{ "data": { "a": { "slug": "cursor-agent-sdk", "name": "Cursor Agent SDK", "vendor": "Cursor", "vendorUrl": "https://cursor.com/docs/agent-sdk", "kind": "framework", "category": "frameworks", "summary": "Cursor's TypeScript framework for defining an agent as a folder of instructions, typed tools, skills, MCP connections and channels, testing it with evals, and running it on your own server or on Cursor's hosting.", "url": "https://www.anchorterminal.com/tools/cursor-agent-sdk", "markdownUrl": "https://www.anchorterminal.com/tools/cursor-agent-sdk.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/cursor-agent-sdk.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/cursor-agent-sdk.json", "dns": "cursor-agent-sdk.grade.anchorterminal.com", "license": "Proprietary. The package's LICENSE.md reads \"© Anysphere Inc. All rights reserved\", with use subject to Cursor's Terms of Service (updated 3 September 2026). No source repository is published", "transports": [], "packages": [ { "registry": "npm", "name": "@grok/agent-sdk" } ], "auth": "mixed", "authNotes": "Model turns need a Cursor credential. `agent-sdk login` opens a browser sign-in and stores the key it creates, or pass a user API key from the dashboard or a team service-account key as `--api-key`, `CURSOR_API_KEY`, `CURSOR_API_KEY_FILE` or `CURSOR_SERVICE_ACCOUNT_KEY`. `logout` doesn't revoke the key. Direct tool calls without a model turn need no Cursor key. A self-hosted server is protected with `--bearer-token`, and a deployment's routes with an alias token.", "pricing": "byo-plan", "pricingNotes": "The package is free to install. Model turns draw on the Cursor plan of the key's owner, Free ($0, limited agent requests) to Ultra ($200 a month), and beyond the weekly pool the default model, Grok 4.5 with Fast on, is $4 per million input tokens and $18 per million output tokens. No price for Cursor-managed hosting and no statement of which plans include the Agent SDK were found (checked 2026-10-27).", "priceSummary": "Your plan", "where": "library", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Agent SDK docs, the npm package or the pricing page (checked 2026-10-27).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-27" }, "docsUrl": "https://cursor.com/docs/agent-sdk", "llmsTxt": "https://cursor.com/llms.txt", "capabilities": [ "agent.framework", "agent.mcp-client", "agent.durable", "agent.multi-agent", "obs.evals" ], "tags": [ "official", "framework", "typescript", "closed-source", "mcp", "llms-txt", "pre-1.0", "self-hosted", "hosted", "new" ], "lastRelease": "2026-10-25", "graded": true, "anchor": { "graded": true, "score": 63.7, "grade": "B", "agentReady": false, "rank": 501, "ranked": true, "rankOf": 1486, "categoryRank": 15, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 80, "maintenance": 74, "payments": 30, "reliability": 45, "schema": 82, "security": 68, "transparency": 71 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-02" }, "negative": 0, "verdict": "An agent-as-code framework with typed tools, declared read and write effects that drive retries and dry runs, an approval gate per tool and evals that assert on tool calls. It's closed source, every model turn runs through Cursor's backend on a Cursor plan, local sandboxing is off by default, and the changelog has two entries.", "bestFor": "Teams already on Cursor who want version-controlled agents for pull request review, triage and Slack, with evals in CI and one-command hosting.", "strengths": [ "Tools declare a read, write or idempotent effect. Only reads and idempotent calls retry, and dry-run sessions stub writes", "`needsApproval` on a tool parks the call until a person approves, and `ctx.approvedBy` records who did", "Evals assert which tools ran, with what input, and the reply's shape, and `github replay` turns a real pull request into signed test deliveries", "Every page has a Markdown twin listed in cursor.com/llms.txt, and the package ships the same docs and an llms.txt", "Sessions keep a record of every message and tool call, and OpenTelemetry export stays off until an endpoint is set" ], "weaknesses": [ "Closed source under Cursor's terms, with no public repository, CI or issue tracker", "Every model turn runs through Cursor's backend with a Cursor credential, including on a self-hosted server", "Local sandboxing is off by default, so shell commands auto-approve with the host's credentials", "The changelog has two entries, 0.2.29 and 0.3.0, both dated 23 October 2026. The 27 earlier @cursor/bdk versions have none", "The launch post's install command names a package that doesn't exist on npm" ], "agentNotes": [ "Install `@grok/agent-sdk`, not `@cursor/agent-sdk` from the launch post. That name answers 404 on npm", "Set `local.sandbox` before a turn reads webhook payloads, pull request diffs or chat. Without it shell commands auto-approve with the host's credentials", "Give every tool an `effect`. A tool without one counts as a write, runs once and is stubbed in dry runs", "Start `agent-sdk serve` with `--bearer-token` on any shared host. `--allow-anonymous` admits every caller as one principal", "Delete bot/hooks/memory.ts when sessions serve different people. The journal shares each turn's message and result with later turns" ], "metrics": { "kind": "library", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 63.7 } ], "editorialScores": { "ergonomics": 80, "maintenance": 74, "payments": 30, "reliability": 45, "schema": 82, "security": 68, "transparency": 49 }, "provenanceScore": 92, "checked": { "categories": { "ergonomics": "2026-11-02", "maintenance": "2026-11-02", "payments": "2026-11-02", "reliability": "2026-11-02", "schema": "2026-11-02", "security": "2026-11-02", "transparency": "2026-11-02" }, "last": "2026-11-02", "lastMoved": "2026-10-28", "oldest": "2026-11-02", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install --global @grok/agent-sdk", "headless": { "run": "agent-sdk run --dir . --message \"Introduce yourself in one sentence.\"" } }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/cursor-agent-sdk" }, "sameCompany": [ "cursor-cli", "grok-bot" ], "area": "frameworks", "unitPrices": [ { "item": "Grok 4.5 Fast (the default model) input, beyond the weekly pool", "unit": "1m-tokens", "usd": 4, "note": "cache reads $1" }, { "item": "Grok 4.5 Fast (the default model) output, beyond the weekly pool", "unit": "1m-tokens", "usd": 18 }, { "item": "Grok 4.5 input, Fast off, beyond the weekly pool", "unit": "1m-tokens", "usd": 2, "note": "cache reads $0.50" }, { "item": "Grok 4.5 output, Fast off, beyond the weekly pool", "unit": "1m-tokens", "usd": 6 }, { "item": "Premium plan (first plan with Cloud Agents and third-party models)", "unit": "month", "usd": 30 } ], "provenance": { "legalEntity": "Anysphere, Inc.", "domain": "cursor.com", "domainRegistered": "1995-12-20", "endpointOnVendorDomain": null, "terms": "https://cursor.com/terms-of-service", "privacy": "https://cursor.com/privacy", "statusPage": "https://status.cursor.com", "changelog": "https://cursor.com/docs/agent-sdk/changelog", "securityTxt": "valid", "checked": "2026-11-02", "notes": [ "The package's LICENSE.md and the site footer name Anysphere, Inc. The terms of service are dated 3 September 2026 and the privacy policy 11 October 2026.", "RDAP (Verisign) gives cursor.com a registration date of 1995-12-20.", "cursor.com/.well-known/security.txt has a Contact line pointing to github.com/getcursor/cursor/security and a secondary email, and no Expires line. The site's tracker reads a file with a Contact and no Expires as valid, as on the Cursor CLI listing.", "The footer links status.cursor.com. Its robots.txt answered with a Cloudflare challenge on 27 October 2026, so the status page wasn't read.", "The npm package's repository field points to github.com/cursor/cursor, which holds only a README and SECURITY.md.", "On 2 November 2026 status.cursor.com answered with a redirect to status.x.ai, whose page answered a Cloudflare block, so the status page couldn't be read." ], "score": 92 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/cursor-agent-sdk.json", "live": { "slug": "cursor-agent-sdk", "vendorStatus": { "page": "https://status.cursor.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T18:21:00.20473918Z" }, "versions": [ { "registry": "npm", "name": "@grok/agent-sdk", "version": "0.6.0", "seenAt": "2026-11-06T23:19:06.91158327Z" } ], "npmWeekly": 9330, "securityTxt": { "url": "https://cursor.com/.well-known/security.txt", "state": "valid", "checkedAt": "2026-11-07T16:01:25.031295704Z" }, "llmsTxt": { "url": "https://cursor.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:13.986094369Z" }, "domain": { "domain": "cursor.com", "registered": "1995-12-20", "source": "https://rdap.verisign.com/com/v1/domain/cursor.com", "checkedAt": "2026-11-01T14:10:15.995316039Z" }, "pages": [ { "url": "https://cursor.com/docs/agent-sdk/changelog", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:02:17.860421755Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "e878680a2c18" }, { "url": "https://cursor.com/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:02:21.713695997Z", "changedAt": "2026-10-21T00:22:04.890633076Z", "fingerprint": "60c67a53fa8c" }, { "url": "https://cursor.com/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:02:23.744923691Z", "changedAt": "2026-10-21T00:22:07.052190293Z", "fingerprint": "d31f70e876bc" } ], "updatedAt": "2026-11-07T18:21:00.20473918Z" } }, "answer": "AI SDK scores 89.8 (AA) on agent readiness against Cursor Agent SDK's 63.7 (B), and leads in every scored category.", "b": { "slug": "vercel-ai-sdk", "name": "AI SDK", "vendor": "Vercel Inc.", "vendorUrl": "https://vercel.com", "kind": "framework", "category": "frameworks", "summary": "Open-source TypeScript toolkit from Vercel for building AI applications and agents, with a provider-agnostic API, a ToolLoopAgent, an MCP client and UI hooks for React, Vue, Svelte and Angular.", "url": "https://www.anchorterminal.com/tools/vercel-ai-sdk", "markdownUrl": "https://www.anchorterminal.com/tools/vercel-ai-sdk.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/vercel-ai-sdk.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/vercel-ai-sdk.json", "dns": "vercel-ai-sdk.grade.anchorterminal.com", "repo": "https://github.com/vercel/ai", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "npm", "name": "ai" }, { "registry": "npm", "name": "@ai-sdk/mcp" }, { "registry": "npm", "name": "@ai-sdk/workflow" } ], "auth": "api-key", "authNotes": "The SDK has no account of its own. Each provider package takes that provider's key. Plain string model IDs resolve through Vercel's AI Gateway by default, which needs AI_GATEWAY_API_KEY or a Vercel OIDC token.", "pricing": "free", "pricingNotes": "Free and open source. You pay for model calls. The optional AI Gateway charges providers' list prices with no markup, from prepaid credits, with a free monthly credit on a subset of models (https://vercel.com/docs/ai-gateway/pricing, checked 2026-11-06).", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the AI SDK docs, the vercel/ai repository's packages or the AI Gateway pricing page. The tools registry in the repository lists a third-party x402 marketplace tool (checked 2026-10-06).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 27781, "npmWeekly": 44868298, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://ai-sdk.dev/docs", "llmsTxt": "https://ai-sdk.dev/llms.txt", "capabilities": [ "agent.framework", "agent.mcp-client", "agent.multi-agent", "agent.durable" ], "tags": [ "framework", "typescript", "open-source", "llms-txt", "mcp", "otel" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 89.8, "grade": "AA", "agentReady": true, "rank": 1, "ranked": true, "rankOf": 1486, "categoryRank": 1, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 95, "maintenance": 97, "payments": 60, "reliability": 93, "schema": 100, "security": 90, "transparency": 89 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "A TypeScript agent toolkit with ToolLoopAgent, a built-in MCP client, per-tool approvals that can be HMAC-signed, opt-in OpenTelemetry and durable runs through WorkflowAgent. It ships three major versions in 14 months (5.0, 6.0, 7.0), each with a migration guide, and plain string model IDs route through Vercel's AI Gateway unless another provider is set.", "bestFor": "TypeScript teams building agents and chat UIs who want one API across many providers and a short path to MCP.", "strengths": [ "Apache 2.0, with 246 npm releases of `ai` in the 90 days to 6 October 2026", "MCP client in @ai-sdk/mcp with HTTP, SSE and stdio transports, OAuth and opt-in retries for tools/call", "Per-tool approvals, HMAC-signed approvals and Open Policy Agent rules in @ai-sdk/policy-opa", "Telemetry only after an OpenTelemetry integration is registered, with recordInputs and recordOutputs switches", "Tool search with deferred loading, so the model sees only a search tool until it needs more" ], "weaknesses": [ "TypeScript only, and `ai` 7.x needs Node 22 or newer", "Three major versions between July 2025 and June 2026, each with breaking changes", "String model IDs go to Vercel's AI Gateway by default, which needs a Vercel key", "No input or output guardrail primitive, and sandboxes and stdio MCP transport are still experimental", "1,399 open issues and pull requests on 4 October 2026, per a GitHub mirror" ], "agentNotes": [ "Pass a provider instance such as openai('model') if traffic shouldn't go through Vercel's AI Gateway", "Set toolApproval on tools that write, and experimental_toolApprovalSecret when approvals come back from a browser", "Raise or replace the default stop condition of 20 steps with stopWhen", "Close the MCP client after the run, and use HTTP transport outside local development", "Set recordInputs and recordOutputs to false when spans would carry secrets" ], "metrics": { "kind": "library", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "AA", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 89.8 } ], "editorialScores": { "ergonomics": 95, "maintenance": 97, "payments": 60, "reliability": 