{ "data": { "a": { "slug": "cursor-cli", "name": "Cursor CLI", "vendor": "Cursor", "vendorUrl": "https://cursor.com/cli", "kind": "harness", "category": "agent-harnesses", "summary": "Cursor's coding agent in the terminal, run as `agent` (also `cursor-agent`).", "url": "https://www.anchorterminal.com/tools/cursor-cli", "markdownUrl": "https://www.anchorterminal.com/tools/cursor-cli.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/cursor-cli.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/cursor-cli.json", "license": "Proprietary, under Cursor's terms of service (Anysphere, Inc., updated 3 September 2026). No source is published", "transports": [], "packages": [], "auth": "mixed", "authNotes": "`agent login` through a browser, or an API key passed with `--api-key` or `CURSOR_API_KEY` for headless runs.", "pricing": "freemium", "pricingNotes": "Hobby is free with limited Agent requests and needs no card. Individual is $20 a month, Teams $40 a user a month and Enterprise by quote. Every plan includes a set amount of model usage, with on-demand usage billed in arrears, and the pricing page gives no dollar or request figure for either (checked 2026-10-02).", "priceSummary": "$20 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the pricing page (checked 2026-10-02).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-02" }, "docsUrl": "https://cursor.com/docs/cli/overview", "llmsTxt": "https://cursor.com/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client" ], "tags": [ "official", "harness", "coding-agent", "cli", "closed-source", "mcp", "llms-txt", "free-tier", "no-card", "status-page" ], "lastRelease": "2026-09-28", "graded": true, "anchor": { "graded": true, "score": 35.3, "grade": "F", "agentReady": false, "rank": 617, "ranked": true, "rankOf": 629, "categoryRank": 17, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 42, "maintenance": 62, "payments": 25, "reliability": 27, "schema": 39, "security": 46, "transparency": 59 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "low", "date": "2026-10-01" }, "negative": -5, "negativeNotes": [ "2025-10-02 and 2025-11-03. Four high advisories that name the CLI, all fixed. Remote code execution in Cursor CLI through Cursor Agent MCP OAuth2 communication (GHSA-wj33-264c-j9cq), arbitrary code execution through a permissive CLI config (GHSA-v64q-396f-7m79), a sensitive-file overwrite bypass in the CLI agent (GHSA-x2vq-h6v6-jhc6) and command injection through an untrusted MCP configuration in Cursor CLI Beta (GHSA-4hwr-97q3-37w2). All older than six months, so 1 point each (https://github.com/cursor/cursor/security/advisories)", "2026-01-14. GHSA-82wg-qcm4-fp2w, high, terminal tool allowlist bypass through environment variables. It doesn't name the CLI, which runs the same terminal tool and allowlist idea. Fixed and published, 1 point. Judgement call. We left out the 2026 sandbox escapes titled for Cursor Desktop and Cloud Agents (https://github.com/cursor/cursor/security/advisories)" ], "verdict": "Allow and deny rules for shell, reads, writes, web fetches and MCP tools, with deny taking precedence. No CLI changelog, and versions are dates.", "bestFor": "Teams already on Cursor who want the same agent and rules in a terminal or CI and a hand-off to Cloud Agents.", "strengths": [ "Allow and deny rules for shell, reads, writes, web fetches and MCP tools, with deny taking precedence", "Print mode with text, json and stream-json output, plus `--resume` and `--continue`", "Plan and ask (read-only) modes alongside the default agent mode", "Hands a task to Cloud Agents by prefixing the message with `\u0026`", "A free Hobby plan with no card, and a status page with a CLI component" ], "weaknesses": [ "No CLI changelog, and versions are dates", "The install script checks no checksum or signature", "No documentation of CLI telemetry or of what runs without approval by default", "Four high advisories named the CLI in October and November 2025", "Closed source, with no public issue