{ "data": { "a": { "slug": "hexis", "name": "Hexis Cloud", "vendor": "Bevelites GmbH (Bevel)", "vendorUrl": "https://www.bevel.software/hexis", "kind": "mcp", "category": "company-knowledge", "summary": "Hexis Cloud is the hosted edition of Hexis, an Apache-2.0 platform from Bevelites GmbH (Bevel) that keeps a team's knowledge, agent skills and tool connections in git, with per-file access control, and serves them to agents over MCP.", "url": "https://www.anchorterminal.com/tools/hexis", "markdownUrl": "https://www.anchorterminal.com/tools/hexis.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/hexis.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/hexis.json", "repo": "https://github.com/Bevel-Software/Hexis", "license": "Apache-2.0 (the Hexis software). Hexis Cloud, the hosted service at hexis.software, is governed by Bevel's Terms of Service of 11 October 2026", "transports": [ "streamable-http", "stdio" ], "remoteUrl": "https://\u003cworkspace\u003e.hexis.software/api/mcp", "packages": [ { "registry": "npm", "name": "@bevel-software/hexis-mcp" }, { "registry": "oci", "name": "ghcr.io/bevel-software/hexis" } ], "auth": "mixed", "authNotes": "OAuth 2.1 on the MCP endpoint, with PKCE (S256), dynamic client registration, refresh tokens, revocation and one scope, `mcp`, advertised through RFC 9728 protected-resource metadata. Or a connection key (`bevel_…`) minted under External agent access as a Bearer token, stored as a SHA-256 hash and revocable. Either way the agent acts with the permissions of the person who connected it, and a connection can be read-only. People sign in with Google, Microsoft or a password; MFA only through Google or Microsoft.", "pricing": "freemium", "pricingNotes": "Free for up to 3 seats with no time limit, and the terms say it is not a trial. Team is €10 a seat a month excluding VAT, 1 to 50 seats, billed monthly through Stripe. Enterprise and more than 50 seats are by order form. Hexis itself is Apache-2.0 and free to self-host (checked 2026-10-14).", "priceSummary": "Freemium", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the terms, the pricing section of bevel.software/hexis or the repository. Payment is by Stripe checkout for the Team plan (checked 2026-10-14).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 114, "npmWeekly": 900, "pypiWeekly": null, "asOf": "2026-10-14" }, "docsUrl": "https://github.com/Bevel-Software/Hexis#readme", "registryName": "io.github.Bevel-Software/hexis", "capabilities": [ "knowledge.search", "work.docs", "agent.tools", "automation.auth", "auth.audit" ], "tags": [ "hosted", "open-source", "self-hosted", "mcp", "mcp-registry", "oauth", "api-key", "freemium", "free-tier", "no-card", "typescript", "docker", "eu", "eu-hosted", "read-only-mode", "agent-skills", "security-txt" ], "lastRelease": "2026-10-14", "graded": true, "anchor": { "graded": true, "score": 55.3, "grade": "C", "agentReady": false, "rank": 705, "ranked": true, "rankOf": 1084, "categoryRank": 11, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 57, "maintenance": 85, "payments": 30, "reliability": 18, "schema": 83, "security": 64, "transparency": 75 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-14" }, "negative": 0, "verdict": "Agents reach a git-backed knowledge base, shared skills and connected tools through one OAuth MCP endpoint that applies each person's per-file permissions, with read-only connections and an audit log of tool calls. The hosted edition dates from 11 October 2026, and its own terms state no backups, no uptime commitment and no security certification.", "bestFor": "A team that wants its agent skills, company pages and tool credentials in one git repository, reviewed and access-controlled per file, and reached by any MCP client.", "strengths": [ "Hexis core is Apache-2.0 on GitHub, with 36 version tags from v0.1.0 on 10 August to v0.29.0 on 14 October 2026", "OAuth 2.1 with PKCE and dynamic client registration on the MCP endpoint, plus hashed, revocable connection keys", "Per-folder and per-file access rules, read-only connections and owner approval for changes to protected branches", "Audit log of agent tool calls kept 365 days by default, with each connection revocable from the workspace", "Free plan for up to 3 seats with no time limit, Team at €10 a seat a month excluding VAT" ], "weaknesses": [ "The terms and security page state no backups, no SLA, no penetration test, no certification and no MFA of its own", "All workspaces share one Hetzner server in Nuremberg with logical separation, and the encryption keys sit on that server", "No status page and no published request rate limits for the MCP endpoint", "Over 35 platform tools are listed directly, with no readOnlyHint or destructiveHint annotations", "Hexis Cloud is open to businesses only, and a person must sign in with Google, Microsoft or a password to create a workspace" ], "agentNotes": [ "Ask the person for a read-only connection when the task only reads. It