93, "schema": 100, "security": 90, "transparency": 86 }, "provenanceScore": 91, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm i ai # MCP: npm i @ai-sdk/mcp" }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/vercel-ai-sdk" }, "area": "frameworks", "provenance": { "legalEntity": "Vercel Inc.", "domain": "ai-sdk.dev", "domainRegistered": "2024-09-26", "endpointOnVendorDomain": null, "terms": "https://vercel.com/legal/terms", "privacy": "https://vercel.com/legal/privacy-policy", "statusPage": "https://www.vercel-status.com", "changelog": "https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md", "securityTxt": "valid", "checked": "2026-11-06", "notes": [ "The privacy notice (effective 1 June 2026) names Vercel Inc.", "vercel.com/.well-known/security.txt points to HackerOne and responsible.disclosure@vercel.com and expires 2027-09-28.", "RDAP gives ai-sdk.dev a registration date of 2024-09-26 and vercel.com 1999-10-04.", "The status page covers Vercel's hosted services, including the AI Gateway, not the library." ], "score": 91 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/vercel-ai-sdk.json", "live": { "slug": "vercel-ai-sdk", "vendorStatus": { "page": "https://www.vercel-status.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T18:22:07.095231904Z" }, "versions": [ { "registry": "github", "name": "vercel/ai", "version": "@ai-sdk/zai@2.0.19", "released": "2026-11-06", "seenAt": "2026-11-07T00:15:06.320451302Z" }, { "registry": "npm", "name": "@ai-sdk/mcp", "version": "2.0.92", "seenAt": "2026-11-07T00:15:02.210062748Z" }, { "registry": "npm", "name": "@ai-sdk/workflow", "version": "2.0.96", "seenAt": "2026-11-07T00:15:04.290347217Z" }, { "registry": "npm", "name": "ai", "version": "7.0.164", "seenAt": "2026-11-07T00:15:02.102209516Z" } ], "githubStars": 27784, "npmWeekly": 44868298, "securityTxt": { "url": "https://ai-sdk.dev/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T15:59:53.467050636Z" }, "llmsTxt": { "url": "https://ai-sdk.dev/llms.txt", "ok": false, "status": 0, "checkedAt": "2026-11-07T15:34:35.854467131Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/vercel/ai/main/packages/ai/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:24:01.002799396Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "6e9ccd1db741" } ], "updatedAt": "2026-11-07T18:22:07.095231904Z" } }, "edges": [ { "by": 48, "category": "reliability", "leads": "vercel-ai-sdk", "name": "Reliability", "reasons": { "a": "Local-package reading, since the owner runs the framework, with Cursor's hosting as an option. Official npm package with Node 22.13 or newer stated in engines and in the docs, which also say never Bun (20). Closed source, so no public CI or test suite (0). No public issue tracker. github.com/cursor/cursor holds a README and SECURITY.md, and forum.cursor.com has no Agent SDK tag, so there's nothing to count open crashes against. The troubleshooting page lists known failures with fixes (5). A dated changelog of two entries, 0.2.29 and 0.3.0, both 23 October 2026, and 0.3.0 calls out the removed `persistent` option, but the 27 earlier @cursor/bdk versions and 123 @cursor/july versions have no notes, and one build ships under three package names (5). Version 0.3.0, but the changelog post of 20 October says generally available and the docs changelog labels 0.3.0 the GA release, which we read as declared stable (15). 20+0+5+5+15 = 45.", "b": "Official npm packages, with `ai` 7.x requiring Node 22 or newer (20). A public CI workflow with lint, type checks, unit tests, Node-version tests, MCP tests on Windows and e2e tests runs on every push to main, and the newest completed CI runs on main passed on 6 November (25). 1,517 open issues and pull requests on 6 November from GitHub's API, with 1,059 issues opened in the 90 days to 3 November; 47 of the 50 newest had a comment and 32 were closed (18). A written versioning page with breaking changes only in majors, experimental_ prefixes for unstable APIs and a migration guide per major (15). 7.0.163 (15). 20+25+18+15+15 = 93, up from 73 on 6 October, when GitHub couldn't be read." }, "scores": { "a": 45, "b": 93 } }, { "by": 30, "category": "payments", "leads": "vercel-ai-sdk", "name": "Payments \u0026 pricing", "reasons": { "a": "Framework reading of the published rubric. No payment protocol (0). Per-million-token prices for Cursor models, including the default Grok 4.5 with Fast, and plan prices are public, but no price for managed hosting and no statement of which plans cover the Agent SDK were found (15). The package is free and the Free plan needs no card, but its usage is only described as limited agent requests (15). A person signs in through a browser or creates an API key in the dashboard before a model turn runs (0). 0+15+15+0 = 30.", "b": "No payment protocol (0). Scored on the AI Gateway, the paid option, which charges providers' list prices with no markup and lists per-model rates and add-on prices without a login (20). The Apache 2.0 package installs with no card (20) and no account, and provider packages run any model, including local ones (20)." }, "scores": { "a": 30, "b": 60 } }, { "by": 23, "category": "maintenance", "leads": "vercel-ai-sdk", "name": "Maintenance \u0026 community", "reasons": { "a": "0.3.0 on npm on 25 October 2026, per the 27 October check (npm not re-read on 2 November), and the docs changelog still ends at 0.3.0 of 23 October (30). Five @grok/agent-sdk versions from 22 to 25 October and 29 @cursor/bdk versions since 22 September, per the 27 October check (20). Closed product. A public changelog with two entries and a forum with no Agent SDK tag, so we couldn't see replies to SDK reports (8). The npm package is current and official, TypeScript only (12). Dependencies are current releases, but there's no public CI and the same build goes out under three names with a postinstall script (4). 30+20+8+12+4 = 74.", "b": "7.0.163 on 2026-11-05 (30). 226 stable npm releases of `ai` across the 7.x, 6.x and 5.x lines in the 90 days to 6 November, 70 of them since 6 October (20). 47 of the 50 newest issues commented and 32 closed, with triage automation and backport workflows (22). `ai` and the provider packages are current, and 6.x and 5.x still get patches (15). Dependabot configured and CI passing on main (10). 30+20+22+15+10 = 97." }, "scores": { "a": 74, "b": 97 } }, { "by": 22, "category": "security", "leads": "vercel-ai-sdk", "name": "Security \u0026 auth", "reasons": { "a": "Framework reading. