{ "data": { "a": { "slug": "harnessrouter", "name": "HarnessRouter", "vendor": "HarnessRouter (Lumentree Corporation)", "vendorUrl": "https://harnessrouter.ai", "kind": "harness", "category": "agent-harnesses", "summary": "HarnessRouter runs complete agent harnesses such as Codex, Claude Code and Hermes behind one HTTP API, the Unified Harness Protocol, with sessions, streaming, files and artifacts. It comes as a hosted cloud or a self-hosted Community Edition.", "url": "https://www.anchorterminal.com/tools/harnessrouter", "markdownUrl": "https://www.anchorterminal.com/tools/harnessrouter.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/harnessrouter.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/harnessrouter.json", "repo": "https://github.com/HarnessRouter/harnessrouter", "license": "Apache-2.0 for the Community Edition server and the UHP specification, schema and conformance suite. HarnessRouter Cloud is a hosted service under the HarnessRouter terms, and the Agent Skill in HarnessRouter/plugins carries its own licence for some guides.", "transports": [ "http" ], "remoteUrl": "https://api.harnessrouter.ai", "packages": [ { "registry": "oci", "name": "harnessrouter/harnessrouter" } ], "auth": "api-key", "authNotes": "A Workspace API key (sk-hr-) as a Bearer token from the product's server, never from a browser (https://harnessrouter.ai/docs/authentication). Keys are created in the console after a browser sign-up, can be held to one workspace or reach the whole organisation, and are revoked at once by DELETE /v1/orgs/{org}/keys/{id}. No OAuth or per-endpoint scopes found. The self-hosted Community Edition signs into its console with a username and password and needs no HarnessRouter key.", "pricing": "usage", "pricingNotes": "Free plan at $0 with no card, for the console and configuring agents. Running tasks draws on top-up credit ($10 minimum, 5.5 per cent fee) or a plan, Developer $20, Production $200 or Scale $1,000 a month, each fully included as usage. Agent work is $0.020 an active minute on top-ups and $0.014 to $0.006 on plans, and model calls are at the provider's price or on your own keys (https://harnessrouter.ai/pricing.md, checked 2026-10-17). Self-serve payment is card-only.", "priceSummary": "$20 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in llms.txt, llms-full.txt, the pricing page or the UHP schema (checked 2026-10-17). Payment is by card for top-ups and plans.", "endpoints": [] }, "toolCount": 0, "popularity": { "githubStars": 3075, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://harnessrouter.ai/docs", "llmsTxt": "https://harnessrouter.ai/llms.txt", "openapi": "https://github.com/HarnessRouter/harnessrouter/blob/main/protocol/schema/uhp-2026-10-04.openapi.yaml", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "hosted", "self-hosted", "open-source", "apache-2.0", "api-key", "usage", "openapi", "llms-txt", "docker", "python", "streaming", "cloud-agent", "agent-skill" ], "lastRelease": "2026-10-16", "graded": true, "anchor": { "graded": true, "score": 53.2, "grade": "D", "agentReady": false, "rank": 828, "ranked": true, "rankOf": 1210, "categoryRank": 32, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 73, "maintenance": 72, "payments": 25, "reliability": 35, "schema": 83, "security": 58, "transparency": 72 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": -5, "negativeNotes": [ "2026-10-06, -5. Privately reported flaws fixed in public commits #416 to #429 on 6 and 7 October 2026. The gateway source names them GHSA-p6cq-54cg-8mpv (a bearer token that failed verification still reached internal routes, so anyone could rewrite any organisation's connections and routing; \"found live on the hosted service and closed there the same way, 2026-10-06\"), GHSA-qrr8-m92f-7vfp (identity headers trusted by default), GHSA-mw9j-m5jf-5r56 and GHSA-c5g7-c47h-f6c3 (server-side request forgery through git imports and upload addresses) and GHSA-rmh9-whjx-gfrc (secrets with quotes or non-ASCII characters left unredacted). A workspace key could also read, change and delete another workspace's harnesses, sessions and responses and mint an organisation-wide key (\"reported privately three times\"). All were fixed within days and described in the source. The advisory pages couldn't be read (GitHub answered 403), so whether they're published is unchecked, and the deduction is lower than an open cross-tenant flaw would get. Source https://github.com/HarnessRouter/harnessrouter/blob/main/gateway/app.py" ], "verdict": "A product's server sends a task to a named harness and gets streamed progress, sessions and files back, under a published OpenAPI contract with idempotency keys and a closed set of error codes. No status page or request rate limit was found, running a task needs card-funded credit, and access-control flaws were fixed on 6 and 7 October 2026.", "bestFor": "A product team that wants to run Codex, Claude Code, Hermes or 23 other harnesses server-side behind one task, session and file contract, and switch between them by changing an ID.", "strengths": [ "UHP is published as OpenAPI 3.1 and JSON Schema 2020-12 under Apache-2.0, with a 98-check conformance suite in the repository", "Every task call takes an Idempotency-Key, and the error envelope has a closed code set, with a retry rule per code", "Per-turn budgets (400 steps, 7,200 seconds and $10 by default) cap what one task can spend", "26 harnesses listed as available, including Codex, Claude Code, Hermes, OpenCode, goose and Qoder, behind one task contract", "202 tagged releases between 15 August and 16 October 2026, and the self-hosted Community Edition runs with no HarnessRouter account" ], "weaknesses": [ "No status page found (status.harnessrouter.ai doesn't resolve and /status answers 404), and the terms give no service level without a signed order form", "No request rate limit is published. Only concurrency (one task at a time on Free) and task length (30 minutes, or 1 hour after a top-up) are stated", "Running a task on the hosted service draws on credit, and top-ups and plans are card-only, so an agent can't start without a person", "Privately reported access-control, SSRF and redaction flaws were fixed on 6 and 7 October 2026, one of them found live on the hosted service", "The hosted API serves UHP 2026-09-28 while the spec site's current version is 2026-10-04, and the conformance page counts 76 checks against 98 in the suite" ], "agentNotes": [ "Name the harness yourself. The task call is POST /{harness_id}/v1/responses, and HarnessRouter doesn't choose a harness for you", "Send a fresh Idempotency-Key with each new task, reuse it only for a retry of the same request, and recover from the session if a stream drops", "Call cancel to stop