{
  "data": {
    "a": {
      "slug": "kilo-code-cli",
      "name": "Kilo Code CLI",
      "vendor": "Kilo Code Inc.",
      "vendorUrl": "https://kilo.ai",
      "kind": "harness",
      "category": "agent-harnesses",
      "summary": "Open-source coding agent for the terminal, forked from opencode and built from the same repository as Kilo's VS Code and JetBrains extensions. It runs with your own provider key, a local model or the Kilo Gateway.",
      "url": "https://www.anchorterminal.com/tools/kilo-code-cli",
      "markdownUrl": "https://www.anchorterminal.com/tools/kilo-code-cli.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/kilo-code-cli.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/kilo-code-cli.json",
      "dns": "kilo-code-cli.grade.anchorterminal.com",
      "repo": "https://github.com/Kilo-Org/kilocode",
      "license": "MIT",
      "transports": [],
      "packages": [
        {
          "registry": "npm",
          "name": "@kilocode/cli"
        },
        {
          "registry": "npm",
          "name": "@kilocode/sdk"
        }
      ],
      "auth": "mixed",
      "authNotes": "Your own provider key in `~/.config/kilo/kilo.jsonc` or the environment, a local model, or a Kilo account through `kilo auth login` for the Kilo Gateway and its free models. `kilo serve` runs unauthenticated unless `KILO_SERVER_PASSWORD` is set.",
      "pricing": "freemium",
      "pricingNotes": "The CLI is free and MIT-licensed, and needs no Kilo account with your own key or a local model. Kilo Gateway credits are billed at exact provider rates with a 5 per cent processing fee on credit purchases, and paid credits bought from 27 October 2026 expire after one year. Kilo Pass is $19, $49 or $199 a month, Teams is $15 a user a month and Enterprise is quoted (https://kilo.ai/pricing).",
      "priceSummary": "$19 / mo",
      "where": "local",
      "x402": {
        "level": "no",
        "evidence": "No x402, MPP or L402 in the docs, the pricing page or the README (checked 2026-10-08).",
        "endpoints": []
      },
      "toolCount": null,
      "popularity": {
        "githubStars": 27539,
        "npmWeekly": 32804,
        "pypiWeekly": null,
        "asOf": "2026-10-08"
      },
      "docsUrl": "https://kilo.ai/docs/code-with-ai/platforms/cli",
      "llmsTxt": "https://kilo.ai/docs/llms.txt",
      "capabilities": [
        "agent.harness",
        "agent.mcp-client",
        "agent.multi-agent"
      ],
      "tags": [
        "harness",
        "coding-agent",
        "cli",
        "open-source",
        "typescript",
        "mcp",
        "llms-txt",
        "telemetry-default-on",
        "freemium",
        "no-card",
        "local"
      ],
      "lastRelease": "2026-10-26",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 68,
        "grade": "B",
        "agentReady": false,
        "rank": 295,
        "ranked": true,
        "rankOf": 1486,
        "categoryRank": 8,
        "methodology": "0.7",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 72,
          "maintenance": 87,
          "payments": 50,
          "reliability": 85,
          "schema": 90,
          "security": 64,
          "transparency": 76
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "medium",
          "date": "2026-11-01"
        },
        "negative": -7,
        "negativeNotes": [
          "2026-10-14. 7.8.10 added the conda client ID to default-on telemetry. When `~/.conda/aau_token` exists the CLI runs `conda info --json --offline` and attaches the ID (`aauClientToken`) to every PostHog event, and a commit hashing it was reverted. Neither the changelog nor the docs mention it. It respects Kilo's opt-out and conda's `anaconda_anon_usage: false`. -2. https://github.com/Kilo-Org/kilocode/blob/main/packages/kilo-telemetry/src/conda.ts",
          "2026-10-16 and 2026-10-26. Breaking changes in releases without notice. 7.8.13, filed as a patch change, made a custom delegator's own `edit` rules, path-scoped denies such as `secrets/**` included, stop applying to the subagents it starts, so a configuration that relied on them no longer confines delegated writes. 7.8.18 stopped remote MCP servers that redirect across origins from connecting. Neither is marked breaking, every release stays on 7.8.x, and no earlier notice was found. The redirect change closes a security issue and the changelog names the fix, so one term at the floor, -3, as firecrawl-mcp and docker-agent took. https://github.com/Kilo-Org/kilocode/blob/main/packages/opencode/CHANGELOG.md",
          "2026-10-22. 7.8.16 stopped running shell expressions in MCP prompt text. Before it, a `!`cmd`` expression in a prompt served by a connected MCP server ran as a local shell command when the user invoked that prompt (commit 2e17931, with a test that shows the expression ran). Fixed in a release, documented only as a changelog line with no advisory, -2, as docker-agent's fixed skill-file command execution took. https://github.com/Kilo-Org/kilocode/commit/2e1793154f6bef7632516a75a53d421a2e96b718"
        ],
        "verdict": "Shell commands ask before running by default, and an optional operating-system sandbox blocks writes outside the workspace and outbound network. Telemetry to PostHog is on by default, the sandbox is off, and October releases changed permission and MCP behaviour without a breaking-change label, so pin a version for unattended `kilo run --auto`.",
        "bestFor": "Developers who want an open-source terminal agent with per-tool permission rules, an optional sandbox and a choice of provider, and the same engine in VS Code and JetBrains.",
        "strengths": [
          "Permission rules of `allow`, `ask` or `deny` per tool with glob patterns, and shell commands asking by default outside a built-in allow list",
          "A sandbox on macOS and Linux that limits writes, blocks network by default and refuses to run when it can't be enforced",
          "Project config can't weaken the sandbox or read environment variables through `{env:VAR}`",
          "Your own provider key or a local model works with no Kilo account",
          "Releases most weeks, 51 tagged releases between 4 August and 28 October 2026"
        ],
        "weaknesses": [
          "Telemetry to PostHog is on by default, attaches the conda client ID since 7.8.10, and the privacy policy doesn't mention it",
          "The sandbox is off by default and unavailable on Windows",
          "`kilo run` lists no flag for a turn, time or cost limit",
          "The terms grant a perpetual licence to use uploaded Customer Data to improve Kilo's services",
          "SECURITY.md still says the CLI has no sandbox, and NVD records two unanswered low-severity CVEs from May 2026",
          "7.8.13 and 7.8.18 changed permission and MCP behaviour under patch-level versions with no breaking-change label"
        ],
        "agentNotes": [
          "Set `sandbox.enabled` to true in the global `kilo.jsonc` before `kilo run --auto`. `--auto` approves every permission request not explicitly denied",
          "Set `experimental.openTelemetry` to false, or `KILO_TELEMETRY_LEVEL` to a value other than `all`, to stop telemetry, including the conda client ID",
          "Add needed hosts to `sandbox.allowed_hosts` in global config. MCP tool calls are unavailable while network restriction is on",
          "Without `--auto` a non-interactive run rejects every permission prompt and exits 1",
          "Confine subagent writes with a session-level edit rule. Since 7.8.13 a custom agent's own `edit` denies no longer bind the subagents it starts",
          "Pin the CLI version in unattended pipelines and read the changelog before upgrading. Behaviour changes ship under 7.8.x patch versions"
        ],
        "metrics": {
          "kind": "local",
          "measured": false
        },
        "reviewCount": 4,
        "avgRating": 2.3,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "B",
            "methodology": "0.7",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 68
          }
        ],
        "editorialScores": {
          "ergonomics": 72,
          "maintenance": 87,
          "payments": 50,
          "reliability": 85,
          "schema": 90,
          "security": 64,
          "transparency": 61
        },
        "provenanceScore": 90,
        "checked": {
          "categories": {
            "ergonomics": "2026-11-01",
            "maintenance": "2026-11-01",
            "payments": "2026-11-01",
            "reliability": "2026-11-01",
            "schema": "2026-11-01",
            "security": "2026-11-01",
            "transparency": "2026-11-01"
          },
          "last": "2026-11-01",
          "lastMoved": "2026-11-01",
          "oldest": "2026-11-01",
          "stale": false,
          "staleAfterDays": 90
        }
      },
      "connect": {
        "install": "npm install -g @kilocode/cli   # or: brew install Kilo-Org/tap/kilo",
        "headless": {
          "command": "kilo run --auto --format json \"$TASK\""
        }
      },
      "letme": {
        "capability": "https://letme.dev/agent.harness",
        "tool": "https://letme.dev/kilo-code-cli"
      },
      "area": "frameworks",
      "unitPrices": [
        {
          "item": "Kilo Pass, Starter",
          "unit": "month",
          "usd": 19,
          "note": "up to $26.60 a month in credits, optional"
        },
        {
          "item": "Kilo Pass, Pro",
          "unit": "month",
          "usd": 49,
          "note": "up to $68.60 a month in credits, optional"
        },
        {
          "item": "Kilo Pass, Expert",
          "unit": "month",
          "usd": 199,
          "note": "up to $278.60 a month in credits, optional"
        },
        {
          "item": "Teams plan",
          "unit": "seat-month",
          "usd": 15,
          "note": "model use billed separately at provider rates"
        }
      ],
      "provenance": {
        "legalEntity": "Kilo Code Inc. (the terms are a contract with Anaconda, Inc. on behalf of itself and its affiliates, including Kilo Code Inc.)",
        "domain": "kilo.ai",
        "domainRegistered": "2017-12-16",
        "endpointOnVendorDomain": null,
        "terms": "https://kilo.ai/terms",
        "privacy": "https://kilo.ai/privacy",
        "statusPage": "https://status.kilo.ai",
        "changelog": "https://github.com/Kilo-Org/kilocode/blob/main/packages/opencode/CHANGELOG.md",
        "securityTxt": "valid",
        "checked": "2026-11-01",
        "notes": [
          "The terms (last updated 30 September 2026) name the CLI among the services they cover and are made with Anaconda, Inc. The privacy policy (29 May 2026) names Kilo Code Inc. as data controller.",
          "kilo.ai/.well-known/security.txt lists security@kilo.ai and the policy at kilo.ai/security, names the CLI in scope and expires on 2026-12-31.",
          "trust.kilo.ai redirects to trust.anaconda.com, which has a Kilo Code section.",
          "status.kilo.ai is a Statuspage site for the website, gateway and cloud platform. The CLI runs on the owner's machine.",
          "PRIVACY.md in the repository is a separate short policy for the CLI dated March 2025.",
          "Anaconda announced its acquisition of Kilo Code on 15 July 2026, and kilo.ai's footer links the announcement. Re-read on 1 November with the terms, privacy policy and security.txt, which are unchanged."