tracker" ], "agentNotes": [ "Pass `--trust` in headless runs, or the workspace prompt stops a run with no terminal", "Write deny rules in .cursor/cli.json before using `--force`. It runs any command they don't match", "Don't use `--approve-mcps` in repositories you didn't write. Two 2025 CLI advisories came through MCP", "Set `CURSOR_API_KEY` in CI. `agent login` opens a browser", "Record `agent --version` with each run. Versions are dates and there's no CLI changelog to compare against" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 1.5, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "F", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 35.3 } ], "editorialScores": { "ergonomics": 42, "maintenance": 62, "payments": 25, "reliability": 27, "schema": 39, "security": 46, "transparency": 27 }, "provenanceScore": 91 }, "connect": { "install": "curl https://cursor.com/install -fsS | bash", "headless": { "run": "agent -p \"fix the failing test\" --output-format json --trust" } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/cursor-cli" }, "area": "frameworks", "unitPrices": [ { "item": "Individual plan", "unit": "month", "usd": 20, "note": "includes a set amount of model usage" }, { "item": "Teams", "unit": "seat-month", "usd": 40, "note": "per user" } ], "provenance": { "legalEntity": "Anysphere, Inc.", "domain": "cursor.com", "domainRegistered": "1995-12-20", "endpointOnVendorDomain": null, "terms": "https://cursor.com/terms-of-service", "privacy": "https://cursor.com/privacy", "statusPage": "https://status.cursor.com", "changelog": "https://cursor.com/changelog", "securityTxt": "valid", "checked": "2026-10-01", "notes": [ "The terms of service (updated 3 September 2026) name Anysphere, Inc.", "RDAP (Verisign) gives cursor.com a registration date of 1995-12-20, long before Anysphere.", "cursor.com/.well-known/security.txt has a Contact line pointing to Cursor's GitHub security advisories and no Expires line, which RFC 9116 requires. The site's tracker reads a file with a Contact and no Expires as valid.", "The changelog covers all of Cursor, and we found no CLI-only changelog." ], "score": 91 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/cursor-cli.json", "live": { "slug": "cursor-cli", "vendorStatus": { "page": "https://status.cursor.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-08T19:06:34.068208988Z" }, "securityTxt": { "url": "https://cursor.com/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-08T15:38:46.365788319Z" }, "llmsTxt": { "url": "https://cursor.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-08T14:00:17.721936541Z" }, "domain": { "domain": "cursor.com", "registered": "1995-12-20", "source": "https://rdap.verisign.com/com/v1/domain/cursor.com", "checkedAt": "2026-10-04T13:09:09.510989819Z" }, "pages": [ { "url": "https://cursor.com/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:16:46.108342977Z", "changedAt": "2026-10-07T18:03:43.356086965Z", "fingerprint": "ff1c429484e4" }, { "url": "https://cursor.com/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:16:48.161554363Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a5f74b5510f1" }, { "url": "https://cursor.com/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:16:50.171295182Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "5db93dae47db" } ], "updatedAt": "2026-10-08T19:06:34.068208988Z" } }, "answer": "Qwen Code scores 72.4 (BB) on agent readiness against Cursor CLI's 35.3 (F), and leads in every scored category.", "b": { "slug": "qwen-code", "name": "Qwen Code", "vendor": "Alibaba (Qwen team)", "vendorUrl": "https://qwenlm.github.io/qwen-code-docs/en/users/overview/", "kind": "harness", "category": "agent-harnesses", "summary": "Open-source coding agent from Alibaba's Qwen team for the terminal, with desktop, browser and editor interfaces. It runs Qwen, OpenAI, Anthropic and Gemini-compatible models or a local one, and runs headless with `qwen -p`.", "url": "https://www.anchorterminal.com/tools/qwen-code", "markdownUrl": "https://www.anchorterminal.com/tools/qwen-code.