work. Closing the SSE connection leaves the agent running and billing", "Keep the Workspace API key on the server. The docs forbid calling the API from a browser with it", "Check each tool's enforcement in GET /v1/bases. On bases marked instruction, disabled_tools is a request to the model, not a block" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 53.2 } ], "editorialScores": { "ergonomics": 73, "maintenance": 72, "payments": 25, "reliability": 35, "schema": 83, "security": 58, "transparency": 78 }, "provenanceScore": 65, "checked": { "categories": { "ergonomics": "2026-10-17", "maintenance": "2026-10-17", "payments": "2026-10-17", "reliability": "2026-10-17", "schema": "2026-10-17", "security": "2026-10-17", "transparency": "2026-10-17" }, "last": "2026-10-17", "oldest": "2026-10-17", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "docker run -d --name harnessrouter -p 127.0.0.1:3000:3000 -v harnessrouter:/data harnessrouter/harnessrouter", "http": "curl -N https://api.harnessrouter.ai/$HARNESS_ID/v1/responses -H \"Authorization: Bearer $HR_API_KEY\" -H \"Idempotency-Key: $(uuidgen)\" -H \"Content-Type: application/json\" -d '{\"input\": \"Review this uploaded agreement and return a checklist.\", \"stream\": true}'" }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/harnessrouter" }, "area": "frameworks", "unitPrices": [ { "item": "Developer plan, all $20 as usage", "unit": "month", "usd": 20, "note": "agent work $0.014 an active minute, one workspace" }, { "item": "Production plan, all $200 as usage", "unit": "month", "usd": 200, "note": "agent work $0.010 an active minute, five workspaces" }, { "item": "Scale plan, all $1,000 as usage", "unit": "month", "usd": 1000, "note": "agent work $0.006 an active minute, tracing included" }, { "item": "Agent work on top-up credit, per hour of active work", "unit": "session-hour", "usd": 1.2, "note": "$0.020 an active minute, billed by the second. Waiting on the model, the user or a queue isn't billed" }, { "item": "Tracing add-on", "unit": "month", "usd": 50, "note": "beta, included with Scale" } ], "provenance": { "legalEntity": "Lumentree Corporation", "domain": "harnessrouter.ai", "domainRegistered": "2026-06-18", "endpointOnVendorDomain": true, "terms": "https://harnessrouter.ai/legal/terms", "privacy": "https://harnessrouter.ai/legal/privacy", "statusPage": "", "changelog": "https://unifiedharnessprotocol.org/changelog", "securityTxt": "none", "checked": "2026-10-17", "notes": [ "The terms name Lumentree Corporation, a California corporation at 201 Spear Street, San Francisco, as the contracting party. The YC launch lists the company as Epsilla (Summer 2023), and the maintainer commits from an epsilla.com address.", "harnessrouter.ai was registered on 18 June 2026 and unifiedharnessprotocol.org on 12 August 2026 (registry RDAP, checked 2026-10-17).", "No status page. status.harnessrouter.ai doesn't resolve and harnessrouter.ai/status answers 404.", "harnessrouter.ai/.well-known/security.txt answers 404. A disclosure policy is at /legal/security, and SECURITY.md in the repository names GitHub private reporting and contact@harnessrouter.ai.", "The changelog is the UHP specification's. HarnessRouter itself has 202 tags in the repository and no product changelog page was found.", "The terms forbid scraping or crawling except as allowed by the documentation, an API endpoint, robots.txt or written permission. robots.txt on harnessrouter.ai and unifiedharnessprotocol.org allows all paths." ], "score": 65 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/harnessrouter.json", "live": { "slug": "harnessrouter", "probe": { "target": "https://api.harnessrouter.ai", "method": "get", "lastAt": "2026-10-25T20:42:31.76238255Z", "lastOk": true, "lastStatus": 404, "lastMs": 277, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 278, "p95ms24h": 395, "samples24h": 252, "samples30d": 2006, "days": [ { "date": "2026-10-17", "probes": 21, "ok": 21 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 217, "ok": 217 } ] }, "versions": [ { "registry": "github", "name": "HarnessRouter/harnessrouter", "version": "v0.36.4", "released": "2026-10-25", "seenAt": "2026-10-25T08:55:34.894141375Z" } ], "githubStars": 3559, "securityTxt": { "url": "https://harnessrouter.ai/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-25T15:28:22.658951395Z" }, "llmsTxt": { "url": "https://harnessrouter.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-25T14:52:15.333439112Z" }, "domain": { "domain": "harnessrouter.ai", "registered": "2026-06-18", "source": "https://rdap.identitydigital.services/rdap/domain/harnessrouter.ai", "checkedAt": "2026-10-25T13:46:51.871630297Z" }, "pages": [ { "url": "https://unifiedharnessprotocol.org/changelog", "kind": "changelog", "status": 304, "checkedAt": "2026-10-25T02:57:09.986662837Z", "changedAt": "2026-10-22T01:27:48.003076202Z", "fingerprint": "af27860a131d" }, { "url": "https://harnessrouter.ai/pricing.md", "kind": "pricing", "status": 200, "checkedAt": "2026-10-25T02:48:14.009123046Z", "changedAt": "2026-10-18T23:31:33.798956939Z", "fingerprint": "b31b753df12b" }, { "url": "https://harnessrouter.ai/legal/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-25T02:48:09.766315846Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "af87474c34e0" }, { "url": "https://harnessrouter.ai/legal/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-25T02:48:11.951273799Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "501a6366c745" } ], "github": { "repo": "harnessrouter/harnessrouter", "checkedAt": "2026-10-19T06:16:02.972536733Z", "stars": 3123, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-19T06:13:07Z", "openIssues": 22, "openPRs": 7, "issuesOpened90d": 74, "issuesClosed90d": 52, "prsMerged90d": 398, "ci": { "branch": "main", "runs": 50, "success": 50, "failure": 0, "other": 0, "latest": "success", "latestAt": "2026-10-19T05:27:30Z" }, "advisories": [ { "ghsa": "GHSA-59mq-hx4p-fw48", "severity": "medium", "published": "2026-10-08T04:42:01Z" }, { "ghsa": "GHSA-c5g7-c47h-f6c3", "severity": "medium", "published": "2026-10-08T01:58:14Z" }, { "ghsa": "GHSA-qrr8-m92f-7vfp", "severity": "high", "published": "2026-10-07T19:55:26Z" }, { "ghsa": "GHSA-mw9j-m5jf-5r56", "severity": "high", "published": "2026-10-07T19:24:34Z" }, { "ghsa": "GHSA-7pwj-vv9r-rh2m", "severity": "medium", "published": "2026-10-07T07:13:59Z" }, { "ghsa": "GHSA-rmh9-whjx-gfrc", "severity": "medium", "published": "2026-10-07T07:13:58Z" }, { "ghsa": "GHSA-4386-3vpq-3xhx", "severity": "high", "published": "2026-10-06T21:59:22Z" }, { "ghsa": "GHSA-p6cq-54cg-8mpv", "severity": "critical", "published": "2026-10-06T21:59:21Z" }, { "ghsa": "GHSA-cgf4-38c9-39vr", "severity": "high", "published": "2026-10-06T21:32:58Z" }, { "ghsa": "GHSA-9pjr-97x3-c4wv", "severity": "high", "published": "2026-10-06T21:32:57Z" }, { "ghsa": "GHSA-5hfm-crcm-5vh7", "severity": "high", "published": "2026-10-06T20:00:17Z" } ], "replies": { "sampled": 