        ],
        "score": 90
      },
      "requirements": {
        "setupChecked": true,
        "complianceChecked": true,
        "card": "no",
        "freeTier": true,
        "minutes": 3,
        "credential": "mixed",
        "hosting": [
          "self-hosted"
        ],
        "euResidency": "unknown",
        "trainsOnData": "unknown",
        "zeroRetention": "unknown",
        "selfHost": "yes"
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/kilo-code-cli.json",
      "live": {
        "slug": "kilo-code-cli",
        "vendorStatus": {
          "page": "https://status.kilo.ai",
          "indicator": "maintenance",
          "summary": "Service Under Maintenance",
          "checkedAt": "2026-11-07T18:21:18.79766424Z"
        },
        "versions": [
          {
            "registry": "github",
            "name": "Kilo-Org/kilocode",
            "version": "v7.8.27",
            "released": "2026-11-05",
            "seenAt": "2026-11-06T23:36:56.818728557Z"
          },
          {
            "registry": "npm",
            "name": "@kilocode/cli",
            "version": "7.8.27",
            "seenAt": "2026-11-06T23:36:54.243706054Z"
          },
          {
            "registry": "npm",
            "name": "@kilocode/sdk",
            "version": "7.8.27",
            "seenAt": "2026-11-06T23:36:55.336361265Z"
          }
        ],
        "githubStars": 27883,
        "npmWeekly": 57156,
        "securityTxt": {
          "url": "https://kilo.ai/.well-known/security.txt",
          "state": "valid",
          "expires": "2026-12-31T23:59:59.000Z",
          "checkedAt": "2026-11-07T16:00:00.37762315Z"
        },
        "llmsTxt": {
          "url": "https://kilo.ai/docs/llms.txt",
          "ok": true,
          "status": 200,
          "checkedAt": "2026-11-07T15:32:48.933012387Z"
        },
        "domain": {
          "domain": "kilo.ai",
          "registered": "2017-12-16",
          "source": "https://rdap.identitydigital.services/rdap/domain/kilo.ai",
          "checkedAt": "2026-11-01T14:08:08.435146626Z"
        },
        "pages": [
          {
            "url": "https://raw.githubusercontent.com/Kilo-Org/kilocode/main/packages/opencode/CHANGELOG.md",
            "kind": "changelog",
            "status": 304,
            "checkedAt": "2026-11-07T14:18:35.478927107Z",
            "changedAt": "2026-11-05T13:03:01.906020556Z",
            "fingerprint": "183cafa519d3"
          },
          {
            "url": "https://kilo.ai/pricing",
            "kind": "pricing",
            "status": 200,
            "checkedAt": "2026-11-07T14:11:59.606056445Z",
            "changedAt": "0001-01-01T00:00:00Z",
            "fingerprint": "9480711dc26d"
          },
          {
            "url": "https://kilo.ai/privacy",
            "kind": "privacy",
            "status": 200,
            "checkedAt": "2026-11-07T14:12:02.07389913Z",
            "changedAt": "2026-10-21T00:28:45.897088737Z",
            "fingerprint": "438622fad605"
          },
          {
            "url": "https://kilo.ai/terms",
            "kind": "terms",
            "status": 200,
            "checkedAt": "2026-11-07T14:12:03.853874778Z",
            "changedAt": "2026-11-03T07:52:13.378291095Z",
            "fingerprint": "b97a979be9fa"
          }
        ],
        "github": {
          "repo": "kilo-org/kilocode",
          "checkedAt": "2026-11-02T08:58:32.131443556Z",
          "stars": 27831,
          "archived": false,
          "issuesEnabled": true,
          "pushedAt": "2026-11-02T08:57:07Z",
          "openIssues": 611,
          "openPRs": 221,
          "issuesOpened90d": 915,
          "issuesClosed90d": 889,
          "prsMerged90d": 1388,
          "ci": {
            "branch": "main",
            "runs": 50,
            "success": 44,
            "failure": 6,
            "other": 0,
            "latest": "success",
            "latestAt": "2026-11-02T08:48:42Z"
          },
          "replies": {
            "sampled": 23,
            "unanswered": 11,
            "medianDays": 1.4
          }
        },
        "updatedAt": "2026-11-07T18:21:18.79766424Z"
      }
    },
    "answer": "Kilo Code CLI scores 68 (B) on agent readiness against Paseo's 62.1 (B), and leads in 6 of 7 scored categories. Paseo leads on payments \u0026 pricing.",
    "b": {
      "slug": "paseo",
      "name": "Paseo",
      "vendor": "Mohamed Boudra",
      "vendorUrl": "https://paseo.sh",
      "kind": "harness",
      "category": "agent-harnesses",
      "summary": "Paseo is an open-source development environment that runs coding agents in parallel on your own machines, each in its own worktree, driven from desktop, iOS, Android, web or CLI, with voice control and no telemetry.",
      "url": "https://www.anchorterminal.com/tools/paseo",
      "markdownUrl": "https://www.anchorterminal.com/tools/paseo.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/paseo.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/paseo.json",
      "dns": "paseo.grade.anchorterminal.com",
      "repo": "https://github.com/getpaseo/paseo",
      "license": "Apache-2.0",
      "transports": [],
      "packages": [],
      "auth": "none",
      "pricing": "free",
      "pricingNotes": "Free and open source. You pay for the coding agents it runs, through your own subscriptions or API keys (checked 2026-11-07).",
      "priceSummary": "Free · OSS",
      "where": "local",
      "x402": {
        "level": "no",
        "evidence": "No payment protocol in the repository or README (checked 2026-11-07).",
        "endpoints": []
      },
      "toolCount": null,
      "popularity": {
        "githubStars": null,
        "npmWeekly": null,
        "pypiWeekly": null,
        "asOf": "2026-11-07"
      },
      "docsUrl": "https://github.com/getpaseo/paseo#readme",
      "capabilities": [
        "agent.harness",
        "agent.multi-agent"
      ],
      "tags": [
        "open-source",
        "apache-2.0",
        "desktop-app",
        "mobile",
        "cli",
        "self-hosted",
        "new"
      ],
      "lastRelease": "2026-11-07",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 62.1,
        "grade": "B",
        "agentReady": false,
        "rank": 575,
        "ranked": true,
        "rankOf": 1486,
        "categoryRank": 14,
        "methodology": "0.7",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 70,
          "maintenance": 75,
          "payments": 60,
          "reliability": 50,
          "schema": 65,
          "security": 58,
          "transparency": 68
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "low",
          "date": "2026-11-07"
        },
        "negative": 0,
        "verdict": "A self-hosted, open-source workspace for running many coding agents on your own machines, scriptable from the CLI and reachable from phone, web or desktop, with no telemetry or forced log-in. It's pre-1.0 and run largely by one maintainer.",
        "bestFor": "Developers who want parallel coding agents on their own machines with no telemetry, reachable from anywhere.",
        "strengths": [
          "No telemetry, tracking or forced log-ins, per the README",
          "Agents can create worktrees, launch other agents and talk to them across providers",
          "Desktop, iOS, Android, web and CLI clients for one self-hosted daemon",
          "Apache 2.0, with a changelog and CI"
        ],
        "weaknesses": [
          "Pre-1.0, at 0.15.3",
          "Most commits come from one maintainer and bots",
          "No prompt-injection guidance for agents that read untrusted content"
        ],
        "agentNotes": [
          "Run the daemon on the machine that has your tools and credentials, and connect from the clients",
          "Script runs from the CLI for repeatable agent jobs"
        ],
        "metrics": {
          "kind": "local",
          "measured": false
        },
        "reviewCount": 0,
        "avgRating": 0,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "low",
            "grade": "B",
            "methodology": "0.7",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 62.1
          }
        ],
        "editorialScores": {
          "ergonomics": 70,
          "maintenance": 75,
          "payments": 60,
          "reliability": 50,
          "schema": 65,
          "security": 58,
          "transparency": 82
        },
        "provenanceScore": 53,
        "checked": {
          "categories": {
            "ergonomics": "2026-11-07",
            "maintenance": "2026-11-07",
            "payments": "2026-11-07",
            "reliability": "2026-11-07",
            "schema": "2026-11-07",
            "security": "2026-11-07",
            "transparency": "2026-11-07"
          },
          "last": "2026-11-07",
          "oldest": "2026-11-07",
          "stale": false,
          "staleAfterDays": 90
        }
      },
      "connect": {
        "install": "Download from the releases page, or run the daemon with Docker or Nix"
      },
      "letme": {
        "capability": "https://letme.dev/agent.harness",
        "tool": "https://letme.dev/paseo"
      },
      "area": "frameworks",
      "provenance": {
        "legalEntity": "Mohamed Boudra",
        "domain": "paseo.sh",
        "domainRegistered": "",
        "domainNote": "Not looked up: RDAP isn't requested under the 1 November 2026 rules.",
        "endpointOnVendorDomain": null,
        "terms": "",
        "privacy": "",
        "statusPage": "",
        "changelog": "https://github.com/getpaseo/paseo/blob/main/CHANGELOG.md",
        "securityTxt": "none",
        "checked": "2026-11-07",
        "notes": [
          "The licence names Mohamed Boudra. The repository is github.com/getpaseo/paseo."
