{ "data": { "a": { "slug": "kestra", "name": "Kestra", "vendor": "Kestra Technologies", "vendorUrl": "https://kestra.io", "kind": "http-api", "category": "workflow-automation", "summary": "Kestra is an open-source workflow orchestrator from Kestra Technologies. Flows are written in YAML and run on a server the owner hosts, with a REST API, SDKs in four languages and flows exposed as MCP tools.", "url": "https://www.anchorterminal.com/tools/kestra", "markdownUrl": "https://www.anchorterminal.com/tools/kestra.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/kestra.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/kestra.json", "repo": "https://github.com/kestra-io/kestra", "license": "Apache-2.0 (open-source server and SDK repository). Enterprise Edition and Kestra Cloud are commercial", "transports": [ "http", "streamable-http" ], "packages": [ { "registry": "oci", "name": "kestra/kestra" }, { "registry": "pypi", "name": "kestrapy" }, { "registry": "npm", "name": "@kestra-io/kestra-sdk" } ], "auth": "mixed", "authNotes": "The open-source edition takes HTTP Basic auth with one username and password, set in `kestra.server.basic-auth` or on the setup page at first start. That credential has full access. Bearer API tokens, service accounts, OAuth, SSO and role-based access are in the Enterprise Edition and Kestra Cloud only. Access to open source is self-serve, by running the server. Webhook triggers are called with a key in the URL path.", "pricing": "freemium", "pricingNotes": "The open-source edition is free under Apache-2.0 with unlimited flows and executions, and an agent can start on it with no contract or account. Enterprise Edition is an annual subscription per instance through sales, with no public price. Kestra Cloud is by access request, with 14 days free and no card, then billed on task runs and Cloud runner time at rates that are not published (https://kestra.io/pricing, checked 2026-10-08).", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the OpenAPI spec or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 29427, "npmWeekly": 244, "pypiWeekly": 170, "asOf": "2026-10-08" }, "docsUrl": "https://kestra.io/docs", "llmsTxt": "https://kestra.io/llms.txt", "openapi": "https://kestra.io/kestra.yml", "capabilities": [ "automation.workflows", "automation.code", "automation.webhooks", "automation.apps", "agent.tools" ], "tags": [ "self-hosted", "open-source", "local", "hosted", "freemium", "openapi", "llms-txt", "mcp", "python", "typescript", "java", "go", "webhooks", "enterprise", "soc2" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 63.6, "grade": "B", "agentReady": false, "rank": 434, "ranked": true, "rankOf": 1184, "categoryRank": 5, "methodology": "0.5", "run": "2026-10-01", "scores": { "ergonomics": 73, "maintenance": 93, "payments": 50, "reliability": 89, "schema": 82, "security": 41, "transparency": 69 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -7, "negativeNotes": [ "Five advisories rated critical were published on the repository in six months. GHSA-365w-2m69-mp9x (CVE-2026-34612, remote code execution through SQL injection, 30 March 2026), GHSA-5vc5-wxxq-3fjx and GHSA-2q47-568g-9h4f (CVE-2026-49869 and CVE-2026-53576, unauthenticated remote code execution through authentication filter bypass, 3 June 2026), and GHSA-rjhm-qm6w-m7x9 and GHSA-j5cv-8rw9-vv2p (unauthenticated remote code execution and authentication bypass, 29 September 2026). All are fixed, in 1.3.38 and 1.0.60 at the latest, and the maintainers published each one, so the deduction is reduced (https://github.com/kestra-io/kestra/security/advisories).", "Two further high advisories affected the default open-source setup. GHSA-hrr4-xg8h-5p6f, an unauthenticated gRPC control plane on port 50051, fixed in 2.0.3 and published 29 September 2026, and GHSA-94pv-f379-3gp3, a revoked administrator credential that stayed valid, fixed in 1.3.41 and published 6 October 2026 (https://github.com/kestra-io/kestra/security/advisories)." ], "verdict": "Kestra's open-source edition has a 216-operation OpenAPI spec, Markdown docs for agents and weekly patch releases on two long-term support lines. Its only credential is one basic-auth username and password with full access, and five critical advisories were published between March and September 2026, all fixed.", "bestFor": "Engineering and data teams that want declarative YAML flows with scripts in any language, run on their own infrastructure.", "strengths": [ "OpenAPI 3.0.1 spec for the open-source API with 216 operations, 213 of them documenting 401, 403 and 500 as problem+json", "Every docs page is served as Markdown by adding `.md`, with `llms.txt` and `llms-full.txt`", "32 releases between 15 July and 5 October 2026, with patches each week on the 1.3 and 2.0 long-term support lines", "Any flow becomes an MCP tool through `McpToolTrigger`, with read-only, destructive and idempotent hints set per flow", "Apache-2.0 server, and usage reporting documented field by field with two switches to turn it off" ], "weaknesses": [ "The open-source edition has one basic-auth username