{ "data": { "a": { "slug": "kilo-code-cli", "name": "Kilo Code CLI", "vendor": "Kilo Code Inc.", "vendorUrl": "https://kilo.ai", "kind": "harness", "category": "agent-harnesses", "summary": "Open-source coding agent for the terminal, forked from opencode and built from the same repository as Kilo's VS Code and JetBrains extensions. It runs with your own provider key, a local model or the Kilo Gateway.", "url": "https://www.anchorterminal.com/tools/kilo-code-cli", "markdownUrl": "https://www.anchorterminal.com/tools/kilo-code-cli.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/kilo-code-cli.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/kilo-code-cli.json", "dns": "kilo-code-cli.grade.anchorterminal.com", "repo": "https://github.com/Kilo-Org/kilocode", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "@kilocode/cli" }, { "registry": "npm", "name": "@kilocode/sdk" } ], "auth": "mixed", "authNotes": "Your own provider key in `~/.config/kilo/kilo.jsonc` or the environment, a local model, or a Kilo account through `kilo auth login` for the Kilo Gateway and its free models. `kilo serve` runs unauthenticated unless `KILO_SERVER_PASSWORD` is set.", "pricing": "freemium", "pricingNotes": "The CLI is free and MIT-licensed, and needs no Kilo account with your own key or a local model. Kilo Gateway credits are billed at exact provider rates with a 5 per cent processing fee on credit purchases, and paid credits bought from 27 October 2026 expire after one year. Kilo Pass is $19, $49 or $199 a month, Teams is $15 a user a month and Enterprise is quoted (https://kilo.ai/pricing).", "priceSummary": "$19 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the pricing page or the README (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 27539, "npmWeekly": 32804, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://kilo.ai/docs/code-with-ai/platforms/cli", "llmsTxt": "https://kilo.ai/docs/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "harness", "coding-agent", "cli", "open-source", "typescript", "mcp", "llms-txt", "telemetry-default-on", "freemium", "no-card", "local" ], "lastRelease": "2026-10-26", "graded": true, "anchor": { "graded": true, "score": 68, "grade": "B", "agentReady": false, "rank": 272, "ranked": true, "rankOf": 1354, "categoryRank": 8, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 87, "payments": 50, "reliability": 85, "schema": 90, "security": 64, "transparency": 76 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -7, "negativeNotes": [ "2026-10-14. 7.8.10 added the conda client ID to default-on telemetry. When `~/.conda/aau_token` exists the CLI runs `conda info --json --offline` and attaches the ID (`aauClientToken`) to every PostHog event, and a commit hashing it was reverted. Neither the changelog nor the docs mention it. It respects Kilo's opt-out and conda's `anaconda_anon_usage: false`. -2. https://github.com/Kilo-Org/kilocode/blob/main/packages/kilo-telemetry/src/conda.ts", "2026-10-16 and 2026-10-26. Breaking changes in releases without notice. 7.8.13, filed as a patch change, made a custom delegator's own `edit` rules, path-scoped denies such as `secrets/**` included, stop applying to the subagents it starts, so a configuration that relied on them no longer confines delegated writes. 7.8.18 stopped remote MCP servers that redirect across origins from connecting. Neither is marked breaking, every release stays on 7.8.x, and no earlier notice was found. The redirect change closes a security issue and the changelog names the fix, so one term at the floor, -3, as firecrawl-mcp and docker-agent took. https://github.com/Kilo-Org/kilocode/blob/main/packages/opencode/CHANGELOG.md", "2026-10-22. 7.8.16 stopped running shell expressions in MCP prompt text. Before it, a `!`cmd`` expression in a prompt served by a connected MCP server ran as a local shell command when the user invoked that prompt (commit 2e17931, with a test that shows the expression ran). Fixed in a release, documented only as a changelog line with no advisory, -2, as docker-agent's fixed skill-file command execution took. https://github.com/Kilo-Org/kilocode/commit/2e1793154f6bef7632516a75a53d421a2e96b718" ], "verdict": "Shell commands ask before running by default, and an optional operating-system sandbox blocks writes outside the workspace and outbound network. Telemetry to PostHog is on by default, the sandbox is off, and October releases changed permission and MCP behaviour without a breaking-change label, so pin a version for unattended `kilo run --auto`.", "bestFor": "Developers who want an open-source terminal agent with per-tool permission rules, an optional sandbox and a choice of provider, and the same engine in VS Code and JetBrains.", "strengths": [ "Permission rules of `allow`, `ask` or `deny` per tool with glob patterns, and shell commands asking by default outside a built-in allow list", "A sandbox on macOS and Linux that limits writes, blocks network by default and refuses to run when it can't be enforced", "Project config can't weaken the sandbox or read environment variables through `{env:VAR}`", "Your own provider key or a local model works with no Kilo account", "Releases most weeks, 51 tagged releases between 4 August and 28 October 2026" ], "weaknesses": [ "Telemetry to PostHog is on by default, attaches the conda client ID since 7.8.10, and the privacy policy doesn't mention it", "The sandbox is off by default and unavailable on Windows", "`kilo run` lists no flag for a turn, time or cost limit", "The terms grant a perpetual licence to use uploaded Customer Data to improve Kilo's services", "SECURITY.md still says the CLI has no sandbox, and NVD records two unanswered low-severity CVEs from May 2026", "7.8.13 and 7.8.18 changed permission and MCP behaviour under patch-level versions with no breaking-change label" ], "agentNotes": [ "Set `sandbox.enabled` to true in the global `kilo.jsonc` before `kilo run --auto`. `--auto` approves every permission request not explicitly denied", "Set `experimental.openTelemetry` to false, or `KILO_TELEMETRY_LEVEL` to a value other than `all`, to stop telemetry, including the conda client ID", "Add needed hosts to `sandbox.allowed_hosts` in global config. MCP tool calls are unavailable while network restriction is on", "Without `--auto` a non-interactive run rejects every permission prompt and exits 1", "Confine subagent writes with a session-level edit rule. Since 7.8.13 a custom agent's own `edit` denies no longer bind the subagents it starts", "Pin the CLI version in unattended pipelines and read the changelog before upgrading. Behaviour changes ship under 7.8.x patch versions" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 2.3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 68 } ], "editorialScores": { "ergonomics": 72, "maintenance": 87, "payments": 50, "reliability": 85, "schema": 90, "security": 64, "transparency": 61 }, "provenanceScore": 90, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install -g @kilocode/cli # or: brew install Kilo-Org/tap/kilo", "headless": { "command": "kilo run --auto --format json \"$TASK\"" } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/kilo-code-cli" }, "area": "frameworks", "unitPrices": [ { "item": "Kilo Pass, Starter", "unit": "month", "usd": 19, "note": "up to $26.60 a month in credits, optional" }, { "item": "Kilo Pass, Pro", "unit": "month", "usd": 49, "note": "up to $68.60 a month in credits, optional" }, { "item": "Kilo Pass, Expert", "unit": "month", "usd": 199, "note": "up to $278.60 a month in credits, optional" }, { "item": "Teams plan", "unit": "seat-month", "usd": 15, "note": "model use billed separately at provider rates" } ], "provenance": { "legalEntity": "Kilo Code Inc. (the terms are a contract with Anaconda, Inc. on behalf of itself and its affiliates, including Kilo Code Inc.)", "domain": "kilo.ai", "domainRegistered": "2017-12-16", "endpointOnVendorDomain": null, "terms": "https://kilo.ai/terms", "privacy": "https://kilo.ai/privacy", "statusPage": "https://status.kilo.ai", "changelog": "https://github.com/Kilo-Org/kilocode/blob/main/packages/opencode/CHANGELOG.md", "securityTxt": "valid", "checked": "2026-11-01", "notes": [ "The terms (last updated 30 September 2026) name the CLI among the services they cover and are made with Anaconda, Inc. The privacy policy (29 May 2026) names Kilo Code Inc. as data controller.", "kilo.ai/.well-known/security.txt lists security@kilo.ai and the policy at kilo.ai/security, names the CLI in scope and expires on 2026-12-31.", "trust.kilo.ai redirects to trust.anaconda.com, which has a Kilo Code section.", "status.kilo.ai is a Statuspage site for the website, gateway and cloud platform. The CLI runs on the owner's machine.", "PRIVACY.md in the repository is a separate short policy for the CLI dated March 2025.", "Anaconda announced its acquisition of Kilo Code on 15 July 2026, and kilo.ai's footer links the announcement. Re-read on 1 November with the terms, privacy policy and