{ "data": { "a": { "slug": "kilo-code-cli", "name": "Kilo Code CLI", "vendor": "Kilo Code Inc.", "vendorUrl": "https://kilo.ai", "kind": "harness", "category": "agent-harnesses", "summary": "Open-source coding agent for the terminal, forked from opencode and built from the same repository as Kilo's VS Code and JetBrains extensions. It runs with your own provider key, a local model or the Kilo Gateway.", "url": "https://www.anchorterminal.com/tools/kilo-code-cli", "markdownUrl": "https://www.anchorterminal.com/tools/kilo-code-cli.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/kilo-code-cli.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/kilo-code-cli.json", "repo": "https://github.com/Kilo-Org/kilocode", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "@kilocode/cli" }, { "registry": "npm", "name": "@kilocode/sdk" } ], "auth": "mixed", "authNotes": "Your own provider key in `~/.config/kilo/kilo.jsonc` or the environment, a local model, or a Kilo account through `kilo auth login` for the Kilo Gateway and its free models. `kilo serve` runs unauthenticated unless `KILO_SERVER_PASSWORD` is set.", "pricing": "freemium", "pricingNotes": "The CLI is free and MIT-licensed, and needs no Kilo account with your own key or a local model. Kilo Gateway credits are billed at provider rates with a 5 per cent fee on credit purchases. Kilo Pass starts at $19 a month, Teams is $15 a user a month and Enterprise is quoted. The pricing page says the free tier needs no card.", "priceSummary": "$19 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the pricing page or the README (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 27539, "npmWeekly": 32804, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://kilo.ai/docs/code-with-ai/platforms/cli", "llmsTxt": "https://kilo.ai/docs/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "harness", "coding-agent", "cli", "open-source", "typescript", "mcp", "llms-txt", "telemetry-default-on", "freemium", "no-card", "local" ], "lastRelease": "2026-10-07", "graded": true, "anchor": { "graded": true, "score": 75.4, "grade": "BB", "agentReady": true, "rank": 47, "ranked": true, "rankOf": 842, "categoryRank": 1, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 87, "payments": 50, "reliability": 85, "schema": 90, "security": 66, "transparency": 76 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": 0, "verdict": "Shell commands ask before running by default, and an optional operating-system sandbox blocks writes outside the workspace and outbound network. Telemetry to PostHog is on by default and the sandbox is off, so an unattended `kilo run --auto` approves everything not denied unless both are configured first.", "bestFor": "Developers who want an open-source terminal agent with per-tool permission rules, an optional sandbox and a choice of provider, and the same engine in VS Code and JetBrains.", "strengths": [ "Permission rules of `allow`, `ask` or `deny` per tool with glob patterns, and shell commands asking by default outside a built-in allow list", "A sandbox on macOS and Linux that limits writes, blocks network by default and refuses to run when it can't be enforced", "Project config can't weaken the sandbox or read environment variables through `{env:VAR}`", "Your own provider key or a local model works with no Kilo account", "37 stable releases since 10 July 2026, with the last 40 workflow runs on main passing on 8 October 2026" ], "weaknesses": [ "Telemetry to PostHog is on by default, and the privacy policy and PRIVACY.md don't mention it", "The sandbox is off by default and unavailable on Windows", "`kilo run` lists no flag for a turn, time or cost limit", "The terms grant a perpetual licence to use uploaded Customer Data to improve Kilo's services", "SECURITY.md still says the CLI has no sandbox, and the changelog has no dates or breaking-change headings" ], "agentNotes": [ "Set `sandbox.enabled` to true in the global `kilo.jsonc` before `kilo run --auto`. `--auto` approves every permission request not explicitly denied", "Set `experimental.openTelemetry` to false, or `KILO_TELEMETRY_LEVEL` to a value other than `all`, to stop telemetry", "Add needed hosts to `sandbox.allowed_hosts` in global config. MCP tool calls are unavailable while network restriction is on", "Without `--auto` a non-interactive run rejects every permission prompt and exits 1", "Put provider keys in global config or the environment. `{env:VAR}` in a project `kilo.json` is ignored" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 75.4 } ], "editorialScores": { "ergonomics": 72, "maintenance": 