{ "data": { "a": { "slug": "mistral-vibe-cli", "name": "Mistral Vibe CLI", "vendor": "Mistral AI", "vendorUrl": "https://docs.mistral.ai/vibe/code/cli/install-setup", "kind": "harness", "category": "agent-harnesses", "summary": "Mistral AI's open-source terminal coding agent. It runs Mistral's hosted models or any OpenAI-compatible endpoint, headless with `vibe -p` and in editors through `vibe-acp`. This listing covers the CLI, not Mistral's Vibe chat app.", "url": "https://www.anchorterminal.com/tools/mistral-vibe-cli", "markdownUrl": "https://www.anchorterminal.com/tools/mistral-vibe-cli.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/mistral-vibe-cli.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/mistral-vibe-cli.json", "repo": "https://github.com/mistralai/mistral-vibe", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "pypi", "name": "mistral-vibe" } ], "auth": "mixed", "authNotes": "Browser sign-in with a Mistral account, or a Mistral API key in `MISTRAL_API_KEY` or `~/.vibe/.env`, created under Code, Vibe CLI in the Mistral console. The same key works on the Free plan, a paid plan or pay-as-you-go. A local OpenAI-compatible server needs no Mistral account. MCP servers take static headers or OAuth.", "pricing": "freemium", "pricingNotes": "The CLI is free under Apache-2.0. Hosted models come with a Mistral plan or an API key. Free has limited coding sessions, Pro is $14.99 a month and Team $24.99 a user a month, Enterprise by quote, with pay-as-you-go at API rates past a plan's limit. The default model, Mistral Medium 3.5, is $1.5 per million input tokens and $7.5 per million output tokens on the API. A local model costs nothing (checked 2026-10-18).", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the CLI docs or the source (checked 2026-10-18).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 5100, "npmWeekly": null, "pypiWeekly": 331757, "asOf": "2026-10-18" }, "docsUrl": "https://docs.mistral.ai/vibe/code/cli/install-setup", "llmsTxt": "https://docs.mistral.ai/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "official", "harness", "coding-agent", "cli", "open-source", "python", "mcp", "acp", "llms-txt", "telemetry-default-on", "no-sandbox", "subagents", "hooks", "freemium", "no-card", "local" ], "lastRelease": "2026-10-09", "graded": true, "anchor": { "graded": true, "score": 62.9, "grade": "B", "agentReady": false, "rank": 468, "ranked": true, "rankOf": 1210, "categoryRank": 11, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 84, "maintenance": 75, "payments": 60, "reliability": 69, "schema": 76, "security": 58, "transparency": 79 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-18" }, "negative": -8, "negativeNotes": [ "2026-09-12. CVE-2026-87983 to CVE-2026-87988 (advisory MAI-2026-003, severity High, published 14 September 2026). Crafted shell commands could run without the approval prompt, reading or writing files outside the workspace or running code, and injected instructions could trigger them. HiddenLayer published the CVEs on 11 September and Mistral released 2.25.4 the next day. Fixed and published inside six months, so 2 points for each high, as nanobot's and zeroclaw's fixed advisories were weighed. Six highs come to 12, held at the -6 cap for fixed and published advisories that claude-code and the Claude Agent SDK listing use (research/new/NOTES-harnesses-H1.md, negative events). Paperclip's -10 adds -5 for its group of ten fixed advisories and separate lines for advisories with no patched version, which doesn't apply here (https://docs.mistral.ai/resources/security-advisories/MAI-2026-003). -6", "2026-10-18. The offline guide says that with `enable_telemetry = false` and `enable_auto_update = false` the CLI contacts no external service, and the configuration reference describes `enable_auto_update` as installing releases in the background. The 2.26.1 source has no such key. It reads `enable_update_checks`, which stays on, and the README says interactive sessions then