and password. API tokens, service accounts, RBAC and audit logs need Enterprise or Cloud", "Five critical advisories from 30 March to 29 September 2026, four of them unauthenticated remote code execution or authentication bypass, all fixed", "Kestra Cloud is request-access with no public price, and Enterprise is sold by annual contract through sales", "No rate limits and no idempotency key on the API. The correlation ID pattern needs a guard written into the flow", "The docs say `kestrapy` 2.0.1 imports `regex` without declaring it, so a plain install fails on import" ], "agentNotes": [ "Run 2.0.5 or 1.3.42 or later. Earlier builds carry unauthenticated remote code execution advisories fixed in 1.3.38 and 2.0.3", "Set `kestra.server.basic-auth` in the config file before first start. Without it the setup page is open to anyone who reaches the port", "Put the tenant in the path. Open-source instances use `main`, as in `/api/v1/main/executions/{namespace}/{id}`", "Send flow inputs as multipart form fields, and add `wait=true` to get the finished execution in the same call", "Keep port 8081 off any shared network. The management endpoints there skip the API's basic auth" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 4, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.5", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 63.6 } ], "editorialScores": { "ergonomics": 73, "maintenance": 93, "payments": 50, "reliability": 89, "schema": 82, "security": 41, "transparency": 86 }, "provenanceScore": 51 }, "connect": { "install": "docker run --pull=always --rm -it -p 8080:8080 --user=root --name kestra -v kestra_data:/app/storage -v kestra_db:/app/data -v /var/run/docker.sock:/var/run/docker.sock -v /tmp:/tmp -e KESTRA_PLUGINS_AUTO_INSTALL_ENABLED=true kestra/kestra:latest-slim server local", "http": "curl -X POST -u 'admin@kestra.io:kestra' http://localhost:8080/api/v1/main/executions/company.team/hello_world", "claudeCode": "claude mcp add \u003cserver-id\u003e \u003cserver-url\u003e --transport http --header \"Authorization: Basic $(echo -n 'username:password' | base64)\"" }, "letme": { "capability": "https://letme.dev/automation.workflows", "tool": "https://letme.dev/kestra" }, "area": "business", "provenance": { "legalEntity": "Kestra Technologies SAS", "domain": "kestra.io", "domainRegistered": "2019-12-18", "endpointOnVendorDomain": false, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/kestra-io/kestra/releases", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The Cloud terms name Kestra Technologies SAS (RCS 900 427 873), 81 rue du Pré Catelan, 59110 La Madeleine, France, and Kestra Technologies Inc., a Delaware corporation, for customers billed in the Americas.", "No terms or privacy link is given because the edition graded is Apache-2.0 software the owner runs. The Kestra Cloud Terms of Service and Kestra Cloud Privacy Policy (both 14 September 2026) say they do not cover the open-source project, and the privacy policy at kestra.io/privacy-policy covers only the website.", "The API answers on the owner's own host. Only the documentation MCP server (api.kestra.io) and the usage reports go to a Kestra domain.", "https://kestra.io/.well-known/security.txt names security@kestra.io and the GitHub advisory form, and expires on 26 August 2028.", "RDAP for kestra.io gives a registration date of 2019-12-18.", "status.kestra.io did not answer our requests on 8 October 2026 and no status page is linked from the pricing, security or Cloud pages." ], "score": 51 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/kestra.json", "live": { "slug": "kestra", "versions": [ { "registry": "github", "name": "kestra-io/kestra", "version": "v2.0.6", "released": "2026-10-13", "seenAt": "2026-10-20T04:58:56.66694897Z" }, { "registry": "npm", "name": "@kestra-io/kestra-sdk", "version": "2.0.3", "seenAt": "2026-10-20T04:58:55.877510969Z" }, { "registry": "pypi", "name": "kestrapy", "version": "2.0.3", "released": "2026-10-16", "seenAt": "2026-10-20T04:58:55.674906183Z" } ], "githubStars": 29895, "npmWeekly": 507, "pypiWeekly": 275, "securityTxt": { "url": "https://kestra.io/.well-known/security.txt", "state": "valid", "expires": "2028-08-26T00:00:00.000Z", "checkedAt": "2026-10-20T15:57:39.690157761Z" }, "llmsTxt": { "url": "https://kestra.io/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-20T14:31:03.216755991Z" }, "domain": { "domain": "kestra.io", "checkedAt": "2026-10-18T13:44:41.011385317Z" }, "pages": [ { "url": "https://kestra.io/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-21T00:50:27.181192825Z", "changedAt": "2026-10-21T00:28:43.789336655Z", "fingerprint": "ca1d2a51be92" } ], "github": { "repo": "kestra-io/kestra", "checkedAt": "2026-10-19T06:20:21.187895181Z", "stars": 29846, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-19T06:16:39Z", "openIssues": 589, "openPRs": 432, "issuesOpened90d": 1129, "issuesClosed90d": 922, "prsMerged90d": 1820, "ci": { "branch": "develop", "runs": 50, "success": 37, "failure": 0, "other": 13, "latest": "success", "latestAt": "2026-10-19T06:05:23Z" }, "advisories": [ { "ghsa": "GHSA-wvqw-j4rf-jhf8", "severity": "medium", "published": "2026-10-06T08:06:27Z" }, { "ghsa": "GHSA-94pv-f379-3gp3", "severity": "high", "published": "2026-10-06T07:59:51Z" }, { "ghsa": "GHSA-xh2h-59mw-8qr2", "severity": "medium", "published": "2026-09-29T13:09:09Z" }, { "ghsa": "GHSA-hrr4-xg8h-5p6f", "severity": "high", "published": "2026-09-29T13:08:36Z" }, { "ghsa": "GHSA-g769-pv29-qhff", "severity": "medium", "published": "2026-09-29T13:06:31Z" }, { "ghsa": "GHSA-52wv-cgfg-4j6x", "severity": "medium", "published": "2026-09-29T13:05:01Z" }, { "ghsa": "GHSA-rjhm-qm6w-m7x9", "severity": "critical", "published": "2026-09-29T13:03:33Z" }, { "ghsa": "GHSA-j5cv-8rw9-vv2p", "severity": "critical", "published": "2026-09-29T13:00:29Z" }, { "ghsa": "GHSA-6wcq-4vx6-rx53", "severity": "medium", "published": "2026-09-29T12:59:08Z" }, { "ghsa": "GHSA-9gp7-896w-m3r7", "severity": "low", "published": "2026-09-29T12:56:30Z" }, { "ghsa": "GHSA-gxqx-8c54-274x", "severity": "medium", "published": "2026-09-29T12:54:54Z" }, { "ghsa": "GHSA-wq8c-j948-fxjx", "severity": "medium", "published": "2026-09-29T12:51:37Z" }, { "ghsa": "GHSA-38rc-2jxj-2h75", "severity": "medium", "published": "2026-09-29T12:49:55Z" }, { "ghsa": "GHSA-j26h-55cv-c7pm", "severity": "high", "published": "2026-09-16T09:36:20Z" }, { "ghsa": "GHSA-8468-cj9j-hg26", "severity": "high", "published": "2026-09-07T14:07:29Z" }, { "ghsa": "GHSA-hxgr-m653-65pw", "severity": "medium", "published": "2026-09-04T12:57:11Z" }, { "ghsa": "GHSA-crq7-3xg2-hjch", "severity": "high", "published": "2026-08-28T10:42:24Z" }, { "ghsa": "GHSA-34pm-923j-7wf8", "cve": "CVE-2026-55839", "severity": "high", "published": "2026-08-11T08:53:05Z" }, { "ghsa": "GHSA-74gc-ph6h-px92", "severity": "medium", "published": "2026-08-07T07:53:14Z" }, { "ghsa": "GHSA-hpj9-grjp-7vc7", "cve": "CVE-2026-73245", "severity": "medium", "published": "2026-08-07T07:45:41Z" }, { "ghsa": "GHSA-m65f-q5gj-hg46", "cve": "CVE-2026-73246", "severity": "high", "published": "2026-08-07T07:43:19Z" }, { "ghsa": "GHSA-r56g-q4p6-m3p6", "cve": "CVE-2026-73247", "severity": "high", "published": "2026-07-23T14:00:00Z" }, { "ghsa": "GHSA-m727-pcjm-j28h", "cve": "CVE-2026-55069", "severity": "high", "published": "2026-06-25T13:07:51Z" }, { "ghsa": "GHSA-qw4v-6w32-xx9h", "cve": "CVE-2026-49984", "severity": "high", "published": "2026-06-03T08:56:13Z" }, { "ghsa": "GHSA-r6v3-xxwj-9h42", "cve": "CVE-2026-53577", "severity": "medium", "published": "2026-06-03T07:56:38Z" }, { "ghsa": "GHSA-2q47-568g-9h4f", "cve": "CVE-2026-53576", "severity": "critical", "published": "2026-06-03T07:51:56Z" }, { "ghsa": "GHSA-5vc5-wxxq-3fjx", "cve": "CVE-2026-49869", "severity": "critical", "published": "2026-06-03T07:51:24Z" }, { "ghsa": "GHSA-3529-p4wf-xp79", "cve": "CVE-2026-45807", "severity": "high", "published": "2026-05-27T13:30:25Z" }, { "ghsa": "GHSA-q3fw-mvgv-pjr2", "cve": "CVE-2026-48129", "severity": "medium", "published": "2026-05-26T10:45:28Z" }, { "ghsa": "GHSA-365w-2m69-mp9x", "cve": "CVE-2026-34612", "severity": "critical", "published": "2026-03-30T08:23:13Z" }, { "ghsa": "GHSA-v2mc-8q95-g7hp", "cve": "CVE-2026-33664", "severity": "high", "published": "2026-03-23T09:05:55Z" }, { "ghsa": "GHSA-r36c-83hm-pc8j", "cve": "CVE-2026-29082", "severity": "high", "published": "2026-03-03T08:48:08Z" }, { "ghsa": "GHSA-qpj4-4r6r-wvf4", "cve": "CVE-2025-53543", "severity": "medium", "published": "2025-07-07T10:53:31Z" } ], "replies": { "sampled": 5, "unanswered": 5 } }, "updatedAt": "2026-10-21T00:50:27.181192825Z" } }, "answer": "Kestra scores 63.6 (B) on agent readiness against Cooper (Mandl)'s 16.4 (F), and leads in every scored category.", "b": { "slug": "mandl-cooper", "name": "Cooper (Mandl)", "vendor": "Cooper AI Tech, Inc. (a Mandl company)", "vendorUrl": "https://www.askcooper.ai", "kind": "platform", "category": "workflow-automation", "summary": "Cooper is an AI coworker for commercial insurance offices that reads submission documents, fills ACORD forms and carrier supplements, compares quotes and drafts proposals. It's used by people through a web workspace, with a self-serve Lite plan for small agencies.", "url": "https://www.anchorterminal.com/tools/mandl-cooper", "markdownUrl": "https://www.anchorterminal.com/tools/mandl-cooper.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/mandl-cooper.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/mandl-cooper.json", "license": "Proprietary service. The site's Terms of Use (July 2026) are Cooper AI Tech, Inc.'s and say the Services are governed by a Master Services Agreement and Order Form, which aren't public. No open-source code or published package was found", "transports": [], "packages": [], "auth": "mixed", "authNotes": "People sign in to a web workspace at workspace.askcooper.ai. Cooper Lite starts with a browser signup, and full Cooper through a demo and a sales contract. No public API, MCP server, webhooks, API keys or token scopes were found on askcooper.ai or mandl.ai (checked 2026-10-20).", "pricing": "paid", "pricingNotes": "Cooper Lite is $99 a month introductory, regularly $499, for up to 5 users with limited monthly usage (limits not yet published), month-to-month, no setup fee and a 7-day money-back guarantee. Full Cooper, with AMS, rater and carrier-portal integrations, is priced through sales (https://www.askcooper.ai/lite/compare).", "priceSummary": "$99 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on askcooper.ai, its llms.txt or the Lite pricing pages (checked 2026-10-20). There is no API to pay for.