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt injection, 15 for audit and 20 for the security programme. Every model turn goes through Cursor's backend with a Cursor credential, even on a self-hosted server, and the data-use page says Cursor may store and train on prompts and code with Privacy Mode off. Managed hosting stores the repository and agent data whatever the Privacy Mode setting. OpenTelemetry export is off until an endpoint is set, with prompt text and tool payloads behind separate flags, and the npm update check has a documented switch. Install copies skills into ~/.cursor/skills (18). `needsApproval` parks a tool call for a person, dry runs stub writes and the harness tools take an allowlist, but `local.sandbox` is off by default, so shell commands auto-approve with the host's environment and file tools reach any path the process can. Hosted deployments enforce an egress allowlist (12). The docs tell you to turn the sandbox on for webhook payloads, diffs and chat, document HMAC and shared-secret auth on webhook routes, and warn that anyone who can talk to the agent can drive Cursor account connectors. The scaffolded memory journal shares turns across sessions, with an instruction to treat it as untrusted (10). Sessions keep every message and tool call, hooks can mirror them for audit, and `ctx.approvedBy` records the approver (14). security.txt and SECURITY.md with a disclosure address and Cursor's GitHub advisories, no bug bounty found, and no advisory for the three package names in OSV on 2 November (14). SOC 2 and ISO 27001 aren't scored on the framework reading. 18+12+10+14+14 = 68.", "b": "No telemetry until an OpenTelemetry integration is registered. String model IDs route to Vercel's AI Gateway by default, which is documented and needs a Vercel key, so it isn't silent (25). Per-tool approval, HMAC-signed approvals against forged client history, and Open Policy Agent rules in @ai-sdk/policy-opa, though sandboxes are experimental (20). ToolLoopAgent rejects system messages in prompts by default as an injection risk, URL fetches are checked against private addresses, and MCP HTTP transport refuses redirects by default, but there's no guardrail primitive (10). OpenTelemetry spans for every model and tool call to any backend, opt-in (15). HackerOne programme, a valid security.txt, SECURITY.md and two low-severity advisories published with fixed versions (20). Framework reading, so SOC 2 isn't scored." }, "scores": { "a": 68, "b": 90 } }, { "by": 18, "category": "schema", "leads": "vercel-ai-sdk", "name": "Schema \u0026 documentation", "reasons": { "a": "Framework reading. Typed TypeScript declarations ship in the package, tools take Zod or JSON Schema, `agent-sdk help --json` describes every command's flags and exit codes, and `GET /v1/info` and `GET /v1/tools/:name` return the discovered surface and each tool's schemas. No OpenAPI document for the HTTP routes (20). cursor.com/llms.txt lists every Agent SDK page with a Markdown twin, and the package ships the docs and an llms.txt (10). The overview has a table of when to use the Agent SDK, Automations or Grok Bot, and the hooks page has a table of what to use instead of a hook for each job (18). Typed config, `effect` as an enum or predicate, `timeArgs` checked against the input schema, and slug patterns stated (13). Examples on every page, with error tables for direct tool calls, HTTP 401, 403 and 409, the limit error's JSON and seven exit codes (15). A dated changelog, but only two entries, both from 23 October 2026 (6). 20+10+18+13+15+6 = 82.", "b": "Typed TypeScript API with a reference section for every function (25). llms.txt and a Markdown copy of each page (10). The docs say when to use each piece, such as a table of WorkflowAgent against ToolLoopAgent, a when-to-use section for subagents and harnesses, and HTTP over stdio for MCP in production (20). Tools take Zod or JSON Schema inputs (15). 38 error types documented in the reference, with error-handling guides and examples throughout (15). Versioning page and a changesets CHANGELOG per package (15)." }, "scores": { "a": 82, "b": 100 } }, { "by": 18, "category": "transparency", "leads": "vercel-ai-sdk", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed source. LICENSE.md reads All rights reserved, with use under Cursor's Terms of Service of 3 September 2026 (15). The data-use page says Privacy Mode keeps Customer Data out of training with zero-retention agreements at model providers, and that with it off Cursor may store and train on code and prompts. The deployment page says managed hosting stores the repository and agent data the same way under Privacy Mode and refuses Privacy Mode (Legacy). No retention periods are stated, and subprocessors are on a trust portal (14). No deprecation policy. The early-alpha migration guide, the `persistent` removal and the semantic-search removal are documented with error messages but only the changelog entry carries a date (6). OpenTelemetry and the update check are documented with switches. What the Cursor backend logs from turns is covered only by the data-use page (14). 15+14+6+14 = 49.", "b": "Apache 2.0 (30). The library stores nothing. The AI Gateway's ZDR page says it doesn't retain prompts or outputs and per-request ZDR is available on Pro and Enterprise, and Vercel's privacy notice is dated 1 June 2026, but we didn't read a DPA or subprocessor list (22). Deprecated APIs are removed only at majors with a migration guide, and 6.x and 5.x keep getting releases, without a written support window (14). Telemetry is opt-in and documented, with switches for inputs and outputs (20)." }, "scores": { "a": 71, "b": 89 } } ], "facts": [ { "a": "Agent framework", "b": "Agent framework", "name": "Kind" }, { "a": "Cursor", "b": "Vercel Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "API key", "name": "Auth" }, { "a": "Your plan", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary. The package's LICENSE.md reads \"© Anysphere Inc. All rights reserved\", with use subject to Cursor's Terms of Service (updated 3 September 2026). No source repository is published", "b": "Apache-2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-25", "b": "2026-11-05", "name": "Last release" }, { "a": "2026-09-03", "b": "2026-06-01", "name": "Terms last updated" }, { "a": "2026-09-29", "b": "2026-06-01", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "yes, with an opt-out", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "28k stars, 44.9M npm/wk", "name": "Popularity" } ], "faq": [ { "answer": "AI SDK scores 89.8 (AA) on agent readiness against Cursor Agent SDK's 63.7 (B), and leads in every scored category.", "question": "Which is better for AI agents, Cursor Agent SDK or AI SDK?" }, { "answer": "No open-source release is listed for Cursor Agent SDK. AI SDK is open source (Apache-2.0).", "question": "Are Cursor Agent SDK and AI SDK open source?" } ], "goodFor": [ { "aheadOn": null, "also": null, "goodFor": "Teams already on Cursor who want version-controlled agents for pull request review, triage and Slack, with evals in CI and one-command hosting.", "slug": "cursor-agent-sdk", "watchFor": "Closed source under Cursor's terms, with no public repository, CI or issue tracker" }, { "aheadOn": [ "Reliability, 93 against 45", "Schema \u0026 documentation, 100 against 82", "Agent ergonomics, 95 against 80", "Security \u0026 auth, 90 against 68", "Payments \u0026 pricing, 60 against 30", "Maintenance \u0026 community, 97 against 74", "Transparency \u0026 trust, 89 against 71" ], "also": [ "Agent-ready, a grade of BB or better", "Open source" ], "goodFor": "TypeScript