        ],
        "score": 53
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/paseo.json",
      "live": {
        "slug": "paseo",
        "securityTxt": {
          "url": "https://paseo.sh/.well-known/security.txt",
          "state": "unknown",
          "checkedAt": "2026-11-07T16:00:35.732625089Z"
        },
        "pages": [
          {
            "url": "https://raw.githubusercontent.com/getpaseo/paseo/main/CHANGELOG.md",
            "kind": "changelog",
            "status": 200,
            "checkedAt": "2026-11-07T14:21:03.944050608Z",
            "changedAt": "0001-01-01T00:00:00Z",
            "fingerprint": "c67e95fe9cd7"
          }
        ],
        "updatedAt": "2026-11-07T16:00:35.732625089Z"
      }
    },
    "edges": [
      {
        "by": 35,
        "category": "reliability",
        "leads": "kilo-code-cli",
        "name": "Reliability",
        "reasons": {
          "a": "Local-package reading. `@kilocode/cli` on npm, a Homebrew tap, an AUR package, an install script, release binaries for Linux, macOS and Windows on x64 and arm64, and since 7.8.20 (27 October) a `kilo-cli` conda package on Anaconda.org (20). Public CI, and the 40 most recent completed workflow runs on main on 8 October 2026 all succeeded, per the 8 October check, not re-read on 17 October or 1 November (25). 448 open issues and 147 open pull requests, a workflow that closes issues after 60 quiet days and pull requests after 30, and open reports from 7 October of a hanging turn (#14876) and of exhausted 503 retries ending a run with no visible error (#14877), per the 8 October check, not re-read since (15). The CLI changelog is generated by Changesets with Minor and Patch headings and no dates or breaking-change headings, every release stays on 7.8.x whatever its heading, and 7.8.13 and 7.8.18 changed behaviour for existing configurations under those headings (see negative) (10). 7.8.18 on the npm `latest` tag on 1 November, past 1.0 (15). 20 + 25 + 15 + 10 + 15 = 85.",
          "b": "Local software. Desktop builds, an Android APK, a Docker image and a Nix package (20). ci.yml on the repository; pass state not read (15). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent (0). CHANGELOG.md (15). Version 0.15.3 (0). 20 + 15 + 0 + 15 + 0 = 50."
        },
        "scores": {
          "a": 85,
          "b": 50
        }
      },
      {
        "by": 25,
        "category": "schema",
        "leads": "kilo-code-cli",
        "name": "Schema \u0026 documentation",
        "reasons": {
          "a": "Framework reading. A JSON Schema for `kilo.jsonc` at `https://app.kilo.ai/config.json`, an OpenAPI file for the `kilo serve` API at `packages/sdk/openapi.json` and a CLI reference generated from the command definitions (25). `llms.txt` on kilo.ai and on the docs, the second listing a raw Markdown address for every page (10). The sandboxing page says when to use the sandbox, what it does not protect and how it differs from permissions (16). Permissions are `allow`, `ask` or `deny` with glob rules, `sandbox.network` and `--format` are enums, though the schema served on 8 October had no `sandbox` key (13). Config and CI samples and exit codes 0, 1 and 124, but we found no reference for the records `--format json` writes (11). A versioned changelog and dated GitHub releases (15). Not re-read on 1 November apart from the changelog. 25 + 10 + 16 + 13 + 11 + 15 = 90.",
          "b": "Harness reading. Public docs, a CLI and plugin examples in the repository (65)."
        },
        "scores": {
          "a": 90,
          "b": 65
        }
      },
      {
        "by": 12,
        "category": "maintenance",
        "leads": "kilo-code-cli",
        "name": "Maintenance \u0026 community",
        "reasons": {
          "a": "7.8.18 on the npm `latest` tag (tag of 26 October 2026), with 7.8.25 on the `rc` tag (28 October) (30). 51 v7 release tags from 4 August to 28 October 2026, among them 7.8.13 to 7.8.25 since the 17 October check (20). Issue replies weren't re-read. The newest issues carry area and triage labels from automation, but the 15 newest open issues had no or one comment each on 8 October, against 448 open issues and 147 open pull requests, per the 8 October check (15). `@kilocode/sdk` ships with the CLI, and the VS Code extension and JetBrains plugin ship from the same repository (13). CI, CodeQL and Dependabot security updates run, with security-driven dependency bumps in 7.8.18 and 7.8.20 (9). 30 + 20 + 15 + 13 + 9 = 87.",
          "b": "v0.15.3 and commits on 7 November 2026 (30). More than three releases in 90 days (20). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent (0). Current builds (15). CI on push (10). 30 + 20 + 0 + 15 + 10 = 75."
        },
        "scores": {
          "a": 87,
          "b": 75
        }
      },
      {
        "by": 10,
        "category": "payments",
        "leads": "paseo",
        "name": "Payments \u0026 pricing",
        "reasons": {
          "a": "No payment protocol (0). Scored on Kilo's paid options, as with Cline. Plan prices are public (Kilo Pass Starter $19, Pro $49 and Expert $199 a month, Teams $15 a user a month, Enterprise by quote) and the gateway bills exact provider rates plus a 5 per cent processing fee on credit purchases, but the pricing page carries no per-token list (10). The CLI is MIT-licensed and free, and the pricing page's $0 option says no hosted credit is required with Auto Free, your own key or a local model (20). Your own provider key or a local model works with no Kilo account, so an agent can install and run it without a sign-up (20). Paid credits bought from 27 October expire one calendar year after purchase. 0 + 10 + 20 + 20 = 50.",
          "b": "Free self-hosted software with nothing to buy, so 0 for a protocol and 20 each for public pricing, a free tier and onboarding with no sign-up, 60."
        },
        "scores": {
          "a": 50,
          "b": 60
        }
      },
      {
        "by": 8,
        "category": "transparency",
        "leads": "kilo-code-cli",
        "name": "Transparency \u0026 trust",
        "reasons": {
          "a": "MIT, with opencode's copyright kept in the licence file (30). The privacy policy (29 May 2026, re-read on 1 November) names Kilo Code Inc. as controller, says data is stored in the United States and lists Stripe, OpenRouter, model providers, AppsFlyer and Sentry, but it doesn't mention the CLI's PostHog telemetry. PRIVACY.md in the repository is dated March 2025 and is silent on telemetry too. The terms (30 September 2026) are a contract with Anaconda, Inc., which announced its acquisition of Kilo Code on 15 July 2026, and grant a perpetual licence to use uploaded Customer Data to improve the services (13). `kilo console` is marked deprecated with no removal date, and updated terms apply after 30 days. No written deprecation policy found (8). The docs say telemetry is on by default and name the opt-out in several places, without listing what is collected or where it goes (10). 30 + 13 + 8 + 10 = 61.",
          "b": "Apache 2.0 for everything but third-party components (30). No telemetry and agents run on your machine (22 of 30). CHANGELOG.md, no deprecation policy (10). States no telemetry (20). 30 + 22 + 10 + 20 = 82."
        },
        "scores": {
          "a": 76,
          "b": 68
        }
      },
      {
        "by": 6,
        "category": "security",
        "leads": "kilo-code-cli",
        "name": "Security \u0026 auth",
        "reasons": {
          "a": "Harness reading of the framework checklist. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Telemetry is on by default and goes to PostHog in the United States, the source links the machine identifier to the account email after a Kilo sign-in, and since 7.8.10 (14 October) it also attaches the conda client ID when `~/.conda/aau_token` exists (see negative). It is turned off with `experimental.openTelemetry` or `KILO_TELEMETRY_LEVEL`. Provider keys stay on the machine (14). Shell commands ask by default outside a built-in allow list, reads of `.env` files and paths outside the project ask, and edits inside the project run without asking. An operating-system sandbox (Seatbelt on macOS, Bubblewrap on Linux, none on Windows) limits writes and blocks the network, refuses to run when it can't be enforced, and is off by default. `--auto` approves everything not explicitly denied. Since 7.8.13 a custom agent's own `edit` denies no longer bind the subagents it starts (15). The sandboxing page covers prompt injection and its limits, project config can't weaken the sandbox, and `{env:VAR}` is resolved only in trusted config. 7.8.16 (22 October) stopped running shell expressions found in MCP prompt text (see negative) and restricted MCP OAuth URLs to HTTP(S), and 7.8.18 stopped following cross-origin redirects for MCP HTTP and OAuth requests (11). Session export, `kilo stats` and OTLP export of traces and logs, with audit logs on the Enterprise plan (12). A valid security.txt (expires 2026-12-31, re-read on 1 November), a disclosure policy that cites HackerOne's standards and safe harbour, CodeQL in CI and no published repository advisories, though 7.8.16's MCP prompt fix appeared only as a changelog line. NVD lists CVE-2026-8766 and CVE-2026-8765 (both low, through 7.0.47, published 17 May 2026, the second a path traversal in the opt-in server's file diff route) and says the vendor didn't respond, and SECURITY.md still says the CLI has no sandbox (12). 14 + 15 + 11 + 12 + 12 = 64.",
          "b": "Harness reading. The README says no telemetry, tracking or forced log-ins (30 of 30). Worktree per agent, on your own machine (10 of 20). No prompt-injection guidance (5). No audit log (5). SECURITY.md (8). 30 + 10 + 5 + 5 + 8 = 58."
