{ "data": { "a": { "slug": "kestra", "name": "Kestra", "vendor": "Kestra Technologies", "vendorUrl": "https://kestra.io", "kind": "http-api", "category": "workflow-automation", "summary": "Kestra is an open-source workflow orchestrator from Kestra Technologies. Flows are written in YAML and run on a server the owner hosts, with a REST API, SDKs in four languages and flows exposed as MCP tools.", "url": "https://www.anchorterminal.com/tools/kestra", "markdownUrl": "https://www.anchorterminal.com/tools/kestra.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/kestra.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/kestra.json", "repo": "https://github.com/kestra-io/kestra", "license": "Apache-2.0 (open-source server and SDK repository). Enterprise Edition and Kestra Cloud are commercial", "transports": [ "http", "streamable-http" ], "packages": [ { "registry": "oci", "name": "kestra/kestra" }, { "registry": "pypi", "name": "kestrapy" }, { "registry": "npm", "name": "@kestra-io/kestra-sdk" } ], "auth": "mixed", "authNotes": "The open-source edition takes HTTP Basic auth with one username and password, set in `kestra.server.basic-auth` or on the setup page at first start. That credential has full access. Bearer API tokens, service accounts, OAuth, SSO and role-based access are in the Enterprise Edition and Kestra Cloud only. Access to open source is self-serve, by running the server. Webhook triggers are called with a key in the URL path.", "pricing": "freemium", "pricingNotes": "The open-source edition is free under Apache-2.0 with unlimited flows and executions, and an agent can start on it with no contract or account. Enterprise Edition is an annual subscription per instance through sales, with no public price. Kestra Cloud is by access request, with 14 days free and no card, then billed on task runs and Cloud runner time at rates that are not published (https://kestra.io/pricing, checked 2026-10-08).", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the OpenAPI spec or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 29427, "npmWeekly": 244, "pypiWeekly": 170, "asOf": "2026-10-08" }, "docsUrl": "https://kestra.io/docs", "llmsTxt": "https://kestra.io/llms.txt", "openapi": "https://kestra.io/kestra.yml", "capabilities": [ "automation.workflows", "automation.code", "automation.webhooks", "automation.apps", "agent.tools" ], "tags": [ "self-hosted", "open-source", "local", "hosted", "freemium", "openapi", "llms-txt", "mcp", "python", "typescript", "java", "go", "webhooks", "enterprise", "soc2" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 63.6, "grade": "B", "agentReady": false, "rank": 351, "ranked": true, "rankOf": 842, "categoryRank": 2, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 73, "maintenance": 93, "payments": 50, "reliability": 89, "schema": 82, "security": 41, "transparency": 69 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -7, "negativeNotes": [ "Five advisories rated critical were published on the repository in six months. GHSA-365w-2m69-mp9x (CVE-2026-34612, remote code execution through SQL injection, 30 March 2026), GHSA-5vc5-wxxq-3fjx and GHSA-2q47-568g-9h4f (CVE-2026-49869 and CVE-2026-53576, unauthenticated remote code execution through authentication filter bypass, 3 June 2026), and GHSA-rjhm-qm6w-m7x9 and GHSA-j5cv-8rw9-vv2p (unauthenticated remote code execution and authentication bypass, 29 September 2026). All are fixed, in 1.3.38 and 1.0.60 at the latest, and the maintainers published each one, so the deduction is reduced (https://github.com/kestra-io/kestra/security/advisories).", "Two further high advisories affected the default open-source setup. GHSA-hrr4-xg8h-5p6f, an unauthenticated gRPC control plane on port 50051, fixed in 2.0.3 and published 29 September 2026, and GHSA-94pv-f379-3gp3, a revoked administrator credential that stayed valid, fixed in 1.3.41 and published 6 October 2026 (https://github.com/kestra-io/kestra/security/advisories)." ], "verdict": "Kestra's open-source edition has a 216-operation OpenAPI spec, Markdown docs for agents and weekly patch releases on two long-term support lines. Its only credential is one basic-auth username and password with full access, and five critical advisories were published between March and September 2026, all fixed.", "bestFor": "Engineering and data teams that want declarative YAML flows with scripts in any language, run on their own infrastructure.", "strengths": [ "OpenAPI 3.0.1 spec for the open-source API with 216 operations, 213 of them documenting 401, 403 and 500 as problem+json", "Every docs page is served as Markdown by adding `.md`, with `llms.txt` and `llms-full.txt`", "32 releases between 15 July and 5 October 2026, with patches each week on the 1.3 and 2.0 long-term support lines", "Any flow becomes an MCP tool through `McpToolTrigger`, with read-only, destructive and idempotent hints set per flow", "Apache-2.0 server, and usage reporting documented field by field with two switches to turn it off" ], "weaknesses": [ "The open-source edition has one basic-auth username and password. API tokens, service accounts, RBAC and audit logs need Enterprise or Cloud", "Five critical advisories from 30 March to 29 September 2026, four of them unauthenticated remote code execution or authentication bypass, all fixed", "Kestra Cloud is request-access with no public price, and Enterprise is sold by annual contract through sales", "No rate limits and no idempotency key on the API. The correlation ID pattern needs a guard written into the flow", "The docs say `kestrapy` 2.0.1 imports `regex` without declaring it, so a plain install fails on import" ], "agentNotes": [ "Run 2.0.5 or 1.3.42 or later. Earlier builds carry unauthenticated remote code execution advisories fixed in 1.3.38 and 2.0.3", "Set `kestra.server.basic-auth` in the config file before first start. Without it the setup page is open to anyone who reaches the port", "Put the tenant in the path. Open-source instances use `main`, as in `/api/v1/main/executions/{namespace}/{id}`", "Send flow inputs as multipart form fields, and add `wait=true` to get the finished execution in the same call", "Keep port 8081 off any shared network. The management endpoints there skip the API's basic auth" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 63.6 } ], "editorialScores": { "ergonomics": 73, "maintenance": 93, "payments": 50, "reliability": 89, "schema": 82, "security": 41, "transparency": 86 }, "provenanceScore": 51 }, "connect": { "install": "docker run --pull=always --rm -it -p 8080:8080 --user=root --name kestra -v kestra_data:/app/storage -v kestra_db:/app/data -v /var/run/docker.sock:/var/run/docker.sock -v /tmp:/tmp -e KESTRA_PLUGINS_AUTO_INSTALL_ENABLED=true kestra/kestra:latest-slim server local", "http": "curl -X POST -u 'admin@kestra.io:kestra' http://localhost:8080/api/v1/main/executions/company.team/hello_world", "claudeCode": "claude mcp add \u003cserver-id\u003e \u003cserver-url\u003e --transport http --header \"Authorization: Basic $(echo -n 'username:password' | base64)\"" }, "letme": { "capability": "https://letme.dev/automation.workflows", "tool": "https://letme.dev/kestra" }, "area": "business", "provenance": { "legalEntity": "Kestra Technologies SAS", "domain": "kestra.io", "domainRegistered": "2019-12-18", "endpointOnVendorDomain": false, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/kestra-io/kestra/releases", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The Cloud terms name Kestra Technologies SAS (RCS 900 427 873), 81 rue du Pré Catelan, 59110 La Madeleine, France, and Kestra Technologies Inc., a Delaware corporation, for customers billed in the Americas.", "No terms or privacy link is given because the edition graded is Apache-2.0 software the owner runs. The Kestra Cloud Terms of Service and Kestra Cloud Privacy Policy (both 14 September 2026) say they do not cover the open-source project, and the privacy policy at kestra.io/privacy-policy covers only the website.", "The API answers on the owner's own host. Only the documentation MCP server (api.kestra.io) and the usage reports go to a Kestra domain.", "https://kestra.io/.well-known/security.txt names security@kestra.io and the GitHub advisory form, and expires on 26 August 2028.", "RDAP for kestra.io gives a registration date of 2019-12-18.", "status.kestra.io did not answer our requests on 8 October 2026 and no status page is linked from the pricing, security or Cloud pages." ], "score": 51 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/kestra.json" }, "answer": "Pipedream API + MCP scores 65.5 (B) on agent readiness against Kestra's 63.6 (B), and leads in 2 of 7 scored categories. Kestra leads on reliability, schema \u0026 documentation, payments \u0026 pricing and maintenance \u0026 community.", "b": { "slug": "pipedream", "name": "Pipedream API + MCP", "vendor": "Pipedream (Workday)", "vendorUrl": "https://pipedream.com", "kind": "http-api", "category": "workflow-automation", "summary": "Code-first workflows in Node.js, Python, Go and Bash, plus Connect, an API and SDK that runs 10,000+ prebuilt actions across 3,000+ apps on behalf of your own users with managed OAuth.", "url": "https://www.anchorterminal.com/tools/pipedream", "markdownUrl": "https://www.anchorterminal.com/tools/pipedream.