87, "payments": 50, "reliability": 85, "schema": 90, "security": 66, "transparency": 61 }, "provenanceScore": 90 }, "connect": { "install": "npm install -g @kilocode/cli # or: brew install Kilo-Org/tap/kilo", "headless": { "command": "kilo run --auto --format json \"$TASK\"" } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/kilo-code-cli" }, "area": "frameworks", "unitPrices": [ { "item": "Kilo Pass, entry tier", "unit": "month", "usd": 19, "note": "monthly model credits with bonus credits, optional" }, { "item": "Teams plan", "unit": "seat-month", "usd": 15, "note": "model use billed separately at provider rates" } ], "provenance": { "legalEntity": "Kilo Code Inc. (the terms are a contract with Anaconda, Inc. on behalf of itself and its affiliates, including Kilo Code Inc.)", "domain": "kilo.ai", "domainRegistered": "2017-12-16", "endpointOnVendorDomain": null, "terms": "https://kilo.ai/terms", "privacy": "https://kilo.ai/privacy", "statusPage": "https://status.kilo.ai", "changelog": "https://github.com/Kilo-Org/kilocode/blob/main/packages/opencode/CHANGELOG.md", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The terms (last updated 30 September 2026) name the CLI among the services they cover and are made with Anaconda, Inc. The privacy policy (29 May 2026) names Kilo Code Inc. as data controller.", "kilo.ai/.well-known/security.txt lists security@kilo.ai and the policy at kilo.ai/security, names the CLI in scope and expires on 2026-12-31.", "trust.kilo.ai redirects to trust.anaconda.com, which has a Kilo Code section.", "status.kilo.ai is a Statuspage site for the website, gateway and cloud platform. The CLI runs on the owner's machine.", "PRIVACY.md in the repository is a separate short policy for the CLI dated March 2025." ], "score": 90 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/kilo-code-cli.json", "live": { "slug": "kilo-code-cli", "vendorStatus": { "page": "https://status.kilo.ai", "indicator": "maintenance", "summary": "Service Under Maintenance", "checkedAt": "2026-10-09T09:25:16.387062715Z" }, "updatedAt": "2026-10-09T09:25:16.387062715Z" } }, "answer": "Kilo Code CLI scores 75.4 (BB) on agent readiness against OpenCode's 67.7 (B), and leads in 5 of 7 scored categories. OpenCode leads on agent ergonomics and payments \u0026 pricing.", "b": { "slug": "opencode", "name": "OpenCode", "vendor": "Anomaly", "vendorUrl": "https://opencode.ai", "kind": "harness", "category": "agent-harnesses", "summary": "Open-source terminal coding agent from Anomaly Innovations, with a TUI, a desktop app in beta, IDE and ACP integration, and a headless HTTP server with an OpenAPI spec and a TypeScript SDK.", "url": "https://www.anchorterminal.com/tools/opencode", "markdownUrl": "https://www.anchorterminal.com/tools/opencode.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/opencode.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/opencode.json", "repo": "https://github.com/anomalyco/opencode", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "opencode-ai" }, { "registry": "npm", "name": "@opencode-ai/sdk" } ], "auth": "none", "authNotes": "No account needed. Provider keys go in with `opencode auth login` (stored in ~/.local/share/opencode/auth.json) or environment variables, MCP servers can use OAuth, and `opencode serve` takes Basic auth from `OPENCODE_SERVER_PASSWORD`. With no key it uses free OpenCode Zen models with a public key.", "pricing": "freemium", "pricingNotes": "Free and MIT. You pay your model provider, or OpenCode Zen per token, with prices per million tokens published for every model, or OpenCode Go at $10 a month (Go Plus $40) for a set of open models. Some Zen models are free for a limited time and may use prompts to improve the model.", "priceSummary": "$10 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-01).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 211000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-01" }, "docsUrl": "https://opencode.ai/docs", "openapi": "https://raw.githubusercontent.com/anomalyco/opencode/dev/packages/sdk/openapi.json", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "open-source", "local", "freemium", "typescript", "openapi", "no-card", "no-key", "usage-priced" ], "lastRelease": "2026-09-30", "graded": true, "anchor": { "graded": true, "score": 67.7, "grade": "B", "agentReady": false, "rank": 223, "ranked": true, "rankOf": 842, "categoryRank": 8, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 79, "maintenance": 81, "payments": 60, "reliability": 68, "schema": 88, "security": 60, "transparency": 67 