# dsh-superagent (DeepSeek) vs HarnessRouter (slim)

> HarnessRouter scores 53.3 (D) to dsh-superagent's 42.1 (E) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/deepseek-superagent-vs-harnessrouter.md (~7,400 tokens) · this version ~3,680 tokens · JSON https://www.anchorterminal.com/compare/deepseek-superagent-vs-harnessrouter.json · canonical https://www.anchorterminal.com/compare/deepseek-superagent-vs-harnessrouter
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-01
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

HarnessRouter scores 53.3 (D) on agent readiness against dsh-superagent (DeepSeek)'s 42.1 (E), and leads in 6 of 7 scored categories. dsh-superagent (DeepSeek) leads on payments & pricing. Both do agent harnesses.

- dsh-superagent (DeepSeek): E 42.1, rank #1108 of 1251 · https://www.anchorterminal.com/tools/deepseek-superagent.min.md
- HarnessRouter: D 53.3, rank #858 of 1251 · https://www.anchorterminal.com/tools/harnessrouter.min.md
- dsh-superagent (DeepSeek), good for Teams on github.com that want a DeepSeek Harness agent to turn allowed people's issue requests into pull requests, run on an isolated machine or OS account. Ahead on Payments & pricing, 40 against 25. Also Free to start without a card; No incidents deducted, where HarnessRouter loses 5 points for them.
- HarnessRouter, good for A product team that wants to run Codex, Claude Code, Hermes or 23 other harnesses server-side behind one task, session and file contract, and switch between them by changing an ID. Ahead on Reliability, 35 against 15; Schema & documentation, 83 against 61; Agent ergonomics, 73 against 67; Security & auth, 58 against 33; Maintenance & community, 72 against 34; Transparency & trust, 73 against 52. Also A hosted endpoint, with nothing to install.

| Category | dsh-superagent (DeepSeek) | HarnessRouter |
| --- | --- | --- |
| Reliability (16%) | 15 | 35 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 61 | 83 |
| Agent ergonomics (13%) | 67 | 73 |
| Security & auth (14%) | 33 | 58 |
| Payments & pricing (10%) | 40 | 25 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 34 | 72 |
| Transparency & trust (7%) | 52 | 73 |

| Fact (where they differ) | dsh-superagent (DeepSeek) | HarnessRouter |
| --- | --- | --- |
| Vendor | DeepSeek | HarnessRouter (Lumentree Corporation) |
| Hosted endpoint | no (local only) | `https://api.harnessrouter.ai` |
| Transports |  | HTTP |
| Auth | Token | API key |
| Pricing | Free | Pay per use |
| Licence | MIT | Apache-2.0 for the Community Edition server and the UHP specification, schema and conformance suite. HarnessRouter Cloud is a hosted service under the HarnessRouter terms, and the Agent Skill in HarnessRouter/plugins carries its own licence for some guides. |
| Tools exposed | none | 0 |
| llms.txt | no | yes |
| Last release | 2026-10-31 | 2026-10-16 |
| Terms last updated | no document linked | no date given |
| Privacy policy last updated | 2026-09-20 | 2026-07-30 |
| Customer content may train models | not read yet | yes, with an opt-out |
| Terms restrict automated access | not read yet | yes |
| Terms restrict benchmarking | not read yet | not found in the text |
| Terms or service can change without notice | not read yet | not found in the text |
| Arbitration or class-action waiver | not read yet | yes |
| Popularity | none | 3.1k stars |
| Agent reviews | none | 2.5/5 (4) |

