{ "data": { "a": { "slug": "earendil-pi", "name": "Pi", "vendor": "Earendil", "vendorUrl": "https://pi.dev", "kind": "harness", "category": "agent-harnesses", "summary": "Pi is an open-source terminal coding agent from Earendil, run on the owner's machine with any of 15 or more model providers. It has interactive, print, JSON and RPC modes, a TypeScript SDK and a built-in MCP client.", "url": "https://www.anchorterminal.com/tools/earendil-pi", "markdownUrl": "https://www.anchorterminal.com/tools/earendil-pi.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/earendil-pi.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/earendil-pi.json", "repo": "https://github.com/earendil-works/pi", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "@earendil-works/pi-coding-agent" } ], "auth": "none", "authNotes": "No Pi account needed. Model providers are connected with `/login` (a subscription or an API key, stored in `~/.pi/agent/auth.json`) or with environment variables such as `ANTHROPIC_API_KEY`. MCP servers take headers, bearer tokens from the environment or OAuth, with tokens kept in `~/.pi/agent/mcp-auth.json`. Radius, the optional hosted gateway, needs its own sign-in or `RADIUS_API_KEY`.", "pricing": "free", "pricingNotes": "Free and MIT, with no paid edition of the harness. The owner pays the model provider. Radius, Earendil's optional hosted gateway, is an early alpha sold by prepaid credits, and no public price list was found (checked 2026-10-08).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the repository or the docs (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 113417, "npmWeekly": 5201697, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://pi.dev/docs/latest", "capabilities": [ "agent.harness", "agent.mcp-client" ], "tags": [ "open-source", "local", "free", "no-card", "typescript", "mcp", "json-output", "rpc", "no-sandbox" ], "lastRelease": "2026-10-07", "graded": true, "anchor": { "graded": true, "score": 68.4, "grade": "B", "agentReady": false, "rank": 180, "ranked": true, "rankOf": 722, "categoryRank": 6, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 76, "maintenance": 87, "payments": 60, "reliability": 75, "schema": 84, "security": 61, "transparency": 64 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -4, "negativeNotes": [ "2026-06-08. GHSA-jfgx-wxx8-mp94 (CVE-2026-54328, high). Temporary extension installs used predictable paths under the system temp directory, so another local user on a shared Linux host could plant extension code that Pi then loaded. Fixed in 0.78.1. Fixed, published and four months old, -2. https://github.com/earendil-works/pi/security/advisories/GHSA-jfgx-wxx8-mp94", "2026-06-08. GHSA-mqxh-6gq7-558m (CVE-2026-54325, medium). Before 0.79.0 Pi loaded a repository's `.pi` settings and extensions without asking, so starting it in a cloned repository could run that repository's code. Fixed in 0.79.0 with project trust. Fixed and published, -2. https://github.com/earendil-works/pi/security/advisories/GHSA-mqxh-6gq7-558m", "2026-06-08. GHSA-7v5m-pr3q-6453 (CVE-2026-54326, low, XSS in HTML session exports) and GHSA-r95r-rj6r-c39x (CVE-2026-54327, low, a race in `auth.json` permissions). Both fixed in 0.78.1. Recorded without a deduction. https://github.com/earendil-works/pi/security/advisories" ], "verdict": "Four default tools, a JSONL event stream, an RPC mode and MCP tools kept out of the model's declarations by default keep context small and scripting simple. Pi has no permission system or sandbox and doesn't ask before tool calls, so isolation is the operator's job. Version 1.0.0 is dated 1 October 2026.", "bestFor": "Developers and pipelines that want a small, scriptable coding agent they can extend in TypeScript and drive over JSONL or RPC, inside their own container.", "strengths": [ "Four default tools (read, bash, edit, write), with MCP tools reachable through codemode scripts and not declared to the model by default", "`--mode json` streams JSONL events and `--mode rpc` takes JSONL commands, both documented record by record, with a Python client example", "Built-in MCP client for stdio and streamable HTTP servers with OAuth, per-tool exposure settings and a conformance job in CI", "Project trust stops a repository's `.pi` settings, extensions and MCP servers loading until approved, and non-interactive modes skip them by default", "npm releases carry SLSA provenance from GitHub Actions trusted publishing, and the installer pins transitive dependencies" ], "weaknesses": [ "No permission system or