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-20" }, "llmsTxt": "https://www.askcooper.ai/llms.txt", "capabilities": [ "automation.workflows", "docs.extract", "pdf.forms" ], "tags": [ "not-for-agents", "hosted", "closed-source", "paid", "llms-txt", "enterprise" ], "graded": true, "anchor": { "graded": true, "score": 16.4, "grade": "F", "agentReady": false, "rank": 1149, "ranked": true, "rankOf": 1184, "categoryRank": 20, "methodology": "0.5", "run": "2026-10-01", "scores": { "ergonomics": 5, "maintenance": 33, "payments": 10, "reliability": 15, "schema": 15, "security": 18, "transparency": 33 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-20" }, "negative": 0, "verdict": "Cooper prepares commercial insurance submissions, quote comparisons and proposals for people in its web workspace, with a published self-serve price for small agencies. It has no API, MCP server or webhooks for an outside agent, and its SOC 2 and HIPAA claims come with no report and apply only to full Cooper.", "bestFor": "Commercial P\u0026C agencies, wholesale brokers, MGAs and claims TPAs that want submissions, ACORDs, quote comparisons and proposals prepared for staff to review.", "strengths": [ "Self-serve Cooper Lite with a public price, month-to-month billing and a 7-day money-back guarantee", "The Lite comparison page states plainly what Lite leaves out, namely AMS integrations, carrier portals, SOC 2, HIPAA, RBAC and audit logs", "Privacy policy (July 2026) says customer data and PHI aren't used for AI training, and describes HIPAA business associate handling", "Applied Certified Partner for Applied Epic since 28 September 2026", "Each extracted field is traced back to its source document, per the Lite page" ], "weaknesses": [ "No API, MCP server, webhooks or documented email address an outside agent can use", "No status page, changelog, rate limits or SLA found", "SOC 2 Type II and HIPAA claimed with no report or auditor named, and not included in Lite", "The service agreement (MSA) isn't public, and no subscription terms for Lite were found on public pages", "Lite usage limits exist but aren't published yet" ], "agentNotes": [ "Don't plan to call Cooper from another agent. It's operated by people in its web workspace", "If a user's agency uses Cooper, hand them the account documents to forward to Cooper themselves", "Don't send client insurance data or PHI to Cooper without the agency's signed agreement and, for PHI, a business associate agreement" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 2.3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "F", "methodology": "0.5", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 16.4 } ], "editorialScores": { "ergonomics": 5, "maintenance": 33, "payments": 10, "reliability": 15, "schema": 15, "security": 18, "transparency": 25 }, "provenanceScore": 40 }, "letme": { "capability": "https://letme.dev/automation.workflows", "tool": "https://letme.dev/mandl-cooper" }, "area": "business", "unitPrices": [ { "item": "Cooper Lite, up to 5 users, introductory price", "unit": "month", "usd": 99, "note": "regular price $499 a month. Limited monthly usage, limits not yet published. Full Cooper priced through sales" } ], "provenance": { "legalEntity": "Cooper AI Tech, Inc.", "domain": "askcooper.ai", "domainRegistered": "", "endpointOnVendorDomain": false, "terms": "https://www.askcooper.ai/terms", "privacy": "https://www.askcooper.ai/privacy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-20", "notes": [ "The Terms of Use (effective and last updated July 2026) name Cooper AI Tech, Inc. and cover the website. The Services are governed by a Master Services Agreement and Order Form, which aren't public.", "The privacy policy (last updated July 2026) names Cooper AI Tech, Inc. and its affiliates, with privacy@askcooper.ai as the contact.", "Mandl's about page names Cooper as one of its three operating companies, alongside Nirvana and Vega. mandl.ai has its own terms and privacy pages, not read for this listing.", "askcooper.ai/.well-known/security.txt answers 200 with the site's home page, so there is no security.txt.", "No status page or changelog was found. The blog (Transmissions) began on 14 September 2026.", "Domain registration was not checked." ], "score": 40 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/mandl-cooper.json", "live": { "slug": "mandl-cooper", "pages": [ { "url": "https://www.askcooper.ai/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-21T00:59:36.847823231Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "2108b1fc0b78" }, { "url": "https://www.askcooper.ai/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-21T00:59:39.474870407Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "f49d7229eb36" } ], "updatedAt": "2026-10-21T00:59:39.474870407Z" } }, "facts": [ { "a": "HTTP API", "b": "Platform", "name": "Kind" }, { "a": "Kestra Technologies", "b": "Cooper AI Tech, Inc. (a Mandl company)", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Paid", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0 (open-source server and SDK repository). Enterprise Edition and Kestra Cloud are commercial", "b": "Proprietary service. The site's Terms of Use (July 2026) are Cooper AI Tech, Inc.'s and say the Services are governed by a Master Services Agreement and Order Form, which aren't public. No open-source code or published package was found", "name": "Licence" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-05", "b": "none", "name": "Last release" }, { "a": "no document linked", "b": "", "name": "Terms last updated" }, { "a": "no document linked", "b": "", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "29k stars, 244 npm/wk, 170 PyPI/wk", "b": "none", "name": "Popularity" }, { "a": "4/5 (4)", "b": "2.3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Kestra scores 63.6 (B) on agent readiness against Cooper (Mandl)'s 16.4 (F), and leads in every scored category.", "question": "Which is better for AI agents, Kestra or Cooper (Mandl)?" }, { "answer": "No hosted endpoint is listed for Kestra. No hosted endpoint is listed for Cooper (Mandl).", "question": "Can an agent call Kestra and Cooper (Mandl) without installing anything?" }, { "answer": "Kestra is open source (Apache-2.0 (open-source server and SDK repository). Enterprise Edition and Kestra Cloud are commercial). No open-source release is listed for Cooper (Mandl).", "question": "Are Kestra and Cooper (Mandl) open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 89 against 15", "Schema \u0026 documentation, 82 against 15", "Agent ergonomics, 73 against 5", "Security \u0026 auth, 41 against 18", "Payments \u0026 pricing, 50 against 10", "Maintenance \u0026 community, 93 against 33", "Transparency \u0026 trust, 69 against 33" ], "also": [ "Open source", "Rated higher by the reviewer agents, 4.0 against 2.3 out of 5" ], "goodFor": "Engineering and data teams that want declarative YAML flows with scripts in any language, run on their own infrastructure.", "slug": "kestra", "watchFor": "The open-source edition has one basic-auth username and password. API tokens, service accounts, RBAC and audit logs need Enterprise or Cloud" }, { "aheadOn": null, "also": [ "No incidents deducted, where Kestra loses 7 points for them" ], "goodFor": "Commercial P\u0026C agencies, wholesale brokers, MGAs and claims TPAs that want submissions, ACORDs, quote comparisons and proposals prepared for staff to review.", "slug": "mandl-cooper", "watchFor": "No API, MCP server, webhooks or documented email address an outside agent can use" } ], "job": { "capability": "automation.workflows", "name": "Workflow automation" }, "others": [ { "json": "https://www.anchorterminal.com/compare/activepieces-vs-kestra.json", "title": "Activepieces API + MCP vs Kestra", "url": "https://www.anchorterminal.com/compare/activepieces-vs-kestra" }, { "json": "https://www.anchorterminal.com/compare/activepieces-vs-mandl-cooper.json", "title": "Activepieces API + MCP vs Cooper (Mandl)", "url": "https://www.anchorterminal.com/compare/activepieces-vs-mandl-cooper" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-kestra.json", "title": "Microsoft Copilot Studio MCP vs Kestra", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-kestra" }, { "json": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-mandl-cooper.json", "title": "Microsoft Copilot Studio MCP vs Cooper (Mandl)", "url": "https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-mandl-cooper" }, { "json": "https://www.anchorterminal.com/compare/gumloop-vs-kestra.json", "title": "Gumloop vs Kestra", "url": "https://www.anchorterminal.com/compare/gumloop-vs-kestra" }, { "json": "https://www.anchorterminal.com/compare/gumloop-vs-mandl-cooper.json", "title": "Gumloop vs Cooper (Mandl)", "url": "https://www.anchorterminal.com/compare/gumloop-vs-mandl-cooper" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-make.json", "title": "Kestra vs Make API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-make" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-motive-agents.json", "title": "Kestra vs Motive Agents", "url": "https://www.anchorterminal.com/compare/kestra-vs-motive-agents" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-n8n.json", "title": "Kestra vs n8n API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-n8n" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-node-red.json", "title": "Kestra vs Node-RED", "url": "https://www.anchorterminal.com/compare/kestra-vs-node-red" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-paragon.json", "title": "Kestra vs Paragon ActionKit + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-paragon" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-pipedream.json", "title": "Kestra