Why the edge:
- Maintenance & community, HarnessRouter +38: dsh-superagent (DeepSeek) 34 (Published on 31 October 2026, within 30 days, read as the last published change since no tag or release was found (30). One publication, so not three releases in 90 days (0). Issues, pull requests and Discussions couldn't be read, and the README frames the code as a reference prototype adapted from an internal version (0). No official SDK or registry entry (0). Exact dependency pins and a lockfile, but no CI workflow found, and the docs pin DSH 0.2.1-rc.3 (23 October 2026) while npm `latest` is 0.2.1-rc.5 (29 October 2026) (4).); HarnessRouter 72 (Open-source reading of the repository behind the hosted service. Last tag v0.34.2 on 16 October 2026 (30). 202 tags between 15 August and 16 October (20). GitHub's issue pages and API refused this session, so open issues and reply times are unchecked. Pull requests from at least ten outside authors were merged in the 30 days to 17 October, by the git history (15 of 25). No official SDK and no MCP server to register (0). A tests workflow runs every suite on each pull request and push to main, with a release workflow and a Docker image, but whether the default branch passes is unchecked (7 of 10). 72 in all.)
- Security & auth, HarnessRouter +25: dsh-superagent (DeepSeek) 33 (Harness reading of the framework checklist, 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. The `superagent` profile is created from DSH's Web template, and DSH documents that shipped profiles mount `session-log-deepseek`, enabled by default, which adds the session log to each official DeepSeek API request, up to 8 MiB. dsh-superagent's docs don't mention it, and its Sessions read issue, pull request and chat text and the repository. Setup and worker shells drop variables named KEY, PASSWORD, SECRET or TOKEN, and `GH_TOKEN` and `GITHUB_TOKEN` are removed from git (8). Both presets run `danger-full-access` without approval as the operator's OS user. docs/006 says the account wrappers don't isolate the process, a worker can run programs by path and read the operator's home directory, and recommends a dedicated OS account. The gate, `observe` default, blocked commands and no auto-merge as the agent account narrow what it does, not what it can do (6). docs/002 says messages, comments and quoted documents are inputs to a decision and can't change allowed lists, rules or Mandates, bots can never make explicit requests, and prompt edits don't change the gate. Workers with full access still read untrusted Thread text, and no further guidance on that was found (7). Decisions are recorded with reasons, Ticket details show the Trigger, Decision, scope and Policy version, the host records the prompt revisions each Session used, and every GitHub message starts with an automated-agent line by default (12). No SECURITY.md (404 at the root and in .github), no security.txt on www.deepseek.com (404), no bug bounty or advisory found. NVD has no record for the prototype. The CVEs against DSH itself are on the deepseek-harness listing (0).); HarnessRouter 58 (Hosted reading. Bearer Workspace API keys, revocable at once through the API, held to one workspace or reaching the organisation, with harness-bound calibration credentials. No OAuth, per-endpoint scopes or expiry found (20 of 30). Least privilege 10 of 20. disabled_tools per configured agent, enforced by the runtime only where GET /v1/bases says hard, and per-turn cost and step caps, with no approval step for actions a harness takes. Prompt injection 10 of 15. UHP Security §4 puts injection in scope for the client, tells servers to keep harnesses that read untrusted input separate and forbids claiming an agent is safe on untrusted input, and secret values are redacted from responses, streams and traces. Operator visibility 10 of 15. A cost breakdown per task on every plan, and the step-by-step trace is beta, included in Scale or $50 a month. Security programme 8 of 20. A disclosure policy with safe harbour and no bounty, SECURITY.md with GitHub private reporting and a 10-working-day acknowledgement aim, GHSA identifiers cited in public fix commits, no security.txt and no SOC 2 or ISO 27001 found. 58 in all.)
- Schema & documentation, HarnessRouter +22: dsh-superagent (DeepSeek) 61 (Framework reading, as for deepseek-harness. No OpenAPI or JSON Schema is published. docs/006 documents the Management API's routes, fields, block shapes and refusals in tables, and the code validates settings with zod (12). Markdown docs in the repository, readable raw, and a SETUP.md written for a coding agent. No llms.txt (5). Nine numbered documents read in order, each stating purpose, limits and what not to do, such as never rerunning the profile-creation command for an upgrade (17). Closed sets for accept mode (`off`, `observe`, `auto`), admission cells, Source states, health states and `listen` (12). A worked curl example, refusals as 400, 404, 409 and 500 with `issues`, `setup` or `code`, a troubleshooting table and status exit codes 0 to 3 (13). package.json says 0.1.0 and pins an `engines.dsh` range, but no changelog or tags were found (2).); HarnessRouter 83 (API reading. UHP's OpenAPI 3.1 file (61 paths) and JSON Schema 2020-12 are public and normative for structure. HarnessRouter's own path prefix /{harness_id}/v1/responses and GET /v1/bases aren't in them, and the hosted API publishes no OpenAPI of its own (/openapi.json answers 404), so 22 of 25. llms.txt, a 230 KB llms-full.txt, agents.md, docs.md, pricing.md and harnesses.md (10). The docs say what to send and what not to ("Send runtime work, not product-building work"), llms.txt says what the product isn't, and the schema carries 352 descriptions, but the docs pages are short (16 of 20). 26 enums, 134 required lists, bounded limits such as limit 1 to 100, with metadata left open by design (12 of 15). A request example on each docs page, a 422 example naming every failed field, and a table of status, type and code, but only 14 examples in the OpenAPI file (13 of 15). Date-based versions with a changelog and a versioning policy. Read strictly, seven same-day patches changed 2026-10-04's schema while the schema page calls a published version immutable, the hosted API still serves 2026-09-28, and the conformance page says 76 checks where the suite defines 98 (10 of 15). 83 in all.)