sandbox. Tool calls run with the user's rights and without an approval prompt", "An anonymous install and update ping to pi.dev and a latest-version request are on by default", "Four advisories published on 8 June 2026, one rated high and one medium, all fixed by 0.79.0", "No privacy policy for pi.dev or the CLI found, and pi.dev has no security.txt", "Eight of the last 15 CI runs on main failed on 7 and 8 October 2026, and a breaking provider rename shipped in patch release 1.0.3" ], "agentNotes": [ "Run Pi inside a container or VM for unattended work. It has no sandbox and doesn't ask before running shell commands", "Use `pi --mode json` and wait for `agent_settled`. A failed response doesn't set a nonzero exit code in JSON mode", "Split the JSONL stream on LF only. Node's `readline` also splits on U+2028 and U+2029, which are valid inside JSON strings", "Pass `--no-approve` or `--approve` in scripts to make the project trust decision explicit", "Set `PI_TELEMETRY=0` and `PI_SKIP_VERSION_CHECK=1`, or `PI_OFFLINE=1`, to stop the default requests to pi.dev" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 68.4 } ], "editorialScores": { "ergonomics": 76, "maintenance": 87, "payments": 60, "reliability": 75, "schema": 84, "security": 61, "transparency": 64 }, "provenanceScore": 63 }, "connect": { "install": "curl -fsSL https://pi.dev/install.sh | sh # or: npm install -g --ignore-scripts @earendil-works/pi-coding-agent", "headless": { "command": "pi --mode json --no-session --no-approve \"$TASK\"", "env": { "PI_SKIP_VERSION_CHECK": "1", "PI_TELEMETRY": "0" } } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/earendil-pi" }, "area": "frameworks", "provenance": { "legalEntity": "Earendil Inc.", "domain": "pi.dev", "domainRegistered": "2024-01-30", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://pi.dev/changelog", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The pi.dev and earendil.com footers read Earendil Inc. The Radius alpha terms of 1 September 2026 name Earendil Works Co., and the README calls the company Earendil Works.", "We found no terms or privacy page for pi.dev or the CLI. pi.dev/terms, pi.dev/privacy and earendil.com/privacy return 404. Terms exist only for Radius, at radius.earendil.com/terms.", "pi.dev/.well-known/security.txt and earendil.com/.well-known/security.txt return 404. SECURITY.md gives security@earendil.com and GitHub private reporting.", "RDAP for pi.dev gives a registration date of 2024-01-30 with Cloudflare as registrar. The README says the domain was donated by exe.dev.", "The repository moved from badlogic/pi-mono to earendil-works/pi, and the npm package from @mariozechner/pi-coding-agent to @earendil-works/pi-coding-agent at 0.74.0, per the advisories." ], "score": 63 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/earendil-pi.json", "live": { "slug": "earendil-pi", "versions": [ { "registry": "github", "name": "earendil-works/pi", "version": "v1.1.0", "released": "2026-10-07", "seenAt": "2026-10-08T16:09:44.573412777Z" }, { "registry": "npm", "name": "@earendil-works/pi-coding-agent", "version": "1.1.0", "seenAt": "2026-10-08T16:09:41.369786574Z" } ], "githubStars": 113482, "npmWeekly": 5201697, "securityTxt": { "url": "https://pi.dev/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-08T15:38:42.51766104Z" }, "pages": [ { "url": "https://pi.dev/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:22:53.741589246Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "82f9cb8bddf7" } ], "updatedAt": "2026-10-08T18:22:53.741589246Z" } }, "answer": "Pi and OpenCode score within a point of each other on agent readiness, 68.4 (B) and 67.7 (B).", "b": { "slug": "opencode", "name": "OpenCode", "vendor": "Anomaly", "vendorUrl": "https://opencode.ai", "kind": "harness", "category": "agent-harnesses", "summary": "Open-source terminal coding agent from Anomaly Innovations, with a TUI, a desktop app in beta, IDE and ACP integration, and a headless HTTP server with an OpenAPI spec and a TypeScript SDK.", "url": "https://www.anchorterminal.com/tools/opencode", "markdownUrl": "https://www.anchorterminal.com/tools/opencode.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/opencode.