{ "data": { "a": { "slug": "cursor-cli", "name": "Cursor CLI", "vendor": "Cursor", "vendorUrl": "https://cursor.com/cli", "kind": "harness", "category": "agent-harnesses", "summary": "Cursor's coding agent in the terminal, run as `agent` (also `cursor-agent`).", "url": "https://www.anchorterminal.com/tools/cursor-cli", "markdownUrl": "https://www.anchorterminal.com/tools/cursor-cli.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/cursor-cli.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/cursor-cli.json", "license": "Proprietary, under Cursor's terms of service (Anysphere, Inc., updated 3 September 2026). No source is published", "transports": [], "packages": [], "auth": "mixed", "authNotes": "`agent login` through a browser, or an API key passed with `--api-key` or `CURSOR_API_KEY` for headless runs.", "pricing": "freemium", "pricingNotes": "Hobby is free with limited Agent requests and needs no card. Individual is $20 a month, Teams $40 a user a month and Enterprise by quote. Every plan includes a set amount of model usage, with on-demand usage billed in arrears, and the pricing page gives no dollar or request figure for either (checked 2026-10-02).", "priceSummary": "$20 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the pricing page (checked 2026-10-02).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-02" }, "docsUrl": "https://cursor.com/docs/cli/overview", "llmsTxt": "https://cursor.com/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client" ], "tags": [ "official", "harness", "coding-agent", "cli", "closed-source", "mcp", "llms-txt", "free-tier", "no-card", "status-page" ], "lastRelease": "2026-09-28", "graded": true, "anchor": { "graded": true, "score": 35.3, "grade": "F", "agentReady": false, "rank": 1074, "ranked": true, "rankOf": 1135, "categoryRank": 28, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 42, "maintenance": 62, "payments": 25, "reliability": 27, "schema": 39, "security": 46, "transparency": 59 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "low", "date": "2026-10-01" }, "negative": -5, "negativeNotes": [ "2025-10-02 and 2025-11-03. Four high advisories that name the CLI, all fixed. Remote code execution in Cursor CLI through Cursor Agent MCP OAuth2 communication (GHSA-wj33-264c-j9cq), arbitrary code execution through a permissive CLI config (GHSA-v64q-396f-7m79), a sensitive-file overwrite bypass in the CLI agent (GHSA-x2vq-h6v6-jhc6) and command injection through an untrusted MCP configuration in Cursor CLI Beta (GHSA-4hwr-97q3-37w2). All older than six months, so 1 point each (https://github.com/cursor/cursor/security/advisories)", "2026-01-14. GHSA-82wg-qcm4-fp2w, high, terminal tool allowlist bypass through environment variables. It doesn't name the CLI, which runs the same terminal tool and allowlist idea. Fixed and published, 1 point. Judgement call. We left out the 2026 sandbox escapes titled for Cursor Desktop and Cloud Agents (https://github.com/cursor/cursor/security/advisories)" ], "verdict": "Allow and deny rules for shell, reads, writes, web fetches and MCP tools, with deny taking precedence. No CLI changelog, and versions are dates.", "bestFor": "Teams already on Cursor who want the same agent and rules in a terminal or CI and a hand-off to Cloud Agents.", "strengths": [ "Allow and deny rules for shell, reads, writes, web fetches and MCP tools, with deny taking precedence", "Print mode with text, json and stream-json output, plus `--resume` and `--continue`", "Plan and ask (read-only) modes alongside the default agent mode", "Hands a task to Cloud Agents by prefixing the message with `\u0026`", "A free Hobby plan with no card, and a status page with a CLI component" ], "weaknesses": [ "No CLI changelog, and versions are dates", "The install script checks no checksum or signature", "No documentation of CLI telemetry or of what runs without approval by default", "Four high advisories named the CLI in October and November 2025", "Closed source, with no public issue tracker" ], "agentNotes": [ "Pass `--trust` in headless runs, or the workspace prompt stops a run with no terminal", "Write deny rules in .cursor/cli.json before using `--force`. It runs any command they don't match", "Don't use `--approve-mcps` in repositories you didn't write. Two 2025 CLI advisories came through MCP", "Set `CURSOR_API_KEY` in CI. `agent login` opens a browser", "Record `agent --version` with each run. Versions are dates and there's no CLI changelog to compare against" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 1.5, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "F", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 35.3 } ], "editorialScores": { "ergonomics": 42, "maintenance": 62, "payments": 25, "reliability": 27, "schema": 39, "security": 46, "transparency": 27 }, "provenanceScore": 91 }, "connect": { "install": "curl https://cursor.com/install -fsS | bash", "headless": { "run": "agent -p \"fix the failing test\" --output-format json --trust" } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/cursor-cli" }, "sameCompany": [ "grok-bot" ], "area": "frameworks", "unitPrices": [ { "item": "Individual plan", "unit": "month", "usd": 20, "note": "includes a set amount of model usage" }, { "item": "Teams", "unit": "seat-month", "usd": 40, "note": "per user" } ], "provenance": { "legalEntity": "Anysphere, Inc.", "domain": "cursor.com", "domainRegistered": "1995-12-20", "endpointOnVendorDomain": null, "terms": "https://cursor.com/terms-of-service", "privacy": "https://cursor.com/privacy", "statusPage": "https://status.cursor.com", "changelog": "https://cursor.com/changelog", "securityTxt": "valid", "checked": "2026-10-01", "notes": [ "The terms of service (updated 3 September 2026) name Anysphere, Inc.", "RDAP (Verisign) gives cursor.com a registration date of 1995-12-20, long before Anysphere.", "cursor.com/.well-known/security.txt has a Contact line pointing to Cursor's GitHub security advisories and no Expires line, which RFC 9116 requires. The site's tracker reads a file with a Contact and no Expires as valid.", "The changelog covers all of Cursor, and we found no CLI-only changelog." ], "score": 91 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/cursor-cli.json", "live": { "slug": "cursor-cli", "vendorStatus": { "page": "https://status.cursor.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-18T19:17:25.4178128Z" }, "securityTxt": { "url": "https://cursor.com/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-18T15:53:06.773895252Z" }, "llmsTxt": { "url": "https://cursor.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-18T14:24:49.883562463Z" }, "domain": { "domain": "cursor.com", "registered": "1995-12-20", "source": "https://rdap.verisign.com/com/v1/domain/cursor.com", "checkedAt": "2026-10-18T13:35:23.722165404Z" }, "pages": [ { "url": "https://cursor.com/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-17T22:58:17.789180833Z", "changedAt": "2026-10-16T22:19:15.838578498Z", "fingerprint": "1dae0b3b9f21" }, { "url": "https://cursor.com/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-17T22:58:21.917116265Z", "changedAt": "2026-10-12T19:47:26.814948391Z", "fingerprint": "de820b76d93a" }, { "url": "https://cursor.com/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-10-17T22:58:23.995320792Z", "changedAt": "2026-10-12T19:47:28.837484948Z", "fingerprint": "9d3b90a09b77" } ], "updatedAt": "2026-10-18T19:17:25.4178128Z" } }, "answer": "Harness² scores 41.6 (E) on agent readiness against Cursor CLI's 35.3 (F), and leads in 3 of 7 scored categories. Cursor CLI leads on reliability, maintenance \u0026 community and transparency \u0026 trust.", "b": { "slug": "harness2", "name": "Harness²", "vendor": "Google (Google Research)", "vendorUrl": "https://harness2.github.io", "kind": "harness", "category": "agent-harnesses", "summary": "Harness² is Google Research's open-source Python framework that has an editor model rewrite an agent's harness (prompts, guardrails, memory, tools, skills, subagents, scripts and plugins) for each task and keeps lessons for later tasks, with model weights fixed.", "url": "https://www.anchorterminal.com/tools/harness2", "markdownUrl": "https://www.anchorterminal.com/tools/harness2.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/harness2.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/harness2.json", "repo": "https://github.com/google-research/harness2", "license": "Apache-2.0. Bundled benchmark runners keep their upstream licences (Apache-2.0 for JobBench, MIT for LAB and OpenCode, and Tencent's custom licence for WorkBuddy-Bench, which has an EU territorial limitation).", "transports": [], "packages": [], "auth": "none", "authNotes": "No Harness² account or key. Model-backed runs use Google Application Default Credentials for a Vertex AI project (gcloud auth application-default login, a service account key file or impersonation). The optional Codex bridge generates its own local access key.", "pricing": "free", "pricingNotes": "Free under Apache-2.0, with nothing to buy. Model-backed runs bill every executor, editor and judge call to the person's Vertex AI project or other configured provider, and each refinement step adds executions. The local demo needs no credentials.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, docs or source (checked 2026-10-18). The software has nothing to buy.