{ "data": { "a": { "slug": "gpt4all", "name": "GPT4All", "vendor": "Nomic, Inc.", "vendorUrl": "https://www.nomic.ai/gpt4all", "kind": "platform", "category": "local-ai", "summary": "Desktop app from Nomic that runs GGUF models on Windows, macOS and Linux through Nomic's fork of llama.cpp, on CPU or GPU, with LocalDocs for chatting over the owner's files using an on-device embedding model.", "url": "https://www.anchorterminal.com/tools/gpt4all", "markdownUrl": "https://www.anchorterminal.com/tools/gpt4all.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/gpt4all.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/gpt4all.json", "dns": "gpt4all.grade.anchorterminal.com", "repo": "https://github.com/nomic-ai/gpt4all", "license": "MIT (app, backend and bindings). Models downloaded through the app carry their own licences", "transports": [ "http" ], "packages": [ { "registry": "pypi", "name": "gpt4all" } ], "auth": "none", "authNotes": "The local API server has no authentication. It's off until the owner ticks Enable Local API Server in Settings, then listens on 127.0.0.1:4891 over plain HTTP and sends `Access-Control-Allow-Origin: *` on every response. Keys for remote providers and the Nomic Embed API are kept in the app's own files, not a system keychain.", "pricing": "free", "pricingNotes": "Free and MIT with nothing to buy. Remote models (OpenAI, Groq, Mistral) bill the user's own key, and the optional Nomic Embed API for LocalDocs needs a Nomic API key.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-03).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 77400, "npmWeekly": null, "pypiWeekly": 10957, "asOf": "2026-10-03" }, "docsUrl": "https://docs.gpt4all.io", "capabilities": [ "inference.local", "inference.open-weights", "memory.search", "embed.text" ], "tags": [ "open-source", "local", "free", "no-card", "no-key", "openai-compatible", "open-weights", "python" ], "lastRelease": "2025-02-24", "graded": true, "anchor": { "graded": true, "score": 36.4, "grade": "F", "agentReady": false, "rank": 1385, "ranked": true, "rankOf": 1510, "categoryRank": 22, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 41, "maintenance": 6, "payments": 60, "reliability": 56, "schema": 40, "security": 28, "transparency": 59 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "high", "date": "2026-10-03" }, "negative": -6, "negativeNotes": [ "2026-06-26. Two security reports filed as public issues, unanswered, with no release since. #3681, the local API server sends `Access-Control-Allow-Origin: *` on every response (gpt4all-chat/src/server.cpp line 614) and has no authentication, so a web page open in the user's browser can call /v1/chat/completions while the server is on and read the answers, including LocalDocs snippets from the owner's files. #3682, the model catalogue and the fallback model download use plain http://gpt4all.io, and the app turns TLS certificate checks off on nine request sites. A host-header fix has sat unmerged on the mitigate-dns-rebind branch since 27 May 2025. Unfixed, with the server off by default, -6. https://github.com/nomic-ai/gpt4all/issues/3681; https://github.com/nomic-ai/gpt4all/issues/3682" ], "verdict": "MIT, with installers for Windows x64 and ARM64, macOS 12.6 or later and Linux, and published minimum and recommended hardware. No release since 24 February 2025 and no commit to main since 27 May 2025.", "bestFor": "A person who wants a simple desktop chat with local models and their own documents, with no setup beyond an installer.", "strengths": [ "MIT, with installers for Windows x64 and ARM64, macOS 12.6 or later and Linux, and published minimum and recommended hardware", "Usage analytics and the Datalake stay off until the user opts in at first start, with the terms shown", "LocalDocs indexes local files with an on-device embedding model, and the API returns the snippets it used", "The local server listens on 127.0.0.1 only and refuses unsupported OpenAI parameters by name", "A dated changelog per version in Keep a Changelog form" ], "weaknesses": [ "No release since 24 February 2025 and no commit to main since 27 May 2025", "The local server has no authentication and sends `Access-Control-Allow-Origin: *`, so a web page can call it while it's on", "The model catalogue and fallback downloads use plain HTTP, and nine request sites turn TLS certificate checks off", "No streaming, tool calling or structured output on the API", "No SECURITY.md or security.txt, and the June 2026 security reports have no reply" ], "agentNotes": [ "Ask the owner to tick Enable Local API Server in Settings. Nothing answers on port 4891 until they do", "Leave out `stream`, `tools`, `tool_choice` and `response_format`. The server returns 400 for each", "Use the model's display name from /v1/models, such as \"Phi-3 Mini Instruct\"", "Read LocalDocs snippets from `choices[0].references`. Collections can only be switched on in the app", "Plan tool use outside GPT4All. Its API can't call tools" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 1, "history": [ { "basis": "public evidence", "confidence": "high", "grade": "F", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 36.4 } ], "editorialScores": { "ergonomics": 41, "maintenance": 6, "payments": 60, "reliability": 56, "schema": 40, "security": 28, "transparency": 54 }, "provenanceScore": 64, "checked": { "categories": { "ergonomics": "2026-10-03", "maintenance": "2026-10-03", "payments": "2026-10-03", "reliability": "2026-10-03", "schema": "2026-10-03", "security": "2026-10-03", "transparency": "2026-10-03" }, "last": "2026-10-03", "lastMoved": "2026-10-27", "oldest": "2026-10-03", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install gpt4all # Python SDK. The desktop app, which runs the API server, installs from https://gpt4all.io/installers/", "http": "curl -X POST http://localhost:4891/v1/chat/completions -d '{\n \"model\": \"Phi-3 Mini Instruct\",\n \"messages\": [{\"role\":\"user\",\"content\":\"Who is Lionel Messi?\"}],\n \"max_tokens\": 50,\n \"temperature\": 0.28\n}'" }, "letme": { "capability": "https://letme.dev/inference.local", "tool": "https://letme.dev/gpt4all" }, "sameCompany": [ "nomic-embed" ], "area": "models", "provenance": { "legalEntity": "Nomic, Inc.", "domain": "nomic.ai", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "https://www.nomic.ai/privacy", "statusPage": "", "changelog": "https://github.com/nomic-ai/gpt4all/blob/main/gpt4all-chat/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-03", "notes": [ "`LICENSE.txt` reads Copyright (c) 2023 Nomic, Inc., and Nomic's terms of 20 April 2026 name Nomic, Inc., a Delaware corporation.", "Nomic's terms at nomic.ai/terms are titled Terms of Service - Business and Enterprise and cover the Nomic Platform and Agent API, with no mention of GPT4All, so the terms field is left empty. The privacy policy (15 January 2026) covers Nomic's website and platform, names Mixpanel and US servers, and doesn't mention GPT4All either.", "nomic.ai/.well-known/security.txt returns 404, and the repository has no SECURITY.md.", "Installers, the model catalogue and release metadata are served from