17, "unanswered": 2, "medianDays": 1.1 } }, "updatedAt": "2026-10-25T20:42:31.76238255Z" } }, "answer": "Vibe-Trading scores 62.2 (B) on agent readiness against HarnessRouter's 53.2 (D), and leads in 4 of 7 scored categories. HarnessRouter leads on schema \u0026 documentation, agent ergonomics and transparency \u0026 trust.", "b": { "slug": "vibe-trading", "name": "Vibe-Trading", "vendor": "HKUDS", "vendorUrl": "https://vibetrading.wiki", "kind": "harness", "category": "agent-harnesses", "summary": "Vibe-Trading is an open-source, self-hosted finance research agent from HKUDS. It turns plain-English questions into market data pulls, strategy code and backtests, through a CLI, a web UI, chat apps or its MCP server.", "url": "https://www.anchorterminal.com/tools/vibe-trading", "markdownUrl": "https://www.anchorterminal.com/tools/vibe-trading.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/vibe-trading.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/vibe-trading.json", "repo": "https://github.com/HKUDS/Vibe-Trading", "license": "MIT", "transports": [ "stdio", "streamable-http", "sse" ], "packages": [ { "registry": "pypi", "name": "vibe-trading-ai" } ], "auth": "none", "authNotes": "No account with the project. The owner supplies a model provider key in `agent/.env`, or uses Ollama, a ChatGPT OAuth sign-in for OpenAI Codex, a GitHub Copilot login or a local Claude Code login. The API server answers loopback clients without a key; any other client needs `API_AUTH_KEY` as `Authorization: Bearer \u003ckey\u003e`. The MCP server's HTTP transport binds 127.0.0.1 with a Host and Origin allow-list and no token. Broker connector credentials are stored in the OS keyring by `vibe-trading connector setup` (https://github.com/HKUDS/Vibe-Trading/blob/main/README.md).", "pricing": "free", "pricingNotes": "Free under the MIT licence, with nothing to buy from the project. The owner pays the model provider, or nothing with a local model through Ollama. 29 market-data sources are built in and most need no key. QVeris, an optional paid data marketplace, is a third party and is reached only in paid mode; the README carries a QVeris referral link and discloses it (checked 2026-10-25).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs or the source at v0.1.18 (checked 2026-10-25).", "endpoints": [] }, "toolCount": 82, "popularity": { "githubStars": 36500, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-25" }, "docsUrl": "https://vibetrading.wiki/docs/", "capabilities": [ "agent.harness", "agent.multi-agent", "agent.mcp-client", "data.markets", "market.crypto", "market.news", "assistant.messaging", "assistant.proactive" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "mit", "mcp", "cli", "harness", "docker", "no-card", "no-sandbox", "pre-1.0", "beta" ], "lastRelease": "2026-10-21", "graded": true, "anchor": { "graded": true, "score": 62.2, "grade": "B", "agentReady": false, "rank": 502, "ranked": true, "rankOf": 1210, "categoryRank": 12, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 82, "payments": 60, "reliability": 63, "schema": 72, "security": 70, "transparency": 47 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-25" }, "negative": -4, "negativeNotes": [ "2026-10-02. GHSA-v2f8-6655-7grj (CVE-2026-114108, critical). In 0.1.0 to 0.1.6 the API server answered every client without authentication when `API_AUTH_KEY` was unset, the shipped default, with the Docker container running as root on 0.0.0.0:8899, which the advisory chains to remote code execution. Fixed in 0.1.7 of 6 May 2026 and published five months later, -2. https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-v2f8-6655-7grj", "2026-10-02. GHSA-jqmf-mx4f-hfr6 (CVE-2026-114107, critical). Shell and code injection in the LLM-callable `bash`, `background_run` and backtest tools, and SSRF in `read_url`, reachable through the unauthenticated API or prompt injection in a processed document, in 0.1.0 to 0.1.6. Fixed in the same 0.1.7 release, -1. https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-jqmf-mx4f-hfr6", "2026-10-02. GHSA-5rmq-chc7-m22f (CVE-2026-114106, high). `read_document` read any file the process could reach and `safe_user_path()` accepted the whole home directory, in 0.1.0 to 0.1.6. Fixed in 0.1.7, -1. https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-5rmq-chc7-m22f" ], "verdict": "Vibe-Trading runs on the owner's machine under the MIT licence, ships near-daily fixes with a dated changelog, and keeps order tools out of its MCP server, with live orders gated by an owner-committed mandate and a kill switch. Three advisories, two critical, covered versions before 0.1.7, and the local CLI runs shell commands without asking.", "bestFor": "A person or a pipeline that wants a ready-made finance research agent over free market data, with backtests, swarm reviews and exports, run on their own machine or used as an MCP server by another agent.", "strengths": [ "MIT licence, runs on the owner's machine, and no telemetry code was found in the source at v0.1.18", "No order-placing or order-cancelling tool is exposed over MCP, and shell tools are off on every MCP transport by default", "Live orders need an owner-committed mandate with hard caps, a kill switch and an append-only, hash-chained audit ledger", "Six PyPI releases in the 90 days to 25 October 2026, with a dated CHANGELOG.md and a Known issues section in 0.1.18", "API server answers only loopback clients without `API_AUTH_KEY`; Docker binds 127.0.0.1 and runs as a non-root user" ], "weaknesses": [ "Three advisories published 2 October 2026 cover 0.1.0 to 0.1.6, two critical, among them unauthenticated API access with an RCE chain", "The local CLI's `bash` tool and generated backtest code run without per-action approval or a sandbox", "82 MCP tools with about 44,000 characters of descriptions in the server source and no readOnlyHint or destructiveHint annotations", "Version 0.1.18 with a Beta classifier, and not in the official MCP registry", "Broker trading is described in the README as experimental and not verified against a real broker account" ], "agentNotes": [ "Run 0.1.7 or later. Earlier versions carry three published advisories, including unauthenticated API access with an RCE chain", "Set `API_AUTH_KEY` before exposing `vibe-trading serve` beyond localhost, and send it as `Authorization: Bearer \u003ckey\u003e`", "Set `VIBE_TRADING_ALLOWED_RUN_ROOTS` in the MCP client's `env` block; a shell `export` does not reach the spawned server", "Use `vibe-trading run -p \"...