{ "data": { "a": { "slug": "deeptutor", "name": "DeepTutor", "vendor": "HKUDS", "vendorUrl": "https://deeptutor.info", "kind": "harness", "category": "personal-assistants", "summary": "DeepTutor is an open-source, self-hosted learning workspace from HKUDS for tutoring, quizzes, research reports and knowledge bases, with persistent memory and optional multiple users. It runs as a web app, and a `deeptutor` CLI emits NDJSON for other agents.", "url": "https://www.anchorterminal.com/tools/deeptutor", "markdownUrl": "https://www.anchorterminal.com/tools/deeptutor.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/deeptutor.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/deeptutor.json", "repo": "https://github.com/HKUDS/DeepTutor", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "pypi", "name": "deeptutor" }, { "registry": "pypi", "name": "deeptutor-cli" } ], "auth": "none", "authNotes": "No account with the project. The owner adds model provider keys in Settings or through `deeptutor config apply` with `api_key_env` naming an environment variable, or signs in to OpenAI Codex (OAuth), GitHub Copilot (device login) or CodeBuddy. Web sign-in is off by default; with `auth.json` enabled the first registered user becomes admin and grants models, knowledge bases, skills, tools and MCP access to other users (https://github.com/HKUDS/DeepTutor/blob/main/README.md).", "pricing": "free", "pricingNotes": "Free under the Apache 2.0 licence, and the README says the project has no paid online products. The owner pays the chosen model, embedding and search providers, or nothing with a local model through Ollama, LM Studio, llama.cpp, vLLM or Lemonade. The README carries a PageIndex discount code and an API Route provider preset, both third parties (checked 2026-10-30).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, SKILL.md or the developer handbook (checked 2026-10-30).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 51497, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-30" }, "docsUrl": "https://deeptutor.info/", "capabilities": [ "assistant.memory", "assistant.self-hosted", "assistant.messaging", "agent.mcp-client", "knowledge.search", "search.research", "memory.user", "document.write" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "apache-2.0", "cli", "harness", "docker", "mcp-client", "rag", "no-card" ], "lastRelease": "2026-10-28", "graded": true, "anchor": { "graded": true, "score": 62.7, "grade": "B", "agentReady": false, "rank": 494, "ranked": true, "rankOf": 1239, "categoryRank": 7, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 63, "maintenance": 84, "payments": 60, "reliability": 78, "schema": 71, "security": 51, "transparency": 52 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-30" }, "negative": -3, "negativeNotes": [ "2026-09-30. CVE-2026-51870 (critical on NVD). Command execution through the TutorBot shell tool's `ExecTool.execute` in v1.4.0, reported in issue #506. v1.4.1 of 27 May 2026 lists it closed with a shell RCE (#518), a filesystem path traversal (#517) and three authorisation bypasses (#514 to #516), and makes shell exec opt-in. Fixed within five days and documented in release notes, -2. https://nvd.nist.gov/vuln/detail/CVE-2026-51870", "2026-06-30. GHSA-jg88-rvpc-qvxj (CVE-2026-58168, high). Before 1.4.10, a user grant without `mcp_tools` let non-admin users in multi-user mode invoke every configured MCP tool. Single-user installs were unaffected. Fixed in 1.4.10 of 21 June 2026 with deny-by-default MCP access, -1. https://api.osv.dev/v1/vulns/GHSA-jg88-rvpc-qvxj" ], "verdict": "DeepTutor runs on the owner's machine under Apache 2.0, ships releases every few days with upgrade notes, and gives other agents a JSON CLI with resumable sessions. Its default launch binds all interfaces with sign-in off and permissive CORS, there is no security policy, and two CVEs in 2026 covered a shell-tool RCE and a multi-user MCP bypass, both fixed.", "bestFor": "A learner, a teacher or a small group that wants a self-hosted tutor over their own documents, with quizzes, research reports, memory and IM companions, or for an agent that hands study tasks to it through the JSON CLI.", "strengths": [ "Apache 2.0, self-hosted, and the README says the project sells nothing", "`deeptutor run ... --format json` streams NDJSON tagged with `session_id`, and `--session` chains turns headlessly", "SKILL.md and AGENT_SETUP.md give an agent a non-interactive setup path with `config apply --check` and `doctor --format json`", "Releases every few days with dated notes and upgrade steps, 27 in the 90 days to 30 October 2026", "Inspectable file-backed memory with an append-only L1 trace, and grants, audit records and per-user isolation in multi-user mode" ], "weaknesses": [ "The default launch binds the backend to 0.0.0.0 with sign-in off and CORS open to any origin with credentials", "No SECURITY.md, no private reporting route and no repository-published advisories, while two CVEs were assigned in 2026", "The `exec` sandbox falls back to a best-effort restricted subprocess by default when no runner or bubblewrap is present", "Nightly test runs on main failed every night from 20 to 28 October 2026 before passing again on 29 and 30 October", "Provider keys are stored in plain JSON under `data/user/settings/`" ], "agentNotes": [ "Run `deeptutor run \u003ccapability\u003e \"...\" --format json` and read the `done` event's `session_id`; pass `--session` to continue the same session", "Configure with `deeptutor config apply setup.json --check` first, naming keys through `api_key_env`; literal keys are rejected", "Before exposing it beyond one machine, enable sign-in in `auth.json`, set exact `cors_origins` and set `BACKEND_HOST=127.0.0.1` where loopback is wanted", "Run 1.4.10 or later. Earlier versions carry CVE-2026-51870 (shell tool RCE, fixed in 1.4.1) and CVE-2026-58168 (multi-user MCP bypass)", "Set `sandbox_allow_subprocess` to false where generated code must run only in the runner sidecar or bubblewrap" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.7 } ], "editorialScores": { "ergonomics": 63, "maintenance": 84, "payments": 60, "reliability": 78, "schema": 71, "security": 51, "transparency": 65 }, "provenanceScore": 39, "checked": { "categories": { "ergonomics": "2026-10-30", "maintenance": "2026-10-30", "payments": "2026-10-30", "reliability": "2026-10-30", "schema": "2026-10-30", "security": "2026-10-30", "transparency": "2026-10-30" }, "last": "2026-10-30", "oldest": "2026-10-30", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install -U \"deeptutor[full]\" # then: deeptutor init \u0026\u0026 deeptutor start # or: docker run --rm -p 127.0.0.1:3782:3782 -v deeptutor-data:/app/data ghcr.io/hkuds/deeptutor:latest", "headless": { "command": "deeptutor run chat \"$TASK\" --format json" } }, "letme": { "capability": "https://letme.dev/assistant.memory", "tool": "https://letme.dev/deeptutor" }, "area": "frameworks", "provenance": { "legalEntity": "", "domain": "deeptutor.info", "domainRegistered": "2026-05-20", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/HKUDS/DeepTutor/releases", "securityTxt": "unknown", "checked": "2026-10-30", "notes": [ "No legal entity is named. The repository belongs to the GitHub organisation HKUDS, the Data Intelligence Lab at the University of Hong Kong, and the README says the project is led by Bingxi Zhao within the HKUDS group.", "deeptutor.info's robots.txt disallows ClaudeBot, Claude-Web and anthropic-ai, so its pages were not read. Its terms, privacy page and security.txt are unknown.", "No SECURITY.md was found in the repository tree on 30 October 2026.", "RDAP gives a registration date of 20 May 2026 for deeptutor.info. The README dates the docs site's launch to 22 May 2026.", "There is no hosted endpoint. The API answers on the owner's own host." ], "score": 39 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/deeptutor.json" }, "answer": "DeepTutor and QwenPaw score within a point of each other on agent readiness, 62.7 (B) and 62.4 (B). QwenPaw leads on security \u0026 auth and transparency \u0026 trust.", "b": { "slug": "qwenpaw", "name": "QwenPaw", "vendor": "AgentScope", "vendorUrl": "https://qwenpaw.agentscope.io", "kind": "harness", "category": "personal-assistants", "summary": "Open-source personal assistant from the AgentScope team that the owner runs on their own machine or server. It answers on chat apps, runs scheduled and proactive tasks, manages a mailbox over IMAP and SMTP, and keeps memory as Markdown files.", "url": "https://www.anchorterminal.com/tools/qwenpaw", "markdownUrl": "https://www.anchorterminal.com/tools/qwenpaw.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/qwenpaw.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/qwenpaw.json", "repo": "https://github.com/agentscope-ai/QwenPaw", "license": "Apache-2.0", "transports": [ "http", "stdio" ], "packages": [ { "registry": "pypi", "name": "qwenpaw" }, { "registry": "oci", "name": "agentscope/qwenpaw" } ], "auth": "none", "authNotes": "No account. The Console and API bind to 127.0.0.1:8088 with login off by default. `QWENPAW_AUTH_ENABLED=true` adds one admin account with a salted SHA-256 password hash and a signed token valid for seven days, and requests from localhost skip it. Each channel takes its own bot credentials, and the mailbox takes an IMAP and SMTP authorisation code or app password.", "pricing": "free", "pricingNotes": "Free under Apache-2.0 with nothing to buy. Model usage is billed by whichever provider the owner configures, and local models through llama.cpp, Ollama or LM Studio need no key. The README describes a hosted deployment on AgentScope Platform as free. That platform's pages are script-drawn and its terms and limits were not read (checked 2026-10-12).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs source or the dependency list (checked 2026-10-12).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 35621, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://qwenpaw.agentscope.io/docs", "capabilities": [ "assistant.proactive", "assistant.messaging", "assistant.accounts", "assistant.memory", "assistant.self-hosted", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "docker", "desktop-app", "mcp", "telemetry-default-on" ], "lastRelease": "2026-09-11", "graded": true, "anchor": { "graded": true, "score": 62.4, "grade": "B", "agentReady": false, "rank": 506, "ranked": true, "rankOf": 1239, "categoryRank": 8, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 73, "payments": 60, "reliability": 70, "schema": 68, "security": 60, "transparency": 58 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-12" }, "negative": -3, "negativeNotes": [ "2026-09-11. Version 2.2.1 began enforcing each MCP server's tool allowlist on the agent runtime path (commit f2a292d of 4 September, #7504). Before it, a tool the owner had disabled on an MCP client could still be invoked by the agent. Fixed and listed in the release notes, with no security advisory, -2. https://github.com/agentscope-ai/QwenPaw/pull/7504", "2026-09-03. Version 2.2.0 blocked shell line-continuation variants that bypassed sensitive-path protections (#7472). Fixed and listed in the release notes, with no security advisory, -1. https://github.com/agentscope-ai/QwenPaw/blob/main/website/public/release-notes/v2.2.0.md" ], "verdict": "Mail tools ask for approval by default, automatic mail handling may not delete permanently, and the security docs list what each sandbox backend fails to enforce. Usage data is sent by default, the default approval level passes every tool call no rule flags, and no privacy policy or security advisory is published.", "bestFor": "One person who wants an assistant on Chinese and Western chat apps with scheduled digests, a consumer mailbox and file-based memory, on their own machine and with a model of their choice.", "strengths": [ "New mail driver cards default to the `ask` policy, and automatic mail handling may not call `delete_message` or write to unknown recipients", "Kernel sandbox on macOS, Linux and Windows, with a documented list of constraints each backend does not enforce", "Model keys, mail credentials and environment secrets are encrypted with a master key held in the OS keychain or a 0600 file", "Memory is plain Markdown in the agent workspace that the owner can read, edit and remove", "Four stable releases in the 90 days to 12 October 2026, each with dated release notes" ], "weaknesses": [ "Usage data is on by default, `qwenpaw init --defaults` accepts it without a prompt, and the opt-out variable is absent from the README and docs", "The default approval level AUTO asks only for tool calls a guard rule flags, and `/proactive` skips approval prompts entirely", "Channel direct-message and group policies default to `open`, and Console login is off by default", "No privacy policy, terms of service or security.txt on qwenpaw.agentscope.io, and no published GitHub security advisory", "Inside containers the sandbox falls back to `mode=none`, which the docs say enforces no isolation", "671 open issues and 381 open pull requests on 12 October 2026, and the Tests workflow on main had not completed a run since 30 September" ], "agentNotes": [ "Set `QWENPAW_TELEMETRY_DISABLED=true` before `qwenpaw init --defaults` or `qwenpaw app`. Both send usage data without asking", "Set `approval_level` to `STRICT` or `SMART` in `agent.json`. The default `AUTO` runs every tool call no guard rule flags", "Set `dm_policy` and `group_policy` to `allowlist` with `allow_from` on each channel. Both default to `open`", "Set `QWENPAW_AUTH_ENABLED=true` before binding beyond 127.0.0.1. Requests from localhost skip login even then", "Keep mail tools on `ask` for `send_message`, `delete_message` and `delete_thread`, and turn on Mail Access Control with automatic handling" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 2.