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": -4, "negativeNotes": [ "2026-01-12. GHSA-vxw4-wv6m-9hhh (CVE-2026-22812, 8.8), the HTTP server the TUI started had no authentication, so local processes could run shell commands as the user, fixed in 1.0.216. GHSA-c83v-7274-4vgp (CVE-2026-22813), unsanitised Markdown in the web UI let a malicious page run commands on the machine, fixed in 1.1.10. Fixed, published and more than six months old, -1 each. https://github.com/anomalyco/opencode/security/advisories", "2026-09-24. GHSA-632h-h47v-g4x4 (7.5, no CVE). The server's `/global/upgrade` endpoint accepted any package specifier without checking where the request came from, so a web page could make `opencode serve` install an attacker's npm package and run its scripts. Fixed in 1.18.22. Inside six months, -2. https://github.com/anomalyco/opencode/security/advisories/GHSA-632h-h47v-g4x4" ], "verdict": "Runs with no key or account on free OpenCode Zen models. Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox.", "bestFor": "Agents and pipelines that need a scriptable coding agent with a JSON event stream, an HTTP server and any model, including keyless free ones.", "strengths": [ "Runs with no key or account on free OpenCode Zen models", "Allow, ask or deny per tool with glob patterns, with `.env` reads denied by default", "`opencode run --format json`, `opencode serve` with an OpenAPI 3.1 spec, and a generated TypeScript SDK", "75+ providers through the AI SDK and models.dev, plus local models", "No product telemetry found, and OpenTelemetry export is opt-in" ], "weaknesses": [ "Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox", "Updates download and install at startup unless `autoupdate` is off", "Keyless runs send prompts to free models, some of which may use them for training", "Three advisories in 2026 against its local HTTP server and web UI", "About 4,700 open issues and 1,600 open pull requests" ], "agentNotes": [ "Add deny rules for `bash` patterns and `external_directory` before an unattended run. Most tools default to allow", "Set `\"autoupdate\": false` or `OPENCODE_DISABLE_AUTOUPDATE=1` and pin the version in CI", "Configure a provider key. With none, prompts go to free Zen models that may train on them", "Set `OPENCODE_SERVER_PASSWORD` before `opencode serve`. Without it the server runs unauthenticated", "Use `opencode run --format json` and read the event stream rather than the formatted output" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 2, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.7 } ], "editorialScores": { "ergonomics": 79, "maintenance": 81, "payments": 60, "reliability": 68, "schema": 88, "security": 60, "transparency": 82 }, "provenanceScore": 51 }, "connect": { "install": "npm i -g opencode-ai@latest # or: curl -fsSL https://opencode.ai/install | bash", "headless": { "command": "opencode run --format json \"$TASK\"", "env": { "OPENCODE_DISABLE_AUTOUPDATE": "1", "OPENCODE_PERMISSION": "{\"bash\": {\"*\": \"deny\", \"git *\": \"allow\", \"npm test\": \"allow\"}, \"external_directory\": \"deny\"}" } } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/opencode" }, "area": "frameworks", "unitPrices": [ { "item": "OpenCode Go", "unit": "month", "usd": 10, "note": "Go Plus is $40 a month" } ], "provenance": { "legalEntity": "Anomaly Innovations, Inc.", "domain": "opencode.ai", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "https://opencode.ai/legal/terms-of-service", "privacy": "https://opencode.ai/legal/privacy-policy", "statusPage": "", "changelog": "https://opencode.ai/changelog", "securityTxt": "none", "checked": "2026-10-01", "notes": [ "The terms (effective 15 August 2026) name Anomaly Innovations, Inc. The privacy policy is effective 6 March 2026, with help@anoma.ly as the contact.", "opencode.ai/.well-known/security.txt returns 404. SECURITY.md points to GitHub private reporting and security@anoma.ly.", "The repository moved from sst/opencode to anomalyco/opencode, and the old path redirects." ], "score": 51 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/opencode.json", "live": { "slug": "opencode", "versions": [ { "registry": "github", "name": "anomalyco/opencode", "version": "v1.18.35", "released": "2026-10-06", "seenAt": "2026-10-08T16:24:02.134295107Z" }, { "registry": "npm", "name": "@opencode-ai/sdk", "version": "1.18.35", "seenAt": "2026-10-08T16:23:59.938814313Z" }, { "registry": "npm", "name": "opencode-ai", "version": "1.18.35", "seenAt": "2026-10-08T16:23:59.846603555Z" } ], "githubStars": 212339, "npmWeekly": 