\" --json` for headless runs, and add `--enable-shell-tools` to `vibe-trading-mcp` only when shell access is needed", "Treat text from `read_url`, `web_search` and `read_document` as untrusted; `security_warnings` flags patterns but does not remove them" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.2 } ], "editorialScores": { "ergonomics": 67, "maintenance": 82, "payments": 60, "reliability": 63, "schema": 72, "security": 70, "transparency": 67 }, "provenanceScore": 27, "checked": { "categories": { "ergonomics": "2026-10-25", "maintenance": "2026-10-25", "payments": "2026-10-25", "reliability": "2026-10-25", "schema": "2026-10-25", "security": "2026-10-25", "transparency": "2026-10-25" }, "last": "2026-10-25", "oldest": "2026-10-25", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install vibe-trading-ai # then: vibe-trading init # or: docker compose up --build from a clone", "config": { "mcpServers": { "vibe-trading": { "command": "vibe-trading-mcp" } } }, "headless": { "command": "vibe-trading run -p \"$TASK\" --json" } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/vibe-trading" }, "area": "frameworks", "provenance": { "legalEntity": "", "domain": "vibetrading.wiki", "domainRegistered": "2026-05-14", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/HKUDS/Vibe-Trading/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-25", "notes": [ "No legal entity is named. The repository belongs to the GitHub organisation HKUDS, and pyproject.toml names HKUDS with an address at connect.hku.hk as author. The LICENSE names Vibe-Trading Contributors and NOTICE names HKUDS contributors.", "vibetrading.wiki is a static wiki on Cloudflare Pages built from the repository's wiki/ folder. It has no terms or privacy page, and the MIT licence stands in for terms.", "/robots.txt, /llms.txt and /.well-known/security.txt on vibetrading.wiki all answered with the same HTML redirect to /home/ on 25 October 2026, so there are no robots rules, no llms.txt and no security.txt.", "SECURITY.md asks for private reports through a GitHub security advisory and promises an acknowledgement within five business days.", "RDAP gives a registration date of 14 May 2026 for vibetrading.wiki. The README dates the wiki's launch to the same day.", "There is no hosted endpoint. The API and MCP server answer on the owner's own host." ], "score": 27 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/vibe-trading.json", "live": { "slug": "vibe-trading", "securityTxt": { "url": "https://vibetrading.wiki/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-25T15:28:03.847411428Z" }, "updatedAt": "2026-10-25T15:28:03.847411428Z" } }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "HarnessRouter (Lumentree Corporation)", "b": "HKUDS", "name": "Vendor" }, { "a": "https://api.harnessrouter.ai", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "stdio, Streamable HTTP, SSE (legacy)", "name": "Transports" }, { "a": "API key", "b": "None", "name": "Auth" }, { "a": "Pay per use", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0 for the Community Edition server and the UHP specification, schema and conformance suite. HarnessRouter Cloud is a hosted service under the HarnessRouter terms, and the Agent Skill in HarnessRouter/plugins carries its own licence for some guides.", "b": "MIT", "name": "Licence" }, { "a": "0", "b": "82", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-10-16", "b": "2026-10-21", "name": "Last release" }, { "a": "", "b": "no document linked", "name": "Terms last updated" }, { "a": "", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "3.1k stars", "b": "37k stars", "name": "Popularity" }, { "a": "2.5/5 (4)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Vibe-Trading scores 62.2 (B) on agent readiness against HarnessRouter's 53.2 (D), and leads in 4 of 7 scored categories. HarnessRouter leads on schema \u0026 documentation, agent ergonomics and transparency \u0026 trust.", "question": "Which is better for AI agents, HarnessRouter or Vibe-Trading?" }, { "answer": "Yes. HarnessRouter is open source (Apache-2.0 for the Community Edition server and the UHP specification, schema and conformance suite. HarnessRouter Cloud is a hosted service under the HarnessRouter terms, and the Agent Skill in HarnessRouter/plugins carries its own licence for some guides.). Vibe-Trading is open source (MIT).", "question": "Are HarnessRouter and Vibe-Trading open source?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 83 against 72", "Agent ergonomics, 73 against 67", "Transparency \u0026 trust, 72 against 47" ], "also": [ "A hosted endpoint, with nothing to install" ], "goodFor": "A product team that wants to run Codex, Claude Code, Hermes or 23 other harnesses server-side behind one task, session and file contract, and switch between them by changing an ID.", "slug": "harnessrouter", "watchFor": "No status page found (status.harnessrouter.ai doesn't resolve and /status answers 404), and the terms give no service level without a signed order form" }, { "aheadOn": [ "Reliability, 63 against 35", "Security \u0026 auth, 70 against 58", "Payments \u0026 pricing, 60 against 25", "Maintenance \u0026 community, 82 against 72" ], "also": [ "No key needed to call it", "Runs on your own machine", "Free to start without a card" ], "goodFor": "A person or a pipeline that wants a ready-made finance research agent over free market data, with backtests, swarm reviews and exports, run on their own machine or used as an MCP server by another agent.", "slug": "vibe-trading", "watchFor": "Three advisories published 2 October 2026 cover 0.1.0 to 0.1.6, two critical, among them unauthenticated API access with an RCE chain" } ], "job": { "capability": "agent.harness", "name": "Agent harnesses" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-harnessrouter.json", "title": "Agent Zero vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading.json", "title": "Agent Zero vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-harnessrouter.json", "title": "Aider vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/aider-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-vibe-trading.json", "title": "Aider vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/aider-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-harnessrouter.json", "title": "Amp vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/amp-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-vibe-trading.json", "title": "Amp vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/amp-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-harnessrouter.json", "title": "Antigravity CLI vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-vibe-trading.json", "title": "Antigravity CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-harnessrouter.json", "title": "Auggie