answers canWrite false everywhere", "Pass the branch you are working on to every knowledge-base tool. Calls without a required branch are refused", "Check canWrite from list_files, read_file or get_skill before writing, and open a change request when it is false", "Use list_tools and tools_info before call_tool_chain, and never ask the person for a tool's secret in chat", "Keep your own copy of anything important. Hexis Cloud keeps no backups of Managed repositories" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 55.3 } ], "editorialScores": { "ergonomics": 57, "maintenance": 85, "payments": 30, "reliability": 18, "schema": 83, "security": 64, "transparency": 81 }, "provenanceScore": 69 }, "connect": { "install": "npx -y @bevel-software/hexis-mcp --url https://\u003cworkspace\u003e.hexis.software", "config": { "mcpServers": { "hexis": { "args": [ "-y", "@bevel-software/hexis-mcp" ], "command": "npx", "env": { "HEXIS_CONNECTION_KEY": "bevel_…", "HEXIS_URL": "https://\u003cworkspace\u003e.hexis.software" } } } } }, "letme": { "capability": "https://letme.dev/knowledge.search", "tool": "https://letme.dev/hexis" }, "area": "business", "provenance": { "legalEntity": "Bevelites GmbH", "domain": "hexis.software", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://hexis.software/terms", "privacy": "https://hexis.software/privacy", "statusPage": "", "changelog": "https://github.com/Bevel-Software/Hexis/releases", "securityTxt": "valid", "checked": "2026-10-14", "notes": [ "Bevelites GmbH, Schleißheimer Str. 188, 80797 München, HRB 303590 at Amtsgericht München, per the Impressum at bevel.software/impressum and the terms.", "hexis.software is a single-page app. The legal pages render with JavaScript, and we read their text from the site's published script bundle.", "hexis.software/.well-known/security.txt names juan@bevel.software and expires on 30 September 2027.", "hexis.software serves the app for every path, including robots.txt, so there is no robots.txt to disallow anything. bevel.software's robots.txt disallows only /api/.", "No status page found. status.hexis.software answers 'No workspace at this address'." ], "score": 69 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/hexis.json", "live": { "slug": "hexis", "probe": { "target": "https://\u003cworkspace\u003e.hexis.software/api/mcp", "method": "mcp-initialize", "lastAt": "2026-10-15T00:41:51.043344906Z", "lastOk": false, "lastStatus": 0, "lastMs": 0, "lastNote": "DNS lookup failed", "authRequired": false, "uptime24h": 0, "uptime30d": 0, "p50ms24h": 0, "p95ms24h": 0, "samples24h": 34, "samples30d": 34, "days": [ { "date": "2026-10-14", "probes": 26, "ok": 0 }, { "date": "2026-10-15", "probes": 8, "ok": 0 } ], "outages": [ { "start": "2026-10-14T21:31:42.133995117Z", "end": "0001-01-01T00:00:00Z", "note": "DNS lookup failed" } ] }, "versions": [ { "registry": "github", "name": "Bevel-Software/Hexis", "version": "v0.29.0", "released": "2026-10-14", "seenAt": "2026-10-14T23:57:19.802349377Z" }, { "registry": "npm", "name": "@bevel-software/hexis-mcp", "version": "0.29.0", "seenAt": "2026-10-14T23:57:18.908423769Z" } ], "githubStars": 114, "npmWeekly": 900, "mcpTools": { "url": "https://\u003cworkspace\u003e.hexis.software/api/mcp", "checkedAt": "2026-10-14T22:17:44.005217518Z", "status": "error", "note": "Post \"https://\u003cworkspace\u003e.hexis.software/api/mcp\": dial tcp: lookup \u003cworkspace\u003e.hexis.software: no such host", "changedAt": "2026-10-14T22:17:44.005217518Z" }, "updatedAt": "2026-10-15T00:41:51.043344906Z" } }, "answer": "Onyx scores 65 (B) on agent readiness against Hexis Cloud's 55.3 (C), and leads in 4 of 7 scored categories. Hexis Cloud leads on maintenance \u0026 community and transparency \u0026 trust.", "b": { "slug": "onyx", "name": "Onyx", "vendor": "DanswerAI, Inc. (Onyx, formerly Danswer)", "vendorUrl": "https://www.onyx.app", "kind": "platform", "category": "company-knowledge", "summary": "Open-source enterprise search and chat platform, formerly Danswer.", "url": "https://www.anchorterminal.com/tools/onyx", "markdownUrl": "https://www.anchorterminal.com/tools/onyx.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/onyx.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/onyx.json", "repo": "https://github.com/onyx-dot-app/onyx", "license": "MIT (Community Edition, including the MCP server, the API server, the CLI and the connectors). Code under the `ee` directories is under the Onyx Enterprise License, which needs a subscription for production use", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://cloud.onyx.app/mcp", "packages": [ { "registry": "oci", "name": "docker.io/onyxdotapp/onyx-backend" }, { "registry": "oci", "name": "docker.io/onyxdotapp/onyx-web-server" }, { "registry": "pypi", "name": "onyx-cli" } ], "auth": "mixed", "authNotes": "Every request takes a Bearer token in the `Authorization` header, either a personal access token or an API key. Personal access tokens belong to