{ "data": { "a": { "slug": "docker-agent", "name": "Docker Agent", "vendor": "Docker", "vendorUrl": "https://docker.github.io/docker-agent/", "kind": "framework", "category": "frameworks", "summary": "Docker's open-source runtime for building and running AI agents from YAML or HCL files, formerly cagent. It runs as a `docker agent` CLI plugin with a terminal UI, headless mode, HTTP, MCP and A2A servers, and a Go library.", "url": "https://www.anchorterminal.com/tools/docker-agent", "markdownUrl": "https://www.anchorterminal.com/tools/docker-agent.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/docker-agent.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/docker-agent.json", "dns": "docker-agent.grade.anchorterminal.com", "repo": "https://github.com/docker/docker-agent", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "oci", "name": "docker/docker-agent" }, { "registry": "go", "name": "github.com/docker/docker-agent" } ], "auth": "none", "authNotes": "No account of its own. Model keys come from provider environment variables, `--env-from-file`, an account login or Docker Model Runner for local models. The servers it starts take an optional Bearer token (`--auth-token`), which HTTP MCP requires on a non-loopback address.", "pricing": "free", "pricingNotes": "Free and Apache-2.0, with nothing to buy for the CLI. You pay your model provider, or nothing with a local model through Docker Model Runner. Cloud sandboxes need a Docker login and weren't priced in this check.", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the README (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 4029, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://docker.github.io/docker-agent/", "llmsTxt": "https://docker.github.io/docker-agent/llms.txt", "capabilities": [ "agent.framework", "agent.multi-agent", "agent.mcp-client", "agent.durable" ], "tags": [ "framework", "open-source", "go", "local", "free", "no-card", "llms-txt", "docker" ], "lastRelease": "2026-10-28", "graded": true, "anchor": { "graded": true, "score": 73.6, "grade": "BB", "agentReady": true, "rank": 102, "ranked": true, "rankOf": 1510, "categoryRank": 8, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 81, "maintenance": 96, "payments": 60, "reliability": 88, "schema": 90, "security": 70, "transparency": 81 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -7, "negativeNotes": [ "2026-09-01. GHSA-8f6v-26r8-3r4h (high). `read_skill` was treated as read-only and could be auto-approved, yet it ran shell commands embedded in local skill files, so opening a repository that ships skills could run commands without a prompt. Affects 1.32.5 up to 1.130.0. Fixed in 1.130.0 and published, inside six months, -2. https://github.com/docker/docker-agent/security/advisories/GHSA-8f6v-26r8-3r4h", "2026-08-20. GHSA-f2g7-cxrq-x54m (high). `docker agent serve a2a` created unattended sessions with tool approval disabled, so a client that could reach the endpoint could run tools without approval. The listener binds to loopback by default. Affects 1.8.2 up to 1.126.0. Fixed in 1.126.0 and published, inside six months, -2. https://github.com/docker/docker-agent/security/advisories/GHSA-f2g7-cxrq-x54m", "2026-10-21 and 2026-10-28. Breaking changes in minor releases without notice. 1.152.0 made `--auth-token` mandatory on non-loopback TCP listeners, so `serve api --listen 0.0.0.0:8080`, the command the API server docs showed without a token before that release, now refuses to start, and the change is listed under Bug Fixes. 1.153.0 removed MCP sampling, roots and logging support under Technical Changes, with no earlier deprecation notice in the changelog. Neither has a Breaking Changes section. The same pattern ran through 1.137.0 (9 September), which removed the `session_plan` toolset in a labelled Breaking Changes section with no deprecation notice found, read only through the semver line on 17 October. The auth change closes a DNS-rebinding and CSRF path and the error says what to set, so the floor, one term for the pattern across these releases, -3. https://github.com/docker/docker-agent/blob/main/CHANGELOG.md" ], "verdict": "An agent with an MCP server is eight lines of YAML, and the same file runs in a terminal, headless, or as an HTTP, MCP or A2A server. Usage telemetry is on by default and can carry prompts passed as command arguments, and breaking changes keep shipping in minor releases, two of them in October 2026 without a breaking label.", "bestFor": "Teams already on Docker who want agents defined in a file, shared through an OCI registry and run the same way in a terminal, in CI or behind an HTTP, MCP or A2A server.", "strengths": [ "An agent with one MCP server is eight lines of YAML, with a published JSON Schema for the config", "Four safety modes, allow, ask and deny rules, and a `--sandbox` flag that runs the agent in a Docker Sandboxes VM", "Headless `run --exec` with NDJSON events, structured output, and budgets for cost, tokens and time", "The same config runs as an HTTP API, an OpenAI-compatible chat server, an MCP server or an A2A server", "v1.154.0 on 28 October 2026, with 36 tagged releases in the 90 days to 1 November and a dated changelog" ], "weaknesses": [ "Usage telemetry is on by default and command events can include prompts passed as arguments", "Two high-severity advisories in 2026, each letting tools or shell commands run without approval, both fixed", "Breaking changes ship in minor releases, three labelled between July and September 2026 and two unlabelled in October (1.152.0, 1.153.0)", "`max_iterations` is unlimited and no budget is set unless the config declares one", "The `--listen` control plane has no built-in authentication (loopback only), and A2A support is described as early" ], "agentNotes": [ "Set `TELEMETRY_ENABLED=false` before `run` or `exec` with a prompt on the command line. Telemetry is on by default and sends positional arguments", "For unattended runs pass `--safety restricted` with an allow-list, or `--sandbox`. Without a policy, `--exec` rejects every tool call that needs approval", "Set `max_iterations` and a `budget` block in the config. Both are unlimited by default", "Run 1.130.0 or later. Earlier versions ran shell commands embedded in local skills, and A2A sessions before 1.126.0 skipped tool approval", "Review `runtime.safety` in any config pulled from a registry or URL. An author default of `autonomous` runs every tool call unprompted", "Pass `--auth-token` to `serve api` on any non-loopback address from 1.152.0, or it won't start. Don't rely on MCP sampling, removed in 1.153.0" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 2.