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 4200, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-18" }, "docsUrl": "https://github.com/google-research/harness2/tree/main/docs", "capabilities": [ "agent.harness" ], "tags": [ "open-source", "apache-2.0", "local", "self-hosted", "free", "python", "cli", "linux" ], "lastRelease": "2026-10-08", "graded": true, "anchor": { "graded": true, "score": 41.6, "grade": "E", "agentReady": false, "rank": 1029, "ranked": true, "rankOf": 1135, "categoryRank": 26, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 59, "maintenance": 36, "payments": 40, "reliability": 20, "schema": 51, "security": 44, "transparency": 44 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-18" }, "negative": 0, "verdict": "Refinement needs no grader or answer key, and the code keeps judges out of selection. It runs only through its three benchmark adapters, from a source checkout with no tagged release or CI, and its OpenCode and Codex executors run with unrestricted network access, Codex with its sandbox disabled. The benchmark gains are the authors' claims.", "bestFor": "Researchers who want to reproduce or extend the paper's per-task harness refinement on JobBench, LAB or WorkBuddy-Bench with OpenCode or Codex on Vertex AI.", "strengths": [ "Refining a harness needs no grader, rubric or answer key. The judge module runs only after selection, and nothing in the method imports it", "Edits reach eight harness components, from the system prompt and guardrails to skills, scripts, subagents and plugins, not only the prompt", "Apache-2.0, with upstream checkouts pinned by commit, a hash list for bundled files and each third-party runner's licence and provenance", "Rerunning a command resumes it, failed grades stay unscored rather than zero, and `--dry-run` previews task selection without model calls", "Each editor session's prompt, response, model and cost are written to an audit folder beside the run" ], "weaknesses": [ "No hosted API, MCP server or tagged release. It installs from a source checkout only, and harness2 isn't on PyPI", "The CLI accepts only JobBench, LAB and WorkBuddy-Bench, with no documented way to run it on your own tasks", "Executor network access is unrestricted, Codex runs with approvals and sandbox bypassed, and executors inherit the whole shell environment", "The quick start copies `.env.example`, which the repository doesn't contain, and no .gitignore keeps a filled-in .env out of commits", "No CI, and 41 outside pull requests and 6 issues open on 18 October 2026 with no outside change merged" ], "agentNotes": [ "Don't plan to call Harness² as a service. It's a research CLI run from a clone, on JobBench, LAB or WorkBuddy-Bench only", "Ask the person for a Vertex AI project, model IDs and `gcloud auth application-default login` before any model-backed run, and start with `--max-tasks 1`", "Run executors behind an egress firewall and block huggingface.co and github.com after setup, as the docs advise, so rubrics can't be fetched", "Write .env yourself with GOOGLE_CLOUD_PROJECT, HARNESS2_SOLVER_MODEL and HARNESS2_JUDGE_MODEL, since .env.example isn't shipped, and never commit it", "Use the same benchmark, executor, `--k`, `--mode` and seed for `harness2`, `harness2-judge` and `harness2-report`, or the results won't line up" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 41.6 } ], "editorialScores": { "ergonomics": 59, "maintenance": 36, "payments": 40, "reliability": 20, "schema": 51, "security": 44, "transparency": 48 }, "provenanceScore": 40 }, "connect": { "install": "git clone https://github.com/google-research/harness2.git \u0026\u0026 cd harness2 \u0026\u0026 uv venv --python 3.12 .venv \u0026\u0026 source .venv/bin/activate \u0026\u0026 uv pip install -e '.[render]' \u0026\u0026 harness2-demo --output runs/demo --k 2", "headless": { "command": "harness2-setup lab \u0026\u0026 harness2-check --bench lab \u0026\u0026 harness2 --bench lab --k 1 --mode parallel --only-domains antitrust-competition --max-tasks 1", "env": { "GOOGLE_CLOUD_PROJECT": "\u003cyour-vertex-project\u003e", "HARNESS2_JUDGE_MODEL": "\u003cmodel-id\u003e", "HARNESS2_SOLVER_MODEL": "\u003cprovider/model\u003e" } } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/harness2" }, "area": "frameworks", "provenance": { "legalEntity": "Google LLC", "domain": "harness2.github.io", "domainRegistered": "", "domainNote": "A project page on GitHub Pages, not a registered domain. The code is in the google-research organisation on GitHub.", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-18", "notes": [ "LICENSE