{ "data": { "a": { "slug": "deepseek-superagent", "name": "dsh-superagent (DeepSeek)", "vendor": "DeepSeek", "vendorUrl": "https://github.com/deepseek-ai/dsh-superagent-prototype", "kind": "harness", "category": "agent-harnesses", "summary": "dsh-superagent is DeepSeek's MIT-licensed research prototype of a proactive coding agent for one GitHub repository, run as a DeepSeek Harness bundle. A main Session admits requests from allowed people and parallel Executor Sessions work them into pull requests.", "url": "https://www.anchorterminal.com/tools/deepseek-superagent", "markdownUrl": "https://www.anchorterminal.com/tools/deepseek-superagent.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/deepseek-superagent.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/deepseek-superagent.json", "dns": "deepseek-superagent.grade.anchorterminal.com", "repo": "https://github.com/deepseek-ai/dsh-superagent-prototype", "license": "MIT", "transports": [], "packages": [], "auth": "pat", "authNotes": "No account with the project. The agent acts through a dedicated GitHub user account signed in to a `gh` wrapper with `auth login`, and optionally a Feishu bot through `lark-cli`. DSH needs a model provider key. The local Management API takes no credential and accepts only loopback requests with `x-orchestrator-request: 1`.", "pricing": "free", "pricingNotes": "Free and MIT, with nothing to buy. The operator pays the model provider DSH is set up with, usually DeepSeek's API, for a main Session and one Session per Ticket.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, SETUP.md or docs/000 to 008 (checked 2026-11-01).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-01" }, "docsUrl": "https://github.com/deepseek-ai/dsh-superagent-prototype/tree/main/docs", "capabilities": [ "agent.harness", "agent.multi-agent" ], "tags": [ "official", "harness", "coding-agent", "open-source", "mit", "typescript", "local", "free", "no-card", "pre-1.0", "preview", "telemetry-default-on" ], "lastRelease": "2026-10-31", "graded": true, "anchor": { "graded": true, "score": 42.1, "grade": "E", "agentReady": false, "rank": 1108, "ranked": true, "rankOf": 1251, "categoryRank": 41, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 34, "payments": 40, "reliability": 15, "schema": 61, "security": 33, "transparency": 52 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": 0, "verdict": "The authorization design is careful, with allowed lists, Mandates and a Policy enforced in code, proactive work only recorded by default and auto-merge off. Executors run every command without approval under the operator's OS user, and the README calls it a research prototype with no release, changelog or security policy.", "bestFor": "Teams on github.com that want a DeepSeek Harness agent to turn allowed people's issue requests into pull requests, run on an isolated machine or OS account.", "strengths": [ "MIT licence, with nine numbered design and operations documents that state each rule, from admission to restart recovery", "Only listed GitHub logins can start work by default, and messages, comments and prompts cannot change the gate, which code enforces", "Proactive work starts in `observe` mode, which records what the agent would have done and accepts nothing", "The agent never enables auto-merge as its own account, and the default merge rule needs approvals and fewer than 200 changed lines", "Setup and worker shells drop environment variables named KEY, PASSWORD, SECRET or TOKEN, and git uses only the agent account's credentials" ], "weaknesses": [ "Executor and main Sessions run with `danger-full-access` as the operator's OS user, and the docs say a worker can read the operator's home directory", "The README calls it a research prototype, not an official DeepSeek product, at version 0.1.0 with no tag, release or changelog found", "Not on npm. Installing means a git clone, `pnpm build`, a pinned DSH release candidate, tmux and a dedicated GitHub user account", "The docs don't mention that DSH's shipped profiles upload the session log to DeepSeek with official API requests by default", "No SECURITY.md, security.txt or CI workflow found, and GitHub's issues and pull requests couldn't be read" ], "agentNotes": [ "Run it under a dedicated OS account holding only the agent's credentials. Executors run commands without approval and can read the operator's home directory", "Set `enabled: false` on the `session-log-deepseek` row of the `superagent` profile before using DeepSeek's official API on private code", "Keep the accept mode at `observe` and the allowed list short until the recorded Decisions look right", "Wait for `scripts/dsh-superagent status` to stop exiting 1 after any save that answers `restarting: true` before the next request", "Send `x-orchestrator-request: 1` and a loopback Host to the Management API, and send `revision` with each PUT, since a stale one gets 409" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 42.1 } ], "editorialScores": { "ergonomics": 67, "maintenance": 34, "payments": 40, "reliability": 15, "schema": 61, "security": 33, "transparency": 51 }, "provenanceScore": 52, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install -g @deepseek-ai/dsh@0.2.1-rc.3 \u0026\u0026 git clone https://github.com/deepseek-ai/dsh-superagent-prototype dsh-superagent \u0026\u0026 cd dsh-superagent \u0026\u0026 pnpm install \u0026\u0026 pnpm build \u0026\u0026 dsh superagent --from-default-profile web --dump-config \u003e /dev/null \u0026\u0026 dsh plugin --profile superagent add \"link:$PWD\"" }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/deepseek-superagent" }, "sameCompany": [ "deepseek-harness" ], "area": "frameworks", "provenance": { "legalEntity": "DeepSeek (the LICENSE names the DeepSeek Harness Team; DeepSeek Harness's terms name Hangzhou DeepSeek Artificial Intelligence Co., Ltd.)", "domain": "github.com", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "https://www.deepseek.com/en/harness/privacy/", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-11-01", "notes": [ "The repository has no terms or privacy policy of its own. DeepSeek Harness's terms of use and privacy policy (both last updated 20 September 2026) name Hangzhou DeepSeek Artificial Intelligence Co., Ltd. and cover the harness it runs on. The README says the prototype is not an official DeepSeek product.", "package.json names `DeepSeek Harness Team \u003cteam@dsh.dev\u003e` as author. dsh.dev didn't resolve from our network on 1 November 2026.", "No SECURITY.md in the root or .github, and www.deepseek.com/.well-known/security.txt returned 404 on 1 November 2026.", "No CHANGELOG.md, tags or releases found. GitHub's web pages and API weren't reachable, so files were read on raw.githubusercontent.com and the commit history, stars and issues are unchecked." ], "score": 52 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/deepseek-superagent.json" }, "answer": "Paperclip scores 59 (C) on agent readiness against dsh-superagent (DeepSeek)'s 42.1 (E), and leads in every scored category.", "b": { "slug": "paperclip", "name": "Paperclip", "vendor": "Paperclip Labs, Inc.", "vendorUrl": "https://paperclip.ing", "kind": "harness", "category": "agent-harnesses", "summary": "Paperclip is an open-source, self-hosted server and web interface that organises AI agents into a company with an org chart, tasks, budgets and approvals. It drives Claude Code, Codex, OpenClaw and other harnesses through adapters.", "url": "https://www.anchorterminal.com/tools/paperclip", "markdownUrl": "https://www.anchorterminal.com/tools/paperclip.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/paperclip.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/paperclip.json", "dns": "paperclip.grade.anchorterminal.com", "repo": "https://github.com/paperclipai/paperclip", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "paperclipai" }, { "registry": "npm", "name": "@paperclipai/mcp-server" }, { "registry": "oci", "name": "ghcr.io/paperclipai/paperclip" } ], "auth": "mixed", "authNotes": "No Paperclip account. The default `local_trusted` mode needs no login on loopback. Authenticated mode uses browser sessions for people, board API keys for scripts, and agent API keys or short-lived run JWTs as bearer tokens.", "pricing": "free", "pricingNotes": "Free and MIT, self-hosted, with nothing to buy. The owner pays each harness's model provider or subscription. Paperclip Cloud is a waitlist with no published price.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the site or the server source (checked 2026-10-08). The only mention in the repository is a link to a third-party skill in a planning note.