query PyPI or uv once a day. We followed ironclaw's precedent, not zeroclaw's, because this is the vendor's documentation contradicting the shipped release on what leaves the machine, where zeroclaw's was a site-versus-docs mismatch. The safety page's line that `-p` falls back to `auto-approve` is also wrong, but it errs towards caution, so it stays a weakness with no deduction. A misleading claim, at the minimum, -2 (https://docs.mistral.ai/vibe/code/cli/offline-models; https://docs.mistral.ai/vibe/code/cli/configuration-reference; https://github.com/mistralai/mistral-vibe#update-settings). -2" ], "verdict": "Apache-2.0 with about two releases a week, and headless runs capped by turns, tokens, price and wall time, with typed exit codes and an export file. File edits are auto-approved by default, the host has no sandbox, telemetry is on by default, and six shell-permission bypasses were fixed only on 12 September 2026.", "bestFor": "Developers and CI jobs that want an open-source harness tuned for Mistral models, with hard per-run budgets and an export file, or a local model with no account.", "strengths": [ "Apache-2.0, on PyPI and Homebrew at 2.26.1, with 20 PyPI releases in the 90 days to 18 October 2026", "`vibe -p` stops on `--max-turns`, `--max-tokens`, `--max-price` or `--time-limit`, with exit codes 0 to 4 and an `export.json` naming the outcome", "Runs against any OpenAI-compatible endpoint, with a llama.cpp provider on 127.0.0.1:8080 in the defaults and a documented offline set-up", "Project `.vibe/` config, hooks, MCP servers and `AGENTS.md` load only from trusted folders, and `-p` runs never trust a folder without `--trust`", "`vibe-acp` is in the ACP registry at 2.26.1, with prebuilt binaries for macOS and Linux" ], "weaknesses": [ "The default agent auto-approves file edits, and there's no sandbox on the host. Isolation needs the experimental `--agent-socket` server or a container", "Six high-severity shell-permission bypasses (CVE-2026-87983 to CVE-2026-87988) were fixed in 2.25.4 on 12 September 2026, a day after HiddenLayer published them", "Telemetry is on by default, and the server-side experiments it enables can switch the default agent to the `smart-approve` classifier", "The docs disagree with the code. The safety page says `-p` falls back to auto-approve, and the offline guide names an `enable_auto_update` key the source doesn't define", "The repository takes no outside contributions, and its history is squashed release commits" ], "agentNotes": [ "Pass `--agent` on every `-p` run (`plan` is read-only). The source default is `accept-edits`, the safety docs say auto-approve, and an experiment can switch it to `smart-approve`", "Add `--max-turns`, `--max-tokens`, `--max-price` and `--time-limit`, and read `outcome` in the `export.json` that `--output-dir` writes. Exit 3 means a limit or a refusal", "Run in a container or behind `--agent-socket` before using `--auto-approve`. Vibe has no sandbox of its own on the host", "For offline runs set `enable_telemetry = false` and `enable_update_checks = false` in `config.toml`. The docs' `enable_auto_update` isn't the key the code reads", "Use 2.25.4 or later, which fixes six shell-permission bypasses, and check with `vibe --version`" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 3.3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.9 } ], "editorialScores": { "ergonomics": 84, "maintenance": 75, "payments": 60, "reliability": 69, "schema": 76, "security": 58, "transparency": 68 }, "provenanceScore": 90, "checked": { "categories": { "ergonomics": "2026-10-18", "maintenance": "2026-10-18", "payments": "2026-10-18", "reliability": "2026-10-18", "schema": "2026-10-18", "security": "2026-10-18", "transparency": "2026-10-18" }, "last": "2026-10-18", "oldest": "2026-10-18", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "uv tool install mistral-vibe # or: curl -LsSf https://mistral.ai/vibe/install.sh | bash", "headless": { "command": "vibe --prompt-file