security.txt, which are unchanged." ], "score": 90 }, "requirements": { "card": "no", "freeTier": true, "minutes": 3, "credential": "mixed", "hosting": [ "self-hosted" ], "euResidency": "unknown", "trainsOnData": "unknown", "zeroRetention": "unknown", "selfHost": "yes" }, "pageJsonUrl": "https://www.anchorterminal.com/tools/kilo-code-cli.json", "live": { "slug": "kilo-code-cli", "vendorStatus": { "page": "https://status.kilo.ai", "indicator": "maintenance", "summary": "Service Under Maintenance", "checkedAt": "2026-11-06T09:43:13.315480479Z" }, "versions": [ { "registry": "github", "name": "Kilo-Org/kilocode", "version": "v7.8.27", "released": "2026-11-05", "seenAt": "2026-11-05T21:40:32.834600134Z" }, { "registry": "npm", "name": "@kilocode/cli", "version": "7.8.27", "seenAt": "2026-11-05T21:40:30.631006144Z" }, { "registry": "npm", "name": "@kilocode/sdk", "version": "7.8.27", "seenAt": "2026-11-05T21:40:30.857029878Z" } ], "githubStars": 27870, "npmWeekly": 56041, "securityTxt": { "url": "https://kilo.ai/.well-known/security.txt", "state": "valid", "expires": "2026-12-31T23:59:59.000Z", "checkedAt": "2026-11-05T15:55:10.970675599Z" }, "llmsTxt": { "url": "https://kilo.ai/docs/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-05T15:26:20.528276576Z" }, "domain": { "domain": "kilo.ai", "registered": "2017-12-16", "source": "https://rdap.identitydigital.services/rdap/domain/kilo.ai", "checkedAt": "2026-11-01T14:08:08.435146626Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/Kilo-Org/kilocode/main/packages/opencode/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-05T13:03:01.906020556Z", "changedAt": "2026-11-05T13:03:01.906020556Z", "fingerprint": "183cafa519d3" }, { "url": "https://kilo.ai/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-05T12:57:20.655363215Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "9480711dc26d" }, { "url": "https://kilo.ai/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-05T12:57:22.859437415Z", "changedAt": "2026-10-21T00:28:45.897088737Z", "fingerprint": "438622fad605" }, { "url": "https://kilo.ai/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-05T12:57:24.827346552Z", "changedAt": "2026-11-03T07:52:13.378291095Z", "fingerprint": "b97a979be9fa" } ], "github": { "repo": "kilo-org/kilocode", "checkedAt": "2026-11-02T08:58:32.131443556Z", "stars": 27831, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-02T08:57:07Z", "openIssues": 611, "openPRs": 221, "issuesOpened90d": 915, "issuesClosed90d": 889, "prsMerged90d": 1388, "ci": { "branch": "main", "runs": 50, "success": 44, "failure": 6, "other": 0, "latest": "success", "latestAt": "2026-11-02T08:48:42Z" }, "replies": { "sampled": 23, "unanswered": 11, "medianDays": 1.4 } }, "updatedAt": "2026-11-06T09:43:13.315480479Z" } }, "answer": "OpenAI Agents API scores 73.3 (BB) on agent readiness against Kilo Code CLI's 68 (B), and leads in 3 of 7 scored categories. Kilo Code CLI leads on reliability and payments \u0026 pricing.", "b": { "slug": "openai-agents-api", "name": "OpenAI Agents API", "vendor": "OpenAI", "vendorUrl": "https://openai.com/index/introducing-the-agents-api/", "kind": "http-api", "category": "agent-harnesses", "summary": "The OpenAI Agents API runs OpenAI's managed Codex harness as a hosted service. One call creates a session with a model, tools, MCP servers, subagents and an OpenAI-hosted or self-hosted sandbox, and OpenAI runs the loop.", "url": "https://www.anchorterminal.com/tools/openai-agents-api", "markdownUrl": "https://www.anchorterminal.com/tools/openai-agents-api.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/openai-agents-api.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/openai-agents-api.json", "dns": "openai-agents-api.grade.anchorterminal.com", "license": "Proprietary hosted API under OpenAI's Services Agreement. The SDKs are Apache 2.0", "transports": [ "https" ], "remoteUrl": "https://api.openai.com/v1/agents/sessions", "packages": [ { "registry": "pypi", "name": "openai" }, { "registry": "npm", "name": "openai" } ], "auth": "api-key", "authNotes": "An OpenAI project API key as a Bearer token, with the header `OpenAI-Beta: agents=v1`. Project keys can be restricted per endpoint or read-only, and service accounts and workload identity federation are available, per the openai-api listing. Signing up and creating a key need a person in a browser.", "pricing": "usage", "pricingNotes": "No fee for the API itself. Model tokens are billed at the chosen model's API rates, OpenAI tools at their built-in rates (web search $10.00 per 1,000 calls plus content tokens), and OpenAI-hosted sandboxes at container rates, $0.03 for 1 GB, $0.12 for 4 GB, $0.48 for 16 GB and $1.92 for 64 GB per 20-minute session, billed by the minute with a 5-minute minimum. Since 9 October sandbox compute is billed only during active turns (checked 2026-11-06).", "priceSummary": "Pay per use", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Agents API guides or on OpenAI's pricing page; billing is to an OpenAI account (checked 2026-11-06).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://developers.openai.com/api/docs/guides/agents-api/overview", "llmsTxt": "https://developers.openai.com/api/docs/llms.txt", "capabilities": [ "agent.harness" ], "tags": [ "official", "hosted", "beta", "usage-priced", "llms-txt", "status-page", "mcp-client", "sandbox", "subagents", "webhooks", "soc2", "iso27001", "bug-bounty" ], "lastRelease": "2026-10-16", "graded": true, "anchor": { "graded": true, "score": 73.3, "grade": "BB", "agentReady": true, "rank": 99, "ranked": true, "rankOf": 1354, "categoryRank": 2, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 80, "maintenance": 87, "payments": 30, "reliability": 60, "schema": 88, "security": 87, "transparency": 85 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "OpenAI's hosted agent runtime, the Codex harness behind one session call, with MCP, functions, web search, computer use, subagents and sandboxes on OpenAI or your own infrastructure. Documentation, errors and SDKs are thorough. It's still public beta, can't use Zero Data Retention and keeps data in the United States only.", "bestFor": "Teams that want OpenAI to run the agent loop, with sandboxes, MCP tools and subagents, and are fine with a beta API, US-only data residency and no Zero Data Retention.", "strengths": [ "One session call configures the model, tools, MCP servers, subagents and the sandbox, and OpenAI runs and recovers the loop", "Sandboxes on OpenAI or self-hosted, with guides for ten providers including E2B, Daytona, Modal, Cloudflare and Vercel", "An errors guide with codes per status and turn, Retry-After and a check-before-retry procedure", "Webhooks, streamed events, tracing and usage views for each session", "SDK examples in Python, JavaScript, Go, Java and Ruby", "Status page with its own Agents component" ], "weaknesses": [ "Public beta since 10 September 2026 behind the agents=v1 beta header, with no GA date", "Not eligible for Zero Data Retention, and data residency is United States only", "No idempotency key for session or turn requests; retries depend on checking state first", "One API-wide major outage on 29 September included it, plus several smaller incidents since release", "No retention period stated for published artifacts after a sandbox expires" ], "agentNotes": [ "POST https://api.openai.com/v1/agents/sessions with a project key and the header OpenAI-Beta: agents=v1, or use client.beta.agents in the SDKs", "Before retrying, retrieve the session and turn and check which actions completed, since there's no idempotency key", "Set the sandbox network to restricted with an allowlist of up to 100 hosts when the agent doesn't need the open web", "Save files from /workspace/outputs before deleting a session; no retention period is stated for artifacts", "Don't send data that needs Zero Data Retention or non-US residency; the Agents API supports neither" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 73.3 } ], "editorialScores": { "ergonomics": 80, "maintenance": 87, "payments": 30, "reliability": 60, "schema": 88, "security": 87, "transparency": 75 }, "provenanceScore": 95, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://api.openai.com/v1/agents/sessions \\\n -H \"Authorization: Bearer $OPENAI_API_KEY\" \\\n -H \"OpenAI-Beta: agents=v1\" \\\n -H \"Content-Type: application/json\" \\\n -d @session.json # model, tools, environment and input, per the quickstart" }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/openai-agents-api" }, "sameCompany": [ "openai-api", "openai-embeddings", "openai-guardrails", "openai-moderation", "openai-image-api", "openai-sora", "openai-speech-to-text", "gpt-live", "openai-realtime", "openai-agents-sdk", "openai-decisions-api", "openai-codex", "gpt-oss-120b", "gpt-oss-20b" ], "area": "frameworks", "provenance": { "legalEntity": "OpenAI OpCo, LLC", "domain": "openai.com", "domainRegistered": "2007-01-19", "domainNote": "openai.com was registered in 2007, before OpenAI existed, per the openai-api listing.", "endpointOnVendorDomain": true, "terms": "https://openai.com/policies/services-agreement/", "privacy": "https://openai.com/policies/privacy-policy/", "statusPage": "https://status.openai.com", "changelog": "https://developers.openai.com/api/docs/changelog", "securityTxt": "valid", "checked": "2026-11-06", "notes": [ "The endpoint is on api.openai.com, the same host as the rest of the OpenAI API. Terms, privacy, security.txt and the domain are the openai-api listing's readings." ], "score": 95 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/openai-agents-api.json", "live": { "slug": "openai-agents-api", "probe": { "target": "https://api.openai.com/v1/agents/sessions", "method": "get", "lastAt": "2026-11-06T09:47:41.371658489Z", "lastOk": true, "lastStatus": 400, "lastMs": 162, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 148, "p95ms24h": 166, "samples24h": 47, "samples30d": 47, "days": [ { "date": "2026-11-06", "probes": 47, "ok": 47 } ] }, "vendorStatus": { "page": "https://status.openai.