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.4 } ], "editorialScores": { "ergonomics": 67, "maintenance": 73, "payments": 60, "reliability": 70, "schema": 68, "security": 60, "transparency": 58 }, "provenanceScore": 58, "checked": { "categories": { "ergonomics": "2026-10-12", "maintenance": "2026-10-12", "payments": "2026-10-12", "reliability": "2026-10-12", "schema": "2026-10-12", "security": "2026-10-12", "transparency": "2026-10-12" }, "last": "2026-10-12", "lastMoved": "2026-10-27", "oldest": "2026-10-12", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install qwenpaw \u0026\u0026 qwenpaw init --defaults \u0026\u0026 qwenpaw app # Python 3.11 to 3.13; or: docker pull agentscope/qwenpaw:latest", "http": "curl -X POST http://localhost:8088/api/console/chat -H \"Content-Type: application/json\" -H \"X-Agent-Id: default\" -d '{\"input\": [...]}'" }, "letme": { "capability": "https://letme.dev/assistant.proactive", "tool": "https://letme.dev/qwenpaw" }, "area": "frameworks", "provenance": { "legalEntity": "Qwenpaw PRIVATE LIMITED", "domain": "agentscope.io", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://qwenpaw.agentscope.io/release-notes", "securityTxt": "none", "checked": "2026-10-12", "notes": [ "The site footer in the repository's website source reads © 2026 Qwenpaw PRIVATE LIMITED. The LICENSE file names The QwenPaw Authors, and the README credits the AgentScope team.", "SECURITY.md sends vulnerability reports to the Alibaba Security Response Centre. We found no other first-hand statement of ownership by Alibaba.", "The site links a Usage Policy dated 26 August 2026 and no terms of service or privacy policy, so both links are left out and the Apache-2.0 licence stands in.", "qwenpaw.agentscope.io answered 404 for robots.txt, llms.txt and /.well-known/security.txt on 12 October 2026.", "No hosted endpoint is graded. A self-hosted instance answers on its owner's own host. We did not look up the domain's registration date." ], "score": 58 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/qwenpaw.json", "live": { "slug": "qwenpaw", "versions": [ { "registry": "github", "name": "agentscope-ai/QwenPaw", "version": "v2.2.2.post1", "released": "2026-10-22", "seenAt": "2026-10-30T14:40:30.202481312Z" }, { "registry": "pypi", "name": "qwenpaw", "version": "2.2.2.post1", "released": "2026-10-22", "seenAt": "2026-10-30T14:40:28.201920797Z" } ], "githubStars": 37005, "pypiWeekly": 6002, "securityTxt": { "url": "https://agentscope.io/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-30T15:38:17.243013426Z" }, "domain": { "domain": "agentscope.io", "checkedAt": "2026-10-25T14:05:08.651487695Z" }, "pages": [ { "url": "https://qwenpaw.agentscope.io/release-notes", "kind": "changelog", "status": 404, "checkedAt": "2026-10-30T05:46:52.099856896Z", "changedAt": "0001-01-01T00:00:00Z" } ], "github": { "repo": "agentscope-ai/qwenpaw", "checkedAt": "2026-10-26T07:08:22.236751997Z", "stars": 36257, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-26T06:27:59Z", "openIssues": 716, "openPRs": 426, "issuesOpened90d": 778, "issuesClosed90d": 687, "prsMerged90d": 664, "ci": { "branch": "main", "runs": 50, "success": 48, "failure": 0, "other": 2, "latest": "success", "latestAt": "2026-10-26T06:42:16Z" }, "replies": { "sampled": 25, "unanswered": 15, "medianDays": 0 } }, "updatedAt": "2026-10-30T15:38:17.243013426Z" } }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "HKUDS", "b": "AgentScope", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "HTTP, stdio", "name": "Transports" }, { "a": "None", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "Apache-2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "no", "name": "llms.txt" }, { "a": "2026-10-28", "b": "2026-09-11", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "51k stars", "b": "36k stars", "name": "Popularity" }, { "a": "none", "b": "2.8/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "DeepTutor and QwenPaw score within a point of each other on agent readiness, 62.7 (B) and 62.4 (B). QwenPaw leads on security \u0026 auth and transparency \u0026 trust.", "question": "Which is better for AI agents, DeepTutor or QwenPaw?" }, { "answer": "Yes. DeepTutor is open source (Apache-2.0). QwenPaw is open source (Apache-2.0).", "question": "Are DeepTutor and QwenPaw open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 78 against 70", "Maintenance \u0026 community, 84 against 73" ], "also": [ "Free to start without a card" ], "goodFor": "A learner, a teacher or a small group that wants a self-hosted tutor over their own documents, with quizzes, research reports, memory and IM companions, or for an agent that hands study tasks to it through the JSON CLI.", "slug": "deeptutor", "watchFor": "The default launch binds the backend to 0.0.0.0 with sign-in off and CORS open to any origin with credentials" }, { "aheadOn": [ "Security \u0026 auth, 60 against 51", "Transparency \u0026 trust, 58 against 52" ], "also": [ "Runs on your own machine" ], "goodFor": "One person who wants an assistant on Chinese and Western chat apps with scheduled digests, a consumer mailbox and file-based memory, on their own machine and with a model of their choice.", "slug": "qwenpaw", "watchFor": "Usage data is on by default, `qwenpaw init --defaults` accepts it without a prompt, and the opt-out variable is absent from the README and docs" } ], "job": { "capability": "assistant.memory", "name": "Assistants that remember you" }, "others": [ { "json": "https://www.anchorterminal.com/compare/asaply-vs-deeptutor.json", "title": "asaply vs DeepTutor", "url": "https://www.anchorterminal.com/compare/asaply-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/asaply-vs-qwenpaw.json", "title": "asaply vs QwenPaw", "url": "https://www.anchorterminal.com/compare/asaply-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/asmi-vs-deeptutor.json", "title": "Asmi vs DeepTutor", "url": "https://www.anchorterminal.com/compare/asmi-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/asmi-vs-qwenpaw.json", "title": "Asmi vs QwenPaw", "url": "https://www.anchorterminal.com/compare/asmi-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-deeptutor.json", "title": "AstrBot vs DeepTutor", "url": "https://www.anchorterminal.com/compare/astrbot-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/boba-vs-deeptutor.json", "title": "Boba vs DeepTutor", "url": "https://www.anchorterminal.com/compare/boba-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/boba-vs-qwenpaw.json", "title": "Boba vs QwenPaw", "url": "https://www.anchorterminal.com/compare/boba-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/brea-vs-deeptutor.json", "title": "Brea vs DeepTutor", "url": "https://www.anchorterminal.com/compare/brea-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/brea-vs-qwenpaw.json", "title": "Brea vs QwenPaw", "url": "https://www.anchorterminal.com/compare/brea-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/del-vs-qwenpaw.json", "title": "Del vs QwenPaw", "url": "https://www.anchorterminal.com/compare/del-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/hirealpha-vs-qwenpaw.json", "title": "HireAlpha vs QwenPaw", "url": "https://www.anchorterminal.com/compare/hirealpha-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/openinstinct-vs-qwenpaw.json", "title": "OpenInstinct vs QwenPaw", "url": "https://www.anchorterminal.com/compare/openinstinct-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/orbits-vs-qwenpaw.json", "title": "Orbits vs QwenPaw", "url": "https://www.anchorterminal.com/compare/orbits-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/orchid-ai-vs-qwenpaw.json", "title": "Orchid vs QwenPaw", "url": "https://www.anchorterminal.com/compare/orchid-ai-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-szn.json", "title": "QwenPaw vs szn", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-szn" }, { "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-tab-bot.json", "title": "QwenPaw vs Tab", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-tab-bot" }, { "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-zapia.json", "title": "QwenPaw vs Zapia", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-zapia" }, { "json": "https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw.json", "title": "AstrBot vs QwenPaw", "url": "https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/boski-vs-qwenpaw.json", "title": "Boski vs QwenPaw", "url": "https://www.anchorterminal.com/compare/boski-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/caddy-app-vs-qwenpaw.json", "title": "Caddy vs QwenPaw", "url": "https://www.anchorterminal.com/compare/caddy-app-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/claude-duet-vs-qwenpaw.json", "title": "Claude Duet vs QwenPaw", "url": "https://www.anchorterminal.com/compare/claude-duet-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-qwenpaw.json", "title": "CowAgent vs QwenPaw", "url": "https://www.anchorterminal.com/compare/cowagent-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/folk-nozomio-vs-qwenpaw.json", "title": "folk vs QwenPaw", "url": "https://www.anchorterminal.com/compare/folk-nozomio-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/gaia-vs-qwenpaw.json", "title": "GAIA vs QwenPaw", "url": "https://www.anchorterminal.com/compare/gaia-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/gemini-spark-vs-qwenpaw.json", "title": "Gemini Spark vs QwenPaw", "url": "https://www.anchorterminal.com/compare/gemini-spark-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/grok-bot-vs-qwenpaw.json", "title": "Grok Bot vs QwenPaw", "url": "https://www.anchorterminal.com/compare/grok-bot-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/haven-vs-qwenpaw.json", "title": "Haven vs QwenPaw", "url": "https://www.anchorterminal.com/compare/haven-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw.json", "title": "Hermes Agent vs QwenPaw", "url": "https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/instinct-vs-qwenpaw.json", "title": "Instinct vs QwenPaw", "url": "https://www.anchorterminal.com/compare/instinct-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/ironclaw-vs-qwenpaw.json", "title": "IronClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/ironclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/leon-vs-qwenpaw.json", "title": "Leon vs QwenPaw", "url": "https://www.anchorterminal.com/compare/leon-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/lindy-vs-qwenpaw.json", "title": "Lindy vs QwenPaw", "url": "https://www.anchorterminal.com/compare/lindy-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw.json", "title": "nanobot vs QwenPaw", "url": "https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/nanoclaw-vs-qwenpaw.json", "title": "NanoClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/nanoclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/openai-dots-vs-qwenpaw.json", "title": "Dots vs QwenPaw", "url": "https://www.anchorterminal.com/compare/openai-dots-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw.json", "title": "OpenClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/openduet-vs-qwenpaw.json", "title": "OpenDuet vs QwenPaw", "url": "https://www.anchorterminal.com/compare/openduet-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw.json", "title": "PicoClaw vs QwenPaw", "url": "https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/poke-vs-qwenpaw.json", "title": "Poke vs QwenPaw", "url": "https://www.anchorterminal.com/compare/poke-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-tasker-ai.json", "title": "QwenPaw vs Tasker AI", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-tasker-ai" }, { "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-town.json", "title": "QwenPaw vs Town", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-town" }, { "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw.json", "title": "QwenPaw vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-zo-computer.json", "title": "QwenPaw vs Zo Computer", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/atticus-vs-deeptutor.json", "title": "Atticus vs DeepTutor", "url": "https://www.anchorterminal.com/compare/atticus-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/atticus-vs-qwenpaw.json", "title": "Atticus vs QwenPaw", "url": "https://www.anchorterminal.com/compare/atticus-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/boski-vs-deeptutor.json", "title": "Boski vs DeepTutor", "url": "https://www.anchorterminal.com/compare/boski-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/caddy-app-vs-deeptutor.json", "title": "Caddy vs DeepTutor", "url": "https://www.anchorterminal.com/compare/caddy-app-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/claude-duet-vs-deeptutor.json", "title": "Claude Duet vs DeepTutor", "url": "https://www.anchorterminal.com/compare/claude-duet-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/cowagent-vs-deeptutor.json", "title": "CowAgent vs DeepTutor", "url": "https://www.anchorterminal.com/compare/cowagent-vs-deeptutor" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-del.json", "title": "DeepTutor vs Del", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-del" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-folk-nozomio.json", "title": "DeepTutor vs folk", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-folk-nozomio" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-gaia.json", "title": "DeepTutor vs GAIA", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-gaia" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-gemini-spark.json", "title": "DeepTutor vs Gemini Spark", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-gemini-spark" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-grok-bot.json", "title": "DeepTutor vs Grok Bot", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-grok-bot" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-hark-pro.json", "title": "DeepTutor vs Hark Pro", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-hark-pro" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-haven.json", "title": "DeepTutor vs Haven", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-haven" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-hermes-agent.json", "title": "DeepTutor vs Hermes Agent", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-hermes-agent" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-hirealpha.json", "title": "DeepTutor vs HireAlpha", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-hirealpha" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-instinct.json", "title": "DeepTutor vs Instinct", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-instinct" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-ironclaw.json", "title": "DeepTutor vs IronClaw", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-ironclaw" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-learnharness.json", "title": "DeepTutor vs LearnHarness", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-learnharness" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-leon.json", "title": "DeepTutor vs Leon", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-leon" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-lindy.json", "title": "DeepTutor vs Lindy", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-lindy" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-lobby-os.json", "title": "DeepTutor vs Lobby", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-lobby-os" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-nanobot.json", "title": "DeepTutor vs nanobot", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-nanobot" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-nanoclaw.json", "title": "DeepTutor vs NanoClaw", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-nanoclaw" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-natura.json", "title": "DeepTutor vs Natura tinyNature", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-natura" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-openai-dots.json", "title": "DeepTutor vs Dots", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-openai-dots" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-openclaw.json", "title": "DeepTutor vs OpenClaw", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-openclaw" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-openduet.json", "title": "DeepTutor vs OpenDuet", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-openduet" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-openinstinct.json", "title": "DeepTutor vs OpenInstinct", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-openinstinct" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-orbits.json", "title": "DeepTutor vs Orbits", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-orbits" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-orchid-ai.json", "title": "DeepTutor vs Orchid", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-orchid-ai" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-pally.json", "title": "DeepTutor vs Pally", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-pally" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-picoclaw.json", "title": "DeepTutor vs PicoClaw", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-picoclaw" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-poke.json", "title": "DeepTutor vs Poke", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-poke" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-szn.json", "title": "DeepTutor vs szn", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-szn" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-tab-bot.json", "title": "DeepTutor vs Tab", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-tab-bot" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-talorys.json", "title": "DeepTutor vs Talorys", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-tasker-ai.json", "title": "DeepTutor vs Tasker AI", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-tasker-ai" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-tomo.json", "title": "DeepTutor vs Tomo", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-town.json", "title": "DeepTutor vs Town", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-town" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-wajo.json", "title": "DeepTutor vs Wajo (Fo)", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-wajo" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-zapia.json", "title": "DeepTutor vs Zapia", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-zapia" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-zeroclaw.json", "title": "DeepTutor vs ZeroClaw", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-zeroclaw" }, { "json": "https://www.anchorterminal.com/compare/deeptutor-vs-zo-computer.json", "title": "DeepTutor vs Zo Computer", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-zo-computer" }, { "json": "https://www.anchorterminal.com/compare/hark-pro-vs-qwenpaw.json", "title": "Hark Pro vs QwenPaw", "url": "https://www.anchorterminal.com/compare/hark-pro-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/learnharness-vs-qwenpaw.json", "title": "LearnHarness vs QwenPaw", "url": "https://www.anchorterminal.com/compare/learnharness-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-talorys.json", "title": "QwenPaw vs Talorys", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-talorys" }, { "json": "https://www.anchorterminal.com/compare/lobby-os-vs-qwenpaw.json", "title": "Lobby vs QwenPaw", "url": "https://www.anchorterminal.com/compare/lobby-os-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/natura-vs-qwenpaw.json", "title": "Natura tinyNature vs QwenPaw", "url": "https://www.anchorterminal.com/compare/natura-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/pally-vs-qwenpaw.json", "title": "Pally vs QwenPaw", "url": "https://www.anchorterminal.com/compare/pally-vs-qwenpaw" }, { "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-tomo.json", "title": "QwenPaw vs Tomo", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-tomo" }, { "json": "https://www.anchorterminal.com/compare/qwenpaw-vs-wajo.json", "title": "QwenPaw vs Wajo (Fo)", "url": "https://www.anchorterminal.com/compare/qwenpaw-vs-wajo" }, { "json": "https://www.anchorterminal.com/compare/ai-job-search-vs-deeptutor.json", "title": "AI Job Search vs DeepTutor", "url": "https://www.anchorterminal.com/compare/ai-job-search-vs-deeptutor" } ], "scores": [ { "by": 8, "deeptutor": 78, "edge": "deeptutor", "key": "reliability", "name": "Reliability", "qwenpaw": 70, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 3, "deeptutor": 71, "edge": "deeptutor", "key": "schema", "name": "Schema \u0026 documentation", "qwenpaw": 68, "weight": 13 }, { "by": 4, "deeptutor": 63, "edge": "qwenpaw", "key": "ergonomics", "name": "Agent ergonomics", "qwenpaw": 67, "weight": 13 }, { "by": 9, "deeptutor": 51, "edge": "qwenpaw", "key": "security", "name": "Security \u0026 auth", "qwenpaw": 60, "weight": 14 }, { "by": 0, "deeptutor": 60, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "qwenpaw": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 11, "deeptutor": 84, "edge": "deeptutor", "key": "maintenance", "name": "Maintenance \u0026 community", "qwenpaw": 73, "weight": 7 }, { "by": 6, "deeptutor": 52, "edge": "qwenpaw", "key": "transparency", "name": "Transparency \u0026 trust", "qwenpaw": 58, "weight": 7 } ], "summary": "DeepTutor and QwenPaw score within a point of each other on agent readiness, 62.7 (B) and 62.4 (B). QwenPaw leads on security \u0026 auth and transparency \u0026 trust. Both do assistants that remember you.", "tutorials": [], "verdicts": { "deeptutor": "DeepTutor runs on the owner's machine under Apache 2.0, ships releases every few days with upgrade notes, and gives other agents a JSON CLI with resumable sessions. Its default launch binds all interfaces with sign-in off and permissive CORS, there is no security policy, and two CVEs in 2026 covered a shell-tool RCE and a multi-user MCP bypass, both fixed.", "qwenpaw": "Mail tools ask for approval by default, automatic mail handling may not delete permanently, and the security docs list what each sandbox backend fails to enforce. Usage data is sent by default, the default approval level passes every tool call no rule flags, and no privacy policy or security advisory is published." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/deeptutor-vs-qwenpaw", "json": "https://www.anchorterminal.com/compare/deeptutor-vs-qwenpaw.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/deeptutor-vs-qwenpaw.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/deeptutor-vs-qwenpaw.min.md" }, "markdown": "DeepTutor and QwenPaw score within a point of each other on agent readiness, 62.7 (B) and 62.4 (B). QwenPaw leads on security \u0026 auth and transparency \u0026 trust. Both do assistants that remember you.\n\n- DeepTutor: grade B, 62.7/100, rank #494 of 1239. Markdown https://www.anchorterminal.com/tools/deeptutor.md · JSON https://www.anchorterminal.com/api/v1/tools/deeptutor.json\n- QwenPaw: grade B, 62.4/100, rank #506 of 1239. Markdown https://www.anchorterminal.com/tools/qwenpaw.md · JSON https://www.anchorterminal.com/api/v1/tools/qwenpaw.json\n- Best AI personal assistants that act for one person: https://www.anchorterminal.com/best/personal-assistants/index.md\n- All 1196 assistants comparisons: https://www.anchorterminal.com/compare/personal-assistants/index.md\n\n## Which one, for what\n\n### DeepTutor (B)\n\nGood for: A learner, a teacher or a small group that wants a self-hosted tutor over their own documents, with quizzes, research reports, memory and IM companions, or for an agent that hands study tasks to it through the JSON CLI.\n\nAhead on:\n- Reliability, 78 against 70\n- Maintenance \u0026 community, 84 against 73\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: The default launch binds the backend to 0.0.0.0 with sign-in off and CORS open to any origin with credentials\n\n### QwenPaw (B)\n\nGood for: One person who wants an assistant on Chinese and Western chat apps with scheduled digests, a consumer mailbox and file-based memory, on their own machine and with a model of their choice.