{ "data": { "a": { "slug": "kiro-cli", "name": "Kiro CLI", "vendor": "Amazon Web Services", "vendorUrl": "https://kiro.dev/cli/", "kind": "harness", "category": "agent-harnesses", "summary": "AWS's coding agent for the terminal and the successor to the Amazon Q Developer CLI. It runs interactive chat, non-interactive runs for pipelines with an API key, MCP servers and an Agent Client Protocol server for editors.", "url": "https://www.anchorterminal.com/tools/kiro-cli", "markdownUrl": "https://www.anchorterminal.com/tools/kiro-cli.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/kiro-cli.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/kiro-cli.json", "repo": "https://github.com/kirodotdev/Kiro", "license": "Proprietary. Licensed as AWS Content under the AWS Customer Agreement and the AWS Intellectual Property Licence (https://kiro.dev/license/). The GitHub repository is the public issue tracker and doesn't hold the source", "transports": [], "packages": [], "auth": "mixed", "authNotes": "`kiro-cli login` with GitHub, Google, AWS Builder ID, AWS IAM Identity Centre or an external identity provider, in a browser or by device flow on a remote machine. Pipelines use an API key in `KIRO_API_KEY`, created at app.kiro.dev by Pro, Pro+, Pro Max and Power subscribers. Keys are long-lived, named and revocable, with no scopes, and API key generation is off by default for subscriptions an administrator manages. An active browser session takes precedence over the key.", "pricing": "freemium", "pricingNotes": "Kiro Free is $0 with 50 credits a month and a reduced model list. Pro is $20 a user a month with 1,000 credits, Pro+ $40 with 2,000, Pro Max $100 with 5,000 and Power $200 with 10,000, and extra credits cost $0.04 each. Models use credits at different rates (Auto is the 1.0x baseline). API keys for headless runs need a paid plan, and a paid plan needs a card. GovCloud prices are about 20 per cent higher with no free tier (checked 2026-10-08).", "priceSummary": "$20 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the pricing page or the CLI changelog (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 4356, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://kiro.dev/docs/cli/", "llmsTxt": "https://kiro.dev/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "official", "harness", "coding-agent", "cli", "closed-source", "mcp", "acp", "llms-txt", "free-tier", "no-card", "telemetry-default-on" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 59.9, "grade": "C", "agentReady": false, "rank": 370, "ranked": true, "rankOf": 629, "categoryRank": 11, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 73, "payments": 40, "reliability": 57, "schema": 79, "security": 66, "transparency": 67 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -4, "negativeNotes": [ "2026-08-04. CVE-2026-18656 and CVE-2026-18657 (bulletin 2026-074-AWS), an uncontrolled search path on Windows let a planted executable in a crafted project directory run when a user opened it. Kiro CLI for Windows before 2.10.0 and Kiro IDE 1.0.0 to 1.0.212. Fixed and published with credit to the reporters, inside six months (https://aws.amazon.com/security/security-bulletins/2026-074-aws/). -2", "2026-05-22. CVE-2026-9255 (bulletin 2026-035-AWS), content piped to kiro-cli on stdin could answer the tool approval prompt, so a local actor could run tools and shell commands without the user's approval. kiro-cli before 1.28.0. Fixed and published, inside six months (https://aws.amazon.com/security/security-bulletins/2026-035-aws/). -2" ], "verdict": "Permission rules follow deny over ask over allow, cloned repositories can't add rules, and a headless session treats every ask as a deny. Content from Free and individual paid accounts is used for service improvement, including model training, unless the user opts out, and API keys for pipelines need a paid plan.", "bestFor": "Teams on AWS that want one agent configuration across terminal, IDE and web, with central permission policy, prompt logging to their own S3 bucket and IAM Identity Centre sign-in.", "strengths": [ "Capability permissions with deny over ask over allow, stored outside the repository so a clone can't add rules", "An untrusted workspace doesn't load its own agents, steering files, MCP configuration or skills, and asks before every shell command", "Headless runs with `--no-interactive`, JSON