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 98666, "npmWeekly": 59684, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://docs.paperclip.ing", "llmsTxt": "https://paperclip.ing/llms.txt", "capabilities": [ "agent.multi-agent", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "llms-txt", "docker", "mcp", "typescript" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 59, "grade": "C", "agentReady": false, "rank": 666, "ranked": true, "rankOf": 1251, "categoryRank": 25, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 78, "payments": 60, "reliability": 66, "schema": 81, "security": 64, "transparency": 66 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -10, "negativeNotes": [ "2026-04-10 to 2026-04-16. Ten advisories published in a week, four of them critical, among them GHSA-68qg-g8mg-6pr7 (CVE-2026-41679, 10.0, unauthenticated remote code execution through an import authorisation bypass) and two cross-tenant agent key flaws rated 9.9. All ten list 2026.416.0 as the fix. Fixed and published, a little under six months old, -5. https://github.com/paperclipai/paperclip/security/advisories", "2026-07-22. GHSA-x8hx-rhr2-9rf7 (9.6), drive-by remote code execution against the default `local_trusted` mode through DNS rebinding. The advisory names no patched version. The current source applies the hostname guard to `local_trusted` private deployments, so we read it as fixed without a documented version, -3. https://github.com/paperclipai/paperclip/security/advisories/GHSA-x8hx-rhr2-9rf7", "2026-04-16. GHSA-gqqj-85qm-8qhf (8.7), a `codex_local` agent inherited a Gmail connector from the owner's ChatGPT account and sent real email. The advisory names no patched version, and `codex_local` still defaults to bypassing approvals and the sandbox, -2. https://github.com/paperclipai/paperclip/security/advisories/GHSA-gqqj-85qm-8qhf" ], "verdict": "Board approvals, budgets with a hard stop and an activity log sit above whichever harnesses do the work, and eleven stable versions shipped in 90 days. The Claude Code and Codex adapters skip permission prompts and the sandbox by default, and twelve security advisories, five of them critical, have been published since April 2026.", "bestFor": "Someone running several coding or operations agents who wants one place for tasks, budgets, approvals and history across harnesses.", "strengths": [ "One deployment runs agents on Claude Code, Codex, Cursor, Gemini CLI, OpenCode, Pi, Hermes, Grok Build, Kimi Code and OpenClaw through adapters, under one org chart", "Board approvals gate agent hires and the CEO agent's strategy, and connection actions can be set to Allowed, Ask first or Off", "Budgets by company, agent and project pause an agent at 100 per cent of recorded spend", "The running server publishes its REST surface as OpenAPI at `/api/openapi.json`, and the docs site answers every page as Markdown at `.md`", "Eleven stable releases between 20 July and 5 October 2026, each with dated notes and an upgrade guide" ], "weaknesses": [ "`claude_local` defaults `dangerouslySkipPermissions` to true and `codex_local` defaults to bypassing approvals and the sandbox, with agents running on the host", "Twelve published security advisories since April 2026, five critical, including CVE-2026-41679 (unauthenticated remote code execution, fixed in 2026.416.0)", "Anonymous usage telemetry is on by default and goes to telemetry.paperclip.ing until an opt-out is set", "2,849 open issues on 8 October 2026, 1,396 of them with no comment, and 78 closed in 30 days against 686 opened", "Calendar versions with no 1.0, and release 2026.916.0 carried five breaking changes" ], "agentNotes": [ "Set `PAPERCLIP_TELEMETRY_DISABLED=1` or `DO_NOT_TRACK=1` before the first start. Telemetry is on by default", "Set `dangerouslySkipPermissions` and `dangerouslyBypassApprovalsAndSandbox` to false on agents that read untrusted input, or run them in a sandbox provider", "Install with Node.js 24.11 or newer, and install and sign in to each harness CLI on the host first. Paperclip assumes they are there", "Use `--bind lan` or `--bind tailnet` at onboarding for anything beyond one machine. The default `local_trusted` mode treats every request as the board admin", "Treat 409 on task checkout as owned by another agent and pick different work. The API docs say not to retry" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59 } ], "editorialScores": { "ergonomics": 70, "maintenance": 78, "payments": 60, "reliability": 66, "schema": 81, "security": 64, "transparency": 73 }, "provenanceScore": 58, "checked": { "categories": { "ergonomics": "2026-10-08", "maintenance": "2026-10-08", "payments": "2026-10-08", "reliability": "2026-10-08", "schema": "2026-10-08", "security": "2026-10-08", "transparency": "2026-10-08" }, "last": "2026-10-08", "lastMoved": "2026-10-27", "oldest": "2026-10-08", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npx paperclipai@latest onboard --yes # Node.js 24.11 or newer", "http": "curl http://localhost:3100/api/health", "headless": { "command": "npx paperclipai issue create --title \"$TASK\" --json", "env": { "PAPERCLIP_API_KEY": "\u003cboard or agent key\u003e", "PAPERCLIP_TELEMETRY_DISABLED": "1" } } }, "letme": { "capability": "https://letme.dev/agent.multi-agent", "tool": "https://letme.dev/paperclip" }, "area": "frameworks", "provenance": { "legalEntity": "Paperclip Labs, Inc.", "domain": "paperclip.ing", "domainRegistered": "2026-03-02", "endpointOnVendorDomain": null, "terms": "https://paperclip.ing/terms/", "privacy": "https://paperclip.ing/privacy/", "statusPage": "", "changelog": "https://paperclip.ing/changelog/", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The terms (effective 1 April 2026, updated 23 July 2026) and the privacy policy (effective 23 July 2026) name Paperclip Labs, Inc. and Delaware law. The licence file in the repository reads Copyright (c) 2025 Paperclip AI.", "RDAP at the .ing registry gives a registration date of 2026-03-02 for paperclip.ing, with Cloudflare as registrar. The GitHub repository was created the same day.", "paperclip.ing/.well-known/security.txt and docs.paperclip.ing/.well-known/security.txt returned 404 on 8 October 2026. SECURITY.md sends reports to GitHub private advisories.", "The software is self-hosted, so there is no vendor endpoint or status page to check. status.paperclip.ing did not answer.", "The privacy policy says it governs the hosted services, and that a self-hosted deployment processes data on the owner's infrastructure." ], "score": 58 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/paperclip.json", "live": { "slug": "paperclip", "versions": [ { "registry": "github", "name": "paperclipai/paperclip", "version": "v2026.1023.0", "released": "2026-10-24", "seenAt": "2026-10-31T16:16:21.060379678Z" }, { "registry": "npm", "name": "@paperclipai/mcp-server", "version": "2026.1023.0", "seenAt": "2026-10-31T16:16:18.935767339Z" }, { "registry": "npm", "name": "paperclipai", "version": "2026.1023.0", "seenAt": "2026-10-31T16:16:18.858602822Z" } ], "githubStars": 109287, "npmWeekly": 68862, "securityTxt": { "url": "https://paperclip.ing/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-31T15:41:42.061319597Z" }, "llmsTxt": { "url": "https://paperclip.ing/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-31T15:11:39.132030944Z" }, "domain": { "domain": "paperclip.ing", "registered": "2026-03-02", "source": "https://pubapi.registry.google/rdap/domain/paperclip.ing", "checkedAt": "2026-10-25T13:55:26.748731314Z" }, "pages": [ { "url": "https://paperclip.ing/changelog/", "kind": "changelog", "status": 304, "checkedAt": "2026-10-31T06:17:27.906838296Z", "changedAt": "2026-10-24T02:22:26.710785766Z", "fingerprint": "a227bbb641b7" }, { "url": "https://paperclip.ing/changelog/v2026.1001.0/", "kind": "deprecations", "status": 304, "checkedAt": "2026-10-31T06:17:30.080048358Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "f4181b1b6b88" }, { "url": "https://paperclip.ing/changelog/v2026.1005.0/", "kind": "deprecations", "status": 304, "checkedAt": "2026-10-31T06:17:32.102981978Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "802a09c9725b" }, { "url": "https://paperclip.ing/changelog/v2026.1012.0/", "kind": "deprecations", "status": 304, "checkedAt": "2026-10-31T06:17:34.135103247Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0afbb1fc6f29" }, { "url": "https://paperclip.ing/changelog/v2026.1023.0/", "kind": "deprecations", "status": 304, "checkedAt": "2026-10-31T06:17:36.101414562Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "9a8de031b163" }, { "url": "https://paperclip.ing/changelog/v2026.916.0/", "kind": "deprecations", "status": 304, "checkedAt": "2026-10-31T06:17:38.095430446Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "1e69b918c7c5" }, { "url": "https://paperclip.ing/privacy/", "kind": "privacy", "status": 304, "checkedAt": "2026-10-31T06:17:40.095077121Z", "changedAt": "2026-10-24T02:22:28.926605099Z", "fingerprint": "0f001aba3049" }, { "url": "https://paperclip.ing/terms/", "kind": "terms", "status": 304, "checkedAt": "2026-10-31T06:17:42.083380153Z", "changedAt": "2026-10-24T02:22:30.943098177Z", "fingerprint": "42aee815daee" } ], "github": { "repo": "paperclipai/paperclip", "checkedAt": "2026-10-26T07:54:15.250098629Z", "stars": 107411, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-26T06:44:43Z", "openIssues": 3338, "openPRs": 3263, "issuesOpened90d": 1715, "issuesClosed90d": 424, "prsMerged90d": 2492, "ci": { "branch": "master", "runs": 50, "success": 39, "failure": 9, "other": 