        },
        "scores": {
          "a": 64,
          "b": 58
        }
      }
    ],
    "facts": [
      {
        "a": "Agent harness",
        "b": "Agent harness",
        "name": "Kind"
      },
      {
        "a": "Kilo Code Inc.",
        "b": "Mohamed Boudra",
        "name": "Vendor"
      },
      {
        "a": "no (local only)",
        "b": "no (local only)",
        "name": "Hosted endpoint"
      },
      {
        "a": "",
        "b": "",
        "name": "Transports"
      },
      {
        "a": "OAuth or key",
        "b": "None",
        "name": "Auth"
      },
      {
        "a": "Freemium",
        "b": "Free",
        "name": "Pricing"
      },
      {
        "a": "no",
        "b": "no",
        "name": "x402"
      },
      {
        "a": "MIT",
        "b": "Apache-2.0",
        "name": "Licence"
      },
      {
        "a": "no",
        "b": "no",
        "name": "Read-only variant documented"
      },
      {
        "a": "yes",
        "b": "no",
        "name": "llms.txt"
      },
      {
        "a": "2026-10-26",
        "b": "2026-11-07",
        "name": "Last release"
      },
      {
        "a": "2026-09-30",
        "b": "no document linked",
        "name": "Terms last updated"
      },
      {
        "a": "2026-05-29",
        "b": "no document linked",
        "name": "Privacy policy last updated"
      },
      {
        "a": "not found in the text",
        "b": "not read yet",
        "name": "Customer content may train models"
      },
      {
        "a": "yes",
        "b": "not read yet",
        "name": "Terms restrict automated access"
      },
      {
        "a": "not found in the text",
        "b": "not read yet",
        "name": "Terms restrict benchmarking"
      },
      {
        "a": "yes",
        "b": "not read yet",
        "name": "Terms or service can change without notice"
      },
      {
        "a": "yes",
        "b": "not read yet",
        "name": "Arbitration or class-action waiver"
      },
      {
        "a": "28k stars, 33k npm/wk",
        "b": "none",
        "name": "Popularity"
      },
      {
        "a": "2.3/5 (4)",
        "b": "none",
        "name": "Agent reviews"
      }
    ],
    "faq": [
      {
        "answer": "Kilo Code CLI scores 68 (B) on agent readiness against Paseo's 62.1 (B), and leads in 6 of 7 scored categories. Paseo leads on payments \u0026 pricing.",
        "question": "Which is better for AI agents, Kilo Code CLI or Paseo?"
      },
      {
        "answer": "Yes. Kilo Code CLI is open source (MIT). Paseo is open source (Apache-2.0).",
        "question": "Are Kilo Code CLI and Paseo open source?"
      }
    ],
    "goodFor": [
      {
        "aheadOn": [
          "Reliability, 85 against 50",
          "Schema \u0026 documentation, 90 against 65",
          "Security \u0026 auth, 64 against 58",
          "Maintenance \u0026 community, 87 against 75",
          "Transparency \u0026 trust, 76 against 68"
        ],
        "also": [
          "Free to start without a card"
        ],
        "goodFor": "Developers who want an open-source terminal agent with per-tool permission rules, an optional sandbox and a choice of provider, and the same engine in VS Code and JetBrains.",
        "slug": "kilo-code-cli",
        "watchFor": "Telemetry to PostHog is on by default, attaches the conda client ID since 7.8.10, and the privacy policy doesn't mention it"
      },
      {
        "aheadOn": [
          "Payments \u0026 pricing, 60 against 50"
        ],
        "also": [
          "No key needed to call it",
          "No incidents deducted, where Kilo Code CLI loses 7 points for them"
        ],
        "goodFor": "Developers who want parallel coding agents on their own machines with no telemetry, reachable from anywhere.",
        "slug": "paseo",
        "watchFor": "Pre-1.0, at 0.15.3"
      }
    ],
    "history": {
      "kilo-code-cli": [
        {
          "causes": [
            "event"
          ],
          "date": "2026-11-01",
          "delta": -5,
          "from": 73,
          "fromGrade": "BB",
          "to": 68,
          "toGrade": "B"
        },
        {
          "causes": [
            "evidence",
            "event"
          ],
          "date": "2026-10-17",
          "delta": -2.4,
          "from": 75.4,
          "fromGrade": "BB",
          "to": 73,
          "toGrade": "BB"
        }
      ],
      "paseo": null
    },
    "job": {
      "capability": "agent.harness",
      "name": "Agent harnesses"
    },
    "others": [
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli.json",
        "title": "Agent Zero vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-paseo.json",
        "title": "Agent Zero vs Paseo",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/aider-vs-kilo-code-cli.json",
        "title": "Aider vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/aider-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/aider-vs-paseo.json",
        "title": "Aider vs Paseo",
        "url": "https://www.anchorterminal.com/compare/aider-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/amp-vs-kilo-code-cli.json",
        "title": "Amp vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/amp-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/amp-vs-paseo.json",
        "title": "Amp vs Paseo",
        "url": "https://www.anchorterminal.com/compare/amp-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-kilo-code-cli.json",
        "title": "Antigravity CLI vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-paseo.json",
        "title": "Antigravity CLI vs Paseo",
        "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/auggie-vs-kilo-code-cli.json",
        "title": "Auggie CLI vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/auggie-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/auggie-vs-paseo.json",
        "title": "Auggie CLI vs Paseo",
        "url": "https://www.anchorterminal.com/compare/auggie-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/axlr-vs-kilo-code-cli.json",
        "title": "AXLR vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/axlr-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/axlr-vs-paseo.json",
        "title": "AXLR vs Paseo",
        "url": "https://www.anchorterminal.com/compare/axlr-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli.json",
        "title": "Claude Code vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/claude-code-vs-paseo.json",
        "title": "Claude Code vs Paseo",
        "url": "https://www.anchorterminal.com/compare/claude-code-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cline-vs-kilo-code-cli.json",
        "title": "Cline vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/cline-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cline-vs-paseo.json",
        "title": "Cline vs Paseo",
        "url": "https://www.anchorterminal.com/compare/cline-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/conductor-vs-kilo-code-cli.json",
        "title": "Conductor vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/conductor-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/conductor-vs-paseo.json",
        "title": "Conductor vs Paseo",
        "url": "https://www.anchorterminal.com/compare/conductor-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/crush-vs-kilo-code-cli.json",
        "title": "Crush vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/crush-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/crush-vs-paseo.json",
        "title": "Crush vs Paseo",
        "url": "https://www.anchorterminal.com/compare/crush-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-kilo-code-cli.json",
        "title": "Cursor CLI vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-paseo.json",
        "title": "Cursor CLI vs Paseo",
        "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-kilo-code-cli.json",
        "title": "DeepSeek Harness (dsh) vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-paseo.json",
        "title": "DeepSeek Harness (dsh) vs Paseo",
        "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kilo-code-cli.json",
        "title": "dsh-superagent (DeepSeek) vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-paseo.json",
        "title": "dsh-superagent (DeepSeek) vs Paseo",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/devin-vs-kilo-code-cli.json",
        "title": "Devin vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/devin-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/devin-vs-paseo.json",
        "title": "Devin vs Paseo",
        "url": "https://www.anchorterminal.com/compare/devin-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/droid-cli-vs-kilo-code-cli.json",
        "title": "Droid CLI vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/droid-cli-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/droid-cli-vs-paseo.json",
        "title": "Droid CLI vs Paseo",
        "url": "https://www.anchorterminal.com/compare/droid-cli-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-kilo-code-cli.json",
        "title": "Pi vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-paseo.json",
        "title": "Pi vs Paseo",
        "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/emdash-vs-kilo-code-cli.json",
        "title": "Emdash vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/emdash-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/emdash-vs-paseo.json",
        "title": "Emdash vs Paseo",
        "url": "https://www.anchorterminal.com/compare/emdash-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-kilo-code-cli.json",
        "title": "Gemini CLI vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-paseo.json",
        "title": "Gemini CLI vs Paseo",
        "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-kilo-code-cli.json",
        "title": "GitHub Copilot CLI vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-paseo.json",
        "title": "GitHub Copilot CLI vs Paseo",
        "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/goose-vs-kilo-code-cli.json",
        "title": "goose vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/goose-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/goose-vs-paseo.json",
        "title": "goose vs Paseo",
        "url": "https://www.anchorterminal.com/compare/goose-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/harness2-vs-kilo-code-cli.json",
        "title": "Harness² vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/harness2-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/harness2-vs-paseo.json",
        "title": "Harness² vs Paseo",
        "url": "https://www.anchorterminal.com/compare/harness2-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-kilo-code-cli.json",
        "title": "HarnessRouter vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-paseo.json",
        "title": "HarnessRouter vs Paseo",
        "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/jules-vs-kilo-code-cli.json",
        "title": "Jules vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/jules-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/jules-vs-paseo.json",
        "title": "Jules vs Paseo",
        "url": "https://www.anchorterminal.com/compare/jules-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/junie-vs-kilo-code-cli.json",
        "title": "Junie CLI vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/junie-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/junie-vs-paseo.json",
        "title": "Junie CLI vs Paseo",
        "url": "https://www.anchorterminal.com/compare/junie-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-kimi-code-cli.json",
        "title": "Kilo Code CLI vs Kimi Code CLI",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-kimi-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-kiro-cli.json",
        "title": "Kilo Code CLI vs Kiro CLI",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-kiro-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-letta.json",
        "title": "Kilo Code CLI vs Letta",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-letta"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-mini-swe-agent.json",
        "title": "Kilo Code CLI vs mini-swe-agent",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-mini-swe-agent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-minimax-code.json",