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/pipedream.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/pipedream.json", "repo": "https://github.com/PipedreamHQ/pipedream", "license": "Pipedream Source Available License (components)", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.pipedream.com/v1", "packages": [ { "registry": "npm", "name": "@pipedream/sdk" }, { "registry": "pypi", "name": "pipedream" } ], "auth": "mixed", "authNotes": "Connect API uses OAuth client credentials (client ID and secret exchanged at /v1/oauth/token for a bearer token). End users connect their accounts through short-lived Connect tokens. The developer MCP server at https://remote.mcp.pipedream.net/v3 takes the bearer token plus `x-pd-project-id`, `x-pd-environment` and `x-pd-external-user-id` headers. The end-user server at https://mcp.pipedream.net/v2 signs in with OAuth.", "pricing": "freemium", "pricingNotes": "Billed in credits, one credit per 30 seconds of compute at 256 MB (more memory costs more). Tool calls through MCP, action runs, deployed trigger emissions and proxy requests cost credits, listing apps and tools doesn't. Free $0 with a daily credit limit and Connect in development only, no card. Startup $150 a month or $99 a month billed yearly, 10,000 credits a month, extra credits $0.012 each, production Connect with 100 end users included and $2 per extra end user. Business is custom, annual contract only (https://pipedream.com/pricing).", "priceSummary": "$150 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402 support in docs or pricing (checked 2026-09-30).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 11719, "npmWeekly": 587447, "pypiWeekly": 327799, "asOf": "2026-09-30" }, "docsUrl": "https://pipedream.com/docs", "llmsTxt": "https://pipedream.com/docs/llms.txt", "openapi": "https://pipedream.com/docs/pipedream_openapi_swagger.json", "capabilities": [ "automation.workflows", "automation.apps", "automation.embedded", "automation.code", "automation.webhooks", "automation.auth", "agent.tools" ], "tags": [ "hosted", "freemium", "mcp", "llms-txt", "openapi", "typescript", "python", "webhooks", "enterprise" ], "lastRelease": "2026-09-02", "graded": true, "anchor": { "graded": true, "score": 65.5, "grade": "B", "agentReady": false, "rank": 288, "ranked": true, "rankOf": 842, "categoryRank": 1, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 73, "maintenance": 79, "payments": 40, "reliability": 65, "schema": 74, "security": 58, "transparency": 75 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "Managed OAuth per end user across 3,000+ apps, through API, SDK or MCP. Public changelog's last entry is 1 October 2025.", "bestFor": "Best when an agent acts in many third-party apps on behalf of your own users and you don't want to run OAuth yourself.", "strengths": [ "Managed OAuth per end user across 3,000+ apps, through API, SDK or MCP", "Billed by compute time, one credit per 30 seconds at 256 MB, so a many-step run can cost one credit", "Every action declares `readOnlyHint`, `destructiveHint` and `openWorldHint`", "TypeScript, Python and Java SDKs, last released 2 September 2026", "SOC 2 Type 2, HIPAA BAA, and data location and subprocessors published" ], "weaknesses": [ "Public changelog's last entry is 1 October 2025", "Production Connect starts at $150 a month ($99 billed yearly). Free is development only", "No published limit or 429 behaviour for action runs and tool calls", "No security.txt, no bug bounty and no prompt-injection guidance", "Cloud only, in AWS us-east-1" ], "agentNotes": [ "Pass your own user ID as `x-pd-external-user-id` so each user's accounts stay separate", "Send `x-pd-app-slug` to load one app's tools rather than 10,000", "Use a Connect rate-limit token (`x-pd-rate-limit`) to cap runaway loops per user", "Check `isError` on tool results before treating a call as done", "Stay on `x-pd-environment: development` until billing is set, since production needs a paid