2, "latest": "success", "latestAt": "2026-10-26T05:07:34Z" }, "advisories": [ { "ghsa": "GHSA-x8hx-rhr2-9rf7", "severity": "critical", "published": "2026-07-22T23:12:15Z" }, { "ghsa": "GHSA-3xx2-mqjm-hg9x", "severity": "critical", "published": "2026-04-16T12:24:49Z" }, { "ghsa": "GHSA-fpw4-p57j-hqmq", "severity": "medium", "published": "2026-04-16T12:24:23Z" }, { "ghsa": "GHSA-p7mm-r948-4q3q", "severity": "medium", "published": "2026-04-16T12:24:03Z" }, { "ghsa": "GHSA-47wq-cj9q-wpmp", "severity": "critical", "published": "2026-04-16T12:23:29Z" }, { "ghsa": "GHSA-vr7g-88fq-vhq3", "severity": "critical", "published": "2026-04-16T12:21:04Z" }, { "ghsa": "GHSA-gqqj-85qm-8qhf", "severity": "high", "published": "2026-04-16T12:19:12Z" }, { "ghsa": "GHSA-xfqj-r5qw-8g4j", "severity": "high", "published": "2026-04-16T12:16:47Z" }, { "ghsa": "GHSA-w8hx-hqjv-vjcq", "severity": "high", "published": "2026-04-16T12:16:15Z" }, { "ghsa": "GHSA-265w-rf2w-cjh4", "cve": "CVE-2026-41208", "severity": "high", "published": "2026-04-16T12:15:14Z" }, { "ghsa": "GHSA-3pw3-v88x-xj24", "severity": "medium", "published": "2026-04-16T12:14:14Z" }, { "ghsa": "GHSA-68qg-g8mg-6pr7", "cve": "CVE-2026-41679", "severity": "critical", "published": "2026-04-10T16:50:27Z" } ] }, "updatedAt": "2026-10-31T16:16:21.060379678Z" } }, "edges": [ { "by": 51, "category": "reliability", "leads": "paperclip", "name": "Reliability", "reasons": { "a": "Local-package reading, since it runs as a DSH bundle on the operator's machine. Not published to npm (`private: true` in package.json, and the registry has no `dsh-superagent`). It installs from a git clone with `pnpm install \u0026\u0026 pnpm build` on top of `@deepseek-ai/dsh@0.2.1-rc.3`, with Node 22.19+ or 24+, git 2.32+, Python 3.8+, tmux and gh 2.48+ stated, so half credit (10). A vitest suite of about 25 spec files is listed in docs/007, and `pnpm check` runs the typecheck, tests and build. Two spec files were read on raw.githubusercontent.com. No CI workflow was found at five common paths under .github/workflows, and the directory couldn't be listed (5). Open issues couldn't be read, because github.com and api.github.com weren't reachable from our network. Unchecked, so scored absent (0). Version 0.1.0 with no tag, release or changelog found, so no semver record (0). A research prototype, not stable (0).", "b": "Read as local software. Official npm package `paperclipai` (Node.js 24.11 or newer) and a Docker image on GHCR (20). 2,429 test files and 20 workflows. The Actions page for master on 8 October 2026 showed recent runs passing, with two failed Runner Full-Stack E2E runs (681 and 682) before two that passed (22). 2,849 open issues, 125 labelled bug, 1,599 opened before 8 July, and 78 closed in the last 30 days against 686 opened (6). Calendar versions in semver syntax, with a Breaking Changes section and an upgrade guide in release notes, but breaking changes arrive in ordinary releases and 2026.916.0 carried five (10). No 1.0. The npm `latest` tag is called the stable channel and follows a beta soak of at least three days, while the roadmap says the product is still moving quickly, so half credit (8)." }, "scores": { "a": 15, "b": 66 } }, { "by": 44, "category": "maintenance", "leads": "paperclip", "name": "Maintenance \u0026 community", "reasons": { "a": "Published on 31 October 2026, within 30 days, read as the last published change since no tag or release was found (30). One publication, so not three releases in 90 days (0). Issues, pull requests and Discussions couldn't be read, and the README frames the code as a reference prototype adapted from an internal version (0). No official SDK or registry entry (0). Exact dependency pins and a lockfile, but no CI workflow found, and the docs pin DSH 0.2.1-rc.3 (23 October 2026) while npm `latest` is 0.2.1-rc.5 (29 October 2026) (4).", "b": "Version 2026.1005.0, dated 5 October 2026 in its notes and published on GitHub and npm on 6 October (30). Eleven stable releases since 20 July 2026 (20). 650 pull requests merged in the last 30 days, but 2,849 issues and 3,338 pull requests are open, 1,396 open issues have no comment, and 309 of the 472 still-open issues from the last two weeks have none (8). `paperclipai` and `@paperclipai/mcp-server` are both at 2026.1005.0 on npm. We did not check the MCP registry (12). CI on master, a lockfile refresh workflow and signed image attestations (8)." }, "scores": { "a": 34, "b": 78 } }, { "by": 31, "category": "security", "leads": "paperclip", "name": "Security \u0026 auth", "reasons": { "a": "Harness reading of the framework checklist, 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. The `superagent` profile is created from DSH's Web template, and DSH documents that shipped profiles mount `session-log-deepseek`, enabled by default, which adds the session log to each official DeepSeek API request, up to 8 MiB. dsh-superagent's docs don't mention it, and its Sessions read issue, pull request and chat text and the repository. Setup and worker shells drop variables named KEY, PASSWORD, SECRET or TOKEN, and `GH_TOKEN` and `GITHUB_TOKEN` are removed from git (8). Both presets run `danger-full-access` without approval as the operator's OS user. docs/006 says the account wrappers don't isolate the process, a worker can run programs by path and read the operator's home directory, and recommends a dedicated OS account. The gate, `observe` default, blocked commands and no auto-merge as the agent account narrow what it does, not what it can do (6). docs/002 says messages, comments and quoted documents are inputs to a decision and can't change allowed lists, rules or Mandates, bots can never make explicit requests, and prompt edits don't change the gate. Workers with full access still read untrusted Thread text, and no further guidance on that was found (7). Decisions are recorded with reasons, Ticket details show the Trigger, Decision, scope and Policy version, the host records the prompt revisions each Session used, and every GitHub message starts with an automated-agent line by default (12). No SECURITY.md (404 at the root and in .github), no security.txt on www.deepseek.com (404), no bug bounty or advisory found. NVD has no record for the prototype. The CVEs against DSH itself are on the deepseek-harness listing (0).", "b": "Harness reading of the framework checklist, as used for the other harnesses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Anonymous usage telemetry is on by default and goes to telemetry.paperclip.ing. The README lists what is excluded and four opt-outs, and Sentry and OpenTelemetry stay off until configured. We found no first-run notice in the CLI source (18). Board approvals for hires and strategy, execution policies and per-action connection permissions, but `claude_local` defaults `dangerouslySkipPermissions` to true, `codex_local` defaults to bypassing approvals and the sandbox, local agents run on the host, sandbox providers are optional plugins and the default `local_trusted` mode has no login (10). A documented `low_trust_review` preset contains agents that read untrusted pull requests or tickets. It is opt-in (10). An activity log of mutating actions, run logs, cost events and audited board API keys (14). SECURITY.md with GitHub private reporting and twelve advisories published, two with CVEs. No security.txt, bug bounty or SOC 2 report found (12)." }, "scores": { "a": 33, "b": 64 } }, { "by": 20, "category": "schema", "leads": "paperclip", "name": "Schema \u0026 documentation", "reasons": { "a": "Framework reading, as for deepseek-harness. No OpenAPI or JSON Schema is published. docs/006 documents the Management API's routes, fields, block shapes and refusals in tables, and the code validates settings with zod (12). Markdown docs in the repository, readable raw, and a SETUP.md written for a coding agent. No llms.txt (5). Nine numbered documents read in order, each stating purpose, limits and what not to do, such as never rerunning the profile-creation command for an upgrade (17). Closed sets for accept mode (`off`, `observe`, `auto`), admission cells, Source states, health states and `listen` (12). A worked curl example, refusals as 400, 404, 409 and 500 with `issues`, `setup` or `code`, a troubleshooting table and status exit codes 0 to 3 (13). package.json says 0.1.0 and pins an `engines.dsh` range, but no changelog or tags were found (2).", "b": "The running server publishes OpenAPI at `/api/openapi.json` and validates requests with Zod, and the MCP server's tools take Zod schemas. No copy of the spec is published on the docs site, and paperclip.ing/openapi.json describes only the website (22). llms.txt at paperclip.ing, and docs pages answer as Markdown at `.md` (10). An API reference page per resource and task guides, but the MCP tool descriptions are one line each, such as List agents in a company (13). Typed inputs throughout, apart from the `paperclipApiRequest` tool, which takes any path under `/api` and a JSON body (12). cURL, JavaScript and Python examples and a status-code table, with one `{error}` shape and an occasional `details` field (12). A changelog page for every stable release and release notes in the repository, but the API path carries no version (12)." }, "scores": { "a": 61, "b": 81 } }, { "by": 20, "category": "payments", "leads": "paperclip", "name": "Payments \u0026 pricing", "reasons": { "a": "Self-hosted rule, as for the other open-source harnesses. No payment protocol (0). Free under MIT with nothing to buy (20). No card for the software (20). An agent can't get started alone, because the setup needs a person to create a dedicated GitHub user account, accept the repository invitation and run `auth login` for the wrappers, which SETUP.md lists as operator steps. 