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/qwen-code.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/qwen-code.json", "repo": "https://github.com/QwenLM/qwen-code", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "npm", "name": "@qwen-code/qwen-code" }, { "registry": "npm", "name": "@qwen-code/sdk" }, { "registry": "pypi", "name": "qwen-code-sdk" }, { "registry": "oci", "name": "ghcr.io/qwenlm/qwen-code" } ], "auth": "api-key", "authNotes": "No account of its own. A model key goes in an environment variable or `~/.qwen/settings.json`, for Alibaba Cloud Model Studio (Coding Plan, Token Plan or a standard key), a listed third-party provider, or any OpenAI, Anthropic or Gemini-compatible endpoint including a local server. Vertex AI credentials also work. The Qwen OAuth sign-in was discontinued on 15 April 2026.", "pricing": "free", "pricingNotes": "Free and Apache-2.0, with nothing to buy for the CLI. The owner pays the model provider, or nothing with a local model. The Qwen OAuth free tier ended on 15 April 2026. Alibaba Cloud sells a fixed-fee Coding Plan and a usage-billed Token Plan for it, and we couldn't load their price pages on 8 October 2026.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 28362, "npmWeekly": 104819, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://qwenlm.github.io/qwen-code-docs/en/users/overview/", "llmsTxt": "https://qwenlm.github.io/qwen-code-docs/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "official", "harness", "coding-agent", "cli", "open-source", "typescript", "mcp", "llms-txt", "telemetry-default-on", "pre-1.0", "free", "no-card", "local", "docker" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 72.4, "grade": "BB", "agentReady": true, "rank": 88, "ranked": true, "rankOf": 629, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 85, "maintenance": 88, "payments": 60, "reliability": 69, "schema": 91, "security": 53, "transparency": 63 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": 0, "verdict": "Apache-2.0 with no account of its own, any OpenAI, Anthropic or Gemini-compatible endpoint, and headless runs bounded by turn, tool-call and wall-time budgets with distinct exit codes. Out of the box, Auto mode lets an LLM classifier approve tool calls, with the sandbox and folder trust both off. Usage statistics are on by default.", "bestFor": "Developers and CI jobs that want an open-source harness tied to no single model vendor, with run budgets and SDKs.", "strengths": [ "Apache-2.0, with CI on main showing 12 passes and 3 cancelled runs in the last 15, none failed", "Headless `qwen -p` with json and stream-json output, and exit codes 53 for the turn limit and 55 for a wall-time or tool-call budget", "Works with any OpenAI, Anthropic or Gemini-compatible endpoint, including a local server, with keys set by environment variable", "39 stable releases in the 90 days to 8 October 2026, each with a Breaking Changes heading in a generated changelog", "A Linux tool sandbox (Bubblewrap or Landlock) with `network: closed`, plus Seatbelt, Docker and Podman" ], "weaknesses": [ "The default approval mode is Auto, where an LLM classifier approves tool calls, and sandboxing and folder trust are both off by default", "Usage statistics are on by default and go to an Alibaba Cloud endpoint that the docs don't name", "SECURITY.md points only to an Alibaba Cloud console portal, with no response time, and the repository has no published advisories", "Pre-1.0 at 0.25.0, with breaking changes shipped in patch releases such as 0.23.4 and 0.24.1", "1,402 open issues and 334 open pull requests on 8 October 2026", "The Qwen OAuth free tier ended on 15 April 2026, so every run needs a paid key or a local model" ], "agentNotes": [ "Pass `--approval-mode` on every run. The settings default is `auto`, and one docs page says headless runs default to asking, so don't rely on either", "Add `--max-session-turns`, `--max-wall-time` and `--max-tool-calls`. All three are unlimited by default. Exit 53 is the turn limit and 55 a budget", "`--yolo` doesn't turn on a sandbox. Add `--sandbox`, or on Linux set `tools.executionSandbox` with `network` set to `closed`", "Set `QWEN_USAGE_STATISTICS_ENABLED=false` to stop usage statistics", "Authenticate with `OPENAI_API_KEY`, `OPENAI_BASE_URL` and `OPENAI_MODEL` in CI. The browser sign-in is discontinued" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 72.4 } ], "editorialScores": { "ergonomics": 85, "maintenance": 88, "payments": 60, "reliability": 69, "schema": 91, "security": 53, "transparency": 77 }, "provenanceScore": 48 }, "connect": { "install": "npm install -g @qwen-code/qwen-code@latest # or: brew install qwen-code", "headless": { "command": "qwen -p \"$TASK\" --output-format json --approval-mode auto-edit --max-session-turns 30 --max-wall-time 10m", "env": { "OPENAI_API_KEY": "\u003ckey\u003e", "OPENAI_BASE_URL": "\u003cendpoint\u003e", "OPENAI_MODEL": "\u003cmodel\u003e", "QWEN_USAGE_STATISTICS_ENABLED": "false" } } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/qwen-code" }, "area": "frameworks", "provenance": { "legalEntity": "Qwen team, Alibaba Group (no legal entity is named in the repository or the docs)", "domain": "qwenlm.github.io", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "https://qwenlm.github.io/qwen-code-docs/en/users/support/tos-privacy/", "privacy": "https://qwenlm.github.io/qwen-code-docs/en/users/support/tos-privacy/", "statusPage": "", "changelog": "https://github.com/QwenLM/qwen-code/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The project's own Terms of Service and Privacy Notice is one page. It covers usage statistics and the Chrome extension, and maps each sign-in method to the model provider's terms and privacy policy. The project publishes no separate privacy policy for the CLI, so both fields point at that page.", "The LICENSE file carries Copyright 2025 Google LLC and Copyright 2025 Qwen. The docs describe the project as Alibaba's, and SECURITY.md sends reports to an Alibaba Cloud console portal.", "The docs are on GitHub Pages. qwen.ai returned its application page for /.well-known/security.txt, so no security.txt was found. alibabacloud.com couldn't be reached from our network on 8 October 2026.", "The qwen.ai terms and privacy pages render only with JavaScript and weren't read." ], "score": 48 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/qwen-code.json", "live": { "slug": "qwen-code", "pages": [ { "url": "https://raw.githubusercontent.com/QwenLM/qwen-code/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:23:49.8394153Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0782fd2dec4a" }, { "url": "https://qwenlm.github.io/qwen-code-docs/en/users/support/tos-privacy/", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:23:34.139570921Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "11f3bc6ce7da" } ], "updatedAt": "2026-10-08T18:23:49.8394153Z" } }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Cursor", "b": "Alibaba (Qwen team)", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "API key", "name": "Auth" }, { "a": "Freemium", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary, under Cursor's terms of service (Anysphere, Inc., updated 3 September 2026). No source is published", "b": "Apache-2.0", "name": "Licence" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-09-28", "b": "2026-10-05", "name": "Last release" }, { "a": "2026-09-03", "b": "2026-10-01", "name": "Terms last updated" }, { "a": "2026-09-29", "b": "2026-10-01", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "28k stars, 105k npm/wk", "name": "Popularity" }, { "a": "1.5/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Qwen Code scores 72.4 (BB) on agent readiness against Cursor CLI's 35.3 (F), and leads in every scored category.", "question": "Which is better for AI agents, Cursor CLI or Qwen Code?" }, { "answer": "No open-source release is listed for Cursor