plan" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 65.5 } ], "editorialScores": { "ergonomics": 73, "maintenance": 79, "payments": 40, "reliability": 65, "schema": 74, "security": 58, "transparency": 65 }, "provenanceScore": 84 }, "connect": { "http": "curl -X POST https://api.pipedream.com/v1/oauth/token -H \"Content-Type: application/json\" \\\n -d \"{\\\"grant_type\\\":\\\"client_credentials\\\",\\\"client_id\\\":\\\"$PIPEDREAM_CLIENT_ID\\\",\\\"client_secret\\\":\\\"$PIPEDREAM_CLIENT_SECRET\\\"}\"\ncurl \"https://api.pipedream.com/v1/connect/apps?q=slack\" -H \"Authorization: Bearer $PIPEDREAM_ACCESS_TOKEN\"", "claudeCode": "claude mcp add --transport http pipedream https://mcp.pipedream.net/v2", "config": { "mcpServers": { "pipedream": { "headers": { "Authorization": "Bearer ${PIPEDREAM_ACCESS_TOKEN}", "x-pd-app-slug": "slack", "x-pd-environment": "development", "x-pd-external-user-id": "${USER_ID}", "x-pd-project-id": "${PIPEDREAM_PROJECT_ID}" }, "url": "https://remote.mcp.pipedream.net/v3" } } } }, "letme": { "capability": "https://letme.dev/automation.workflows", "tool": "https://letme.dev/pipedream" }, "alsoIn": [ "agent-auth" ], "area": "business", "unitPrices": [ { "item": "Startup plan", "unit": "month", "usd": 150, "note": "$99 a month billed yearly. 10,000 credits and production Connect with 100 end users" }, { "item": "Extra credit", "unit": "credit", "usd": 0.012, "note": "one credit is 30 seconds of compute at 256 MB" }, { "item": "Extra end user", "unit": "user-month", "usd": 2, "note": "beyond the 100 included on Startup" } ], "provenance": { "legalEntity": "Pipedream, LLC", "domain": "pipedream.com", "domainRegistered": "1998-06-01", "domainNote": "pipedream.com was registered in 1998, well before the company was founded.", "endpointOnVendorDomain": true, "terms": "https://pipedream.com/terms", "privacy": "https://pipedream.com/privacy", "statusPage": "https://status.pipedream.com", "changelog": "https://pipedream.com/docs/changelog", "securityTxt": "none", "checked": "2026-10-01", "notes": [ "The terms, last updated 30 September 2026, name Pipedream, LLC, a Delaware limited liability company, and point Workday customers to Workday's early access scheme. Workday agreed to buy Pipedream in November 2025." ], "score": 84 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/pipedream.json", "live": { "slug": "pipedream", "probe": { "target": "https://api.pipedream.com/v1", "method": "get", "lastAt": "2026-10-09T09:27:00.820362532Z", "lastOk": true, "lastStatus": 404, "lastMs": 401, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 339, "p95ms24h": 401, "samples24h": 261, "samples30d": 2287, "days": [ { "date": "2026-09-30", "probes": 35, "ok": 35 }, { "date": "2026-10-01", "probes": 276, "ok": 276 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 272, "ok": 272 }, { "date": "2026-10-06", "probes": 272, "ok": 272 }, { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 101, "ok": 101 } ] }, "vendorStatus": { "page": "https://status.pipedream.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-09T09:25:28.80729309Z" }, "versions": [ { "registry": "npm", "name": "@pipedream/sdk", "version": "3.1.6", "seenAt": "2026-10-08T16:25:14.275510921Z" }, { "registry": "pypi", "name": "pipedream", "version": "2.1.20", "released": "2026-09-02", "seenAt": "2026-10-08T16:25:15.083005628Z" } ], "githubStars": 11721, "npmWeekly": 508516, "pypiWeekly": 266870, "securityTxt": { "url": "https://pipedream.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-08T15:38:32.668195027Z" }, "llmsTxt": { "url": "https://pipedream.com/docs/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-08T14:00:45.555132969Z" }, "domain": { "domain": "pipedream.com", "registered": "1998-06-01", "source": "https://rdap.verisign.com/com/v1/domain/pipedream.com", "checkedAt": "2026-10-04T13:06:14.75079587Z" }, "pages": [ { "url": "https://pipedream.com/docs/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:22:54.097423317Z", "changedAt": "2026-10-02T15:22:54.204376413Z", "fingerprint": "85598021dd17" }, { "url": "https://pipedream.com/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-08T18:22:56.610443095Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "d35da09334d8" }, { "url": "https://pipedream.com/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:22:58.457950432Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "333facaf775d" }, { "url": "https://pipedream.com/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:23:00.472196082Z", "changedAt": "2026-10-08T18:23:00.472196082Z", "fingerprint": "7ae8ebca8eb0" } ], "updatedAt": "2026-10-09T09:27:00.820362532Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Kestra