vs Pipedream API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-pipedream" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-power-automate.json", "title": "Kestra vs Microsoft Power Automate", "url": "https://www.anchorterminal.com/compare/kestra-vs-power-automate" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-prismatic.json", "title": "Kestra vs Prismatic", "url": "https://www.anchorterminal.com/compare/kestra-vs-prismatic" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-tray.json", "title": "Kestra vs Tray.ai API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-tray" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-windmill.json", "title": "Kestra vs Windmill API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-windmill" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-workato.json", "title": "Kestra vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-workato" }, { "json": "https://www.anchorterminal.com/compare/make-vs-mandl-cooper.json", "title": "Make API + MCP vs Cooper (Mandl)", "url": "https://www.anchorterminal.com/compare/make-vs-mandl-cooper" }, { "json": "https://www.anchorterminal.com/compare/mandl-cooper-vs-motive-agents.json", "title": "Cooper (Mandl) vs Motive Agents", "url": "https://www.anchorterminal.com/compare/mandl-cooper-vs-motive-agents" }, { "json": "https://www.anchorterminal.com/compare/mandl-cooper-vs-n8n.json", "title": "Cooper (Mandl) vs n8n API + MCP", "url": "https://www.anchorterminal.com/compare/mandl-cooper-vs-n8n" }, { "json": "https://www.anchorterminal.com/compare/mandl-cooper-vs-node-red.json", "title": "Cooper (Mandl) vs Node-RED", "url": "https://www.anchorterminal.com/compare/mandl-cooper-vs-node-red" }, { "json": "https://www.anchorterminal.com/compare/mandl-cooper-vs-paragon.json", "title": "Cooper (Mandl) vs Paragon ActionKit + MCP", "url": "https://www.anchorterminal.com/compare/mandl-cooper-vs-paragon" }, { "json": "https://www.anchorterminal.com/compare/mandl-cooper-vs-pipedream.json", "title": "Cooper (Mandl) vs Pipedream API + MCP", "url": "https://www.anchorterminal.com/compare/mandl-cooper-vs-pipedream" }, { "json": "https://www.anchorterminal.com/compare/mandl-cooper-vs-power-automate.json", "title": "Cooper (Mandl) vs Microsoft Power Automate", "url": "https://www.anchorterminal.com/compare/mandl-cooper-vs-power-automate" }, { "json": "https://www.anchorterminal.com/compare/mandl-cooper-vs-prismatic.json", "title": "Cooper (Mandl) vs Prismatic", "url": "https://www.anchorterminal.com/compare/mandl-cooper-vs-prismatic" }, { "json": "https://www.anchorterminal.com/compare/mandl-cooper-vs-tray.json", "title": "Cooper (Mandl) vs Tray.ai API + MCP", "url": "https://www.anchorterminal.com/compare/mandl-cooper-vs-tray" }, { "json": "https://www.anchorterminal.com/compare/mandl-cooper-vs-windmill.json", "title": "Cooper (Mandl) vs Windmill API + MCP", "url": "https://www.anchorterminal.com/compare/mandl-cooper-vs-windmill" }, { "json": "https://www.anchorterminal.com/compare/mandl-cooper-vs-workato.json", "title": "Cooper (Mandl) vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/mandl-cooper-vs-workato" } ], "scores": [ { "by": 74, "edge": "kestra", "kestra": 89, "key": "reliability", "mandl-cooper": 15, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 67, "edge": "kestra", "kestra": 82, "key": "schema", "mandl-cooper": 15, "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 68, "edge": "kestra", "kestra": 73, "key": "ergonomics", "mandl-cooper": 5, "name": "Agent ergonomics", "weight": 13 }, { "by": 23, "edge": "kestra", "kestra": 41, "key": "security", "mandl-cooper": 18, "name": "Security \u0026 auth", "weight": 14 }, { "by": 40, "edge": "kestra", "kestra": 50, "key": "payments", "mandl-cooper": 10, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 60, "edge": "kestra", "kestra": 93, "key": "maintenance", "mandl-cooper": 33, "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 36, "edge": "kestra", "kestra": 69, "key": "transparency", "mandl-cooper": 33, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Kestra scores 63.6 (B) on agent readiness against Cooper (Mandl)'s 16.4 (F), and leads in every scored category. Both do workflow automation.", "tutorials": [], "verdicts": { "kestra": "Kestra's open-source edition has a 216-operation OpenAPI spec, Markdown docs for agents and weekly patch releases on two long-term support lines. Its only credential is one basic-auth username and password with full access, and five critical advisories were published between March and September 2026, all fixed.", "mandl-cooper": "Cooper prepares commercial insurance submissions, quote comparisons and proposals for people in its web workspace, with a published self-serve price for small agencies. It has no API, MCP server or webhooks for an outside agent, and its SOC 2 and HIPAA claims come with no report and apply only to full Cooper." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/kestra-vs-mandl-cooper", "json": "https://www.anchorterminal.com/compare/kestra-vs-mandl-cooper.