Lines output, and exit codes 3 and 4 for MCP startup and missing-agent failures", "Eleven minor releases between 26 August and 5 October 2026 in a dated changelog", "Plan prices, the $0.04 credit price and per-model credit multipliers are public, with a free tier of 50 credits a month" ], "weaknesses": [ "Free and individual paid accounts have content used for service improvement, including model training, unless they opt out", "Closed source since it replaced the Apache 2.0 Amazon Q Developer CLI, with no public CI or test suite", "API keys for headless runs need a paid plan, are long-lived and carry no scopes", "No local sandbox in the CLI, and AWS says its managed permission policies are client-enforced and can be circumvented", "Two CVEs in 2026 (CVE-2026-9255 in May, CVE-2026-18656 and CVE-2026-18657 in August), both fixed" ], "agentNotes": [ "Set `KIRO_API_KEY` and pass `--no-interactive` with `--trust-tools=\u003clist\u003e` in pipelines. Keep `--trust-all-tools` for disposable environments", "Pass `--require-mcp-startup` when a run depends on MCP tools. Without it a failed server is logged and the run continues", "Pass `--no-interactive` whenever input is piped from a source you don't control, and run 2.10.0 or later on Windows", "Run `kiro-cli settings telemetry.enabled false` and turn off content collection on Free and individual plans. Both are on by default", "Export variables in the shell before starting. Since 2.24.0 a project `.env` file is no longer loaded into sessions, MCP servers or tools" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59.9 } ], "editorialScores": { "ergonomics": 67, "maintenance": 73, "payments": 40, "reliability": 57, "schema": 79, "security": 66, "transparency": 62 }, "provenanceScore": 72 }, "connect": { "install": "curl -fsSL https://cli.kiro.dev/install | bash", "headless": { "run": "KIRO_API_KEY=ksk_... kiro-cli chat --no-interactive --trust-tools=read,grep \"Find all TODO comments in src/\"" } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/kiro-cli" }, "area": "frameworks", "unitPrices": [ { "item": "Kiro Pro", "unit": "month", "usd": 20, "note": "per user, with 1,000 credits" }, { "item": "Add-on credit", "unit": "credit", "usd": 0.04, "note": "paid plans, beyond the plan's credits" } ], "provenance": { "legalEntity": "Amazon Web Services, Inc.", "domain": "kiro.dev", "domainRegistered": "2019-03-01", "endpointOnVendorDomain": null, "terms": "https://aws.amazon.com/agreement/", "privacy": "https://aws.amazon.com/privacy/", "statusPage": "", "changelog": "https://kiro.dev/changelog/cli/", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "Kiro's licence page says the Kiro IDE and CLI are licensed as AWS Content under the AWS Customer Agreement and the AWS Intellectual Property Licence. Section 50.14 of the AWS Service Terms names Amazon Web Services, Inc. as the contracting party for subscriptions bought through the Stripe portal.", "The AWS Customer Agreement (last updated 14 August 2026) governs use, with the AWS Service Terms sections 50.3 and 50.14 for Kiro. The AWS Privacy Notice (last updated 18 May 2026) is the privacy link in Kiro's footer.", "kiro.dev/.well-known/security.txt answers 404. aws.amazon.com publishes a security.txt whose Expires line reads 24 September 2026, which had passed when we read it.", "No status page for Kiro was found on kiro.dev or in its docs.", "RDAP (Google Registry) gives kiro.dev a registration date of 1 March 2019, before the product." ], "score": 72 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/kiro-cli.json", "live": { "slug": "kiro-cli", "pages": [ { "url": "https://kiro.dev/changelog/cli/", "kind": "deprecations", "status": 200, "checkedAt": "2026-10-08T18:21:05.911888808Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "f2b1951f0330" } ], "updatedAt": "2026-10-08T18:21:05.911888808Z" } }, "answer": "OpenHands scores 70.8 (BB) on agent readiness against Kiro CLI's 59.9 (C), and leads in 5 of 7 scored categories.", "b": { "slug": "openhands", "name": "OpenHands", "vendor": "All Hands AI", "vendorUrl": "https://openhands.dev", "kind": "harness", "category": "agent-harnesses", "summary": "Open-source coding agent with a self-hosted web interface, local and remote execution, and scheduled or webhook-driven automation.", "url": "https://www.anchorterminal.com/tools/openhands", "markdownUrl": "https://www.anchorterminal.com/tools/openhands.