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-06T09:43:26.425829944Z" }, "updatedAt": "2026-11-06T09:47:41.371658489Z" } }, "edges": [ { "by": 25, "category": "reliability", "leads": "kilo-code-cli", "name": "Reliability", "reasons": { "a": "Local-package reading. `@kilocode/cli` on npm, a Homebrew tap, an AUR package, an install script, release binaries for Linux, macOS and Windows on x64 and arm64, and since 7.8.20 (27 October) a `kilo-cli` conda package on Anaconda.org (20). Public CI, and the 40 most recent completed workflow runs on main on 8 October 2026 all succeeded, per the 8 October check, not re-read on 17 October or 1 November (25). 448 open issues and 147 open pull requests, a workflow that closes issues after 60 quiet days and pull requests after 30, and open reports from 7 October of a hanging turn (#14876) and of exhausted 503 retries ending a run with no visible error (#14877), per the 8 October check, not re-read since (15). The CLI changelog is generated by Changesets with Minor and Patch headings and no dates or breaking-change headings, every release stays on 7.8.x whatever its heading, and 7.8.13 and 7.8.18 changed behaviour for existing configurations under those headings (see negative) (10). 7.8.18 on the npm `latest` tag on 1 November, past 1.0 (15). 20 + 25 + 15 + 10 + 15 = 85.", "b": "Read as a hosted API. status.openai.com has an Agents component under APIs (20). Since release on 10 September (57 days, not 90), the feed names the Agents API in a degraded-performance incident on 14 September, the elevated errors across ChatGPT, Codex and the API on 29 September (the openai-api listing reads that one as a major, 17:52 to 23:14 UTC), computer use issues and degraded workspace agents on 6 and 7 October, degraded performance across the APIs for 22 minutes on 21 October, and overbilling for hosted containers on 19 September. One major, the rest minor (10). Rate limits come from the shared guide, published per tier and model with headers, and the errors page adds a Files API allowance on session creation (15). 429 and 503 guidance with Retry-After, capped backoff and a check-then-retry procedure for turns (15). The Scale Tier SLA in the openai-api listing isn't shown to cover a beta API (0). Public beta behind the agents=v1 header (0). 20 + 10 + 15 + 15 + 0 + 0 = 60." }, "scores": { "a": 85, "b": 60 } }, { "by": 23, "category": "security", "leads": "openai-agents-api", "name": "Security \u0026 auth", "reasons": { "a": "Harness reading of the framework checklist. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Telemetry is on by default and goes to PostHog in the United States, the source links the machine identifier to the account email after a Kilo sign-in, and since 7.8.10 (14 October) it also attaches the conda client ID when `~/.conda/aau_token` exists (see negative). It is turned off with `experimental.openTelemetry` or `KILO_TELEMETRY_LEVEL`. Provider keys stay on the machine (14). Shell commands ask by default outside a built-in allow list, reads of `.env` files and paths outside the project ask, and edits inside the project run without asking. An operating-system sandbox (Seatbelt on macOS, Bubblewrap on Linux, none on Windows) limits writes and blocks the network, refuses to run when it can't be enforced, and is off by default. `--auto` approves everything not explicitly denied. Since 7.8.13 a custom agent's own `edit` denies no longer bind the subagents it starts (15). The sandboxing page covers prompt injection and its limits, project config can't weaken the sandbox, and `{env:VAR}` is resolved only in trusted config. 7.8.16 (22 October) stopped running shell expressions found in MCP prompt text (see negative) and restricted MCP OAuth URLs to HTTP(S), and 7.8.18 stopped following cross-origin redirects for MCP HTTP and OAuth requests (11). Session export, `kilo stats` and OTLP export of traces and logs, with audit logs on the Enterprise plan (12). A valid security.txt (expires 2026-12-31, re-read on 1 November), a disclosure policy that cites HackerOne's standards and safe harbour, CodeQL in CI and no published repository advisories, though 7.8.16's MCP prompt fix appeared only as a changelog line. NVD lists CVE-2026-8766 and CVE-2026-8765 (both low, through 7.0.47, published 17 May 2026, the second a path traversal in the opt-in server's file diff route) and says the vendor didn't respond, and SECURITY.md still says the CLI has no sandbox (12). 14 + 15 + 11 + 12 + 12 = 64.", "b": "Project keys with restricted per-endpoint permissions, service accounts and workload identity, per the openai-api listing; we didn't confirm a key can be limited to /v1/agents (27 of 30). Automatic review for approvals, a sandbox network restricted to a host allowlist, vaults for secrets and a sandbox security guide (17 of 20). The agent reads web pages, MCP results and browser content; the sandbox security guide and approval flow are the mitigations, with no prompt-injection guide of its own found (8 of 15). Tracing, observability and usage per session and admin audit logs (15). SOC 2 Type 2, ISO 27001 family, Bugcrowd bounty and a disclosure policy, per the openai-api listing (20). Not ZDR-eligible and US residency only, recorded under transparency. 27 + 17 + 8 + 15 + 20 = 87." }, "scores": { "a": 64, "b": 87 } }, { "by": 20, "category": "payments", "leads": "kilo-code-cli", "name": "Payments \u0026 pricing", "reasons": { "a": "No payment protocol (0). Scored on Kilo's paid options, as with Cline. Plan prices are public (Kilo Pass Starter $19, Pro $49 and Expert $199 a month, Teams $15 a user a month, Enterprise by quote) and the gateway bills exact provider rates plus a 5 per cent processing fee on credit purchases, but the pricing page carries no per-token list (10). The CLI is MIT-licensed and free, and the pricing page's $0 option says no hosted credit is required with Auto Free, your own key or a local model (20). Your own provider key or a local model works with no Kilo account, so an agent can install and run it without a sign-up (20). Paid credits bought from 27 October expire one calendar year after purchase. 0 + 10 + 20 + 20 = 50.", "b": "No machine payment protocol (0). Model, tool and container prices published without a login, and no fee for the API itself (20). The Free tier reading of the openai-api listing, half (10). Sign-up in a browser (0). 0 + 20 + 10 + 0 = 30." }, "scores": { "a": 50, "b": 30 } }, { "by": 9, "category": "transparency", "leads": "openai-agents-api", "name": "Transparency \u0026 trust", "reasons": { "a": "MIT, with opencode's copyright kept in the licence file (30). The privacy policy (29 May 2026, re-read on 1 November) names Kilo Code Inc. as controller, says data is stored in the United States and lists Stripe, OpenRouter, model providers, AppsFlyer and Sentry, but it doesn't mention the CLI's PostHog telemetry. PRIVACY.md in the repository is dated March 2025 and is silent on telemetry too. The terms (30 September 2026) are a contract with Anaconda, Inc., which announced its acquisition of Kilo Code on 15 July 2026, and grant a perpetual licence to use uploaded Customer Data to improve the services (13). `kilo console` is marked deprecated with no removal date, and updated terms apply after 30 days. No written deprecation policy found (8). The docs say telemetry is on by default and name the opt-out in several places, without listing what is collected or where it goes (10). 30 + 13 + 8 + 10 = 61.", "b": "Closed service with clear terms, Apache-2.0 SDKs (15). Session state retained until deleted, deletable sessions and artifacts, not ZDR-eligible, US residency only, and the data-controls guide agrees; no retention period for artifacts after a sandbox expires (25 of 30). Dated deprecation notices with minimum periods for GA models; a beta API can change faster (15 of 20). Subprocessors and processing countries listed, per the openai-api listing (20). 