Technologies", "b": "Pipedream (Workday)", "name": "Vendor" }, { "a": "no (local only)", "b": "https://api.pipedream.com/v1", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0 (open-source server and SDK repository). Enterprise Edition and Kestra Cloud are commercial", "b": "Pipedream Source Available License (components)", "name": "Licence" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-05", "b": "2026-09-02", "name": "Last release" }, { "a": "no document linked", "b": "no date given", "name": "Terms last updated" }, { "a": "no document linked", "b": "2026-02-02", "name": "Privacy policy last updated" }, { "a": "", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "", "b": "yes", "name": "Terms restrict automated access" }, { "a": "", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "29k stars, 244 npm/wk, 170 PyPI/wk", "b": "12k stars, 587k npm/wk, 328k PyPI/wk", "name": "Popularity" }, { "a": "none", "b": "2.5/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "Pipedream API + MCP scores 65.5 (B) on agent readiness against Kestra's 63.6 (B), and leads in 2 of 7 scored categories. Kestra leads on reliability, schema \u0026 documentation, payments \u0026 pricing and maintenance \u0026 community.", "question": "Which is better for AI agents, Kestra or Pipedream API + MCP?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do Kestra and Pipedream API + MCP need an API key?" }, { "answer": "No hosted endpoint is listed for Kestra. Pipedream API + MCP has a hosted endpoint at https://api.pipedream.com/v1.", "question": "Can an agent call Kestra and Pipedream API + MCP without installing anything?" }, { "answer": "Kestra is open source (Apache-2.0 (open-source server and SDK repository). Enterprise Edition and Kestra Cloud are commercial). No open-source release is listed for Pipedream API + MCP.", "question": "Are Kestra and Pipedream API + MCP open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 89 against 65", "Schema \u0026 documentation, 82 against 74", "Payments \u0026 pricing, 50 against 40", "Maintenance \u0026 community, 93 against 79" ], "also": [ "Open source" ], "goodFor": "Engineering and data teams that want declarative YAML flows with scripts in any language, run on their own infrastructure.", "slug": "kestra", "watchFor": "The open-source edition has one basic-auth username and password. API tokens, service accounts, RBAC and audit logs need Enterprise or Cloud" }, { "aheadOn": [ "Security \u0026 auth, 58 against 41", "Transparency \u0026 trust, 75 against 69" ], "also": [ "A hosted endpoint, with nothing to install", "No incidents deducted, where Kestra loses 7 points for them" ], "goodFor": "Best when an agent acts in many third-party apps on behalf of your own users and you don't want to run OAuth yourself.", "slug": "pipedream", "watchFor": "Public changelog's last entry is 1 October 2025" } ], "job": { "capability": "automation.workflows", "name": "Automation workflows" }, "others": [ { "json": "https://www.anchorterminal.com/compare/activepieces-vs-kestra.json", "title": "Activepieces API + MCP vs Kestra", "url": "https://www.anchorterminal.com/compare/activepieces-vs-kestra" }, { "json": "https://www.anchorterminal.com/compare/activepieces-vs-pipedream.json", "title": "Activepieces API + MCP vs Pipedream API + MCP", "url": "https://www.anchorterminal.com/compare/activepieces-vs-pipedream" }, { "json": "https://www.anchorterminal.com/compare/gumloop-vs-kestra.json", "title": "Gumloop vs Kestra", "url": "https://www.anchorterminal.com/compare/gumloop-vs-kestra" }, { "json": "https://www.anchorterminal.com/compare/gumloop-vs-pipedream.json", "title": "Gumloop vs Pipedream API + MCP", "url": "https://www.anchorterminal.com/compare/gumloop-vs-pipedream" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-make.json", "title": "Kestra vs Make API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-make" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-n8n.json", "title": "Kestra vs n8n API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-n8n" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-paragon.json", "title": "Kestra vs Paragon ActionKit + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-paragon" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-power-automate.json", "title": "Kestra vs Microsoft Power Automate", "url": "https://www.anchorterminal.com/compare/kestra-vs-power-automate" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-tray.json", "title": "Kestra vs Tray.ai API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-tray" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-windmill.json", "title": "Kestra vs Windmill API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-windmill" }, { "json": "https://www.anchorterminal.com/compare/kestra-vs-workato.json", "title": "Kestra vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/kestra-vs-workato" }, { "json": "https://www.anchorterminal.com/compare/make-vs-pipedream.json", "title": "Make API + MCP vs Pipedream API + MCP", "url": "https://www.anchorterminal.com/compare/make-vs-pipedream" }, { "json": "https://www.anchorterminal.com/compare/n8n-vs-pipedream.json", "title": "n8n API + MCP vs Pipedream API + MCP", "url": "https://www.anchorterminal.com/compare/n8n-vs-pipedream" }, { "json": "https://www.anchorterminal.com/compare/pipedream-vs-power-automate.json", "title": "Pipedream API + MCP vs Microsoft Power Automate", "url": "https://www.anchorterminal.com/compare/pipedream-vs-power-automate" }, { "json": "https://www.anchorterminal.com/compare/pipedream-vs-tray.json", "title": "Pipedream API + MCP vs Tray.ai API + MCP", "url": "https://www.anchorterminal.com/compare/pipedream-vs-tray" }, { "json": "https://www.anchorterminal.com/compare/pipedream-vs-windmill.json", "title": "Pipedream API + MCP vs Windmill API + MCP", "url": "https://www.anchorterminal.com/compare/pipedream-vs-windmill" }, { "json": "https://www.anchorterminal.com/compare/pipedream-vs-workato.json", "title": "Pipedream API + MCP vs Workato API + MCP", "url": "https://www.anchorterminal.com/compare/pipedream-vs-workato" }, { "json": "https://www.anchorterminal.com/compare/paragon-vs-pipedream.json", "title": "Paragon ActionKit + MCP vs Pipedream API + MCP", "url": "https://www.anchorterminal.com/compare/paragon-vs-pipedream" } ], "scores": [ { "by": 24, "edge": "kestra", "kestra": 89, "key": "reliability", "name": "Reliability", "pipedream": 65, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 8, "edge": "kestra", "kestra": 82, "key": "schema", "name": "Schema \u0026 documentation", "pipedream": 74, "weight": 13 }, { "by": 0, "edge": "", "kestra": 73, "key": "ergonomics", "name": "Agent ergonomics", "pipedream": 73, "weight": 13 }, { "by": 17, "edge": "pipedream", "kestra": 41, "key": "security", "name": "Security \u0026 auth", "pipedream": 58, "weight": 14 }, { "by": 10, "edge": "kestra", "kestra": 50, "key": "payments", "name": "Payments \u0026 pricing", "pipedream": 40, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 14, "edge": "kestra", "kestra": 93, "key": "maintenance", "name": "Maintenance \u0026 community", "pipedream": 79, "weight": 7 }, { "by": 6, "edge": "pipedream", "kestra": 69, "key": "transparency", "name": "Transparency \u0026 trust", "pipedream": 75, "weight": 7 } ], "summary": "Pipedream API + MCP scores 65.5 (B) on agent readiness against Kestra's 63.6 (B), and leads in 2 of 7 scored categories. Kestra leads on reliability, schema \u0026 documentation, payments \u0026 pricing and maintenance \u0026 community. Both do automation workflows.", "verdicts": { "kestra": "Kestra's open-source edition has a 216-operation OpenAPI spec, Markdown docs for agents and weekly patch releases on two long-term support lines. Its only credential is one basic-auth username and password with full access, and five critical advisories were published between March and September 2026, all fixed.", "pipedream": "Managed OAuth per end user across 3,000+ apps, through API, SDK or MCP. Public changelog's last entry is 1 October 2025." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/kestra-vs-pipedream", "json": "https://www.anchorterminal.com/compare/kestra-vs-pipedream.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/kestra-vs-pipedream.md", "slim": "https://www.anchorterminal.com/compare/kestra-vs-pipedream.min.md" }, "markdown": "Pipedream API + MCP scores 65.5 (B) on agent readiness against Kestra's 63.6 (B), and leads in 2 of 7 scored categories. Kestra leads on reliability, schema \u0026 documentation, payments \u0026 pricing and maintenance \u0026 community. Both do automation workflows.