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/openhands.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/openhands.json", "repo": "https://github.com/OpenHands/OpenHands", "license": "MIT (Agent Canvas, SDK, tools and Agent Server). OpenHands Cloud is a hosted service", "transports": [], "packages": [ { "registry": "npm", "name": "@openhands/agent-canvas" }, { "registry": "pypi", "name": "openhands-sdk" }, { "registry": "pypi", "name": "openhands-agent-server" }, { "registry": "oci", "name": "ghcr.io/openhands/agent-canvas" } ], "auth": "mixed", "authNotes": "Local installs bind to 127.0.0.1 and inject a session key into the page. Public mode (`--public`) needs `LOCAL_BACKEND_API_KEY`, sent as `X-Session-API-Key` on every API call. Model credentials are your own provider keys or an OpenHands LLM key, and OpenHands Cloud has its own sign-in and API keys.", "pricing": "freemium", "pricingNotes": "Agent Canvas, the SDK and the Agent Server are free and MIT. OpenHands Cloud has a free Individual plan of 10 conversations a day with your own model key or the OpenHands LLM provider, which the docs say bills model calls at provider rates with no markup. Enterprise (SaaS, or self-hosted in your VPC) is priced by sales.", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the pricing page or the source (checked 2026-10-01).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 89800, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-01" }, "docsUrl": "https://docs.openhands.dev", "llmsTxt": "https://docs.openhands.dev/llms.txt", "openapi": "https://raw.githubusercontent.com/OpenHands/docs/main/openapi/agent-sdk.json", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "open-source", "local", "self-hosted", "hosted", "freemium", "python", "typescript", "docker", "openapi", "llms-txt", "telemetry-default-on", "beta" ], "lastRelease": "2026-09-30", "graded": true, "anchor": { "graded": true, "score": 70.8, "grade": "BB", "agentReady": true, "rank": 120, "ranked": true, "rankOf": 629, "categoryRank": 5, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 78, "maintenance": 85, "payments": 60, "reliability": 83, "schema": 87, "security": 66, "transparency": 67 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": -5, "negativeNotes": [ "Current behaviour, checked 2026-10-02. Agent Canvas sends a `canvas_install` event with platform, user agent, referrer and origin to PostHog through OpenHands' proxy at z.openhands.dev on first use, before the consent prompt, opting the client in for that one event. The source comment says the proxy is there to get past ad blockers, the consent prompt's box is ticked by default, and no user-facing doc mentions the early event. Undisclosed telemetry, -3. https://github.com/OpenHands/OpenHands/blob/main/src/services/telemetry.ts", "2026-03-23. GHSA-7h8w-hj9j-8rjw (CVE-2026-33718, 7.6 in the advisory, 9.9 at NVD), command injection through the `path` parameter of the git diff endpoint let an authenticated user run commands in the agent sandbox. Fixed in 1.5.0 and published, a little over six months old, -1. https://github.com/OpenHands/OpenHands/security/advisories/GHSA-7h8w-hj9j-8rjw", "2026-08-06. CVE-2026-19022 (6.3), command injection in `initialize_repo` in the pull request resolver of OpenHands 0.62.0 and earlier, the V0 line the V1 rewrite replaced. No GitHub advisory found, -1. https://nvd.nist.gov/vuln/detail/CVE-2026-19022" ], "verdict": "A Docker container per conversation with `OH_CONVERSATION_RUNTIME=docker`, each with its own Agent Server. Confirmation mode is off by default in Agent Canvas, and the npm install gives the agent the host's whole filesystem.", "bestFor": "Teams that want to self-host a coding agent with a web UI, per-conversation Docker sandboxes and scheduled or webhook automations, or embed the agent through a Python SDK and REST API.", "strengths": [ "A Docker container per conversation with `OH_CONVERSATION_RUNTIME=docker`, each with its own Agent Server", "Typed Python SDK and an Agent Server REST API with an OpenAPI 3.1 spec, plus a TypeScript client", "Confirmation policies (always, never, at or above a risk level) with LLM, Invariant and GraySwan risk analysers", "Any model through LiteLLM, local ones included, and MCP over stdio, SSE and streamable HTTP with OAuth", "21 Agent Canvas releases between 24 July and 25 September 