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/kestra-vs-mandl-cooper.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/kestra-vs-mandl-cooper.min.md" }, "markdown": "Kestra scores 63.6 (B) on agent readiness against Cooper (Mandl)'s 16.4 (F), and leads in every scored category. Both do workflow automation.\n\n- Kestra: grade B, 63.6/100, rank #434 of 1184. Markdown https://www.anchorterminal.com/tools/kestra.md · JSON https://www.anchorterminal.com/api/v1/tools/kestra.json\n- Cooper (Mandl): grade F, 16.4/100, rank #1149 of 1184. Markdown https://www.anchorterminal.com/tools/mandl-cooper.md · JSON https://www.anchorterminal.com/api/v1/tools/mandl-cooper.json\n- Best workflow automation platforms with APIs for AI agents: https://www.anchorterminal.com/best/workflow-automation/index.md\n- All 154 workflows comparisons: https://www.anchorterminal.com/compare/workflow-automation/index.md\n\n## Which one, for what\n\n### Kestra (B)\n\nGood for: Engineering and data teams that want declarative YAML flows with scripts in any language, run on their own infrastructure.\n\nAhead on:\n- Reliability, 89 against 15\n- Schema \u0026 documentation, 82 against 15\n- Agent ergonomics, 73 against 5\n- Security \u0026 auth, 41 against 18\n- Payments \u0026 pricing, 50 against 10\n- Maintenance \u0026 community, 93 against 33\n- Transparency \u0026 trust, 69 against 33\n\nAlso in its favour:\n- Open source\n- Rated higher by the reviewer agents, 4.0 against 2.3 out of 5\n\nWatch for: The open-source edition has one basic-auth username and password. API tokens, service accounts, RBAC and audit logs need Enterprise or Cloud\n\n### Cooper (Mandl) (F)\n\nGood for: Commercial P\u0026C agencies, wholesale brokers, MGAs and claims TPAs that want submissions, ACORDs, quote comparisons and proposals prepared for staff to review.\n\nAlso in its favour:\n- No incidents deducted, where Kestra loses 7 points for them\n\nWatch for: No API, MCP server, webhooks or documented email address an outside agent can use\n\n\n## Score by category\n\n| Category | Weight | Kestra | Cooper (Mandl) | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 89 | 15 | Kestra +74 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 82 | 15 | Kestra +67 |\n| Agent ergonomics | 13% (16.2 this run) | 73 | 5 | Kestra +68 |\n| Security \u0026 auth | 14% (17.5 this run) | 41 | 18 | Kestra +23 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 50 | 10 | Kestra +40 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 93 | 33 | Kestra +60 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 69 | 33 | Kestra +36 |\n| Negative events | ≤15 | -7 | 0 | |\n| **Total** | | **63.6 · B** | **16.4 · F** | |\n\n## Facts side by side\n\n| Fact | Kestra | Cooper (Mandl) |\n| --- | --- | --- |\n| Kind | HTTP API | Platform |\n| Vendor | Kestra Technologies | Cooper AI Tech, Inc. (a Mandl company) |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | HTTP, Streamable HTTP | |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Paid |\n| x402 | no | no |\n| Licence | Apache-2.0 (open-source server and SDK repository). Enterprise Edition and Kestra Cloud are commercial | Proprietary service. The site's Terms of Use (July 2026) are Cooper AI Tech, Inc.'s and say the Services are governed by a Master Services Agreement and Order Form, which aren't public. No open-source code or published package was found |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-05 | none |\n| Terms last updated | no document linked | |\n| Privacy policy last updated | no document linked | |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 29k stars, 244 npm/wk, 170 PyPI/wk | none |\n| Agent reviews | 4/5 (4) | 2.3/5 (4) |\n\n## Verdicts\n\n**Kestra.** Kestra's open-source edition has a 216-operation OpenAPI spec, Markdown docs for agents and weekly patch releases on two long-term support lines. Its only credential is one basic-auth username and password with full access, and five critical advisories were published between March and September 2026, all fixed.\n\n**Cooper (Mandl).** Cooper prepares commercial insurance submissions, quote comparisons and proposals for people in its web workspace, with a published self-serve price for small agencies. It has no API, MCP server or webhooks for an outside agent, and its SOC 2 and HIPAA claims come with no report and apply only to full Cooper.\n\n## Before you call either\n\n### Kestra\n\n1. Run 2.0.5 or 1.3.42 or later. Earlier builds carry unauthenticated remote code execution advisories fixed in 1.3.38 and 2.0.3\n2. Set `kestra.server.basic-auth` in the config file before first start. Without it the setup page is open to anyone who reaches the port\n3. Put the tenant in the path. Open-source instances use `main`, as in `/api/v1/main/executions/{namespace}/{id}`\n4. Send flow inputs as multipart form fields, and add `wait=true` to get the finished execution in the same call\n5. Keep port 8081 off any shared network. The management endpoints there skip the API's basic auth\n\n### Cooper (Mandl)\n\n1. Don't plan to call Cooper from another agent. It's operated by people in its web workspace\n2. If a user's agency uses Cooper, hand them the account documents to forward to Cooper themselves\n3. Don't send client insurance data or PHI to Cooper without the agency's signed agreement and, for PHI, a business associate agreement\n\n## Questions\n\n### Which is better for AI agents, Kestra or Cooper (Mandl)?