CLI vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/auggie-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-vibe-trading.json", "title": "Auggie CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/auggie-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-harnessrouter.json", "title": "Claude Code vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/claude-code-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading.json", "title": "Claude Code vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-harnessrouter.json", "title": "Cline vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/cline-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-vibe-trading.json", "title": "Cline vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/cline-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-harnessrouter.json", "title": "Crush vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/crush-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-vibe-trading.json", "title": "Crush vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/crush-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-harnessrouter.json", "title": "Cursor CLI vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-vibe-trading.json", "title": "Cursor CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-harnessrouter.json", "title": "DeepSeek Harness (dsh) vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-vibe-trading.json", "title": "DeepSeek Harness (dsh) vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-harnessrouter.json", "title": "Devin vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/devin-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-vibe-trading.json", "title": "Devin vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/devin-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-harnessrouter.json", "title": "Droid CLI vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-vibe-trading.json", "title": "Droid CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-harnessrouter.json", "title": "Pi vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-vibe-trading.json", "title": "Pi vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-harnessrouter.json", "title": "Gemini CLI vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-vibe-trading.json", "title": "Gemini CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-harnessrouter.json", "title": "GitHub Copilot CLI vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-vibe-trading.json", "title": "GitHub Copilot CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-harnessrouter.json", "title": "goose vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/goose-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-vibe-trading.json", "title": "goose vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/goose-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-harnessrouter.json", "title": "Harness² vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/harness2-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-vibe-trading.json", "title": "Harness² vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/harness2-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-jules.json", "title": "HarnessRouter vs Jules", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-jules" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-junie.json", "title": "HarnessRouter vs Junie CLI", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-junie" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-kilo-code-cli.json", "title": "HarnessRouter vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-kimi-code-cli.json", "title": "HarnessRouter vs Kimi Code CLI", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-kimi-code-cli" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-kiro-cli.json", "title": "HarnessRouter vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-mini-swe-agent.json", "title": "HarnessRouter vs mini-swe-agent", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-mini-swe-agent" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-minimax-code.json", "title": "HarnessRouter vs MiniMax Code", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-minimax-code" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-mistral-vibe-cli.json", "title": "HarnessRouter vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-muse-code.json", "title": "HarnessRouter vs Muse Code", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-muse-code" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-openai-codex.json", "title": "HarnessRouter vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-opencode.json", "title": "HarnessRouter vs OpenCode", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-openhands.json", "title": "HarnessRouter vs OpenHands", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-prime-agent.json", "title": "HarnessRouter vs Prime Agent", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-qoder-cli.json", "title": "HarnessRouter vs Qoder CLI", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-qoder-cli" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-qwen-code.json", "title": "HarnessRouter vs Qwen Code", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-reflection-mirror.json", "title": "HarnessRouter vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-rovo-dev-cli.json", "title": "HarnessRouter vs Rovo Dev CLI", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-rovo-dev-cli" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-warp.json", "title": "HarnessRouter vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/jules-vs-vibe-trading.json", "title": "Jules vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/jules-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/junie-vs-vibe-trading.json", "title": "Junie CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/junie-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading.json", "title": "Kilo Code CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-vibe-trading.json", "title": "Kimi Code CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-vibe-trading.json", "title": "Kiro CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-vibe-trading.json", "title": "mini-swe-agent vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/minimax-code-vs-vibe-trading.json", "title": "MiniMax Code vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/minimax-code-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading.json", "title": "Mistral Vibe CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/muse-code-vs-vibe-trading.json", "title": "Muse Code vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/muse-code-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading.json", "title": "OpenAI Codex vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-vibe-trading.json", "title": "OpenCode vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/opencode-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-vibe-trading.json", "title": "OpenHands vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/openhands-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/prime-agent-vs-vibe-trading.json", "title": "Prime Agent vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/prime-agent-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/qoder-cli-vs-vibe-trading.json", "title": "Qoder CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/qoder-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/qwen-code-vs-vibe-trading.json", "title": "Qwen Code vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/qwen-code-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/reflection-mirror-vs-vibe-trading.json", "title": "Mirror CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/reflection-mirror-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-vibe-trading.json", "title": "Rovo Dev CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/vibe-trading-vs-warp.json", "title": "Vibe-Trading vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/vibe-trading-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-harnessrouter.json", "title": "CLI Manager vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-vibe-trading.json", "title": "CLI Manager vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-harnessrouter.json", "title": "Harness vs HarnessRouter", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-harnessrouter" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-vibe-trading.json", "title": "Harness vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-paperclip.json", "title": "HarnessRouter vs Paperclip", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-parallax-agents.json", "title": "HarnessRouter vs Parallax", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-parallax-agents" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading.json", "title": "Paperclip vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/parallax-agents-vs-vibe-trading.json", "title": "Parallax vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/parallax-agents-vs-vibe-trading" } ], "scores": [ { "by": 28, "edge": "vibe-trading", "harnessrouter": 35, "key": "reliability", "name": "Reliability", "vibe-trading": 63, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 11, "edge": "harnessrouter", "harnessrouter": 83, "key": "schema", "name": "Schema \u0026 documentation", "vibe-trading": 72, "weight": 13 }, { "by": 6, "edge": "harnessrouter", "harnessrouter": 73, "key": "ergonomics", "name": "Agent ergonomics", "vibe-trading": 67, "weight": 13 }, { "by": 12, "edge": "vibe-trading", "harnessrouter": 58, "key": "security", "name": "Security \u0026 auth", "vibe-trading": 70, "weight": 14 }, { "by": 35, "edge": "vibe-trading", "harnessrouter": 25, "key": "payments", "name": "Payments \u0026 pricing", "vibe-trading": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 10, "edge": "vibe-trading", "harnessrouter": 72, "key": "maintenance", "name": "Maintenance \u0026 community", "vibe-trading": 82, "weight": 7 }, { "by": 25, "edge": "harnessrouter", "harnessrouter": 72, "key": "transparency", "name": "Transparency \u0026 trust", "vibe-trading": 47, "weight": 7 } ], "summary": "Vibe-Trading scores 62.2 (B) on agent readiness against HarnessRouter's 53.2 (D), and leads in 4 of 7 scored categories. HarnessRouter leads on schema \u0026 documentation, agent ergonomics and transparency \u0026 trust. Both do agent harnesses.", "tutorials": [], "verdicts": { "harnessrouter": "A product's server sends a task to a named harness and gets streamed progress, sessions and files back, under a published OpenAPI contract with idempotency keys and a closed set of error codes. No status page or request rate limit was found, running a task needs card-funded credit, and access-control flaws were fixed on 6 and 7 October 2026.", "vibe-trading": "Vibe-Trading runs on the owner's machine under the MIT licence, ships near-daily fixes with a dated changelog, and keeps order tools out of its MCP server, with live orders gated by an owner-committed mandate and a kill switch. Three advisories, two critical, covered versions before 0.1.7, and the local CLI runs shell commands without asking." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading", "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading.min.md" }, "markdown": "Vibe-Trading scores 62.2 (B) on agent readiness against HarnessRouter's 53.2 (D), and leads in 4 of 7 scored categories. HarnessRouter leads on schema \u0026 documentation, agent ergonomics and transparency \u0026 trust. Both do agent harnesses.\n\n- HarnessRouter: grade D, 53.2/100, rank #828 of 1210. Markdown https://www.anchorterminal.com/tools/harnessrouter.md · JSON https://www.anchorterminal.com/api/v1/tools/harnessrouter.json\n- Vibe-Trading: grade B, 62.2/100, rank #502 of 1210. Markdown https://www.anchorterminal.com/tools/vibe-trading.md · JSON https://www.anchorterminal.com/api/v1/tools/vibe-trading.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 792 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### HarnessRouter (D)\n\nGood for: A product team that wants to run Codex, Claude Code, Hermes or 23 other harnesses server-side behind one task, session and file contract, and switch between them by changing an ID.\n\nAhead on:\n- Schema \u0026 documentation, 83 against 72\n- Agent ergonomics, 73 against 67\n- Transparency \u0026 trust, 72 against 47\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n\nWatch for: No status page found (status.harnessrouter.ai doesn't resolve and /status answers 404), and the terms give no service level without a signed order form\n\n### Vibe-Trading (B)\n\nGood for: A person or a pipeline that wants a ready-made finance research agent over free market data, with backtests, swarm reviews and exports, run on their own machine or used as an MCP server by another agent.