2026, with CI passing on main" ], "weaknesses": [ "Confirmation mode is off by default in Agent Canvas, and the npm install gives the agent the host's whole filesystem", "One anonymous install event goes to PostHog before the consent prompt, whose opt-in box is pre-ticked", "The terminal CLI has been unmaintained since 11 August 2026 and the Docker-based local GUI is deprecated, yet both fill much of the docs", "Agent Canvas carries a beta badge, and its CHANGELOG.md stops at 1.0.0-alpha.2", "The privacy policy (3 September 2025) allows training on Cloud content and gives no retention period" ], "agentNotes": [ "Set `AGENT_CANVAS_DISABLE_TELEMETRY=1` and `DO_NOT_TRACK=1` before the first start", "Start Canvas with `OH_CONVERSATION_RUNTIME=docker` or use the Docker image. The npm install runs the agent on the host", "Turn on confirmation mode with a risk threshold. Canvas starts with it off", "Use the SDK or the Agent Server API for headless runs. The `openhands --headless` CLI is no longer maintained", "Set `filter_tools_regex` on the agent to keep unneeded MCP tool definitions out of the context" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 70.8 } ], "editorialScores": { "ergonomics": 78, "maintenance": 85, "payments": 60, "reliability": 83, "schema": 87, "security": 66, "transparency": 67 }, "provenanceScore": 66 }, "connect": { "install": "npm install -g @openhands/agent-canvas # Node 24+ and uv; or: pip install openhands-sdk openhands-tools", "headless": { "env": { "DO_NOT_TRACK": "1", "LLM_API_KEY": "\u003ckey\u003e", "LLM_MODEL": "\u003cprovider/model\u003e" }, "sdk": "pip install openhands-sdk openhands-tools", "server": "OH_CONVERSATION_RUNTIME=docker AGENT_CANVAS_DISABLE_TELEMETRY=1 agent-canvas --backend-only" } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/openhands" }, "area": "frameworks", "provenance": { "legalEntity": "All Hands AI", "domain": "openhands.dev", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "https://openhands.dev/privacy", "statusPage": "", "changelog": "https://github.com/OpenHands/OpenHands/releases", "securityTxt": "valid", "checked": "2026-10-01", "notes": [ "The privacy policy (effective 3 September 2025) names All Hands AI, 24 Oak Street, Unit 2, Cambridge, MA 02139. We found no terms of service link on the pricing or privacy pages.", "openhands.dev/.well-known/security.txt lists security@openhands.dev and a responsible-disclosure policy, and expires on 2026-10-28.", "The SDK's LLM proxy still runs on llm-proxy.app.all-hands.dev, the company's older domain.", "We didn't check for a status page or the domain's registration date." ], "score": 66 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/openhands.json", "live": { "slug": "openhands", "versions": [ { "registry": "github", "name": "OpenHands/OpenHands", "version": "v1.25.0", "released": "2026-10-06", "seenAt": "2026-10-08T16:24:11.333688688Z" }, { "registry": "npm", "name": "@openhands/agent-canvas", "version": "1.25.0", "seenAt": "2026-10-08T16:24:08.391240484Z" }, { "registry": "pypi", "name": "openhands-agent-server", "version": "1.53.0", "released": "2026-10-05", "seenAt": "2026-10-08T16:24:09.446438548Z" }, { "registry": "pypi", "name": "openhands-sdk", "version": "1.53.0", "released": "2026-10-05", "seenAt": "2026-10-08T16:24:09.248506175Z" } ], "githubStars": 90281, "npmWeekly": 3432, "pypiWeekly": 1579833, "securityTxt": { "url": "https://openhands.dev/.well-known/security.txt", "state": "valid", "expires": "2026-10-28T17:00:00.000Z", "checkedAt": "2026-10-08T15:38:58.056526129Z" }, "llmsTxt": { "url": "https://docs.openhands.dev/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-08T14:00:43.374166906Z" }, "domain": { "domain": "openhands.dev", "registered": "2025-07-23", "source": "https://pubapi.registry.google/rdap/domain/openhands.dev", "checkedAt": "2026-10-04T13:04:38.037291667Z" }, "pages": [ { "url": "https://openhands.dev/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:22:37.29100302Z", "changedAt": "2026-10-08T18:22:37.29100302Z", "fingerprint": "9b8b8341d3b4" } ], "updatedAt": "2026-10-08T18:22:37.29100302Z" } }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Amazon Web Services", "b": "All Hands AI", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary. Licensed as AWS Content under the AWS Customer Agreement and the AWS Intellectual Property Licence (https://kiro.dev/license/). The