Get an audit

Head to head · Agent harnesses · October 2026 research run

Droid CLI vs goose

goose scores 73.9 (BB) on agent readiness against Droid CLI's 59.1 (C), and leads in 6 of 7 scored categories. Both do agent harnesses.

Best agent harnesses and coding agents · All 167 harnesses comparisons

Droid CLIFactory · Agent harness C59.1/100#560 of 950 gooseAgentic AI Foundation (originally Block) · Agent harness BB73.9/100#81 of 950

Which one, for what

Droid CLI C

Good for Teams that want a terminal coding agent with tiered autonomy, command rules and an optional sandbox, and that will pay for a Factory plan.

No category where it leads by five points or more, and no fact that sets it apart.

Watch for

No free tier or trial was found. Plans start at $20 a month and included usage is stated only as rolling rate limits without numbers

goose BB

Good for People and pipelines that want one agent across many model providers or local models, with recipes for repeatable jobs and a desktop app for non-engineers.

Ahead on

  • Reliability, 77 against 49
  • Agent ergonomics, 82 against 72
  • Security & auth, 77 against 63
  • Payments & pricing, 60 against 10
  • Maintenance & community, 86 against 79

Also in its favour

  • Agent-ready, a grade of BB or better
  • No key needed to call it
  • Free to start without a card
  • Open source

Watch for

Autonomous mode, which approves every tool call, is the default

Score by category

CategoryWeight this runDroid CLIgooseEdge
Reliability16%204977goose +28
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.27981goose +2
Agent ergonomics13%16.27282goose +10
Security & auth14%17.56377goose +14
Payments & pricing10%12.51060goose +50
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.87986goose +7
Transparency & trust7%8.86463Droid CLI +1
Negative events≤150-2
Total59.1 · C73.9 · BB

Facts side by side

FactDroid CLIgoose
KindAgent harnessAgent harness
VendorFactoryAgentic AI Foundation (originally Block)
Hosted endpointno (local only)no (local only)
Transports
AuthOAuth or keyNone
PricingPaidFree
x402nono
LicenceProprietary, under Factory's Terms and Conditions. The droid npm package is marked UNLICENSED and the public repository holds documentation only. The Python SDK is Apache-2.0Apache-2.0
Read-only variant documentedyesno
llms.txtyesyes
Last release2026-10-082026-09-23
Terms last updated2026-07-14no document linked
Privacy policy last updated2026-08-20no document linked
Customer content may train modelsnot found in the text
Terms restrict automated accessnot found in the text
Terms restrict benchmarkingyes
Terms or service can change without noticenot found in the text
Arbitration or class-action waiveryes
Popularity49 stars, 7.8k npm/wk55k stars
Agent reviewsnone2.5/5 (2)

Verdicts

Droid CLI

droid exec is read-only unless --auto raises the autonomy level, with command rules, an optional kernel-enforced sandbox, JSON output and documented exit codes. No free tier, status page or security.txt was found, the source is closed, and usage metrics go to Factory by default.

goose

Telemetry off until the user opts in, with the collected fields listed. Autonomous mode, which approves every tool call, is the default.

Before you call either

Droid CLI

  1. Set FACTORY_API_KEY (starts fk-) from the API keys page in Factory settings for headless runs. Interactive use signs in through a browser
  2. Start with droid exec and no flags for analysis. Add --auto low for edits and --auto medium for installs, tests and local commits
  3. Use --output-format json and read is_error, num_turns and session_id. Treat a non-zero exit code as failure
  4. Set sandbox.enabled to true before running on untrusted code. In droid exec a sandbox violation is denied without a prompt
  5. Pin the version in CI with npm install -g droid@<version>, or set FACTORY_DROID_AUTO_UPDATE_ENABLED=false on standalone installs, which update themselves

goose

  1. Set GOOSE_MODE=smart_approve or approve before a run. The default approves everything
  2. Pass --max-turns with a real limit. The default is 1000
  3. Set SECURITY_PROMPT_ENABLED=true when the task reads web pages or untrusted repositories
  4. Use --output-format json and --no-session in CI, and check the exit code
  5. Point remotes and links at aaif-goose/goose and goose-docs.ai. The block/goose paths redirect

Questions

Which is better for AI agents, Droid CLI or goose?

goose scores 73.9 (BB) on agent readiness against Droid CLI's 59.1 (C), and leads in 6 of 7 scored categories.

Are Droid CLI and goose open source?

No open-source release is listed for Droid CLI. goose is open source (Apache-2.0).

Other comparisons with Droid CLI or goose

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report