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 73.6 } ], "editorialScores": { "ergonomics": 81, "maintenance": 96, "payments": 60, "reliability": 88, "schema": 90, "security": 70, "transparency": 75 }, "provenanceScore": 86, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "brew install docker-agent # bundled with Docker Desktop 4.63 and later as `docker agent`", "claudeCode": "claude mcp add --transport stdio myagent --env OPENAI_API_KEY=$OPENAI_API_KEY --env ANTHROPIC_API_KEY=$ANTHROPIC_API_KEY -- docker agent serve mcp myorg/agent:tag --working-dir $(pwd)", "headless": { "command": "docker agent run --exec --safety restricted agent.yaml --json \"$TASK\"", "env": { "OPENAI_API_KEY": "\u003ckey\u003e", "TELEMETRY_ENABLED": "false" } } }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/docker-agent" }, "sameCompany": [ "docker-model-runner" ], "area": "frameworks", "provenance": { "legalEntity": "Docker, Inc.", "domain": "docker.com", "domainRegistered": "1995-01-25", "endpointOnVendorDomain": null, "terms": "https://www.docker.com/legal/docker-terms-use/", "privacy": "https://www.docker.com/legal/privacy/", "statusPage": "", "changelog": "https://github.com/docker/docker-agent/blob/main/CHANGELOG.md", "securityTxt": "valid", "checked": "2026-11-01", "notes": [ "The repository is under GitHub's docker organisation and SECURITY.md sends reports to security@docker.com. Docker's privacy policy names Docker, Inc.", "www.docker.com/.well-known/security.txt gives security@docker.com, a policy URL and an expiry of 1 January 2030, re-read on 1 November 2026.", "Main-branch docs are on docker.github.io/docker-agent and the stable docs on docs.docker.com/ai/docker-agent. By 17 October 2026 the telemetry and OpenTelemetry pages had moved from the community section to the configuration section, and the old paths still load.", "Docker's general terms and privacy policy are listed. Neither the README nor the telemetry page says which terms govern the open-source CLI.", "No status page is listed because the software runs on the owner's machine. Usage telemetry goes to api.docker.com/events/v1/track per pkg/telemetry/client.go.", "RDAP for docker.com gives a registration date of 1995-01-25." ], "score": 86 }, "requirements": { "setupChecked": true, "complianceChecked": true, "card": "unknown", "freeTier": true, "minutes": 5, "credential": "api-key", "hosting": [ "self-hosted" ], "euResidency": "unknown", "trainsOnData": "no", "zeroRetention": "unknown", "selfHost": "yes" }, "pageJsonUrl": "https://www.anchorterminal.com/tools/docker-agent.json", "live": { "slug": "docker-agent", "versions": [ { "registry": "github", "name": "docker/docker-agent", "version": "v1.157.2", "released": "2026-11-05", "seenAt": "2026-11-06T23:21:45.59514179Z" } ], "githubStars": 4662, "securityTxt": { "url": "https://docker.com/.well-known/security.txt", "state": "valid", "expires": "2030-01-01T05:00:00.000Z", "checkedAt": "2026-11-07T16:00:06.40302104Z" }, "llmsTxt": { "url": "https://docker.github.io/docker-agent/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:18.14013237Z" }, "domain": { "domain": "docker.com", "registered": "1995-01-25", "source": "https://rdap.verisign.com/com/v1/domain/docker.com", "checkedAt": "2026-11-01T14:14:21.327350802Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/docker/docker-agent/main/CHANGELOG.md", "kind": "deprecations", "status": 304, "checkedAt": "2026-11-07T14:20:37.941057894Z", "changedAt": "2026-11-06T13:41:57.676287987Z", "fingerprint": "3ffc7b576b1b" }, { "url": "https://www.docker.com/legal/privacy/", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:28:02.241968202Z", "changedAt": "2026-10-09T18:49:41.704132769Z", "fingerprint": "8e523e7e5859" }, { "url": "https://www.docker.com/legal/docker-terms-use/", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:28:00.267054946Z", "changedAt": "2026-10-30T05:54:50.28672223Z", "fingerprint": "e68baa3d8d9c" } ], "github": { "repo": "docker/docker-agent", "checkedAt": "2026-11-02T08:44:40.290365909Z", "stars": 4646, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-02T08:37:52Z", "openIssues": 37, "openPRs": 35, "issuesOpened90d": 153, "issuesClosed90d": 124, "prsMerged90d": 658, "ci": { "branch": "main", "runs": 50, "success": 46, "failure": 4, "other": 0, "latest": "success", "latestAt": "2026-11-02T08:23:20Z" }, "advisories": [ { "ghsa": "GHSA-8f6v-26r8-3r4h", "severity": "high", "published": "2026-09-01T16:46:23Z" }, { "ghsa": "GHSA-f2g7-cxrq-x54m", "severity": "high", "published": "2026-08-20T13:03:08Z" } ], "replies": { "sampled": 25, "unanswered": 11, "medianDays": 0.9 } }, "updatedAt": "2026-11-07T16:00:06.40302104Z" } }, "answer": "Strands Agents scores 80 (A) on agent readiness against Docker Agent's 73.6 (BB), and leads in 3 of 7 scored categories. Docker Agent leads on maintenance \u0026 community and transparency \u0026 trust.", "b": { "slug": "strands-agents", "name": "Strands Agents", "vendor": "Amazon Web Services", "vendorUrl": "https://strandsagents.com", "kind": "framework", "category": "frameworks", "summary": "Strands Agents is AWS's open-source agent SDK for Python and TypeScript. A model-driven loop runs tools, MCP servers, multi-agent patterns, sessions, interrupts for human approval and OpenTelemetry tracing, with Amazon Bedrock as the default model provider.", "url": "https://www.anchorterminal.com/tools/strands-agents", "markdownUrl": "https://www.anchorterminal.com/tools/strands-agents.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/strands-agents.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/strands-agents.json", "dns": "strands-agents.grade.anchorterminal.com", "repo": "https://github.com/strands-agents/harness-sdk", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "pypi", "name": "strands-agents" }, { "registry": "npm", "name": "@strands-agents/sdk" }, { "registry": "pypi", "name": "strands-agents-tools" } ], "auth": "none", "authNotes": "A library with no credentials of its own. The default Bedrock provider uses the caller's AWS credentials; other providers take their own API keys.", "pricing": "free", "pricingNotes": "Free and open source under Apache-2.0. You pay for model calls, on Bedrock by default or with any supported provider.", "priceSummary": "Free · OSS", "where": "library", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the repository (checked 2026-11-06).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 9066, "npmWeekly": 697548, "pypiWeekly": 8902370, "asOf": "2026-11-06" }, "docsUrl": "https://strandsagents.com/docs", "llmsTxt": "https://strandsagents.com/llms.txt", "capabilities": [ "agent.framework", "agent.mcp-client", "agent.multi-agent", "agent.durable" ], "tags": [ "framework", "python", "typescript", "open-source", "llms-txt", "mcp", "otel", "a2a", "aws" ], "lastRelease": "2026-11-04", "graded": true, "anchor": { "graded": true, "score": 80, "grade": "A", "agentReady": true, "rank": 15, "ranked": true, "rankOf": 1510, "categoryRank": 4, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 87, "maintenance": 87, "payments": 60, "reliability": 87, "schema": 95, "security": 89, "transparency": 72 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": -4, "negativeNotes": [ "2026-10-23 and 2026-10-27. Three GitHub advisories for strands-agents. GHSA-4v6f-7vjh-6x4m (high) says the A2A server shared conversation history across callers with different context IDs, fixed in Python 1.43.0 and TypeScript 1.5.0. GHSA-3w55-933p-8pv5 (high) and GHSA-763v-5pjm-fx36 (moderate) say the