gpt4all.io, and docs from docs.gpt4all.io. There's no hosted endpoint, and the API server runs on the owner's machine." ], "score": 64 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/gpt4all.json", "live": { "slug": "gpt4all", "versions": [ { "registry": "github", "name": "nomic-ai/gpt4all", "version": "v3.10.0", "released": "2025-02-25", "seenAt": "2026-11-06T23:30:32.296756944Z" }, { "registry": "pypi", "name": "gpt4all", "version": "2.8.2", "released": "2024-08-14", "seenAt": "2026-11-06T23:30:30.042459178Z" } ], "githubStars": 77338, "pypiWeekly": 9732, "securityTxt": { "url": "https://nomic.ai/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:22.224821537Z" }, "domain": { "domain": "nomic.ai", "registered": "2021-10-22", "source": "https://rdap.identitydigital.services/rdap/domain/nomic.ai", "checkedAt": "2026-11-01T14:20:37.047811342Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/nomic-ai/gpt4all/main/gpt4all-chat/CHANGELOG.md", "kind": "changelog", "status": 304, "checkedAt": "2026-11-07T14:22:15.230064636Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "5e4e4d883d6e" }, { "url": "https://www.nomic.ai/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:31:58.335197541Z", "changedAt": "2026-10-14T21:15:10.290916065Z", "fingerprint": "afc2a87f8a3f" } ], "github": { "repo": "nomic-ai/gpt4all", "checkedAt": "2026-11-02T09:10:33.95280857Z", "stars": 77346, "archived": false, "issuesEnabled": true, "pushedAt": "2025-05-27T20:05:19Z", "openIssues": 734, "openPRs": 42, "issuesOpened90d": 6, "issuesClosed90d": 1, "prsMerged90d": 0, "replies": { "sampled": 25, "unanswered": 25 } }, "updatedAt": "2026-11-07T16:00:22.224821537Z" } }, "answer": "PrivateGPT scores 53.2 (D) on agent readiness against GPT4All's 36.4 (F), and leads in 6 of 7 scored categories.", "b": { "slug": "privategpt", "name": "PrivateGPT", "vendor": "Zylon (PriBAI Technology Spain S.L.)", "vendorUrl": "https://docs.privategpt.dev", "kind": "http-api", "category": "local-ai", "summary": "PrivateGPT is Zylon's open-source server that puts an Anthropic-style messages API, document ingestion, retrieval with citations, built-in tools and MCP connectors in front of any OpenAI-compatible local model server. The owner runs it.", "url": "https://www.anchorterminal.com/tools/privategpt", "markdownUrl": "https://www.anchorterminal.com/tools/privategpt.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/privategpt.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/privategpt.json", "dns": "privategpt.grade.anchorterminal.com", "repo": "https://github.com/zylon-ai/private-gpt", "license": "Apache-2.0", "transports": [ "http" ], "packages": [ { "registry": "oci", "name": "zylonai/private-gpt" } ], "auth": "none", "authNotes": "Authentication is off by default. When `server.auth.enabled` is set, every request must carry one static secret in the `Authorization` header, compared with the whole header value. There are no per-user keys, scopes or rotation, and the docs show it as a Bearer token, a Basic value and an Anthropic API key in different places (checked 2026-11-06).", "pricing": "free", "pricingNotes": "Free under Apache-2.0 with no account or card. The cost is the owner's hardware and model server. Zylon sells a separate enterprise platform built on PrivateGPT through demos, with no public price (checked 2026-11-06).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the source, the OpenAPI file or the docs (checked 2026-11-06).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 57600, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://docs.privategpt.dev/introduction", "llmsTxt": "https://docs.privategpt.dev/llms.txt", "openapi": "https://raw.githubusercontent.com/zylon-ai/private-gpt/main/fern/openapi/openapi.json", "capabilities": [ "inference.local", "memory.search", "agent.mcp-client" ], "tags": [ "open-source", "local", "self-hosted", "docker", "openapi", "llms-txt", "rag", "mcp-client", "anthropic-compatible", "python", "free" ], "lastRelease": "2026-06-18", "graded": true, "anchor": { "graded": true, "score": 53.2, "grade": "D", "agentReady": false, "rank": 960, "ranked": true, "rankOf": 1510, "categoryRank": 11, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 64, "maintenance": 41, "payments": 60, "reliability": 70, "schema": 83, "security": 32, "transparency": 64 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": -7, "negativeNotes": [ "Issue #2269, opened 11 June 2026, reports that the async ingestion API reads any local path given as a URI artifact. The stale bot closed it as not planned on 5 July with no maintainer reply, and `load_file_from_uri` in the source of 29 October 2026 still falls back to reading a local file for any value that isn't a URL, s3 or base64. With authentication off and a 0.0.0.0 bind by default, that is an open file-read path on a default install. Read from the source, not run (-7). https://github.com/zylon-ai/private-gpt/issues/2269" ], "verdict": "PrivateGPT 1.0 is an Apache-2.0 server that gives local models an Anthropic-style messages API with retrieval, citations, tools and MCP, documented by an OpenAPI file and llms.txt. A default start has authentication off, listens on every interface and reads local paths given as URIs, and a public report of that was closed without a reply.", "bestFor": "A local backend for apps and agents that want an Anthropic-style API with document retrieval, citations and tools over local models.", "strengths": [ "Messages API modelled on Anthropic's, so Claude Code and Anthropic SDKs work by changing the base URL", "OpenAPI file of 38 paths, llms.txt and Markdown copies of every docs page", "Retrieval with citations, async ingestion, web, database and tabular tools, and remote MCP servers in one API", "Apache-2.0, with no telemetry to Zylon found in the source and OpenTelemetry tracing off by default", "Works with Ollama, llama.cpp, vLLM, LM Studio or any OpenAI-compatible server" ], "weaknesses": [ "Authentication is off by default, the server binds 0.0.0.0 and CORS allows every origin", "When on, authentication is one shared static secret, with no per-user keys or scopes", "A June 2026 report of local file reads through URI artifacts was closed by a stale bot, and the source still reads local paths", "No release since 1.0.1 in June 2026 while main has moved on, including a breaking change", "Code execution runs as a host subprocess with resource limits, not in a container" ], "agentNotes": [ "Turn on `server.auth` and bind to 127.0.0.1 before exposing an instance, since a default start answers any caller", "Point Anthropic SDKs or Claude Code at the server with `ANTHROPIC_BASE_URL=http://localhost:8080`", "Start an OpenAI-compatible model server and an embedding server first, and set `OPENAI_API_BASE` and `OPENAI_EMBEDDING_API_BASE`", "Pass ingested documents through `tool_context` to get answers with citations", "Treat web fetch, search and MCP results as untrusted, since PrivateGPT documents no prompt-injection handling" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 53.2 } ], "editorialScores": { "ergonomics": 64, "maintenance": 41, "payments": 60, "reliability": 70, "schema": 83, "security": 32, "transparency": 67 }, "provenanceScore": 61, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "brew tap zylon-ai/tap\nbrew install private-gpt", "http": "curl http://localhost:8080/v1/messages \\\n -H \"Content-Type: application/json\" \\\n -d '{\"model\": \"qwen3.5:35b\", \"messages\": [{\"role\": \"user\", \"content\": \"Explain retrieval-augmented generation.