teams building agents and chat UIs who want one API across many providers and a short path to MCP.", "slug": "vercel-ai-sdk", "watchFor": "TypeScript only, and `ai` 7.x needs Node 22 or newer" } ], "history": { "cursor-agent-sdk": [ { "causes": [ "method" ], "date": "2026-10-28", "delta": 0.1, "from": 63.6, "fromGrade": "B", "to": 63.7, "toGrade": "B" } ], "vercel-ai-sdk": null }, "job": { "capability": "agent.framework", "name": "Agent frameworks" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentos-vs-cursor-agent-sdk.json", "title": "AgentOS vs Cursor Agent SDK", "url": "https://www.anchorterminal.com/compare/agentos-vs-cursor-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-vercel-ai-sdk.json", "title": "AgentOS vs AI SDK", "url": "https://www.anchorterminal.com/compare/agentos-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/agno-vs-cursor-agent-sdk.json", "title": "Agno vs Cursor Agent SDK", "url": "https://www.anchorterminal.com/compare/agno-vs-cursor-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/agno-vs-vercel-ai-sdk.json", "title": "Agno vs AI SDK", "url": "https://www.anchorterminal.com/compare/agno-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-cursor-agent-sdk.json", "title": "BoxLang AI vs Cursor Agent SDK", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-cursor-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-vercel-ai-sdk.json", "title": "BoxLang AI vs AI SDK", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-cursor-agent-sdk.json", "title": "Claude Agent SDK vs Cursor Agent SDK", "url": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-cursor-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-vercel-ai-sdk.json", "title": "Claude Agent SDK vs AI SDK", "url": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-cursor-agent-sdk.json", "title": "CrewAI vs Cursor Agent SDK", "url": "https://www.anchorterminal.com/compare/crewai-vs-cursor-agent-sdk" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-vercel-ai-sdk.json", "title": "CrewAI vs AI SDK", "url": "https://www.anchorterminal.com/compare/crewai-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-docker-agent.json", "title": "Cursor Agent SDK vs Docker Agent", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-docker-agent" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-google-adk.json", "title": "Cursor Agent SDK vs Agent Development Kit (ADK)", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-google-adk" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-guilds-run.json", "title": "Cursor Agent SDK vs guilds.run", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-guilds-run" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-langgraph.json", "title": "Cursor Agent SDK vs LangGraph", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-llamaindex.json", "title": "Cursor Agent SDK vs LlamaIndex Framework", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-llamaindex" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-mastra.json", "title": "Cursor Agent SDK vs Mastra", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-mastra" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-microsoft-agent-framework.json", "title": "Cursor Agent SDK vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-openai-agents-sdk.json", "title": "Cursor Agent SDK vs OpenAI Agents SDK", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-openai-agents-sdk" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-pydantic-ai.json", "title": "Cursor Agent SDK vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-smolagents.json", "title": "Cursor Agent SDK vs smolagents", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-smolagents" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-strands-agents.json", "title": "Cursor Agent SDK vs Strands Agents", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-tradingagents.json", "title": "Cursor Agent SDK vs TradingAgents", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-tradingagents" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-vercel-ai-sdk.json", "title": "Docker Agent vs AI SDK", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/google-adk-vs-vercel-ai-sdk.json", "title": "Agent Development Kit (ADK) vs AI SDK", "url": "https://www.anchorterminal.com/compare/google-adk-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/guilds-run-vs-vercel-ai-sdk.json", "title": "guilds.run vs AI SDK", "url": "https://www.anchorterminal.com/compare/guilds-run-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/langgraph-vs-vercel-ai-sdk.json", "title": "LangGraph vs AI SDK", "url": "https://www.anchorterminal.com/compare/langgraph-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/llamaindex-vs-vercel-ai-sdk.json", "title": "LlamaIndex Framework vs AI SDK", "url": "https://www.anchorterminal.com/compare/llamaindex-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/mastra-vs-vercel-ai-sdk.json", "title": "Mastra vs AI SDK", "url": "https://www.anchorterminal.com/compare/mastra-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-vercel-ai-sdk.json", "title": "Microsoft Agent Framework vs AI SDK", "url": "https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-sdk-vs-vercel-ai-sdk.json", "title": "OpenAI Agents SDK vs AI SDK", "url": "https://www.anchorterminal.com/compare/openai-agents-sdk-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/pydantic-ai-vs-vercel-ai-sdk.json", "title": "Pydantic AI vs AI SDK", "url": "https://www.anchorterminal.com/compare/pydantic-ai-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/smolagents-vs-vercel-ai-sdk.json", "title": "smolagents vs AI SDK", "url": "https://www.anchorterminal.com/compare/smolagents-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/strands-agents-vs-vercel-ai-sdk.json", "title": "Strands Agents vs AI SDK", "url": "https://www.anchorterminal.com/compare/strands-agents-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/tradingagents-vs-vercel-ai-sdk.json", "title": "TradingAgents vs AI SDK", "url": "https://www.anchorterminal.com/compare/tradingagents-vs-vercel-ai-sdk" } ], "panel": null, "scores": [ { "by": 48, "cursor-agent-sdk": 45, "edge": "vercel-ai-sdk", "key": "reliability", "name": "Reliability", "vercel-ai-sdk": 93, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 18, "cursor-agent-sdk": 82, "edge": "vercel-ai-sdk", "key": "schema", "name": "Schema \u0026 documentation", "vercel-ai-sdk": 100, "weight": 13 }, { "by": 15, "cursor-agent-sdk": 80, "edge": "vercel-ai-sdk", "key": "ergonomics", "name": "Agent ergonomics", "vercel-ai-sdk": 95, "weight": 13 }, { "by": 22, "cursor-agent-sdk": 68, "edge": "vercel-ai-sdk", "key": "security", "name": "Security \u0026 auth", "vercel-ai-sdk": 90, "weight": 14 }, { "by": 30, "cursor-agent-sdk": 30, "edge": "vercel-ai-sdk", "key": "payments", "name": "Payments \u0026 pricing", "vercel-ai-sdk": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 23, "cursor-agent-sdk": 74, "edge": "vercel-ai-sdk", "key": "maintenance", "name": "Maintenance \u0026 