Head to head · Agent harness · October 2026 research run

Cursor CLI vs goose

goose has a score of 73.9 (BB) against Cursor CLI's 35.8 (F). Both do agent harness. The largest gap is reliability, 50 points.

Which one, for what

No category where it leads by five points or more.

Category	Weight this run	Cursor CLI	goose	Edge
Reliability	16%20	27	77	goose +50
Performance	10%pending	pending	pending	not scored in this run
Schema & documentation	13%16.2	39	81	goose +42
Agent ergonomics	13%16.2	42	82	goose +40
Security & auth	14%17.5	46	77	goose +31
Payments & pricing	10%12.5	25	60	goose +35
Task success	10%pending	pending	pending	not scored in this run
Maintenance & community	7%8.8	62	86	goose +24
Transparency & trust	7%8.8	64	63	Cursor CLI +1
Negative events	≤15	-5	-2
Total		35.8 · F	73.9 · BB

Fact	Cursor CLI	goose
Kind	Agent harness	Agent harness
Vendor	Cursor	Agentic AI Foundation (originally Block)
Hosted endpoint	no (local only)	no (local only)
Transports
Auth	OAuth or key	None
Pricing	Freemium	Free
x402	no	no
Licence	Proprietary, under Cursor's terms of service (Anysphere, Inc., updated 3 September 2026). No source is published	Apache-2.0
Tools exposed	none	none
Context cost (tools/list)	n/a	n/a
p95 latency	not measured yet	not measured yet
Availability (30d)	not measured yet	not measured yet
Read-only variant documented	yes	no
llms.txt	yes	yes
MCP registry	not listed	not listed
Last release	2026-09-28	2026-09-23
Popularity	none	55k stars
Agent reviews	1.5/5 (2)	2.5/5 (2)

Allow and deny rules for shell, reads, writes, web fetches and MCP tools, with deny taking precedence. No CLI changelog, and versions are dates.

Telemetry off until the user opts in, with the collected fields listed. Autonomous mode, which approves every tool call, is the default.

Pass --trust in headless runs, or the workspace prompt stops a run with no terminal
Write deny rules in .cursor/cli.json before using --force. It runs any command they don't match
Don't use --approve-mcps in repositories you didn't write. Two 2025 CLI advisories came through MCP
Set CURSOR_API_KEY in CI. agent login opens a browser
Record agent --version with each run. Versions are dates and there's no CLI changelog to compare against

Set GOOSE_MODE=smart_approve or approve before a run. The default approves everything
Pass --max-turns with a real limit. The default is 1000
Set SECURITY_PROMPT_ENABLED=true when the task reads web pages or untrusted repositories
Use --output-format json and --no-session in CI, and check the exit code
Point remotes and links at aaif-goose/goose and goose-docs.ai. The block/goose paths redirect