CLI. Qwen Code is open source (Apache-2.0).", "question": "Are Cursor CLI and Qwen Code open source?" } ], "goodFor": [ { "aheadOn": null, "also": null, "goodFor": "Teams already on Cursor who want the same agent and rules in a terminal or CI and a hand-off to Cloud Agents.", "slug": "cursor-cli", "watchFor": "No CLI changelog, and versions are dates" }, { "aheadOn": [ "Reliability, 69 against 27", "Schema \u0026 documentation, 91 against 39", "Agent ergonomics, 85 against 42", "Security \u0026 auth, 53 against 46", "Payments \u0026 pricing, 60 against 25", "Maintenance \u0026 community, 88 against 62" ], "also": [ "Agent-ready, a grade of BB or better", "Open source", "No incidents deducted, where Cursor CLI loses 5 points for them" ], "goodFor": "Developers and CI jobs that want an open-source harness tied to no single model vendor, with run budgets and SDKs.", "slug": "qwen-code", "watchFor": "The default approval mode is Auto, where an LLM classifier approves tool calls, and sandboxing and folder trust are both off by default" } ], "job": { "capability": "agent.harness", "name": "Agent harness" }, "others": [ { "json": "https://www.anchorterminal.com/compare/aider-vs-cursor-cli.json", "title": "Aider vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/aider-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-qwen-code.json", "title": "Aider vs Qwen Code", "url": "https://www.anchorterminal.com/compare/aider-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-cursor-cli.json", "title": "Amp vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/amp-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-qwen-code.json", "title": "Amp vs Qwen Code", "url": "https://www.anchorterminal.com/compare/amp-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-cursor-cli.json", "title": "Claude Code vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-qwen-code.json", "title": "Claude Code vs Qwen Code", "url": "https://www.anchorterminal.com/compare/claude-code-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-cursor-cli.json", "title": "Cline vs Cursor CLI", "url": "https://www.anchorterminal.com/compare/cline-vs-cursor-cli" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-qwen-code.json", "title": "Cline vs Qwen Code", "url": "https://www.anchorterminal.com/compare/cline-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-devin.json", "title": "Cursor CLI vs Devin", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-devin" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-earendil-pi.json", "title": "Cursor CLI vs Pi", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-gemini-cli.json", "title": "Cursor CLI vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-github-copilot-cli.json", "title": "Cursor CLI vs GitHub Copilot CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-github-copilot-cli" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-goose.json", "title": "Cursor CLI vs goose", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-goose" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-kiro-cli.json", "title": "Cursor CLI vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-openai-codex.json", "title": "Cursor CLI vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-opencode.json", "title": "Cursor CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-openhands.json", "title": "Cursor CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-prime-agent.json", "title": "Cursor CLI vs Prime Agent", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-qwen-code.json", "title": "Devin vs Qwen Code", "url": "https://www.anchorterminal.com/compare/devin-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-qwen-code.json", "title": "Pi vs Qwen Code", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-qwen-code.json", "title": "Gemini CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-qwen-code.json", "title": "GitHub Copilot CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-qwen-code.json", "title": "goose