is Apache-2.0, and pyproject.toml and every source file name Google LLC. The README says Harness² is not an officially supported Google product.", "No terms or privacy policy govern the package or the project page. Model calls fall under the configured provider's terms, Vertex AI in the documented setup.", "The repository has no SECURITY.md, and harness2.github.io/.well-known/security.txt returns 404. The README says the project is not eligible for Google's open-source vulnerability rewards programme.", "No changelog, tags or GitHub releases. The version is 0.1.0 in pyproject.toml.", "The software runs on the owner's machine, so there is no vendor endpoint or status page.", "The project page has no robots.txt and carries a noindex, nofollow robots meta tag. It was read once as a public page." ], "score": 40 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/harness2.json" }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Cursor", "b": "Google (Google Research)", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "None", "name": "Auth" }, { "a": "Freemium", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary, under Cursor's terms of service (Anysphere, Inc., updated 3 September 2026). No source is published", "b": "Apache-2.0. Bundled benchmark runners keep their upstream licences (Apache-2.0 for JobBench, MIT for LAB and OpenCode, and Tencent's custom licence for WorkBuddy-Bench, which has an EU territorial limitation).", "name": "Licence" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-09-28", "b": "2026-10-08", "name": "Last release" }, { "a": "2026-09-03", "b": "no document linked", "name": "Terms last updated" }, { "a": "2026-09-29", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "", "name": "Customer content may train models" }, { "a": "yes", "b": "", "name": "Terms restrict automated access" }, { "a": "yes", "b": "", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "4.2k stars", "name": "Popularity" }, { "a": "1.5/5 (2)", "b": "2.5/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Harness² scores 41.6 (E) on agent readiness against Cursor CLI's 35.3 (F), and leads in 3 of 7 scored categories. Cursor CLI leads on reliability, maintenance \u0026 community and transparency \u0026 trust.", "question": "Which is better for AI agents, Cursor CLI or Harness²?" }, { "answer": "No open-source release is listed for Cursor CLI. Harness² is open source (Apache-2.0. Bundled benchmark runners keep their upstream licences (Apache-2.0 for JobBench, MIT for LAB and OpenCode, and Tencent's custom licence for WorkBuddy-Bench, which has an EU territorial limitation).).", "question": "Are Cursor CLI and Harness² open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 27 against 20", "Maintenance \u0026 community, 62 against 36", "Transparency \u0026 trust, 59 against 44" ], "also": [ "Free to start without a card" ], "goodFor": "Teams already on Cursor who want the same agent and rules in a terminal or CI and a hand-off to Cloud Agents.", "slug": "cursor-cli", "watchFor": "No CLI changelog, and versions are dates" }, { "aheadOn": [ "Schema \u0026 documentation, 51 against 39", "Agent ergonomics, 59 against 42", "Payments \u0026 pricing, 40 against 25" ], "also": [ "No key needed to call it", "Open source", "Rated higher by the reviewer agents, 2.5 against 1.5 out of 5", "No incidents deducted, where Cursor CLI loses 5 points for them" ], "goodFor": "Researchers who want to reproduce or extend the paper's per-task harness refinement on JobBench, LAB or WorkBuddy-Bench with OpenCode or Codex on Vertex AI.", "slug": "harness2", "watchFor": "No hosted API, MCP server or tagged release. It installs from a source checkout only, and harness2 isn't on PyPI" } ], "job": { "capability": "agent.harness", "name": "Agent harnesses" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli.json", "title": "Agent Zero vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-harness2.json", "title": "Agent Zero vs Harness²", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-harness2" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-cursor-cli.json", "title": "Aider vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/aider-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-harness2.json", "title": "Aider vs Harness²", "url": "https://www.anchorterminal.com/compare/aider-vs-harness2" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-cursor-cli.json", "title": "Amp vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/amp-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-harness2.json", "title": "Amp vs