": "failure", "latestAt": "2026-10-25T22:58:00Z" }, "advisories": [ { "ghsa": "GHSA-4whf-38hw-pxxh", "severity": "high", "published": "2026-10-21T05:06:29Z" }, { "ghsa": "GHSA-xv4x-g8mx-ch56", "severity": "medium", "published": "2026-10-20T05:42:04Z" }, { "ghsa": "GHSA-5pfm-2g3g-gh85", "severity": "medium", "published": "2026-10-20T05:31:48Z" }, { "ghsa": "GHSA-6fqq-452j-qhrp", "cve": "CVE-2026-107286", "severity": "high", "published": "2026-10-02T03:19:39Z" }, { "ghsa": "GHSA-v36g-jcw9-x7cw", "cve": "CVE-2026-107287", "severity": "medium", "published": "2026-09-30T01:31:43Z" }, { "ghsa": "GHSA-4x9p-g9wm-8q7f", "cve": "CVE-2026-107291", "severity": "low", "published": "2026-09-17T04:14:30Z" }, { "ghsa": "GHSA-fpf4-vwcp-v4hp", "cve": "CVE-2026-107290", "severity": "medium", "published": "2026-09-17T04:14:29Z" }, { "ghsa": "GHSA-22h6-qm39-v87j", "cve": "CVE-2026-107288", "severity": "low", "published": "2026-09-17T04:14:28Z" }, { "ghsa": "GHSA-vmxc-h2x2-jmf3", "cve": "CVE-2026-107289", "severity": "medium", "published": "2026-09-17T04:14:27Z" }, { "ghsa": "GHSA-q2xc-rrxj-58x9", "cve": "CVE-2026-107292", "severity": "medium", "published": "2026-08-14T02:58:39Z" }, { "ghsa": "GHSA-3gh4-cghq-f8v4", "cve": "CVE-2026-107293", "severity": "low", "published": "2026-08-12T04:02:44Z" }, { "ghsa": "GHSA-h4xc-3qfq-jf93", "cve": "CVE-2026-107295", "severity": "high", "published": "2026-08-12T04:02:43Z" }, { "ghsa": "GHSA-v2xh-2vp8-57h8", "cve": "CVE-2026-107294", "severity": "medium", "published": "2026-08-08T03:33:55Z" }, { "ghsa": "GHSA-jpr8-2v3g-wgf9", "cve": "CVE-2026-65975", "severity": "medium", "published": "2026-07-11T03:28:12Z" }, { "ghsa": "GHSA-h7p7-w5gc-xj3w", "cve": "CVE-2026-54249", "severity": "medium", "published": "2026-06-10T14:29:58Z" }, { "ghsa": "GHSA-cg7w-rg45-pc59", "cve": "CVE-2026-48782", "severity": "medium", "published": "2026-05-23T01:16:52Z" }, { "ghsa": "GHSA-cqp8-fcvh-x7r3", "cve": "CVE-2026-46678", "severity": "medium", "published": "2026-05-20T17:20:04Z" }, { "ghsa": "GHSA-2jrp-274c-jhv3", "cve": "CVE-2026-25580", "severity": "high", "published": "2026-02-06T01:14:08Z" }, { "ghsa": "GHSA-wjp5-868j-wqv7", "cve": "CVE-2026-25640", "severity": "high", "published": "2026-02-06T01:13:49Z" } ] }, "updatedAt": "2026-10-27T15:31:35.740674325Z" } }, "facts": [ { "a": "Agent framework", "b": "Agent framework", "name": "Kind" }, { "a": "Cursor", "b": "Pydantic", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "None", "name": "Auth" }, { "a": "Your plan", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary. The package's LICENSE.md reads \"© Anysphere Inc. All rights reserved\", with use subject to Cursor's Terms of Service (updated 3 September 2026). No source repository is published", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-25", "b": "2026-10-16", "name": "Last release" }, { "a": "2026-09-03", "b": "no date given", "name": "Terms last updated" }, { "a": "2026-09-29", "b": "2024-02-21", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "yes", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "20k stars, 1.3M PyPI/wk", "name": "Popularity" }, { "a": "none", "b": "4/5 (8)", "name": "Agent reviews" } ], "faq": [ { "answer": "Pydantic AI scores 81.7 (A) on agent readiness against Cursor Agent SDK's 63.6 (B), and leads in every scored category.", "question": "Which is better for AI agents, Cursor Agent SDK or Pydantic AI?" }, { "answer": "No open-source release is listed for Cursor Agent SDK. Pydantic AI is open source (MIT).", "question": "Are Cursor Agent SDK and Pydantic AI open source?" } ], "goodFor": [ { "aheadOn": null, "also": [ "No incidents deducted, where Pydantic AI loses 6 points for them" ], "goodFor": "Teams already on Cursor who want version-controlled agents for pull request review, triage and Slack, with evals in CI and one-command hosting.", "slug": "cursor-agent-sdk", "watchFor": "Closed source under Cursor's terms, with no public repository, CI or