        "title": "Kilo Code CLI vs MiniMax Code",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-minimax-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-mistral-vibe-cli.json",
        "title": "Kilo Code CLI vs Mistral Vibe CLI",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-mistral-vibe-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-muse-code.json",
        "title": "Kilo Code CLI vs Muse Code",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-muse-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-agents-api.json",
        "title": "Kilo Code CLI vs OpenAI Agents API",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-agents-api"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-codex.json",
        "title": "Kilo Code CLI vs OpenAI Codex",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-codex"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-opencode.json",
        "title": "Kilo Code CLI vs OpenCode",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-opencode"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openhands.json",
        "title": "Kilo Code CLI vs OpenHands",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openhands"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openmausbot.json",
        "title": "Kilo Code CLI vs OpenMausBot",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openmausbot"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-orca.json",
        "title": "Kilo Code CLI vs Orca",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-orca"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-prime-agent.json",
        "title": "Kilo Code CLI vs Prime Agent",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-prime-agent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-qoder-cli.json",
        "title": "Kilo Code CLI vs Qoder CLI",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-qoder-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-qwen-code.json",
        "title": "Kilo Code CLI vs Qwen Code",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-qwen-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-reflection-mirror.json",
        "title": "Kilo Code CLI vs Mirror CLI",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-reflection-mirror"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-rovo-dev-cli.json",
        "title": "Kilo Code CLI vs Rovo Dev CLI",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-rovo-dev-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-sculptor.json",
        "title": "Kilo Code CLI vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-t3-code.json",
        "title": "Kilo Code CLI vs T3 Code",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-t3-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-traycer.json",
        "title": "Kilo Code CLI vs Traycer",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-traycer"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-unstoppable.json",
        "title": "Kilo Code CLI vs Unstoppable",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-unstoppable"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-verdent.json",
        "title": "Kilo Code CLI vs Verdent",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-verdent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading.json",
        "title": "Kilo Code CLI vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-warp.json",
        "title": "Kilo Code CLI vs Warp (Warp Agent CLI and the Oz Agent API)",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-warp"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-paseo.json",
        "title": "Kimi Code CLI vs Paseo",
        "url": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-paseo.json",
        "title": "Kiro CLI vs Paseo",
        "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/letta-vs-paseo.json",
        "title": "Letta vs Paseo",
        "url": "https://www.anchorterminal.com/compare/letta-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-paseo.json",
        "title": "mini-swe-agent vs Paseo",
        "url": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/minimax-code-vs-paseo.json",
        "title": "MiniMax Code vs Paseo",
        "url": "https://www.anchorterminal.com/compare/minimax-code-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-paseo.json",
        "title": "Mistral Vibe CLI vs Paseo",
        "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/muse-code-vs-paseo.json",
        "title": "Muse Code vs Paseo",
        "url": "https://www.anchorterminal.com/compare/muse-code-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-paseo.json",
        "title": "OpenAI Agents API vs Paseo",
        "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-codex-vs-paseo.json",
        "title": "OpenAI Codex vs Paseo",
        "url": "https://www.anchorterminal.com/compare/openai-codex-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/opencode-vs-paseo.json",
        "title": "OpenCode vs Paseo",
        "url": "https://www.anchorterminal.com/compare/opencode-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openhands-vs-paseo.json",
        "title": "OpenHands vs Paseo",
        "url": "https://www.anchorterminal.com/compare/openhands-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/orca-vs-paseo.json",
        "title": "Orca vs Paseo",
        "url": "https://www.anchorterminal.com/compare/orca-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/paseo-vs-prime-agent.json",
        "title": "Paseo vs Prime Agent",
        "url": "https://www.anchorterminal.com/compare/paseo-vs-prime-agent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/paseo-vs-qoder-cli.json",
        "title": "Paseo vs Qoder CLI",
        "url": "https://www.anchorterminal.com/compare/paseo-vs-qoder-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/paseo-vs-qwen-code.json",
        "title": "Paseo vs Qwen Code",
        "url": "https://www.anchorterminal.com/compare/paseo-vs-qwen-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/paseo-vs-reflection-mirror.json",
        "title": "Paseo vs Mirror CLI",
        "url": "https://www.anchorterminal.com/compare/paseo-vs-reflection-mirror"
      },
      {
        "json": "https://www.anchorterminal.com/compare/paseo-vs-rovo-dev-cli.json",
        "title": "Paseo vs Rovo Dev CLI",
        "url": "https://www.anchorterminal.com/compare/paseo-vs-rovo-dev-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/paseo-vs-sculptor.json",
        "title": "Paseo vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/paseo-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/paseo-vs-t3-code.json",
        "title": "Paseo vs T3 Code",
        "url": "https://www.anchorterminal.com/compare/paseo-vs-t3-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/paseo-vs-traycer.json",
        "title": "Paseo vs Traycer",
        "url": "https://www.anchorterminal.com/compare/paseo-vs-traycer"
      },
      {
        "json": "https://www.anchorterminal.com/compare/paseo-vs-unstoppable.json",
        "title": "Paseo vs Unstoppable",
        "url": "https://www.anchorterminal.com/compare/paseo-vs-unstoppable"
      },
      {
        "json": "https://www.anchorterminal.com/compare/paseo-vs-verdent.json",
        "title": "Paseo vs Verdent",
        "url": "https://www.anchorterminal.com/compare/paseo-vs-verdent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/paseo-vs-vibe-trading.json",
        "title": "Paseo vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/paseo-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/paseo-vs-warp.json",
        "title": "Paseo vs Warp (Warp Agent CLI and the Oz Agent API)",
        "url": "https://www.anchorterminal.com/compare/paseo-vs-warp"
      },
      {
        "json": "https://www.anchorterminal.com/compare/clawboo-vs-kilo-code-cli.json",
        "title": "Clawboo vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/clawboo-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/clawboo-vs-paseo.json",
        "title": "Clawboo vs Paseo",
        "url": "https://www.anchorterminal.com/compare/clawboo-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cli-manager-vs-kilo-code-cli.json",
        "title": "CLI Manager vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/cli-manager-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cli-manager-vs-paseo.json",
        "title": "CLI Manager vs Paseo",
        "url": "https://www.anchorterminal.com/compare/cli-manager-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-kilo-code-cli.json",
        "title": "Harness vs Kilo Code CLI",
        "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-kilo-code-cli"
      },
      {
        "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-paseo.json",
        "title": "Harness vs Paseo",
        "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip.json",
        "title": "Kilo Code CLI vs Paperclip",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-parallax-agents.json",
        "title": "Kilo Code CLI vs Parallax",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-parallax-agents"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openmausbot-vs-paseo.json",
        "title": "OpenMausBot vs Paseo",
        "url": "https://www.anchorterminal.com/compare/openmausbot-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/paperclip-vs-paseo.json",
        "title": "Paperclip vs Paseo",
        "url": "https://www.anchorterminal.com/compare/paperclip-vs-paseo"
      },
      {
        "json": "https://www.anchorterminal.com/compare/parallax-agents-vs-paseo.json",
        "title": "Parallax vs Paseo",
        "url": "https://www.anchorterminal.com/compare/parallax-agents-vs-paseo"
      }
    ],
    "panel": null,
    "scores": [
      {
        "by": 35,
        "edge": "kilo-code-cli",
        "key": "reliability",
        "kilo-code-cli": 85,
        "name": "Reliability",
        "paseo": 50,
        "weight": 16
      },
      {
        "key": "performance",
        "name": "Performance",
        "pending": true,
        "weight": 10
      },
      {
        "by": 25,
        "edge": "kilo-code-cli",
        "key": "schema",
        "kilo-code-cli": 90,
        "name": "Schema \u0026 documentation",
        "paseo": 65,
        "weight": 13
      },
      {
        "by": 2,
        "edge": "kilo-code-cli",
        "key": "ergonomics",
        "kilo-code-cli": 72,
        "name": "Agent ergonomics",
        "paseo": 70,
        "weight": 13
      },
      {
        "by": 6,
        "edge": "kilo-code-cli",
        "key": "security",
        "kilo-code-cli": 64,
        "name": "Security \u0026 auth",
        "paseo": 58,
        "weight": 14
      },
      {
        "by": 10,
        "edge": "paseo",
        "key": "payments",
        "kilo-code-cli": 50,
        "name": "Payments \u0026 pricing",
        "paseo": 60,
        "weight": 10
      },
      {
        "key": "tasks",
        "name": "Task success",
        "pending": true,
        "weight": 10
      },
      {
        "by": 12,
        "edge": "kilo-code-cli",
        "key": "maintenance",
        "kilo-code-cli": 87,
        "name": "Maintenance \u0026 community",
        "paseo": 75,
        "weight": 7
      },
      {
        "by": 8,
        "edge": "kilo-code-cli",
        "key": "transparency",
        "kilo-code-cli": 76,
        "name": "Transparency \u0026 trust",
        "paseo": 68,
        "weight": 7
      }
    ],
    "summary": "Kilo Code CLI scores 68 (B) on agent readiness against Paseo's 62.1 (B), and leads in 6 of 7 scored categories. Paseo leads on payments \u0026 pricing. Both do agent harnesses.",
    "tasks": null,
    "tutorials": [],
    "verdicts": {
      "kilo-code-cli": "Shell commands ask before running by default, and an optional operating-system sandbox blocks writes outside the workspace and outbound network. Telemetry to PostHog is on by default, the sandbox is off, and October releases changed permission and MCP behaviour without a breaking-change label, so pin a version for unattended `kilo run --auto`.",
      "paseo": "A self-hosted, open-source workspace for running many coding agents on your own machines, scriptable from the CLI and reachable from phone, web or desktop, with no telemetry or forced log-in. It's pre-1.0 and run largely by one maintainer."