GitHub repository is the public issue tracker and doesn't hold the source", "b": "MIT (Agent Canvas, SDK, tools and Agent Server). OpenHands Cloud is a hosted service", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-05", "b": "2026-09-30", "name": "Last release" }, { "a": "2026-08-14", "b": "no document linked", "name": "Terms last updated" }, { "a": "2026-05-18", "b": "2025-09-03", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "yes", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "4.4k stars", "b": "90k stars", "name": "Popularity" }, { "a": "none", "b": "2.5/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "OpenHands scores 70.8 (BB) on agent readiness against Kiro CLI's 59.9 (C), and leads in 5 of 7 scored categories.", "question": "Which is better for AI agents, Kiro CLI or OpenHands?" }, { "answer": "No open-source release is listed for Kiro CLI. OpenHands is open source (MIT (Agent Canvas, SDK, tools and Agent Server). OpenHands Cloud is a hosted service).", "question": "Are Kiro CLI and OpenHands open source?" } ], "goodFor": [ { "aheadOn": null, "also": [ "Free to start without a card" ], "goodFor": "Teams on AWS that want one agent configuration across terminal, IDE and web, with central permission policy, prompt logging to their own S3 bucket and IAM Identity Centre sign-in.", "slug": "kiro-cli", "watchFor": "Free and individual paid accounts have content used for service improvement, including model training, unless they opt out" }, { "aheadOn": [ "Reliability, 83 against 57", "Schema \u0026 documentation, 87 against 79", "Agent ergonomics, 78 against 67", "Payments \u0026 pricing, 60 against 40", "Maintenance \u0026 community, 85 against 73" ], "also": [ "Agent-ready, a grade of BB or better", "Open source" ], "goodFor": "Teams that want to self-host a coding agent with a web UI, per-conversation Docker sandboxes and scheduled or webhook automations, or embed the agent through a Python SDK and REST API.", "slug": "openhands", "watchFor": "Confirmation mode is off by default in Agent Canvas, and the npm install gives the agent the host's whole filesystem" } ], "job": { "capability": "agent.harness", "name": "Agent harness" }, "others": [ { "json": "https://www.anchorterminal.com/compare/aider-vs-kiro-cli.json", "title": "Aider vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/aider-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-openhands.json", "title": "Aider vs OpenHands", "url": "https://www.anchorterminal.com/compare/aider-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-kiro-cli.json", "title": "Amp vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/amp-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-openhands.json", "title": "Amp vs OpenHands", "url": "https://www.anchorterminal.com/compare/amp-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-kiro-cli.json", "title": "Claude Code vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-openhands.json", "title": "Claude Code vs OpenHands", "url": "https://www.anchorterminal.com/compare/claude-code-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-kiro-cli.json", "title": "Cline vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/cline-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-openhands.json", "title": "Cline vs OpenHands", "url": "https://www.anchorterminal.com/compare/cline-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-kiro-cli.json", "title": "Cursor CLI vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-openhands.json", "title": "Cursor CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-kiro-cli.json", "title": "Devin vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/devin-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-openhands.json", "title": "Devin vs OpenHands", "url": "https://www.anchorterminal.com/compare/devin-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-kiro-cli.json", "title": "Pi vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-openhands.json", "title": "Pi vs OpenHands", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-kiro-cli.json", "title": "Gemini CLI vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-openhands.json", "title": "Gemini CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-kiro-cli.json", "title": "GitHub Copilot CLI vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-openhands.json", "title": "GitHub