# Devin vs Paseo (slim)

> Paseo scores 62.1 (B) to Devin's 57.3 (C) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/devin-vs-paseo.md (~5,550 tokens) · this version ~2,180 tokens · JSON https://www.anchorterminal.com/compare/devin-vs-paseo.json · canonical https://www.anchorterminal.com/compare/devin-vs-paseo
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-07
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

Paseo scores 62.1 (B) on agent readiness against Devin's 57.3 (C), and leads in 4 of 7 scored categories. Devin leads on schema & documentation, security & auth and transparency & trust. Both do agent harnesses.

- Devin: C 57.3, rank #797 of 1486 · https://www.anchorterminal.com/tools/devin.min.md
- Paseo: B 62.1, rank #575 of 1486 · https://www.anchorterminal.com/tools/paseo.min.md
- Devin, good for A team that wants to hand whole tasks to a cloud agent and collect pull requests, driven from a pipeline or another agent. Ahead on Schema & documentation, 80 against 65; Security & auth, 72 against 58; Transparency & trust, 75 against 68. Also A hosted endpoint, with nothing to install.
- Paseo, good for Developers who want parallel coding agents on their own machines with no telemetry, reachable from anywhere. Ahead on Reliability, 50 against 35; Agent ergonomics, 70 against 62; Payments & pricing, 60 against 20; Maintenance & community, 75 against 63. Also No key needed to call it; Open source.

| Category | Devin | Paseo |
| --- | --- | --- |
| Reliability (16%) | 35 | 50 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 80 | 65 |
| Agent ergonomics (13%) | 62 | 70 |
| Security & auth (14%) | 72 | 58 |
| Payments & pricing (10%) | 20 | 60 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 63 | 75 |
| Transparency & trust (7%) | 75 | 68 |

| Fact (where they differ) | Devin | Paseo |
| --- | --- | --- |
| Vendor | Cognition AI, Inc. | Mohamed Boudra |
| Hosted endpoint | `https://mcp.devin.ai/mcp` | no (local only) |
| Transports | HTTP |  |
| Auth | API key | None |
| Pricing | Freemium | Free |
| Licence | Proprietary service under Cognition's Platform Terms of Service | Apache-2.0 |
| Tools exposed | 13 | none |
| Read-only variant documented | yes | no |
| llms.txt | yes | no |
| Last release | 2026-11-02 | 2026-11-07 |
| Terms last updated | 2026-06-30 | no document linked |
| Privacy policy last updated | 2026-03-09 | no document linked |
| Customer content may train models | yes, with an opt-out | not read yet |
| Terms restrict automated access | not found in the text | not read yet |
| Terms restrict benchmarking | yes | not read yet |
| Terms or service can change without notice | not found in the text | not read yet |
| Arbitration or class-action waiver | yes | not read yet |