    }
  },
  "kind": "anchor.page",
  "links": {
    "api": "https://www.anchorterminal.com/api/v1/index.json",
    "html": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-paseo",
    "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-paseo.json",
    "llms": "https://www.anchorterminal.com/llms.txt",
    "markdown": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-paseo.md",
    "mcp": "https://www.anchorterminal.com/mcp",
    "slim": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-paseo.min.md"
  },
  "markdown": "Kilo Code CLI scores 68 (B) on agent readiness against Paseo's 62.1 (B), and leads in 6 of 7 scored categories. Paseo leads on payments \u0026 pricing. Both do agent harnesses.\n\n- Kilo Code CLI: grade B, 68/100, rank #295 of 1486. Markdown https://www.anchorterminal.com/tools/kilo-code-cli.md · JSON https://www.anchorterminal.com/api/v1/tools/kilo-code-cli.json\n- Paseo: grade B, 62.1/100, rank #575 of 1486. Markdown https://www.anchorterminal.com/tools/paseo.md · JSON https://www.anchorterminal.com/api/v1/tools/paseo.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 1500 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### Kilo Code CLI (B)\n\nGood for: Developers who want an open-source terminal agent with per-tool permission rules, an optional sandbox and a choice of provider, and the same engine in VS Code and JetBrains.\n\nAhead on:\n- Reliability, 85 against 50\n- Schema \u0026 documentation, 90 against 65\n- Security \u0026 auth, 64 against 58\n- Maintenance \u0026 community, 87 against 75\n- Transparency \u0026 trust, 76 against 68\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: Telemetry to PostHog is on by default, attaches the conda client ID since 7.8.10, and the privacy policy doesn't mention it\n\n### Paseo (B)\n\nGood for: Developers who want parallel coding agents on their own machines with no telemetry, reachable from anywhere.\n\nAhead on:\n- Payments \u0026 pricing, 60 against 50\n\nAlso in its favour:\n- No key needed to call it\n- No incidents deducted, where Kilo Code CLI loses 7 points for them\n\nWatch for: Pre-1.0, at 0.15.3\n\n\n## Why the edge\n\n### Reliability: Kilo Code CLI +35\n\n- Kilo Code CLI (85): Local-package reading. `@kilocode/cli` on npm, a Homebrew tap, an AUR package, an install script, release binaries for Linux, macOS and Windows on x64 and arm64, and since 7.8.20 (27 October) a `kilo-cli` conda package on Anaconda.org (20). Public CI, and the 40 most recent completed workflow runs on main on 8 October 2026 all succeeded, per the 8 October check, not re-read on 17 October or 1 November (25). 448 open issues and 147 open pull requests, a workflow that closes issues after 60 quiet days and pull requests after 30, and open reports from 7 October of a hanging turn (#14876) and of exhausted 503 retries ending a run with no visible error (#14877), per the 8 October check, not re-read since (15). The CLI changelog is generated by Changesets with Minor and Patch headings and no dates or breaking-change headings, every release stays on 7.8.x whatever its heading, and 7.8.13 and 7.8.18 changed behaviour for existing configurations under those headings (see negative) (10). 7.8.18 on the npm `latest` tag on 1 November, past 1.0 (15). 20 + 25 + 15 + 10 + 15 = 85.\n- Paseo (50): Local software. Desktop builds, an Android APK, a Docker image and a Nix package (20). ci.yml on the repository; pass state not read (15). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent (0). CHANGELOG.md (15). Version 0.15.3 (0). 20 + 15 + 0 + 15 + 0 = 50.\n\n### Schema \u0026 documentation: Kilo Code CLI +25\n\n- Kilo Code CLI (90): Framework reading. A JSON Schema for `kilo.jsonc` at `https://app.kilo.ai/config.json`, an OpenAPI file for the `kilo serve` API at `packages/sdk/openapi.json` and a CLI reference generated from the command definitions (25). `llms.txt` on kilo.ai and on the docs, the second listing a raw Markdown address for every page (10). The sandboxing page says when to use the sandbox, what it does not protect and how it differs from permissions (16). Permissions are `allow`, `ask` or `deny` with glob rules, `sandbox.network` and `--format` are enums, though the schema served on 8 October had no `sandbox` key (13). Config and CI samples and exit codes 0, 1 and 124, but we found no reference for the records `--format json` writes (11). A versioned changelog and dated GitHub releases (15). Not re-read on 1 November apart from the changelog. 25 + 10 + 16 + 13 + 11 + 15 = 90.\n- Paseo (65): Harness reading. Public docs, a CLI and plugin examples in the repository (65).\n\n### Maintenance \u0026 community: Kilo Code CLI +12\n\n- Kilo Code CLI (87): 7.8.18 on the npm `latest` tag (tag of 26 October 2026), with 7.8.25 on the `rc` tag (28 October) (30). 51 v7 release tags from 4 August to 28 October 2026, among them 7.8.13 to 7.8.25 since the 17 October check (20). Issue replies weren't re-read. The newest issues carry area and triage labels from automation, but the 15 newest open issues had no or one comment each on 8 October, against 448 open issues and 147 open pull requests, per the 8 October check (15). `@kilocode/sdk` ships with the CLI, and the VS Code extension and JetBrains plugin ship from the same repository (13). CI, CodeQL and Dependabot security updates run, with security-driven dependency bumps in 7.8.18 and 7.8.20 (9). 30 + 20 + 15 + 13 + 9 = 87.\n- Paseo (75): v0.15.3 and commits on 7 November 2026 (30). More than three releases in 90 days (20). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent (0). Current builds (15). CI on push (10). 30 + 20 + 0 + 15 + 10 = 75.\n\n### Payments \u0026 pricing: Paseo +10\n\n- Kilo Code CLI (50): No payment protocol (0). Scored on Kilo's paid options, as with Cline. Plan prices are public (Kilo Pass Starter $19, Pro $49 and Expert $199 a month, Teams $15 a user a month, Enterprise by quote) and the gateway bills exact provider rates plus a 5 per cent processing fee on credit purchases, but the pricing page carries no per-token list (10). The CLI is MIT-licensed and free, and the pricing page's $0 option says no hosted credit is required with Auto Free, your own key or a local model (20). Your own provider key or a local model works with no Kilo account, so an agent can install and run it without a sign-up (20). Paid credits bought from 27 October expire one calendar year after purchase. 0 + 10 + 20 + 20 = 50.\n- Paseo (60): Free self-hosted software with nothing to buy, so 0 for a protocol and 20 each for public pricing, a free tier and onboarding with no sign-up, 60.\n\n### Transparency \u0026 trust: Kilo Code CLI +8\n\n- Kilo Code CLI (76): MIT, with opencode's copyright kept in the licence file (30). The privacy policy (29 May 2026, re-read on 1 November) names Kilo Code Inc. as controller, says data is stored in the United States and lists Stripe, OpenRouter, model providers, AppsFlyer and Sentry, but it doesn't mention the CLI's PostHog telemetry. PRIVACY.md in the repository is dated March 2025 and is silent on telemetry too. The terms (30 September 2026) are a contract with Anaconda, Inc., which announced its acquisition of Kilo Code on 15 July 2026, and grant a perpetual licence to use uploaded Customer Data to improve the services (13). `kilo console` is marked deprecated with no removal date, and updated terms apply after 30 days. No written deprecation policy found (8). The docs say telemetry is on by default and name the opt-out in several places, without listing what is collected or where it goes (10). 30 + 13 + 8 + 10 = 61.\n- Paseo (68): Apache 2.0 for everything but third-party components (30). No telemetry and agents run on your machine (22 of 30). CHANGELOG.md, no deprecation policy (10). States no telemetry (20). 30 + 22 + 10 + 20 = 82.\n\n### Security \u0026 auth: Kilo Code CLI +6\n\n- Kilo Code CLI (64): Harness reading of the framework checklist. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Telemetry is on by default and goes to PostHog in the United States, the source links the machine identifier to the account email after a Kilo sign-in, and since 7.8.10 (14 October) it also attaches the conda client ID when `~/.conda/aau_token` exists (see negative). It is turned off with `experimental.openTelemetry` or `KILO_TELEMETRY_LEVEL`. Provider keys stay on the machine (14). Shell commands ask by default outside a built-in allow list, reads of `.env` files and paths outside the project ask, and edits inside the project run without asking. An operating-system sandbox (Seatbelt on macOS, Bubblewrap on Linux, none on Windows) limits writes and blocks the network, refuses to run when it can't be enforced, and is off by default. `--auto` approves everything not explicitly denied. Since 7.8.13 a custom agent's own `edit` denies no longer bind the subagents it starts (15). The sandboxing page covers prompt injection and its limits, project config can't weaken the sandbox, and `{env:VAR}` is resolved only in trusted config. 