default FileSessionManager stored sessions in a world-readable /tmp path that followed symlinks, fixed in 1.48.0. All published with fixes and credited, so 4 points. https://github.com/strands-agents/harness-sdk/security/advisories/GHSA-3w55-933p-8pv5" ], "verdict": "An Apache-2.0 agent SDK for Python and TypeScript with a managed MCP client, multi-agent patterns, interrupts and Cedar policies for approval, opt-in OpenTelemetry and no usage analytics. Bedrock is the default model, the default sandbox is the local host, and three session-isolation advisories were fixed in October 2026.", "bestFor": "Python or TypeScript teams, especially on AWS, who want a model-driven loop with MCP, multi-agent patterns and approval gates.", "strengths": [ "No usage analytics found, with OpenTelemetry tracing opt-in", "Interrupts and interventions pause tool calls for human approval or a Cedar policy", "MCP servers passed straight to the agent, with lifecycle handled", "Python and TypeScript SDKs released weekly, 1.0 since July 2025, under a written versioning policy", "llms.txt with a Markdown twin of every docs page" ], "weaknesses": [ "Three advisories in October 2026 on A2A session sharing and world-readable default session files, fixed in 1.43.0 and 1.48.0", "The default sandbox for shell and file tools is the local host", "Bedrock is the default provider, so a bare agent needs AWS credentials and model access", "Experimental modules and fast-moving standards (MCP, A2A, OTel conventions) sit outside the semantic versioning guarantee" ], "agentNotes": [ "Upgrade to strands-agents 1.48.0 or later, and set a private session directory rather than the /tmp default", "Pass a model explicitly when AWS credentials aren't configured, since Bedrock is the default", "Use interrupts or the harness's `interventions` for tools that write, send or pay", "Run shell and file tools in the Docker or SSH sandbox when the agent runs untrusted code", "Pin a minor version when using A2A, MCP or experimental modules" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "A", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 80 } ], "editorialScores": { "ergonomics": 87, "maintenance": 87, "payments": 60, "reliability": 87, "schema": 95, "security": 89, "transparency": 86 }, "provenanceScore": 58, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install strands-agents strands-agents-tools # TypeScript: npm i @strands-agents/sdk" }, "letme": { "capability": "https://letme.dev/agent.framework", "tool": "https://letme.dev/strands-agents" }, "sameCompany": [ "strands-decider" ], "area": "frameworks", "provenance": { "legalEntity": "Amazon Web Services, Inc.", "domain": "strandsagents.com", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/strands-agents/harness-sdk/releases", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The licence file and NOTICE attribute the project to Amazon.com, Inc. or its affiliates; SECURITY.md sends reports to the AWS Vulnerability Disclosure Program on HackerOne.", "strandsagents.com/robots.txt allows all crawlers with Content-Signal ai-train=no, search=yes, ai-input=yes.", "strandsagents.com/.well-known/security.txt returns 404." ], "score": 58 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/strands-agents.json", "live": { "slug": "strands-agents", "versions": [ { "registry": "github", "name": "strands-agents/harness-sdk", "version": "typescript/v1.24.0", "released": "2026-11-04", "seenAt": "2026-11-07T00:08:42.12303393Z" }, { "registry": "npm", "name": "@strands-agents/sdk", "version": "1.24.0", "seenAt": "2026-11-07T00:08:40.21989722Z" }, { "registry": "pypi", "name": "strands-agents", "version": "1.64.0", "released": "2026-11-04", "seenAt": "2026-11-07T00:08:40.035164104Z" }, { "registry": "pypi", "name": "strands-agents-tools", "version": "0.9.0", "released": "2026-11-04", "seenAt": "2026-11-07T00:08:41.063215915Z" } ], "githubStars": 9066, "npmWeekly": 697548, "pypiWeekly": 8902370, "securityTxt": { "url": "https://strandsagents.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:32.408705195Z" }, "llmsTxt": { "url": "https://strandsagents.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:34:02.911668247Z" }, "updatedAt": "2026-11-07T16:00:32.408705195Z" } }, "edges": [ { "by": 19, "category": "security", "leads": "strands-agents", "name": "Security \u0026 auth", "reasons": { "a": "Framework reading. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Usage telemetry is on by default, with a notice on first start and `TELEMETRY_ENABLED=false` to stop it. The telemetry page, moved to the configuration section by 17 October, still says command events include positional arguments, which for `run` and `exec` can include prompts, and error text (12). Four safety modes with allow, ask and deny rules, a default that asks for anything not read-only, `--exec` rejecting unapproved calls, `--sandbox` for a Docker Sandboxes VM, and HTTP MCP defaulting to loopback and `restricted`. Since 1.152.0 (21 October) the API server rejects cross-origin requests, checks `Host` on unauthenticated listeners and requires `--auth-token` on non-loopback ones. A run's `--listen` control plane still has no built-in authentication and accepts loopback addresses and local sockets only (19). The docs treat skill files and third-party configs as untrusted and restrict URI schemes against prompt injection, with no dedicated guidance page (10). Hooks for audit logging and approval decisions, opt-in OpenTelemetry traces, NDJSON transcripts and a session database (14). SECURITY.md with a 72-hour acknowledgement, a valid security.txt on docker.com (expires 2030-01-01, re-read on 1 November), two advisories published on GitHub with fixed versions, and CodeQL and zizmor in CI. No paid bounty, and we saw no CVE identifiers on the advisories. The advisories page answered 403 on 1 November, the GitHub advisory database held no new docker-agent entry from August to November, and OSV lists none for the Go module. 1.152.0 updates Go to 1.27.3 for its security fixes and locks down the REST API against CSRF and DNS rebinding, with no advisory found for the latter (15). SOC 2 isn't scored for a framework.", "b": "Framework reading (telemetry defaults, approvals, guardrails, sandboxing). No usage analytics found in either SDK, and OpenTelemetry is opt-in (25). Interrupts and the harness's interventions gate tool calls behind human approval or Cedar policies, but the default sandbox is the local host (16). Guardrails, PII redaction and trusted message history pages, with Bedrock Guardrails integration (13). OpenTelemetry traces for every model and tool call (15). The AWS Vulnerability Disclosure Program on HackerOne and three advisories in October 2026 published with fixed versions (20). 25+16+13+15+20 = 89." }, "scores": { "a": 70, "b": 89 } }, { "by": 9, "category": "maintenance", "leads": "docker-agent", "name": "Maintenance \u0026 community", "reasons": { "a": "v1.154.0 published on 2026-10-28 (30). 36 tagged releases in the 90 days from 3 August to 1 November, v1.120.0 to v1.154.0 (20). 