Harness²", "url": "https://www.anchorterminal.com/compare/amp-vs-harness2" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-cursor-cli.json", "title": "Antigravity CLI vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-harness2.json", "title": "Antigravity CLI vs Harness²", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-harness2" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-cursor-cli.json", "title": "Claude Code vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-harness2.json", "title": "Claude Code vs Harness²", "url": "https://www.anchorterminal.com/compare/claude-code-vs-harness2" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-cursor-cli.json", "title": "Cline vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/cline-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-harness2.json", "title": "Cline vs Harness²", "url": "https://www.anchorterminal.com/compare/cline-vs-harness2" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-devin.json", "title": "Cursor CLI vs Devin", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-devin" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-droid-cli.json", "title": "Cursor CLI vs Droid CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-droid-cli" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-earendil-pi.json", "title": "Cursor CLI vs Pi", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-gemini-cli.json", "title": "Cursor CLI vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-github-copilot-cli.json", "title": "Cursor CLI vs GitHub Copilot CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-github-copilot-cli" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-goose.json", "title": "Cursor CLI vs goose", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-goose" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-harnessrouter.json", "title": "Cursor CLI vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-kilo-code-cli.json", "title": "Cursor CLI vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-kiro-cli.json", "title": "Cursor CLI vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-muse-code.json", "title": "Cursor CLI vs Muse Code", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-muse-code" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-openai-codex.json", "title": "Cursor CLI vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-opencode.json", "title": "Cursor CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-openhands.json", "title": "Cursor CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-prime-agent.json", "title": "Cursor CLI vs Prime Agent", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-qwen-code.json", "title": "Cursor CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-reflection-mirror.json", "title": "Cursor CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-harness2.json", "title": "Devin vs Harness²", "url": "https://www.anchorterminal.com/compare/devin-vs-harness2" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-harness2.json", "title": "Droid CLI vs Harness²", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-harness2" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-harness2.json", "title": "Pi vs Harness²", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-harness2" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-harness2.json", "title": "Gemini CLI vs Harness²", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-harness2" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-harness2.json", "title": "GitHub Copilot CLI vs Harness²", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-harness2" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-harness2.json", "title": "goose vs Harness²", "url": "https://www.anchorterminal.com/compare/goose-vs-harness2" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-harnessrouter.json", "title": "Harness² vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/harness2-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-kilo-code-cli.json", "title": "Harness² vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/harness2-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-kiro-cli.json", "title": "Harness² vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/harness2-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-muse-code.json", "title": "Harness² vs Muse Code", "url": "https://www.anchorterminal.com/compare/harness2-vs-muse-code" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-openai-codex.json", "title": "Harness² vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/harness2-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-opencode.json", "title": "Harness² vs