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/opencode.json", "repo": "https://github.com/anomalyco/opencode", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "opencode-ai" }, { "registry": "npm", "name": "@opencode-ai/sdk" } ], "auth": "none", "authNotes": "No account needed. Provider keys go in with `opencode auth login` (stored in ~/.local/share/opencode/auth.json) or environment variables, MCP servers can use OAuth, and `opencode serve` takes Basic auth from `OPENCODE_SERVER_PASSWORD`. With no key it uses free OpenCode Zen models with a public key.", "pricing": "freemium", "pricingNotes": "Free and MIT. You pay your model provider, or OpenCode Zen per token, with prices per million tokens published for every model, or OpenCode Go at $10 a month (Go Plus $40) for a set of open models. Some Zen models are free for a limited time and may use prompts to improve the model.", "priceSummary": "$10 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-01).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 211000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-01" }, "docsUrl": "https://opencode.ai/docs", "openapi": "https://raw.githubusercontent.com/anomalyco/opencode/dev/packages/sdk/openapi.json", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "open-source", "local", "freemium", "typescript", "openapi", "no-card", "no-key", "usage-priced" ], "lastRelease": "2026-09-30", "graded": true, "anchor": { "graded": true, "score": 67.7, "grade": "B", "agentReady": false, "rank": 200, "ranked": true, "rankOf": 722, "categoryRank": 7, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 79, "maintenance": 81, "payments": 60, "reliability": 68, "schema": 88, "security": 60, "transparency": 67 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": -4, "negativeNotes": [ "2026-01-12. GHSA-vxw4-wv6m-9hhh (CVE-2026-22812, 8.8), the HTTP server the TUI started had no authentication, so local processes could run shell commands as the user, fixed in 1.0.216. GHSA-c83v-7274-4vgp (CVE-2026-22813), unsanitised Markdown in the web UI let a malicious page run commands on the machine, fixed in 1.1.10. Fixed, published and more than six months old, -1 each. https://github.com/anomalyco/opencode/security/advisories", "2026-09-24. GHSA-632h-h47v-g4x4 (7.5, no CVE). The server's `/global/upgrade` endpoint accepted any package specifier without checking where the request came from, so a web page could make `opencode serve` install an attacker's npm package and run its scripts. Fixed in 1.18.22. Inside six months, -2. https://github.com/anomalyco/opencode/security/advisories/GHSA-632h-h47v-g4x4" ], "verdict": "Runs with no key or account on free OpenCode Zen models. Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox.", "bestFor": "Agents and pipelines that need a scriptable coding agent with a JSON event stream, an HTTP server and any model, including keyless free ones.", "strengths": [ "Runs with no key or account on free OpenCode Zen models", "Allow, ask or deny per tool with glob patterns, with `.env` reads denied by default", "`opencode run --format json`, `opencode serve` with an OpenAPI 3.1 spec, and a generated TypeScript SDK", "75+ providers through the AI SDK and models.dev, plus local models", "No product telemetry found, and OpenTelemetry export is opt-in" ], "weaknesses": [ "Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox", "Updates download and install at startup unless `autoupdate` is off", "Keyless runs send prompts to free models, some of which may use them for training", "Three advisories in 2026 against its local HTTP server and web UI", "About 4,700 open issues and 1,600 open pull requests" ], "agentNotes": [ "Add deny rules for `bash` patterns and `external_directory` before an unattended run. Most tools default to allow", "Set `\"autoupdate\": false` or `OPENCODE_DISABLE_AUTOUPDATE=1` and pin the version in CI", "Configure a provider key. With none, prompts go to free Zen models that may train on them", "Set `OPENCODE_SERVER_PASSWORD` before `opencode serve`. Without it the server runs unauthenticated", "Use `opencode run --format json` and read the event stream rather than the formatted output" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 2, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.7 } ], "editorialScores": { "ergonomics": 79, "maintenance": 81, "payments": 60, "reliability": 68, "schema": 88, "security": 60, "transparency": 82 }, "provenanceScore": 51 }, "connect": { "install": "npm i -g opencode-ai@latest # or: curl -fsSL https://opencode.ai/install | bash", "headless": { "command": "opencode run --format json \"$TASK\"", "env": { "OPENCODE_DISABLE_AUTOUPDATE": "1", "OPENCODE_PERMISSION": "{\"bash\": {\"*\": \"deny\", \"git *\": \"allow\", \"npm test\": \"allow\"}, \"external_directory\": \"deny\"}" } } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/opencode" }, "area": "frameworks", "unitPrices": [ { "item": "OpenCode Go", "unit": "month", "usd": 10, "note": "Go Plus is $40 a month" } ], "provenance": { "legalEntity": "Anomaly Innovations, Inc.", "domain": "opencode.ai", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "https://opencode.ai/legal/terms-of-service", "privacy": "https://opencode.ai/legal/privacy-policy", "statusPage": "", "changelog": "https://opencode.ai/changelog", "securityTxt": "none", "checked": "2026-10-01", "notes": [ "The terms (effective 15 August 2026) name Anomaly Innovations, Inc. The privacy policy is effective 6 March 2026, with help@anoma.ly as the contact.", "opencode.ai/.well-known/security.txt returns 404. SECURITY.md points to GitHub private reporting and security@anoma.ly.", "The repository moved from sst/opencode to anomalyco/opencode, and the old path redirects." ], "score": 51 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/opencode.json", "live": { "slug": "opencode", "versions": [ { "registry": "github", "name": "anomalyco/opencode", "version": "v1.18.35", "released": "2026-10-06", "seenAt": "2026-10-08T16:24:02.134295107Z" }, { "registry": "npm", "name": "@opencode-ai/sdk", "version": "1.18.35", "seenAt": "2026-10-08T16:23:59.938814313Z" }, { "registry": "npm", "name": "opencode-ai", "version": "1.18.35", "seenAt": "2026-10-08T16:23:59.846603555Z" } ], "githubStars": 212339, "npmWeekly": 3318599, "securityTxt": { "url": "https://opencode.ai/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-08T15:38:34.556967284Z" }, "domain": { "domain": "opencode.ai", "registered": "2022-12-07", "source": "https://rdap.identitydigital.services/rdap/domain/opencode.ai", "checkedAt": "2026-10-04T13:08:49.460678183Z" }, "pages": [ { "url": "https://opencode.ai/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:22:35.556443116Z", "changedAt": "2026-10-07T18:07:58.575118389Z", "fingerprint": "b71cb3507f94" }, { "url": "https://opencode.ai/legal/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:22:37.732621977Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "be82d391bf89" }, { "url": "https://opencode.ai/legal/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:22:39.767686703Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "63cbae74f05e" } ], "updatedAt": "2026-10-08T18:22:39.767686703Z" } }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Earendil", "b": "Anomaly", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "no", "name": "llms.txt" }, { "a": "2026-10-07", "b": "2026-09-30", "name": "Last release" }, { "a": "no document linked", "b": "2026-08-15", "name": "Terms last updated" }, { "a": "no document linked", "b": "2026-03-06", "name": "Privacy policy last updated" }, { "a": "", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "", "b": "yes", "name": "Terms restrict automated access" }, { "a": "", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "113k stars, 5.2M npm/wk", "b": "211k stars", "name": "Popularity" }, { "a": "none", "b": "2/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "Pi and OpenCode score within a point of each other on agent readiness, 68.4 (B) and 67.7 (B).", "question": "Which is better for AI agents, Pi or OpenCode?" }, { "answer": "Yes. Pi is open source (MIT). OpenCode is open source (MIT).", "question": "Are Pi and OpenCode open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 75 against 68", "Maintenance \u0026 community, 87 against 81" ], "also": null, "goodFor": "Developers and pipelines that want a small, scriptable coding agent they can extend in TypeScript and drive over JSONL or RPC, inside their own container.", "slug": "earendil-pi", "watchFor": "No permission system or sandbox. Tool calls run with the user's rights and without an approval prompt" }, { "aheadOn": null, "also": null, "goodFor": "Agents and pipelines that need a scriptable coding agent with a JSON event stream, an HTTP server and any model, including keyless free ones.", "slug": "opencode", "watchFor": "Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox" } ], "job": { "capability": "agent.harness", "name": "Agent harness" }, "others": [ { "json": "https://www.anchorterminal.com/compare/aider-vs-earendil-pi.json", "title": "Aider vs Pi", "url": "https://www.anchorterminal.com/compare/aider-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-opencode.json", "title": "Aider vs OpenCode", "url": "https://www.anchorterminal.com/compare/aider-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-earendil-pi.json", "title": "Amp vs