a user, can be full access or limited to `read:search`, `read:chat`, `write:chat` or `use:llm_gateway`, expire after 7, 30 or 365 days or never, are stored hashed and can be revoked one by one. API keys belong to service accounts, and since v4.7 their rights come from the groups they're put in (none means chat only, Basic adds search, Admin reaches every endpoint). The MCP server checks each token against the API server's /me and passes it through. No OAuth for MCP clients. People sign in to the web app with passwords, Google OAuth, OIDC or SAML.", "pricing": "freemium", "pricingNotes": "The Community Edition is MIT and free to self-host with no seat limit. Onyx Cloud and licensed self-hosting have two plans on onyx.app/pricing. Business is $20 a user a month billed annually, and Enterprise (OIDC and SAML SSO, on-premise and region-specific deployments, white-labelling, an enterprise SLA) is by quote. Single-tenant cloud needs at least 100 licences per the docs. Onyx Cloud has a two-week free trial with no card (checked 2026-10-03).", "priceSummary": "$20 / seat-mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the pricing page or the source (checked 2026-10-03).", "endpoints": [] }, "toolCount": 3, "popularity": { "githubStars": 32300, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-03" }, "docsUrl": "https://docs.onyx.app/deployment/configuration/mcp_server", "llmsTxt": "https://docs.onyx.app/llms.txt", "openapi": "https://docs.onyx.app/developers/api_reference/openapi.json", "capabilities": [ "knowledge.search", "web.search", "web.fetch", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "hosted", "mcp", "openapi", "llms-txt", "python", "cli", "docker", "freemium", "no-card", "enterprise", "commercial-licence", "telemetry-default-on", "status-page" ], "lastRelease": "2026-10-02", "graded": true, "anchor": { "graded": true, "score": 65, "grade": "B", "agentReady": false, "rank": 355, "ranked": true, "rankOf": 1084, "categoryRank": 4, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 77, "maintenance": 77, "payments": 30, "reliability": 69, "schema": 88, "security": 71, "transparency": 63 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-03" }, "negative": -4, "negativeNotes": [ "2026-07-20. GHSA-q62f-rv3h-f822 (critical, CVSS 9.0). Any signed-in user could read, in clear text, other users' live OAuth tokens for per-user MCP servers such as Slack, Atlassian or Notion through GET /api/mcp/servers. Found in an external pentest in May 2026, fixed in 4.0.0 (26 May 2026) and published, so the deduction is reduced, -3 (https://github.com/onyx-dot-app/onyx/security/advisories/GHSA-q62f-rv3h-f822)", "2026-04-29 and 2026-07-20. Three moderate IDOR advisories, other users' chat files downloadable through /chat/file/{file_id} (GHSA-vg3h-35f7-7w6r), other users' chat sessions stoppable through /chat/stop-chat-session (GHSA-rw6w-hp62-gc8w) and curators able to change any user group's membership (GHSA-7f48-vgpj-h95m). Fixed and published, -1 (https://github.com/onyx-dot-app/onyx/security/advisories)" ], "verdict": "MIT Community Edition, MCP server included, run by Docker Compose, Helm or Terraform, with a two-week Cloud trial that needs no card. GHSA-q62f-rv3h-f822 (critical, CVSS 9.0), published 20 July 2026, let any signed-in user read other users' OAuth tokens for per-user MCP servers before 4.0.0.", "bestFor": "Teams that want one permission-aware index over Slack, Drive, Confluence, Jira, GitHub and the rest, self-hosted or air-gapped, with agents searching it through MCP.", "strengths": [ "MIT Community Edition, MCP server included, run by Docker Compose, Helm or Terraform, with a two-week Cloud trial that needs no card", "Three read-only MCP tools in 3,360 characters, whose filters return close matches instead of searching unscoped", "Personal access tokens limited to `read:search`, with 7, 30 or 365-day expiry, hashed storage and revocation one by one", "OpenAPI 3.1 file of 110 operations, llms.txt, Markdown docs and dated release notes with Deployment Changes sections", "A minor release every two to three weeks, 4.3.0 on 6 July to 4.8.0 on 23 September 2026, with patches for older lines" ], "weaknesses": [ "GHSA-q62f-rv3h-f822 (critical, CVSS 9.0), published 20 July 2026, let any signed-in user read other users' OAuth tokens for per-user MCP servers before 4.0.0", "Telemetry is on by default and documented as anonymous, while its events carry user IDs and Enterprise builds send the first user's email domain", "Document search has no result limit or paging, and an unparseable `time_cutoff` is dropped with only a server log line", "The self-hosted MCP server is off by default, takes no OAuth and isn't in the official MCP registry", "The privacy policy and Cloud agreement render only with JavaScript, and there's no security.txt or bug bounty" ], "agentNotes": [ "Get the instance URL from the operator. Cloud is https://cloud.onyx.app/mcp, and a self-hosted server only answers once `MCP_SERVER_ENABLED=true`", "Use a token limited to `read:search`. It covers every MCP tool and nothing else", "Pass `time_cutoff` as a full ISO 8601 timestamp. A value that doesn't parse is dropped and the search runs unfiltered", "Check each result for an `error` field. Failures come back with an empty `results` list, not as tool errors", "Set `skip_query_expansion` to true for exact phrases. It skips an LLM call on every search" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 65 } ], "editorialScores": { "ergonomics": 77, "maintenance": 77, "payments": 30, "reliability": 69, "schema": 88, "security": 71, "transparency": 57 }, "provenanceScore": 69 }, "connect": { "install": "curl -fsSL https://onyx.app/install_onyx.sh | bash", "http": "curl -s -X POST \"${API_BASE_URL}/search\" \\\n -H \"Authorization: Bearer ${API_KEY}\" \\\n -H \"Content-Type: application/json\" \\\n -d '{\"query\": \"What is our parental leave policy?\", \"sources\": [\"confluence\", \"google_drive\"]}'", "claudeCode": "claude mcp add --transport http onyx https://cloud.onyx.app/mcp \\\n --header \"Authorization: Bearer YOUR_ONYX_TOKEN_HERE\"", "config": { "mcpServers": { "onyx": { "headers": { "Authorization": "Bearer ${ONYX_TOKEN}" }, "type": "http", "url": "https://cloud.onyx.app/mcp" } } } }, "letme": { "capability": "https://letme.dev/knowledge.search", "tool": "https://letme.dev/onyx" }, "area": "business", "unitPrices": [ { "item": "Onyx Business", "unit": "seat-month", "usd": 20, "note": "billed annually" } ], "provenance": { "legalEntity": "DanswerAI, Inc.", "domain": "onyx.app", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://onyx.app/legal/cloud", "privacy": "https://onyx.app/legal/privacy-policy", "statusPage": "https://status.onyx.app", "changelog": "https://docs.onyx.app/changelog", "securityTxt": "none", "checked": "2026-10-03", "notes": [ "The LICENSE and the Onyx Enterprise License name DanswerAI, Inc., and the site footer reads Onyx.", "The privacy policy and the Onyx Cloud Subscription Agreement show a last update of 1 July 2025 and load their text with JavaScript, which our reader couldn't see.", "onyx.app/.well-known/security.txt returns 404. SECURITY.md routes reports through GitHub private vulnerability reporting.", "The shared MCP endpoint cloud.onyx.app/mcp is on the vendor's domain. A self-hosted server answers on the operator's own host." ], "score": 69 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/onyx.json", "live": { "slug": "onyx", "probe": { "target": "https://cloud.onyx.app/mcp", "method": "get", "lastAt": "2026-10-15T00:41:58.289669742Z", "lastOk": true, "lastStatus": 401, "lastMs": 294, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 99.97, "p50ms24h": 306, "p95ms24h": 363, "samples24h": 250, "samples30d": 2906, "days": [ { "date": "2026-10-03", "probes": 54, "ok": 54 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 272, "ok": 272 }, { "date": "2026-10-06", "probes": 272, "ok": 272 }, { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 248 }, { "date": "2026-10-15", "probes": 8, "ok": 8 } ] }, "vendorStatus": { "page": "https://status.onyx.app", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-14T21:45:42.586327704Z" }, "versions": [ { "registry": "github", "name": "onyx-dot-app/onyx", "version": "v4.9.1", "released": "2026-10-14", "seenAt": "2026-10-15T00:10:14.767977346Z" }, { "registry": "pypi", "name": "onyx-cli", "version": "1.4.4", "released": "2026-09-13", "seenAt": "2026-10-15T00:10:14.462713842Z" } ], "githubStars": 32460, "pypiWeekly": 933, "securityTxt": { "url": "https://onyx.app/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-14T15:47:39.874280482Z" }, "llmsTxt": { "url": "https://docs.onyx.app/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-14T14:14:39.393360014Z" }, "domain": { "domain": "onyx.app", "registered": "2018-05-04", "source": "https://pubapi.registry.google/rdap/domain/onyx.app", "checkedAt": "2026-10-11T13:18:21.301854486Z" }, "pages": [ { "url": "https://docs.onyx.app/changelog", "kind": "changelog", "status": 304, "checkedAt": "2026-10-14T20:59:04.893431271Z", "changedAt": "2026-10-08T18:19:12.353203571Z", "fingerprint": "903bb0fb92dc" }, { "url": "https://onyx.app/legal/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-14T21:04:02.058440497Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "bd896d976a98" }, { "url": "https://onyx.app/legal/cloud", "kind": "terms", "status": 200, "checkedAt": "2026-10-14T21:03:59.833833392Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0b08a2af7854" } ], "updatedAt": "2026-10-15T00:41:58.289669742Z" } }, "facts": [ { "a": "MCP server", "b": "Platform", "name": "Kind" }, { "a": "Bevelites GmbH (Bevel)", "b": "DanswerAI, Inc. (Onyx, formerly Danswer)", "name": "Vendor" }, { "a": "https://\u003cworkspace\u003e.hexis.software/api/mcp", "b": "https://cloud.onyx.app/mcp", "name": "Hosted endpoint" }, { "a": "Streamable HTTP, stdio", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0 (the Hexis software). Hexis Cloud, the hosted service at hexis.software, is governed by Bevel's Terms of Service of 11 October 2026", "b": "MIT (Community Edition, including the MCP server, the API server, the CLI and the connectors). Code under the `ee` directories is under the Onyx Enterprise License, which needs a subscription for production use", "name": "Licence" }, { "a": "none", "b": "3", "name": "Tools exposed" }, { "a": "yes", "b": "yes", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "io.github.Bevel-Software/hexis", "b": "not listed", "name": "MCP registry" }, { "a": "2026-10-14", "b": "2026-10-02", "name": "Last release" }, { "a": "couldn't be read", "b": "couldn't be read", "name": "Terms last updated" }, { "a": "couldn't be read", "b": "couldn't be read", "name": "Privacy policy last updated" }, { "a": "couldn't be read", "b": "couldn't be read", "name": "Customer content may train models" }, { "a": "couldn't be read", "b": "couldn't be read", "name": "Terms restrict automated access" }, { "a": "couldn't be read", "b": "couldn't be read", "name": "Terms restrict benchmarking" }, { "a": "couldn't be read", "b": "couldn't be read", "name": "Terms or service can change without notice" }, { "a": "couldn't be read", "b": "couldn't be read", "name": "Arbitration or class-action waiver" }, { "a": "114 stars, 900 npm/wk", "b": "32k stars", "name": "Popularity" }, { "a": "none", "b": "3/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "Onyx scores 65 (B) on agent readiness against Hexis Cloud's 55.3 (C), and leads in 4 of 7 scored categories. Hexis Cloud leads on maintenance \u0026 community and transparency \u0026 trust.", "question": "Which is better for AI agents, Hexis Cloud or Onyx?" }, { "answer": "Yes. Hexis Cloud has a hosted endpoint at https://\u003cworkspace\u003e.hexis.software/api/mcp and Onyx at https://cloud.onyx.app/mcp.", "question": "Can an agent call Hexis Cloud and Onyx without installing anything?" }, { "answer": "Yes. Hexis Cloud is open source (Apache-2.0 (the Hexis software). Hexis Cloud, the hosted service at hexis.software, is governed by Bevel's Terms of Service of 11 October 2026). Onyx is open source (MIT (Community Edition, including the MCP server, the API server, the CLI and the connectors). Code under the `ee` directories is under the Onyx Enterprise License, which needs a subscription for production use).", "question": "Are Hexis Cloud and Onyx open source?" } ], "goodFor": [ { "aheadOn": [ "Maintenance \u0026 community, 85 against 77", "Transparency \u0026 trust, 75 against 63" ], "also": [ "Runs on your own machine", "No incidents deducted, where Onyx loses 4 points for them" ], "goodFor": "A team that wants its agent skills, company pages and tool credentials in one git repository, reviewed and access-controlled per file, and reached by any MCP client.", "slug": "hexis", "watchFor": "The terms and security page state no backups, no SLA, no penetration test, no certification and no MFA of its own" }, { "aheadOn": [ "Reliability, 69 against 18", "Schema \u0026 documentation, 88 against 83", "Agent ergonomics, 77 against 57", "Security \u0026 auth, 71 against 64" ], "also": null, "goodFor": "Teams that want one permission-aware index over Slack, Drive, Confluence, Jira, GitHub and the rest, self-hosted or air-gapped, with agents searching it through MCP.", "slug": "onyx", "watchFor": "GHSA-q62f-rv3h-f822 (critical, CVSS 9.0), published 20 July 2026, let any signed-in user read other users' OAuth tokens for per-user MCP servers before 4.0.0" } ], "job": { "capability": "knowledge.search", "name": "Company knowledge search" }, "others": [ { "json": "https://www.anchorterminal.com/compare/alation-vs-hexis.json", "title": "Alation vs Hexis Cloud", "url": "https://www.anchorterminal.com/compare/alation-vs-hexis" }, { "json": "https://www.anchorterminal.com/compare/alation-vs-onyx.json", "title": "Alation vs Onyx", "url": "https://www.anchorterminal.com/compare/alation-vs-onyx" }, { "json": "https://www.anchorterminal.com/compare/atlan-vs-hexis.json", "title": "Atlan vs Hexis Cloud", "url": "https://www.anchorterminal.com/compare/atlan-vs-hexis" }, { "json": "https://www.anchorterminal.com/compare/atlan-vs-onyx.json", "title": "Atlan vs Onyx", "url": "https://www.anchorterminal.com/compare/atlan-vs-onyx" }, { "json": "https://www.anchorterminal.com/compare/cohere-north-vs-hexis.json", "title": "Cohere North vs Hexis Cloud", "url": "https://www.anchorterminal.com/compare/cohere-north-vs-hexis" }, { "json": "https://www.anchorterminal.com/compare/cohere-north-vs-onyx.json", "title": "Cohere North vs Onyx", "url": "https://www.anchorterminal.com/compare/cohere-north-vs-onyx" }, { "json": "https://www.anchorterminal.com/compare/collibra-vs-hexis.json", "title": "Collibra vs Hexis Cloud", "url": "https://www.anchorterminal.com/compare/collibra-vs-hexis" }, { "json": "https://www.anchorterminal.com/compare/collibra-vs-onyx.json", "title": "Collibra