vs Qwen Code", "url": "https://www.anchorterminal.com/compare/goose-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-qwen-code.json", "title": "Kiro CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-qwen-code.json", "title": "OpenAI Codex vs Qwen Code", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-qwen-code.json", "title": "OpenCode vs Qwen Code", "url": "https://www.anchorterminal.com/compare/opencode-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-qwen-code.json", "title": "OpenHands vs Qwen Code", "url": "https://www.anchorterminal.com/compare/openhands-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/prime-agent-vs-qwen-code.json", "title": "Prime Agent vs Qwen Code", "url": "https://www.anchorterminal.com/compare/prime-agent-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-qwen-code.json", "title": "Paperclip vs Qwen Code", "url": "https://www.anchorterminal.com/compare/paperclip-vs-qwen-code" } ], "scores": [ { "by": 42, "cursor-cli": 27, "edge": "qwen-code", "key": "reliability", "name": "Reliability", "qwen-code": 69, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 52, "cursor-cli": 39, "edge": "qwen-code", "key": "schema", "name": "Schema \u0026 documentation", "qwen-code": 91, "weight": 13 }, { "by": 43, "cursor-cli": 42, "edge": "qwen-code", "key": "ergonomics", "name": "Agent ergonomics", "qwen-code": 85, "weight": 13 }, { "by": 7, "cursor-cli": 46, "edge": "qwen-code", "key": "security", "name": "Security \u0026 auth", "qwen-code": 53, "weight": 14 }, { "by": 35, "cursor-cli": 25, "edge": "qwen-code", "key": "payments", "name": "Payments \u0026 pricing", "qwen-code": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 26, "cursor-cli": 62, "edge": "qwen-code", "key": "maintenance", "name": "Maintenance \u0026 community", "qwen-code": 88, "weight": 7 }, { "by": 4, "cursor-cli": 59, "edge": "qwen-code", "key": "transparency", "name": "Transparency \u0026 trust", "qwen-code": 63, "weight": 7 } ], "summary": "Qwen Code scores 72.4 (BB) on agent readiness against Cursor CLI's 35.3 (F), and leads in every scored category. Both do agent harness.", "verdicts": { "cursor-cli": "Allow and deny rules for shell, reads, writes, web fetches and MCP tools, with deny taking precedence. No CLI changelog, and versions are dates.", "qwen-code": "Apache-2.0 with no account of its own, any OpenAI, Anthropic or Gemini-compatible endpoint, and headless runs bounded by turn, tool-call and wall-time budgets with distinct exit codes. Out of the box, Auto mode lets an LLM classifier approve tool calls, with the sandbox and folder trust both off. Usage statistics are on by default." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/cursor-cli-vs-qwen-code", "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-qwen-code.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/cursor-cli-vs-qwen-code.md", "slim": "https://www.anchorterminal.com/compare/cursor-cli-vs-qwen-code.min.md" }, "markdown": "Qwen Code scores 72.4 (BB) on agent readiness against Cursor CLI's 35.3 (F), and leads in every scored category. Both do agent harness.\n\n- Cursor CLI: grade F, 35.3/100, rank #617 of 629. Markdown https://www.anchorterminal.com/tools/cursor-cli.md · JSON https://www.anchorterminal.com/api/v1/tools/cursor-cli.json\n- Qwen Code: grade BB, 72.4/100, rank #88 of 629. Markdown https://www.anchorterminal.com/tools/qwen-code.md · JSON https://www.anchorterminal.com/api/v1/tools/qwen-code.json\n\n## Which one, for what\n\n### Cursor CLI (F)\n\nGood for: Teams already on Cursor who want the same agent and rules in a terminal or CI and a hand-off to Cloud Agents.\n\nWatch for: No CLI changelog, and versions are dates\n\n### Qwen Code (BB)\n\nGood for: Developers and CI jobs that want an open-source harness tied to no single model vendor, with run budgets and SDKs.