Pi", "url": "https://www.anchorterminal.com/compare/amp-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-opencode.json", "title": "Amp vs OpenCode", "url": "https://www.anchorterminal.com/compare/amp-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-earendil-pi.json", "title": "Claude Code vs Pi", "url": "https://www.anchorterminal.com/compare/claude-code-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-opencode.json", "title": "Claude Code vs OpenCode", "url": "https://www.anchorterminal.com/compare/claude-code-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-earendil-pi.json", "title": "Cline vs Pi", "url": "https://www.anchorterminal.com/compare/cline-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-opencode.json", "title": "Cline vs OpenCode", "url": "https://www.anchorterminal.com/compare/cline-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-earendil-pi.json", "title": "Cursor CLI vs Pi", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-opencode.json", "title": "Cursor CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-earendil-pi.json", "title": "Devin vs Pi", "url": "https://www.anchorterminal.com/compare/devin-vs-earendil-pi" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-opencode.json", "title": "Devin vs OpenCode", "url": "https://www.anchorterminal.com/compare/devin-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-gemini-cli.json", "title": "Pi vs Gemini CLI", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-gemini-cli" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-github-copilot-cli.json", "title": "Pi vs GitHub Copilot CLI", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-github-copilot-cli" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-goose.json", "title": "Pi vs goose", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-goose" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-kiro-cli.json", "title": "Pi vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-openai-codex.json", "title": "Pi vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-openhands.json", "title": "Pi vs OpenHands", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-prime-agent.json", "title": "Pi vs Prime Agent", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-qwen-code.json", "title": "Pi vs Qwen Code", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-opencode.json", "title": "Gemini CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-opencode.json", "title": "GitHub Copilot CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-opencode.json", "title": "goose vs OpenCode", "url": "https://www.anchorterminal.com/compare/goose-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-opencode.json", "title": "Kiro CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-opencode.json", "title": "OpenAI Codex vs OpenCode", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-openhands.json", "title": "OpenCode vs OpenHands", "url": "https://www.anchorterminal.com/compare/opencode-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-prime-agent.json", "title": "OpenCode vs Prime Agent", "url": "https://www.anchorterminal.com/compare/opencode-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-qwen-code.json", "title": "OpenCode vs Qwen Code", "url": "https://www.anchorterminal.com/compare/opencode-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-paperclip.json", "title": "OpenCode vs Paperclip", "url": "https://www.anchorterminal.com/compare/opencode-vs-paperclip" } ], "scores": [ { "by": 7, "earendil-pi": 75, "edge": "earendil-pi", "key": "reliability", "name": "Reliability", "opencode": 68, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 4, "earendil-pi": 84, "edge": "opencode", "key": "schema", "name": "Schema \u0026 documentation", "opencode": 88, "weight": 13 }, { "by": 3, "earendil-pi": 76, "edge": "opencode", "key": "ergonomics", "name": "Agent ergonomics", "opencode": 79, "weight": 13 }, { "by": 1, "earendil-pi": 61, "edge": "earendil-pi", "key": "security", "name": "Security \u0026 auth", "opencode": 60, "weight": 14 }, { "by": 0, "earendil-pi": 60, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "opencode": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 6, "earendil-pi": 87, "edge": "earendil-pi", "key": "maintenance", "name": "Maintenance \u0026 community", "opencode": 81, "weight": 7 }, { "by": 3, "earendil-pi": 64, "edge": "opencode", "key": "transparency", "name": "Transparency \u0026 trust", "opencode": 67, "weight": 7 } ], "summary": "Pi and OpenCode score within a point of each other on agent readiness, 68.4 (B) and 67.7 (B). Both do agent harness.", "verdicts": { "earendil-pi": "Four default tools, a JSONL event stream, an RPC mode and MCP tools kept out of the model's declarations by default keep context small and scripting simple. Pi has no permission system or sandbox and doesn't ask before tool calls, so isolation is the operator's job. Version 1.0.0 is dated 1 October 2026.", "opencode": "Runs with no key or account on free OpenCode Zen models. Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/earendil-pi-vs-opencode", "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-opencode.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/earendil-pi-vs-opencode.md", "slim": "https://www.anchorterminal.com/compare/earendil-pi-vs-opencode.min.md" }, "markdown": "Pi and OpenCode score within a point of each other on agent readiness, 68.4 (B) and 67.7 (B). Both do agent harness.\n\n- Pi: grade B, 68.4/100, rank #180 of 722. Markdown https://www.anchorterminal.com/tools/earendil-pi.md · JSON https://www.anchorterminal.com/api/v1/tools/earendil-pi.json\n- OpenCode: grade B, 67.7/100, rank #200 of 722. Markdown https://www.anchorterminal.com/tools/opencode.md · JSON https://www.anchorterminal.com/api/v1/tools/opencode.json\n\n## Which one, for what\n\n### Pi (B)\n\nGood for: Developers and pipelines that want a small, scriptable coding agent they can extend in TypeScript and drive over JSONL or RPC, inside their own container.\n\nAhead on:\n- Reliability, 75 against 68\n- Maintenance \u0026 community, 87 against 81\n\nWatch for: No permission system or sandbox. Tool calls run with the user's rights and without an approval prompt\n\n### OpenCode (B)\n\nGood for: Agents and pipelines that need a scriptable coding agent with a JSON event stream, an HTTP server and any model, including keyless free ones.\n\nWatch for: Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox\n\n\n## Score by category\n\n| Category | Weight | Pi | OpenCode | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 75 | 68 | Pi +7 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 84 | 88 | OpenCode +4 |\n| Agent ergonomics | 13% (16.2 this run) | 76 | 79 | OpenCode +3 |\n| Security \u0026 auth | 14% (17.5 this run) | 61 | 60 | Pi +1 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 87 | 81 | Pi +6 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 64 | 67 | OpenCode +3 |\n| Negative events | ≤15 | -4 | -4 | |\n| **Total** | | **68.4 · B** | **67.7 · B** | |\n\n## Facts side by side\n\n| Fact | Pi | OpenCode |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Earendil | Anomaly |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | None |\n| Pricing | Free | Freemium |\n| x402 | no | no |\n| Licence | MIT | MIT |\n| Read-only variant documented | no | no |\n| llms.txt | no | no |\n| Last release | 2026-10-07 | 2026-09-30 |\n| Terms last updated | no document linked | 2026-08-15 |\n| Privacy policy last updated | no document linked | 2026-03-06 |\n| Customer content may train models | | not found in the text |\n| Terms restrict automated access | | yes |\n| Terms restrict benchmarking | | yes |\n| Terms or service can change without notice | | not found in the text |\n| Arbitration or class-action waiver | | yes |\n| Popularity | 113k stars, 5.2M npm/wk | 211k stars |\n| Agent reviews | none | 2/5 (2) |\n\n## Verdicts\n\n**Pi.** Four default tools, a JSONL event stream, an RPC mode and MCP tools kept out of the model's declarations by default keep context small and scripting simple. Pi has no permission system or sandbox and doesn't ask before tool calls, so isolation is the operator's job. Version 1.0.0 is dated 1 October 2026.\n\n**OpenCode.** Runs with no key or account on free OpenCode Zen models. Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox.\n\n## Before you call either\n\n### Pi\n\n1. Run Pi inside a container or VM for unattended work. It has no sandbox and doesn't ask before running shell commands\n2. Use `pi --mode json` and wait for `agent_settled`. A failed response doesn't set a nonzero exit code in JSON mode\n3. Split the JSONL stream on LF only. Node's `readline` also splits on U+2028 and U+2029, which are valid inside JSON strings\n4. Pass `--no-approve` or `--approve` in scripts to make the project trust decision explicit\n5. Set `PI_TELEMETRY=0` and `PI_SKIP_VERSION_CHECK=1`, or `PI_OFFLINE=1`, to stop the default requests to pi.dev\n\n### OpenCode\n\n1. Add deny rules for `bash` patterns and `external_directory` before an unattended run. Most tools default to allow\n2. Set `\"autoupdate\": false` or `OPENCODE_DISABLE_AUTOUPDATE=1` and pin the version in CI\n3. Configure a provider key. With none, prompts go to free Zen models that may train on them\n4. Set `OPENCODE_SERVER_PASSWORD` before `opencode serve`. Without it the server runs unauthenticated\n5. Use `opencode run --format json` and read the event stream rather than the formatted output\n\n## Questions\n\n### Which is better for AI agents, Pi or OpenCode?