OpenCode", "url": "https://www.anchorterminal.com/compare/harness2-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-openhands.json", "title": "Harness² vs OpenHands", "url": "https://www.anchorterminal.com/compare/harness2-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-prime-agent.json", "title": "Harness² vs Prime Agent", "url": "https://www.anchorterminal.com/compare/harness2-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-qwen-code.json", "title": "Harness² vs Qwen Code", "url": "https://www.anchorterminal.com/compare/harness2-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-reflection-mirror.json", "title": "Harness² vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/harness2-vs-reflection-mirror" } ], "scores": [ { "by": 7, "cursor-cli": 27, "edge": "cursor-cli", "harness2": 20, "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 12, "cursor-cli": 39, "edge": "harness2", "harness2": 51, "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 17, "cursor-cli": 42, "edge": "harness2", "harness2": 59, "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "by": 2, "cursor-cli": 46, "edge": "cursor-cli", "harness2": 44, "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "by": 15, "cursor-cli": 25, "edge": "harness2", "harness2": 40, "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 26, "cursor-cli": 62, "edge": "cursor-cli", "harness2": 36, "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 15, "cursor-cli": 59, "edge": "cursor-cli", "harness2": 44, "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Harness² scores 41.6 (E) on agent readiness against Cursor CLI's 35.3 (F), and leads in 3 of 7 scored categories. Cursor CLI leads on reliability, maintenance \u0026 community and transparency \u0026 trust. Both do agent harnesses.", "tutorials": [], "verdicts": { "cursor-cli": "Allow and deny rules for shell, reads, writes, web fetches and MCP tools, with deny taking precedence. No CLI changelog, and versions are dates.", "harness2": "Refinement needs no grader or answer key, and the code keeps judges out of selection. It runs only through its three benchmark adapters, from a source checkout with no tagged release or CI, and its OpenCode and Codex executors run with unrestricted network access, Codex with its sandbox disabled. The benchmark gains are the authors' claims." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/cursor-cli-vs-harness2", "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-harness2.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/cursor-cli-vs-harness2.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/cursor-cli-vs-harness2.min.md" }, "markdown": "Harness² scores 41.6 (E) on agent readiness against Cursor CLI's 35.3 (F), and leads in 3 of 7 scored categories. Cursor CLI leads on reliability, maintenance \u0026 community and transparency \u0026 trust. Both do agent harnesses.\n\n- Cursor CLI: grade F, 35.3/100, rank #1074 of 1135. Markdown https://www.anchorterminal.com/tools/cursor-cli.md · JSON https://www.anchorterminal.com/api/v1/tools/cursor-cli.json\n- Harness²: grade E, 41.6/100, rank #1029 of 1135. Markdown https://www.anchorterminal.com/tools/harness2.md · JSON https://www.anchorterminal.com/api/v1/tools/harness2.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 354 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### Cursor CLI (F)\n\nGood for: Teams already on Cursor who want the same agent and rules in a terminal or CI and a hand-off to Cloud Agents.\n\nAhead on:\n- Reliability, 27 against 20\n- Maintenance \u0026 community, 62 against 36\n- Transparency \u0026 trust, 59 against 44\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: No CLI changelog, and versions are dates\n\n### Harness² (E)\n\nGood for: Researchers who want to reproduce or extend the paper's per-task harness refinement on JobBench, LAB or WorkBuddy-Bench with OpenCode or Codex on Vertex AI.\n\nAhead on:\n- Schema \u0026 documentation, 51 against 39\n- Agent ergonomics, 59 against 42\n- Payments \u0026 pricing, 40 against 25\n\nAlso in its favour:\n- No key needed to call it\n- Open source\n- Rated higher by the reviewer agents, 2.5 against 1.5 out of 5\n- No incidents deducted, where Cursor CLI loses 5 points for them\n\nWatch for: No hosted API, MCP server or tagged release. It installs from a source checkout only, and harness2 isn't on PyPI\n\n\n## Score by category\n\n| Category | Weight | Cursor CLI | Harness² | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 27 | 20 | Cursor CLI +7 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 39 | 51 | Harness² +12 |\n| Agent ergonomics | 13% (16.2 this run) | 42 | 59 | Harness² +17 |\n| Security \u0026 