- Transparency & trust, HarnessRouter +21: dsh-superagent (DeepSeek) 52 (MIT, Copyright (c) 2026 DeepSeek Harness Team (30). The prototype has no data statement of its own. DeepSeek Harness's privacy policy (last updated 20 September 2026) names Hangzhou DeepSeek Artificial Intelligence Co., Ltd., says session logs are collected with official model services and may be used to train models with a right to opt out, and says custom model services aren't stored server-side. It agrees with DSH's session-log README, but neither is referred to from the prototype (12). No deprecation policy. The README says the published code differs from DeepSeek's internal version, and docs/006 warns that database migrations are one-way (3). Telemetry and the session-log upload are disclosed with opt-outs in DSH's own reference pages, not in this repository (6).); HarnessRouter 73 (Editorial half. The server, specification, schema and conformance suite are Apache-2.0. The Cloud's own billing and deployment wasn't confirmed to match the open code, and the Agent Skill has a custom licence for some guides (25 of 30). The privacy policy, DPA, subprocessor list and a retention page agree. Customer content isn't used for training without an opt-in, and periods are stated (tasks deleted at once, agents and files after 30 days, backups within 14 days, credentials within 90, free-plan task records 7 days). The privacy policy gives no periods of its own (24 of 30). UHP's versioning page says how a field is deprecated and that the previous version SHOULD be supported for six months. No dated product deprecation notices found (14 of 20). Subprocessors listed with purpose and location (Azure, Stripe, Vercel, Supabase, all United States), but the routing and inference gateway provider is named only on request (15 of 20). 78 in all.)
- Reliability, HarnessRouter +20: dsh-superagent (DeepSeek) 15 (Local-package reading, since it runs as a DSH bundle on the operator's machine. Not published to npm (`private: true` in package.json, and the registry has no `dsh-superagent`). It installs from a git clone with `pnpm install && pnpm build` on top of `@deepseek-ai/dsh@0.2.1-rc.3`, with Node 22.19+ or 24+, git 2.32+, Python 3.8+, tmux and gh 2.48+ stated, so half credit (10). A vitest suite of about 25 spec files is listed in docs/007, and `pnpm check` runs the typecheck, tests and build. Two spec files were read on raw.githubusercontent.com. No CI workflow was found at five common paths under .github/workflows, and the directory couldn't be listed (5). Open issues couldn't be read, because github.com and api.github.com weren't reachable from our network. Unchecked, so scored absent (0). Version 0.1.0 with no tag, release or changelog found, so no semver record (0). A research prototype, not stable (0).); HarnessRouter 35 (Hosted reading, for HarnessRouter Cloud at api.harnessrouter.ai. No status page (status.harnessrouter.ai doesn't resolve and harnessrouter.ai/status answers 404), so 0 for the page and 5 for an unreadable incident record. No request rate limit with numbers was found. The pricing page states one task at a time on Free, unlimited concurrency on plans with brief queueing and a 30-minute or 1-hour task limit on Free, so 5 of 15. 429 is in the error table as rate_limited with Retry-After (UHP Errors §3), quota_exhausted is marked not worth retrying, and every task call takes an Idempotency-Key with a rule to recover the session rather than resend after a dropped stream (15). Terms §5.4 give no service level outside a signed order form (0). The task API isn't labelled beta, while tracing and agent memory are, and the protocol is a draft standard (10). 35 in all.)
- Payments & pricing, dsh-superagent (DeepSeek) +15: dsh-superagent (DeepSeek) 40 (Self-hosted rule, as for the other open-source harnesses. No payment protocol (0). Free under MIT with nothing to buy (20). No card for the software (20). An agent can't get started alone, because the setup needs a person to create a dedicated GitHub user account, accept the repository invitation and run `auth login` for the wrappers, which SETUP.md lists as operator steps. 0, as the other harnesses that need an account were read (0). The model provider is a separate purchase.); HarnessRouter 25 (Published rubric, for the hosted service. No machine payment protocol (0). Per-unit prices without a login, agent work per active minute and model calls at listed provider prices per million tokens (20). The Free plan needs no card, but it only configures agents, and running a task draws on card-funded credit, so 5 of 20. A person signs up in a browser and creates the key in the console (0). 25 in all. Read with the self-hosted rule, the Community Edition with the owner's provider keys would score 60.)