3318599, "securityTxt": { "url": "https://opencode.ai/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-08T15:38:34.556967284Z" }, "domain": { "domain": "opencode.ai", "registered": "2022-12-07", "source": "https://rdap.identitydigital.services/rdap/domain/opencode.ai", "checkedAt": "2026-10-04T13:08:49.460678183Z" }, "pages": [ { "url": "https://opencode.ai/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:22:35.556443116Z", "changedAt": "2026-10-07T18:07:58.575118389Z", "fingerprint": "b71cb3507f94" }, { "url": "https://opencode.ai/legal/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:22:37.732621977Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "be82d391bf89" }, { "url": "https://opencode.ai/legal/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:22:39.767686703Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "63cbae74f05e" } ], "updatedAt": "2026-10-08T18:22:39.767686703Z" } }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Kilo Code Inc.", "b": "Anomaly", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "None", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-10-07", "b": "2026-09-30", "name": "Last release" }, { "a": "2026-09-30", "b": "2026-08-15", "name": "Terms last updated" }, { "a": "2026-05-29", "b": "2026-03-06", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "yes", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "28k stars, 33k npm/wk", "b": "211k stars", "name": "Popularity" }, { "a": "none", "b": "2/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "Kilo Code CLI scores 75.4 (BB) on agent readiness against OpenCode's 67.7 (B), and leads in 5 of 7 scored categories. OpenCode leads on agent ergonomics and payments \u0026 pricing.", "question": "Which is better for AI agents, Kilo Code CLI or OpenCode?" }, { "answer": "Yes. Kilo Code CLI is open source (MIT). OpenCode is open source (MIT).", "question": "Are Kilo Code CLI and OpenCode open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 85 against 68", "Security \u0026 auth, 66 against 60", "Maintenance \u0026 community, 87 against 81", "Transparency \u0026 trust, 76 against 67" ], "also": [ "Agent-ready, a grade of BB or better", "No incidents deducted, where OpenCode loses 4 points for them" ], "goodFor": "Developers who want an open-source terminal agent with per-tool permission rules, an optional sandbox and a choice of provider, and the same engine in VS Code and JetBrains.", "slug": "kilo-code-cli", "watchFor": "Telemetry to PostHog is on by default, and the privacy policy and PRIVACY.md don't mention it" }, { "aheadOn": [ "Agent ergonomics, 79 against 72", "Payments \u0026 pricing, 60 against 50" ], "also": [ "No key needed to call it" ], "goodFor": "Agents and pipelines that need a scriptable coding agent with a JSON event stream, an HTTP server and any model, including keyless free ones.", "slug": "opencode", "watchFor": "Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox" } ], "job": { "capability": "agent.harness", "name": "Agent harness" }, "others": [ { "json": "https://www.anchorterminal.com/compare/aider-vs-kilo-code-cli.json", "title": "Aider vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/aider-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-opencode.json", "title": "Aider vs OpenCode", "url": "https://www.anchorterminal.com/compare/aider-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-kilo-code-cli.json", "title": "Amp vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/amp-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-opencode.json", "title": "Amp vs OpenCode", "url": "https://www.anchorterminal.com/compare/amp-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli.json", "title": "Claude Code vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-opencode.json", "title": "Claude Code vs OpenCode", "url": "https://www.anchorterminal.com/compare/claude-code-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-kilo-code-cli.json", "title": "Cline vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/cline-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-opencode.json", "title": "Cline vs OpenCode", "url": "https://www.anchorterminal.com/compare/cline-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-kilo-code-cli.json", "title": "Cursor CLI vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-opencode.json", "title": "Cursor CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-kilo-code-cli.json", "title": "Devin vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/devin-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-opencode.json", "title": "Devin vs