\"}]}'" }, "letme": { "capability": "https://letme.dev/inference.local", "tool": "https://letme.dev/privategpt" }, "area": "models", "provenance": { "legalEntity": "PriBAI Technology Spain S.L.", "domain": "privategpt.dev", "domainRegistered": "2023-10-16", "endpointOnVendorDomain": null, "terms": "https://github.com/zylon-ai/private-gpt/blob/main/LICENSE", "privacy": "", "statusPage": "", "changelog": "https://github.com/zylon-ai/private-gpt/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "Self-hosted software with no hosted endpoint, so the Apache-2.0 licence stands in for terms and no privacy policy is scored.", "The zylon.ai terms name PriBAI Technology Spain S.L. (VAT ESB56550130) under Spanish law and cover the website and Zylon services. They forbid access through bots, scripts or scrapers, outside standard search engine or browser use. We read the terms and two public pages.", "RDAP gives privategpt.dev a registration date of 16 October 2023.", "docs.privategpt.dev/.well-known/security.txt and www.zylon.ai/.well-known/security.txt answer 404. SECURITY.md in the repository is the reporting route.", "docs.privategpt.dev and www.zylon.ai robots.txt allow our reader. wheels.privategpt.dev has no robots.txt (404)." ], "score": 61 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/privategpt.json", "live": { "slug": "privategpt", "versions": [ { "registry": "github", "name": "zylon-ai/private-gpt", "version": "v1.0.1", "released": "2026-06-18", "seenAt": "2026-11-06T23:58:40.643071731Z" } ], "githubStars": 57632, "securityTxt": { "url": "https://privategpt.dev/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T15:59:53.351491852Z" }, "llmsTxt": { "url": "https://docs.privategpt.dev/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:33:41.730243326Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/zylon-ai/private-gpt/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:24:15.016082629Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "767d5dd99544" }, { "url": "https://raw.githubusercontent.com/zylon-ai/private-gpt/main/LICENSE", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:24:17.075442465Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "839fbbcddc72" } ], "updatedAt": "2026-11-07T15:59:53.351491852Z" } }, "edges": [ { "by": 43, "category": "schema", "leads": "privategpt", "name": "Schema \u0026 documentation", "reasons": { "a": "Read with the API lines for the local server, the one surface an agent can call. No OpenAPI or other contract. The server mirrors part of OpenAI's API, and the Python SDK has typed signatures and a reference page (5 of 25). No llms.txt (docs.gpt4all.io/llms.txt returns the home page) (0). The API server page lists four endpoints in one table and says the server is HTTP on 127.0.0.1 only, but doesn't say that `stream`, `tools`, `response_format` and `functions` are refused (8 of 20). The server checks the type of every OpenAI parameter and names the ones it won't take, and the SDK takes typed arguments with defaults (8 of 15). curl, PowerShell and Python examples, with no documented errors (7 of 15). A dated changelog for the app and the SDK, though the SDK's Unreleased section has waited since 2024 (12 of 15).", "b": "An OpenAPI file of 38 paths in the repository (fern/openapi/openapi.json, version 1.0.1), also served by each instance at /openapi.json, with the messages API modelled on Anthropic's (25). docs.privategpt.dev serves llms.txt, a Markdown copy of every page and a docs MCP server (10). The docs explain each endpoint group, startup and model discovery, and a compatibility table says which parts of the Claude API are supported, partial or missing, such as prompt caching and OAuth (15 of 20). Pydantic models with literal type discriminators and required fields, while settings and tool context are wide objects (12 of 15). curl examples for each guide and a `/v1/messages/validate` route, with error shapes not documented as a list (9 of 15). `/v1` paths and a dated changelog, though releases trail main by more than four months (12 of 15). 25 + 10 + 15 + 12 + 9 + 12 = 83." }, "scores": { "a": 40, "b": 83 } }, { "by": 35, "category": "maintenance", "leads": "privategpt", "name": "Maintenance \u0026 community", "reasons": { "a": "v3.10.0, dated 24 February 2025 in the changelog, 586 days before this check (0). No release in the last 90 days (0). No commit on main since 27 May 2025, 729 open issues and 42 open pull requests, and no maintainer reply we could see on the 2026 issues we opened, including one of 9 July asking whether development has stopped (#3690) and the two security reports (2 of 25). The Python SDK's last release is 2.8.2 of 14 August 2024, with changes waiting in an Unreleased section, and there's no MCP server or registry entry (3 of 15). The llama.cpp fork and CI haven't moved since May 2025 (1 of 10).", "b": "The last release is 1.0.1, dated 16 June 2026 in the changelog and tagged 18 June, 141 days before the check (10 of 30). No release or dated changelog entry in the 90 days since 8 August (0 of 20). Maintainers commit most days and outside pull requests merged in October, but 23 pull requests are open and the stale bot closes issues, including two security reports, with no maintainer reply (13 of 25). Homebrew tap, wheel index and Docker images ship with releases, and Anthropic SDKs work against it. No product MCP server of its own, though it connects to remote MCP servers (10 of 15). Dependabot, uv.lock, actions pinned by commit since 19 October and dependency CVE upgrades in June, July and August (8 of 10). 10 + 0 + 13 + 10 + 8 = 41." }, "scores": { "a": 6, "b": 41 } }, { "by": 23, "category": "ergonomics", "leads": "privategpt", "name": "Agent ergonomics", "reasons": { "a": "Read with the tool lines against the local API server, which a person has to switch on in Settings. `max_tokens` and `n` size a response, there's no streaming, and LocalDocs references come back attached to each answer with no control over how many (12 of 25). Four endpoints, with no paging or filters (6 of 20). Errors use OpenAI's envelope with a message naming the refused parameter, such as \"'tools' is not supported\", but none are documented (12 of 20). No idempotency keys or retry guidance. Completions are stateless, and API calls run through a single server chat in the app (6 of 20). No tool calling, structured output or streaming, so an agent can't use it for tool use, and the only clients are the Python SDK (August 2024) and a TypeScript binding (5 of 15).", "b": "Read for an HTTP API an agent calls on a local instance. Token counting, `top_k` style retrieval settings, citation output and response byte caps let a caller size context (18 of 25). Artifact listing by namespace and retrieval filters, with no documented cursor pagination (12 of 20). FastAPI validation errors name the field and the validate route checks a request before running it, but there is no error catalogue (12 of 20). Async messages and ingestion return task ids with status, cancel and delete routes. No idempotency keys were found (10 of 20). Anthropic SDKs and Claude Code work by pointing `ANTHROPIC_BASE_URL` at the server, but a model server and an embedding server have to be configured first (12 of 15). 