7.8.16 (22 October) stopped running shell expressions found in MCP prompt text (see negative) and restricted MCP OAuth URLs to HTTP(S), and 7.8.18 stopped following cross-origin redirects for MCP HTTP and OAuth requests (11). Session export, `kilo stats` and OTLP export of traces and logs, with audit logs on the Enterprise plan (12). A valid security.txt (expires 2026-12-31, re-read on 1 November), a disclosure policy that cites HackerOne's standards and safe harbour, CodeQL in CI and no published repository advisories, though 7.8.16's MCP prompt fix appeared only as a changelog line. NVD lists CVE-2026-8766 and CVE-2026-8765 (both low, through 7.0.47, published 17 May 2026, the second a path traversal in the opt-in server's file diff route) and says the vendor didn't respond, and SECURITY.md still says the CLI has no sandbox (12). 14 + 15 + 11 + 12 + 12 = 64.\n- Paseo (58): Harness reading. The README says no telemetry, tracking or forced log-ins (30 of 30). Worktree per agent, on your own machine (10 of 20). No prompt-injection guidance (5). No audit log (5). SECURITY.md (8). 30 + 10 + 5 + 5 + 8 = 58.\n\n## Score by category\n\n| Category | Weight | Kilo Code CLI | Paseo | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 85 | 50 | Kilo Code CLI +35 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 90 | 65 | Kilo Code CLI +25 |\n| Agent ergonomics | 13% (16.2 this run) | 72 | 70 | Kilo Code CLI +2 |\n| Security \u0026 auth | 14% (17.5 this run) | 64 | 58 | Kilo Code CLI +6 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 50 | 60 | Paseo +10 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 87 | 75 | Kilo Code CLI +12 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 76 | 68 | Kilo Code CLI +8 |\n| Negative events | ≤15 | -7 | 0 | |\n| **Total** | | **68 · B** | **62.1 · B** | |\n\n## Facts side by side\n\n| Fact | Kilo Code CLI | Paseo |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Kilo Code Inc. | Mohamed Boudra |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports |  |  |\n| Auth | OAuth or key | None |\n| Pricing | Freemium | Free |\n| x402 | no | no |\n| Licence | MIT | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-10-26 | 2026-11-07 |\n| Terms last updated | 2026-09-30 | no document linked |\n| Privacy policy last updated | 2026-05-29 | no document linked |\n| Customer content may train models | not found in the text | not read yet |\n| Terms restrict automated access | yes | not read yet |\n| Terms restrict benchmarking | not found in the text | not read yet |\n| Terms or service can change without notice | yes | not read yet |\n| Arbitration or class-action waiver | yes | not read yet |\n| Popularity | 28k stars, 33k npm/wk | none |\n| Agent reviews | 2.3/5 (4) | none |\n\n## How the scores have moved\n\n### Kilo Code CLI\n\n- -5.0 on 1 November 2026 (BB to B): negative event\n- -2.4 on 17 October 2026: new evidence, negative event\n\n### Paseo\n\nNo score change since it was listed.\n\n## Verdicts\n\n**Kilo Code CLI.** Shell commands ask before running by default, and an optional operating-system sandbox blocks writes outside the workspace and outbound network. Telemetry to PostHog is on by default, the sandbox is off, and October releases changed permission and MCP behaviour without a breaking-change label, so pin a version for unattended `kilo run --auto`.\n\n**Paseo.** A self-hosted, open-source workspace for running many coding agents on your own machines, scriptable from the CLI and reachable from phone, web or desktop, with no telemetry or forced log-in. It's pre-1.0 and run largely by one maintainer.\n\n## Before you call either\n\n### Kilo Code CLI\n\n1. Set `sandbox.enabled` to true in the global `kilo.jsonc` before `kilo run --auto`. `--auto` approves every permission request not explicitly denied\n2. Set `experimental.openTelemetry` to false, or `KILO_TELEMETRY_LEVEL` to a value other than `all`, to stop telemetry, including the conda client ID\n3. Add needed hosts to `sandbox.allowed_hosts` in global config. MCP tool calls are unavailable while network restriction is on\n4. Without `--auto` a non-interactive run rejects every permission prompt and exits 1\n5. Confine subagent writes with a session-level edit rule. Since 7.8.13 a custom agent's own `edit` denies no longer bind the subagents it starts\n6. Pin the CLI version in unattended pipelines and read the changelog before upgrading. Behaviour changes ship under 7.8.x patch versions\n\n### Paseo\n\n1. Run the daemon on the machine that has your tools and credentials, and connect from the clients\n2. Script runs from the CLI for repeatable agent jobs\n\n## Questions\n\n### Which is better for AI agents, Kilo Code CLI or Paseo?\n\nKilo Code CLI scores 68 (B) on agent readiness against Paseo's 62.1 (B), and leads in 6 of 7 scored categories. Paseo leads on payments \u0026 pricing.\n\n### Are Kilo Code CLI and Paseo open source?\n\nYes. Kilo Code CLI is open source (MIT). Paseo is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/kilo-code-cli-vs-paseo.json, and with the fewest tokens: https://www.anchorterminal.com/compare/kilo-code-cli-vs-paseo.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"kilo-code-cli\", \"b\": \"paseo\"}`. From a terminal: `anchor compare kilo-code-cli paseo`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/kilo-code-cli.json and https://www.anchorterminal.com/api/v1/tools/paseo.json\n\n## Other comparisons with Kilo Code CLI or Paseo\n\n- [Agent Zero vs Kilo Code CLI](https://www.anchorterminal.com/compare/agent-zero-vs-kilo-code-cli.md)\n- [Agent Zero vs Paseo](https://www.anchorterminal.com/compare/agent-zero-vs-paseo.md)\n- [Aider vs Kilo Code CLI](https://www.anchorterminal.com/compare/aider-vs-kilo-code-cli.md)\n- [Aider vs Paseo](https://www.anchorterminal.com/compare/aider-vs-paseo.md)\n- [Amp vs Kilo Code CLI](https://www.anchorterminal.com/compare/amp-vs-kilo-code-cli.md)\n- [Amp vs Paseo](https://www.anchorterminal.com/compare/amp-vs-paseo.md)\n- [Antigravity CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/antigravity-cli-vs-kilo-code-cli.md)\n- [Antigravity CLI vs Paseo](https://www.anchorterminal.com/compare/antigravity-cli-vs-paseo.md)\n- [Auggie CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/auggie-vs-kilo-code-cli.md)\n- [Auggie CLI vs Paseo](https://www.anchorterminal.com/compare/auggie-vs-paseo.md)\n- [AXLR vs Kilo Code CLI](https://www.anchorterminal.com/compare/axlr-vs-kilo-code-cli.md)\n- [AXLR vs Paseo](https://www.anchorterminal.com/compare/axlr-vs-paseo.md)\n- [Claude Code vs Kilo Code CLI](https://www.anchorterminal.com/compare/claude-code-vs-kilo-code-cli.md)\n- [Claude Code vs Paseo](https://www.anchorterminal.com/compare/claude-code-vs-paseo.md)\n- [Cline vs Kilo Code CLI](https://www.anchorterminal.com/compare/cline-vs-kilo-code-cli.md)\n- [Cline vs Paseo](https://www.anchorterminal.com/compare/cline-vs-paseo.md)\n- [Conductor vs Kilo Code CLI](https://www.anchorterminal.com/compare/conductor-vs-kilo-code-cli.md)\n- [Conductor vs Paseo](https://www.anchorterminal.com/compare/conductor-vs-paseo.md)\n- [Crush vs Kilo Code CLI](https://www.anchorterminal.com/compare/crush-vs-kilo-code-cli.md)\n- [Crush vs Paseo](https://www.anchorterminal.com/compare/crush-vs-paseo.md)\n- [Cursor CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-kilo-code-cli.md)\n- [Cursor CLI vs Paseo](https://www.anchorterminal.com/compare/cursor-cli-vs-paseo.md)\n- [DeepSeek Harness (dsh) vs Kilo Code CLI](https://www.anchorterminal.com/compare/deepseek-harness-vs-kilo-code-cli.md)\n- [DeepSeek Harness (dsh) vs Paseo](https://www.anchorterminal.com/compare/deepseek-harness-vs-paseo.md)\n- [dsh-superagent (DeepSeek) vs Kilo Code CLI](https://www.anchorterminal.com/compare/deepseek-superagent-vs-kilo-code-cli.md)\n- [dsh-superagent (DeepSeek) vs Paseo](https://www.anchorterminal.com/compare/deepseek-superagent-vs-paseo.md)\n- [Devin vs Kilo Code CLI](https://www.anchorterminal.com/compare/devin-vs-kilo-code-cli.md)\n- [Devin vs Paseo](https://www.anchorterminal.com/compare/devin-vs-paseo.md)\n- [Droid CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/droid-cli-vs-kilo-code-cli.md)\n- [Droid CLI vs Paseo](https://www.anchorterminal.com/compare/droid-cli-vs-paseo.md)\n- [Pi vs Kilo Code