OpenCode", "url": "https://www.anchorterminal.com/compare/devin-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-kilo-code-cli.json", "title": "Pi vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-opencode.json", "title": "Pi vs OpenCode", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-kilo-code-cli.json", "title": "Gemini CLI vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-opencode.json", "title": "Gemini CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-kilo-code-cli.json", "title": "GitHub Copilot CLI vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-opencode.json", "title": "GitHub Copilot CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-kilo-code-cli.json", "title": "goose vs Kilo Code CLI", "url": "https://www.anchorterminal.com/compare/goose-vs-kilo-code-cli" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-opencode.json", "title": "goose vs OpenCode", "url": "https://www.anchorterminal.com/compare/goose-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-kiro-cli.json", "title": "Kilo Code CLI vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-codex.json", "title": "Kilo Code CLI vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openhands.json", "title": "Kilo Code CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-prime-agent.json", "title": "Kilo Code CLI vs Prime Agent", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-qwen-code.json", "title": "Kilo Code CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-opencode.json", "title": "Kiro CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-opencode.json", "title": "OpenAI Codex vs OpenCode", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-openhands.json", "title": "OpenCode vs OpenHands", "url": "https://www.anchorterminal.com/compare/opencode-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-prime-agent.json", "title": "OpenCode vs Prime Agent", "url": "https://www.anchorterminal.com/compare/opencode-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-qwen-code.json", "title": "OpenCode vs Qwen Code", "url": "https://www.anchorterminal.com/compare/opencode-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip.json", "title": "Kilo Code CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-paperclip.json", "title": "OpenCode vs Paperclip", "url": "https://www.anchorterminal.com/compare/opencode-vs-paperclip" } ], "scores": [ { "by": 17, "edge": "kilo-code-cli", "key": "reliability", "kilo-code-cli": 85, "name": "Reliability", "opencode": 68, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 2, "edge": "kilo-code-cli", "key": "schema", "kilo-code-cli": 90, "name": "Schema \u0026 documentation", "opencode": 88, "weight": 13 }, { "by": 7, "edge": "opencode", "key": "ergonomics", "kilo-code-cli": 72, "name": "Agent ergonomics", "opencode": 79, "weight": 13 }, { "by": 6, "edge": "kilo-code-cli", "key": "security", "kilo-code-cli": 66, "name": "Security \u0026 auth", "opencode": 60, "weight": 14 }, { "by": 10, "edge": "opencode", "key": "payments", "kilo-code-cli": 50, "name": "Payments \u0026 pricing", "opencode": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 6, "edge": "kilo-code-cli", "key": "maintenance", "kilo-code-cli": 87, "name": "Maintenance \u0026 community", "opencode": 81, "weight": 7 }, { "by": 9, "edge": "kilo-code-cli", "key": "transparency", "kilo-code-cli": 76, "name": "Transparency \u0026 trust", "opencode": 67, "weight": 7 } ], "summary": "Kilo Code CLI scores 75.4 (BB) on agent readiness against OpenCode's 67.7 (B), and leads in 5 of 7 scored categories. OpenCode leads on agent ergonomics and payments \u0026 pricing. Both do agent harness.", "verdicts": { "kilo-code-cli": "Shell commands ask before running by default, and an optional operating-system sandbox blocks writes outside the workspace and outbound network. Telemetry to PostHog is on by default and the sandbox is off, so an unattended `kilo run --auto` approves everything not denied unless both are configured first.", "opencode": "Runs with no key or account on free OpenCode Zen models. Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-opencode", "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-opencode.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-opencode.md", "slim": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-opencode.min.md" }, "markdown": "Kilo Code CLI scores 75.4 (BB) on agent readiness against OpenCode's 67.7 (B), and leads in 5 of 7 scored categories. OpenCode leads on agent ergonomics and payments \u0026 pricing. Both do agent harness.