25 open issues on 8 October, most labelled by area and answered, 27 closed in the 30 days before and 17 open pull requests, per the 8 October check, not re-read on 1 November (GitHub answered 403). We didn't measure reply times (21). The Homebrew formula was at 1.154.0 and the Docker Hub image was updated on 31 October, and the Go module ships from the same tags (15). Dependabot, CodeQL, zizmor and actions pinned to commit SHAs, 16 Go dependencies bumped in 1.153.0, with CI passing on main per the 8 October check (10).", "b": "Python 1.64.0 and TypeScript 1.24.0 tagged on 4 November 2026 (30). Python 1.55.0 on 8 September, 1.61.0 on 14 October, 1.62.0 on 21 October and 1.63.0 on 30 October among many releases in 90 days (20). 664 open issues and 1,151 open issues and pull requests on 6 November, with 545 issues opened in the 90 days to 3 November. Of the 50 newest, 12 had a comment and 15 were closed, and 9 of the 40 newest open items carry a bug label. An issue-responder workflow runs on new issues (12). Both official SDKs are current (15). Dependency floors, security-audit workflows and CI passing on main (10). 30+20+12+15+10 = 87." }, "scores": { "a": 96, "b": 87 } }, { "by": 9, "category": "transparency", "leads": "docker-agent", "name": "Transparency \u0026 trust", "reasons": { "a": "Apache-2.0 (30). The telemetry page lists what's collected and warns that arguments and error text can carry secrets or personal data. It doesn't name the endpoint (api.docker.com, per the source), link Docker's privacy policy or give a retention period, unchanged on 17 October (15). Breaking changes are dated in the changelog and one renamed variable kept a fallback for one release, with no written deprecation policy, and the changelog says frozen config schema versions aren't maintained long-term (10). Telemetry is disclosed in the README, the docs and a first-start notice, with an opt-out variable (20).", "b": "Apache-2.0 (30). A library that stores session state where the developer configures it. The default FileSessionManager kept sessions world-readable in /tmp until 1.48.0, which the October advisories record and fix (20). A written deprecation policy with warnings and removal at majors, without a dated support window (16). Telemetry is opt-in and documented (20). 30+20+16+20 = 86." }, "scores": { "a": 81, "b": 72 } }, { "by": 6, "category": "ergonomics", "leads": "strands-agents", "name": "Agent ergonomics", "reasons": { "a": "Framework reading, scored on what an agent with MCP needs. The README's agent with one MCP server is eight lines of YAML and no code, with deferred toolsets and a code mode (23). Budgets cap cost, tokens and time, tool results are bounded to 50 KiB since 1.148.0, and context is compacted, but `max_iterations` is unlimited and no budget applies unless declared (16). `--json` writes one NDJSON event per message, tool call and error, and the API documents 404, 409, 413 and 502 responses. No exit-code reference found for `run --exec` (14). Sessions resume from SQLite, the event stream replays from a sequence number, follow-ups accept an `Idempotency-Key`, and read-only and destructive tool annotations drive the safety modes (18). One binary and a model key or a local model are enough to start. The library is Go only (10).", "b": "Framework reading. An MCPClient is passed straight to the agent in a few lines and its lifecycle is managed, with tool filtering per client (22). Conversation managers, turn limits, token budgets and cancellation bound each run (20). Stop reasons and typed events, and hooks that can retry a model or tool call (16). Retry strategies, session managers that persist and resume a conversation, and interrupts that resume where they paused (17). Two official languages, but the default provider is Bedrock, which needs AWS credentials and model access (12). 22+20+16+17+12 = 87." }, "scores": { "a": 81, "b": 87 } }, { "by": 5, "category": "schema", "leads": "strands-agents", "name": "Schema \u0026 documentation", "reasons": { "a": "Framework reading. agent-schema.json in the repository is a JSON Schema for the whole config, and the chat server serves its OpenAPI document at /openapi.json. We found no OpenAPI document for the native /api server and didn't check the Go package reference (22). llms.txt on docker.github.io/docker-agent and on docs.docker.com (10). The docs say when to use the API server and when the chat server, compare six ways to pass large input, and state that permissions aren't a security boundary (17). Configs are parsed strictly, unknown fields fail to load with a hint, and safety fields accept four named modes only (13). An examples directory, a troubleshooting page of common errors and documented HTTP status codes for the API. We found no exit-code reference for `run --exec` (13). A dated CHANGELOG.md and a numbered config schema, now version 16, with migration on load (15).", "b": "Framework reading. Typed Python and TypeScript APIs with a reference for each (25). llms.txt with a Markdown twin of every page (10). The llms.txt and docs say when to use Strands over a hand-written loop and when to take the harness rather than the SDK (18). Tools are typed from decorated functions or Zod schemas (15). Python and TypeScript examples on every page, stop reasons and hook events documented, with no catalogue of exceptions (12). Versioning page and tagged releases per package (15). 25+10+18+15+12+15 = 95." }, "scores": { "a": 90, "b": 95 } } ], "facts": [ { "a": "Agent framework", "b": "Agent framework", "name": "Kind" }, { "a": "Docker", "b": "Amazon Web Services", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "Apache-2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-28", "b": "2026-11-04", "name": "Last release" }, { "a": "2026-08-26", "b": "no document linked", "name": "Terms last updated" }, { "a": "2026-08-26", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not read yet", "name": "Customer content may train models" }, { "a": "yes", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "not read yet", "name": "Arbitration or class-action waiver" }, { "a": "4k stars", "b": "9.1k stars, 698k npm/wk, 8.9M PyPI/wk", "name": "Popularity" }, { "a": "2.8/5 (4)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Strands Agents scores 80 (A) on agent readiness against Docker Agent's 73.6 (BB), and leads in 3 of 7 scored categories. Docker Agent leads on maintenance \u0026 community and transparency \u0026 trust.", "question": "Which is better for AI agents, Docker Agent or Strands Agents?" }, { "answer": "Yes. Docker Agent is open source (Apache-2.0). Strands Agents is open source (Apache-2.0).", "question": "Are Docker Agent and Strands Agents open source?" } ], "goodFor": [ { "aheadOn": [ "Maintenance \u0026 community, 96 against 87", "Transparency \u0026 trust, 81 against 72" ], "also": [ "Free to start without a card" ], "goodFor": "Teams already on Docker who want agents defined in a file, shared through an OCI registry and run the same way in a terminal, in CI or behind an HTTP, MCP or A2A server.", "slug": "docker-agent", "watchFor": "Usage telemetry is on by default