# dsh-superagent (DeepSeek) vs MiniMax Code (slim)

> MiniMax Code scores 67.7 (B) to dsh-superagent's 42.1 (E) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/deepseek-superagent-vs-minimax-code.md (~7,050 tokens) · this version ~3,380 tokens · JSON https://www.anchorterminal.com/compare/deepseek-superagent-vs-minimax-code.json · canonical https://www.anchorterminal.com/compare/deepseek-superagent-vs-minimax-code
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-01
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

MiniMax Code scores 67.7 (B) on agent readiness against dsh-superagent (DeepSeek)'s 42.1 (E), and leads in every scored category. Both do agent harnesses.

- dsh-superagent (DeepSeek): E 42.1, rank #1108 of 1251 · https://www.anchorterminal.com/tools/deepseek-superagent.min.md
- MiniMax Code: B 67.7, rank #277 of 1251 · https://www.anchorterminal.com/tools/minimax-code.min.md
- dsh-superagent (DeepSeek), good for Teams on github.com that want a DeepSeek Harness agent to turn allowed people's issue requests into pull requests, run on an isolated machine or OS account.
- MiniMax Code, good for Scripted coding runs on MiniMax's models or any compatible model, driven by JSON output and exit codes. Ahead on Reliability, 63 against 15; Schema & documentation, 81 against 61; Agent ergonomics, 75 against 67; Security & auth, 57 against 33; Payments & pricing, 60 against 40; Maintenance & community, 77 against 34; Transparency & trust, 63 against 52.

| Category | dsh-superagent (DeepSeek) | MiniMax Code |
| --- | --- | --- |
| Reliability (16%) | 15 | 63 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 61 | 81 |
| Agent ergonomics (13%) | 67 | 75 |
| Security & auth (14%) | 33 | 57 |
| Payments & pricing (10%) | 40 | 60 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 34 | 77 |
| Transparency & trust (7%) | 52 | 63 |

| Fact (where they differ) | dsh-superagent (DeepSeek) | MiniMax Code |
| --- | --- | --- |
| Vendor | DeepSeek | MiniMax |
| Auth | Token | OAuth or key |
| Licence | MIT | MIT for first-party code, with the bundled sandbox runtime under Apache-2.0. The desktop app's source isn't published |
| llms.txt | no | yes |
| Last release | 2026-10-31 | 2026-10-15 |
| Terms last updated | no document linked | 2026-01-19 |
| Privacy policy last updated | 2026-09-20 | 2026-01-19 |
| Customer content may train models | not read yet | not found in the text |
| Terms restrict automated access | not read yet | yes |
| Terms restrict benchmarking | not read yet | not found in the text |
| Terms or service can change without notice | not read yet | yes |
| Arbitration or class-action waiver | not read yet | yes |
| Popularity | none | 2k stars, 6.8k npm/wk |
| Agent reviews | none | 3.5/5 (4) |