CLI](https://www.anchorterminal.com/compare/earendil-pi-vs-kilo-code-cli.md)\n- [Pi vs Paseo](https://www.anchorterminal.com/compare/earendil-pi-vs-paseo.md)\n- [Emdash vs Kilo Code CLI](https://www.anchorterminal.com/compare/emdash-vs-kilo-code-cli.md)\n- [Emdash vs Paseo](https://www.anchorterminal.com/compare/emdash-vs-paseo.md)\n- [Gemini CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/gemini-cli-vs-kilo-code-cli.md)\n- [Gemini CLI vs Paseo](https://www.anchorterminal.com/compare/gemini-cli-vs-paseo.md)\n- [GitHub Copilot CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/github-copilot-cli-vs-kilo-code-cli.md)\n- [GitHub Copilot CLI vs Paseo](https://www.anchorterminal.com/compare/github-copilot-cli-vs-paseo.md)\n- [goose vs Kilo Code CLI](https://www.anchorterminal.com/compare/goose-vs-kilo-code-cli.md)\n- [goose vs Paseo](https://www.anchorterminal.com/compare/goose-vs-paseo.md)\n- [Harness² vs Kilo Code CLI](https://www.anchorterminal.com/compare/harness2-vs-kilo-code-cli.md)\n- [Harness² vs Paseo](https://www.anchorterminal.com/compare/harness2-vs-paseo.md)\n- [HarnessRouter vs Kilo Code CLI](https://www.anchorterminal.com/compare/harnessrouter-vs-kilo-code-cli.md)\n- [HarnessRouter vs Paseo](https://www.anchorterminal.com/compare/harnessrouter-vs-paseo.md)\n- [Jules vs Kilo Code CLI](https://www.anchorterminal.com/compare/jules-vs-kilo-code-cli.md)\n- [Jules vs Paseo](https://www.anchorterminal.com/compare/jules-vs-paseo.md)\n- [Junie CLI vs Kilo Code CLI](https://www.anchorterminal.com/compare/junie-vs-kilo-code-cli.md)\n- [Junie CLI vs Paseo](https://www.anchorterminal.com/compare/junie-vs-paseo.md)\n- [Kilo Code CLI vs Kimi Code CLI](https://www.anchorterminal.com/compare/kilo-code-cli-vs-kimi-code-cli.md)\n- [Kilo Code CLI vs Kiro CLI](https://www.anchorterminal.com/compare/kilo-code-cli-vs-kiro-cli.md)\n- [Kilo Code CLI vs Letta](https://www.anchorterminal.com/compare/kilo-code-cli-vs-letta.md)\n- [Kilo Code CLI vs mini-swe-agent](https://www.anchorterminal.com/compare/kilo-code-cli-vs-mini-swe-agent.md)\n- [Kilo Code CLI vs MiniMax Code](https://www.anchorterminal.com/compare/kilo-code-cli-vs-minimax-code.md)\n- [Kilo Code CLI vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/kilo-code-cli-vs-mistral-vibe-cli.md)\n- [Kilo Code CLI vs Muse Code](https://www.anchorterminal.com/compare/kilo-code-cli-vs-muse-code.md)\n- [Kilo Code CLI vs OpenAI Agents API](https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-agents-api.md)\n- [Kilo Code CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/kilo-code-cli-vs-openai-codex.md)\n- [Kilo Code CLI vs OpenCode](https://www.anchorterminal.com/compare/kilo-code-cli-vs-opencode.md)\n- [Kilo Code CLI vs OpenHands](https://www.anchorterminal.com/compare/kilo-code-cli-vs-openhands.md)\n- [Kilo Code CLI vs OpenMausBot](https://www.anchorterminal.com/compare/kilo-code-cli-vs-openmausbot.md)\n- [Kilo Code CLI vs Orca](https://www.anchorterminal.com/compare/kilo-code-cli-vs-orca.md)\n- [Kilo Code CLI vs Prime Agent](https://www.anchorterminal.com/compare/kilo-code-cli-vs-prime-agent.md)\n- [Kilo Code CLI vs Qoder CLI](https://www.anchorterminal.com/compare/kilo-code-cli-vs-qoder-cli.md)\n- [Kilo Code CLI vs Qwen Code](https://www.anchorterminal.com/compare/kilo-code-cli-vs-qwen-code.md)\n- [Kilo Code CLI vs Mirror CLI](https://www.anchorterminal.com/compare/kilo-code-cli-vs-reflection-mirror.md)\n- [Kilo Code CLI vs Rovo Dev CLI](https://www.anchorterminal.com/compare/kilo-code-cli-vs-rovo-dev-cli.md)\n- [Kilo Code CLI vs Sculptor](https://www.anchorterminal.com/compare/kilo-code-cli-vs-sculptor.md)\n- [Kilo Code CLI vs T3 Code](https://www.anchorterminal.com/compare/kilo-code-cli-vs-t3-code.md)\n- [Kilo Code CLI vs Traycer](https://www.anchorterminal.com/compare/kilo-code-cli-vs-traycer.md)\n- [Kilo Code CLI vs Unstoppable](https://www.anchorterminal.com/compare/kilo-code-cli-vs-unstoppable.md)\n- [Kilo Code CLI vs Verdent](https://www.anchorterminal.com/compare/kilo-code-cli-vs-verdent.md)\n- [Kilo Code CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading.md)\n- [Kilo Code CLI vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/kilo-code-cli-vs-warp.md)\n- [Kimi Code CLI vs Paseo](https://www.anchorterminal.com/compare/kimi-code-cli-vs-paseo.md)\n- [Kiro CLI vs Paseo](https://www.anchorterminal.com/compare/kiro-cli-vs-paseo.md)\n- [Letta vs Paseo](https://www.anchorterminal.com/compare/letta-vs-paseo.md)\n- [mini-swe-agent vs Paseo](https://www.anchorterminal.com/compare/mini-swe-agent-vs-paseo.md)\n- [MiniMax Code vs Paseo](https://www.anchorterminal.com/compare/minimax-code-vs-paseo.md)\n- [Mistral Vibe CLI vs Paseo](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-paseo.md)\n- [Muse Code vs Paseo](https://www.anchorterminal.com/compare/muse-code-vs-paseo.md)\n- [OpenAI Agents API vs Paseo](https://www.anchorterminal.com/compare/openai-agents-api-vs-paseo.md)\n- [OpenAI Codex vs Paseo](https://www.anchorterminal.com/compare/openai-codex-vs-paseo.md)\n- [OpenCode vs Paseo](https://www.anchorterminal.com/compare/opencode-vs-paseo.md)\n- [OpenHands vs Paseo](https://www.anchorterminal.com/compare/openhands-vs-paseo.md)\n- [Orca vs Paseo](https://www.anchorterminal.com/compare/orca-vs-paseo.md)\n- [Paseo vs Prime Agent](https://www.anchorterminal.com/compare/paseo-vs-prime-agent.md)\n- [Paseo vs Qoder CLI](https://www.anchorterminal.com/compare/paseo-vs-qoder-cli.md)\n- [Paseo vs Qwen Code](https://www.anchorterminal.com/compare/paseo-vs-qwen-code.md)\n- [Paseo vs Mirror CLI](https://www.anchorterminal.com/compare/paseo-vs-reflection-mirror.md)\n- [Paseo vs Rovo Dev CLI](https://www.anchorterminal.com/compare/paseo-vs-rovo-dev-cli.md)\n- [Paseo vs Sculptor](https://www.anchorterminal.com/compare/paseo-vs-sculptor.md)\n- [Paseo vs T3 Code](https://www.anchorterminal.com/compare/paseo-vs-t3-code.md)\n- [Paseo vs Traycer](https://www.anchorterminal.com/compare/paseo-vs-traycer.md)\n- [Paseo vs Unstoppable](https://www.anchorterminal.com/compare/paseo-vs-unstoppable.md)\n- [Paseo vs Verdent](https://www.anchorterminal.com/compare/paseo-vs-verdent.md)\n- [Paseo vs Vibe-Trading](https://www.anchorterminal.com/compare/paseo-vs-vibe-trading.md)\n- [Paseo vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/paseo-vs-warp.md)\n- [Clawboo vs Kilo Code CLI](https://www.anchorterminal.com/compare/clawboo-vs-kilo-code-cli.md)\n- [Clawboo vs Paseo](https://www.anchorterminal.com/compare/clawboo-vs-paseo.md)\n- [CLI Manager vs Kilo Code CLI](https://www.anchorterminal.com/compare/cli-manager-vs-kilo-code-cli.md)\n- [CLI Manager vs Paseo](https://www.anchorterminal.com/compare/cli-manager-vs-paseo.md)\n- [Harness vs Kilo Code CLI](https://www.anchorterminal.com/compare/harness-autonomous-vs-kilo-code-cli.md)\n- [Harness vs Paseo](https://www.anchorterminal.com/compare/harness-autonomous-vs-paseo.md)\n- [Kilo Code CLI vs Paperclip](https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip.md)\n- [Kilo Code CLI vs Parallax](https://www.anchorterminal.com/compare/kilo-code-cli-vs-parallax-agents.md)\n- [OpenMausBot vs Paseo](https://www.anchorterminal.com/compare/openmausbot-vs-paseo.md)\n- [Paperclip vs Paseo](https://www.anchorterminal.com/compare/paperclip-vs-paseo.md)\n- [Parallax vs Paseo](https://www.anchorterminal.com/compare/parallax-agents-vs-paseo.md)\n",
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "attributionRequired": true,
    "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-11-07",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.7",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run",
    "terms": "https://www.anchorterminal.com/terms/#data"
  },
  "page": {
    "breadcrumbs": [
      {
        "name": "Home",
        "url": "https://www.anchorterminal.com/"
      },
      {
        "name": "Compare",
        "url": "https://www.anchorterminal.com/compare/"
      },
      {
        "name": "Kilo Code CLI vs Paseo",
        "url": ""
      }
    ],
    "description": "Kilo Code CLI scores 68 (B) to Paseo's 62.1 (B) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.",
    "facts": [
      "Kilo Code CLI B 68",
      "Paseo B 62.1",
      "scores"
    ],
    "h1": "Kilo Code CLI vs Paseo",
    "image": "https://www.anchorterminal.com/assets/og/default.png",
    "path": "/compare/kilo-code-cli-vs-paseo",
    "published": "2026-10-01",
    "section": "tools",
    "title": "Kilo Code CLI vs Paseo for AI agents in 2026: scores and prices",
    "toc": null,
    "updated": "2026-11-07",
    "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-paseo"
  },
  "tokens": {
    "markdown": 6350,
    "slim": 2730
  },
  "version": 1
}
