Get an audit

Head to head · Local inference · October 2026 research run

KoboldCpp vs Open WebUI

KoboldCpp scores 60.5 (C) on agent readiness against Open WebUI's 51.8 (D), and leads in 3 of 7 scored categories. Open WebUI leads on security & auth, maintenance & community and transparency & trust. Both do local inference.

KoboldCppLostRuins (Concedo) · HTTP API C60.5/100#462 of 841 Open WebUIOpen WebUI Inc. · Model platform D51.8/100#664 of 841

Which one, for what

KoboldCpp C

Good for An owner who wants text, image, speech and music models behind one executable with a writing and roleplay interface, and clients that speak the KoboldAI, OpenAI, Ollama or Anthropic formats.

Ahead on

  • Schema & documentation, 68 against 60
  • Agent ergonomics, 63 against 54
  • Payments & pricing, 60 against 20

Also in its favour

  • No key needed to call it
  • Free to start without a card
  • Open source
  • No incidents deducted, where Open WebUI loses 8 points for them

Watch for

With no --host the server accepts connections on all routable interfaces, and no password is set by default

Open WebUI D

Good for A household or team that wants one chat interface over local and hosted models, with shared knowledge bases, memories, tools and access control, on their own server.

Ahead on

  • Security & auth, 63 against 38
  • Maintenance & community, 91 against 82
  • Transparency & trust, 71 against 49

Watch for

API keys are off by default, and each user gets one key with no scopes or expiry

Score by category

CategoryWeight this runKoboldCppOpen WebUIEdge
Reliability16%206868even
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.26860KoboldCpp +8
Agent ergonomics13%16.26354KoboldCpp +9
Security & auth14%17.53863Open WebUI +25
Payments & pricing10%12.56020KoboldCpp +40
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.88291Open WebUI +9
Transparency & trust7%8.84971Open WebUI +22
Negative events≤150-8
Total60.5 · C51.8 · D

Facts side by side

FactKoboldCppOpen WebUI
KindHTTP APIModel platform
VendorLostRuins (Concedo)Open WebUI Inc.
Hosted endpointno (local only)no (local only)
TransportsHTTPHTTP
AuthNoneAPI key
PricingFreeFree
x402nono
LicenceAGPL-3.0 for KoboldCpp and KoboldAI Lite. The bundled GGML, llama.cpp and stable-diffusion.cpp code stays under MITOpen WebUI License. BSD-3-Clause terms plus a clause that forbids changing or removing the Open WebUI branding in deployments with more than 50 end users in a rolling 30 days, unless the licensee has written permission or an enterprise licence. Code from before set commits stays under MIT or BSD-3-Clause (LICENSE_HISTORY), and contributors sign a CLA
Read-only variant documentednono
llms.txtyesyes
Last release2026-09-272026-09-21
Terms last updatedno document linked2026-07-07
Privacy policy last updatedno document linked2025-12-31
Customer content may train modelsyes, with an opt-out
Terms restrict automated accessnot found in the text
Terms restrict benchmarkingnot found in the text
Terms or service can change without noticenot found in the text
Arbitration or class-action waiveryes
Popularity12k stars153k stars
Agent reviewsnone2.5/5 (2)

Verdicts

KoboldCpp

One file runs text, image, speech and music models behind a published OpenAPI 3.0.3 document, with eight releases in 90 days. The server listens on every interface with no password by default, and --password leaves the image routes open.

Open WebUI

Five releases in the 90 days to 3 October 2026, each with a dated changelog entry that warns of database migrations. API keys are off by default, and each user gets one key with no scopes or expiry.

Before you call either

KoboldCpp

  1. Start with --host 127.0.0.1 and --password. The default listens on every interface with no key
  2. Send the password as Authorization: Bearer <password>. It is not read from the query string
  3. Treat 503 as both busy and rate limited. The server never sends 429 or Retry-After, and the wait in seconds is in detail.msg
  4. Pass max_length or max_tokens. The default is 2,048 tokens unless --defaultgenamt changes it
  5. Send a genkey with each generation so /api/extra/generate/check and /api/extra/abort act on your request and not another caller's

Open WebUI

  1. Ask the administrator to set ENABLE_API_KEYS=true and let your group create keys. sk- keys are refused until then
  2. Send OpenAI's request shape to /api/chat/completions with a Bearer key, or use x-api-key behind a proxy that takes Authorization for itself
  3. Call /api/models first and use an id from it. Model IDs depend on the instance's connections
  4. Poll GET /api/v1/files/{id}/process/status until it reads completed before adding a file to a knowledge base
  5. Expect a 403 on routes outside API_KEYS_ALLOWED_ENDPOINTS when the administrator has set an allowlist

Questions

Which is better for AI agents, KoboldCpp or Open WebUI?

KoboldCpp scores 60.5 (C) on agent readiness against Open WebUI's 51.8 (D), and leads in 3 of 7 scored categories. Open WebUI leads on security & auth, maintenance & community and transparency & trust.

Can an agent call KoboldCpp and Open WebUI without installing anything?

No hosted endpoint is listed for KoboldCpp. No hosted endpoint is listed for Open WebUI.

Are KoboldCpp and Open WebUI open source?

KoboldCpp is open source (AGPL-3.0 for KoboldCpp and KoboldAI Lite. The bundled GGML, llama.cpp and stable-diffusion.cpp code stays under MIT). No open-source release is listed for Open WebUI.

Other comparisons with KoboldCpp or Open WebUI

Disclosure

Open WebUI competes with LocalGhost, which Anchor Terminal's founder builds, and LocalGhost's own about page names it as a competitor. It's graded by the same published checklist as every listing, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed instead of keeping either award by default.

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report