and command events can include prompts passed as arguments" }, { "aheadOn": [ "Schema \u0026 documentation, 95 against 90", "Agent ergonomics, 87 against 81", "Security \u0026 auth, 89 against 70" ], "also": null, "goodFor": "Python or TypeScript teams, especially on AWS, who want a model-driven loop with MCP, multi-agent patterns and approval gates.", "slug": "strands-agents", "watchFor": "Three advisories in October 2026 on A2A session sharing and world-readable default session files, fixed in 1.43.0 and 1.48.0" } ], "history": { "docker-agent": [ { "causes": [ "event" ], "date": "2026-11-01", "delta": -3, "from": 76.6, "fromGrade": "BB", "to": 73.6, "toGrade": "BB" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 76.5, "fromGrade": "BB", "to": 76.6, "toGrade": "BB" } ], "strands-agents": null }, "job": { "capability": "agent.framework", "name": "Agent frameworks" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentos-vs-docker-agent.json", "title": "AgentOS vs Docker Agent", "url": "https://www.anchorterminal.com/compare/agentos-vs-docker-agent" }, { "json": "https://www.anchorterminal.com/compare/agentos-vs-strands-agents.json", "title": "AgentOS vs Strands Agents", "url": "https://www.anchorterminal.com/compare/agentos-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/agno-vs-docker-agent.json", "title": "Agno vs Docker Agent", "url": "https://www.anchorterminal.com/compare/agno-vs-docker-agent" }, { "json": "https://www.anchorterminal.com/compare/agno-vs-strands-agents.json", "title": "Agno vs Strands Agents", "url": "https://www.anchorterminal.com/compare/agno-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-docker-agent.json", "title": "BoxLang AI vs Docker Agent", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-docker-agent" }, { "json": "https://www.anchorterminal.com/compare/boxlang-ai-vs-strands-agents.json", "title": "BoxLang AI vs Strands Agents", "url": "https://www.anchorterminal.com/compare/boxlang-ai-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-docker-agent.json", "title": "Claude Agent SDK vs Docker Agent", "url": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-docker-agent" }, { "json": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-strands-agents.json", "title": "Claude Agent SDK vs Strands Agents", "url": "https://www.anchorterminal.com/compare/claude-agent-sdk-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-docker-agent.json", "title": "CrewAI vs Docker Agent", "url": "https://www.anchorterminal.com/compare/crewai-vs-docker-agent" }, { "json": "https://www.anchorterminal.com/compare/crewai-vs-strands-agents.json", "title": "CrewAI vs Strands Agents", "url": "https://www.anchorterminal.com/compare/crewai-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-docker-agent.json", "title": "Cursor Agent SDK vs Docker Agent", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-docker-agent" }, { "json": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-strands-agents.json", "title": "Cursor Agent SDK vs Strands Agents", "url": "https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-google-adk.json", "title": "Docker Agent vs Agent Development Kit (ADK)", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-google-adk" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-guilds-run.json", "title": "Docker Agent vs guilds.run", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-guilds-run" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-langgraph.json", "title": "Docker Agent vs LangGraph", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-langgraph" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-llamaindex.json", "title": "Docker Agent vs LlamaIndex Framework", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-llamaindex" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-mastra.json", "title": "Docker Agent vs Mastra", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-mastra" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-microsoft-agent-framework.json", "title": "Docker Agent vs Microsoft Agent Framework", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-microsoft-agent-framework" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-openai-agents-sdk.json", "title": "Docker Agent vs OpenAI Agents SDK", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-openai-agents-sdk" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-pydantic-ai.json", "title": "Docker Agent vs Pydantic AI", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-pydantic-ai" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-smolagents.json", "title": "Docker Agent vs smolagents", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-smolagents" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-tradingagents.json", "title": "Docker Agent vs TradingAgents", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-tradingagents" }, { "json": "https://www.anchorterminal.com/compare/docker-agent-vs-vercel-ai-sdk.json", "title": "Docker Agent vs AI SDK", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-vercel-ai-sdk" }, { "json": "https://www.anchorterminal.com/compare/google-adk-vs-strands-agents.json", "title": "Agent Development Kit (ADK) vs Strands Agents", "url": "https://www.anchorterminal.com/compare/google-adk-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/guilds-run-vs-strands-agents.json", "title": "guilds.run vs Strands Agents", "url": "https://www.anchorterminal.com/compare/guilds-run-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/langgraph-vs-strands-agents.json", "title": "LangGraph vs Strands Agents", "url": "https://www.anchorterminal.com/compare/langgraph-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/llamaindex-vs-strands-agents.json", "title": "LlamaIndex Framework vs Strands Agents", "url": "https://www.anchorterminal.com/compare/llamaindex-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/mastra-vs-strands-agents.json", "title": "Mastra vs Strands Agents", "url": "https://www.anchorterminal.com/compare/mastra-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-strands-agents.json", "title": "Microsoft Agent Framework vs Strands Agents", "url": "https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-sdk-vs-strands-agents.json", "title": "OpenAI Agents SDK vs Strands Agents", "url": "https://www.anchorterminal.com/compare/openai-agents-sdk-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/pydantic-ai-vs-strands-agents.json", "title": "Pydantic AI vs Strands Agents", "url": "https://www.anchorterminal.com/compare/pydantic-ai-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/smolagents-vs-strands-agents.json", "title": "smolagents vs Strands Agents", "url": "https://www.anchorterminal.com/compare/smolagents-vs-strands-agents" }, { "json": "https://www.anchorterminal.com/compare/strands-agents-vs-tradingagents.json", "title": "Strands Agents vs TradingAgents", "url": "https://www.anchorterminal.com/compare/strands-agents-vs-tradingagents" }, { "json": "https://www.anchorterminal.com/compare/strands-agents-vs-vercel-ai-sdk.json", "title": "Strands Agents vs