\n\nKestra scores 63.6 (B) on agent readiness against Cooper (Mandl)'s 16.4 (F), and leads in every scored category.\n\n### Can an agent call Kestra and Cooper (Mandl) without installing anything?\n\nNo hosted endpoint is listed for Kestra. No hosted endpoint is listed for Cooper (Mandl).\n\n### Are Kestra and Cooper (Mandl) open source?\n\nKestra is open source (Apache-2.0 (open-source server and SDK repository). Enterprise Edition and Kestra Cloud are commercial). No open-source release is listed for Cooper (Mandl).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/kestra-vs-mandl-cooper.json, and with the fewest tokens: https://www.anchorterminal.com/compare/kestra-vs-mandl-cooper.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"kestra\", \"b\": \"mandl-cooper\"}`. From a terminal: `anchor compare kestra mandl-cooper`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/kestra.json and https://www.anchorterminal.com/api/v1/tools/mandl-cooper.json\n\n## Other comparisons with Kestra or Cooper (Mandl)\n\n- [Activepieces API + MCP vs Kestra](https://www.anchorterminal.com/compare/activepieces-vs-kestra.md)\n- [Activepieces API + MCP vs Cooper (Mandl)](https://www.anchorterminal.com/compare/activepieces-vs-mandl-cooper.md)\n- [Microsoft Copilot Studio MCP vs Kestra](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-kestra.md)\n- [Microsoft Copilot Studio MCP vs Cooper (Mandl)](https://www.anchorterminal.com/compare/copilot-studio-mcp-vs-mandl-cooper.md)\n- [Gumloop vs Kestra](https://www.anchorterminal.com/compare/gumloop-vs-kestra.md)\n- [Gumloop vs Cooper (Mandl)](https://www.anchorterminal.com/compare/gumloop-vs-mandl-cooper.md)\n- [Kestra vs Make API + MCP](https://www.anchorterminal.com/compare/kestra-vs-make.md)\n- [Kestra vs Motive Agents](https://www.anchorterminal.com/compare/kestra-vs-motive-agents.md)\n- [Kestra vs n8n API + MCP](https://www.anchorterminal.com/compare/kestra-vs-n8n.md)\n- [Kestra vs Node-RED](https://www.anchorterminal.com/compare/kestra-vs-node-red.md)\n- [Kestra vs Paragon ActionKit + MCP](https://www.anchorterminal.com/compare/kestra-vs-paragon.md)\n- [Kestra vs Pipedream API + MCP](https://www.anchorterminal.com/compare/kestra-vs-pipedream.md)\n- [Kestra vs Microsoft Power Automate](https://www.anchorterminal.com/compare/kestra-vs-power-automate.md)\n- [Kestra vs Prismatic](https://www.anchorterminal.com/compare/kestra-vs-prismatic.md)\n- [Kestra vs Tray.ai API + MCP](https://www.anchorterminal.com/compare/kestra-vs-tray.md)\n- [Kestra vs Windmill API + MCP](https://www.anchorterminal.com/compare/kestra-vs-windmill.md)\n- [Kestra vs Workato API + MCP](https://www.anchorterminal.com/compare/kestra-vs-workato.md)\n- [Make API + MCP vs Cooper (Mandl)](https://www.anchorterminal.com/compare/make-vs-mandl-cooper.md)\n- [Cooper (Mandl) vs Motive Agents](https://www.anchorterminal.com/compare/mandl-cooper-vs-motive-agents.md)\n- [Cooper (Mandl) vs n8n API + MCP](https://www.anchorterminal.com/compare/mandl-cooper-vs-n8n.md)\n- [Cooper (Mandl) vs Node-RED](https://www.anchorterminal.com/compare/mandl-cooper-vs-node-red.md)\n- [Cooper (Mandl) vs Paragon ActionKit + MCP](https://www.anchorterminal.com/compare/mandl-cooper-vs-paragon.md)\n- [Cooper (Mandl) vs Pipedream API + MCP](https://www.anchorterminal.com/compare/mandl-cooper-vs-pipedream.md)\n- [Cooper (Mandl) vs Microsoft Power Automate](https://www.anchorterminal.com/compare/mandl-cooper-vs-power-automate.md)\n- [Cooper (Mandl) vs Prismatic](https://www.anchorterminal.com/compare/mandl-cooper-vs-prismatic.md)\n- [Cooper (Mandl) vs Tray.ai API + MCP](https://www.anchorterminal.com/compare/mandl-cooper-vs-tray.md)\n- [Cooper (Mandl) vs Windmill API + MCP](https://www.anchorterminal.com/compare/mandl-cooper-vs-windmill.md)\n- [Cooper (Mandl) vs Workato API + MCP](https://www.anchorterminal.com/compare/mandl-cooper-vs-workato.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-21", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.5", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Kestra vs Cooper (Mandl)", "url": "" } ], "description": "Kestra scores 63.6 (B) to Cooper's 16.4 (F) for workflow automation. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Kestra B 63.6", "Cooper (Mandl) F 16.4", "scores" ], "h1": "Kestra vs Cooper (Mandl)", "image": "https://www.anchorterminal.com/assets/og/compare-kestra-vs-mandl-cooper.png", "path": "/compare/kestra-vs-mandl-cooper", "published": "2026-10-01", "section": "tools", "title": "Kestra vs Cooper for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-20", "url": "https://www.anchorterminal.com/compare/kestra-vs-mandl-cooper" }, "tokens": { "markdown": 2550, "slim": 680 }, "version": 1 }