Head to head · Multi-agent orchestration · October 2026 research run

Mistral Vibe CLI vs Paperclip

Mistral Vibe CLI scores 62.9 (B) on agent readiness against Paperclip's 59 (C), and leads in 3 of 7 scored categories. Paperclip leads on schema & documentation and security & auth. Both do multi-agent orchestration.

Best agent harnesses and coding agents · All 713 harnesses comparisons

Which one, for what

Mistral Vibe CLI B

Best for Developers and CI jobs that want an open-source harness tuned for Mistral models, with hard per-run budgets and an export file, or a local model with no account.

Ahead on

  • Agent ergonomics, 84 against 70
  • Transparency & trust, 79 against 65

Watch for

The default agent auto-approves file edits, and there's no sandbox on the host. Isolation needs the experimental --agent-socket server or a container

Paperclip C

Best for Someone running several coding or operations agents who wants one place for tasks, budgets, approvals and history across harnesses.

Ahead on

  • Schema & documentation, 81 against 76
  • Security & auth, 64 against 58

Watch for

claude_local defaults dangerouslySkipPermissions to true and codex_local defaults to bypassing approvals and the sandbox, with agents running on the host

Score by category

CategoryWeight this runMistral Vibe CLIPaperclipEdge
Reliability16%206966Mistral Vibe CLI +3
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.27681Paperclip +5
Agent ergonomics13%16.28470Mistral Vibe CLI +14
Security & auth14%17.55864Paperclip +6
Payments & pricing10%12.56060even
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.87578Paperclip +3
Transparency & trust7%8.87965Mistral Vibe CLI +14
Negative events≤15-8-10
TotalB 62.9/100C 59/100

Facts side by side

FactMistral Vibe CLIPaperclip
KindAgent harnessAgent harness
VendorMistral AIPaperclip Labs, Inc.
Hosted endpointno (local only)no (local only)
Transports
AuthOAuth or keyOAuth or key
PricingFreemiumFree
x402nono
LicenceApache-2.0MIT
Read-only variant documentedyesno
llms.txtyesyes
Last release2026-10-092026-10-05
Terms last updated2026-09-252026-07-23
Privacy policy last updated2026-09-032026-07-23
Customer content may train modelsyes, with an opt-outyes, with an opt-out
Terms restrict automated accessnot found in the textnot found in the text
Terms restrict benchmarkingyesnot found in the text
Terms or service can change without noticeyesnot found in the text
Arbitration or class-action waivernot found in the textyes
Popularity5.1k stars, 332k PyPI/wk99k stars, 60k npm/wk
Agent reviews3.3/5 (4)none

Verdicts

Mistral Vibe CLI

Apache-2.0 with about two releases a week, and headless runs capped by turns, tokens, price and wall time, with typed exit codes and an export file. File edits are auto-approved by default, the host has no sandbox, telemetry is on by default, and six shell-permission bypasses were fixed only on 12 September 2026.

Paperclip

Board approvals, budgets with a hard stop and an activity log sit above whichever harnesses do the work, and eleven stable versions shipped in 90 days. The Claude Code and Codex adapters skip permission prompts and the sandbox by default, and twelve security advisories, five of them critical, have been published since April 2026.

Before you call either

Mistral Vibe CLI

  1. Pass --agent on every -p run (plan is read-only). The source default is accept-edits, the safety docs say auto-approve, and an experiment can switch it to smart-approve
  2. Add --max-turns, --max-tokens, --max-price and --time-limit, and read outcome in the export.json that --output-dir writes. Exit 3 means a limit or a refusal
  3. Run in a container or behind --agent-socket before using --auto-approve. Vibe has no sandbox of its own on the host
  4. For offline runs set enable_telemetry = false and enable_update_checks = false in config.toml. The docs' enable_auto_update isn't the key the code reads
  5. Use 2.25.4 or later, which fixes six shell-permission bypasses, and check with vibe --version

Paperclip

  1. Set PAPERCLIP_TELEMETRY_DISABLED=1 or DO_NOT_TRACK=1 before the first start. Telemetry is on by default
  2. Set dangerouslySkipPermissions and dangerouslyBypassApprovalsAndSandbox to false on agents that read untrusted input, or run them in a sandbox provider
  3. Install with Node.js 24.11 or newer, and install and sign in to each harness CLI on the host first. Paperclip assumes they are there
  4. Use --bind lan or --bind tailnet at onboarding for anything beyond one machine. The default local_trusted mode treats every request as the board admin
  5. Treat 409 on task checkout as owned by another agent and pick different work. The API docs say not to retry

Questions

Which is better for AI agents, Mistral Vibe CLI or Paperclip?

Mistral Vibe CLI scores 62.9 (B) on agent readiness against Paperclip's 59 (C), and leads in 3 of 7 scored categories. Paperclip leads on schema & documentation and security & auth.

Are Mistral Vibe CLI and Paperclip open source?

Yes. Mistral Vibe CLI is open source (Apache-2.0). Paperclip is open source (MIT).

Other comparisons with Mistral Vibe CLI or Paperclip

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.