Copilot CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-kiro-cli.json", "title": "goose vs Kiro CLI", "url": "https://www.anchorterminal.com/compare/goose-vs-kiro-cli" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-openhands.json", "title": "goose vs OpenHands", "url": "https://www.anchorterminal.com/compare/goose-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-openai-codex.json", "title": "Kiro CLI vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-opencode.json", "title": "Kiro CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-prime-agent.json", "title": "Kiro CLI vs Prime Agent", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-qwen-code.json", "title": "Kiro CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-openhands.json", "title": "OpenAI Codex vs OpenHands", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-openhands.json", "title": "OpenCode vs OpenHands", "url": "https://www.anchorterminal.com/compare/opencode-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-prime-agent.json", "title": "OpenHands vs Prime Agent", "url": "https://www.anchorterminal.com/compare/openhands-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-qwen-code.json", "title": "OpenHands vs Qwen Code", "url": "https://www.anchorterminal.com/compare/openhands-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-paperclip.json", "title": "Kiro CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-paperclip.json", "title": "OpenHands vs Paperclip", "url": "https://www.anchorterminal.com/compare/openhands-vs-paperclip" } ], "scores": [ { "by": 26, "edge": "openhands", "key": "reliability", "kiro-cli": 57, "name": "Reliability", "openhands": 83, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 8, "edge": "openhands", "key": "schema", "kiro-cli": 79, "name": "Schema \u0026 documentation", "openhands": 87, "weight": 13 }, { "by": 11, "edge": "openhands", "key": "ergonomics", "kiro-cli": 67, "name": "Agent ergonomics", "openhands": 78, "weight": 13 }, { "by": 0, "edge": "", "key": "security", "kiro-cli": 66, "name": "Security \u0026 auth", "openhands": 66, "weight": 14 }, { "by": 20, "edge": "openhands", "key": "payments", "kiro-cli": 40, "name": "Payments \u0026 pricing", "openhands": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 12, "edge": "openhands", "key": "maintenance", "kiro-cli": 73, "name": "Maintenance \u0026 community", "openhands": 85, "weight": 7 }, { "by": 0, "edge": "", "key": "transparency", "kiro-cli": 67, "name": "Transparency \u0026 trust", "openhands": 67, "weight": 7 } ], "summary": "OpenHands scores 70.8 (BB) on agent readiness against Kiro CLI's 59.9 (C), and leads in 5 of 7 scored categories. Both do agent harness.", "verdicts": { "kiro-cli": "Permission rules follow deny over ask over allow, cloned repositories can't add rules, and a headless session treats every ask as a deny. Content from Free and individual paid accounts is used for service improvement, including model training, unless the user opts out, and API keys for pipelines need a paid plan.", "openhands": "A Docker container per conversation with `OH_CONVERSATION_RUNTIME=docker`, each with its own Agent Server. Confirmation mode is off by default in Agent Canvas, and the npm install gives the agent the host's whole filesystem." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/kiro-cli-vs-openhands", "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-openhands.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/kiro-cli-vs-openhands.md", "slim": "https://www.anchorterminal.com/compare/kiro-cli-vs-openhands.min.md" }, "markdown": "OpenHands scores 70.8 (BB) on agent readiness against Kiro CLI's 59.9 (C), and leads in 5 of 7 scored categories. Both do agent harness.\n\n- Kiro CLI: grade C, 59.9/100, rank #370 of 629. Markdown https://www.anchorterminal.com/tools/kiro-cli.md · JSON https://www.anchorterminal.com/api/v1/tools/kiro-cli.json\n- OpenHands: grade BB, 70.8/100, rank #120 of 629. Markdown https://www.anchorterminal.com/tools/openhands.md · JSON https://www.anchorterminal.com/api/v1/tools/openhands.json\n\n## Which one, for what\n\n### Kiro CLI (C)\n\nGood for: Teams on AWS that want one agent configuration across terminal, IDE and web, with central permission policy, prompt logging to their own S3 bucket and IAM Identity Centre sign-in.