\n\nAhead on:\n- Security \u0026 auth, 60 against 51\n- Transparency \u0026 trust, 58 against 52\n\nAlso in its favour:\n- Runs on your own machine\n\nWatch for: Usage data is on by default, `qwenpaw init --defaults` accepts it without a prompt, and the opt-out variable is absent from the README and docs\n\n\n## Score by category\n\n| Category | Weight | DeepTutor | QwenPaw | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 78 | 70 | DeepTutor +8 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 71 | 68 | DeepTutor +3 |\n| Agent ergonomics | 13% (16.2 this run) | 63 | 67 | QwenPaw +4 |\n| Security \u0026 auth | 14% (17.5 this run) | 51 | 60 | QwenPaw +9 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 84 | 73 | DeepTutor +11 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 52 | 58 | QwenPaw +6 |\n| Negative events | ≤15 | -3 | -3 | |\n| **Total** | | **62.7 · B** | **62.4 · B** | |\n\n## Facts side by side\n\n| Fact | DeepTutor | QwenPaw |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | HKUDS | AgentScope |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | HTTP, stdio |\n| Auth | None | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | Apache-2.0 | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | no | no |\n| Last release | 2026-10-28 | 2026-09-11 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 51k stars | 36k stars |\n| Agent reviews | none | 2.8/5 (4) |\n\n## Verdicts\n\n**DeepTutor.** DeepTutor runs on the owner's machine under Apache 2.0, ships releases every few days with upgrade notes, and gives other agents a JSON CLI with resumable sessions. Its default launch binds all interfaces with sign-in off and permissive CORS, there is no security policy, and two CVEs in 2026 covered a shell-tool RCE and a multi-user MCP bypass, both fixed.\n\n**QwenPaw.** Mail tools ask for approval by default, automatic mail handling may not delete permanently, and the security docs list what each sandbox backend fails to enforce. Usage data is sent by default, the default approval level passes every tool call no rule flags, and no privacy policy or security advisory is published.\n\n## Before you call either\n\n### DeepTutor\n\n1. Run `deeptutor run \u003ccapability\u003e \"...\" --format json` and read the `done` event's `session_id`; pass `--session` to continue the same session\n2. Configure with `deeptutor config apply setup.json --check` first, naming keys through `api_key_env`; literal keys are rejected\n3. Before exposing it beyond one machine, enable sign-in in `auth.json`, set exact `cors_origins` and set `BACKEND_HOST=127.0.0.1` where loopback is wanted\n4. Run 1.4.10 or later. Earlier versions carry CVE-2026-51870 (shell tool RCE, fixed in 1.4.1) and CVE-2026-58168 (multi-user MCP bypass)\n5. Set `sandbox_allow_subprocess` to false where generated code must run only in the runner sidecar or bubblewrap\n\n### QwenPaw\n\n1. Set `QWENPAW_TELEMETRY_DISABLED=true` before `qwenpaw init --defaults` or `qwenpaw app`. Both send usage data without asking\n2. Set `approval_level` to `STRICT` or `SMART` in `agent.json`. The default `AUTO` runs every tool call no guard rule flags\n3. Set `dm_policy` and `group_policy` to `allowlist` with `allow_from` on each channel. Both default to `open`\n4. Set `QWENPAW_AUTH_ENABLED=true` before binding beyond 127.0.0.1. Requests from localhost skip login even then\n5. Keep mail tools on `ask` for `send_message`, `delete_message` and `delete_thread`, and turn on Mail Access Control with automatic handling\n\n## Questions\n\n### Which is better for AI agents, DeepTutor or QwenPaw?\n\nDeepTutor and QwenPaw score within a point of each other on agent readiness, 62.7 (B) and 62.4 (B). QwenPaw leads on security \u0026 auth and transparency \u0026 trust.\n\n### Are DeepTutor and QwenPaw open source?\n\nYes. DeepTutor is open source (Apache-2.0). QwenPaw is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/deeptutor-vs-qwenpaw.json, and with the fewest tokens: https://www.anchorterminal.com/compare/deeptutor-vs-qwenpaw.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"deeptutor\", \"b\": \"qwenpaw\"}`. From a terminal: `anchor compare deeptutor qwenpaw`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/deeptutor.json and https://www.anchorterminal.com/api/v1/tools/qwenpaw.json\n\n## Other comparisons with DeepTutor or QwenPaw\n\n- [asaply vs DeepTutor](https://www.anchorterminal.com/compare/asaply-vs-deeptutor.md)\n- [asaply vs QwenPaw](https://www.anchorterminal.com/compare/asaply-vs-qwenpaw.md)\n- [Asmi vs DeepTutor](https://www.anchorterminal.com/compare/asmi-vs-deeptutor.md)\n- [Asmi vs QwenPaw](https://www.anchorterminal.com/compare/asmi-vs-qwenpaw.md)\n- [AstrBot vs DeepTutor](https://www.anchorterminal.com/compare/astrbot-vs-deeptutor.md)\n- [Boba vs DeepTutor](https://www.anchorterminal.com/compare/boba-vs-deeptutor.md)\n- [Boba vs QwenPaw](https://www.anchorterminal.com/compare/boba-vs-qwenpaw.md)\n- [Brea vs DeepTutor](https://www.anchorterminal.com/compare/brea-vs-deeptutor.md)\n- [Brea vs QwenPaw](https://www.anchorterminal.com/compare/brea-vs-qwenpaw.md)\n- [Del vs QwenPaw](https://www.anchorterminal.com/compare/del-vs-qwenpaw.md)\n- [HireAlpha vs QwenPaw](https://www.anchorterminal.com/compare/hirealpha-vs-qwenpaw.md)\n- [OpenInstinct vs QwenPaw](https://www.anchorterminal.com/compare/openinstinct-vs-qwenpaw.md)\n- [Orbits vs QwenPaw](https://www.anchorterminal.com/compare/orbits-vs-qwenpaw.md)\n- [Orchid vs QwenPaw](https://www.anchorterminal.com/compare/orchid-ai-vs-qwenpaw.md)\n- [QwenPaw vs szn](https://www.anchorterminal.com/compare/qwenpaw-vs-szn.md)\n- [QwenPaw vs Tab](https://www.anchorterminal.com/compare/qwenpaw-vs-tab-bot.md)\n- [QwenPaw vs Zapia](https://www.anchorterminal.com/compare/qwenpaw-vs-zapia.md)\n- [AstrBot vs QwenPaw](https://www.anchorterminal.com/compare/astrbot-vs-qwenpaw.md)\n- [Boski vs QwenPaw](https://www.anchorterminal.com/compare/boski-vs-qwenpaw.md)\n- [Caddy vs QwenPaw](https://www.anchorterminal.com/compare/caddy-app-vs-qwenpaw.md)\n- [Claude Duet vs QwenPaw](https://www.anchorterminal.com/compare/claude-duet-vs-qwenpaw.md)\n- [CowAgent vs QwenPaw](https://www.anchorterminal.com/compare/cowagent-vs-qwenpaw.md)\n- [folk vs QwenPaw](https://www.anchorterminal.com/compare/folk-nozomio-vs-qwenpaw.md)\n- [GAIA vs QwenPaw](https://www.anchorterminal.com/compare/gaia-vs-qwenpaw.md)\n- [Gemini Spark vs QwenPaw](https://www.anchorterminal.com/compare/gemini-spark-vs-qwenpaw.md)\n- [Grok Bot vs QwenPaw](https://www.anchorterminal.com/compare/grok-bot-vs-qwenpaw.md)\n- [Haven vs QwenPaw](https://www.anchorterminal.com/compare/haven-vs-qwenpaw.md)\n- [Hermes Agent vs QwenPaw](https://www.anchorterminal.com/compare/hermes-agent-vs-qwenpaw.md)\n- [Instinct vs QwenPaw](https://www.anchorterminal.com/compare/instinct-vs-qwenpaw.md)\n- [IronClaw vs QwenPaw](https://www.anchorterminal.com/compare/ironclaw-vs-qwenpaw.md)\n- [Leon vs QwenPaw](https://www.anchorterminal.com/compare/leon-vs-qwenpaw.md)\n- [Lindy vs