0, as the other harnesses that need an account were read (0). The model provider is a separate purchase.", "b": "No payment protocol (0). Read with the self-hosted rule. The software is free under MIT with nothing to buy (20). No card and no Paperclip account (20). One `npx` command installs and starts it with no signup (20). Paperclip Cloud is a waitlist with no published price, so there is no paid option to score." }, "scores": { "a": 40, "b": 60 } }, { "by": 14, "category": "transparency", "leads": "paperclip", "name": "Transparency \u0026 trust", "reasons": { "a": "MIT, Copyright (c) 2026 DeepSeek Harness Team (30). The prototype has no data statement of its own. DeepSeek Harness's privacy policy (last updated 20 September 2026) names Hangzhou DeepSeek Artificial Intelligence Co., Ltd., says session logs are collected with official model services and may be used to train models with a right to opt out, and says custom model services aren't stored server-side. It agrees with DSH's session-log README, but neither is referred to from the prototype (12). No deprecation policy. The README says the published code differs from DeepSeek's internal version, and docs/006 warns that database migrations are one-way (3). Telemetry and the session-log upload are disclosed with opt-outs in DSH's own reference pages, not in this repository (6).", "b": "MIT (30). The privacy policy of 23 July 2026 separates self-hosted use from the hosted services and names Paperclip Labs, Inc., but keeps data as long as reasonably necessary, lists no subprocessors, and the 90-day telemetry retention appears only in source. The terms grant a broad licence over content sent to the services and allow model training on opt-in detailed telemetry (16). Release notes carry dated Breaking Changes sections and upgrade guides, with no written deprecation policy or notice period (10). The README discloses telemetry, what it excludes and four opt-outs, and the event contract is public in the repository, but it is on by default (17)." }, "scores": { "a": 52, "b": 66 } } ], "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "DeepSeek", "b": "Paperclip Labs, Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "Token", "b": "OAuth or key", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-31", "b": "2026-10-05", "name": "Last release" }, { "a": "no document linked", "b": "2026-07-23", "name": "Terms last updated" }, { "a": "2026-09-20", "b": "2026-07-23", "name": "Privacy policy last updated" }, { "a": "not read yet", "b": "yes, with an opt-out", "name": "Customer content may train models" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not read yet", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "99k stars, 60k npm/wk", "name": "Popularity" } ], "faq": [ { "answer": "Paperclip scores 59 (C) on agent readiness against dsh-superagent (DeepSeek)'s 42.1 (E), and leads in every scored category.", "question": "Which is better for AI agents, dsh-superagent (DeepSeek) or Paperclip?" }, { "answer": "Yes. dsh-superagent (DeepSeek) is open source (MIT). Paperclip is open source (MIT).", "question": "Are dsh-superagent (DeepSeek) and Paperclip open source?" } ], "goodFor": [ { "aheadOn": null, "also": [ "No incidents deducted, where Paperclip loses 10 points for them" ], "goodFor": "Teams on github.com that want a DeepSeek Harness agent to turn allowed people's issue requests into pull requests, run on an isolated machine or OS account.", "slug": "deepseek-superagent", "watchFor": "Executor and main Sessions run with `danger-full-access` as the operator's OS user, and the docs say a worker can read the operator's home directory" }, { "aheadOn": [ "Reliability, 66 against 15", "Schema \u0026 documentation, 81 against 61", "Security \u0026 auth, 64 against 33", "Payments \u0026 pricing, 60 against 40", "Maintenance \u0026 community, 78 against 34", "Transparency \u0026 trust, 66 against 52" ], "also": null, "goodFor": "Someone running several coding or operations agents who wants one place for tasks, budgets, approvals and history across harnesses.", "slug": "paperclip", "watchFor": "`claude_local` defaults `dangerouslySkipPermissions` to true and `codex_local` defaults to bypassing approvals and the sandbox, with agents running on the host" } ], "history": { "deepseek-superagent": null, "paperclip": [ { "causes": [ "method" ], "date": "2026-10-27", "delta": 0, "from": 59, "fromGrade": "C", "to": 59, "toGrade": "C" } ] }, "job": { "capability": "agent.multi-agent", "name": "Multi-agent orchestration" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-deepseek-superagent.json", "title": "Agent Zero vs dsh-superagent (DeepSeek)", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-deepseek-superagent" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-deepseek-superagent.json", "title": "Aider vs dsh-superagent (DeepSeek)", "url": "https://www.anchorterminal.com/compare/aider-vs-deepseek-superagent" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-deepseek-superagent.json", "title": "Amp vs dsh-superagent (DeepSeek)", "url": "https://www.anchorterminal.com/compare/amp-vs-deepseek-superagent" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-deepseek-superagent.json", "title": "Antigravity CLI vs dsh-superagent (DeepSeek)", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-deepseek-superagent" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-deepseek-superagent.json", "title": "Auggie CLI vs dsh-superagent (DeepSeek)", "url": "https://www.anchorterminal.com/compare/auggie-vs-deepseek-superagent" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-deepseek-superagent.json", "title": "Claude Code vs dsh-superagent (DeepSeek)", "url": "https://www.anchorterminal.com/compare/claude-code-vs-deepseek-superagent" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-deepseek-superagent.json", "title": "Cline vs dsh-superagent (DeepSeek)", "url": "https://www.anchorterminal.com/compare/cline-vs-deepseek-superagent" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-deepseek-superagent.json", "title": "Crush vs dsh-superagent (DeepSeek)", "url": "https://www.anchorterminal.com/compare/crush-vs-deepseek-superagent" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-deepseek-superagent.json", "title": "Cursor CLI vs dsh-superagent (DeepSeek)", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-deepseek-superagent" }, { "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-deepseek-superagent.json", "title": "DeepSeek Harness (dsh) vs dsh-superagent (DeepSeek)", "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-deepseek-superagent" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-devin.json", "title": "dsh-superagent (DeepSeek) vs Devin", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-devin" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-droid-cli.json", "title": "dsh-superagent (DeepSeek) vs Droid CLI", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-droid-cli" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-earendil-pi.json", "title": "dsh-superagent (DeepSeek) vs Pi", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-gemini-cli.json", "title": "dsh-superagent (DeepSeek) vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-github-copilot-cli.json", "title": "dsh-superagent (DeepSeek) vs GitHub Copilot CLI", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-github-copilot-cli" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-goose.json", "title": "dsh-superagent (DeepSeek) vs goose", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-goose" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness2.json", "title": "dsh-superagent (DeepSeek) vs Harness²", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness2" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harnessrouter.json", "title": "dsh-superagent (DeepSeek) vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-jules.json", "title": "dsh-superagent (DeepSeek) vs Jules", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-jules" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-junie.json", "title": "dsh-superagent (DeepSeek) vs Junie CLI", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-junie" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kilo-code-cli.json", "title": "dsh-superagent (DeepSeek) vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kimi-code-cli.json", "title": "dsh-superagent (DeepSeek) vs Kimi Code