vs Onyx", "url": "https://www.anchorterminal.com/compare/collibra-vs-onyx" }, { "json": "https://www.anchorterminal.com/compare/dust-vs-hexis.json", "title": "Dust vs Hexis Cloud", "url": "https://www.anchorterminal.com/compare/dust-vs-hexis" }, { "json": "https://www.anchorterminal.com/compare/dust-vs-onyx.json", "title": "Dust vs Onyx", "url": "https://www.anchorterminal.com/compare/dust-vs-onyx" }, { "json": "https://www.anchorterminal.com/compare/gemini-enterprise-vs-hexis.json", "title": "Gemini Enterprise vs Hexis Cloud", "url": "https://www.anchorterminal.com/compare/gemini-enterprise-vs-hexis" }, { "json": "https://www.anchorterminal.com/compare/gemini-enterprise-vs-onyx.json", "title": "Gemini Enterprise vs Onyx", "url": "https://www.anchorterminal.com/compare/gemini-enterprise-vs-onyx" }, { "json": "https://www.anchorterminal.com/compare/glean-vs-hexis.json", "title": "Glean vs Hexis Cloud", "url": "https://www.anchorterminal.com/compare/glean-vs-hexis" }, { "json": "https://www.anchorterminal.com/compare/glean-vs-onyx.json", "title": "Glean vs Onyx", "url": "https://www.anchorterminal.com/compare/glean-vs-onyx" }, { "json": "https://www.anchorterminal.com/compare/guru-vs-hexis.json", "title": "Guru vs Hexis Cloud", "url": "https://www.anchorterminal.com/compare/guru-vs-hexis" }, { "json": "https://www.anchorterminal.com/compare/guru-vs-onyx.json", "title": "Guru vs Onyx", "url": "https://www.anchorterminal.com/compare/guru-vs-onyx" }, { "json": "https://www.anchorterminal.com/compare/hexis-vs-overclock.json", "title": "Hexis Cloud vs Overclock", "url": "https://www.anchorterminal.com/compare/hexis-vs-overclock" }, { "json": "https://www.anchorterminal.com/compare/hexis-vs-secoda.json", "title": "Hexis Cloud vs Secoda", "url": "https://www.anchorterminal.com/compare/hexis-vs-secoda" }, { "json": "https://www.anchorterminal.com/compare/onyx-vs-overclock.json", "title": "Onyx vs Overclock", "url": "https://www.anchorterminal.com/compare/onyx-vs-overclock" }, { "json": "https://www.anchorterminal.com/compare/onyx-vs-secoda.json", "title": "Onyx vs Secoda", "url": "https://www.anchorterminal.com/compare/onyx-vs-secoda" }, { "json": "https://www.anchorterminal.com/compare/datahub-vs-hexis.json", "title": "DataHub vs Hexis Cloud", "url": "https://www.anchorterminal.com/compare/datahub-vs-hexis" }, { "json": "https://www.anchorterminal.com/compare/hexis-vs-marmot.json", "title": "Hexis Cloud vs Marmot", "url": "https://www.anchorterminal.com/compare/hexis-vs-marmot" }, { "json": "https://www.anchorterminal.com/compare/hexis-vs-openmetadata.json", "title": "Hexis Cloud vs OpenMetadata", "url": "https://www.anchorterminal.com/compare/hexis-vs-openmetadata" } ], "scores": [ { "by": 51, "edge": "onyx", "hexis": 18, "key": "reliability", "name": "Reliability", "onyx": 69, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 5, "edge": "onyx", "hexis": 83, "key": "schema", "name": "Schema \u0026 documentation", "onyx": 88, "weight": 13 }, { "by": 20, "edge": "onyx", "hexis": 57, "key": "ergonomics", "name": "Agent ergonomics", "onyx": 77, "weight": 13 }, { "by": 7, "edge": "onyx", "hexis": 64, "key": "security", "name": "Security \u0026 auth", "onyx": 71, "weight": 14 }, { "by": 0, "edge": "", "hexis": 30, "key": "payments", "name": "Payments \u0026 pricing", "onyx": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 8, "edge": "hexis", "hexis": 85, "key": "maintenance", "name": "Maintenance \u0026 community", "onyx": 77, "weight": 7 }, { "by": 12, "edge": "hexis", "hexis": 75, "key": "transparency", "name": "Transparency \u0026 trust", "onyx": 63, "weight": 7 } ], "summary": "Onyx scores 65 (B) on agent readiness against Hexis Cloud's 55.3 (C), and leads in 4 of 7 scored categories. Hexis Cloud leads on maintenance \u0026 community and transparency \u0026 trust. Both do company knowledge search.", "verdicts": { "hexis": "Agents reach a git-backed knowledge base, shared skills and connected tools through one OAuth MCP endpoint that applies each person's per-file permissions, with read-only connections and an audit log of tool calls. The hosted edition dates from 11 October 2026, and its own terms state no backups, no uptime commitment and no security certification.", "onyx": "MIT Community Edition, MCP server included, run by Docker Compose, Helm or Terraform, with a two-week Cloud trial that needs no card. GHSA-q62f-rv3h-f822 (critical, CVSS 9.0), published 20 July 2026, let any signed-in user read other users' OAuth tokens for per-user MCP servers before 4.0.0." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/hexis-vs-onyx", "json": "https://www.anchorterminal.com/compare/hexis-vs-onyx.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/hexis-vs-onyx.md", "slim": "https://www.anchorterminal.com/compare/hexis-vs-onyx.min.md" }, "markdown": "Onyx scores 65 (B) on agent readiness against Hexis Cloud's 55.3 (C), and leads in 4 of 7 scored categories. Hexis Cloud leads on maintenance \u0026 community and transparency \u0026 trust. Both do company knowledge search.