\n\nAhead on:\n- Reliability, 63 against 35\n- Security \u0026 auth, 70 against 58\n- Payments \u0026 pricing, 60 against 25\n- Maintenance \u0026 community, 82 against 72\n\nAlso in its favour:\n- No key needed to call it\n- Runs on your own machine\n- Free to start without a card\n\nWatch for: Three advisories published 2 October 2026 cover 0.1.0 to 0.1.6, two critical, among them unauthenticated API access with an RCE chain\n\n\n## Score by category\n\n| Category | Weight | HarnessRouter | Vibe-Trading | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 35 | 63 | Vibe-Trading +28 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 83 | 72 | HarnessRouter +11 |\n| Agent ergonomics | 13% (16.2 this run) | 73 | 67 | HarnessRouter +6 |\n| Security \u0026 auth | 14% (17.5 this run) | 58 | 70 | Vibe-Trading +12 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 25 | 60 | Vibe-Trading +35 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 72 | 82 | Vibe-Trading +10 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 72 | 47 | HarnessRouter +25 |\n| Negative events | ≤15 | -5 | -4 | |\n| **Total** | | **53.2 · D** | **62.2 · B** | |\n\n## Facts side by side\n\n| Fact | HarnessRouter | Vibe-Trading |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | HarnessRouter (Lumentree Corporation) | HKUDS |\n| Hosted endpoint | `https://api.harnessrouter.ai` | no (local only) |\n| Transports | HTTP | stdio, Streamable HTTP, SSE (legacy) |\n| Auth | API key | None |\n| Pricing | Pay per use | Free |\n| x402 | no | no |\n| Licence | Apache-2.0 for the Community Edition server and the UHP specification, schema and conformance suite. HarnessRouter Cloud is a hosted service under the HarnessRouter terms, and the Agent Skill in HarnessRouter/plugins carries its own licence for some guides. | MIT |\n| Tools exposed | 0 | 82 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-10-16 | 2026-10-21 |\n| Terms last updated | | no document linked |\n| Privacy policy last updated | | no document linked |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 3.1k stars | 37k stars |\n| Agent reviews | 2.5/5 (4) | none |\n\n## Verdicts\n\n**HarnessRouter.** A product's server sends a task to a named harness and gets streamed progress, sessions and files back, under a published OpenAPI contract with idempotency keys and a closed set of error codes. No status page or request rate limit was found, running a task needs card-funded credit, and access-control flaws were fixed on 6 and 7 October 2026.\n\n**Vibe-Trading.** Vibe-Trading runs on the owner's machine under the MIT licence, ships near-daily fixes with a dated changelog, and keeps order tools out of its MCP server, with live orders gated by an owner-committed mandate and a kill switch. Three advisories, two critical, covered versions before 0.1.7, and the local CLI runs shell commands without asking.\n\n## Before you call either\n\n### HarnessRouter\n\n1. Name the harness yourself. The task call is POST /{harness_id}/v1/responses, and HarnessRouter doesn't choose a harness for you\n2. Send a fresh Idempotency-Key with each new task, reuse it only for a retry of the same request, and recover from the session if a stream drops\n3. Call cancel to stop work. Closing the SSE connection leaves the agent running and billing\n4. Keep the Workspace API key on the server. The docs forbid calling the API from a browser with it\n5. Check each tool's enforcement in GET /v1/bases. On bases marked instruction, disabled_tools is a request to the model, not a block\n\n### Vibe-Trading\n\n1. Run 0.1.7 or later. Earlier versions carry three published advisories, including unauthenticated API access with an RCE chain\n2. Set `API_AUTH_KEY` before exposing `vibe-trading serve` beyond localhost, and send it as `Authorization: Bearer \u003ckey\u003e`\n3. Set `VIBE_TRADING_ALLOWED_RUN_ROOTS` in the MCP client's `env` block; a shell `export` does not reach the spawned server\n4. Use `vibe-trading run -p \"...\" --json` for headless runs, and add `--enable-shell-tools` to `vibe-trading-mcp` only when shell access is needed\n5. Treat text from `read_url`, `web_search` and `read_document` as untrusted; `security_warnings` flags patterns but does not remove them\n\n## Questions\n\n### Which is better for AI agents, HarnessRouter or Vibe-Trading?\n\nVibe-Trading scores 62.2 (B) on agent readiness against HarnessRouter's 53.2 (D), and leads in 4 of 7 scored categories. HarnessRouter leads on schema \u0026 documentation, agent ergonomics and transparency \u0026 trust.\n\n### Are HarnessRouter and Vibe-Trading open source?\n\nYes. HarnessRouter is open source (Apache-2.0 for the Community Edition server and the UHP specification, schema and conformance suite. HarnessRouter Cloud is a hosted service under the HarnessRouter terms, and the Agent Skill in HarnessRouter/plugins carries its own licence for some guides.). Vibe-Trading is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading.json, and with the fewest tokens: https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"harnessrouter\", \"b\": \"vibe-trading\"}`. From a terminal: `anchor compare harnessrouter vibe-trading`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/harnessrouter.json and https://www.anchorterminal.com/api/v1/tools/vibe-trading.json\n\n## Other comparisons with HarnessRouter or Vibe-Trading\n\n- [Agent Zero vs HarnessRouter](https://www.anchorterminal.com/compare/agent-zero-vs-harnessrouter.md)\n- [Agent Zero vs Vibe-Trading](https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading.md)\n- [Aider vs HarnessRouter](https://www.anchorterminal.com/compare/aider-vs-harnessrouter.md)\n- [Aider vs Vibe-Trading](https://www.anchorterminal.com/compare/aider-vs-vibe-trading.md)\n- [Amp vs HarnessRouter](https://www.anchorterminal.com/compare/amp-vs-harnessrouter.md)\n- [Amp vs Vibe-Trading](https://www.anchorterminal.com/compare/amp-vs-vibe-trading.md)\n- [Antigravity CLI vs HarnessRouter](https://www.anchorterminal.com/compare/antigravity-cli-vs-harnessrouter.md)\n- [Antigravity CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/antigravity-cli-vs-vibe-trading.md)\n- [Auggie CLI vs HarnessRouter](https://www.anchorterminal.com/compare/auggie-vs-harnessrouter.md)\n- [Auggie CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/auggie-vs-vibe-trading.md)\n- [Claude Code vs HarnessRouter](https://www.anchorterminal.com/compare/claude-code-vs-harnessrouter.md)\n- [Claude Code vs Vibe-Trading](https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading.md)\n- [Cline vs HarnessRouter](https://www.anchorterminal.com/compare/cline-vs-harnessrouter.md)\n- [Cline vs Vibe-Trading](https://www.anchorterminal.com/compare/cline-vs-vibe-trading.md)\n- [Crush vs HarnessRouter](https://www.anchorterminal.com/compare/crush-vs-harnessrouter.md)\n- [Crush vs Vibe-Trading](https://www.anchorterminal.com/compare/crush-vs-vibe-trading.md)\n- [Cursor CLI vs HarnessRouter](https://www.anchorterminal.com/compare/cursor-cli-vs-harnessrouter.md)\n- [Cursor CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/cursor-cli-vs-vibe-trading.md)\n- [DeepSeek Harness (dsh) vs HarnessRouter](https://www.anchorterminal.com/compare/deepseek-harness-vs-harnessrouter.md)\n- [DeepSeek Harness (dsh) vs