\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: Free and individual paid accounts have content used for service improvement, including model training, unless they opt out\n\n### OpenHands (BB)\n\nGood for: Teams that want to self-host a coding agent with a web UI, per-conversation Docker sandboxes and scheduled or webhook automations, or embed the agent through a Python SDK and REST API.\n\nAhead on:\n- Reliability, 83 against 57\n- Schema \u0026 documentation, 87 against 79\n- Agent ergonomics, 78 against 67\n- Payments \u0026 pricing, 60 against 40\n- Maintenance \u0026 community, 85 against 73\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- Open source\n\nWatch for: Confirmation mode is off by default in Agent Canvas, and the npm install gives the agent the host's whole filesystem\n\n\n## Score by category\n\n| Category | Weight | Kiro CLI | OpenHands | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 57 | 83 | OpenHands +26 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 79 | 87 | OpenHands +8 |\n| Agent ergonomics | 13% (16.2 this run) | 67 | 78 | OpenHands +11 |\n| Security \u0026 auth | 14% (17.5 this run) | 66 | 66 | even |\n| Payments \u0026 pricing | 10% (12.5 this run) | 40 | 60 | OpenHands +20 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 73 | 85 | OpenHands +12 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 67 | 67 | even |\n| Negative events | ≤15 | -4 | -5 | |\n| **Total** | | **59.9 · C** | **70.8 · BB** | |\n\n## Facts side by side\n\n| Fact | Kiro CLI | OpenHands |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Amazon Web Services | All Hands AI |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | Proprietary. Licensed as AWS Content under the AWS Customer Agreement and the AWS Intellectual Property Licence (https://kiro.dev/license/). The GitHub repository is the public issue tracker and doesn't hold the source | MIT (Agent Canvas, SDK, tools and Agent Server). OpenHands Cloud is a hosted service |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-05 | 2026-09-30 |\n| Terms last updated | 2026-08-14 | no document linked |\n| Privacy policy last updated | 2026-05-18 | 2025-09-03 |\n| Customer content may train models | not found in the text | yes |\n| Terms restrict automated access | not found in the text | |\n| Terms restrict benchmarking | not found in the text | |\n| Terms or service can change without notice | not found in the text | |\n| Arbitration or class-action waiver | yes | |\n| Popularity | 4.4k stars | 90k stars |\n| Agent reviews | none | 2.5/5 (2) |\n\n## Verdicts\n\n**Kiro CLI.** Permission rules follow deny over ask over allow, cloned repositories can't add rules, and a headless session treats every ask as a deny. Content from Free and individual paid accounts is used for service improvement, including model training, unless the user opts out, and API keys for pipelines need a paid plan.\n\n**OpenHands.** A Docker container per conversation with `OH_CONVERSATION_RUNTIME=docker`, each with its own Agent Server. Confirmation mode is off by default in Agent Canvas, and the npm install gives the agent the host's whole filesystem.\n\n## Before you call either\n\n### Kiro CLI\n\n1. Set `KIRO_API_KEY` and pass `--no-interactive` with `--trust-tools=\u003clist\u003e` in pipelines. Keep `--trust-all-tools` for disposable environments\n2. Pass `--require-mcp-startup` when a run depends on MCP tools. Without it a failed server is logged and the run continues\n3. Pass `--no-interactive` whenever input is piped from a source you don't control, and run 2.10.0 or later on Windows\n4. Run `kiro-cli settings telemetry.enabled false` and turn off content collection on Free and individual plans. Both are on by default\n5. Export variables in the shell before starting. Since 2.24.0 a project `.env` file is no longer loaded into sessions, MCP servers or tools\n\n### OpenHands\n\n1. Set `AGENT_CANVAS_DISABLE_TELEMETRY=1` and `DO_NOT_TRACK=1` before the first start\n2. Start Canvas with `OH_CONVERSATION_RUNTIME=docker` or use the Docker image. The npm install runs the agent on the host\n3. Turn on confirmation mode with a risk threshold. Canvas starts with it off\n4. Use the SDK or the Agent Server API for headless runs. The `openhands --headless` CLI is no longer maintained\n5. Set `filter_tools_regex` on the agent to keep unneeded MCP tool definitions out of the context\n\n## Questions\n\n### Which is better for AI agents, Kiro CLI or OpenHands?