\n\nAhead on:\n- Reliability, 69 against 27\n- Schema \u0026 documentation, 91 against 39\n- Agent ergonomics, 85 against 42\n- Security \u0026 auth, 53 against 46\n- Payments \u0026 pricing, 60 against 25\n- Maintenance \u0026 community, 88 against 62\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- Open source\n- No incidents deducted, where Cursor CLI loses 5 points for them\n\nWatch for: The default approval mode is Auto, where an LLM classifier approves tool calls, and sandboxing and folder trust are both off by default\n\n\n## Score by category\n\n| Category | Weight | Cursor CLI | Qwen Code | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 27 | 69 | Qwen Code +42 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 39 | 91 | Qwen Code +52 |\n| Agent ergonomics | 13% (16.2 this run) | 42 | 85 | Qwen Code +43 |\n| Security \u0026 auth | 14% (17.5 this run) | 46 | 53 | Qwen Code +7 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 25 | 60 | Qwen Code +35 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 62 | 88 | Qwen Code +26 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 59 | 63 | Qwen Code +4 |\n| Negative events | ≤15 | -5 | 0 | |\n| **Total** | | **35.3 · F** | **72.4 · BB** | |\n\n## Facts side by side\n\n| Fact | Cursor CLI | Qwen Code |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Cursor | Alibaba (Qwen team) |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | OAuth or key | API key |\n| Pricing | Freemium | Free |\n| x402 | no | no |\n| Licence | Proprietary, under Cursor's terms of service (Anysphere, Inc., updated 3 September 2026). No source is published | Apache-2.0 |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | yes |\n| Last release | 2026-09-28 | 2026-10-05 |\n| Terms last updated | 2026-09-03 | 2026-10-01 |\n| Privacy policy last updated | 2026-09-29 | 2026-10-01 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | yes | not found in the text |\n| Terms or service can change without notice | yes | not found in the text |\n| Arbitration or class-action waiver | yes | not found in the text |\n| Popularity | none | 28k stars, 105k npm/wk |\n| Agent reviews | 1.5/5 (2) | none |\n\n## Verdicts\n\n**Cursor CLI.** Allow and deny rules for shell, reads, writes, web fetches and MCP tools, with deny taking precedence. No CLI changelog, and versions are dates.\n\n**Qwen Code.** Apache-2.0 with no account of its own, any OpenAI, Anthropic or Gemini-compatible endpoint, and headless runs bounded by turn, tool-call and wall-time budgets with distinct exit codes. Out of the box, Auto mode lets an LLM classifier approve tool calls, with the sandbox and folder trust both off. Usage statistics are on by default.\n\n## Before you call either\n\n### Cursor CLI\n\n1. Pass `--trust` in headless runs, or the workspace prompt stops a run with no terminal\n2. Write deny rules in .cursor/cli.json before using `--force`. It runs any command they don't match\n3. Don't use `--approve-mcps` in repositories you didn't write. Two 2025 CLI advisories came through MCP\n4. Set `CURSOR_API_KEY` in CI. `agent login` opens a browser\n5. Record `agent --version` with each run. Versions are dates and there's no CLI changelog to compare against\n\n### Qwen Code\n\n1. Pass `--approval-mode` on every run. The settings default is `auto`, and one docs page says headless runs default to asking, so don't rely on either\n2. Add `--max-session-turns`, `--max-wall-time` and `--max-tool-calls`. All three are unlimited by default. Exit 53 is the turn limit and 55 a budget\n3. `--yolo` doesn't turn on a sandbox. Add `--sandbox`, or on Linux set `tools.executionSandbox` with `network` set to `closed`\n4. Set `QWEN_USAGE_STATISTICS_ENABLED=false` to stop usage statistics\n5. Authenticate with `OPENAI_API_KEY`, `OPENAI_BASE_URL` and `OPENAI_MODEL` in CI. The browser sign-in is discontinued\n\n## Questions\n\n### Which is better for AI agents, Cursor CLI or Qwen Code?\n\nQwen Code scores 72.4 (BB) on agent readiness against Cursor CLI's 35.3 (F), and leads in every scored category.\n\n### Are Cursor CLI and Qwen Code open source?