community", "vercel-ai-sdk": 97, "weight": 7 }, { "by": 18, "cursor-agent-sdk": 71, "edge": "vercel-ai-sdk", "key": "transparency", "name": "Transparency \u0026 trust", "vercel-ai-sdk": 89, "weight": 7 } ], "summary": "AI SDK scores 89.8 (AA) on agent readiness against Cursor Agent SDK's 63.7 (B), and leads in every scored category. Both do agent frameworks.", "tasks": null, "tutorials": [], "verdicts": { "cursor-agent-sdk": "An agent-as-code framework with typed tools, declared read and write effects that drive retries and dry runs, an approval gate per tool and evals that assert on tool calls. It's closed source, every model turn runs through Cursor's backend on a Cursor plan, local sandboxing is off by default, and the changelog has two entries.", "vercel-ai-sdk": "A TypeScript agent toolkit with ToolLoopAgent, a built-in MCP client, per-tool approvals that can be HMAC-signed, opt-in OpenTelemetry and durable runs through WorkflowAgent. It ships three major versions in 14 months (5.0, 6.0, 7.0), each with a migration guide, and plain string model IDs route through Vercel's AI Gateway unless another provider is set." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-vercel-ai-sdk", "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-vercel-ai-sdk.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-vercel-ai-sdk.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-vercel-ai-sdk.min.md" }, "markdown": "AI SDK scores 89.8 (AA) on agent readiness against Cursor Agent SDK's 63.7 (B), and leads in every scored category. Both do agent frameworks.\n\n- Cursor Agent SDK: grade B, 63.7/100, rank #501 of 1486. Markdown https://www.anchorterminal.com/tools/cursor-agent-sdk.md · JSON https://www.anchorterminal.com/api/v1/tools/cursor-agent-sdk.json\n- AI SDK: grade AA, 89.8/100, rank #1 of 1486. Markdown https://www.anchorterminal.com/tools/vercel-ai-sdk.md · JSON https://www.anchorterminal.com/api/v1/tools/vercel-ai-sdk.json\n- Best agent frameworks and SDKs: https://www.anchorterminal.com/best/frameworks/index.md\n- All 171 frameworks comparisons: https://www.anchorterminal.com/compare/frameworks/index.md\n\n## Which one, for what\n\n### Cursor Agent SDK (B)\n\nGood for: Teams already on Cursor who want version-controlled agents for pull request review, triage and Slack, with evals in CI and one-command hosting.\n\nWatch for: Closed source under Cursor's terms, with no public repository, CI or issue tracker\n\n### AI SDK (AA)\n\nGood for: TypeScript teams building agents and chat UIs who want one API across many providers and a short path to MCP.\n\nAhead on:\n- Reliability, 93 against 45\n- Schema \u0026 documentation, 100 against 82\n- Agent ergonomics, 95 against 80\n- Security \u0026 auth, 90 against 68\n- Payments \u0026 pricing, 60 against 30\n- Maintenance \u0026 community, 97 against 74\n- Transparency \u0026 trust, 89 against 71\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- Open source\n\nWatch for: TypeScript only, and `ai` 7.x needs Node 22 or newer\n\n\n## Why the edge\n\n### Reliability: AI SDK +48\n\n- Cursor Agent SDK (45): Local-package reading, since the owner runs the framework, with Cursor's hosting as an option. Official npm package with Node 22.13 or newer stated in engines and in the docs, which also say never Bun (20). Closed source, so no public CI or test suite (0). No public issue tracker. github.com/cursor/cursor holds a README and SECURITY.md, and forum.cursor.com has no Agent SDK tag, so there's nothing to count open crashes against. The troubleshooting page lists known failures with fixes (5). A dated changelog of two entries, 0.2.29 and 0.3.0, both 23 October 2026, and 0.3.0 calls out the removed `persistent` option, but the 27 earlier @cursor/bdk versions and 123 @cursor/july versions have no notes, and one build ships under three package names (5). Version 0.3.0, but the changelog post of 20 October says generally available and the docs changelog labels 0.3.0 the GA release, which we read as declared stable (15). 20+0+5+5+15 = 45.\n- AI SDK (93): Official npm packages, with `ai` 7.x requiring Node 22 or newer (20). A public CI workflow with lint, type checks, unit tests, Node-version tests, MCP tests on Windows and e2e tests runs on every push to main, and the newest completed CI runs on main passed on 6 November (25). 1,517 open issues and pull requests on 6 November from GitHub's API, with 1,059 issues opened in the 90 days to 3 November; 47 of the 50 newest had a comment and 32 were closed (18). A written versioning page with breaking changes only in majors, experimental_ prefixes for unstable APIs and a migration guide per major (15). 7.0.163 (15). 20+25+18+15+15 = 93, up from 73 on 6 October, when GitHub couldn't be read.\n\n### Payments \u0026 pricing: AI SDK +30\n\n- Cursor Agent SDK (30): Framework reading of the published rubric. No payment protocol (0). Per-million-token prices for Cursor models, including the default Grok 4.5 with Fast, and plan prices are public, but no price for managed hosting and no statement of which plans cover the Agent SDK were found (15). The package is free and the Free plan needs no card, but its usage is only described as limited agent requests (15). A person signs in through a browser or creates an API key in the dashboard before a model turn runs (0). 0+15+15+0 = 30.\n- AI SDK (60): No payment protocol (0). Scored on the AI Gateway, the paid option, which charges providers' list prices with no markup and lists per-model rates and add-on prices without a login (20). The Apache 2.0 package installs with no card (20) and no account, and provider packages run any model, including local ones (20).\n\n### Maintenance \u0026 community: AI SDK +23\n\n- Cursor Agent SDK (74): 0.3.0 on npm on 25 October 2026, per the 27 October check (npm not re-read on 2 November), and the docs changelog still ends at 0.3.0 of 23 October (30). Five @grok/agent-sdk versions from 22 to 25 October and 29 @cursor/bdk versions since 22 September, per the 27 October check (20). Closed product. A public changelog with two entries and a forum with no Agent SDK tag, so we couldn't see replies to SDK reports (8). The npm package is current and official, TypeScript only (12). Dependencies are current releases, but there's no public CI and the same build goes out under three names with a postinstall script (4). 30+20+8+12+4 = 74.\n- AI SDK (97): 7.0.163 on 2026-11-05 (30). 226 stable npm releases of `ai` across the 7.x, 6.x and 5.x lines in the 90 days to 6 November, 70 of them since 6 October (20). 47 of the 50 newest issues commented and 32 closed, with triage automation and backport workflows (22). `ai` and the provider packages are current, and 6.x and 5.x still get patches (15). Dependabot configured and CI passing on main (10). 30+20+22+15+10 = 97.\n\n### Security \u0026 auth: AI SDK +22\n\n- Cursor Agent SDK (68): Framework reading. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt injection, 15 for audit and 20 for the security programme. Every model turn goes through Cursor's backend with a Cursor credential, even on a self-hosted server, and the data-use page says Cursor may store and train on prompts and code with Privacy Mode off. Managed hosting stores the repository and agent data whatever the Privacy Mode setting. OpenTelemetry export is off until an endpoint is set, with prompt text and tool payloads behind separate flags, and the npm update check has a documented switch. Install copies skills into ~/.cursor/skills (18). `needsApproval` parks a tool call for a person, dry runs stub writes and the harness tools take an allowlist, but `local.sandbox` is off by default, so shell commands auto-approve with the host's environment and file tools reach any path the process can. Hosted deployments enforce an egress allowlist (12). The docs tell you to turn the sandbox on for webhook payloads, diffs and chat, document HMAC and shared-secret auth on webhook routes, and warn that anyone who can talk to the agent can drive Cursor account connectors. The scaffolded memory journal shares turns across sessions, with an instruction to treat it as untrusted (10). Sessions keep every message and tool call, hooks can mirror them for audit, and `ctx.approvedBy` records the approver (14). security.txt and SECURITY.md with a disclosure address and Cursor's GitHub advisories, no bug bounty found, and no advisory for the three package names in OSV on 2 November (14). SOC 2 and ISO 27001 aren't scored on the framework reading. 18+12+10+14+14 = 68.\n- AI SDK (90): No telemetry until an OpenTelemetry integration is registered. String model IDs route to Vercel's AI Gateway by default, which is documented and needs a Vercel key, so it isn't silent (25). Per-tool approval, HMAC-signed approvals against forged client history, and Open Policy Agent rules in @ai-sdk/policy-opa, though sandboxes are experimental (20). ToolLoopAgent rejects system messages in prompts by default as an injection risk, URL fetches are checked against private addresses, and MCP HTTP transport refuses redirects by default, but there's no guardrail primitive (10). OpenTelemetry spans for every model and tool call to any backend, opt-in (15). HackerOne programme, a valid security.txt, SECURITY.md and two low-severity advisories published with fixed versions (20). Framework reading, so SOC 2 isn't scored.\n\n### Schema \u0026 documentation: AI SDK +18\n\n- Cursor Agent SDK (82): Framework reading. Typed TypeScript declarations ship in the package, tools take Zod or JSON Schema, `agent-sdk help --json` describes every command's flags and exit codes, and `GET /v1/info` and `GET /v1/tools/:name` return the discovered surface and each tool's schemas. No OpenAPI document for the HTTP routes (20). cursor.com/llms.txt lists every Agent SDK page with a Markdown twin, and the package ships the docs and an llms.txt (10). The overview has a table of when to use the Agent SDK, Automations or Grok Bot, and the hooks page has a table of what to use instead of a hook for each job (18). Typed config, `effect` as an enum or predicate, `timeArgs` checked against the input schema, and slug patterns stated (13). Examples on every page, with error tables for direct tool calls, HTTP 401, 403 and 409, the limit error's JSON and seven exit codes (15). A dated changelog, but only two entries, both from 23 October 2026 (6). 20+10+18+13+15+6 = 82.\n- AI SDK (100): Typed TypeScript API with a reference section for every function (25). llms.txt and a Markdown copy of each page (10). The docs say when to use each piece, such as a table of WorkflowAgent against ToolLoopAgent, a when-to-use section for subagents and harnesses, and HTTP over stdio for MCP in production (20). Tools take Zod or JSON Schema inputs (15). 38 error types documented in the reference, with error-handling guides and examples throughout (15). Versioning page and a changesets CHANGELOG per package (15).\n\n### Transparency \u0026 trust: AI SDK +18\n\n- Cursor Agent SDK (71): Closed source. LICENSE.md reads All rights reserved, with use under Cursor's Terms of Service of 3 September 2026 (15). The data-use page says Privacy Mode keeps Customer Data out of training with zero-retention agreements at model providers, and that with it off Cursor may store and train on code and prompts. The deployment page says managed hosting stores the repository and agent data the same way under Privacy Mode and refuses Privacy Mode (Legacy). No retention periods are stated, and subprocessors are on a trust portal (14). No deprecation policy. The early-alpha migration guide, the `persistent` removal and the semantic-search removal are documented with error messages but only the changelog entry carries a date (6). OpenTelemetry and the update check are documented with switches. What the Cursor backend logs from turns is covered only by the data-use page (14). 15+14+6+14 = 49.\n- AI SDK (89): Apache 2.0 (30). The library stores nothing. The AI Gateway's ZDR page says it doesn't retain prompts or outputs and per-request ZDR is available on Pro and Enterprise, and Vercel's privacy notice is dated 1 June 2026, but we didn't read a DPA or subprocessor list (22). Deprecated APIs are removed only at majors with a migration guide, and 6.x and 5.x keep getting releases, without a written support window (14). Telemetry is opt-in and documented, with switches for inputs and outputs (20).\n\n## Score by category\n\n| Category | Weight | Cursor Agent SDK | AI SDK | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 45 | 93 | AI SDK +48 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 82 | 100 | AI SDK +18 |\n| Agent ergonomics | 13% (16.2 this run) | 80 | 95 | AI SDK +15 |\n| Security \u0026 auth | 14% (17.5 this run) | 68 | 90 | AI SDK +22 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 60 | AI SDK +30 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 74 | 97 | AI SDK +23 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 71 | 89 | AI SDK +18 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **63.7 · B** | **89.8 · AA** | |\n\n## Facts side by side\n\n| Fact | Cursor Agent SDK | AI SDK |\n| --- | --- | --- |\n| Kind | Agent framework | Agent framework |\n| Vendor | Cursor | Vercel Inc. |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | OAuth or key | API key |\n| Pricing | Your plan | Free |\n| x402 | no | no |\n| Licence | Proprietary. The package's LICENSE.md reads \"© Anysphere Inc. All rights reserved\", with use subject to Cursor's Terms of Service (updated 3 September 2026). No source repository is published | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-25 | 2026-11-05 |\n| Terms last updated | 2026-09-03 | 2026-06-01 |\n| Privacy policy last updated | 2026-09-29 | 2026-06-01 |\n| Customer content may train models | not found in the text | yes, with an opt-out |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | yes | not found in the text |\n| Terms or service can change without notice | yes | not found in the text |\n| Arbitration or class-action waiver | yes | yes |\n| Popularity | none | 28k stars, 44.9M npm/wk |\n\n## How the scores have moved\n\n### Cursor Agent SDK\n\n- +0.1 on 28 October 2026: checklist\n\n### AI SDK\n\nNo score change since it was listed.