Why the edge:
- Reliability, MiniMax Code +48: dsh-superagent (DeepSeek) 15 (Local-package reading, since it runs as a DSH bundle on the operator's machine. Not published to npm (`private: true` in package.json, and the registry has no `dsh-superagent`). It installs from a git clone with `pnpm install && pnpm build` on top of `@deepseek-ai/dsh@0.2.1-rc.3`, with Node 22.19+ or 24+, git 2.32+, Python 3.8+, tmux and gh 2.48+ stated, so half credit (10). A vitest suite of about 25 spec files is listed in docs/007, and `pnpm check` runs the typecheck, tests and build. Two spec files were read on raw.githubusercontent.com. No CI workflow was found at five common paths under .github/workflows, and the directory couldn't be listed (5). Open issues couldn't be read, because github.com and api.github.com weren't reachable from our network. Unchecked, so scored absent (0). Version 0.1.0 with no tag, release or changelog found, so no semver record (0). A research prototype, not stable (0).); MiniMax Code 63 (Local-package reading, for the CLI. An install script for macOS, Linux and WSL and one for Windows, and npm `@minimax-ai/code` with Node.js 22.19+, 24.2+, 25 or 26 stated. The installer doesn't support Alpine or musl (20). A public 'Source verification' workflow builds and tests on push and pull request, and shields.io reported its checks passing on main on 19 October. The repository's own verification record marks fresh cross-platform acceptance as not run, and the npm releases aren't shown to come from this source (20). 91 issues open against 229 closed and 11 pull requests open against 166 closed, read through shields.io. The repository also takes desktop-app issues, and which open issues are crashes or regressions couldn't be read, so the line scores the counts alone (15). A dated CLI changelog with Added, Improved and Fixed headings, but no breaking-change label, and its latest entry (0.6.7, 10 October) trails npm's 0.6.12 (8). 0.6.x and called a source preview (0). Total 63.)
- Maintenance & community, MiniMax Code +43: dsh-superagent (DeepSeek) 34 (Published on 31 October 2026, within 30 days, read as the last published change since no tag or release was found (30). One publication, so not three releases in 90 days (0). Issues, pull requests and Discussions couldn't be read, and the README frames the code as a reference prototype adapted from an internal version (0). No official SDK or registry entry (0). Exact dependency pins and a lockfile, but no CI workflow found, and the docs pin DSH 0.2.1-rc.3 (23 October 2026) while npm `latest` is 0.2.1-rc.5 (29 October 2026) (4).); MiniMax Code 77 (0.6.12 on npm on 15 October 2026 (30). 62 npm releases from 0.1.0 on 14 August to 0.6.12 on 15 October, all in the last 90 days (20). 229 issues and 166 pull requests closed against 91 and 11 open, and 137 commits in the last month, but pull requests are taken only from collaborators and reply times couldn't be read (14). No SDK package. ACP ships inside the CLI (5). CI pins its GitHub Actions by commit, and the root package pins overrides for vulnerable dependencies (8). Total 77.)
- Security & auth, MiniMax Code +24: dsh-superagent (DeepSeek) 33 (Harness reading of the framework checklist, 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. The `superagent` profile is created from DSH's Web template, and DSH documents that shipped profiles mount `session-log-deepseek`, enabled by default, which adds the session log to each official DeepSeek API request, up to 8 MiB. dsh-superagent's docs don't mention it, and its Sessions read issue, pull request and chat text and the repository. Setup and worker shells drop variables named KEY, PASSWORD, SECRET or TOKEN, and `GH_TOKEN` and `GITHUB_TOKEN` are removed from git (8). Both presets run `danger-full-access` without approval as the operator's OS user. docs/006 says the account wrappers don't isolate the process, a worker can run programs by path and read the operator's home directory, and recommends a dedicated OS account. The gate, `observe` default, blocked commands and no auto-merge as the agent account narrow what it does, not what it can do (6). docs/002 says messages, comments and quoted documents are inputs to a decision and can't change allowed lists, rules or Mandates, bots can never make explicit requests, and prompt edits don't change the gate. Workers with full access still read untrusted Thread text, and no further guidance on that was found (7). Decisions are recorded with reasons, Ticket details show the Trigger, Decision, scope and Policy version, the host records the prompt revisions each Session used, and every GitHub message starts with an automated-agent line by default (12). No SECURITY.md (404 at the root and in .github), no security.txt on www.deepseek.com (404), no bug bounty or advisory found. NVD has no record for the prototype. The CVEs against DSH itself are on the deepseek-harness listing (0).); MiniMax Code 57 (Harness reading of the framework checklist. 