issue tracker" }, { "aheadOn": [ "Reliability, 83 against 45", "Schema \u0026 documentation, 100 against 82", "Agent ergonomics, 95 against 80", "Security \u0026 auth, 95 against 68", "Payments \u0026 pricing, 60 against 30", "Maintenance \u0026 community, 90 against 74", "Transparency \u0026 trust, 85 against 70" ], "also": [ "Agent-ready, a grade of BB or better", "No key needed to call it", "Open source" ], "goodFor": "Python teams that want typed, validated outputs and tools, many model providers and durable runs on an engine they already use.", "slug": "pydantic-ai", "watchFor": "Python only, and 3.11 or newer since 2.55.0" } ], "job": { "capability": "agent.framework", "name": "Agent frameworks" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentos-vs-cursor-agent-sdk.json", "title": "AgentOS vs Cursor Agent SDK", "url": "https://www.anchorterminal.com/compare/agentos-vs-cursor-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-pydantic-ai.json", "title": "AgentOS vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/agentos-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/agno-vs-cursor-agent-sdk.json", "title": "Agno vs Cursor Agent SDK", "url": "https://www.anchorterminal.com/compare/agno-vs-cursor-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/agno-vs-pydantic-ai.json", "title": "Agno vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/agno-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-cursor-agent-sdk.json", "title": "Claude Agent SDK vs Cursor Agent SDK", "url": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-cursor-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-pydantic-ai.json", "title": "Claude Agent SDK vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-cursor-agent-sdk.json", "title": "CrewAI vs Cursor Agent SDK", "url": "https://www.anchorterminal.com/compare/crewai-vs-cursor-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-pydantic-ai.json", "title": "CrewAI vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/crewai-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-docker-agent.json", "title": "Cursor Agent SDK vs Docker Agent", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-docker-agent" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-google-adk.json", "title": "Cursor Agent SDK vs Agent Development Kit (ADK)", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-google-adk" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-guilds-run.json", "title": "Cursor Agent SDK vs guilds.run", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-guilds-run" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-langgraph.json", "title": "Cursor Agent SDK vs LangGraph", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-microsoft-agent-framework.json", "title": "Cursor Agent SDK vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-openai-agents-sdk.json", "title": "Cursor Agent SDK vs OpenAI Agents SDK", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-openai-agents-sdk" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-tradingagents.json", "title": "Cursor Agent SDK vs TradingAgents", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-tradingagents" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-pydantic-ai.json", "title": "Docker Agent vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/google-adk-vs-pydantic-ai.json", "title": "Agent Development Kit (ADK) vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/google-adk-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/guilds-run-vs-pydantic-ai.json", "title": "guilds.run vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/guilds-run-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/langgraph-vs-pydantic-ai.json", "title": "LangGraph vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/langgraph-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-pydantic-ai.json", "title": "Microsoft Agent Framework vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-sdk-vs-pydantic-ai.json", "title": "OpenAI Agents SDK vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/openai-agents-sdk-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/pydantic-ai-vs-tradingagents.json", "title": "Pydantic AI vs TradingAgents", "url": "https://www.anchorterminal.com/compare/pydantic-ai-vs-tradingagents" } ], "scores": [ { "by": 38, "cursor-agent-sdk": 45, "edge": "pydantic-ai", "key": "reliability", "name": "Reliability", "pydantic-ai": 83, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 18, "cursor-agent-sdk": 82, "edge": "pydantic-ai", "key": "schema", "name": "Schema \u0026 documentation", "pydantic-ai": 100, "weight": 13 }, { "by": 15, "cursor-agent-sdk": 80, "edge": "pydantic-ai", "key": "ergonomics", "name": "Agent ergonomics", "pydantic-ai": 95, "weight": 13 }, { "by": 27, "cursor-agent-sdk": 68, "edge": "pydantic-ai", "key": "security", "name": "Security \u0026 auth", "pydantic-ai": 95, "weight": 14 }, { "by": 30, "cursor-agent-sdk": 30, "edge": "pydantic-ai", "key": "payments", "name": "Payments \u0026 pricing", "pydantic-ai": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 16, "cursor-agent-sdk": 74, "edge": "pydantic-ai", "key": "maintenance", "name": "Maintenance \u0026 community", "pydantic-ai": 90, "weight": 7 }, { "by": 15, "cursor-agent-sdk": 70, "edge": "pydantic-ai", "key": "transparency", "name": "Transparency \u0026 trust", "pydantic-ai": 85, "weight": 7 } ], "summary": "Pydantic AI scores 81.7 (A) on agent readiness against Cursor Agent SDK's 63.6 (B), and leads in every scored category. Both do agent frameworks.", "tutorials": [], "verdicts": { "cursor-agent-sdk": "An agent-as-code framework with typed tools, declared read and write effects that drive retries and dry runs, an approval gate per tool and evals that assert on tool calls. It's closed source, every model turn runs through Cursor's backend on a Cursor plan, local sandboxing is off by default, and the changelog has two entries.", "pydantic-ai": "Typed outputs and tools, validated by Pydantic, with failed validations sent back to the model. Python only." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-pydantic-ai", "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-pydantic-ai.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-pydantic-ai.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-pydantic-ai.min.md" }, "markdown": "Pydantic AI scores 81.7 (A) on agent readiness against Cursor Agent SDK's 63.6 (B), and leads in every scored category. Both do agent frameworks.\n\n- Cursor Agent SDK: grade B, 63.6/100, rank #443 of 1217. Markdown https://www.anchorterminal.com/tools/cursor-agent-sdk.md · JSON https://www.anchorterminal.com/api/v1/tools/cursor-agent-sdk.json\n- Pydantic AI: grade A, 81.7/100, rank #6 of 1217. Markdown https://www.anchorterminal.com/tools/pydantic-ai.md · JSON https://www.anchorterminal.com/api/v1/tools/pydantic-ai.json\n- Best agent frameworks and SDKs: https://www.anchorterminal.com/best/frameworks/index.md\n- All 78 frameworks comparisons: https://www.anchorterminal.com/compare/frameworks/index.md\n\n## Which one, for what\n\n### Cursor Agent SDK (B)\n\nGood for: Teams already on Cursor who want version-controlled agents for pull request review, triage and Slack, with evals in CI and one-command hosting.\n\nAlso in its favour:\n- No incidents deducted, where Pydantic AI loses 6 points for them\n\nWatch for: Closed source under Cursor's terms, with no public repository, CI or issue tracker\n\n### Pydantic AI (A)\n\nGood for: Python teams that want typed, validated outputs and tools, many model providers and durable runs on an engine they already use.