15 + 25 + 15 + 20 = 75." }, "scores": { "a": 76, "b": 85 } }, { "by": 8, "category": "ergonomics", "leads": "openai-agents-api", "name": "Agent ergonomics", "reasons": { "a": "Framework reading, adapted to a harness driven by a pipeline. Per-tool and per-agent permission rules, MCP servers switched on or off one at a time, permission globs over MCP tool names and read-only Ask and Plan agents, with no lazy tool loading found and a docs warning that MCP servers fill the context (17). Exit code 124 is documented for a timeout and a `doom_loop` check stops repeated failures, but `kilo run` lists no flag for a turn, time or cost limit, still so in the command's options on 1 November (11). Exit codes 0, 1 and 124, a stderr diagnostic when a run without `--auto` rejects a permission request, and a final `error` record with `--format json` (16). `--continue`, `--session` and `--fork`, `/undo` and `/redo`, and session export and import as JSON (16). `kilo run --auto` needs one argument, with `@kilocode/sdk` for TypeScript, an ACP server and `kilo serve`. We found no second-language SDK on a registry (12). 17 + 11 + 16 + 16 + 12 = 72.", "b": "Read as an API an agent drives. Context is compacted automatically, and session budgets and streamed events keep output sized (20 of 25). Sessions can be listed, continued and steered, events streamed or sent by webhook, artifacts fetched (15 of 20). Actionable error codes with recovery steps (20). No idempotency key; a documented check-then-retry procedure (10 of 20). One session call with defaults (medium sandbox, network enabled), SDKs in five languages (15). 20 + 15 + 20 + 10 + 15 = 80." }, "scores": { "a": 72, "b": 80 } } ], "facts": [ { "a": "Agent harness", "b": "HTTP API", "name": "Kind" }, { "a": "Kilo Code Inc.", "b": "OpenAI", "name": "Vendor" }, { "a": "no (local only)", "b": "https://api.openai.com/v1/agents/sessions", "name": "Hosted endpoint" }, { "a": "", "b": "https", "name": "Transports" }, { "a": "OAuth or key", "b": "API key", "name": "Auth" }, { "a": "Freemium", "b": "Pay per use", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Proprietary hosted API under OpenAI's Services Agreement. The SDKs are Apache 2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-26", "b": "2026-10-16", "name": "Last release" }, { "a": "2026-09-30", "b": "couldn't be read", "name": "Terms last updated" }, { "a": "2026-05-29", "b": "couldn't be read", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "couldn't be read", "name": "Customer content may train models" }, { "a": "yes", "b": "couldn't be read", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "couldn't be read", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "couldn't be read", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "couldn't be read", "name": "Arbitration or class-action waiver" }, { "a": "28k stars, 33k npm/wk", "b": "none", "name": "Popularity" }, { "a": "2.3/5 (4)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "OpenAI Agents API scores 73.3 (BB) on agent readiness against Kilo Code CLI's 68 (B), and leads in 3 of 7 scored categories. Kilo Code CLI leads on reliability and payments \u0026 pricing.", "question": "Which is better for AI agents, Kilo Code CLI or OpenAI Agents API?" }, { "answer": "No hosted endpoint is listed for Kilo Code CLI. OpenAI Agents API has a hosted endpoint at https://api.openai.com/v1/agents/sessions.", "question": "Can an agent call Kilo Code CLI and OpenAI Agents API without installing anything?" }, { "answer": "Kilo Code CLI is open source (MIT). No open-source release is listed for OpenAI Agents API.", "question": "Are Kilo Code CLI and OpenAI Agents API open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 85 against 60", "Payments \u0026 pricing, 50 against 30" ], "also": [ "Free to start without a card", "Open source" ], "goodFor": "Developers who want an open-source terminal agent with per-tool permission rules, an optional sandbox and a choice of provider, and the same engine in VS Code and JetBrains.", "slug": "kilo-code-cli", "watchFor": "Telemetry to PostHog is on by default, attaches the conda client ID since 7.8.10, and the privacy policy doesn't mention it" }, { "aheadOn": [ "Agent ergonomics, 80 against 72", "Security \u0026 auth, 87 against 64", "Transparency \u0026 trust, 85 against 76" ], "also": [ "Agent-ready, a grade of BB or better", "A hosted endpoint, with nothing to install", "No incidents deducted, where Kilo Code CLI loses 7 points for them" ], "goodFor": "Teams that want OpenAI to run the agent loop, with sandboxes, MCP tools and subagents, and are fine with a beta API, US-only data residency and no Zero Data Retention.", "slug": "openai-agents-api", "watchFor": "Public beta since 10 September 2026 behind the agents=v1 beta header, with no GA date" } ], "history": { "kilo-code-cli": [ { "causes": [ "event" ], "date": "2026-11-01", "delta": -5, "from": 73, "fromGrade": "BB", "to": 68, "toGrade": "B" }, { "causes": [ "evidence", "event" ], "date": "2026-10-17", "delta": -2.4, "from": 75.4, "fromGrade": "BB", "to": 73, "toGrade": "BB" } ], "openai-agents-api": null }, "job": { "capability": "agent.harness", "name": "Agent harnesses" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli.json", "title": "Agent Zero vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-openai-agents-api.json", "title": "Agent Zero vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-kilo-code-cli.json", "title": "Aider vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/aider-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-openai-agents-api.json", "title": "Aider vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/aider-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-kilo-code-cli.json", "title": "Amp vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/amp-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-openai-agents-api.json", "title": "Amp vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/amp-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-kilo-code-cli.json", "title": "Antigravity CLI vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-openai-agents-api.json", "title": "Antigravity CLI vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-kilo-code-cli.json", "title": "Auggie CLI vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/auggie-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-openai-agents-api.json", "title": "Auggie CLI vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/auggie-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/axlr-vs-kilo-code-cli.json", "title": "AXLR vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/axlr-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/axlr-vs-openai-agents-api.json", "title": "AXLR vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/axlr-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli.json", "title": "Claude Code vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-openai-agents-api.json", "title": "Claude Code vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/claude-code-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-kilo-code-cli.json", "title": "Cline vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/cline-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-openai-agents-api.json", "title": "Cline vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/cline-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-kilo-code-cli.json", "title": "Crush vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/crush-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-openai-agents-api.json", "title": "Crush vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/crush-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-kilo-code-cli.json", "title": "Cursor CLI vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-openai-agents-api.json", "title": "Cursor CLI vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-kilo-code-cli.json", "title": "DeepSeek Harness (dsh) vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-openai-agents-api.json", "title": "DeepSeek Harness (dsh) vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kilo-code-cli.json", "title": "dsh-superagent (DeepSeek) vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openai-agents-api.json", "title": "dsh-superagent (DeepSeek) vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-kilo-code-cli.json", "title": "Devin vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/devin-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-openai-agents-api.json", "title": "Devin vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/devin-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-kilo-code-cli.json", "title": "Droid CLI vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-openai-agents-api.json", "title": "Droid CLI vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-kilo-code-cli.json", "title": "Pi vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-openai-agents-api.json", "title": "Pi vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-kilo-code-cli.json", "title": "Gemini CLI vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-openai-agents-api.json", "title": "Gemini CLI vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-kilo-code-cli.json", "title": "GitHub Copilot CLI vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-openai-agents-api.json", "title": "GitHub Copilot CLI vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-kilo-code-cli.json", "title": "goose vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/goose-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-openai-agents-api.json", "title": "goose vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/goose-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-kilo-code-cli.json", "title": "Harness² vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/harness2-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-openai-agents-api.json", "title": "Harness² vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/harness2-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-kilo-code-cli.json", "title": "HarnessRouter vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-openai-agents-api.json", "title": "HarnessRouter vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/jules-vs-kilo-code-cli.json", "title": "Jules vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/jules-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/jules-vs-openai-agents-api.json", "title": "Jules vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/jules-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/junie-vs-kilo-code-cli.json", "title": "Junie CLI vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/junie-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/junie-vs-openai-agents-api.json", "title": "Junie CLI vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/junie-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-kimi-code-cli.json", "title": "Kilo Code CLI vs Kimi Code CLI", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-kimi-code-cli" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-kiro-cli.json", "title": "Kilo Code CLI vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-mini-swe-agent.json", "title": "Kilo Code CLI vs mini-swe-agent", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-mini-swe-agent" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-minimax-code.json", "title": "Kilo Code CLI vs MiniMax Code", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-minimax-code" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-mistral-vibe-cli.json", "title": "Kilo Code CLI vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-muse-code.json", "title": "Kilo Code CLI vs Muse Code", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-muse-code" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-codex.json", "title": "Kilo Code CLI vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-opencode.json", "title": "Kilo Code CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openhands.json", "title": "Kilo Code CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openmausbot.json", "title": "Kilo Code CLI vs OpenMausBot", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openmausbot" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-prime-agent.json", "title": "Kilo Code CLI vs Prime Agent", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-qoder-cli.json", "title": "Kilo Code CLI vs Qoder CLI", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-qoder-cli" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-qwen-code.json", "title": "Kilo Code CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-reflection-mirror.json", "title": "Kilo Code CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-rovo-dev-cli.json", "title": "Kilo Code CLI vs Rovo Dev CLI", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-rovo-dev-cli" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-unstoppable.json", "title": "Kilo Code CLI vs Unstoppable", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-unstoppable" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading.json", "title": "Kilo Code CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-warp.json", "title": "Kilo Code CLI vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-openai-agents-api.json", "title": "Kimi Code CLI vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-openai-agents-api.json", "title": "Kiro CLI vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-openai-agents-api.json", "title": "mini-swe-agent vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/minimax-code-vs-openai-agents-api.json", "title": "MiniMax Code vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/minimax-code-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-openai-agents-api.json", "title": "Mistral Vibe CLI vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/muse-code-vs-openai-agents-api.json", "title": "Muse Code vs OpenAI Agents API", "url": "https://www.anchorterminal.com/compare/muse-code-vs-openai-agents-api" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-openai-codex.json", "title": "OpenAI Agents API vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-opencode.json", "title": "OpenAI Agents API vs OpenCode", "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-openhands.json", "title": "OpenAI Agents API vs OpenHands", "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-openmausbot.json", "title": "OpenAI Agents API vs OpenMausBot", "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-openmausbot" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-prime-agent.json", "title": "OpenAI Agents API vs Prime Agent", "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-qoder-cli.json", "title": "OpenAI Agents API vs Qoder CLI", "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-qoder-cli" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-qwen-code.json", "title": "OpenAI Agents API vs Qwen Code", "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-reflection-mirror.json", "title": "OpenAI Agents API vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-rovo-dev-cli.json", "title": "OpenAI Agents API vs Rovo Dev CLI", "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-rovo-dev-cli" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-unstoppable.json", "title": "OpenAI Agents API vs Unstoppable", "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-unstoppable" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-vibe-trading.json", "title": "OpenAI Agents API vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-warp.json", "title": "OpenAI Agents API vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-kilo-code-cli.json", "title": "Clawboo vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/clawboo-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-kilo-code-cli.json", "title": "CLI Manager vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-kilo-code-cli.json", "title": "Harness vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip.json", "title": "Kilo Code CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-parallax-agents.json", "title": "Kilo Code CLI vs Parallax", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-parallax-agents" } ], "panel": null, "scores": [ { "by": 25, "edge": "kilo-code-cli", "key": "reliability", "kilo-code-cli": 85, "name": "Reliability", "openai-agents-api": 60, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 2, "edge": "kilo-code-cli", "key": "schema", "kilo-code-cli": 90, "name": "Schema \u0026 documentation", "openai-agents-api": 88, "weight": 13 }, { "by": 8, "edge": "openai-agents-api", "key": "ergonomics", "kilo-code-cli": 72, "name": "Agent ergonomics", "openai-agents-api": 80, "weight": 13 }, { "by": 23, "edge": "openai-agents-api", "key": "security", "kilo-code-cli": 64, "name": "Security \u0026 auth", "openai-agents-api": 87, "weight": 14 }, { "by": 20, "edge": "kilo-code-cli", "key": "payments", "kilo-code-cli": 50, "name": "Payments \u0026 pricing", "openai-agents-api": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 0, "edge": "", "key": "maintenance", "kilo-code-cli": 87, "name": "Maintenance \u0026 community", "openai-agents-api": 87, "weight": 7 }, { "by": 9, "edge": "openai-agents-api", "key": "transparency", "kilo-code-cli": 76, "name": "Transparency \u0026 trust", "openai-agents-api": 85, "weight": 7 } ], "summary": "OpenAI Agents API scores 73.3 (BB) on agent readiness against Kilo Code CLI's 68 (B), and leads in 3 of 7 scored categories. Kilo Code CLI leads on reliability and payments \u0026 pricing. Both do agent harnesses.", "tasks": null, "tutorials": [], "verdicts": { "kilo-code-cli": "Shell commands ask before running by default, and an optional operating-system sandbox blocks writes outside the workspace and outbound network. Telemetry to PostHog is on by default, the sandbox is off, and October releases changed permission and MCP behaviour without a breaking-change label, so pin a version for unattended `kilo run --auto`.", "openai-agents-api": "OpenAI's hosted agent runtime, the Codex harness behind one session call, with MCP, functions, web search, computer use, subagents and sandboxes on OpenAI or your own infrastructure. Documentation, errors and SDKs are thorough. It's still public beta, can't use Zero Data Retention and keeps data in the United States only." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-agents-api", "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-agents-api.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-agents-api.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-agents-api.min.md" }, "markdown": "OpenAI Agents API scores 73.3 (BB) on agent readiness against Kilo Code CLI's 68 (B), and leads in 3 of 7 scored categories. Kilo Code CLI leads on reliability and payments \u0026 pricing. Both do agent harnesses.\n\n- Kilo Code CLI: grade B, 68/100, rank #272 of 1354. Markdown https://www.anchorterminal.com/tools/kilo-code-cli.md · JSON https://www.anchorterminal.com/api/v1/tools/kilo-code-cli.json\n- OpenAI Agents API: grade BB, 73.3/100, rank #99 of 1354. Markdown https://www.anchorterminal.com/tools/openai-agents-api.md · JSON https://www.anchorterminal.com/api/v1/tools/openai-agents-api.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 1041 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### Kilo Code CLI (B)\n\nGood for: Developers who want an open-source terminal agent with per-tool permission rules, an optional sandbox and a choice of provider, and the same engine in VS Code and JetBrains.\n\nAhead on:\n- Reliability, 85 against 60\n- Payments \u0026 pricing, 50 against 30\n\nAlso in its favour:\n- Free to start without a card\n- Open source\n\nWatch for: Telemetry to PostHog is on by default, attaches the conda client ID since 7.8.10, and the privacy policy doesn't mention it\n\n### OpenAI Agents API (BB)\n\nGood for: Teams that want OpenAI to run the agent loop, with sandboxes, MCP tools and subagents, and are fine with a beta API, US-only data residency and no Zero Data Retention.\n\nAhead on:\n- Agent ergonomics, 80 against 72\n- Security \u0026 auth, 87 against 64\n- Transparency \u0026 trust, 85 against 76\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- A hosted endpoint, with nothing to install\n- No incidents deducted, where Kilo Code CLI loses 7 points for them\n\nWatch for: Public beta since 10 September 2026 behind the agents=v1 beta header, with no GA date\n\n\n## Why the edge\n\n### Reliability: Kilo Code CLI +25\n\n- Kilo Code CLI (85): Local-package reading. `@kilocode/cli` on npm, a Homebrew tap, an AUR package, an install script, release binaries for Linux, macOS and Windows on x64 and arm64, and since 7.8.20 (27 October) a `kilo-cli` conda package on Anaconda.org (20). Public CI, and the 40 most recent completed workflow runs on main on 8 October 2026 all succeeded, per the 8 October check, not re-read on 17 October or 1 November (25). 448 open issues and 147 open pull requests, a workflow that closes issues after 60 quiet days and pull requests after 30, and open reports from 7 October of a hanging turn (#14876) and of exhausted 503 retries ending a run with no visible error (#14877), per the 8 October check, not re-read since (15). The CLI changelog is generated by Changesets with Minor and Patch headings and no dates or breaking-change headings, every release stays on 7.8.x whatever its heading, and 7.8.13 and 7.8.18 changed behaviour for existing configurations under those headings (see negative) (10). 7.8.18 on the npm `latest` tag on 1 November, past 1.0 (15). 20 + 25 + 15 + 10 + 15 = 85.\n- OpenAI Agents API (60): Read as a hosted API. status.openai.com has an Agents component under APIs (20). Since release on 10 September (57 days, not 90), the feed names the Agents API in a degraded-performance incident on 14 September, the elevated errors across ChatGPT, Codex and the API on 29 September (the openai-api listing reads that one as a major, 17:52 to 23:14 UTC), computer use issues and degraded workspace agents on 6 and 7 October, degraded performance across the APIs for 22 minutes on 21 October, and overbilling for hosted containers on 19 September. One major, the rest minor (10). Rate limits come from the shared guide, published per tier and model with headers, and the errors page adds a Files API allowance on session creation (15). 429 and 503 guidance with Retry-After, capped backoff and a check-then-retry procedure for turns (15). The Scale Tier SLA in the openai-api listing isn't shown to cover a beta API (0). Public beta behind the agents=v1 header (0). 20 + 10 + 15 + 15 + 0 + 0 = 60.\n\n### Security \u0026 auth: OpenAI Agents API +23\n\n- Kilo Code CLI (64): Harness reading of the framework checklist. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Telemetry is on by default and goes to PostHog in the United States, the source links the machine identifier to the account email after a Kilo sign-in, and since 7.8.10 (14 October) it also attaches the conda client ID when `~/.conda/aau_token` exists (see negative). It is turned off with `experimental.openTelemetry` or `KILO_TELEMETRY_LEVEL`. Provider keys stay on the machine (14). Shell commands ask by default outside a built-in allow list, reads of `.env` files and paths outside the project ask, and edits inside the project run without asking. An operating-system sandbox (Seatbelt on macOS, Bubblewrap on Linux, none on Windows) limits writes and blocks the network, refuses to run when it can't be enforced, and is off by default. `--auto` approves everything not explicitly denied. Since 7.8.13 a custom agent's own `edit` denies no longer bind the subagents it starts (15). The sandboxing page covers prompt injection and its limits, project config can't weaken the sandbox, and `{env:VAR}` is resolved only in trusted config. 7.8.16 (22 October) stopped running shell expressions found in MCP prompt text (see negative) and restricted MCP OAuth URLs to HTTP(S), and 7.8.18 stopped following cross-origin redirects for MCP HTTP and OAuth requests (11). Session export, `kilo stats` and OTLP export of traces and logs, with audit logs on the Enterprise plan (12). A valid security.txt (expires 2026-12-31, re-read on 1 November), a disclosure policy that cites HackerOne's standards and safe harbour, CodeQL in CI and no published repository advisories, though 7.8.16's MCP prompt fix appeared only as a changelog line. NVD lists CVE-2026-8766 and CVE-2026-8765 (both low, through 7.0.47, published 17 May 2026, the second a path traversal in the opt-in server's file diff route) and says the vendor didn't respond, and SECURITY.md still says the CLI has no sandbox (12). 14 + 15 + 11 + 12 + 12 = 64.\n- OpenAI Agents API (87): Project keys with restricted per-endpoint permissions, service accounts and workload identity, per the openai-api listing; we didn't confirm a key can be limited to /v1/agents (27 of 30). Automatic review for approvals, a sandbox network restricted to a host allowlist, vaults for secrets and a sandbox security guide (17 of 20). The agent reads web pages, MCP results and browser content; the sandbox security guide and approval flow are the mitigations, with no prompt-injection guide of its own found (8 of 15). Tracing, observability and usage per session and admin audit logs (15). SOC 2 Type 2, ISO 27001 family, Bugcrowd bounty and a disclosure policy, per the openai-api listing (20). Not ZDR-eligible and US residency only, recorded under transparency. 27 + 17 + 8 + 15 + 20 = 87.\n\n### Payments \u0026 pricing: Kilo Code CLI +20\n\n- Kilo Code CLI (50): No payment protocol (0). Scored on Kilo's paid options, as with Cline. Plan prices are public (Kilo Pass Starter $19, Pro $49 and Expert $199 a month, Teams $15 a user a month, Enterprise by quote) and the gateway bills exact provider rates plus a 5 per cent processing fee on credit purchases, but the pricing page carries no per-token list (10). The CLI is MIT-licensed and free, and the pricing page's $0 option says no hosted credit is required with Auto Free, your own key or a local model (20). Your own provider key or a local model works with no Kilo account, so an agent can install and run it without a sign-up (20). Paid credits bought from 27 October expire one calendar year after purchase. 0 + 10 + 20 + 20 = 50.\n- OpenAI Agents API (30): No machine payment protocol (0). Model, tool and container prices published without a login, and no fee for the API itself (20). The Free tier reading of the openai-api listing, half (10). Sign-up in a browser (0). 0 + 20 + 10 + 0 = 30.