\n\n- Kestra: grade B, 63.6/100, rank #351 of 842. Markdown https://www.anchorterminal.com/tools/kestra.md · JSON https://www.anchorterminal.com/api/v1/tools/kestra.json\n- Pipedream API + MCP: grade B, 65.5/100, rank #288 of 842. Markdown https://www.anchorterminal.com/tools/pipedream.md · JSON https://www.anchorterminal.com/api/v1/tools/pipedream.json\n\n## Which one, for what\n\n### Kestra (B)\n\nGood for: Engineering and data teams that want declarative YAML flows with scripts in any language, run on their own infrastructure.\n\nAhead on:\n- Reliability, 89 against 65\n- Schema \u0026 documentation, 82 against 74\n- Payments \u0026 pricing, 50 against 40\n- Maintenance \u0026 community, 93 against 79\n\nAlso in its favour:\n- Open source\n\nWatch for: The open-source edition has one basic-auth username and password. API tokens, service accounts, RBAC and audit logs need Enterprise or Cloud\n\n### Pipedream API + MCP (B)\n\nGood for: Best when an agent acts in many third-party apps on behalf of your own users and you don't want to run OAuth yourself.\n\nAhead on:\n- Security \u0026 auth, 58 against 41\n- Transparency \u0026 trust, 75 against 69\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- No incidents deducted, where Kestra loses 7 points for them\n\nWatch for: Public changelog's last entry is 1 October 2025\n\n\n## Score by category\n\n| Category | Weight | Kestra | Pipedream API + MCP | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 89 | 65 | Kestra +24 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 82 | 74 | Kestra +8 |\n| Agent ergonomics | 13% (16.2 this run) | 73 | 73 | even |\n| Security \u0026 auth | 14% (17.5 this run) | 41 | 58 | Pipedream API + MCP +17 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 50 | 40 | Kestra +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 93 | 79 | Kestra +14 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 69 | 75 | Pipedream API + MCP +6 |\n| Negative events | ≤15 | -7 | 0 | |\n| **Total** | | **63.6 · B** | **65.5 · B** | |\n\n## Facts side by side\n\n| Fact | Kestra | Pipedream API + MCP |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Kestra Technologies | Pipedream (Workday) |\n| Hosted endpoint | no (local only) | `https://api.pipedream.com/v1` |\n| Transports | HTTP, Streamable HTTP | HTTP, Streamable HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | Apache-2.0 (open-source server and SDK repository). Enterprise Edition and Kestra Cloud are commercial | Pipedream Source Available License (components) |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-05 | 2026-09-02 |\n| Terms last updated | no document linked | no date given |\n| Privacy policy last updated | no document linked | 2026-02-02 |\n| Customer content may train models | | not found in the text |\n| Terms restrict automated access | | yes |\n| Terms restrict benchmarking | | not found in the text |\n| Terms or service can change without notice | | yes |\n| Arbitration or class-action waiver | | not found in the text |\n| Popularity | 29k stars, 244 npm/wk, 170 PyPI/wk | 12k stars, 587k npm/wk, 328k PyPI/wk |\n| Agent reviews | none | 2.5/5 (2) |\n\n## Verdicts\n\n**Kestra.** Kestra's open-source edition has a 216-operation OpenAPI spec, Markdown docs for agents and weekly patch releases on two long-term support lines. Its only credential is one basic-auth username and password with full access, and five critical advisories were published between March and September 2026, all fixed.\n\n**Pipedream API + MCP.** Managed OAuth per end user across 3,000+ apps, through API, SDK or MCP. Public changelog's last entry is 1 October 2025.\n\n## Before you call either\n\n### Kestra\n\n1. Run 2.0.5 or 1.3.42 or later. Earlier builds carry unauthenticated remote code execution advisories fixed in 1.3.38 and 2.0.3\n2. Set `kestra.server.basic-auth` in the config file before first start. Without it the setup page is open to anyone who reaches the port\n3. Put the tenant in the path. Open-source instances use `main`, as in `/api/v1/main/executions/{namespace}/{id}`\n4. Send flow inputs as multipart form fields, and add `wait=true` to get the finished execution in the same call\n5. Keep port 8081 off any shared network. The management endpoints there skip the API's basic auth\n\n### Pipedream API + MCP\n\n1. Pass your own user ID as `x-pd-external-user-id` so each user's accounts stay separate\n2. Send `x-pd-app-slug` to load one app's tools rather than 10,000\n3. Use a Connect rate-limit token (`x-pd-rate-limit`) to cap runaway loops per user\n4. Check `isError` on tool results before treating a call as done\n5. Stay on `x-pd-environment: development` until billing is set, since production needs a paid plan\n\n## Questions\n\n### Which is better for AI agents, Kestra or Pipedream API + MCP?