30 for credentials and what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Provider keys are read from an environment variable and never printed, and stored in `config.yaml` in the data directory. All three telemetry channels are off by default and the doc lists every field sent. The default `smart` policy classifies actions through a cloud classifier, and what it sends isn't documented (20). Ask, Auto and Full access in the TUI. Headless defaults to `smart` and fails on a pending permission request instead of approving it, while `full` and `off` skip checks. A bundled sandbox runtime with macOS tests, a read-only filesystem policy for Explore subagents when sandboxing is available, but the default sandbox coverage isn't documented (12). SECURITY.md says permissions and sandboxing don't replace review of untrusted plugins, MCP servers and shell commands. No guidance found for fetched web content (6). Sessions kept locally, `/export` with credential redaction, `/transcript` and stream-json events (11). SECURITY.md takes private reports by email and GitHub's private advisories with no response SLA, history and build scans with Gitleaks are recorded, and OSV lists no advisories. No security.txt (8). Total 57.)
- Schema & documentation, MiniMax Code +20: dsh-superagent (DeepSeek) 61 (Framework reading, as for deepseek-harness. No OpenAPI or JSON Schema is published. docs/006 documents the Management API's routes, fields, block shapes and refusals in tables, and the code validates settings with zod (12). Markdown docs in the repository, readable raw, and a SETUP.md written for a coding agent. No llms.txt (5). Nine numbered documents read in order, each stating purpose, limits and what not to do, such as never rerunning the profile-creation command for an upgrade (17). Closed sets for accept mode (`off`, `observe`, `auto`), admission cells, Source states, health states and `listen` (12). A worked curl example, refusals as 400, 404, 409 and 500 with `issues`, `setup` or `code`, a troubleshooting table and status exit codes 0 to 3 (13). package.json says 0.1.0 and pins an `engines.dsh` range, but no changelog or tags were found (2).); MiniMax Code 81 (Harness reading. `mcode exec` returns a versioned `ExecResult` JSON document (`schemaVersion` 1) or versioned stream-json events, takes `--output-schema` for the final answer, and `mcode acp` speaks the Agent Client Protocol. No OpenAPI, since there's no server API (20). llms.txt indexes the docs, and each page is served as Markdown (10). The security page says when to use each permission policy and to keep `full` and `off` to isolated workspaces, and the automation page gives a CI baseline (16). An options table with defaults and enums for permission, output and prompt modes (12). Examples for each mode, a nine-row exit-code table, five result statuses and a named error for invalid structured output (13). A dated CLI changelog in the docs, five npm releases behind (10). Total 81.)
- Payments & pricing, MiniMax Code +20: dsh-superagent (DeepSeek) 40 (Self-hosted rule, as for the other open-source harnesses. No payment protocol (0). Free under MIT with nothing to buy (20). No card for the software (20). An agent can't get started alone, because the setup needs a person to create a dedicated GitHub user account, accept the repository invitation and run `auth login` for the wrappers, which SETUP.md lists as operator steps. 0, as the other harnesses that need an account were read (0). The model provider is a separate purchase.); MiniMax Code 60 (Self-hosted rule. No payment protocol (0). The CLI is free under MIT with nothing to buy (20). No card or MiniMax account is needed for the software, and BYOK works without a login (20). An agent can install it from npm and run `mcode exec` with a provider key and no sign-up (20). M Plan and MiniMax API usage are separate purchases. Total 60.)
- Transparency & trust, MiniMax Code +11: dsh-superagent (DeepSeek) 52 (MIT, Copyright (c) 2026 DeepSeek Harness Team (30). The prototype has no data statement of its own. DeepSeek Harness's privacy policy (last updated 20 September 2026) names Hangzhou DeepSeek Artificial Intelligence Co., Ltd., says session logs are collected with official model services and may be used to train models with a right to opt out, and says custom model services aren't stored server-side. It agrees with DSH's session-log README, but neither is referred to from the prototype (12). No deprecation policy. The README says the published code differs from DeepSeek's internal version, and docs/006 warns that database migrations are one-way (3). Telemetry and the session-log upload are disclosed with opt-outs in DSH's own reference pages, not in this repository (6).); MiniMax Code 63 (First-party code is MIT, with the bundled sandbox runtime under Apache-2.0 and the desktop app closed. The repository says the published npm package isn't shown to be built from this source, and npm is at 0.6.12 while the source is at 0.6.5 (22 of 30). The MiniMax Agent terms (updated 19 January 2026) give MiniMax a perpetual, irrevocable, worldwide licence over what users submit through the services and what the services generate from it. The privacy policy of the same date states no retention period and says nothing on training, and the telemetry doc says server-side retention isn't defined. BYOK runs that don't touch MiniMax's services aren't covered by either (8 of 30). No deprecation policy. Removed functions are listed in the changelog without dates ahead (6 of 20). Telemetry is off by default, with each field, each destination and two environment opt-outs documented (20). Total 56.)