CLI", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kimi-code-cli" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kiro-cli.json", "title": "dsh-superagent (DeepSeek) vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-mini-swe-agent.json", "title": "dsh-superagent (DeepSeek) vs mini-swe-agent", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-mini-swe-agent" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-minimax-code.json", "title": "dsh-superagent (DeepSeek) vs MiniMax Code", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-minimax-code" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-mistral-vibe-cli.json", "title": "dsh-superagent (DeepSeek) vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-muse-code.json", "title": "dsh-superagent (DeepSeek) vs Muse Code", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-muse-code" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openai-codex.json", "title": "dsh-superagent (DeepSeek) vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-opencode.json", "title": "dsh-superagent (DeepSeek) vs OpenCode", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openhands.json", "title": "dsh-superagent (DeepSeek) vs OpenHands", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openmausbot.json", "title": "dsh-superagent (DeepSeek) vs OpenMausBot", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openmausbot" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-prime-agent.json", "title": "dsh-superagent (DeepSeek) vs Prime Agent", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-qoder-cli.json", "title": "dsh-superagent (DeepSeek) vs Qoder CLI", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-qoder-cli" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-qwen-code.json", "title": "dsh-superagent (DeepSeek) vs Qwen Code", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-reflection-mirror.json", "title": "dsh-superagent (DeepSeek) vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-rovo-dev-cli.json", "title": "dsh-superagent (DeepSeek) vs Rovo Dev CLI", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-rovo-dev-cli" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-unstoppable.json", "title": "dsh-superagent (DeepSeek) vs Unstoppable", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-unstoppable" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-vibe-trading.json", "title": "dsh-superagent (DeepSeek) vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-warp.json", "title": "dsh-superagent (DeepSeek) vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-paperclip.json", "title": "Amp vs Paperclip", "url": "https://www.anchorterminal.com/compare/amp-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-paperclip.json", "title": "Antigravity CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-paperclip.json", "title": "Auggie CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/auggie-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-paperclip.json", "title": "Claude Code vs Paperclip", "url": "https://www.anchorterminal.com/compare/claude-code-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-deepseek-superagent.json", "title": "Clawboo vs dsh-superagent (DeepSeek)", "url": "https://www.anchorterminal.com/compare/clawboo-vs-deepseek-superagent" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-paperclip.json", "title": "Clawboo vs Paperclip", "url": "https://www.anchorterminal.com/compare/clawboo-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-deepseek-superagent.json", "title": "CLI Manager vs dsh-superagent (DeepSeek)", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-deepseek-superagent" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-paperclip.json", "title": "CLI Manager vs Paperclip", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-paperclip.json", "title": "Cline vs Paperclip", "url": "https://www.anchorterminal.com/compare/cline-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-paperclip.json", "title": "Crush vs Paperclip", "url": "https://www.anchorterminal.com/compare/crush-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-paperclip.json", "title": "DeepSeek Harness (dsh) vs Paperclip", "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness-autonomous.json", "title": "dsh-superagent (DeepSeek) vs Harness", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness-autonomous" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-parallax-agents.json", "title": "dsh-superagent (DeepSeek) vs Parallax", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-parallax-agents" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-paperclip.json", "title": "Devin vs Paperclip", "url": "https://www.anchorterminal.com/compare/devin-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-paperclip.json", "title": "Droid CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-paperclip.json", "title": "Gemini CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-paperclip.json", "title": "GitHub Copilot CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-paperclip.json", "title": "goose vs Paperclip", "url": "https://www.anchorterminal.com/compare/goose-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-paperclip.json", "title": "Harness vs Paperclip", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-paperclip.json", "title": "HarnessRouter vs Paperclip", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/jules-vs-paperclip.json", "title": "Jules vs Paperclip", "url": "https://www.anchorterminal.com/compare/jules-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/junie-vs-paperclip.json", "title": "Junie CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/junie-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip.json", "title": "Kilo Code CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-paperclip.json", "title": "Kimi Code CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-paperclip.json", "title": "Kiro CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/minimax-code-vs-paperclip.json", "title": "MiniMax Code vs Paperclip", "url": "https://www.anchorterminal.com/compare/minimax-code-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-paperclip.json", "title": "Mistral Vibe CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/muse-code-vs-paperclip.json", "title": "Muse Code vs Paperclip", "url": "https://www.anchorterminal.com/compare/muse-code-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-paperclip.json", "title": "OpenCode vs Paperclip", "url": "https://www.anchorterminal.com/compare/opencode-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-paperclip.json", "title": "OpenHands vs Paperclip", "url": "https://www.anchorterminal.com/compare/openhands-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/openmausbot-vs-paperclip.json", "title": "OpenMausBot vs Paperclip", "url": "https://www.anchorterminal.com/compare/openmausbot-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-parallax-agents.json", "title": "Paperclip vs Parallax", "url": "https://www.anchorterminal.com/compare/paperclip-vs-parallax-agents" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-prime-agent.json", "title": "Paperclip vs Prime Agent", "url": "https://www.anchorterminal.com/compare/paperclip-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-qoder-cli.json", "title": "Paperclip vs Qoder CLI", "url": "https://www.anchorterminal.com/compare/paperclip-vs-qoder-cli" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-qwen-code.json", "title": "Paperclip vs Qwen Code", "url": "https://www.anchorterminal.com/compare/paperclip-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror.json", "title": "Paperclip vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-rovo-dev-cli.json", "title": "Paperclip vs Rovo Dev CLI", "url": "https://www.anchorterminal.com/compare/paperclip-vs-rovo-dev-cli" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-unstoppable.json", "title": "Paperclip vs Unstoppable", "url": "https://www.anchorterminal.com/compare/paperclip-vs-unstoppable" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading.json", "title": "Paperclip vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-warp.json", "title": "Paperclip vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/paperclip-vs-warp" } ], "panel": null, "scores": [ { "by": 51, "deepseek-superagent": 15, "edge": "paperclip", "key": "reliability", "name": "Reliability", "paperclip": 66, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 20, "deepseek-superagent": 61, "edge": "paperclip", "key": "schema", "name": "Schema \u0026 documentation", "paperclip": 81, "weight": 13 }, { "by": 3, "deepseek-superagent": 67, "edge": "paperclip", "key": "ergonomics", "name": "Agent ergonomics", "paperclip": 70, "weight": 13 }, { "by": 31, "deepseek-superagent": 33, "edge": "paperclip", "key": "security", "name": "Security \u0026 auth", "paperclip": 64, "weight": 14 }, { "by": 20, "deepseek-superagent": 40, "edge": "paperclip", "key": "payments", "name": "Payments \u0026 pricing", "paperclip": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 44, "deepseek-superagent": 34, "edge": "paperclip", "key": "maintenance", "name": "Maintenance \u0026 community", "paperclip": 78, "weight": 7 }, { "by": 14, "deepseek-superagent": 52, "edge": "paperclip", "key": "transparency", "name": "Transparency \u0026 trust", "paperclip": 66, "weight": 7 } ], "summary": "Paperclip scores 59 (C) on agent readiness against dsh-superagent (DeepSeek)'s 42.1 (E), and leads in every scored category. Both do multi-agent orchestration.", "tasks": null, "tutorials": [], "verdicts": { "deepseek-superagent": "The authorization design is careful, with allowed lists, Mandates and a Policy enforced in code, proactive work only recorded by default and auto-merge off. Executors run every command without approval under the operator's OS user, and the README calls it a research prototype with no release, changelog or security policy.", "paperclip": "Board approvals, budgets with a hard stop and an activity log sit above whichever harnesses do the work, and eleven stable versions shipped in 90 days. The Claude Code and Codex adapters skip permission prompts and the sandbox by default, and twelve security advisories, five of them critical, have been published since April 2026." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-paperclip", "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-paperclip.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-paperclip.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-paperclip.min.md" }, "markdown": "Paperclip scores 59 (C) on agent readiness against dsh-superagent (DeepSeek)'s 42.1 (E), and leads in every scored category. Both do multi-agent orchestration.\n\n- dsh-superagent (DeepSeek): grade E, 42.1/100, rank #1108 of 1251. Markdown https://www.anchorterminal.com/tools/deepseek-superagent.md · JSON https://www.anchorterminal.com/api/v1/tools/deepseek-superagent.json\n- Paperclip: grade C, 59/100, rank #666 of 1251. Markdown https://www.anchorterminal.com/tools/paperclip.md · JSON https://www.anchorterminal.com/api/v1/tools/paperclip.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 955 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### dsh-superagent (DeepSeek) (E)\n\nGood for: Teams on github.com that want a DeepSeek Harness agent to turn allowed people's issue requests into pull requests, run on an isolated machine or OS account.\n\nAlso in its favour:\n- No incidents deducted, where Paperclip loses 10 points for them\n\nWatch for: Executor and main Sessions run with `danger-full-access` as the operator's OS user, and the docs say a worker can read the operator's home directory\n\n### Paperclip (C)\n\nGood for: Someone running several coding or operations agents who wants one place for tasks, budgets, approvals and history across harnesses.\n\nAhead on:\n- Reliability, 66 against 15\n- Schema \u0026 documentation, 81 against 61\n- Security \u0026 auth, 64 against 33\n- Payments \u0026 pricing, 60 against 40\n- Maintenance \u0026 community, 78 against 34\n- Transparency \u0026 trust, 66 against 52\n\nWatch for: `claude_local` defaults `dangerouslySkipPermissions` to true and `codex_local` defaults to bypassing approvals and the sandbox, with agents running on the host\n\n\n## Why the edge\n\n### Reliability: Paperclip +51\n\n- dsh-superagent (DeepSeek) (15): Local-package reading, since it runs as a DSH bundle on the operator's machine. Not published to npm (`private: true` in package.json, and the registry has no `dsh-superagent`). It installs from a git clone with `pnpm install \u0026\u0026 pnpm build` on top of `@deepseek-ai/dsh@0.2.1-rc.3`, with Node 22.19+ or 24+, git 2.32+, Python 3.8+, tmux and gh 2.48+ stated, so half credit (10). A vitest suite of about 25 spec files is listed in docs/007, and `pnpm check` runs the typecheck, tests and build. Two spec files were read on raw.githubusercontent.com. No CI workflow was found at five common paths under .github/workflows, and the directory couldn't be listed (5). Open issues couldn't be read, because github.com and api.github.com weren't reachable from our network. Unchecked, so scored absent (0). Version 0.1.0 with no tag, release or changelog found, so no semver record (0). A research prototype, not stable (0).\n- Paperclip (66): Read as local software. Official npm package `paperclipai` (Node.js 24.11 or newer) and a Docker image on GHCR (20). 2,429 test files and 20 workflows. The Actions page for master on 8 October 2026 showed recent runs passing, with two failed Runner Full-Stack E2E runs (681 and 682) before two that passed (22). 2,849 open issues, 125 labelled bug, 1,599 opened before 8 July, and 78 closed in the last 30 days against 686 opened (6). Calendar versions in semver syntax, with a Breaking Changes section and an upgrade guide in release notes, but breaking changes arrive in ordinary releases and 2026.916.0 carried five (10). No 1.0. The npm `latest` tag is called the stable channel and follows a beta soak of at least three days, while the roadmap says the product is still moving quickly, so half credit (8).\n\n### Maintenance \u0026 community: Paperclip +44\n\n- dsh-superagent (DeepSeek) (34): Published on 31 October 2026, within 30 days, read as the last published change since no tag or release was found (30). One publication, so not three releases in 90 days (0). Issues, pull requests and Discussions couldn't be read, and the README frames the code as a reference prototype adapted from an internal version (0). No official SDK or registry entry (0). Exact dependency pins and a lockfile, but no CI workflow found, and the docs pin DSH 0.2.1-rc.3 (23 October 2026) while npm `latest` is 0.2.1-rc.5 (29 October 2026) (4).\n- Paperclip (78): Version 2026.1005.0, dated 5 October 2026 in its notes and published on GitHub and npm on 6 October (30). Eleven stable releases since 20 July 2026 (20). 650 pull requests merged in the last 30 days, but 2,849 issues and 3,338 pull requests are open, 1,396 open issues have no comment, and 309 of the 472 still-open issues from the last two weeks have none (8). `paperclipai` and `@paperclipai/mcp-server` are both at 2026.1005.0 on npm. We did not check the MCP registry (12). CI on master, a lockfile refresh workflow and signed image attestations (8).\n\n### Security \u0026 auth: Paperclip +31\n\n- dsh-superagent (DeepSeek) (33): Harness reading of the framework checklist, 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. The `superagent` profile is created from DSH's Web template, and DSH documents that shipped profiles mount `session-log-deepseek`, enabled by default, which adds the session log to each official DeepSeek API request, up to 8 MiB. dsh-superagent's docs don't mention it, and its Sessions read issue, pull request and chat text and the repository. Setup and worker shells drop variables named KEY, PASSWORD, SECRET or TOKEN, and `GH_TOKEN` and `GITHUB_TOKEN` are removed from git (8). Both presets run `danger-full-access` without approval as the operator's OS user. docs/006 says the account wrappers don't isolate the process, a worker can run programs by path and read the operator's home directory, and recommends a dedicated OS account. The gate, `observe` default, blocked commands and no auto-merge as the agent account narrow what it does, not what it can do (6). docs/002 says messages, comments and quoted documents are inputs to a decision and can't change allowed lists, rules or Mandates, bots can never make explicit requests, and prompt edits don't change the gate. Workers with full access still read untrusted Thread text, and no further guidance on that was found (7). Decisions are recorded with reasons, Ticket details show the Trigger, Decision, scope and Policy version, the host records the prompt revisions each Session used, and every GitHub message starts with an automated-agent line by default (12). No SECURITY.md (404 at the root and in .github), no security.txt on www.deepseek.com (404), no bug bounty or advisory found. NVD has no record for the prototype. The CVEs against DSH itself are on the deepseek-harness listing (0).\n- Paperclip (64): Harness reading of the framework checklist, as used for the other harnesses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Anonymous usage telemetry is on by default and goes to telemetry.paperclip.ing. The README lists what is excluded and four opt-outs, and Sentry and OpenTelemetry stay off until configured. We found no first-run notice in the CLI source (18). Board approvals for hires and strategy, execution policies and per-action connection permissions, but `claude_local` defaults `dangerouslySkipPermissions` to true, `codex_local` defaults to bypassing approvals and the sandbox, local agents run on the host, sandbox providers are optional plugins and the default `local_trusted` mode has no login (10). A documented `low_trust_review` preset contains agents that read untrusted pull requests or tickets. It is opt-in (10). An activity log of mutating actions, run logs, cost events and audited board API keys (14). SECURITY.md with GitHub private reporting and twelve advisories published, two with CVEs. No security.txt, bug bounty or SOC 2 report found (12).