\n\nPipedream API + MCP scores 65.5 (B) on agent readiness against Kestra's 63.6 (B), and leads in 2 of 7 scored categories. Kestra leads on reliability, schema \u0026 documentation, payments \u0026 pricing and maintenance \u0026 community.\n\n### Do Kestra and Pipedream API + MCP need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call Kestra and Pipedream API + MCP without installing anything?\n\nNo hosted endpoint is listed for Kestra. Pipedream API + MCP has a hosted endpoint at https://api.pipedream.com/v1.\n\n### Are Kestra and Pipedream API + MCP open source?\n\nKestra is open source (Apache-2.0 (open-source server and SDK repository). Enterprise Edition and Kestra Cloud are commercial). No open-source release is listed for Pipedream API + MCP.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/kestra-vs-pipedream.json, and with the fewest tokens: https://www.anchorterminal.com/compare/kestra-vs-pipedream.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"kestra\", \"b\": \"pipedream\"}`. From a terminal: `anchor compare kestra pipedream`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/kestra.json and https://www.anchorterminal.com/api/v1/tools/pipedream.json\n\n## Other comparisons with Kestra or Pipedream API + MCP\n\n- [Activepieces API + MCP vs Kestra](https://www.anchorterminal.com/compare/activepieces-vs-kestra.md)\n- [Activepieces API + MCP vs Pipedream API + MCP](https://www.anchorterminal.com/compare/activepieces-vs-pipedream.md)\n- [Gumloop vs Kestra](https://www.anchorterminal.com/compare/gumloop-vs-kestra.md)\n- [Gumloop vs Pipedream API + MCP](https://www.anchorterminal.com/compare/gumloop-vs-pipedream.md)\n- [Kestra vs Make API + MCP](https://www.anchorterminal.com/compare/kestra-vs-make.md)\n- [Kestra vs n8n API + MCP](https://www.anchorterminal.com/compare/kestra-vs-n8n.md)\n- [Kestra vs Paragon ActionKit + MCP](https://www.anchorterminal.com/compare/kestra-vs-paragon.md)\n- [Kestra vs Microsoft Power Automate](https://www.anchorterminal.com/compare/kestra-vs-power-automate.md)\n- [Kestra vs Tray.ai API + MCP](https://www.anchorterminal.com/compare/kestra-vs-tray.md)\n- [Kestra vs Windmill API + MCP](https://www.anchorterminal.com/compare/kestra-vs-windmill.md)\n- [Kestra vs Workato API + MCP](https://www.anchorterminal.com/compare/kestra-vs-workato.md)\n- [Make API + MCP vs Pipedream API + MCP](https://www.anchorterminal.com/compare/make-vs-pipedream.md)\n- [n8n API + MCP vs Pipedream API + MCP](https://www.anchorterminal.com/compare/n8n-vs-pipedream.md)\n- [Pipedream API + MCP vs Microsoft Power Automate](https://www.anchorterminal.com/compare/pipedream-vs-power-automate.md)\n- [Pipedream API + MCP vs Tray.ai API + MCP](https://www.anchorterminal.com/compare/pipedream-vs-tray.md)\n- [Pipedream API + MCP vs Windmill API + MCP](https://www.anchorterminal.com/compare/pipedream-vs-windmill.md)\n- [Pipedream API + MCP vs Workato API + MCP](https://www.anchorterminal.com/compare/pipedream-vs-workato.md)\n- [Paragon ActionKit + MCP vs Pipedream API + MCP](https://www.anchorterminal.com/compare/paragon-vs-pipedream.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-09", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Kestra vs Pipedream API + MCP", "url": "" } ], "description": "Pipedream API + MCP scores 65.5 (B) on agent readiness against Kestra's 63.6 (B), and leads in 2 of 7 scored categories. Kestra leads on reliability, schema \u0026 documentation, payments \u0026 pricing and maintenance \u0026 community. Both do automation workflows. Category scores, facts…", "facts": [ "Kestra B 63.6", "Pipedream API + MCP B 65.5", "scores" ], "h1": "Kestra vs Pipedream API + MCP", "image": "https://www.anchorterminal.com/assets/og/compare-kestra-vs-pipedream.png", "path": "/compare/kestra-vs-pipedream", "published": "2026-10-01", "section": "tools", "title": "Kestra vs Pipedream API + MCP for AI agents, B 63.6 vs B 65.5", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/kestra-vs-pipedream" }, "tokens": { "markdown": 2300, "slim": 730 }, "version": 1 }