\n\n## Verdicts\n\n**Cursor Agent SDK.** An agent-as-code framework with typed tools, declared read and write effects that drive retries and dry runs, an approval gate per tool and evals that assert on tool calls. It's closed source, every model turn runs through Cursor's backend on a Cursor plan, local sandboxing is off by default, and the changelog has two entries.\n\n**AI SDK.** A TypeScript agent toolkit with ToolLoopAgent, a built-in MCP client, per-tool approvals that can be HMAC-signed, opt-in OpenTelemetry and durable runs through WorkflowAgent. It ships three major versions in 14 months (5.0, 6.0, 7.0), each with a migration guide, and plain string model IDs route through Vercel's AI Gateway unless another provider is set.\n\n## Before you call either\n\n### Cursor Agent SDK\n\n1. Install `@grok/agent-sdk`, not `@cursor/agent-sdk` from the launch post. That name answers 404 on npm\n2. Set `local.sandbox` before a turn reads webhook payloads, pull request diffs or chat. Without it shell commands auto-approve with the host's credentials\n3. Give every tool an `effect`. A tool without one counts as a write, runs once and is stubbed in dry runs\n4. Start `agent-sdk serve` with `--bearer-token` on any shared host. `--allow-anonymous` admits every caller as one principal\n5. Delete bot/hooks/memory.ts when sessions serve different people. The journal shares each turn's message and result with later turns\n\n### AI SDK\n\n1. Pass a provider instance such as openai('model') if traffic shouldn't go through Vercel's AI Gateway\n2. Set toolApproval on tools that write, and experimental_toolApprovalSecret when approvals come back from a browser\n3. Raise or replace the default stop condition of 20 steps with stopWhen\n4. Close the MCP client after the run, and use HTTP transport outside local development\n5. Set recordInputs and recordOutputs to false when spans would carry secrets\n\n## Questions\n\n### Which is better for AI agents, Cursor Agent SDK or AI SDK?\n\nAI SDK scores 89.8 (AA) on agent readiness against Cursor Agent SDK's 63.7 (B), and leads in every scored category.\n\n### Are Cursor Agent SDK and AI SDK open source?\n\nNo open-source release is listed for Cursor Agent SDK. AI SDK is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-vercel-ai-sdk.json, and with the fewest tokens: https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-vercel-ai-sdk.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"cursor-agent-sdk\", \"b\": \"vercel-ai-sdk\"}`. From a terminal: `anchor compare cursor-agent-sdk vercel-ai-sdk`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/cursor-agent-sdk.json and https://www.anchorterminal.com/api/v1/tools/vercel-ai-sdk.json\n\n## Other comparisons with Cursor Agent SDK or AI SDK\n\n- [AgentOS vs Cursor Agent SDK](https://www.anchorterminal.com/compare/agentos-vs-cursor-agent-sdk.md)\n- [AgentOS vs AI SDK](https://www.anchorterminal.com/compare/agentos-vs-vercel-ai-sdk.md)\n- [Agno vs Cursor Agent SDK](https://www.anchorterminal.com/compare/agno-vs-cursor-agent-sdk.md)\n- [Agno vs AI SDK](https://www.anchorterminal.com/compare/agno-vs-vercel-ai-sdk.md)\n- [BoxLang AI vs Cursor Agent SDK](https://www.anchorterminal.com/compare/boxlang-ai-vs-cursor-agent-sdk.md)\n- [BoxLang AI vs AI SDK](https://www.anchorterminal.com/compare/boxlang-ai-vs-vercel-ai-sdk.md)\n- [Claude Agent SDK vs Cursor Agent SDK](https://www.anchorterminal.com/compare/claude-agent-sdk-vs-cursor-agent-sdk.md)\n- [Claude Agent SDK vs AI SDK](https://www.anchorterminal.com/compare/claude-agent-sdk-vs-vercel-ai-sdk.md)\n- [CrewAI vs Cursor Agent SDK](https://www.anchorterminal.com/compare/crewai-vs-cursor-agent-sdk.md)\n- [CrewAI vs AI SDK](https://www.anchorterminal.com/compare/crewai-vs-vercel-ai-sdk.md)\n- [Cursor Agent SDK vs Docker Agent](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-docker-agent.md)\n- [Cursor Agent SDK vs Agent Development Kit (ADK)](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-google-adk.md)\n- [Cursor Agent SDK vs guilds.run](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-guilds-run.md)\n- [Cursor Agent SDK vs LangGraph](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-langgraph.md)\n- [Cursor Agent SDK vs LlamaIndex Framework](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-llamaindex.md)\n- [Cursor Agent SDK vs Mastra](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-mastra.md)\n- [Cursor Agent SDK vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-microsoft-agent-framework.md)\n- [Cursor Agent SDK vs OpenAI Agents SDK](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-openai-agents-sdk.md)\n- [Cursor Agent SDK vs Pydantic AI](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-pydantic-ai.md)\n- [Cursor Agent SDK vs smolagents](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-smolagents.md)\n- [Cursor Agent SDK vs Strands Agents](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-strands-agents.md)\n- [Cursor Agent SDK vs TradingAgents](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-tradingagents.md)\n- [Docker Agent vs AI SDK](https://www.anchorterminal.com/compare/docker-agent-vs-vercel-ai-sdk.md)\n- [Agent Development Kit (ADK) vs AI SDK](https://www.anchorterminal.com/compare/google-adk-vs-vercel-ai-sdk.md)\n- [guilds.run vs AI SDK](https://www.anchorterminal.com/compare/guilds-run-vs-vercel-ai-sdk.md)\n- [LangGraph vs AI SDK](https://www.anchorterminal.com/compare/langgraph-vs-vercel-ai-sdk.md)\n- [LlamaIndex Framework vs AI SDK](https://www.anchorterminal.com/compare/llamaindex-vs-vercel-ai-sdk.md)\n- [Mastra vs AI SDK](https://www.anchorterminal.com/compare/mastra-vs-vercel-ai-sdk.md)\n- [Microsoft Agent Framework vs AI SDK](https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-vercel-ai-sdk.md)\n- [OpenAI Agents SDK vs AI SDK](https://www.anchorterminal.com/compare/openai-agents-sdk-vs-vercel-ai-sdk.md)\n- [Pydantic AI vs AI SDK](https://www.anchorterminal.com/compare/pydantic-ai-vs-vercel-ai-sdk.md)\n- [smolagents vs AI SDK](https://www.anchorterminal.com/compare/smolagents-vs-vercel-ai-sdk.md)\n- [Strands Agents vs AI SDK](https://www.anchorterminal.com/compare/strands-agents-vs-vercel-ai-sdk.md)\n- [TradingAgents vs AI SDK](https://www.anchorterminal.com/compare/tradingagents-vs-vercel-ai-sdk.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Cursor Agent SDK vs AI SDK", "url": "" } ], "description": "AI SDK scores 89.8 (AA) to Cursor Agent SDK's 63.7 (B) for agent frameworks. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Cursor Agent SDK B 63.7", "AI SDK AA 89.8", "scores" ], "h1": "Cursor Agent SDK vs AI SDK", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/cursor-agent-sdk-vs-vercel-ai-sdk", "published": "2026-10-01", "section": "tools", "title": "Cursor Agent SDK vs AI SDK for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-vercel-ai-sdk" }, "tokens": { "markdown": 5050, "slim": 3030 }, "version": 1 }