\n\n### Schema \u0026 documentation: Paperclip +20\n\n- dsh-superagent (DeepSeek) (61): Framework reading, as for deepseek-harness. No OpenAPI or JSON Schema is published. docs/006 documents the Management API's routes, fields, block shapes and refusals in tables, and the code validates settings with zod (12). Markdown docs in the repository, readable raw, and a SETUP.md written for a coding agent. No llms.txt (5). Nine numbered documents read in order, each stating purpose, limits and what not to do, such as never rerunning the profile-creation command for an upgrade (17). Closed sets for accept mode (`off`, `observe`, `auto`), admission cells, Source states, health states and `listen` (12). A worked curl example, refusals as 400, 404, 409 and 500 with `issues`, `setup` or `code`, a troubleshooting table and status exit codes 0 to 3 (13). package.json says 0.1.0 and pins an `engines.dsh` range, but no changelog or tags were found (2).\n- Paperclip (81): The running server publishes OpenAPI at `/api/openapi.json` and validates requests with Zod, and the MCP server's tools take Zod schemas. No copy of the spec is published on the docs site, and paperclip.ing/openapi.json describes only the website (22). llms.txt at paperclip.ing, and docs pages answer as Markdown at `.md` (10). An API reference page per resource and task guides, but the MCP tool descriptions are one line each, such as List agents in a company (13). Typed inputs throughout, apart from the `paperclipApiRequest` tool, which takes any path under `/api` and a JSON body (12). cURL, JavaScript and Python examples and a status-code table, with one `{error}` shape and an occasional `details` field (12). A changelog page for every stable release and release notes in the repository, but the API path carries no version (12).\n\n### Payments \u0026 pricing: Paperclip +20\n\n- dsh-superagent (DeepSeek) (40): Self-hosted rule, as for the other open-source harnesses. No payment protocol (0). Free under MIT with nothing to buy (20). No card for the software (20). An agent can't get started alone, because the setup needs a person to create a dedicated GitHub user account, accept the repository invitation and run `auth login` for the wrappers, which SETUP.md lists as operator steps. 0, as the other harnesses that need an account were read (0). The model provider is a separate purchase.\n- Paperclip (60): No payment protocol (0). Read with the self-hosted rule. The software is free under MIT with nothing to buy (20). No card and no Paperclip account (20). One `npx` command installs and starts it with no signup (20). Paperclip Cloud is a waitlist with no published price, so there is no paid option to score.\n\n### Transparency \u0026 trust: Paperclip +14\n\n- dsh-superagent (DeepSeek) (52): MIT, Copyright (c) 2026 DeepSeek Harness Team (30). The prototype has no data statement of its own. DeepSeek Harness's privacy policy (last updated 20 September 2026) names Hangzhou DeepSeek Artificial Intelligence Co., Ltd., says session logs are collected with official model services and may be used to train models with a right to opt out, and says custom model services aren't stored server-side. It agrees with DSH's session-log README, but neither is referred to from the prototype (12). No deprecation policy. The README says the published code differs from DeepSeek's internal version, and docs/006 warns that database migrations are one-way (3). Telemetry and the session-log upload are disclosed with opt-outs in DSH's own reference pages, not in this repository (6).\n- Paperclip (66): MIT (30). The privacy policy of 23 July 2026 separates self-hosted use from the hosted services and names Paperclip Labs, Inc., but keeps data as long as reasonably necessary, lists no subprocessors, and the 90-day telemetry retention appears only in source. The terms grant a broad licence over content sent to the services and allow model training on opt-in detailed telemetry (16). Release notes carry dated Breaking Changes sections and upgrade guides, with no written deprecation policy or notice period (10). The README discloses telemetry, what it excludes and four opt-outs, and the event contract is public in the repository, but it is on by default (17).\n\n## Score by category\n\n| Category | Weight | dsh-superagent (DeepSeek) | Paperclip | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 15 | 66 | Paperclip +51 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 61 | 81 | Paperclip +20 |\n| Agent ergonomics | 13% (16.2 this run) | 67 | 70 | Paperclip +3 |\n| Security \u0026 auth | 14% (17.5 this run) | 33 | 64 | Paperclip +31 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 60 | Paperclip +20 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 34 | 78 | Paperclip +44 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 52 | 66 | Paperclip +14 |\n| Negative events | ≤15 | 0 | -10 | |\n| **Total** | | **42.1 · E** | **59 · C** | |\n\n## Facts side by side\n\n| Fact | dsh-superagent (DeepSeek) | Paperclip |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | DeepSeek | Paperclip Labs, Inc. |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | Token | OAuth or key |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | MIT |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| Last release | 2026-10-31 | 2026-10-05 |\n| Terms last updated | no document linked | 2026-07-23 |\n| Privacy policy last updated | 2026-09-20 | 2026-07-23 |\n| Customer content may train models | not read yet | yes, with an opt-out |\n| Terms restrict automated access | not read yet | not found in the text |\n| Terms restrict benchmarking | not read yet | not found in the text |\n| Terms or service can change without notice | not read yet | not found in the text |\n| Arbitration or class-action waiver | not read yet | yes |\n| Popularity | none | 99k stars, 60k npm/wk |\n\n## How the scores have moved\n\n### dsh-superagent (DeepSeek)\n\nNo score change since it was listed.\n\n### Paperclip\n\n- no change on 27 October 2026: checklist\n\n## Verdicts\n\n**dsh-superagent (DeepSeek).** The authorization design is careful, with allowed lists, Mandates and a Policy enforced in code, proactive work only recorded by default and auto-merge off. Executors run every command without approval under the operator's OS user, and the README calls it a research prototype with no release, changelog or security policy.\n\n**Paperclip.** Board approvals, budgets with a hard stop and an activity log sit above whichever harnesses do the work, and eleven stable versions shipped in 90 days. The Claude Code and Codex adapters skip permission prompts and the sandbox by default, and twelve security advisories, five of them critical, have been published since April 2026.\n\n## Before you call either\n\n### dsh-superagent (DeepSeek)\n\n1. Run it under a dedicated OS account holding only the agent's credentials. Executors run commands without approval and can read the operator's home directory\n2. Set `enabled: false` on the `session-log-deepseek` row of the `superagent` profile before using DeepSeek's official API on private code\n3. Keep the accept mode at `observe` and the allowed list short until the recorded Decisions look right\n4. Wait for `scripts/dsh-superagent status` to stop exiting 1 after any save that answers `restarting: true` before the next request\n5. Send `x-orchestrator-request: 1` and a loopback Host to the Management API, and send `revision` with each PUT, since a stale one gets 409\n\n### Paperclip\n\n1. Set `PAPERCLIP_TELEMETRY_DISABLED=1` or `DO_NOT_TRACK=1` before the first start. Telemetry is on by default\n2. Set `dangerouslySkipPermissions` and `dangerouslyBypassApprovalsAndSandbox` to false on agents that read untrusted input, or run them in a sandbox provider\n3. Install with Node.js 24.11 or newer, and install and sign in to each harness CLI on the host first. Paperclip assumes they are there\n4. Use `--bind lan` or `--bind tailnet` at onboarding for anything beyond one machine. The default `local_trusted` mode treats every request as the board admin\n5. Treat 409 on task checkout as owned by another agent and pick different work. The API docs say not to retry\n\n## Questions\n\n### Which is better for AI agents, dsh-superagent (DeepSeek) or Paperclip?\n\nPaperclip scores 59 (C) on agent readiness against dsh-superagent (DeepSeek)'s 42.1 (E), and leads in every scored category.\n\n### Are dsh-superagent (DeepSeek) and Paperclip open source?\n\nYes. dsh-superagent (DeepSeek) is open source (MIT). Paperclip is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/deepseek-superagent-vs-paperclip.json, and with the fewest tokens: https://www.anchorterminal.com/compare/deepseek-superagent-vs-paperclip.