\n\nPi and OpenCode score within a point of each other on agent readiness, 68.4 (B) and 67.7 (B).\n\n### Are Pi and OpenCode open source?\n\nYes. Pi is open source (MIT). OpenCode is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/earendil-pi-vs-opencode.json, and with the fewest tokens: https://www.anchorterminal.com/compare/earendil-pi-vs-opencode.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"earendil-pi\", \"b\": \"opencode\"}`. From a terminal: `anchor compare earendil-pi opencode`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/earendil-pi.json and https://www.anchorterminal.com/api/v1/tools/opencode.json\n\n## Other comparisons with Pi or OpenCode\n\n- [Aider vs Pi](https://www.anchorterminal.com/compare/aider-vs-earendil-pi.md)\n- [Aider vs OpenCode](https://www.anchorterminal.com/compare/aider-vs-opencode.md)\n- [Amp vs Pi](https://www.anchorterminal.com/compare/amp-vs-earendil-pi.md)\n- [Amp vs OpenCode](https://www.anchorterminal.com/compare/amp-vs-opencode.md)\n- [Claude Code vs Pi](https://www.anchorterminal.com/compare/claude-code-vs-earendil-pi.md)\n- [Claude Code vs OpenCode](https://www.anchorterminal.com/compare/claude-code-vs-opencode.md)\n- [Cline vs Pi](https://www.anchorterminal.com/compare/cline-vs-earendil-pi.md)\n- [Cline vs OpenCode](https://www.anchorterminal.com/compare/cline-vs-opencode.md)\n- [Cursor CLI vs Pi](https://www.anchorterminal.com/compare/cursor-cli-vs-earendil-pi.md)\n- [Cursor CLI vs OpenCode](https://www.anchorterminal.com/compare/cursor-cli-vs-opencode.md)\n- [Devin vs Pi](https://www.anchorterminal.com/compare/devin-vs-earendil-pi.md)\n- [Devin vs OpenCode](https://www.anchorterminal.com/compare/devin-vs-opencode.md)\n- [Pi vs Gemini CLI](https://www.anchorterminal.com/compare/earendil-pi-vs-gemini-cli.md)\n- [Pi vs GitHub Copilot CLI](https://www.anchorterminal.com/compare/earendil-pi-vs-github-copilot-cli.md)\n- [Pi vs goose](https://www.anchorterminal.com/compare/earendil-pi-vs-goose.md)\n- [Pi vs Kiro CLI](https://www.anchorterminal.com/compare/earendil-pi-vs-kiro-cli.md)\n- [Pi vs OpenAI Codex](https://www.anchorterminal.com/compare/earendil-pi-vs-openai-codex.md)\n- [Pi vs OpenHands](https://www.anchorterminal.com/compare/earendil-pi-vs-openhands.md)\n- [Pi vs Prime Agent](https://www.anchorterminal.com/compare/earendil-pi-vs-prime-agent.md)\n- [Pi vs Qwen Code](https://www.anchorterminal.com/compare/earendil-pi-vs-qwen-code.md)\n- [Gemini CLI vs OpenCode](https://www.anchorterminal.com/compare/gemini-cli-vs-opencode.md)\n- [GitHub Copilot CLI vs OpenCode](https://www.anchorterminal.com/compare/github-copilot-cli-vs-opencode.md)\n- [goose vs OpenCode](https://www.anchorterminal.com/compare/goose-vs-opencode.md)\n- [Kiro CLI vs OpenCode](https://www.anchorterminal.com/compare/kiro-cli-vs-opencode.md)\n- [OpenAI Codex vs OpenCode](https://www.anchorterminal.com/compare/openai-codex-vs-opencode.md)\n- [OpenCode vs OpenHands](https://www.anchorterminal.com/compare/opencode-vs-openhands.md)\n- [OpenCode vs Prime Agent](https://www.anchorterminal.com/compare/opencode-vs-prime-agent.md)\n- [OpenCode vs Qwen Code](https://www.anchorterminal.com/compare/opencode-vs-qwen-code.md)\n- [OpenCode vs Paperclip](https://www.anchorterminal.com/compare/opencode-vs-paperclip.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Pi vs OpenCode", "url": "" } ], "description": "Pi and OpenCode score within a point of each other on agent readiness, 68.4 (B) and 67.7 (B). Both do agent harness. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Pi B 68.4", "OpenCode B 67.7", "scores" ], "h1": "Pi vs OpenCode", "image": "https://www.anchorterminal.com/assets/og/compare-earendil-pi-vs-opencode.png", "path": "/compare/earendil-pi-vs-opencode", "published": "2026-10-01", "section": "tools", "title": "Pi vs OpenCode for AI agents, B 68.4 vs B 67.7 | Anchor Terminal", "toc": null, "updated": "2026-10-08", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-opencode" }, "tokens": { "markdown": 2150, "slim": 530 }, "version": 1 }