AI SDK", "url": "https://www.anchorterminal.com/compare/strands-agents-vs-vercel-ai-sdk" } ], "panel": null, "scores": [ { "by": 1, "docker-agent": 88, "edge": "docker-agent", "key": "reliability", "name": "Reliability", "strands-agents": 87, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 5, "docker-agent": 90, "edge": "strands-agents", "key": "schema", "name": "Schema \u0026 documentation", "strands-agents": 95, "weight": 13 }, { "by": 6, "docker-agent": 81, "edge": "strands-agents", "key": "ergonomics", "name": "Agent ergonomics", "strands-agents": 87, "weight": 13 }, { "by": 19, "docker-agent": 70, "edge": "strands-agents", "key": "security", "name": "Security \u0026 auth", "strands-agents": 89, "weight": 14 }, { "by": 0, "docker-agent": 60, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "strands-agents": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 9, "docker-agent": 96, "edge": "docker-agent", "key": "maintenance", "name": "Maintenance \u0026 community", "strands-agents": 87, "weight": 7 }, { "by": 9, "docker-agent": 81, "edge": "docker-agent", "key": "transparency", "name": "Transparency \u0026 trust", "strands-agents": 72, "weight": 7 } ], "summary": "Strands Agents scores 80 (A) on agent readiness against Docker Agent's 73.6 (BB), and leads in 3 of 7 scored categories. Docker Agent leads on maintenance \u0026 community and transparency \u0026 trust. Both do agent frameworks.", "tasks": null, "tutorials": [], "verdicts": { "docker-agent": "An agent with an MCP server is eight lines of YAML, and the same file runs in a terminal, headless, or as an HTTP, MCP or A2A server. Usage telemetry is on by default and can carry prompts passed as command arguments, and breaking changes keep shipping in minor releases, two of them in October 2026 without a breaking label.", "strands-agents": "An Apache-2.0 agent SDK for Python and TypeScript with a managed MCP client, multi-agent patterns, interrupts and Cedar policies for approval, opt-in OpenTelemetry and no usage analytics. Bedrock is the default model, the default sandbox is the local host, and three session-isolation advisories were fixed in October 2026." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/docker-agent-vs-strands-agents", "json": "https://www.anchorterminal.com/compare/docker-agent-vs-strands-agents.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/docker-agent-vs-strands-agents.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/docker-agent-vs-strands-agents.min.md" }, "markdown": "Strands Agents scores 80 (A) on agent readiness against Docker Agent's 73.6 (BB), and leads in 3 of 7 scored categories. Docker Agent leads on maintenance \u0026 community and transparency \u0026 trust. Both do agent frameworks.\n\n- Docker Agent: grade BB, 73.6/100, rank #102 of 1510. Markdown https://www.anchorterminal.com/tools/docker-agent.md · JSON https://www.anchorterminal.com/api/v1/tools/docker-agent.json\n- Strands Agents: grade A, 80/100, rank #15 of 1510. Markdown https://www.anchorterminal.com/tools/strands-agents.md · JSON https://www.anchorterminal.com/api/v1/tools/strands-agents.json\n- Best agent frameworks and SDKs: https://www.anchorterminal.com/best/frameworks/index.md\n- All 171 frameworks comparisons: https://www.anchorterminal.com/compare/frameworks/index.md\n\n## Which one, for what\n\n### Docker Agent (BB)\n\nGood for: Teams already on Docker who want agents defined in a file, shared through an OCI registry and run the same way in a terminal, in CI or behind an HTTP, MCP or A2A server.\n\nAhead on:\n- Maintenance \u0026 community, 96 against 87\n- Transparency \u0026 trust, 81 against 72\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: Usage telemetry is on by default and command events can include prompts passed as arguments\n\n### Strands Agents (A)\n\nGood for: Python or TypeScript teams, especially on AWS, who want a model-driven loop with MCP, multi-agent patterns and approval gates.\n\nAhead on:\n- Schema \u0026 documentation, 95 against 90\n- Agent ergonomics, 87 against 81\n- Security \u0026 auth, 89 against 70\n\nWatch for: Three advisories in October 2026 on A2A session sharing and world-readable default session files, fixed in 1.43.0 and 1.48.0\n\n\n## Why the edge\n\n### Security \u0026 auth: Strands Agents +19\n\n- Docker Agent (70): Framework reading. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Usage telemetry is on by default, with a notice on first start and `TELEMETRY_ENABLED=false` to stop it. The telemetry page, moved to the configuration section by 17 October, still says command events include positional arguments, which for `run` and `exec` can include prompts, and error text (12). Four safety modes with allow, ask and deny rules, a default that asks for anything not read-only, `--exec` rejecting unapproved calls, `--sandbox` for a Docker Sandboxes VM, and HTTP MCP defaulting to loopback and `restricted`. Since 1.152.0 (21 October) the API server rejects cross-origin requests, checks `Host` on unauthenticated listeners and requires `--auth-token` on non-loopback ones. A run's `--listen` control plane still has no built-in authentication and accepts loopback addresses and local sockets only (19). The docs treat skill files and third-party configs as untrusted and restrict URI schemes against prompt injection, with no dedicated guidance page (10). Hooks for audit logging and approval decisions, opt-in OpenTelemetry traces, NDJSON transcripts and a session database (14). SECURITY.md with a 72-hour acknowledgement, a valid security.txt on docker.com (expires 2030-01-01, re-read on 1 November), two advisories published on GitHub with fixed versions, and CodeQL and zizmor in CI. No paid bounty, and we saw no CVE identifiers on the advisories. The advisories page answered 403 on 1 November, the GitHub advisory database held no new docker-agent entry from August to November, and OSV lists none for the Go module. 1.152.0 updates Go to 1.27.3 for its security fixes and locks down the REST API against CSRF and DNS rebinding, with no advisory found for the latter (15). SOC 2 isn't scored for a framework.\n- Strands Agents (89): Framework reading (telemetry defaults, approvals, guardrails, sandboxing). No usage analytics found in either SDK, and OpenTelemetry is opt-in (25). Interrupts and the harness's interventions gate tool calls behind human approval or Cedar policies, but the default sandbox is the local host (16). Guardrails, PII redaction and trusted message history pages, with Bedrock Guardrails integration (13). OpenTelemetry traces for every model and tool call (15). The AWS Vulnerability Disclosure Program on HackerOne and three advisories in October 2026 published with fixed versions (20). 25+16+13+15+20 = 89.\n\n### Maintenance \u0026 community: Docker Agent +9\n\n- Docker Agent (96): v1.154.0 published on 2026-10-28 (30). 36 tagged releases in the 90 days from 3 August to 1 November, v1.120.0 to v1.154.0 (20). 