Gauge CLI vs Pydantic Logfire

Gauge CLI 60

Local package. Installs from npm as @withgauge/cli with Node 22.13 or later and Docker stated (20). checks.yml runs npm run check on push and pull request across a matrix, and the repository has 76 test files; whether main passes wasn't read (20 of 25). Issues weren't read (5, unchecked). A dated changelog with Added sections per release (15). Version 0.28.0 (0). 20 + 20 + 5 + 15 + 0 = 60.

Pydantic Logfire 34

Graded as a hosted service (Logfire Cloud). No public status page was found on pydantic.dev, in the Logfire docs or in the files published for agents (re-read on 2 November 2026), so the status page and the incident record both score nothing (0 + 0). Query limits are documented per query source, but as Low, Standard and High levels per plan. The numbers found are a daily query API count on the pricing page (500 requests on Personal and Team, 5,000 on Growth), a 10,000-row maximum and the ingest limits (9). A refused query returns 429 with Retry-After, the docs give a retry example, and 105 of 122 public API operations declare the 429. No idempotency keys for writes were found (12). The pricing page lists an SLA for Enterprise plans with no published terms, and the Terms of Service give no warranty of availability (5). The MCP server, query API and public API carry no beta label, though the public API document is version 0.1.0 and the MCP access policy is marked experimental (8). 0 + 0 + 9 + 12 + 5 + 8 = 34.

Gauge CLI 55

Local tool. Agent credentials stay on your machine in local mode; hosted login with a device flow (20 of 30). Test agents run in fresh Docker sessions with injected inputs, and the gateway brokers credentials in hosted mode (12 of 20). Agents under test read your product's docs and outputs, with no prompt-injection guidance (5 of 15). Local transcripts and SQLite evidence per run (10 of 15). No security policy found (8 of 20). 20 + 12 + 5 + 10 + 8 = 55.

Pydantic Logfire 80

OAuth authorisation code with PKCE, S256 required for every client, dynamic client registration, pushed authorisation requests and device code, with 49 scopes in the OpenAPI document (44 on 9 October). API keys carry selected scopes and can be rotated, expired and disabled through the API. No documented option sends a secret in a URL (30). Read-only scopes such as project:read, separate read and write tokens, and an organisation-wide read-only MCP policy that is Enterprise only and experimental. No server-side confirmation step for destructive tools was found (15). The MCP docs state that telemetry can hold user-controlled content and tell agents to treat results as diagnostic data, not instructions. SDK scrubbing is documented (11). The audit log API records logins and changes with user, IP address and a diff, on Enterprise only (9). A valid security.txt, SOC 2 Type II, HIPAA, and an independent penetration test at least every 12 months. No bug bounty found, and OSV lists no advisory for the logfire PyPI package or @pydantic/logfire-node. security.txt expires 17 September 2027 (15). 30 + 15 + 11 + 9 + 15 = 80.

Gauge CLI 53

MIT (30). Local data stays in .gauge/ and telemetry fields are listed; hosted data handling wasn't read (18 of 30). Dated changelog, no deprecation policy (10 of 20). Telemetry on by default, disclosed with an opt-out (20). 30 + 18 + 10 + 20 = 78.

Pydantic Logfire 75

The platform is closed source under clear terms, with MIT SDKs and an open Helm chart (18). The Privacy Statement (22 August 2026), a public Data Processing Addendum with 72-hour incident notice, and retention stated per plan. The documents disagree in places. The terms say Personal data past the allowance is stored but hidden, where the docs say it is dropped once a buffer is used. The data regions page names GCP only, where the sub-processor list names GCP and AWS for hosting. The terms give no warranty that data is deleted promptly after retention ends (20). Twelve operations are marked deprecated in the OpenAPI document and SDK removals are listed in release notes for major versions, but no notice period or removal dates were found, and the terms allow the service to be changed or discontinued with reasonable efforts to notify (9). The sub-processor list gives each vendor's purpose and location with 14 days' notice of changes, and both hosting regions are named (20). 18 + 20 + 9 + 20 = 67.

Gauge CLI 60

CLI reading. No machine-readable contract, -o json on read commands (10 of 25). No llms.txt; instructions bundled in the CLI for agents (5). The README says what it finds and when local or hosted fits (16 of 20). Commands with help text; typed flags (9 of 15). Worked examples, no error reference (8 of 15). Dated changelog and semver tags (12 of 15). 10 + 5 + 16 + 9 + 8 + 12 = 60.

Pydantic Logfire 81

A public OpenAPI 3.1 document of 79 paths and 122 operations (68 and 106 on 9 October), served without a key. The hosted MCP server is closed source and its host's robots.txt disallows the endpoint, so we did not read its tool schemas (22). llms.txt, llms-full.txt and a Markdown twin of every docs page (10). Every operation has a summary and 101 have a description. The MCP discovery card's tool descriptions say when to call a tool, for example token_info only when the user asks about identity (15). 51 enums in the document. Queries are a free SQL string by design and dashboards are Perses JSON (10). The docs carry curl, Python and TypeScript examples, 109 operations declare a 422 and 105 a 429, but the declared error schema is a single detail string and the document has few examples (11). /v1 paths, a dated product changelog and SDK release notes, with the API document itself at version 0.1.0 (13). 22 + 10 + 15 + 10 + 11 + 13 = 81.

Gauge CLI 82

CLI 0.28.0 on 4 November 2026 (30). Six releases in 90 days (20). Issues and pull requests weren't read; a support address and issue tracker are published (12 of 25). Current official package (15). CI on push and pull request (5 of 10, results not read). 30 + 20 + 12 + 15 + 5 = 82.

Pydantic Logfire 90

The Python SDK's newest release is v5.4.0 on 26 October 2026, after v5.3.0 on 23 October, and the product changelog's newest entry is dated 13 October 2026 (30). Since 4 August the product changelog has entries on 4, 5 and 25 August, 9, 15, 16 and 19 September and 7 and 13 October, and the SDK repository has v5.1.0 to v5.4.0 and eight 6.0.0 betas (20). Issue and pull request activity per the 9 October check (208 open, recent pull requests commented, several recent issues not yet answered); GitHub's pages refused our reader on 2 November. Support is by Slack, email and GitHub (17). Current official SDKs, Python 5.4.0 and @pydantic/logfire-node 0.18.27 per the 9 October check. The official MCP registry has no Logfire entry (15). CI, coverage and dependency test workflows and a lock file in the repository. We did not confirm the pass state (8). 30 + 20 + 17 + 15 + 8 = 90.