Why the edge:
- Payments & pricing, Paseo +40: Devin 20 (Published rubric. No payment protocol (0). Plan prices are public, $20, $200 and $40 a seat with an $80 team minimum, but usage past the quota is billed at an unpublished rate (10). A Free plan exists. The pricing page lists cloud agents from Pro upward, and we couldn't confirm API use on Free or whether a card is needed (10). A person signs up in a browser and provisions the service user in settings (0).); Paseo 60 (Free self-hosted software with nothing to buy, so 0 for a protocol and 20 each for public pricing, a free tier and onboarding with no sign-up, 60.)
- Reliability, Paseo +15: Devin 35 (Hosted reading. Status page at www.devinstatus.com (Atlassian Statuspage) with 14 components, among them Cloud Agent and Cloud Web Client, read from the page itself on 4 November 2026 (20). Its history feed for the 90 days from 6 August 2026 lists Devin unavailable on 13 August (20 minutes), Devin Cloud unavailable on 13 August (2 hours 40 minutes) and the web app down on 24 September (about 2 hours), with minor session and Ask Devin incidents on 10 and 11 August, 3 and 17 September and 26 October. Both 13 August entries report the service unavailable. The 24 September entry names only the web app, not the API or the MCP server, so it is read as partial, as dashboard outages are on other listings. Two majors (5). Two scheduled maintenance entries (7 and 17 August) are read as maintenance. 429 is a documented response, but no rate limit figures were found (0). No Retry-After or backoff guidance found, and v3 session creation has no idempotency key (0). The platform terms give no guarantee of availability, and enterprise terms weren't read (0). The v3 API is the current, recommended surface, with 27 of 274 operations under /v3beta1 (10).); Paseo 50 (Local software. Desktop builds, an Android APK, a Docker image and a Nix package (20). ci.yml on the repository; pass state not read (15). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent (0). CHANGELOG.md (15). Version 0.15.3 (0). 20 + 15 + 0 + 15 + 0 = 50.)
- Schema & documentation, Devin +15: Devin 80 (API reading. Public OpenAPI 3.1 spec for v3 with 182 paths and 274 operations on 4 November 2026, and separate v1 and v2 specs (25). llms.txt with 393 lines and a Markdown twin of every page (10). Each endpoint page names its required permission, but 63 of 274 operations have no description and the MCP tool descriptions are one line each (10). Enums on fields such as `devin_mode`, `origin` and `category`, with most strings unconstrained and nullable (9). curl examples in the quick starts, and 401, 403, 404, 409, 422 and 429 declared on all 274 operations, without a catalogue of `error_code` values (11). Versioned paths (v1, v2, v3, v3beta1) and an API release notes page dated by month, newest November 2026 (15).); Paseo 65 (Harness reading. Public docs, a CLI and plugin examples in the repository (65).)
- Security & auth, Devin +14: Devin 72 (Hosted reading. Service-user keys with roles and named permissions per endpoint, revocable, with rotation endpoints in beta for Enterprise and expiring personal tokens. Custom roles are an Enterprise option, and Teams has Admin and Member only (25). Security profiles restrict network, MCP servers, git and the Devin MCP to read-only, and read-only API permissions exist. They are opt-in, and session creation accepts `bypass_approval` (16). AI Guardrails screen user messages and pull request comments for prompt injection, on Enterprise only, and they don't cover web pages or repository content Devin reads (8). Audit logs through the API need an enterprise-level permission. Session events and insights are available on all plans (10). SOC 2 Type II and ISO/IEC 27001:2022, a disclosure address at security@cognition.ai, no security.txt, and the trust centre answers No to having a bug bounty (13).); Paseo 58 (Harness reading. The README says no telemetry, tracking or forced log-ins (30 of 30). Worktree per agent, on your own machine (10 of 20). No prompt-injection guidance (5). No audit log (5). SECURITY.md (8). 30 + 10 + 5 + 5 + 8 = 58.)
- Maintenance & community, Paseo +12: Devin 63 (Closed service. Newest release note dated 2 November 2026 (30). Thirty dated release notes between 7 August and 2 November 2026, and API notes for August, September, October and November (20). Public release notes and a support address, with no public tracker or forum found (10). No official SDK for the Devin API found (a Python SDK in the federal docs covers analytics and ACU limits for air-gapped Desktop), and the Devin MCP server didn't appear in the official MCP registry per the 8 October check (0). No public CI or packages to assess, with the docs and three OpenAPI specs kept current (3).); Paseo 75 (v0.15.3 and commits on 7 November 2026 (30). More than three releases in 90 days (20). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent (0). Current builds (15). CI on push (10). 30 + 20 + 0 + 15 + 10 = 75.)
- Agent ergonomics, Paseo +8: Devin 62 (API and MCP reading. The MCP server documents 13 tools, several of them consolidated manage tools, and list endpoints take `first` to size a page (17). Cursor pagination on every v3 list endpoint and filters on session search by tag, playbook, origin, user and time (18). problem+json with `error_code`, field-level errors on 422 and a 400 that lists valid platform names, but no published code list (15). No idempotency key on v3 session creation. `max_acu_limit` caps what a session can spend, and the MCP tool annotations couldn't be read without a key (4). Only `prompt` is required to start a session. No official SDK found, only a Terraform provider (8).); Paseo 70 (Harness reading. A self-hosted daemon that agents can use to create worktrees, launch other agents and talk to them, scriptable from the CLI (70).)