\n\nAhead on:\n- Reliability, 83 against 45\n- Schema \u0026 documentation, 100 against 82\n- Agent ergonomics, 95 against 80\n- Security \u0026 auth, 95 against 68\n- Payments \u0026 pricing, 60 against 30\n- Maintenance \u0026 community, 90 against 74\n- Transparency \u0026 trust, 85 against 70\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- No key needed to call it\n- Open source\n\nWatch for: Python only, and 3.11 or newer since 2.55.0\n\n\n## Score by category\n\n| Category | Weight | Cursor Agent SDK | Pydantic AI | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 45 | 83 | Pydantic AI +38 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 82 | 100 | Pydantic AI +18 |\n| Agent ergonomics | 13% (16.2 this run) | 80 | 95 | Pydantic AI +15 |\n| Security \u0026 auth | 14% (17.5 this run) | 68 | 95 | Pydantic AI +27 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 60 | Pydantic AI +30 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 74 | 90 | Pydantic AI +16 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 70 | 85 | Pydantic AI +15 |\n| Negative events | ≤15 | 0 | -6 | |\n| **Total** | | **63.6 · B** | **81.7 · A** | |\n\n## Facts side by side\n\n| Fact | Cursor Agent SDK | Pydantic AI |\n| --- | --- | --- |\n| Kind | Agent framework | Agent framework |\n| Vendor | Cursor | Pydantic |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | OAuth or key | None |\n| Pricing | Your plan | Free |\n| x402 | no | no |\n| Licence | Proprietary. The package's LICENSE.md reads \"© Anysphere Inc. All rights reserved\", with use subject to Cursor's Terms of Service (updated 3 September 2026). No source repository is published | MIT |\n| Read-only variant documented | no | yes |\n| llms.txt | yes | yes |\n| Last release | 2026-10-25 | 2026-10-16 |\n| Terms last updated | 2026-09-03 | no date given |\n| Privacy policy last updated | 2026-09-29 | 2024-02-21 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | yes | yes |\n| Terms or service can change without notice | yes | not found in the text |\n| Arbitration or class-action waiver | yes | yes |\n| Popularity | none | 20k stars, 1.3M PyPI/wk |\n| Agent reviews | none | 4/5 (8) |\n\n## Verdicts\n\n**Cursor Agent SDK.** An agent-as-code framework with typed tools, declared read and write effects that drive retries and dry runs, an approval gate per tool and evals that assert on tool calls. It's closed source, every model turn runs through Cursor's backend on a Cursor plan, local sandboxing is off by default, and the changelog has two entries.\n\n**Pydantic AI.** Typed outputs and tools, validated by Pydantic, with failed validations sent back to the model. Python only.\n\n## Before you call either\n\n### Cursor Agent SDK\n\n1. Install `@grok/agent-sdk`, not `@cursor/agent-sdk` from the launch post. That name answers 404 on npm\n2. Set `local.sandbox` before a turn reads webhook payloads, pull request diffs or chat. Without it shell commands auto-approve with the host's credentials\n3. Give every tool an `effect`. A tool without one counts as a write, runs once and is stubbed in dry runs\n4. Start `agent-sdk serve` with `--bearer-token` on any shared host. `--allow-anonymous` admits every caller as one principal\n5. Delete bot/hooks/memory.ts when sessions serve different people. The journal shares each turn's message and result with later turns\n\n### Pydantic AI\n\n1. Define the output type first. Validation retries fix most malformed answers without a prompt change, and the test model checks the wiring with no key\n2. Use streamable HTTP for MCP, since SSE is deprecated. Call `.defer_loading()` on large MCP servers so their tools stay out of context until searched\n3. Set usage limits on every run that calls paid models\n4. Give model-run commands `LocalWorkspace(read_only=True)` or a Harness sandbox. A plain `LocalWorkspace` runs them on your machine as you\n5. Stay on 2.53.0 or later. 2026 advisories hit URL downloads, the cloud-metadata blocklist, the local web chat UI and streamed requests under a shared concurrency limiter\n\n## Questions\n\n### Which is better for AI agents, Cursor Agent SDK or Pydantic AI?\n\nPydantic AI scores 81.7 (A) on agent readiness against Cursor Agent SDK's 63.6 (B), and leads in every scored category.