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"deepseek-superagent\", \"b\": \"paperclip\"}`. From a terminal: `anchor compare deepseek-superagent paperclip`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/deepseek-superagent.json and https://www.anchorterminal.com/api/v1/tools/paperclip.json\n\n## Other comparisons with dsh-superagent (DeepSeek) or Paperclip\n\n- [Agent Zero vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/agent-zero-vs-deepseek-superagent.md)\n- [Aider vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/aider-vs-deepseek-superagent.md)\n- [Amp vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/amp-vs-deepseek-superagent.md)\n- [Antigravity CLI vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/antigravity-cli-vs-deepseek-superagent.md)\n- [Auggie CLI vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/auggie-vs-deepseek-superagent.md)\n- [Claude Code vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/claude-code-vs-deepseek-superagent.md)\n- [Cline vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/cline-vs-deepseek-superagent.md)\n- [Crush vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/crush-vs-deepseek-superagent.md)\n- [Cursor CLI vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/cursor-cli-vs-deepseek-superagent.md)\n- [DeepSeek Harness (dsh) vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/deepseek-harness-vs-deepseek-superagent.md)\n- [dsh-superagent (DeepSeek) vs Devin](https://www.anchorterminal.com/compare/deepseek-superagent-vs-devin.md)\n- [dsh-superagent (DeepSeek) vs Droid CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-droid-cli.md)\n- [dsh-superagent (DeepSeek) vs Pi](https://www.anchorterminal.com/compare/deepseek-superagent-vs-earendil-pi.md)\n- [dsh-superagent (DeepSeek) vs Gemini CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-gemini-cli.md)\n- [dsh-superagent (DeepSeek) vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-github-copilot-cli.md)\n- [dsh-superagent (DeepSeek) vs goose](https://www.anchorterminal.com/compare/deepseek-superagent-vs-goose.md)\n- [dsh-superagent (DeepSeek) vs Harness²](https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness2.md)\n- [dsh-superagent (DeepSeek) vs HarnessRouter](https://www.anchorterminal.com/compare/deepseek-superagent-vs-harnessrouter.md)\n- [dsh-superagent (DeepSeek) vs Jules](https://www.anchorterminal.com/compare/deepseek-superagent-vs-jules.md)\n- [dsh-superagent (DeepSeek) vs Junie CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-junie.md)\n- [dsh-superagent (DeepSeek) vs Kilo Code CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-kilo-code-cli.md)\n- [dsh-superagent (DeepSeek) vs Kimi Code CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-kimi-code-cli.md)\n- [dsh-superagent (DeepSeek) vs Kiro CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-kiro-cli.md)\n- [dsh-superagent (DeepSeek) vs mini-swe-agent](https://www.anchorterminal.com/compare/deepseek-superagent-vs-mini-swe-agent.md)\n- [dsh-superagent (DeepSeek) vs MiniMax Code](https://www.anchorterminal.com/compare/deepseek-superagent-vs-minimax-code.md)\n- [dsh-superagent (DeepSeek) vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-mistral-vibe-cli.md)\n- [dsh-superagent (DeepSeek) vs Muse Code](https://www.anchorterminal.com/compare/deepseek-superagent-vs-muse-code.md)\n- [dsh-superagent (DeepSeek) vs OpenAI Codex](https://www.anchorterminal.com/compare/deepseek-superagent-vs-openai-codex.md)\n- [dsh-superagent (DeepSeek) vs OpenCode](https://www.anchorterminal.com/compare/deepseek-superagent-vs-opencode.md)\n- [dsh-superagent (DeepSeek) vs OpenHands](https://www.anchorterminal.com/compare/deepseek-superagent-vs-openhands.md)\n- [dsh-superagent (DeepSeek) vs OpenMausBot](https://www.anchorterminal.com/compare/deepseek-superagent-vs-openmausbot.md)\n- [dsh-superagent (DeepSeek) vs Prime Agent](https://www.anchorterminal.com/compare/deepseek-superagent-vs-prime-agent.md)\n- [dsh-superagent (DeepSeek) vs Qoder CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-qoder-cli.md)\n- [dsh-superagent (DeepSeek) vs Qwen Code](https://www.anchorterminal.com/compare/deepseek-superagent-vs-qwen-code.md)\n- [dsh-superagent (DeepSeek) vs Mirror CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-reflection-mirror.md)\n- [dsh-superagent (DeepSeek) vs Rovo Dev CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-rovo-dev-cli.md)\n- [dsh-superagent (DeepSeek) vs Unstoppable](https://www.anchorterminal.com/compare/deepseek-superagent-vs-unstoppable.md)\n- [dsh-superagent (DeepSeek) vs Vibe-Trading](https://www.anchorterminal.com/compare/deepseek-superagent-vs-vibe-trading.md)\n- [dsh-superagent (DeepSeek) vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/deepseek-superagent-vs-warp.md)\n- [Amp vs Paperclip](https://www.anchorterminal.com/compare/amp-vs-paperclip.md)\n- [Antigravity CLI vs Paperclip](https://www.anchorterminal.com/compare/antigravity-cli-vs-paperclip.md)\n- [Auggie CLI vs Paperclip](https://www.anchorterminal.com/compare/auggie-vs-paperclip.md)\n- [Claude Code vs Paperclip](https://www.anchorterminal.com/compare/claude-code-vs-paperclip.md)\n- [Clawboo vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/clawboo-vs-deepseek-superagent.md)\n- [Clawboo vs Paperclip](https://www.anchorterminal.com/compare/clawboo-vs-paperclip.md)\n- [CLI Manager vs dsh-superagent (DeepSeek)](https://www.anchorterminal.com/compare/cli-manager-vs-deepseek-superagent.md)\n- [CLI Manager vs Paperclip](https://www.anchorterminal.com/compare/cli-manager-vs-paperclip.md)\n- [Cline vs Paperclip](https://www.anchorterminal.com/compare/cline-vs-paperclip.md)\n- [Crush vs Paperclip](https://www.anchorterminal.com/compare/crush-vs-paperclip.md)\n- [DeepSeek Harness (dsh) vs Paperclip](https://www.anchorterminal.com/compare/deepseek-harness-vs-paperclip.md)\n- [dsh-superagent (DeepSeek) vs Harness](https://www.anchorterminal.com/compare/deepseek-superagent-vs-harness-autonomous.md)\n- [dsh-superagent (DeepSeek) vs Parallax](https://www.anchorterminal.com/compare/deepseek-superagent-vs-parallax-agents.md)\n- [Devin vs Paperclip](https://www.anchorterminal.com/compare/devin-vs-paperclip.md)\n- [Droid CLI vs Paperclip](https://www.anchorterminal.com/compare/droid-cli-vs-paperclip.md)\n- [Gemini CLI vs Paperclip](https://www.anchorterminal.com/compare/gemini-cli-vs-paperclip.md)\n- [GitHub Copilot CLI vs Paperclip](https://www.anchorterminal.com/compare/github-copilot-cli-vs-paperclip.md)\n- [goose vs Paperclip](https://www.anchorterminal.com/compare/goose-vs-paperclip.md)\n- [Harness vs Paperclip](https://www.anchorterminal.com/compare/harness-autonomous-vs-paperclip.md)\n- [HarnessRouter vs Paperclip](https://www.anchorterminal.com/compare/harnessrouter-vs-paperclip.md)\n- [Jules vs Paperclip](https://www.anchorterminal.com/compare/jules-vs-paperclip.md)\n- [Junie CLI vs Paperclip](https://www.anchorterminal.com/compare/junie-vs-paperclip.md)\n- [Kilo Code CLI vs Paperclip](https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip.md)\n- [Kimi Code CLI vs Paperclip](https://www.anchorterminal.com/compare/kimi-code-cli-vs-paperclip.md)\n- [Kiro CLI vs Paperclip](https://www.anchorterminal.com/compare/kiro-cli-vs-paperclip.md)\n- [MiniMax Code vs Paperclip](https://www.anchorterminal.com/compare/minimax-code-vs-paperclip.md)\n- [Mistral Vibe CLI vs Paperclip](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-paperclip.md)\n- [Muse Code vs Paperclip](https://www.anchorterminal.com/compare/muse-code-vs-paperclip.md)\n- [OpenCode vs Paperclip](https://www.anchorterminal.com/compare/opencode-vs-paperclip.md)\n- [OpenHands vs Paperclip](https://www.anchorterminal.com/compare/openhands-vs-paperclip.md)\n- [OpenMausBot vs Paperclip](https://www.anchorterminal.com/compare/openmausbot-vs-paperclip.md)\n- [Paperclip vs Parallax](https://www.anchorterminal.com/compare/paperclip-vs-parallax-agents.md)\n- [Paperclip vs Prime Agent](https://www.anchorterminal.com/compare/paperclip-vs-prime-agent.md)\n- [Paperclip vs Qoder CLI](https://www.anchorterminal.com/compare/paperclip-vs-qoder-cli.md)\n- [Paperclip vs Qwen Code](https://www.anchorterminal.com/compare/paperclip-vs-qwen-code.md)\n- [Paperclip vs Mirror CLI](https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror.md)\n- [Paperclip vs Rovo Dev CLI](https://www.anchorterminal.com/compare/paperclip-vs-rovo-dev-cli.md)\n- [Paperclip vs Unstoppable](https://www.anchorterminal.com/compare/paperclip-vs-unstoppable.md)\n- [Paperclip vs Vibe-Trading](https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading.md)\n- [Paperclip vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/paperclip-vs-warp.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-01", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "dsh-superagent (DeepSeek) vs Paperclip", "url": "" } ], "description": "Paperclip scores 59 (C) to dsh-superagent's 42.1 (E) for multi-agent orchestration. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "dsh-superagent (DeepSeek) E 42.1", "Paperclip C 59", "scores" ], "h1": "dsh-superagent (DeepSeek) vs Paperclip", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/deepseek-superagent-vs-paperclip", "published": "2026-10-01", "section": "tools", "title": "dsh-superagent vs Paperclip for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-01", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-paperclip" }, "tokens": { "markdown": 6700, "slim": 3230 }, "version": 1 }