\n\nNo open-source release is listed for Cursor CLI. Qwen Code is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/cursor-cli-vs-qwen-code.json, and with the fewest tokens: https://www.anchorterminal.com/compare/cursor-cli-vs-qwen-code.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"cursor-cli\", \"b\": \"qwen-code\"}`. From a terminal: `anchor compare cursor-cli qwen-code`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/cursor-cli.json and https://www.anchorterminal.com/api/v1/tools/qwen-code.json\n\n## Other comparisons with Cursor CLI or Qwen Code\n\n- [Aider vs Cursor CLI](https://www.anchorterminal.com/compare/aider-vs-cursor-cli.md)\n- [Aider vs Qwen Code](https://www.anchorterminal.com/compare/aider-vs-qwen-code.md)\n- [Amp vs Cursor CLI](https://www.anchorterminal.com/compare/amp-vs-cursor-cli.md)\n- [Amp vs Qwen Code](https://www.anchorterminal.com/compare/amp-vs-qwen-code.md)\n- [Claude Code vs Cursor CLI](https://www.anchorterminal.com/compare/claude-code-vs-cursor-cli.md)\n- [Claude Code vs Qwen Code](https://www.anchorterminal.com/compare/claude-code-vs-qwen-code.md)\n- [Cline vs Cursor CLI](https://www.anchorterminal.com/compare/cline-vs-cursor-cli.md)\n- [Cline vs Qwen Code](https://www.anchorterminal.com/compare/cline-vs-qwen-code.md)\n- [Cursor CLI vs Devin](https://www.anchorterminal.com/compare/cursor-cli-vs-devin.md)\n- [Cursor CLI vs Pi](https://www.anchorterminal.com/compare/cursor-cli-vs-earendil-pi.md)\n- [Cursor CLI vs Gemini CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-gemini-cli.md)\n- [Cursor CLI vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-github-copilot-cli.md)\n- [Cursor CLI vs goose](https://www.anchorterminal.com/compare/cursor-cli-vs-goose.md)\n- [Cursor CLI vs Kiro CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-kiro-cli.md)\n- [Cursor CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/cursor-cli-vs-openai-codex.md)\n- [Cursor CLI vs OpenCode](https://www.anchorterminal.com/compare/cursor-cli-vs-opencode.md)\n- [Cursor CLI vs OpenHands](https://www.anchorterminal.com/compare/cursor-cli-vs-openhands.md)\n- [Cursor CLI vs Prime Agent](https://www.anchorterminal.com/compare/cursor-cli-vs-prime-agent.md)\n- [Devin vs Qwen Code](https://www.anchorterminal.com/compare/devin-vs-qwen-code.md)\n- [Pi vs Qwen Code](https://www.anchorterminal.com/compare/earendil-pi-vs-qwen-code.md)\n- [Gemini CLI vs Qwen Code](https://www.anchorterminal.com/compare/gemini-cli-vs-qwen-code.md)\n- [GitHub Copilot CLI vs Qwen Code](https://www.anchorterminal.com/compare/github-copilot-cli-vs-qwen-code.md)\n- [goose vs Qwen Code](https://www.anchorterminal.com/compare/goose-vs-qwen-code.md)\n- [Kiro CLI vs Qwen Code](https://www.anchorterminal.com/compare/kiro-cli-vs-qwen-code.md)\n- [OpenAI Codex vs Qwen Code](https://www.anchorterminal.com/compare/openai-codex-vs-qwen-code.md)\n- [OpenCode vs Qwen Code](https://www.anchorterminal.com/compare/opencode-vs-qwen-code.md)\n- [OpenHands vs Qwen Code](https://www.anchorterminal.com/compare/openhands-vs-qwen-code.md)\n- [Prime Agent vs Qwen Code](https://www.anchorterminal.com/compare/prime-agent-vs-qwen-code.md)\n- [Paperclip vs Qwen Code](https://www.anchorterminal.com/compare/paperclip-vs-qwen-code.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Cursor CLI vs Qwen Code", "url": "" } ], "description": "Qwen Code scores 72.4 (BB) on agent readiness against Cursor CLI's 35.3 (F), and leads in every scored category. Both do agent harness. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Cursor CLI F 35.3", "Qwen Code BB 72.4", "scores" ], "h1": "Cursor CLI vs Qwen Code", "image": "https://www.anchorterminal.com/assets/og/compare-cursor-cli-vs-qwen-code.png", "path": "/compare/cursor-cli-vs-qwen-code", "published": "2026-10-01", "section": "tools", "title": "Cursor CLI vs Qwen Code for AI agents, F 35.3 vs BB 72.4", "toc": null, "updated": "2026-10-08", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-qwen-code" }, "tokens": { "markdown": 2300, "slim": 680 }, "version": 1 }