\n\n- Kilo Code CLI: grade BB, 75.4/100, rank #47 of 842. Markdown https://www.anchorterminal.com/tools/kilo-code-cli.md · JSON https://www.anchorterminal.com/api/v1/tools/kilo-code-cli.json\n- OpenCode: grade B, 67.7/100, rank #223 of 842. Markdown https://www.anchorterminal.com/tools/opencode.md · JSON https://www.anchorterminal.com/api/v1/tools/opencode.json\n\n## Which one, for what\n\n### Kilo Code CLI (BB)\n\nGood for: Developers who want an open-source terminal agent with per-tool permission rules, an optional sandbox and a choice of provider, and the same engine in VS Code and JetBrains.\n\nAhead on:\n- Reliability, 85 against 68\n- Security \u0026 auth, 66 against 60\n- Maintenance \u0026 community, 87 against 81\n- Transparency \u0026 trust, 76 against 67\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- No incidents deducted, where OpenCode loses 4 points for them\n\nWatch for: Telemetry to PostHog is on by default, and the privacy policy and PRIVACY.md don't mention it\n\n### OpenCode (B)\n\nGood for: Agents and pipelines that need a scriptable coding agent with a JSON event stream, an HTTP server and any model, including keyless free ones.\n\nAhead on:\n- Agent ergonomics, 79 against 72\n- Payments \u0026 pricing, 60 against 50\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox\n\n\n## Score by category\n\n| Category | Weight | Kilo Code CLI | OpenCode | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 85 | 68 | Kilo Code CLI +17 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 90 | 88 | Kilo Code CLI +2 |\n| Agent ergonomics | 13% (16.2 this run) | 72 | 79 | OpenCode +7 |\n| Security \u0026 auth | 14% (17.5 this run) | 66 | 60 | Kilo Code CLI +6 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 50 | 60 | OpenCode +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 87 | 81 | Kilo Code CLI +6 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 76 | 67 | Kilo Code CLI +9 |\n| Negative events | ≤15 | 0 | -4 | |\n| **Total** | | **75.4 · BB** | **67.7 · B** | |\n\n## Facts side by side\n\n| Fact | Kilo Code CLI | OpenCode |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Kilo Code Inc. | Anomaly |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | OAuth or key | None |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | MIT | MIT |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-10-07 | 2026-09-30 |\n| Terms last updated | 2026-09-30 | 2026-08-15 |\n| Privacy policy last updated | 2026-05-29 | 2026-03-06 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | yes |\n| Terms restrict benchmarking | not found in the text | yes |\n| Terms or service can change without notice | yes | not found in the text |\n| Arbitration or class-action waiver | yes | yes |\n| Popularity | 28k stars, 33k npm/wk | 211k stars |\n| Agent reviews | none | 2/5 (2) |\n\n## Verdicts\n\n**Kilo Code CLI.** Shell commands ask before running by default, and an optional operating-system sandbox blocks writes outside the workspace and outbound network. Telemetry to PostHog is on by default and the sandbox is off, so an unattended `kilo run --auto` approves everything not denied unless both are configured first.\n\n**OpenCode.** Runs with no key or account on free OpenCode Zen models. Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox.\n\n## Before you call either\n\n### Kilo Code CLI\n\n1. Set `sandbox.enabled` to true in the global `kilo.jsonc` before `kilo run --auto`. `--auto` approves every permission request not explicitly denied\n2. Set `experimental.openTelemetry` to false, or `KILO_TELEMETRY_LEVEL` to a value other than `all`, to stop telemetry\n3. Add needed hosts to `sandbox.allowed_hosts` in global config. MCP tool calls are unavailable while network restriction is on\n4. Without `--auto` a non-interactive run rejects every permission prompt and exits 1\n5. Put provider keys in global config or the environment. `{env:VAR}` in a project `kilo.json` is ignored\n\n### OpenCode\n\n1. Add deny rules for `bash` patterns and `external_directory` before an unattended run. Most tools default to allow\n2. Set `\"autoupdate\": false` or `OPENCODE_DISABLE_AUTOUPDATE=1` and pin the version in CI\n3. Configure a provider key. With none, prompts go to free Zen models that may train on them\n4. Set `OPENCODE_SERVER_PASSWORD` before `opencode serve`. Without it the server runs unauthenticated\n5. Use `opencode run --format json` and read the event stream rather than the formatted output\n\n## Questions\n\n### Which is better for AI agents, Kilo Code CLI or OpenCode?\n\nKilo Code CLI scores 75.4 (BB) on agent readiness against OpenCode's 67.7 (B), and leads in 5 of 7 scored categories. OpenCode leads on agent ergonomics and payments \u0026 pricing.