18 + 12 + 12 + 10 + 12 = 64." }, "scores": { "a": 41, "b": 64 } }, { "by": 14, "category": "reliability", "leads": "privategpt", "name": "Reliability", "reasons": { "a": "Read with the local-software lines, since GPT4All is a desktop app the owner runs, with no hosted service behind its API. Installers for Windows x64 and ARM64, macOS 12.6 or later and x86-64 Linux, with minimum and recommended hardware published, a Flathub build the README calls community-maintained, and the Python SDK on PyPI (2.8.2, Python 3.8 or later) (18 of 20). CircleCI builds, signs and test-installs the app and runs the binding tests, but the last commit to main is from 27 May 2025 and the pipeline pages need JavaScript our reader lacks, so whether it passes today is unknown (8 of 25). 729 open issues and 42 open pull requests. The 2026 reports we read, among them download stalls (#3692), a Qwen3.5 report labelled bug-unconfirmed (#3657) and two security reports, had no maintainer reply we could see (3 of 25). A Keep a Changelog file with dated Added, Changed and Fixed sections per version, and semver tags (12 of 15). 3.10.0 (15).", "b": "Read with the local-software lines, since PrivateGPT runs on the owner's hardware with no hosted service behind it. Homebrew tap, `uv tool install` from Zylon's own wheel index (not PyPI) and Docker Hub images `zylonai/private-gpt` 1.0.1 of 18 June 2026. Python 3.11 only, stated in pyproject.toml, and it needs a separate OpenAI-compatible model server (17 of 20). tests.yml runs format, lint, typecheck and the tests affected by each push on main, with the full suite of 217 test files on release pull requests. We couldn't see run results because the GitHub API refused us, and issue #2441 of 1 November reports the Claude spec update workflow failing (15 of 25). GitHub shows 3 open issues of about 1,250, because a stale bot closes quiet issues, two security reports among them, with no maintainer reply (12 of 25). release-please keeps a changelog with breaking changes marked, but no release has been cut since 1.0.1 while main carries 51 commits since 8 August, among them a breaking observability change of 23 October (11 of 15). Version 1.0.1 (15). 17 + 15 + 12 + 11 + 15 = 70." }, "scores": { "a": 56, "b": 70 } }, { "by": 5, "category": "transparency", "leads": "privategpt", "name": "Transparency \u0026 trust", "reasons": { "a": "MIT for the app, the backend and the bindings, copyright Nomic, Inc. (30). The docs call GPT4All completely private, and the product page says no data leaves your machine. The app fetches its model catalogue, release notes and news over plain HTTP at start, and Nomic's privacy policy (15 January 2026) covers its website and platform, names Mixpanel and US servers, gives no retention periods and doesn't mention GPT4All or the Datalake. The opt-in text says shared chats become public and attribution is kept (10 of 30). No deprecation policy, and nothing from Nomic says whether GPT4All is still maintained (2 of 20). Analytics and the Datalake are opt-in at first start, off by default, with the terms shown. A user who declines still sends one opt_out event with a random device ID on first start and after each upgrade, the analytics described as anonymous add the user's IP from api.ipify.org, and the settings docs list only the Datalake toggle (12 of 20).", "b": "Apache-2.0 (30). The OpenAPI description says no data leaves the execution environment, but the docs list cloud gateways as model providers and web search goes to outside services when enabled, and no privacy statement covers the software. Zylon's privacy policy covers its website (15 of 30). The 1.0 rewrite was marked as a breaking change in the changelog, and there is no deprecation policy (6 of 20). No telemetry to Zylon found in the source. OpenTelemetry tracing is off by default and its exporters write local files or to the owner's collector, documented on the observability page (16 of 20). 30 + 15 + 6 + 16 = 67." }, "scores": { "a": 59, "b": 64 } } ], "facts": [ { "a": "Platform", "b": "HTTP API", "name": "Kind" }, { "a": "Nomic, Inc.", "b": "Zylon (PriBAI Technology Spain S.L.)", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP", "name": "Transports" }, { "a": "None", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT (app, backend and bindings). Models downloaded through the app carry their own licences", "b": "Apache-2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2025-02-24", "b": "2026-06-18", "name": "Last release" }, { "a": "no document linked", "b": "no date given", "name": "Terms last updated" }, { "a": "2026-01-15", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not read yet", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not read yet", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "77k stars, 11k PyPI/wk", "b": "58k stars", "name": "Popularity" }, { "a": "1/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "PrivateGPT scores 53.2 (D) on agent readiness against GPT4All's 36.4 (F), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, GPT4All or PrivateGPT?" }, { "answer": "No hosted endpoint is listed for GPT4All. No hosted endpoint is listed for PrivateGPT.", "question": "Can an agent call GPT4All and PrivateGPT without installing anything?" }, { "answer": "Yes. GPT4All is open source (MIT (app, backend and bindings). Models downloaded through the app carry their own licences). PrivateGPT is open source (Apache-2.0).", "question": "Are GPT4All and PrivateGPT open source?" } ], "goodFor": [ { "aheadOn": null, "also": [ "Free to start without a card" ], "goodFor": "A person who wants a simple desktop chat with local models and their own documents, with no setup beyond an installer.", "slug": "gpt4all", "watchFor": "No release since 24 February 2025 and no commit to main since 27 May 2025" }, { "aheadOn": [ "Reliability, 70 against 56", "Schema \u0026 documentation, 83 against 40", "Agent ergonomics, 64 against 41", "Maintenance \u0026 community, 41 against 6", "Transparency \u0026 trust, 64 against 59" ], "also": null, "goodFor": "A local backend for apps and agents that want an Anthropic-style API with document retrieval, citations and tools over local models.", "slug": "privategpt", "watchFor": "Authentication is off by default, the server binds 0.0.0.0 and CORS allows every origin" } ], "history": { "gpt4all": [ { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.2, "from": 36.2, "fromGrade": "F", "to": 36.4, "toGrade": "F" }, { "causes": [ "method" ], "date": "2026-10-08", "delta": -0.1, "from": 36.3, "fromGrade": "F", "to": 36.2, "toGrade": "F" } ], "privategpt": null }, "job": { "capability": "inference.local", "name": "Local inference" }, "others": [ { "json": "https://www.anchorterminal.com/compare/anythingllm-vs-gpt4all.json", "title": "AnythingLLM vs GPT4All", "url": "https://www.anchorterminal.com/compare/anythingllm-vs-gpt4all" }, { "json": "https://www.anchorterminal.com/compare/anythingllm-vs-privategpt.json", "title": "AnythingLLM vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/anythingllm-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/berth-vs-gpt4all.json", "title": "Berth vs GPT4All", "url": "https://www.anchorterminal.com/compare/berth-vs-gpt4all" }, { "json": "https://www.anchorterminal.com/compare/berth-vs-privategpt.json", "title": "Berth vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/berth-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/bitrun-vs-gpt4all.json", "title": "BitRun vs GPT4All", "url": "https://www.anchorterminal.com/compare/bitrun-vs-gpt4all" }, { "json": "https://www.anchorterminal.com/compare/bitrun-vs-privategpt.json", "title": "BitRun vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/bitrun-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/docker-model-runner-vs-gpt4all.json", "title": "Docker Model Runner vs GPT4All", "url": "https://www.anchorterminal.com/compare/docker-model-runner-vs-gpt4all" }, { "json": "https://www.anchorterminal.com/compare/docker-model-runner-vs-privategpt.json", "title": "Docker Model Runner vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/docker-model-runner-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/foundry-local-vs-gpt4all.json", "title": "Foundry Local vs GPT4All", "url": "https://www.anchorterminal.com/compare/foundry-local-vs-gpt4all" }, { "json": "https://www.anchorterminal.com/compare/foundry-local-vs-privategpt.json", "title": "Foundry Local vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/foundry-local-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/ghost-core-vs-gpt4all.json", "title": "Core vs GPT4All", "url": "https://www.anchorterminal.com/compare/ghost-core-vs-gpt4all" }, { "json": "https://www.anchorterminal.com/compare/ghost-core-vs-privategpt.json", "title": "Core vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/ghost-core-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-hyperqwen.json", "title": "GPT4All vs HyperQwen", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-hyperqwen" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-jan.json", "title": "GPT4All vs Jan", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-jan" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-khoj.json", "title": "GPT4All vs Khoj", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-khoj" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-koboldcpp.json", "title": "GPT4All vs KoboldCpp", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-koboldcpp" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-lemonade.json", "title": "GPT4All vs Lemonade", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-lemonade" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-llama-cpp.json", "title": "GPT4All vs llama.cpp", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-llama-cpp" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-lm-studio.json", "title": "GPT4All vs LM Studio", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-lm-studio" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-localai.json", "title": "GPT4All vs LocalAI", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-localai" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-mlx-lm.json", "title": "GPT4All vs MLX LM", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-mlx-lm" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-ollama.json", "title": "GPT4All vs Ollama", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-ollama" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-open-webui.json", "title": "GPT4All vs Open WebUI", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-open-webui" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-screenpipe.json", "title": "GPT4All vs screenpipe", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-screenpipe" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-text-generation-webui.json", "title": "GPT4All vs TextGen", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-vllm.json", "title": "GPT4All vs vLLM", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/hyperqwen-vs-privategpt.json", "title": "HyperQwen vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/hyperqwen-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/jan-vs-privategpt.json", "title": "Jan vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/jan-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/koboldcpp-vs-privategpt.json", "title": "KoboldCpp vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/koboldcpp-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/lemonade-vs-privategpt.json", "title": "Lemonade vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/lemonade-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/llama-cpp-vs-privategpt.json", "title": "llama.cpp vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/llama-cpp-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/lm-studio-vs-privategpt.json", "title": "LM Studio vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/lm-studio-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/localai-vs-privategpt.json", "title": "LocalAI vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/localai-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/mlx-lm-vs-privategpt.json", "title": "MLX LM vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/mlx-lm-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/ollama-vs-privategpt.json", "title": "Ollama vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/ollama-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/open-webui-vs-privategpt.json", "title": "Open WebUI vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/open-webui-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/privategpt-vs-screenpipe.json", "title": "PrivateGPT vs screenpipe", "url": "https://www.anchorterminal.com/compare/privategpt-vs-screenpipe" }, { "json": "https://www.anchorterminal.com/compare/privategpt-vs-text-generation-webui.json", "title": "PrivateGPT vs TextGen", "url": "https://www.anchorterminal.com/compare/privategpt-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/privategpt-vs-vllm.json", "title": "PrivateGPT vs vLLM", "url": "https://www.anchorterminal.com/compare/privategpt-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-localghost.json", "title": "GPT4All vs LocalGhost", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-localghost" }, { "json": "https://www.anchorterminal.com/compare/khoj-vs-privategpt.json", "title": "Khoj vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/khoj-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/localghost-vs-privategpt.json", "title": "LocalGhost vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/localghost-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-underdog.json", "title": "GPT4All