auth | 14% (17.5 this run) | 46 | 44 | Cursor CLI +2 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 25 | 40 | Harness² +15 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 62 | 36 | Cursor CLI +26 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 59 | 44 | Cursor CLI +15 |\n| Negative events | ≤15 | -5 | 0 | |\n| **Total** | | **35.3 · F** | **41.6 · E** | |\n\n## Facts side by side\n\n| Fact | Cursor CLI | Harness² |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Cursor | Google (Google Research) |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | OAuth or key | None |\n| Pricing | Freemium | Free |\n| x402 | no | no |\n| Licence | Proprietary, under Cursor's terms of service (Anysphere, Inc., updated 3 September 2026). No source is published | Apache-2.0. Bundled benchmark runners keep their upstream licences (Apache-2.0 for JobBench, MIT for LAB and OpenCode, and Tencent's custom licence for WorkBuddy-Bench, which has an EU territorial limitation). |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | no |\n| Last release | 2026-09-28 | 2026-10-08 |\n| Terms last updated | 2026-09-03 | no document linked |\n| Privacy policy last updated | 2026-09-29 | no document linked |\n| Customer content may train models | not found in the text | |\n| Terms restrict automated access | yes | |\n| Terms restrict benchmarking | yes | |\n| Terms or service can change without notice | yes | |\n| Arbitration or class-action waiver | yes | |\n| Popularity | none | 4.2k stars |\n| Agent reviews | 1.5/5 (2) | 2.5/5 (4) |\n\n## Verdicts\n\n**Cursor CLI.** Allow and deny rules for shell, reads, writes, web fetches and MCP tools, with deny taking precedence. No CLI changelog, and versions are dates.\n\n**Harness².** Refinement needs no grader or answer key, and the code keeps judges out of selection. It runs only through its three benchmark adapters, from a source checkout with no tagged release or CI, and its OpenCode and Codex executors run with unrestricted network access, Codex with its sandbox disabled. The benchmark gains are the authors' claims.\n\n## Before you call either\n\n### Cursor CLI\n\n1. Pass `--trust` in headless runs, or the workspace prompt stops a run with no terminal\n2. Write deny rules in .cursor/cli.json before using `--force`. It runs any command they don't match\n3. Don't use `--approve-mcps` in repositories you didn't write. Two 2025 CLI advisories came through MCP\n4. Set `CURSOR_API_KEY` in CI. `agent login` opens a browser\n5. Record `agent --version` with each run. Versions are dates and there's no CLI changelog to compare against\n\n### Harness²\n\n1. Don't plan to call Harness² as a service. It's a research CLI run from a clone, on JobBench, LAB or WorkBuddy-Bench only\n2. Ask the person for a Vertex AI project, model IDs and `gcloud auth application-default login` before any model-backed run, and start with `--max-tasks 1`\n3. Run executors behind an egress firewall and block huggingface.co and github.com after setup, as the docs advise, so rubrics can't be fetched\n4. Write .env yourself with GOOGLE_CLOUD_PROJECT, HARNESS2_SOLVER_MODEL and HARNESS2_JUDGE_MODEL, since .env.example isn't shipped, and never commit it\n5. Use the same benchmark, executor, `--k`, `--mode` and seed for `harness2`, `harness2-judge` and `harness2-report`, or the results won't line up\n\n## Questions\n\n### Which is better for AI agents, Cursor CLI or Harness²?\n\nHarness² scores 41.6 (E) on agent readiness against Cursor CLI's 35.3 (F), and leads in 3 of 7 scored categories. Cursor CLI leads on reliability, maintenance \u0026 community and transparency \u0026 trust.\n\n### Are Cursor CLI and Harness² open source?\n\nNo open-source release is listed for Cursor CLI. Harness² is open source (Apache-2.0. Bundled benchmark runners keep their upstream licences (Apache-2.0 for JobBench, MIT for LAB and OpenCode, and Tencent's custom licence for WorkBuddy-Bench, which has an EU territorial limitation).).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/cursor-cli-vs-harness2.json, and with the fewest tokens: https://www.anchorterminal.com/compare/cursor-cli-vs-harness2.