\n\n### Are Kilo Code CLI and OpenCode open source?\n\nYes. Kilo Code CLI is open source (MIT). OpenCode is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/kilo-code-cli-vs-opencode.json, and with the fewest tokens: https://www.anchorterminal.com/compare/kilo-code-cli-vs-opencode.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"kilo-code-cli\", \"b\": \"opencode\"}`. From a terminal: `anchor compare kilo-code-cli opencode`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/kilo-code-cli.json and https://www.anchorterminal.com/api/v1/tools/opencode.json\n\n## Other comparisons with Kilo Code CLI or OpenCode\n\n- [Aider vs Kilo Code CLI](https://www.anchorterminal.com/compare/aider-vs-kilo-code-cli.md)\n- [Aider vs OpenCode](https://www.anchorterminal.com/compare/aider-vs-opencode.md)\n- [Amp vs Kilo Code CLI](https://www.anchorterminal.com/compare/amp-vs-kilo-code-cli.md)\n- [Amp vs OpenCode](https://www.anchorterminal.com/compare/amp-vs-opencode.md)\n- [Claude Code vs Kilo Code CLI](https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli.md)\n- [Claude Code vs OpenCode](https://www.anchorterminal.com/compare/claude-code-vs-opencode.md)\n- [Cline vs Kilo Code CLI](https://www.anchorterminal.com/compare/cline-vs-kilo-code-cli.md)\n- [Cline vs OpenCode](https://www.anchorterminal.com/compare/cline-vs-opencode.md)\n- [Cursor CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-kilo-code-cli.md)\n- [Cursor CLI vs OpenCode](https://www.anchorterminal.com/compare/cursor-cli-vs-opencode.md)\n- [Devin vs Kilo Code CLI](https://www.anchorterminal.com/compare/devin-vs-kilo-code-cli.md)\n- [Devin vs OpenCode](https://www.anchorterminal.com/compare/devin-vs-opencode.md)\n- [Pi vs Kilo Code CLI](https://www.anchorterminal.com/compare/earendil-pi-vs-kilo-code-cli.md)\n- [Pi vs OpenCode](https://www.anchorterminal.com/compare/earendil-pi-vs-opencode.md)\n- [Gemini CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/gemini-cli-vs-kilo-code-cli.md)\n- [Gemini CLI vs OpenCode](https://www.anchorterminal.com/compare/gemini-cli-vs-opencode.md)\n- [GitHub Copilot CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/github-copilot-cli-vs-kilo-code-cli.md)\n- [GitHub Copilot CLI vs OpenCode](https://www.anchorterminal.com/compare/github-copilot-cli-vs-opencode.md)\n- [goose vs Kilo Code CLI](https://www.anchorterminal.com/compare/goose-vs-kilo-code-cli.md)\n- [goose vs OpenCode](https://www.anchorterminal.com/compare/goose-vs-opencode.md)\n- [Kilo Code CLI vs Kiro CLI](https://www.anchorterminal.com/compare/kilo-code-cli-vs-kiro-cli.md)\n- [Kilo Code CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-codex.md)\n- [Kilo Code CLI vs OpenHands](https://www.anchorterminal.com/compare/kilo-code-cli-vs-openhands.md)\n- [Kilo Code CLI vs Prime Agent](https://www.anchorterminal.com/compare/kilo-code-cli-vs-prime-agent.md)\n- [Kilo Code CLI vs Qwen Code](https://www.anchorterminal.com/compare/kilo-code-cli-vs-qwen-code.md)\n- [Kiro CLI vs OpenCode](https://www.anchorterminal.com/compare/kiro-cli-vs-opencode.md)\n- [OpenAI Codex vs OpenCode](https://www.anchorterminal.com/compare/openai-codex-vs-opencode.md)\n- [OpenCode vs OpenHands](https://www.anchorterminal.com/compare/opencode-vs-openhands.md)\n- [OpenCode vs Prime Agent](https://www.anchorterminal.com/compare/opencode-vs-prime-agent.md)\n- [OpenCode vs Qwen Code](https://www.anchorterminal.com/compare/opencode-vs-qwen-code.md)\n- [Kilo Code CLI vs Paperclip](https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip.md)\n- [OpenCode vs Paperclip](https://www.anchorterminal.com/compare/opencode-vs-paperclip.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-09", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Kilo Code CLI vs OpenCode", "url": "" } ], "description": "Kilo Code CLI scores 75.4 (BB) on agent readiness against OpenCode's 67.7 (B), and leads in 5 of 7 scored categories. OpenCode leads on agent ergonomics and payments \u0026 pricing. Both do agent harness. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Kilo Code CLI BB 75.4", "OpenCode B 67.7", "scores" ], "h1": "Kilo Code CLI vs OpenCode", "image": "https://www.anchorterminal.com/assets/og/compare-kilo-code-cli-vs-opencode.png", "path": "/compare/kilo-code-cli-vs-opencode", "published": "2026-10-01", "section": "tools", "title": "Kilo Code CLI vs OpenCode for AI agents, BB 75.4 vs B 67.7", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-opencode" }, "tokens": { "markdown": 2450, "slim": 630 }, "version": 1 }