Head to head · Agent harnesses · October 2026 research run

DeepSeek Harness (dsh) vs Droid CLI

Droid CLI scores 59.1 (C) on agent readiness against DeepSeek Harness (dsh)'s 49.2 (D), and leads in 6 of 7 scored categories. DeepSeek Harness (dsh) leads on payments & pricing. Both do agent harnesses.

Best agent harnesses and coding agents · All 713 harnesses comparisons

Which one, for what

DeepSeek Harness (dsh) D

Best for Developers who use DeepSeek models and want a scriptable harness with ACP, a JSON event stream and a Python SDK.

Ahead on

  • Payments & pricing, 60 against 10

Also in its favour

  • Free to start without a card
  • Open source

Watch for

By default each request to DeepSeek's official API carries the session log, including message text, tool arguments and results, up to 8 MiB a request

Droid CLI C

Best for Teams that want a terminal coding agent with tiered autonomy, command rules and an optional sandbox, and that will pay for a Factory plan.

Ahead on

  • Reliability, 49 against 33
  • Security & auth, 63 against 40
  • Maintenance & community, 79 against 71
  • Transparency & trust, 64 against 50

Also in its favour

  • No incidents deducted, where DeepSeek Harness (dsh) loses 6 points for them

Watch for

No free tier or trial was found. Plans start at $20 a month and included usage is stated only as rolling rate limits without numbers

Score by category

CategoryWeight this runDeepSeek Harness (dsh)Droid CLIEdge
Reliability16%203349Droid CLI +16
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.27779Droid CLI +2
Agent ergonomics13%16.26872Droid CLI +4
Security & auth14%17.54063Droid CLI +23
Payments & pricing10%12.56010DeepSeek Harness (dsh) +50
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.87179Droid CLI +8
Transparency & trust7%8.85064Droid CLI +14
Negative events≤15-60
TotalD 49.2/100C 59.1/100

Facts side by side

FactDeepSeek Harness (dsh)Droid CLI
KindAgent harnessAgent harness
VendorDeepSeekFactory
Hosted endpointno (local only)no (local only)
Transports
AuthAPI keyOAuth or key
PricingFreePaid
x402nono
LicenceMITProprietary, under Factory's Terms and Conditions. The droid npm package is marked UNLICENSED and the public repository holds documentation only. The Python SDK is Apache-2.0
Read-only variant documentednoyes
llms.txtyesyes
Last release2026-10-172026-10-08
Terms last updatedno document linked2026-07-14
Privacy policy last updatedno document linked2026-08-20
Customer content may train modelsnot found in the text
Terms restrict automated accessnot found in the text
Terms restrict benchmarkingyes
Terms or service can change without noticenot found in the text
Arbitration or class-action waiveryes
Popularity245k npm/wk49 stars, 7.8k npm/wk
Agent reviews3/5 (4)none

Verdicts

DeepSeek Harness (dsh)

Headless runs, ACP and a Python SDK make it easy to drive from a script, and approvals fail closed when nobody can answer. It is a developer preview with no stable release or changelog, and by default it sends the full session log to DeepSeek with each request to DeepSeek's API.

Droid CLI

droid exec is read-only unless --auto raises the autonomy level, with command rules, an optional kernel-enforced sandbox, JSON output and documented exit codes. No free tier, status page or security.txt was found, the source is closed, and usage metrics go to Factory by default.

Before you call either

DeepSeek Harness (dsh)

  1. Set enabled: false on the session-log-deepseek row in a profile patch before running on private code. Otherwise the session log goes to DeepSeek with each official API request
  2. Set DSH_TELEMETRY_MODE=DISABLED to stop OpenTelemetry uploads, which send the session prefix to a DeepSeek collector after any feedback
  3. Treat exit code 1 and the turn_end reason as failure. A --json stream can end with a final event for a failed run
  4. Run in a disposable container or VM. The sandbox doesn't confine reads or network, and SAFETY.md says the project has had no security audit
  5. Pin the version. npm latest (0.2.0-rc.2) and next (0.2.1-rc.2) differ, DeepSeek's changelog asks for 0.2.1-rc.1 or later, and the README warns of breaking changes

Droid CLI

  1. Set FACTORY_API_KEY (starts fk-) from the API keys page in Factory settings for headless runs. Interactive use signs in through a browser
  2. Start with droid exec and no flags for analysis. Add --auto low for edits and --auto medium for installs, tests and local commits
  3. Use --output-format json and read is_error, num_turns and session_id. Treat a non-zero exit code as failure
  4. Set sandbox.enabled to true before running on untrusted code. In droid exec a sandbox violation is denied without a prompt
  5. Pin the version in CI with npm install -g droid@<version>, or set FACTORY_DROID_AUTO_UPDATE_ENABLED=false on standalone installs, which update themselves

Questions

Which is better for AI agents, DeepSeek Harness (dsh) or Droid CLI?

Droid CLI scores 59.1 (C) on agent readiness against DeepSeek Harness (dsh)'s 49.2 (D), and leads in 6 of 7 scored categories. DeepSeek Harness (dsh) leads on payments & pricing.

Are DeepSeek Harness (dsh) and Droid CLI open source?

DeepSeek Harness (dsh) is open source (MIT). No open-source release is listed for Droid CLI.

Other comparisons with DeepSeek Harness (dsh) or Droid CLI

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.