QwenPaw](https://www.anchorterminal.com/compare/lindy-vs-qwenpaw.md)\n- [nanobot vs QwenPaw](https://www.anchorterminal.com/compare/nanobot-vs-qwenpaw.md)\n- [NanoClaw vs QwenPaw](https://www.anchorterminal.com/compare/nanoclaw-vs-qwenpaw.md)\n- [Dots vs QwenPaw](https://www.anchorterminal.com/compare/openai-dots-vs-qwenpaw.md)\n- [OpenClaw vs QwenPaw](https://www.anchorterminal.com/compare/openclaw-vs-qwenpaw.md)\n- [OpenDuet vs QwenPaw](https://www.anchorterminal.com/compare/openduet-vs-qwenpaw.md)\n- [PicoClaw vs QwenPaw](https://www.anchorterminal.com/compare/picoclaw-vs-qwenpaw.md)\n- [Poke vs QwenPaw](https://www.anchorterminal.com/compare/poke-vs-qwenpaw.md)\n- [QwenPaw vs Tasker AI](https://www.anchorterminal.com/compare/qwenpaw-vs-tasker-ai.md)\n- [QwenPaw vs Town](https://www.anchorterminal.com/compare/qwenpaw-vs-town.md)\n- [QwenPaw vs ZeroClaw](https://www.anchorterminal.com/compare/qwenpaw-vs-zeroclaw.md)\n- [QwenPaw vs Zo Computer](https://www.anchorterminal.com/compare/qwenpaw-vs-zo-computer.md)\n- [Atticus vs DeepTutor](https://www.anchorterminal.com/compare/atticus-vs-deeptutor.md)\n- [Atticus vs QwenPaw](https://www.anchorterminal.com/compare/atticus-vs-qwenpaw.md)\n- [Boski vs DeepTutor](https://www.anchorterminal.com/compare/boski-vs-deeptutor.md)\n- [Caddy vs DeepTutor](https://www.anchorterminal.com/compare/caddy-app-vs-deeptutor.md)\n- [Claude Duet vs DeepTutor](https://www.anchorterminal.com/compare/claude-duet-vs-deeptutor.md)\n- [CowAgent vs DeepTutor](https://www.anchorterminal.com/compare/cowagent-vs-deeptutor.md)\n- [DeepTutor vs Del](https://www.anchorterminal.com/compare/deeptutor-vs-del.md)\n- [DeepTutor vs folk](https://www.anchorterminal.com/compare/deeptutor-vs-folk-nozomio.md)\n- [DeepTutor vs GAIA](https://www.anchorterminal.com/compare/deeptutor-vs-gaia.md)\n- [DeepTutor vs Gemini Spark](https://www.anchorterminal.com/compare/deeptutor-vs-gemini-spark.md)\n- [DeepTutor vs Grok Bot](https://www.anchorterminal.com/compare/deeptutor-vs-grok-bot.md)\n- [DeepTutor vs Hark Pro](https://www.anchorterminal.com/compare/deeptutor-vs-hark-pro.md)\n- [DeepTutor vs Haven](https://www.anchorterminal.com/compare/deeptutor-vs-haven.md)\n- [DeepTutor vs Hermes Agent](https://www.anchorterminal.com/compare/deeptutor-vs-hermes-agent.md)\n- [DeepTutor vs HireAlpha](https://www.anchorterminal.com/compare/deeptutor-vs-hirealpha.md)\n- [DeepTutor vs Instinct](https://www.anchorterminal.com/compare/deeptutor-vs-instinct.md)\n- [DeepTutor vs IronClaw](https://www.anchorterminal.com/compare/deeptutor-vs-ironclaw.md)\n- [DeepTutor vs LearnHarness](https://www.anchorterminal.com/compare/deeptutor-vs-learnharness.md)\n- [DeepTutor vs Leon](https://www.anchorterminal.com/compare/deeptutor-vs-leon.md)\n- [DeepTutor vs Lindy](https://www.anchorterminal.com/compare/deeptutor-vs-lindy.md)\n- [DeepTutor vs Lobby](https://www.anchorterminal.com/compare/deeptutor-vs-lobby-os.md)\n- [DeepTutor vs nanobot](https://www.anchorterminal.com/compare/deeptutor-vs-nanobot.md)\n- [DeepTutor vs NanoClaw](https://www.anchorterminal.com/compare/deeptutor-vs-nanoclaw.md)\n- [DeepTutor vs Natura tinyNature](https://www.anchorterminal.com/compare/deeptutor-vs-natura.md)\n- [DeepTutor vs Dots](https://www.anchorterminal.com/compare/deeptutor-vs-openai-dots.md)\n- [DeepTutor vs OpenClaw](https://www.anchorterminal.com/compare/deeptutor-vs-openclaw.md)\n- [DeepTutor vs OpenDuet](https://www.anchorterminal.com/compare/deeptutor-vs-openduet.md)\n- [DeepTutor vs OpenInstinct](https://www.anchorterminal.com/compare/deeptutor-vs-openinstinct.md)\n- [DeepTutor vs Orbits](https://www.anchorterminal.com/compare/deeptutor-vs-orbits.md)\n- [DeepTutor vs Orchid](https://www.anchorterminal.com/compare/deeptutor-vs-orchid-ai.md)\n- [DeepTutor vs Pally](https://www.anchorterminal.com/compare/deeptutor-vs-pally.md)\n- [DeepTutor vs PicoClaw](https://www.anchorterminal.com/compare/deeptutor-vs-picoclaw.md)\n- [DeepTutor vs Poke](https://www.anchorterminal.com/compare/deeptutor-vs-poke.md)\n- [DeepTutor vs szn](https://www.anchorterminal.com/compare/deeptutor-vs-szn.md)\n- [DeepTutor vs Tab](https://www.anchorterminal.com/compare/deeptutor-vs-tab-bot.md)\n- [DeepTutor vs Talorys](https://www.anchorterminal.com/compare/deeptutor-vs-talorys.md)\n- [DeepTutor vs Tasker AI](https://www.anchorterminal.com/compare/deeptutor-vs-tasker-ai.md)\n- [DeepTutor vs Tomo](https://www.anchorterminal.com/compare/deeptutor-vs-tomo.md)\n- [DeepTutor vs Town](https://www.anchorterminal.com/compare/deeptutor-vs-town.md)\n- [DeepTutor vs Wajo (Fo)](https://www.anchorterminal.com/compare/deeptutor-vs-wajo.md)\n- [DeepTutor vs Zapia](https://www.anchorterminal.com/compare/deeptutor-vs-zapia.md)\n- [DeepTutor vs ZeroClaw](https://www.anchorterminal.com/compare/deeptutor-vs-zeroclaw.md)\n- [DeepTutor vs Zo Computer](https://www.anchorterminal.com/compare/deeptutor-vs-zo-computer.md)\n- [Hark Pro vs QwenPaw](https://www.anchorterminal.com/compare/hark-pro-vs-qwenpaw.md)\n- [LearnHarness vs QwenPaw](https://www.anchorterminal.com/compare/learnharness-vs-qwenpaw.md)\n- [QwenPaw vs Talorys](https://www.anchorterminal.com/compare/qwenpaw-vs-talorys.md)\n- [Lobby vs QwenPaw](https://www.anchorterminal.com/compare/lobby-os-vs-qwenpaw.md)\n- [Natura tinyNature vs QwenPaw](https://www.anchorterminal.com/compare/natura-vs-qwenpaw.md)\n- [Pally vs QwenPaw](https://www.anchorterminal.com/compare/pally-vs-qwenpaw.md)\n- [QwenPaw vs Tomo](https://www.anchorterminal.com/compare/qwenpaw-vs-tomo.md)\n- [QwenPaw vs Wajo (Fo)](https://www.anchorterminal.com/compare/qwenpaw-vs-wajo.md)\n- [AI Job Search vs DeepTutor](https://www.anchorterminal.com/compare/ai-job-search-vs-deeptutor.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-31", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "DeepTutor vs QwenPaw", "url": "" } ], "description": "DeepTutor and QwenPaw score within a point of each other for assistants that remember you, 62.7 and 62.4 out of 100. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "DeepTutor B 62.7", "QwenPaw B 62.4", "scores" ], "h1": "DeepTutor vs QwenPaw", "image": "https://www.anchorterminal.com/assets/og/compare-deeptutor-vs-qwenpaw.png", "path": "/compare/deeptutor-vs-qwenpaw", "published": "2026-10-01", "section": "tools", "title": "DeepTutor vs QwenPaw for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-30", "url": "https://www.anchorterminal.com/compare/deeptutor-vs-qwenpaw" }, "tokens": { "markdown": 3850, "slim": 530 }, "version": 1 }