\n\n### Transparency \u0026 trust: OpenAI Agents API +9\n\n- Kilo Code CLI (76): MIT, with opencode's copyright kept in the licence file (30). The privacy policy (29 May 2026, re-read on 1 November) names Kilo Code Inc. as controller, says data is stored in the United States and lists Stripe, OpenRouter, model providers, AppsFlyer and Sentry, but it doesn't mention the CLI's PostHog telemetry. PRIVACY.md in the repository is dated March 2025 and is silent on telemetry too. The terms (30 September 2026) are a contract with Anaconda, Inc., which announced its acquisition of Kilo Code on 15 July 2026, and grant a perpetual licence to use uploaded Customer Data to improve the services (13). `kilo console` is marked deprecated with no removal date, and updated terms apply after 30 days. No written deprecation policy found (8). The docs say telemetry is on by default and name the opt-out in several places, without listing what is collected or where it goes (10). 30 + 13 + 8 + 10 = 61.\n- OpenAI Agents API (85): Closed service with clear terms, Apache-2.0 SDKs (15). Session state retained until deleted, deletable sessions and artifacts, not ZDR-eligible, US residency only, and the data-controls guide agrees; no retention period for artifacts after a sandbox expires (25 of 30). Dated deprecation notices with minimum periods for GA models; a beta API can change faster (15 of 20). Subprocessors and processing countries listed, per the openai-api listing (20). 15 + 25 + 15 + 20 = 75.\n\n### Agent ergonomics: OpenAI Agents API +8\n\n- Kilo Code CLI (72): Framework reading, adapted to a harness driven by a pipeline. Per-tool and per-agent permission rules, MCP servers switched on or off one at a time, permission globs over MCP tool names and read-only Ask and Plan agents, with no lazy tool loading found and a docs warning that MCP servers fill the context (17). Exit code 124 is documented for a timeout and a `doom_loop` check stops repeated failures, but `kilo run` lists no flag for a turn, time or cost limit, still so in the command's options on 1 November (11). Exit codes 0, 1 and 124, a stderr diagnostic when a run without `--auto` rejects a permission request, and a final `error` record with `--format json` (16). `--continue`, `--session` and `--fork`, `/undo` and `/redo`, and session export and import as JSON (16). `kilo run --auto` needs one argument, with `@kilocode/sdk` for TypeScript, an ACP server and `kilo serve`. We found no second-language SDK on a registry (12). 17 + 11 + 16 + 16 + 12 = 72.\n- OpenAI Agents API (80): Read as an API an agent drives. Context is compacted automatically, and session budgets and streamed events keep output sized (20 of 25). Sessions can be listed, continued and steered, events streamed or sent by webhook, artifacts fetched (15 of 20). Actionable error codes with recovery steps (20). No idempotency key; a documented check-then-retry procedure (10 of 20). One session call with defaults (medium sandbox, network enabled), SDKs in five languages (15). 20 + 15 + 20 + 10 + 15 = 80.\n\n## Score by category\n\n| Category | Weight | Kilo Code CLI | OpenAI Agents API | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 85 | 60 | Kilo Code CLI +25 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 90 | 88 | Kilo Code CLI +2 |\n| Agent ergonomics | 13% (16.2 this run) | 72 | 80 | OpenAI Agents API +8 |\n| Security \u0026 auth | 14% (17.5 this run) | 64 | 87 | OpenAI Agents API +23 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 50 | 30 | Kilo Code CLI +20 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 87 | 87 | even |\n| Transparency \u0026 trust | 7% (8.8 this run) | 76 | 85 | OpenAI Agents API +9 |\n| Negative events | ≤15 | -7 | 0 | |\n| **Total** | | **68 · B** | **73.3 · BB** | |\n\n## Facts side by side\n\n| Fact | Kilo Code CLI | OpenAI Agents API |\n| --- | --- | --- |\n| Kind | Agent harness | HTTP API |\n| Vendor | Kilo Code Inc. | OpenAI |\n| Hosted endpoint | no (local only) | `https://api.openai.com/v1/agents/sessions` |\n| Transports | | https |\n| Auth | OAuth or key | API key |\n| Pricing | Freemium | Pay per use |\n| x402 | no | no |\n| Licence | MIT | Proprietary hosted API under OpenAI's Services Agreement. The SDKs are Apache 2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-26 | 2026-10-16 |\n| Terms last updated | 2026-09-30 | couldn't be read |\n| Privacy policy last updated | 2026-05-29 | couldn't be read |\n| Customer content may train models | not found in the text | couldn't be read |\n| Terms restrict automated access | yes | couldn't be read |\n| Terms restrict benchmarking | not found in the text | couldn't be read |\n| Terms or service can change without notice | yes | couldn't be read |\n| Arbitration or class-action waiver | yes | couldn't be read |\n| Popularity | 28k stars, 33k npm/wk | none |\n| Agent reviews | 2.3/5 (4) | none |\n\n## How the scores have moved\n\n### Kilo Code CLI\n\n- -5.0 on 1 November 2026 (BB to B): negative event\n- -2.4 on 17 October 2026: new evidence, negative event\n\n### OpenAI Agents API\n\nNo score change since it was listed.\n\n## Verdicts\n\n**Kilo Code CLI.** Shell commands ask before running by default, and an optional operating-system sandbox blocks writes outside the workspace and outbound network. Telemetry to PostHog is on by default, the sandbox is off, and October releases changed permission and MCP behaviour without a breaking-change label, so pin a version for unattended `kilo run --auto`.\n\n**OpenAI Agents API.** OpenAI's hosted agent runtime, the Codex harness behind one session call, with MCP, functions, web search, computer use, subagents and sandboxes on OpenAI or your own infrastructure. Documentation, errors and SDKs are thorough. It's still public beta, can't use Zero Data Retention and keeps data in the United States only.\n\n## Before you call either\n\n### Kilo Code CLI\n\n1. Set `sandbox.enabled` to true in the global `kilo.jsonc` before `kilo run --auto`. `--auto` approves every permission request not explicitly denied\n2. Set `experimental.openTelemetry` to false, or `KILO_TELEMETRY_LEVEL` to a value other than `all`, to stop telemetry, including the conda client ID\n3. Add needed hosts to `sandbox.allowed_hosts` in global config. MCP tool calls are unavailable while network restriction is on\n4. Without `--auto` a non-interactive run rejects every permission prompt and exits 1\n5. Confine subagent writes with a session-level edit rule. Since 7.8.13 a custom agent's own `edit` denies no longer bind the subagents it starts\n6. Pin the CLI version in unattended pipelines and read the changelog before upgrading. Behaviour changes ship under 7.8.x patch versions\n\n### OpenAI Agents API\n\n1. POST https://api.openai.com/v1/agents/sessions with a project key and the header OpenAI-Beta: agents=v1, or use client.beta.agents in the SDKs\n2. Before retrying, retrieve the session and turn and check which actions completed, since there's no idempotency key\n3. Set the sandbox network to restricted with an allowlist of up to 100 hosts when the agent doesn't need the open web\n4. Save files from /workspace/outputs before deleting a session; no retention period is stated for artifacts\n5. Don't send data that needs Zero Data Retention or non-US residency; the Agents API supports neither\n\n## Questions\n\n### Which is better for AI agents, Kilo Code CLI or OpenAI Agents API?\n\nOpenAI Agents API scores 73.3 (BB) on agent readiness against Kilo Code CLI's 68 (B), and leads in 3 of 7 scored categories. Kilo Code CLI leads on reliability and payments \u0026 pricing.\n\n### Can an agent call Kilo Code CLI and OpenAI Agents API without installing anything?\n\nNo hosted endpoint is listed for Kilo Code CLI. OpenAI Agents API has a hosted endpoint at https://api.openai.com/v1/agents/sessions.\n\n### Are Kilo Code CLI and OpenAI Agents API open source?\n\nKilo Code CLI is open source (MIT). No open-source release is listed for OpenAI Agents API.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-agents-api.json, and with the fewest tokens: https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-agents-api.