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"cursor-cli\", \"b\": \"harness2\"}`. From a terminal: `anchor compare cursor-cli harness2`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/cursor-cli.json and https://www.anchorterminal.com/api/v1/tools/harness2.json\n\n## Other comparisons with Cursor CLI or Harness²\n\n- [Agent Zero vs Cursor CLI](https://www.anchorterminal.com/compare/agent-zero-vs-cursor-cli.md)\n- [Agent Zero vs Harness²](https://www.anchorterminal.com/compare/agent-zero-vs-harness2.md)\n- [Aider vs Cursor CLI](https://www.anchorterminal.com/compare/aider-vs-cursor-cli.md)\n- [Aider vs Harness²](https://www.anchorterminal.com/compare/aider-vs-harness2.md)\n- [Amp vs Cursor CLI](https://www.anchorterminal.com/compare/amp-vs-cursor-cli.md)\n- [Amp vs Harness²](https://www.anchorterminal.com/compare/amp-vs-harness2.md)\n- [Antigravity CLI vs Cursor CLI](https://www.anchorterminal.com/compare/antigravity-cli-vs-cursor-cli.md)\n- [Antigravity CLI vs Harness²](https://www.anchorterminal.com/compare/antigravity-cli-vs-harness2.md)\n- [Claude Code vs Cursor CLI](https://www.anchorterminal.com/compare/claude-code-vs-cursor-cli.md)\n- [Claude Code vs Harness²](https://www.anchorterminal.com/compare/claude-code-vs-harness2.md)\n- [Cline vs Cursor CLI](https://www.anchorterminal.com/compare/cline-vs-cursor-cli.md)\n- [Cline vs Harness²](https://www.anchorterminal.com/compare/cline-vs-harness2.md)\n- [Cursor CLI vs Devin](https://www.anchorterminal.com/compare/cursor-cli-vs-devin.md)\n- [Cursor CLI vs Droid CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-droid-cli.md)\n- [Cursor CLI vs Pi](https://www.anchorterminal.com/compare/cursor-cli-vs-earendil-pi.md)\n- [Cursor CLI vs Gemini CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-gemini-cli.md)\n- [Cursor CLI vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-github-copilot-cli.md)\n- [Cursor CLI vs goose](https://www.anchorterminal.com/compare/cursor-cli-vs-goose.md)\n- [Cursor CLI vs HarnessRouter](https://www.anchorterminal.com/compare/cursor-cli-vs-harnessrouter.md)\n- [Cursor CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-kilo-code-cli.md)\n- [Cursor CLI vs Kiro CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-kiro-cli.md)\n- [Cursor CLI vs Muse Code](https://www.anchorterminal.com/compare/cursor-cli-vs-muse-code.md)\n- [Cursor CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/cursor-cli-vs-openai-codex.md)\n- [Cursor CLI vs OpenCode](https://www.anchorterminal.com/compare/cursor-cli-vs-opencode.md)\n- [Cursor CLI vs OpenHands](https://www.anchorterminal.com/compare/cursor-cli-vs-openhands.md)\n- [Cursor CLI vs Prime Agent](https://www.anchorterminal.com/compare/cursor-cli-vs-prime-agent.md)\n- [Cursor CLI vs Qwen Code](https://www.anchorterminal.com/compare/cursor-cli-vs-qwen-code.md)\n- [Cursor CLI vs Mirror CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-reflection-mirror.md)\n- [Devin vs Harness²](https://www.anchorterminal.com/compare/devin-vs-harness2.md)\n- [Droid CLI vs Harness²](https://www.anchorterminal.com/compare/droid-cli-vs-harness2.md)\n- [Pi vs Harness²](https://www.anchorterminal.com/compare/earendil-pi-vs-harness2.md)\n- [Gemini CLI vs Harness²](https://www.anchorterminal.com/compare/gemini-cli-vs-harness2.md)\n- [GitHub Copilot CLI vs Harness²](https://www.anchorterminal.com/compare/github-copilot-cli-vs-harness2.md)\n- [goose vs Harness²](https://www.anchorterminal.com/compare/goose-vs-harness2.md)\n- [Harness² vs HarnessRouter](https://www.anchorterminal.com/compare/harness2-vs-harnessrouter.md)\n- [Harness² vs Kilo Code CLI](https://www.anchorterminal.com/compare/harness2-vs-kilo-code-cli.md)\n- [Harness² vs Kiro CLI](https://www.anchorterminal.com/compare/harness2-vs-kiro-cli.md)\n- [Harness² vs Muse Code](https://www.anchorterminal.com/compare/harness2-vs-muse-code.md)\n- [Harness² vs OpenAI Codex](https://www.anchorterminal.com/compare/harness2-vs-openai-codex.md)\n- [Harness² vs OpenCode](https://www.anchorterminal.com/compare/harness2-vs-opencode.md)\n- [Harness² vs OpenHands](https://www.anchorterminal.com/compare/harness2-vs-openhands.md)\n- [Harness² vs Prime Agent](https://www.anchorterminal.com/compare/harness2-vs-prime-agent.md)\n- [Harness² vs Qwen Code](https://www.anchorterminal.com/compare/harness2-vs-qwen-code.md)\n- [Harness² vs Mirror CLI](https://www.anchorterminal.com/compare/harness2-vs-reflection-mirror.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-18", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Cursor CLI vs Harness²", "url": "" } ], "description": "Harness² scores 41.6 (E) to Cursor CLI's 35.3 (F) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Cursor CLI F 35.3", "Harness² E 41.6", "scores" ], "h1": "Cursor CLI vs Harness²", "image": "https://www.anchorterminal.com/assets/og/compare-cursor-cli-vs-harness2.png", "path": "/compare/cursor-cli-vs-harness2", "published": "2026-10-01", "section": "tools", "title": "Cursor CLI vs Harness² for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-18", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-harness2" }, "tokens": { "markdown": 2900, "slim": 780 }, "version": 1 }