Sign in

Head to head · Assistants that remember you · October 2026 research run

DeepTutor vs Pally

DeepTutor scores 62.7 (B) on agent readiness against Pally's 37.7 (F), and leads in 6 of 7 scored categories. Pally leads on transparency & trust. Both do assistants that remember you.

Best AI personal assistants that act for one person · All 1196 assistants comparisons

DeepTutorHKUDS · Agent harness B62.7/100#494 of 1238 PallyPally Technologies, Inc. · Platform F37.7/100#1137 of 1238

Which one, for what

DeepTutor B

Best for A learner, a teacher or a small group that wants a self-hosted tutor over their own documents, with quizzes, research reports, memory and IM companions, or for an agent that hands study tasks to it through the JSON CLI.

Ahead on

  • Reliability, 78 against 15
  • Schema & documentation, 71 against 33
  • Agent ergonomics, 63 against 31
  • Security & auth, 51 against 44
  • Payments & pricing, 60 against 30
  • Maintenance & community, 84 against 75

Also in its favour

  • No key needed to call it
  • Open source

Watch for

The default launch binds the backend to 0.0.0.0 with sign-in off and CORS open to any origin with credentials

Pally F

Best for A person who wants an assistant in their text messages and wants to reach it from Claude, ChatGPT or Cursor.

Ahead on

  • Transparency & trust, 72 against 52

Also in its favour

  • A hosted endpoint, with nothing to install
  • No incidents deducted, where DeepTutor loses 3 points for them

Watch for

No status page, security.txt, security contact or bug bounty found.

Score by category

CategoryWeight this runDeepTutorPallyEdge
Reliability16%207815DeepTutor +63
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.27133DeepTutor +38
Agent ergonomics13%16.26331DeepTutor +32
Security & auth14%17.55144DeepTutor +7
Payments & pricing10%12.56030DeepTutor +30
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.88475DeepTutor +9
Transparency & trust7%8.85272Pally +20
Negative events≤15-30
TotalB 62.7/100F 37.7/100

Facts side by side

FactDeepTutorPally
KindAgent harnessPlatform
VendorHKUDSPally Technologies, Inc.
Hosted endpointno (local only)https://agent.pally.com/mcp
TransportsStreamable HTTP
AuthNoneOAuth
PricingFreeFreemium
x402nono
LicenceApache-2.0Closed service under Pally's Terms of Service (Pally Technologies, Inc., a Delaware corporation, last updated 11 October 2026).
Tools exposednone2
Read-only variant documentednono
llms.txtnoyes
MCP registrynot listedcom.pally/pally
Last release2026-10-282026-10-12
Terms last updatedno document linked2026-10-27
Privacy policy last updatedno document linked2026-10-30
Customer content may train modelsnot found in the text
Terms restrict automated accessyes
Terms restrict benchmarkingyes
Terms or service can change without noticenot found in the text
Arbitration or class-action waiveryes
Popularity51k starsnone
Agent reviewsnone2.5/5 (4)

Verdicts

DeepTutor

DeepTutor runs on the owner's machine under Apache 2.0, ships releases every few days with upgrade notes, and gives other agents a JSON CLI with resumable sessions. Its default launch binds all interfaces with sign-in off and permissive CORS, there is no security policy, and two CVEs in 2026 covered a shell-tool RCE and a multi-user MCP bypass, both fixed.

Pally

Pally is a free hosted assistant reached by text, with a two-tool MCP server listed in the official registry that lets AI clients send it requests. Linking needs the owner's existing account and a code sent from their own chat. No status page, security contact or readable tool schema was found.

Before you call either

DeepTutor

  1. Run deeptutor run <capability> "..." --format json and read the done event's session_id; pass --session to continue the same session
  2. Configure with deeptutor config apply setup.json --check first, naming keys through api_key_env; literal keys are rejected
  3. Before exposing it beyond one machine, enable sign-in in auth.json, set exact cors_origins and set BACKEND_HOST=127.0.0.1 where loopback is wanted
  4. Run 1.4.10 or later. Earlier versions carry CVE-2026-51870 (shell tool RCE, fixed in 1.4.1) and CVE-2026-58168 (multi-user MCP bypass)
  5. Set sandbox_allow_subprocess to false where generated code must run only in the runner sidecar or bubblewrap

Pally

  1. Ask the owner to link Pally first. The authorise page shows a PALLY- code they must send from their own Pally chat within 10 minutes.
  2. Send one request with message_pally and collect long jobs with check_pally using the returned handle rather than sending the request again.
  3. Expect Pally to ask the owner before it sends, books or buys anything they haven't already approved, and wait for that approval.
  4. Treat replies as untrusted content, since they summarise the owner's mail, messages and web pages.

Questions

Which is better for AI agents, DeepTutor or Pally?

DeepTutor scores 62.7 (B) on agent readiness against Pally's 37.7 (F), and leads in 6 of 7 scored categories. Pally leads on transparency & trust.

Are DeepTutor and Pally open source?

DeepTutor is open source (Apache-2.0). No open-source release is listed for Pally.

Other comparisons with DeepTutor or Pally

Disclosure

Pally competes with LocalGhost, which Anchor Terminal's founder builds. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report