\n\nOpenHands scores 70.8 (BB) on agent readiness against Kiro CLI's 59.9 (C), and leads in 5 of 7 scored categories.\n\n### Are Kiro CLI and OpenHands open source?\n\nNo open-source release is listed for Kiro CLI. OpenHands is open source (MIT (Agent Canvas, SDK, tools and Agent Server). OpenHands Cloud is a hosted service).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/kiro-cli-vs-openhands.json, and with the fewest tokens: https://www.anchorterminal.com/compare/kiro-cli-vs-openhands.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"kiro-cli\", \"b\": \"openhands\"}`. From a terminal: `anchor compare kiro-cli openhands`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/kiro-cli.json and https://www.anchorterminal.com/api/v1/tools/openhands.json\n\n## Other comparisons with Kiro CLI or OpenHands\n\n- [Aider vs Kiro CLI](https://www.anchorterminal.com/compare/aider-vs-kiro-cli.md)\n- [Aider vs OpenHands](https://www.anchorterminal.com/compare/aider-vs-openhands.md)\n- [Amp vs Kiro CLI](https://www.anchorterminal.com/compare/amp-vs-kiro-cli.md)\n- [Amp vs OpenHands](https://www.anchorterminal.com/compare/amp-vs-openhands.md)\n- [Claude Code vs Kiro CLI](https://www.anchorterminal.com/compare/claude-code-vs-kiro-cli.md)\n- [Claude Code vs OpenHands](https://www.anchorterminal.com/compare/claude-code-vs-openhands.md)\n- [Cline vs Kiro CLI](https://www.anchorterminal.com/compare/cline-vs-kiro-cli.md)\n- [Cline vs OpenHands](https://www.anchorterminal.com/compare/cline-vs-openhands.md)\n- [Cursor CLI vs Kiro CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-kiro-cli.md)\n- [Cursor CLI vs OpenHands](https://www.anchorterminal.com/compare/cursor-cli-vs-openhands.md)\n- [Devin vs Kiro CLI](https://www.anchorterminal.com/compare/devin-vs-kiro-cli.md)\n- [Devin vs OpenHands](https://www.anchorterminal.com/compare/devin-vs-openhands.md)\n- [Pi vs Kiro CLI](https://www.anchorterminal.com/compare/earendil-pi-vs-kiro-cli.md)\n- [Pi vs OpenHands](https://www.anchorterminal.com/compare/earendil-pi-vs-openhands.md)\n- [Gemini CLI vs Kiro CLI](https://www.anchorterminal.com/compare/gemini-cli-vs-kiro-cli.md)\n- [Gemini CLI vs OpenHands](https://www.anchorterminal.com/compare/gemini-cli-vs-openhands.md)\n- [GitHub Copilot CLI vs Kiro CLI](https://www.anchorterminal.com/compare/github-copilot-cli-vs-kiro-cli.md)\n- [GitHub Copilot CLI vs OpenHands](https://www.anchorterminal.com/compare/github-copilot-cli-vs-openhands.md)\n- [goose vs Kiro CLI](https://www.anchorterminal.com/compare/goose-vs-kiro-cli.md)\n- [goose vs OpenHands](https://www.anchorterminal.com/compare/goose-vs-openhands.md)\n- [Kiro CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/kiro-cli-vs-openai-codex.md)\n- [Kiro CLI vs OpenCode](https://www.anchorterminal.com/compare/kiro-cli-vs-opencode.md)\n- [Kiro CLI vs Prime Agent](https://www.anchorterminal.com/compare/kiro-cli-vs-prime-agent.md)\n- [Kiro CLI vs Qwen Code](https://www.anchorterminal.com/compare/kiro-cli-vs-qwen-code.md)\n- [OpenAI Codex vs OpenHands](https://www.anchorterminal.com/compare/openai-codex-vs-openhands.md)\n- [OpenCode vs OpenHands](https://www.anchorterminal.com/compare/opencode-vs-openhands.md)\n- [OpenHands vs Prime Agent](https://www.anchorterminal.com/compare/openhands-vs-prime-agent.md)\n- [OpenHands vs Qwen Code](https://www.anchorterminal.com/compare/openhands-vs-qwen-code.md)\n- [Kiro CLI vs Paperclip](https://www.anchorterminal.com/compare/kiro-cli-vs-paperclip.md)\n- [OpenHands vs Paperclip](https://www.anchorterminal.com/compare/openhands-vs-paperclip.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Kiro CLI vs OpenHands", "url": "" } ], "description": "OpenHands scores 70.8 (BB) on agent readiness against Kiro CLI's 59.9 (C), and leads in 5 of 7 scored categories. Both do agent harness. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Kiro CLI C 59.9", "OpenHands BB 70.8", "scores" ], "h1": "Kiro CLI vs OpenHands", "image": "https://www.anchorterminal.com/assets/og/compare-kiro-cli-vs-openhands.png", "path": "/compare/kiro-cli-vs-openhands", "published": "2026-10-01", "section": "tools", "title": "Kiro CLI vs OpenHands for AI agents, C 59.9 vs BB 70.8", "toc": null, "updated": "2026-10-08", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-openhands" }, "tokens": { "markdown": 2450, "slim": 730 }, "version": 1 }