Write a review

Head to head · Agent harnesses · October 2026 research run

Devin vs Vibe-Trading

Vibe-Trading scores 62.2 (B) on agent readiness against Devin's 55.7 (C), and leads in 4 of 7 scored categories. Devin leads on schema & documentation and transparency & trust. Both do agent harnesses.

Best agent harnesses and coding agents · All 792 harnesses comparisons

DevinCognition AI, Inc. · Agent harness C55.7/100#752 of 1210 Vibe-TradingHKUDS · Agent harness B62.2/100#502 of 1210

Which one, for what

Devin C

Best for A team that wants to hand whole tasks to a cloud agent and collect pull requests, driven from a pipeline or another agent.

Ahead on

  • Schema & documentation, 80 against 72
  • Transparency & trust, 69 against 47

Also in its favour

  • A hosted endpoint, with nothing to install
  • No incidents deducted, where Vibe-Trading loses 4 points for them

Watch for

www.devinstatus.com lists three critical incidents (22 July, 13 August, 24 September 2026) and six major ones on the cloud agent or web app since 10 July 2026

Vibe-Trading B

Best for A person or a pipeline that wants a ready-made finance research agent over free market data, with backtests, swarm reviews and exports, run on their own machine or used as an MCP server by another agent.

Ahead on

  • Reliability, 63 against 30
  • Agent ergonomics, 67 against 62
  • Payments & pricing, 60 against 20
  • Maintenance & community, 82 against 63

Also in its favour

  • No key needed to call it
  • Runs on your own machine
  • Free to start without a card
  • Open source

Watch for

Three advisories published 2 October 2026 cover 0.1.0 to 0.1.6, two critical, among them unauthenticated API access with an RCE chain

Score by category

CategoryWeight this runDevinVibe-TradingEdge
Reliability16%203063Vibe-Trading +33
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.28072Devin +8
Agent ergonomics13%16.26267Vibe-Trading +5
Security & auth14%17.57270Devin +2
Payments & pricing10%12.52060Vibe-Trading +40
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.86382Vibe-Trading +19
Transparency & trust7%8.86947Devin +22
Negative events≤150-4
TotalC 55.7/100B 62.2/100

Facts side by side

FactDevinVibe-Trading
KindAgent harnessAgent harness
VendorCognition AI, Inc.HKUDS
Hosted endpointhttps://mcp.devin.ai/mcpno (local only)
TransportsHTTPstdio, Streamable HTTP, SSE (legacy)
AuthAPI keyNone
PricingFreemiumFree
x402nono
LicenceProprietary service under Cognition's Platform Terms of ServiceMIT
Tools exposed1382
Read-only variant documentedyesno
llms.txtyesno
Last release2026-10-072026-10-21
Terms last updated2026-06-30no document linked
Privacy policy last updated2026-03-09no document linked
Customer content may train modelsyes, with an opt-out
Terms restrict automated accessnot found in the text
Terms restrict benchmarkingyes
Terms or service can change without noticenot found in the text
Arbitration or class-action waiveryes
Popularitynone37k stars

Verdicts

Devin

The v3 API is well specified, with a public OpenAPI 3.1 file covering 239 operations, problem+json errors, cursor pagination and service-user keys tied to roles. The status page records three critical and several major incidents on the cloud agent between 22 July and 24 September 2026, and no rate limit figures or retry guidance were found in the reviewed documentation.

Vibe-Trading

Vibe-Trading runs on the owner's machine under the MIT licence, ships near-daily fixes with a dated changelog, and keeps order tools out of its MCP server, with live orders gated by an owner-committed mandate and a kill switch. Three advisories, two critical, covered versions before 0.1.7, and the local CLI runs shell commands without asking.

Before you call either

Devin

  1. Use a cog_ service-user key with the Member role. Legacy apk_ keys fail against v3 and the MCP server with 401 or 403
  2. Set max_acu_limit on every session you create. Usage is metered by the work done and has no published unit rate
  3. Session creation is not idempotent in v3. After a timeout, list sessions by tag before creating again
  4. Enterprise keys and personal access tokens must send X-Org-Id to the MCP server. Organisation-scoped keys resolve it automatically
  5. Create scheduled work as an automation. POST to the schedules endpoint returns 403 for migrated organisations since 24 September 2026

Vibe-Trading

  1. Run 0.1.7 or later. Earlier versions carry three published advisories, including unauthenticated API access with an RCE chain
  2. Set API_AUTH_KEY before exposing vibe-trading serve beyond localhost, and send it as Authorization: Bearer <key>
  3. Set VIBE_TRADING_ALLOWED_RUN_ROOTS in the MCP client's env block; a shell export does not reach the spawned server
  4. Use vibe-trading run -p "..." --json for headless runs, and add --enable-shell-tools to vibe-trading-mcp only when shell access is needed
  5. Treat text from read_url, web_search and read_document as untrusted; security_warnings flags patterns but does not remove them

Questions

Which is better for AI agents, Devin or Vibe-Trading?

Vibe-Trading scores 62.2 (B) on agent readiness against Devin's 55.7 (C), and leads in 4 of 7 scored categories. Devin leads on schema & documentation and transparency & trust.

Are Devin and Vibe-Trading open source?

No open-source release is listed for Devin. Vibe-Trading is open source (MIT).

Other comparisons with Devin or Vibe-Trading

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report