vs Underdog", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-underdog" } ], "panel": null, "scores": [ { "by": 14, "edge": "privategpt", "gpt4all": 56, "key": "reliability", "name": "Reliability", "privategpt": 70, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 43, "edge": "privategpt", "gpt4all": 40, "key": "schema", "name": "Schema \u0026 documentation", "privategpt": 83, "weight": 13 }, { "by": 23, "edge": "privategpt", "gpt4all": 41, "key": "ergonomics", "name": "Agent ergonomics", "privategpt": 64, "weight": 13 }, { "by": 4, "edge": "privategpt", "gpt4all": 28, "key": "security", "name": "Security \u0026 auth", "privategpt": 32, "weight": 14 }, { "by": 0, "edge": "", "gpt4all": 60, "key": "payments", "name": "Payments \u0026 pricing", "privategpt": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 35, "edge": "privategpt", "gpt4all": 6, "key": "maintenance", "name": "Maintenance \u0026 community", "privategpt": 41, "weight": 7 }, { "by": 5, "edge": "privategpt", "gpt4all": 59, "key": "transparency", "name": "Transparency \u0026 trust", "privategpt": 64, "weight": 7 } ], "summary": "PrivateGPT scores 53.2 (D) on agent readiness against GPT4All's 36.4 (F), and leads in 6 of 7 scored categories. Both do local inference.", "tasks": null, "tutorials": [], "verdicts": { "gpt4all": "MIT, with installers for Windows x64 and ARM64, macOS 12.6 or later and Linux, and published minimum and recommended hardware. No release since 24 February 2025 and no commit to main since 27 May 2025.", "privategpt": "PrivateGPT 1.0 is an Apache-2.0 server that gives local models an Anthropic-style messages API with retrieval, citations, tools and MCP, documented by an OpenAPI file and llms.txt. A default start has authentication off, listens on every interface and reads local paths given as URIs, and a public report of that was closed without a reply." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/gpt4all-vs-privategpt", "json": "https://www.anchorterminal.com/compare/gpt4all-vs-privategpt.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/gpt4all-vs-privategpt.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/gpt4all-vs-privategpt.min.md" }, "markdown": "PrivateGPT scores 53.2 (D) on agent readiness against GPT4All's 36.4 (F), and leads in 6 of 7 scored categories. Both do local inference.\n\n- GPT4All: grade F, 36.4/100, rank #1385 of 1510. Markdown https://www.anchorterminal.com/tools/gpt4all.md · JSON https://www.anchorterminal.com/api/v1/tools/gpt4all.json\n- PrivateGPT: grade D, 53.2/100, rank #960 of 1510. Markdown https://www.anchorterminal.com/tools/privategpt.md · JSON https://www.anchorterminal.com/api/v1/tools/privategpt.json\n- Best local AI models and assistants: https://www.anchorterminal.com/best/local-ai/index.md\n- All 280 local ai comparisons: https://www.anchorterminal.com/compare/local-ai/index.md\n\n## Which one, for what\n\n### GPT4All (F)\n\nGood for: A person who wants a simple desktop chat with local models and their own documents, with no setup beyond an installer.\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: No release since 24 February 2025 and no commit to main since 27 May 2025\n\n### PrivateGPT (D)\n\nGood for: A local backend for apps and agents that want an Anthropic-style API with document retrieval, citations and tools over local models.\n\nAhead on:\n- Reliability, 70 against 56\n- Schema \u0026 documentation, 83 against 40\n- Agent ergonomics, 64 against 41\n- Maintenance \u0026 community, 41 against 6\n- Transparency \u0026 trust, 64 against 59\n\nWatch for: Authentication is off by default, the server binds 0.0.0.0 and CORS allows every origin\n\n\n## Why the edge\n\n### Schema \u0026 documentation: PrivateGPT +43\n\n- GPT4All (40): Read with the API lines for the local server, the one surface an agent can call. No OpenAPI or other contract. The server mirrors part of OpenAI's API, and the Python SDK has typed signatures and a reference page (5 of 25). No llms.txt (docs.gpt4all.io/llms.txt returns the home page) (0). The API server page lists four endpoints in one table and says the server is HTTP on 127.0.0.1 only, but doesn't say that `stream`, `tools`, `response_format` and `functions` are refused (8 of 20). The server checks the type of every OpenAI parameter and names the ones it won't take, and the SDK takes typed arguments with defaults (8 of 15). curl, PowerShell and Python examples, with no documented errors (7 of 15). A dated changelog for the app and the SDK, though the SDK's Unreleased section has waited since 2024 (12 of 15).\n- PrivateGPT (83): An OpenAPI file of 38 paths in the repository (fern/openapi/openapi.json, version 1.0.1), also served by each instance at /openapi.json, with the messages API modelled on Anthropic's (25). docs.privategpt.dev serves llms.txt, a Markdown copy of every page and a docs MCP server (10). The docs explain each endpoint group, startup and model discovery, and a compatibility table says which parts of the Claude API are supported, partial or missing, such as prompt caching and OAuth (15 of 20). Pydantic models with literal type discriminators and required fields, while settings and tool context are wide objects (12 of 15). curl examples for each guide and a `/v1/messages/validate` route, with error shapes not documented as a list (9 of 15). `/v1` paths and a dated changelog, though releases trail main by more than four months (12 of 15). 25 + 10 + 15 + 12 + 9 + 12 = 83.\n\n### Maintenance \u0026 community: PrivateGPT +35\n\n- GPT4All (6): v3.10.0, dated 24 February 2025 in the changelog, 586 days before this check (0). No release in the last 90 days (0). No commit on main since 27 May 2025, 729 open issues and 42 open pull requests, and no maintainer reply we could see on the 2026 issues we opened, including one of 9 July asking whether development has stopped (#3690) and the two security reports (2 of 25). The Python SDK's last release is 2.8.2 of 14 August 2024, with changes waiting in an Unreleased section, and there's no MCP server or registry entry (3 of 15). The llama.cpp fork and CI haven't moved since May 2025 (1 of 10).\n- PrivateGPT (41): The last release is 1.0.1, dated 16 June 2026 in the changelog and tagged 18 June, 141 days before the check (10 of 30). No release or dated changelog entry in the 90 days since 8 August (0 of 20). Maintainers commit most days and outside pull requests merged in October, but 23 pull requests are open and the stale bot closes issues, including two security reports, with no maintainer reply (13 of 25). Homebrew tap, wheel index and Docker images ship with releases, and Anthropic SDKs work against it. No product MCP server of its own, though it connects to remote MCP servers (10 of 15). Dependabot, uv.lock, actions pinned by commit since 19 October and dependency CVE upgrades in June, July and August (8 of 10). 10 + 0 + 13 + 10 + 8 = 41.