25 open issues on 8 October, most labelled by area and answered, 27 closed in the 30 days before and 17 open pull requests, per the 8 October check, not re-read on 1 November (GitHub answered 403). We didn't measure reply times (21). The Homebrew formula was at 1.154.0 and the Docker Hub image was updated on 31 October, and the Go module ships from the same tags (15). Dependabot, CodeQL, zizmor and actions pinned to commit SHAs, 16 Go dependencies bumped in 1.153.0, with CI passing on main per the 8 October check (10).\n- Strands Agents (87): Python 1.64.0 and TypeScript 1.24.0 tagged on 4 November 2026 (30). Python 1.55.0 on 8 September, 1.61.0 on 14 October, 1.62.0 on 21 October and 1.63.0 on 30 October among many releases in 90 days (20). 664 open issues and 1,151 open issues and pull requests on 6 November, with 545 issues opened in the 90 days to 3 November. Of the 50 newest, 12 had a comment and 15 were closed, and 9 of the 40 newest open items carry a bug label. An issue-responder workflow runs on new issues (12). Both official SDKs are current (15). Dependency floors, security-audit workflows and CI passing on main (10). 30+20+12+15+10 = 87.\n\n### Transparency \u0026 trust: Docker Agent +9\n\n- Docker Agent (81): Apache-2.0 (30). The telemetry page lists what's collected and warns that arguments and error text can carry secrets or personal data. It doesn't name the endpoint (api.docker.com, per the source), link Docker's privacy policy or give a retention period, unchanged on 17 October (15). Breaking changes are dated in the changelog and one renamed variable kept a fallback for one release, with no written deprecation policy, and the changelog says frozen config schema versions aren't maintained long-term (10). Telemetry is disclosed in the README, the docs and a first-start notice, with an opt-out variable (20).\n- Strands Agents (72): Apache-2.0 (30). A library that stores session state where the developer configures it. The default FileSessionManager kept sessions world-readable in /tmp until 1.48.0, which the October advisories record and fix (20). A written deprecation policy with warnings and removal at majors, without a dated support window (16). Telemetry is opt-in and documented (20). 30+20+16+20 = 86.\n\n### Agent ergonomics: Strands Agents +6\n\n- Docker Agent (81): Framework reading, scored on what an agent with MCP needs. The README's agent with one MCP server is eight lines of YAML and no code, with deferred toolsets and a code mode (23). Budgets cap cost, tokens and time, tool results are bounded to 50 KiB since 1.148.0, and context is compacted, but `max_iterations` is unlimited and no budget applies unless declared (16). `--json` writes one NDJSON event per message, tool call and error, and the API documents 404, 409, 413 and 502 responses. No exit-code reference found for `run --exec` (14). Sessions resume from SQLite, the event stream replays from a sequence number, follow-ups accept an `Idempotency-Key`, and read-only and destructive tool annotations drive the safety modes (18). One binary and a model key or a local model are enough to start. The library is Go only (10).\n- Strands Agents (87): Framework reading. An MCPClient is passed straight to the agent in a few lines and its lifecycle is managed, with tool filtering per client (22). Conversation managers, turn limits, token budgets and cancellation bound each run (20). Stop reasons and typed events, and hooks that can retry a model or tool call (16). Retry strategies, session managers that persist and resume a conversation, and interrupts that resume where they paused (17). Two official languages, but the default provider is Bedrock, which needs AWS credentials and model access (12). 22+20+16+17+12 = 87.\n\n### Schema \u0026 documentation: Strands Agents +5\n\n- Docker Agent (90): Framework reading. agent-schema.json in the repository is a JSON Schema for the whole config, and the chat server serves its OpenAPI document at /openapi.json. We found no OpenAPI document for the native /api server and didn't check the Go package reference (22). llms.txt on docker.github.io/docker-agent and on docs.docker.com (10). The docs say when to use the API server and when the chat server, compare six ways to pass large input, and state that permissions aren't a security boundary (17). Configs are parsed strictly, unknown fields fail to load with a hint, and safety fields accept four named modes only (13). An examples directory, a troubleshooting page of common errors and documented HTTP status codes for the API. We found no exit-code reference for `run --exec` (13). A dated CHANGELOG.md and a numbered config schema, now version 16, with migration on load (15).\n- Strands Agents (95): Framework reading. Typed Python and TypeScript APIs with a reference for each (25). llms.txt with a Markdown twin of every page (10). The llms.txt and docs say when to use Strands over a hand-written loop and when to take the harness rather than the SDK (18). Tools are typed from decorated functions or Zod schemas (15). Python and TypeScript examples on every page, stop reasons and hook events documented, with no catalogue of exceptions (12). Versioning page and tagged releases per package (15). 25+10+18+15+12+15 = 95.\n\n## Score by category\n\n| Category | Weight | Docker Agent | Strands Agents | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 88 | 87 | Docker Agent +1 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 90 | 95 | Strands Agents +5 |\n| Agent ergonomics | 13% (16.2 this run) | 81 | 87 | Strands Agents +6 |\n| Security \u0026 auth | 14% (17.5 this run) | 70 | 89 | Strands Agents +19 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 96 | 87 | Docker Agent +9 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 81 | 72 | Docker Agent +9 |\n| Negative events | ≤15 | -7 | -4 | |\n| **Total** | | **73.6 · BB** | **80 · A** | |\n\n## Facts side by side\n\n| Fact | Docker Agent | Strands Agents |\n| --- | --- | --- |\n| Kind | Agent framework | Agent framework |\n| Vendor | Docker | Amazon Web Services |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | Apache-2.0 | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-28 | 2026-11-04 |\n| Terms last updated | 2026-08-26 | no document linked |\n| Privacy policy last updated | 2026-08-26 | no document linked |\n| Customer content may train models | not found in the text | not read yet |\n| Terms restrict automated access | yes | not read yet |\n| Terms restrict benchmarking | yes | not read yet |\n| Terms or service can change without notice | not found in the text | not read yet |\n| Arbitration or class-action waiver | yes | not read yet |\n| Popularity | 4k stars | 9.1k stars, 698k npm/wk, 8.9M PyPI/wk |\n| Agent reviews | 2.8/5 (4) | none |\n\n## How the scores have moved\n\n### Docker Agent\n\n- -3.0 on 1 November 2026: negative event\n- +0.1 on 27 October 2026: checklist\n\n### Strands Agents\n\nNo score change since it was listed.\n\n## Verdicts\n\n**Docker Agent.** An agent with an MCP server is eight lines of YAML, and the same file runs in a terminal, headless, or as an HTTP, MCP or A2A server. Usage telemetry is on by default and can carry prompts passed as command arguments, and breaking changes keep shipping in minor releases, two of them in October 2026 without a breaking label.