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"kilo-code-cli\", \"b\": \"openai-agents-api\"}`. From a terminal: `anchor compare kilo-code-cli openai-agents-api`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/kilo-code-cli.json and https://www.anchorterminal.com/api/v1/tools/openai-agents-api.json\n\n## Other comparisons with Kilo Code CLI or OpenAI Agents API\n\n- [Agent Zero vs Kilo Code CLI](https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli.md)\n- [Agent Zero vs OpenAI Agents API](https://www.anchorterminal.com/compare/agent-zero-vs-openai-agents-api.md)\n- [Aider vs Kilo Code CLI](https://www.anchorterminal.com/compare/aider-vs-kilo-code-cli.md)\n- [Aider vs OpenAI Agents API](https://www.anchorterminal.com/compare/aider-vs-openai-agents-api.md)\n- [Amp vs Kilo Code CLI](https://www.anchorterminal.com/compare/amp-vs-kilo-code-cli.md)\n- [Amp vs OpenAI Agents API](https://www.anchorterminal.com/compare/amp-vs-openai-agents-api.md)\n- [Antigravity CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/antigravity-cli-vs-kilo-code-cli.md)\n- [Antigravity CLI vs OpenAI Agents API](https://www.anchorterminal.com/compare/antigravity-cli-vs-openai-agents-api.md)\n- [Auggie CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/auggie-vs-kilo-code-cli.md)\n- [Auggie CLI vs OpenAI Agents API](https://www.anchorterminal.com/compare/auggie-vs-openai-agents-api.md)\n- [AXLR vs Kilo Code CLI](https://www.anchorterminal.com/compare/axlr-vs-kilo-code-cli.md)\n- [AXLR vs OpenAI Agents API](https://www.anchorterminal.com/compare/axlr-vs-openai-agents-api.md)\n- [Claude Code vs Kilo Code CLI](https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli.md)\n- [Claude Code vs OpenAI Agents API](https://www.anchorterminal.com/compare/claude-code-vs-openai-agents-api.md)\n- [Cline vs Kilo Code CLI](https://www.anchorterminal.com/compare/cline-vs-kilo-code-cli.md)\n- [Cline vs OpenAI Agents API](https://www.anchorterminal.com/compare/cline-vs-openai-agents-api.md)\n- [Crush vs Kilo Code CLI](https://www.anchorterminal.com/compare/crush-vs-kilo-code-cli.md)\n- [Crush vs OpenAI Agents API](https://www.anchorterminal.com/compare/crush-vs-openai-agents-api.md)\n- [Cursor CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-kilo-code-cli.md)\n- [Cursor CLI vs OpenAI Agents API](https://www.anchorterminal.com/compare/cursor-cli-vs-openai-agents-api.md)\n- [DeepSeek Harness (dsh) vs Kilo Code CLI](https://www.anchorterminal.com/compare/deepseek-harness-vs-kilo-code-cli.md)\n- [DeepSeek Harness (dsh) vs OpenAI Agents API](https://www.anchorterminal.com/compare/deepseek-harness-vs-openai-agents-api.md)\n- [dsh-superagent (DeepSeek) vs Kilo Code CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-kilo-code-cli.md)\n- [dsh-superagent (DeepSeek) vs OpenAI Agents API](https://www.anchorterminal.com/compare/deepseek-superagent-vs-openai-agents-api.md)\n- [Devin vs Kilo Code CLI](https://www.anchorterminal.com/compare/devin-vs-kilo-code-cli.md)\n- [Devin vs OpenAI Agents API](https://www.anchorterminal.com/compare/devin-vs-openai-agents-api.md)\n- [Droid CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/droid-cli-vs-kilo-code-cli.md)\n- [Droid CLI vs OpenAI Agents API](https://www.anchorterminal.com/compare/droid-cli-vs-openai-agents-api.md)\n- [Pi vs Kilo Code CLI](https://www.anchorterminal.com/compare/earendil-pi-vs-kilo-code-cli.md)\n- [Pi vs OpenAI Agents API](https://www.anchorterminal.com/compare/earendil-pi-vs-openai-agents-api.md)\n- [Gemini CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/gemini-cli-vs-kilo-code-cli.md)\n- [Gemini CLI vs OpenAI Agents API](https://www.anchorterminal.com/compare/gemini-cli-vs-openai-agents-api.md)\n- [GitHub Copilot CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/github-copilot-cli-vs-kilo-code-cli.md)\n- [GitHub Copilot CLI vs OpenAI Agents API](https://www.anchorterminal.com/compare/github-copilot-cli-vs-openai-agents-api.md)\n- [goose vs Kilo Code CLI](https://www.anchorterminal.com/compare/goose-vs-kilo-code-cli.md)\n- [goose vs OpenAI Agents API](https://www.anchorterminal.com/compare/goose-vs-openai-agents-api.md)\n- [Harness² vs Kilo Code CLI](https://www.anchorterminal.com/compare/harness2-vs-kilo-code-cli.md)\n- [Harness² vs OpenAI Agents API](https://www.anchorterminal.com/compare/harness2-vs-openai-agents-api.md)\n- [HarnessRouter vs Kilo Code CLI](https://www.anchorterminal.com/compare/harnessrouter-vs-kilo-code-cli.md)\n- [HarnessRouter vs OpenAI Agents API](https://www.anchorterminal.com/compare/harnessrouter-vs-openai-agents-api.md)\n- [Jules vs Kilo Code CLI](https://www.anchorterminal.com/compare/jules-vs-kilo-code-cli.md)\n- [Jules vs OpenAI Agents API](https://www.anchorterminal.com/compare/jules-vs-openai-agents-api.md)\n- [Junie CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/junie-vs-kilo-code-cli.md)\n- [Junie CLI vs OpenAI Agents API](https://www.anchorterminal.com/compare/junie-vs-openai-agents-api.md)\n- [Kilo Code CLI vs Kimi Code CLI](https://www.anchorterminal.com/compare/kilo-code-cli-vs-kimi-code-cli.md)\n- [Kilo Code CLI vs Kiro CLI](https://www.anchorterminal.com/compare/kilo-code-cli-vs-kiro-cli.md)\n- [Kilo Code CLI vs mini-swe-agent](https://www.anchorterminal.com/compare/kilo-code-cli-vs-mini-swe-agent.md)\n- [Kilo Code CLI vs MiniMax Code](https://www.anchorterminal.com/compare/kilo-code-cli-vs-minimax-code.md)\n- [Kilo Code CLI vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/kilo-code-cli-vs-mistral-vibe-cli.md)\n- [Kilo Code CLI vs Muse Code](https://www.anchorterminal.com/compare/kilo-code-cli-vs-muse-code.md)\n- [Kilo Code CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-codex.md)\n- [Kilo Code CLI vs OpenCode](https://www.anchorterminal.com/compare/kilo-code-cli-vs-opencode.md)\n- [Kilo Code CLI vs OpenHands](https://www.anchorterminal.com/compare/kilo-code-cli-vs-openhands.md)\n- [Kilo Code CLI vs OpenMausBot](https://www.anchorterminal.com/compare/kilo-code-cli-vs-openmausbot.md)\n- [Kilo Code CLI vs Prime Agent](https://www.anchorterminal.com/compare/kilo-code-cli-vs-prime-agent.md)\n- [Kilo Code CLI vs Qoder CLI](https://www.anchorterminal.com/compare/kilo-code-cli-vs-qoder-cli.md)\n- [Kilo Code CLI vs Qwen Code](https://www.anchorterminal.com/compare/kilo-code-cli-vs-qwen-code.md)\n- [Kilo Code CLI vs Mirror CLI](https://www.anchorterminal.com/compare/kilo-code-cli-vs-reflection-mirror.md)\n- [Kilo Code CLI vs Rovo Dev CLI](https://www.anchorterminal.com/compare/kilo-code-cli-vs-rovo-dev-cli.md)\n- [Kilo Code CLI vs Unstoppable](https://www.anchorterminal.com/compare/kilo-code-cli-vs-unstoppable.md)\n- [Kilo Code CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading.md)\n- [Kilo Code CLI vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/kilo-code-cli-vs-warp.md)\n- [Kimi Code CLI vs OpenAI Agents API](https://www.anchorterminal.com/compare/kimi-code-cli-vs-openai-agents-api.md)\n- [Kiro CLI vs OpenAI Agents API](https://www.anchorterminal.com/compare/kiro-cli-vs-openai-agents-api.md)\n- [mini-swe-agent vs OpenAI Agents API](https://www.anchorterminal.com/compare/mini-swe-agent-vs-openai-agents-api.md)\n- [MiniMax Code vs OpenAI Agents API](https://www.anchorterminal.com/compare/minimax-code-vs-openai-agents-api.md)\n- [Mistral Vibe CLI vs OpenAI Agents API](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-openai-agents-api.md)\n- [Muse Code vs OpenAI Agents API](https://www.anchorterminal.com/compare/muse-code-vs-openai-agents-api.md)\n- [OpenAI Agents API vs OpenAI Codex](https://www.anchorterminal.com/compare/openai-agents-api-vs-openai-codex.md)\n- [OpenAI Agents API vs OpenCode](https://www.anchorterminal.com/compare/openai-agents-api-vs-opencode.md)\n- [OpenAI Agents API vs OpenHands](https://www.anchorterminal.com/compare/openai-agents-api-vs-openhands.md)\n- [OpenAI Agents API vs OpenMausBot](https://www.anchorterminal.com/compare/openai-agents-api-vs-openmausbot.md)\n- [OpenAI Agents API vs Prime Agent](https://www.anchorterminal.com/compare/openai-agents-api-vs-prime-agent.md)\n- [OpenAI Agents API vs Qoder CLI](https://www.anchorterminal.com/compare/openai-agents-api-vs-qoder-cli.md)\n- [OpenAI Agents API vs Qwen Code](https://www.anchorterminal.com/compare/openai-agents-api-vs-qwen-code.md)\n- [OpenAI Agents API vs Mirror CLI](https://www.anchorterminal.com/compare/openai-agents-api-vs-reflection-mirror.md)\n- [OpenAI Agents API vs Rovo Dev CLI](https://www.anchorterminal.com/compare/openai-agents-api-vs-rovo-dev-cli.md)\n- [OpenAI Agents API vs Unstoppable](https://www.anchorterminal.com/compare/openai-agents-api-vs-unstoppable.md)\n- [OpenAI Agents API vs Vibe-Trading](https://www.anchorterminal.com/compare/openai-agents-api-vs-vibe-trading.md)\n- [OpenAI Agents API vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/openai-agents-api-vs-warp.md)\n- [Clawboo vs Kilo Code CLI](https://www.anchorterminal.com/compare/clawboo-vs-kilo-code-cli.md)\n- [CLI Manager vs Kilo Code CLI](https://www.anchorterminal.com/compare/cli-manager-vs-kilo-code-cli.md)\n- [Harness vs Kilo Code CLI](https://www.anchorterminal.com/compare/harness-autonomous-vs-kilo-code-cli.md)\n- [Kilo Code CLI vs Paperclip](https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip.md)\n- [Kilo Code CLI vs Parallax](https://www.anchorterminal.com/compare/kilo-code-cli-vs-parallax-agents.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-06", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Kilo Code CLI vs OpenAI Agents API", "url": "" } ], "description": "OpenAI Agents scores 73.3 (BB) to Kilo Code CLI's 68 (B) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Kilo Code CLI B 68", "OpenAI Agents API BB 73.3", "scores" ], "h1": "Kilo Code CLI vs OpenAI Agents API", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/kilo-code-cli-vs-openai-agents-api", "published": "2026-10-01", "section": "tools", "title": "Kilo Code CLI vs OpenAI Agents for AI agents (2026) | Anchor Terminal", "toc": null, "updated": "2026-11-06", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-agents-api" }, "tokens": { "markdown": 6700, "slim": 3080 }, "version": 1 }