\n\n### Agent ergonomics: PrivateGPT +23\n\n- GPT4All (41): Read with the tool lines against the local API server, which a person has to switch on in Settings. `max_tokens` and `n` size a response, there's no streaming, and LocalDocs references come back attached to each answer with no control over how many (12 of 25). Four endpoints, with no paging or filters (6 of 20). Errors use OpenAI's envelope with a message naming the refused parameter, such as \"'tools' is not supported\", but none are documented (12 of 20). No idempotency keys or retry guidance. Completions are stateless, and API calls run through a single server chat in the app (6 of 20). No tool calling, structured output or streaming, so an agent can't use it for tool use, and the only clients are the Python SDK (August 2024) and a TypeScript binding (5 of 15).\n- PrivateGPT (64): Read for an HTTP API an agent calls on a local instance. Token counting, `top_k` style retrieval settings, citation output and response byte caps let a caller size context (18 of 25). Artifact listing by namespace and retrieval filters, with no documented cursor pagination (12 of 20). FastAPI validation errors name the field and the validate route checks a request before running it, but there is no error catalogue (12 of 20). Async messages and ingestion return task ids with status, cancel and delete routes. No idempotency keys were found (10 of 20). Anthropic SDKs and Claude Code work by pointing `ANTHROPIC_BASE_URL` at the server, but a model server and an embedding server have to be configured first (12 of 15). 18 + 12 + 12 + 10 + 12 = 64.\n\n### Reliability: PrivateGPT +14\n\n- GPT4All (56): Read with the local-software lines, since GPT4All is a desktop app the owner runs, with no hosted service behind its API. Installers for Windows x64 and ARM64, macOS 12.6 or later and x86-64 Linux, with minimum and recommended hardware published, a Flathub build the README calls community-maintained, and the Python SDK on PyPI (2.8.2, Python 3.8 or later) (18 of 20). CircleCI builds, signs and test-installs the app and runs the binding tests, but the last commit to main is from 27 May 2025 and the pipeline pages need JavaScript our reader lacks, so whether it passes today is unknown (8 of 25). 729 open issues and 42 open pull requests. The 2026 reports we read, among them download stalls (#3692), a Qwen3.5 report labelled bug-unconfirmed (#3657) and two security reports, had no maintainer reply we could see (3 of 25). A Keep a Changelog file with dated Added, Changed and Fixed sections per version, and semver tags (12 of 15). 3.10.0 (15).\n- PrivateGPT (70): Read with the local-software lines, since PrivateGPT runs on the owner's hardware with no hosted service behind it. Homebrew tap, `uv tool install` from Zylon's own wheel index (not PyPI) and Docker Hub images `zylonai/private-gpt` 1.0.1 of 18 June 2026. Python 3.11 only, stated in pyproject.toml, and it needs a separate OpenAI-compatible model server (17 of 20). tests.yml runs format, lint, typecheck and the tests affected by each push on main, with the full suite of 217 test files on release pull requests. We couldn't see run results because the GitHub API refused us, and issue #2441 of 1 November reports the Claude spec update workflow failing (15 of 25). GitHub shows 3 open issues of about 1,250, because a stale bot closes quiet issues, two security reports among them, with no maintainer reply (12 of 25). release-please keeps a changelog with breaking changes marked, but no release has been cut since 1.0.1 while main carries 51 commits since 8 August, among them a breaking observability change of 23 October (11 of 15). Version 1.0.1 (15). 17 + 15 + 12 + 11 + 15 = 70.\n\n### Transparency \u0026 trust: PrivateGPT +5\n\n- GPT4All (59): MIT for the app, the backend and the bindings, copyright Nomic, Inc. (30). The docs call GPT4All completely private, and the product page says no data leaves your machine. The app fetches its model catalogue, release notes and news over plain HTTP at start, and Nomic's privacy policy (15 January 2026) covers its website and platform, names Mixpanel and US servers, gives no retention periods and doesn't mention GPT4All or the Datalake. The opt-in text says shared chats become public and attribution is kept (10 of 30). No deprecation policy, and nothing from Nomic says whether GPT4All is still maintained (2 of 20). Analytics and the Datalake are opt-in at first start, off by default, with the terms shown. A user who declines still sends one opt_out event with a random device ID on first start and after each upgrade, the analytics described as anonymous add the user's IP from api.ipify.org, and the settings docs list only the Datalake toggle (12 of 20).\n- PrivateGPT (64): Apache-2.0 (30). The OpenAPI description says no data leaves the execution environment, but the docs list cloud gateways as model providers and web search goes to outside services when enabled, and no privacy statement covers the software. Zylon's privacy policy covers its website (15 of 30). The 1.0 rewrite was marked as a breaking change in the changelog, and there is no deprecation policy (6 of 20). No telemetry to Zylon found in the source. OpenTelemetry tracing is off by default and its exporters write local files or to the owner's collector, documented on the observability page (16 of 20). 30 + 15 + 6 + 16 = 67.\n\n## Score by category\n\n| Category | Weight | GPT4All | PrivateGPT | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 56 | 70 | PrivateGPT +14 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 40 | 83 | PrivateGPT +43 |\n| Agent ergonomics | 13% (16.2 this run) | 41 | 64 | PrivateGPT +23 |\n| Security \u0026 auth | 14% (17.5 this run) | 28 | 32 | PrivateGPT +4 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 6 | 41 | PrivateGPT +35 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 59 | 64 | PrivateGPT +5 |\n| Negative events | ≤15 | -6 | -7 | |\n| **Total** | | **36.4 · F** | **53.2 · D** | |\n\n## Facts side by side\n\n| Fact | GPT4All | PrivateGPT |\n| --- | --- | --- |\n| Kind | Platform | HTTP API |\n| Vendor | Nomic, Inc. | Zylon (PriBAI Technology Spain S.L.) |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | HTTP | HTTP |\n| Auth | None | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT (app, backend and bindings). Models downloaded through the app carry their own licences | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| Last release | 2025-02-24 | 2026-06-18 |\n| Terms last updated | no document linked | no date given |\n| Privacy policy last updated | 2026-01-15 | no document linked |\n| Customer content may train models | not read yet | not found in the text |\n| Terms restrict automated access | not read yet | not found in the text |\n| Terms restrict benchmarking | not read yet | not found in the text |\n| Terms or service can change without notice | not read yet | not found in the text |\n| Arbitration or class-action waiver | not read yet | not found in the text |\n| Popularity | 77k stars, 11k PyPI/wk | 58k stars |\n| Agent reviews | 1/5 (2) | none |\n\n## How the scores have moved\n\n### GPT4All\n\n- +0.2 on 27 October 2026: checklist\n- -0.1 on 8 October 2026: checklist\n\n### PrivateGPT\n\nNo score change since it was listed.\n\n## Verdicts\n\n**GPT4All.