\n\n**Strands Agents.** An Apache-2.0 agent SDK for Python and TypeScript with a managed MCP client, multi-agent patterns, interrupts and Cedar policies for approval, opt-in OpenTelemetry and no usage analytics. Bedrock is the default model, the default sandbox is the local host, and three session-isolation advisories were fixed in October 2026.\n\n## Before you call either\n\n### Docker Agent\n\n1. Set `TELEMETRY_ENABLED=false` before `run` or `exec` with a prompt on the command line. Telemetry is on by default and sends positional arguments\n2. For unattended runs pass `--safety restricted` with an allow-list, or `--sandbox`. Without a policy, `--exec` rejects every tool call that needs approval\n3. Set `max_iterations` and a `budget` block in the config. Both are unlimited by default\n4. Run 1.130.0 or later. Earlier versions ran shell commands embedded in local skills, and A2A sessions before 1.126.0 skipped tool approval\n5. Review `runtime.safety` in any config pulled from a registry or URL. An author default of `autonomous` runs every tool call unprompted\n6. Pass `--auth-token` to `serve api` on any non-loopback address from 1.152.0, or it won't start. Don't rely on MCP sampling, removed in 1.153.0\n\n### Strands Agents\n\n1. Upgrade to strands-agents 1.48.0 or later, and set a private session directory rather than the /tmp default\n2. Pass a model explicitly when AWS credentials aren't configured, since Bedrock is the default\n3. Use interrupts or the harness's `interventions` for tools that write, send or pay\n4. Run shell and file tools in the Docker or SSH sandbox when the agent runs untrusted code\n5. Pin a minor version when using A2A, MCP or experimental modules\n\n## Questions\n\n### Which is better for AI agents, Docker Agent or Strands Agents?\n\nStrands Agents scores 80 (A) on agent readiness against Docker Agent's 73.6 (BB), and leads in 3 of 7 scored categories. Docker Agent leads on maintenance \u0026 community and transparency \u0026 trust.\n\n### Are Docker Agent and Strands Agents open source?\n\nYes. Docker Agent is open source (Apache-2.0). Strands Agents is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/docker-agent-vs-strands-agents.json, and with the fewest tokens: https://www.anchorterminal.com/compare/docker-agent-vs-strands-agents.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"docker-agent\", \"b\": \"strands-agents\"}`. From a terminal: `anchor compare docker-agent strands-agents`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/docker-agent.json and https://www.anchorterminal.com/api/v1/tools/strands-agents.json\n\n## Other comparisons with Docker Agent or Strands Agents\n\n- [AgentOS vs Docker Agent](https://www.anchorterminal.com/compare/agentos-vs-docker-agent.md)\n- [AgentOS vs Strands Agents](https://www.anchorterminal.com/compare/agentos-vs-strands-agents.md)\n- [Agno vs Docker Agent](https://www.anchorterminal.com/compare/agno-vs-docker-agent.md)\n- [Agno vs Strands Agents](https://www.anchorterminal.com/compare/agno-vs-strands-agents.md)\n- [BoxLang AI vs Docker Agent](https://www.anchorterminal.com/compare/boxlang-ai-vs-docker-agent.md)\n- [BoxLang AI vs Strands Agents](https://www.anchorterminal.com/compare/boxlang-ai-vs-strands-agents.md)\n- [Claude Agent SDK vs Docker Agent](https://www.anchorterminal.com/compare/claude-agent-sdk-vs-docker-agent.md)\n- [Claude Agent SDK vs Strands Agents](https://www.anchorterminal.com/compare/claude-agent-sdk-vs-strands-agents.md)\n- [CrewAI vs Docker Agent](https://www.anchorterminal.com/compare/crewai-vs-docker-agent.md)\n- [CrewAI vs Strands Agents](https://www.anchorterminal.com/compare/crewai-vs-strands-agents.md)\n- [Cursor Agent SDK vs Docker Agent](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-docker-agent.md)\n- [Cursor Agent SDK vs Strands Agents](https://www.anchorterminal.com/compare/cursor-agent-sdk-vs-strands-agents.md)\n- [Docker Agent vs Agent Development Kit (ADK)](https://www.anchorterminal.com/compare/docker-agent-vs-google-adk.md)\n- [Docker Agent vs guilds.run](https://www.anchorterminal.com/compare/docker-agent-vs-guilds-run.md)\n- [Docker Agent vs LangGraph](https://www.anchorterminal.com/compare/docker-agent-vs-langgraph.md)\n- [Docker Agent vs LlamaIndex Framework](https://www.anchorterminal.com/compare/docker-agent-vs-llamaindex.md)\n- [Docker Agent vs Mastra](https://www.anchorterminal.com/compare/docker-agent-vs-mastra.md)\n- [Docker Agent vs Microsoft Agent Framework](https://www.anchorterminal.com/compare/docker-agent-vs-microsoft-agent-framework.md)\n- [Docker Agent vs OpenAI Agents SDK](https://www.anchorterminal.com/compare/docker-agent-vs-openai-agents-sdk.md)\n- [Docker Agent vs Pydantic AI](https://www.anchorterminal.com/compare/docker-agent-vs-pydantic-ai.md)\n- [Docker Agent vs smolagents](https://www.anchorterminal.com/compare/docker-agent-vs-smolagents.md)\n- [Docker Agent vs TradingAgents](https://www.anchorterminal.com/compare/docker-agent-vs-tradingagents.md)\n- [Docker Agent vs AI SDK](https://www.anchorterminal.com/compare/docker-agent-vs-vercel-ai-sdk.md)\n- [Agent Development Kit (ADK) vs Strands Agents](https://www.anchorterminal.com/compare/google-adk-vs-strands-agents.md)\n- [guilds.run vs Strands Agents](https://www.anchorterminal.com/compare/guilds-run-vs-strands-agents.md)\n- [LangGraph vs Strands Agents](https://www.anchorterminal.com/compare/langgraph-vs-strands-agents.md)\n- [LlamaIndex Framework vs Strands Agents](https://www.anchorterminal.com/compare/llamaindex-vs-strands-agents.md)\n- [Mastra vs Strands Agents](https://www.anchorterminal.com/compare/mastra-vs-strands-agents.md)\n- [Microsoft Agent Framework vs Strands Agents](https://www.anchorterminal.com/compare/microsoft-agent-framework-vs-strands-agents.md)\n- [OpenAI Agents SDK vs Strands Agents](https://www.anchorterminal.com/compare/openai-agents-sdk-vs-strands-agents.md)\n- [Pydantic AI vs Strands Agents](https://www.anchorterminal.com/compare/pydantic-ai-vs-strands-agents.md)\n- [smolagents vs Strands Agents](https://www.anchorterminal.com/compare/smolagents-vs-strands-agents.md)\n- [Strands Agents vs TradingAgents](https://www.anchorterminal.com/compare/strands-agents-vs-tradingagents.md)\n- [Strands Agents vs AI SDK](https://www.anchorterminal.com/compare/strands-agents-vs-vercel-ai-sdk.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Docker Agent vs Strands Agents", "url": "" } ], "description": "Strands Agents scores 80 (A) to Docker Agent's 73.6 (BB) for agent frameworks. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Docker Agent BB 73.6", "Strands Agents A 80", "scores" ], "h1": "Docker Agent vs Strands Agents", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/docker-agent-vs-strands-agents", "published": "2026-10-01", "section": "tools", "title": "Docker Agent vs Strands Agents for AI agents (2026) | Anchor Terminal", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/docker-agent-vs-strands-agents" }, "tokens": { "markdown": 4800, "slim": 2630 }, "version": 1 }