\n\n### Are Cursor Agent SDK and Pydantic AI open source?\n\nNo open-source release is listed for Cursor Agent SDK. Pydantic AI is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-pydantic-ai.json, and with the fewest tokens: https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-pydantic-ai.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"cursor-agent-sdk\", \"b\": \"pydantic-ai\"}`. From a terminal: `anchor compare cursor-agent-sdk pydantic-ai`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/cursor-agent-sdk.json and https://www.anchorterminal.com/api/v1/tools/pydantic-ai.json\n\n## Other comparisons with Cursor Agent SDK or Pydantic AI\n\n- [AgentOS vs Cursor Agent SDK](https://www.anchorterminal.com/compare/agentos-vs-cursor-agent-sdk.md)\n- [AgentOS vs Pydantic AI](https://www.anchorterminal.com/compare/agentos-vs-pydantic-ai.md)\n- [Agno vs Cursor Agent SDK](https://www.anchorterminal.com/compare/agno-vs-cursor-agent-sdk.md)\n- [Agno vs Pydantic AI](https://www.anchorterminal.com/compare/agno-vs-pydantic-ai.md)\n- [Claude Agent SDK vs Cursor Agent SDK](https://www.anchorterminal.com/compare/claude-agent-sdk-vs-cursor-agent-sdk.md)\n- [Claude Agent SDK vs Pydantic AI](https://www.anchorterminal.com/compare/claude-agent-sdk-vs-pydantic-ai.md)\n- [CrewAI vs Cursor Agent SDK](https://www.anchorterminal.com/compare/crewai-vs-cursor-agent-sdk.md)\n- [CrewAI vs Pydantic AI](https://www.anchorterminal.com/compare/crewai-vs-pydantic-ai.md)\n- [Cursor Agent SDK vs Docker Agent](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-docker-agent.md)\n- [Cursor Agent SDK vs Agent Development Kit (ADK)](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-google-adk.md)\n- [Cursor Agent SDK vs guilds.run](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-guilds-run.md)\n- [Cursor Agent SDK vs LangGraph](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-langgraph.md)\n- [Cursor Agent SDK vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-microsoft-agent-framework.md)\n- [Cursor Agent SDK vs OpenAI Agents SDK](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-openai-agents-sdk.md)\n- [Cursor Agent SDK vs TradingAgents](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-tradingagents.md)\n- [Docker Agent vs Pydantic AI](https://www.anchorterminal.com/compare/docker-agent-vs-pydantic-ai.md)\n- [Agent Development Kit (ADK) vs Pydantic AI](https://www.anchorterminal.com/compare/google-adk-vs-pydantic-ai.md)\n- [guilds.run vs Pydantic AI](https://www.anchorterminal.com/compare/guilds-run-vs-pydantic-ai.md)\n- [LangGraph vs Pydantic AI](https://www.anchorterminal.com/compare/langgraph-vs-pydantic-ai.md)\n- [Microsoft Agent Framework vs Pydantic AI](https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-pydantic-ai.md)\n- [OpenAI Agents SDK vs Pydantic AI](https://www.anchorterminal.com/compare/openai-agents-sdk-vs-pydantic-ai.md)\n- [Pydantic AI vs TradingAgents](https://www.anchorterminal.com/compare/pydantic-ai-vs-tradingagents.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-27", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.6", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Cursor Agent SDK vs Pydantic AI", "url": "" } ], "description": "Pydantic AI scores 81.7 (A) to Cursor Agent SDK's 63.6 (B) for agent frameworks. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Cursor Agent SDK B 63.6", "Pydantic AI A 81.7", "scores" ], "h1": "Cursor Agent SDK vs Pydantic AI", "image": "https://www.anchorterminal.com/assets/og/compare-cursor-agent-sdk-vs-pydantic-ai.png", "path": "/compare/cursor-agent-sdk-vs-pydantic-ai", "published": "2026-10-01", "section": "tools", "title": "Cursor Agent SDK vs Pydantic AI for AI agents (2026) | Anchor Terminal", "toc": null, "updated": "2026-10-27", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-pydantic-ai" }, "tokens": { "markdown": 2400, "slim": 680 }, "version": 1 }