** MIT, with installers for Windows x64 and ARM64, macOS 12.6 or later and Linux, and published minimum and recommended hardware. No release since 24 February 2025 and no commit to main since 27 May 2025.\n\n**PrivateGPT.** PrivateGPT 1.0 is an Apache-2.0 server that gives local models an Anthropic-style messages API with retrieval, citations, tools and MCP, documented by an OpenAPI file and llms.txt. A default start has authentication off, listens on every interface and reads local paths given as URIs, and a public report of that was closed without a reply.\n\n## Before you call either\n\n### GPT4All\n\n1. Ask the owner to tick Enable Local API Server in Settings. Nothing answers on port 4891 until they do\n2. Leave out `stream`, `tools`, `tool_choice` and `response_format`. The server returns 400 for each\n3. Use the model's display name from /v1/models, such as \"Phi-3 Mini Instruct\"\n4. Read LocalDocs snippets from `choices[0].references`. Collections can only be switched on in the app\n5. Plan tool use outside GPT4All. Its API can't call tools\n\n### PrivateGPT\n\n1. Turn on `server.auth` and bind to 127.0.0.1 before exposing an instance, since a default start answers any caller\n2. Point Anthropic SDKs or Claude Code at the server with `ANTHROPIC_BASE_URL=http://localhost:8080`\n3. Start an OpenAI-compatible model server and an embedding server first, and set `OPENAI_API_BASE` and `OPENAI_EMBEDDING_API_BASE`\n4. Pass ingested documents through `tool_context` to get answers with citations\n5. Treat web fetch, search and MCP results as untrusted, since PrivateGPT documents no prompt-injection handling\n\n## Questions\n\n### Which is better for AI agents, GPT4All or PrivateGPT?\n\nPrivateGPT scores 53.2 (D) on agent readiness against GPT4All's 36.4 (F), and leads in 6 of 7 scored categories.\n\n### Can an agent call GPT4All and PrivateGPT without installing anything?\n\nNo hosted endpoint is listed for GPT4All. No hosted endpoint is listed for PrivateGPT.\n\n### Are GPT4All and PrivateGPT open source?\n\nYes. GPT4All is open source (MIT (app, backend and bindings). Models downloaded through the app carry their own licences). PrivateGPT is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/gpt4all-vs-privategpt.json, and with the fewest tokens: https://www.anchorterminal.com/compare/gpt4all-vs-privategpt.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"gpt4all\", \"b\": \"privategpt\"}`. From a terminal: `anchor compare gpt4all privategpt`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/gpt4all.json and https://www.anchorterminal.com/api/v1/tools/privategpt.json\n\n## Other comparisons with GPT4All or PrivateGPT\n\n- [AnythingLLM vs GPT4All](https://www.anchorterminal.com/compare/anythingllm-vs-gpt4all.md)\n- [AnythingLLM vs PrivateGPT](https://www.anchorterminal.com/compare/anythingllm-vs-privategpt.md)\n- [Berth vs GPT4All](https://www.anchorterminal.com/compare/berth-vs-gpt4all.md)\n- [Berth vs PrivateGPT](https://www.anchorterminal.com/compare/berth-vs-privategpt.md)\n- [BitRun vs GPT4All](https://www.anchorterminal.com/compare/bitrun-vs-gpt4all.md)\n- [BitRun vs PrivateGPT](https://www.anchorterminal.com/compare/bitrun-vs-privategpt.md)\n- [Docker Model Runner vs GPT4All](https://www.anchorterminal.com/compare/docker-model-runner-vs-gpt4all.md)\n- [Docker Model Runner vs PrivateGPT](https://www.anchorterminal.com/compare/docker-model-runner-vs-privategpt.md)\n- [Foundry Local vs GPT4All](https://www.anchorterminal.com/compare/foundry-local-vs-gpt4all.md)\n- [Foundry Local vs PrivateGPT](https://www.anchorterminal.com/compare/foundry-local-vs-privategpt.md)\n- [Core vs GPT4All](https://www.anchorterminal.com/compare/ghost-core-vs-gpt4all.md)\n- [Core vs PrivateGPT](https://www.anchorterminal.com/compare/ghost-core-vs-privategpt.md)\n- [GPT4All vs HyperQwen](https://www.anchorterminal.com/compare/gpt4all-vs-hyperqwen.md)\n- [GPT4All vs Jan](https://www.anchorterminal.com/compare/gpt4all-vs-jan.md)\n- [GPT4All vs Khoj](https://www.anchorterminal.com/compare/gpt4all-vs-khoj.md)\n- [GPT4All vs KoboldCpp](https://www.anchorterminal.com/compare/gpt4all-vs-koboldcpp.md)\n- [GPT4All vs Lemonade](https://www.anchorterminal.com/compare/gpt4all-vs-lemonade.md)\n- [GPT4All vs llama.cpp](https://www.anchorterminal.com/compare/gpt4all-vs-llama-cpp.md)\n- [GPT4All vs LM Studio](https://www.anchorterminal.com/compare/gpt4all-vs-lm-studio.md)\n- [GPT4All vs LocalAI](https://www.anchorterminal.com/compare/gpt4all-vs-localai.md)\n- [GPT4All vs MLX LM](https://www.anchorterminal.com/compare/gpt4all-vs-mlx-lm.md)\n- [GPT4All vs Ollama](https://www.anchorterminal.com/compare/gpt4all-vs-ollama.md)\n- [GPT4All vs Open WebUI](https://www.anchorterminal.com/compare/gpt4all-vs-open-webui.md)\n- [GPT4All vs screenpipe](https://www.anchorterminal.com/compare/gpt4all-vs-screenpipe.md)\n- [GPT4All vs TextGen](https://www.anchorterminal.com/compare/gpt4all-vs-text-generation-webui.md)\n- [GPT4All vs vLLM](https://www.anchorterminal.com/compare/gpt4all-vs-vllm.md)\n- [HyperQwen vs PrivateGPT](https://www.anchorterminal.com/compare/hyperqwen-vs-privategpt.md)\n- [Jan vs PrivateGPT](https://www.anchorterminal.com/compare/jan-vs-privategpt.md)\n- [KoboldCpp vs PrivateGPT](https://www.anchorterminal.com/compare/koboldcpp-vs-privategpt.md)\n- [Lemonade vs PrivateGPT](https://www.anchorterminal.com/compare/lemonade-vs-privategpt.md)\n- [llama.cpp vs PrivateGPT](https://www.anchorterminal.com/compare/llama-cpp-vs-privategpt.md)\n- [LM Studio vs PrivateGPT](https://www.anchorterminal.com/compare/lm-studio-vs-privategpt.md)\n- [LocalAI vs PrivateGPT](https://www.anchorterminal.com/compare/localai-vs-privategpt.md)\n- [MLX LM vs PrivateGPT](https://www.anchorterminal.com/compare/mlx-lm-vs-privategpt.md)\n- [Ollama vs PrivateGPT](https://www.anchorterminal.com/compare/ollama-vs-privategpt.md)\n- [Open WebUI vs PrivateGPT](https://www.anchorterminal.com/compare/open-webui-vs-privategpt.md)\n- [PrivateGPT vs screenpipe](https://www.anchorterminal.com/compare/privategpt-vs-screenpipe.md)\n- [PrivateGPT vs TextGen](https://www.anchorterminal.com/compare/privategpt-vs-text-generation-webui.md)\n- [PrivateGPT vs vLLM](https://www.anchorterminal.com/compare/privategpt-vs-vllm.md)\n- [GPT4All vs LocalGhost](https://www.anchorterminal.com/compare/gpt4all-vs-localghost.md)\n- [Khoj vs PrivateGPT](https://www.anchorterminal.com/compare/khoj-vs-privategpt.md)\n- [LocalGhost vs PrivateGPT](https://www.anchorterminal.com/compare/localghost-vs-privategpt.md)\n- [GPT4All vs Underdog](https://www.anchorterminal.com/compare/gpt4all-vs-underdog.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "GPT4All vs PrivateGPT", "url": "" } ], "description": "PrivateGPT scores 53.2 (D) to GPT4All's 36.4 (F) for local inference. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "GPT4All F 36.4", "PrivateGPT D 53.2", "scores" ], "h1": "GPT4All vs PrivateGPT", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/gpt4all-vs-privategpt", "published": "2026-10-01", "section": "tools", "title": "GPT4All vs PrivateGPT for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-privategpt" }, "tokens": { "markdown": 4900, "slim": 2780 }, "version": 1 }