\n\n- Hexis Cloud: grade C, 55.3/100, rank #705 of 1084. Markdown https://www.anchorterminal.com/tools/hexis.md · JSON https://www.anchorterminal.com/api/v1/tools/hexis.json\n- Onyx: grade B, 65/100, rank #355 of 1084. Markdown https://www.anchorterminal.com/tools/onyx.md · JSON https://www.anchorterminal.com/api/v1/tools/onyx.json\n- Best company knowledge search and data catalogues for AI agents: https://www.anchorterminal.com/best/company-knowledge/index.md\n- All 87 knowledge comparisons: https://www.anchorterminal.com/compare/company-knowledge/index.md\n\n## Which one, for what\n\n### Hexis Cloud (C)\n\nGood for: A team that wants its agent skills, company pages and tool credentials in one git repository, reviewed and access-controlled per file, and reached by any MCP client.\n\nAhead on:\n- Maintenance \u0026 community, 85 against 77\n- Transparency \u0026 trust, 75 against 63\n\nAlso in its favour:\n- Runs on your own machine\n- No incidents deducted, where Onyx loses 4 points for them\n\nWatch for: The terms and security page state no backups, no SLA, no penetration test, no certification and no MFA of its own\n\n### Onyx (B)\n\nGood for: Teams that want one permission-aware index over Slack, Drive, Confluence, Jira, GitHub and the rest, self-hosted or air-gapped, with agents searching it through MCP.\n\nAhead on:\n- Reliability, 69 against 18\n- Schema \u0026 documentation, 88 against 83\n- Agent ergonomics, 77 against 57\n- Security \u0026 auth, 71 against 64\n\nWatch for: GHSA-q62f-rv3h-f822 (critical, CVSS 9.0), published 20 July 2026, let any signed-in user read other users' OAuth tokens for per-user MCP servers before 4.0.0\n\n\n## Score by category\n\n| Category | Weight | Hexis Cloud | Onyx | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 18 | 69 | Onyx +51 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 83 | 88 | Onyx +5 |\n| Agent ergonomics | 13% (16.2 this run) | 57 | 77 | Onyx +20 |\n| Security \u0026 auth | 14% (17.5 this run) | 64 | 71 | Onyx +7 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 30 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 85 | 77 | Hexis Cloud +8 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 75 | 63 | Hexis Cloud +12 |\n| Negative events | ≤15 | 0 | -4 | |\n| **Total** | | **55.3 · C** | **65 · B** | |\n\n## Facts side by side\n\n| Fact | Hexis Cloud | Onyx |\n| --- | --- | --- |\n| Kind | MCP server | Platform |\n| Vendor | Bevelites GmbH (Bevel) | DanswerAI, Inc. (Onyx, formerly Danswer) |\n| Hosted endpoint | `https://\u003cworkspace\u003e.hexis.software/api/mcp` | `https://cloud.onyx.app/mcp` |\n| Transports | Streamable HTTP, stdio | HTTP, Streamable HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | Apache-2.0 (the Hexis software). Hexis Cloud, the hosted service at hexis.software, is governed by Bevel's Terms of Service of 11 October 2026 | MIT (Community Edition, including the MCP server, the API server, the CLI and the connectors). Code under the `ee` directories is under the Onyx Enterprise License, which needs a subscription for production use |\n| Tools exposed | none | 3 |\n| Read-only variant documented | yes | yes |\n| llms.txt | no | yes |\n| MCP registry | `io.github.Bevel-Software/hexis` | not listed |\n| Last release | 2026-10-14 | 2026-10-02 |\n| Terms last updated | couldn't be read | couldn't be read |\n| Privacy policy last updated | couldn't be read | couldn't be read |\n| Customer content may train models | couldn't be read | couldn't be read |\n| Terms restrict automated access | couldn't be read | couldn't be read |\n| Terms restrict benchmarking | couldn't be read | couldn't be read |\n| Terms or service can change without notice | couldn't be read | couldn't be read |\n| Arbitration or class-action waiver | couldn't be read | couldn't be read |\n| Popularity | 114 stars, 900 npm/wk | 32k stars |\n| Agent reviews | none | 3/5 (2) |\n\n## Verdicts\n\n**Hexis Cloud.** Agents reach a git-backed knowledge base, shared skills and connected tools through one OAuth MCP endpoint that applies each person's per-file permissions, with read-only connections and an audit log of tool calls. The hosted edition dates from 11 October 2026, and its own terms state no backups, no uptime commitment and no security certification.\n\n**Onyx.** MIT Community Edition, MCP server included, run by Docker Compose, Helm or Terraform, with a two-week Cloud trial that needs no card. GHSA-q62f-rv3h-f822 (critical, CVSS 9.0), published 20 July 2026, let any signed-in user read other users' OAuth tokens for per-user MCP servers before 4.0.0.