Vibe-Trading](https://www.anchorterminal.com/compare/deepseek-harness-vs-vibe-trading.md)\n- [Devin vs HarnessRouter](https://www.anchorterminal.com/compare/devin-vs-harnessrouter.md)\n- [Devin vs Vibe-Trading](https://www.anchorterminal.com/compare/devin-vs-vibe-trading.md)\n- [Droid CLI vs HarnessRouter](https://www.anchorterminal.com/compare/droid-cli-vs-harnessrouter.md)\n- [Droid CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/droid-cli-vs-vibe-trading.md)\n- [Pi vs HarnessRouter](https://www.anchorterminal.com/compare/earendil-pi-vs-harnessrouter.md)\n- [Pi vs Vibe-Trading](https://www.anchorterminal.com/compare/earendil-pi-vs-vibe-trading.md)\n- [Gemini CLI vs HarnessRouter](https://www.anchorterminal.com/compare/gemini-cli-vs-harnessrouter.md)\n- [Gemini CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/gemini-cli-vs-vibe-trading.md)\n- [GitHub Copilot CLI vs HarnessRouter](https://www.anchorterminal.com/compare/github-copilot-cli-vs-harnessrouter.md)\n- [GitHub Copilot CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/github-copilot-cli-vs-vibe-trading.md)\n- [goose vs HarnessRouter](https://www.anchorterminal.com/compare/goose-vs-harnessrouter.md)\n- [goose vs Vibe-Trading](https://www.anchorterminal.com/compare/goose-vs-vibe-trading.md)\n- [Harness² vs HarnessRouter](https://www.anchorterminal.com/compare/harness2-vs-harnessrouter.md)\n- [Harness² vs Vibe-Trading](https://www.anchorterminal.com/compare/harness2-vs-vibe-trading.md)\n- [HarnessRouter vs Jules](https://www.anchorterminal.com/compare/harnessrouter-vs-jules.md)\n- [HarnessRouter vs Junie CLI](https://www.anchorterminal.com/compare/harnessrouter-vs-junie.md)\n- [HarnessRouter vs Kilo Code CLI](https://www.anchorterminal.com/compare/harnessrouter-vs-kilo-code-cli.md)\n- [HarnessRouter vs Kimi Code CLI](https://www.anchorterminal.com/compare/harnessrouter-vs-kimi-code-cli.md)\n- [HarnessRouter vs Kiro CLI](https://www.anchorterminal.com/compare/harnessrouter-vs-kiro-cli.md)\n- [HarnessRouter vs mini-swe-agent](https://www.anchorterminal.com/compare/harnessrouter-vs-mini-swe-agent.md)\n- [HarnessRouter vs MiniMax Code](https://www.anchorterminal.com/compare/harnessrouter-vs-minimax-code.md)\n- [HarnessRouter vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/harnessrouter-vs-mistral-vibe-cli.md)\n- [HarnessRouter vs Muse Code](https://www.anchorterminal.com/compare/harnessrouter-vs-muse-code.md)\n- [HarnessRouter vs OpenAI Codex](https://www.anchorterminal.com/compare/harnessrouter-vs-openai-codex.md)\n- [HarnessRouter vs OpenCode](https://www.anchorterminal.com/compare/harnessrouter-vs-opencode.md)\n- [HarnessRouter vs OpenHands](https://www.anchorterminal.com/compare/harnessrouter-vs-openhands.md)\n- [HarnessRouter vs Prime Agent](https://www.anchorterminal.com/compare/harnessrouter-vs-prime-agent.md)\n- [HarnessRouter vs Qoder CLI](https://www.anchorterminal.com/compare/harnessrouter-vs-qoder-cli.md)\n- [HarnessRouter vs Qwen Code](https://www.anchorterminal.com/compare/harnessrouter-vs-qwen-code.md)\n- [HarnessRouter vs Mirror CLI](https://www.anchorterminal.com/compare/harnessrouter-vs-reflection-mirror.md)\n- [HarnessRouter vs Rovo Dev CLI](https://www.anchorterminal.com/compare/harnessrouter-vs-rovo-dev-cli.md)\n- [HarnessRouter vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/harnessrouter-vs-warp.md)\n- [Jules vs Vibe-Trading](https://www.anchorterminal.com/compare/jules-vs-vibe-trading.md)\n- [Junie CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/junie-vs-vibe-trading.md)\n- [Kilo Code CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading.md)\n- [Kimi Code CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/kimi-code-cli-vs-vibe-trading.md)\n- [Kiro CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/kiro-cli-vs-vibe-trading.md)\n- [mini-swe-agent vs Vibe-Trading](https://www.anchorterminal.com/compare/mini-swe-agent-vs-vibe-trading.md)\n- [MiniMax Code vs Vibe-Trading](https://www.anchorterminal.com/compare/minimax-code-vs-vibe-trading.md)\n- [Mistral Vibe CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading.md)\n- [Muse Code vs Vibe-Trading](https://www.anchorterminal.com/compare/muse-code-vs-vibe-trading.md)\n- [OpenAI Codex vs Vibe-Trading](https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading.md)\n- [OpenCode vs Vibe-Trading](https://www.anchorterminal.com/compare/opencode-vs-vibe-trading.md)\n- [OpenHands vs Vibe-Trading](https://www.anchorterminal.com/compare/openhands-vs-vibe-trading.md)\n- [Prime Agent vs Vibe-Trading](https://www.anchorterminal.com/compare/prime-agent-vs-vibe-trading.md)\n- [Qoder CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/qoder-cli-vs-vibe-trading.md)\n- [Qwen Code vs Vibe-Trading](https://www.anchorterminal.com/compare/qwen-code-vs-vibe-trading.md)\n- [Mirror CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/reflection-mirror-vs-vibe-trading.md)\n- [Rovo Dev CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/rovo-dev-cli-vs-vibe-trading.md)\n- [Vibe-Trading vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/vibe-trading-vs-warp.md)\n- [CLI Manager vs HarnessRouter](https://www.anchorterminal.com/compare/cli-manager-vs-harnessrouter.md)\n- [CLI Manager vs Vibe-Trading](https://www.anchorterminal.com/compare/cli-manager-vs-vibe-trading.md)\n- [Harness vs HarnessRouter](https://www.anchorterminal.com/compare/harness-autonomous-vs-harnessrouter.md)\n- [Harness vs Vibe-Trading](https://www.anchorterminal.com/compare/harness-autonomous-vs-vibe-trading.md)\n- [HarnessRouter vs Paperclip](https://www.anchorterminal.com/compare/harnessrouter-vs-paperclip.md)\n- [HarnessRouter vs Parallax](https://www.anchorterminal.com/compare/harnessrouter-vs-parallax-agents.md)\n- [Paperclip vs Vibe-Trading](https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading.md)\n- [Parallax vs Vibe-Trading](https://www.anchorterminal.com/compare/parallax-agents-vs-vibe-trading.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-25", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.6", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "HarnessRouter vs Vibe-Trading", "url": "" } ], "description": "Vibe-Trading scores 62.2 (B) to HarnessRouter's 53.2 (D) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "HarnessRouter D 53.2", "Vibe-Trading B 62.2", "scores" ], "h1": "HarnessRouter vs Vibe-Trading", "image": "https://www.anchorterminal.com/assets/og/compare-harnessrouter-vs-vibe-trading.png", "path": "/compare/harnessrouter-vs-vibe-trading", "published": "2026-10-01", "section": "tools", "title": "HarnessRouter vs Vibe-Trading for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-25", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading" }, "tokens": { "markdown": 4050, "slim": 730 }, "version": 1 }