\n\n## Before you call either\n\n### Hexis Cloud\n\n1. Ask the person for a read-only connection when the task only reads. It answers canWrite false everywhere\n2. Pass the branch you are working on to every knowledge-base tool. Calls without a required branch are refused\n3. Check canWrite from list_files, read_file or get_skill before writing, and open a change request when it is false\n4. Use list_tools and tools_info before call_tool_chain, and never ask the person for a tool's secret in chat\n5. Keep your own copy of anything important. Hexis Cloud keeps no backups of Managed repositories\n\n### Onyx\n\n1. Get the instance URL from the operator. Cloud is https://cloud.onyx.app/mcp, and a self-hosted server only answers once `MCP_SERVER_ENABLED=true`\n2. Use a token limited to `read:search`. It covers every MCP tool and nothing else\n3. Pass `time_cutoff` as a full ISO 8601 timestamp. A value that doesn't parse is dropped and the search runs unfiltered\n4. Check each result for an `error` field. Failures come back with an empty `results` list, not as tool errors\n5. Set `skip_query_expansion` to true for exact phrases. It skips an LLM call on every search\n\n## Questions\n\n### Which is better for AI agents, Hexis Cloud or Onyx?\n\nOnyx scores 65 (B) on agent readiness against Hexis Cloud's 55.3 (C), and leads in 4 of 7 scored categories. Hexis Cloud leads on maintenance \u0026 community and transparency \u0026 trust.\n\n### Can an agent call Hexis Cloud and Onyx without installing anything?\n\nYes. Hexis Cloud has a hosted endpoint at https://\u003cworkspace\u003e.hexis.software/api/mcp and Onyx at https://cloud.onyx.app/mcp.\n\n### Are Hexis Cloud and Onyx open source?\n\nYes. Hexis Cloud is open source (Apache-2.0 (the Hexis software). Hexis Cloud, the hosted service at hexis.software, is governed by Bevel's Terms of Service of 11 October 2026). Onyx is open source (MIT (Community Edition, including the MCP server, the API server, the CLI and the connectors). Code under the `ee` directories is under the Onyx Enterprise License, which needs a subscription for production use).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/hexis-vs-onyx.json, and with the fewest tokens: https://www.anchorterminal.com/compare/hexis-vs-onyx.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"hexis\", \"b\": \"onyx\"}`. From a terminal: `anchor compare hexis onyx`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/hexis.json and https://www.anchorterminal.com/api/v1/tools/onyx.json\n\n## Other comparisons with Hexis Cloud or Onyx\n\n- [Alation vs Hexis Cloud](https://www.anchorterminal.com/compare/alation-vs-hexis.md)\n- [Alation vs Onyx](https://www.anchorterminal.com/compare/alation-vs-onyx.md)\n- [Atlan vs Hexis Cloud](https://www.anchorterminal.com/compare/atlan-vs-hexis.md)\n- [Atlan vs Onyx](https://www.anchorterminal.com/compare/atlan-vs-onyx.md)\n- [Cohere North vs Hexis Cloud](https://www.anchorterminal.com/compare/cohere-north-vs-hexis.md)\n- [Cohere North vs Onyx](https://www.anchorterminal.com/compare/cohere-north-vs-onyx.md)\n- [Collibra vs Hexis Cloud](https://www.anchorterminal.com/compare/collibra-vs-hexis.md)\n- [Collibra vs Onyx](https://www.anchorterminal.com/compare/collibra-vs-onyx.md)\n- [Dust vs Hexis Cloud](https://www.anchorterminal.com/compare/dust-vs-hexis.md)\n- [Dust vs Onyx](https://www.anchorterminal.com/compare/dust-vs-onyx.md)\n- [Gemini Enterprise vs Hexis Cloud](https://www.anchorterminal.com/compare/gemini-enterprise-vs-hexis.md)\n- [Gemini Enterprise vs Onyx](https://www.anchorterminal.com/compare/gemini-enterprise-vs-onyx.md)\n- [Glean vs Hexis Cloud](https://www.anchorterminal.com/compare/glean-vs-hexis.md)\n- [Glean vs Onyx](https://www.anchorterminal.com/compare/glean-vs-onyx.md)\n- [Guru vs Hexis Cloud](https://www.anchorterminal.com/compare/guru-vs-hexis.md)\n- [Guru vs Onyx](https://www.anchorterminal.com/compare/guru-vs-onyx.md)\n- [Hexis Cloud vs Overclock](https://www.anchorterminal.com/compare/hexis-vs-overclock.md)\n- [Hexis Cloud vs Secoda](https://www.anchorterminal.com/compare/hexis-vs-secoda.md)\n- [Onyx vs Overclock](https://www.anchorterminal.com/compare/onyx-vs-overclock.md)\n- [Onyx vs Secoda](https://www.anchorterminal.com/compare/onyx-vs-secoda.md)\n- [DataHub vs Hexis Cloud](https://www.anchorterminal.com/compare/datahub-vs-hexis.md)\n- [Hexis Cloud vs Marmot](https://www.anchorterminal.com/compare/hexis-vs-marmot.md)\n- [Hexis Cloud vs OpenMetadata](https://www.anchorterminal.com/compare/hexis-vs-openmetadata.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-15", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Hexis Cloud vs Onyx", "url": "" } ], "description": "Onyx scores 65 (B) to Hexis Cloud's 55.3 (C) for company knowledge search. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Hexis Cloud C 55.3", "Onyx B 65", "scores" ], "h1": "Hexis Cloud vs Onyx", "image": "https://www.anchorterminal.com/assets/og/compare-hexis-vs-onyx.png", "path": "/compare/hexis-vs-onyx", "published": "2026-10-01", "section": "tools", "title": "Hexis Cloud vs Onyx for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-14", "url": "https://www.anchorterminal.com/compare/hexis-vs-onyx" }, "tokens": { "markdown": 2550, "slim": 730 }, "version": 1 }