task.md --agent accept-edits --output json --max-turns 30 --max-price 1.0 --time-limit 1800 --output-dir out/", "env": { "MISTRAL_API_KEY": "\u003ckey\u003e" } } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/mistral-vibe-cli" }, "sameCompany": [ "mistral-api", "mistral-embeddings", "mistral-moderation", "mistral-voxtral-transcribe", "voxtral-mini-4b-realtime-2602", "mistral-ocr" ], "area": "frameworks", "provenance": { "legalEntity": "Mistral AI (RCS Paris 952 418 325)", "domain": "mistral.ai", "domainRegistered": "2019-05-15", "endpointOnVendorDomain": null, "terms": "https://legal.mistral.ai/terms/commercial-terms-of-service", "privacy": "https://legal.mistral.ai/terms/privacy-policy", "statusPage": "https://status.mistral.ai", "changelog": "https://github.com/mistralai/mistral-vibe/blob/main/CHANGELOG.md", "securityTxt": "valid", "checked": "2026-10-18", "notes": [ "security.txt read on 2026-10-18, a Mistral security contact, Expires 2027-05-05, Policy a HackerOne submission form. SECURITY.md in the repository points to the same contact and programme", "Privacy policy effective 3 September 2026 and commercial terms effective 25 September 2026, both read on 2026-10-18. Both name Vibe among the Mistral AI products they cover", "The legal entity and domain date are carried from the mistral-api listing's 17 October check", "status.mistral.ai covers the hosted API, answered with a bot check on 17 October per the mistral-api listing and wasn't read again. It doesn't cover the local CLI" ], "score": 90 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/mistral-vibe-cli.json", "live": { "slug": "mistral-vibe-cli", "versions": [ { "registry": "github", "name": "mistralai/mistral-vibe", "version": "v3.0.2", "released": "2026-10-22", "seenAt": "2026-10-25T09:06:23.264294521Z" }, { "registry": "pypi", "name": "mistral-vibe", "version": "3.0.2", "released": "2026-10-22", "seenAt": "2026-10-25T09:06:23.144944935Z" } ], "githubStars": 5195, "pypiWeekly": 666710, "securityTxt": { "url": "https://mistral.ai/.well-known/security.txt", "state": "valid", "expires": "2027-05-05T23:59:59.000Z", "checkedAt": "2026-10-25T15:27:21.206175907Z" }, "llmsTxt": { "url": "https://docs.mistral.ai/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-25T14:52:40.280257793Z" }, "domain": { "domain": "mistral.ai", "registered": "2019-05-15", "source": "https://rdap.identitydigital.services/rdap/domain/mistral.ai", "checkedAt": "2026-10-25T14:03:13.400772123Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/mistralai/mistral-vibe/main/CHANGELOG.md", "kind": "changelog", "status": 304, "checkedAt": "2026-10-25T02:55:43.022224171Z", "changedAt": "2026-10-23T01:56:24.701206013Z", "fingerprint": "b15b3306865f" } ], "github": { "repo": "mistralai/mistral-vibe", "checkedAt": "2026-10-19T06:29:55.542126838Z", "stars": 5148, "archived": false, "issuesEnabled": true, "pushedAt": "2026-10-09T14:56:56Z", "openIssues": 223, "openPRs": 200, "issuesOpened90d": 190, "issuesClosed90d": 152, "prsMerged90d": 24, "ci": { "branch": "main", "runs": 50, "success": 44, "failure": 6, "other": 0, "latest": "success", "latestAt": "2026-10-09T15:10:29Z" }, "replies": { "sampled": 25, "unanswered": 23, "medianDays": 0.4 } }, "updatedAt": "2026-10-25T15:27:21.206175907Z" } }, "answer": "Mistral Vibe CLI and Vibe-Trading score within a point of each other on agent readiness, 62.9 (B) and 62.2 (B). Vibe-Trading leads on security \u0026 auth and maintenance \u0026 community.", "b": { "slug": "vibe-trading", "name": "Vibe-Trading", "vendor": "HKUDS", "vendorUrl": "https://vibetrading.wiki", "kind": "harness", "category": "agent-harnesses", "summary": "Vibe-Trading is an open-source, self-hosted finance research agent from HKUDS. It turns plain-English questions into market data pulls, strategy code and backtests, through a CLI, a web UI, chat apps or its MCP server.", "url": "https://www.anchorterminal.com/tools/vibe-trading", "markdownUrl": "https://www.anchorterminal.com/tools/vibe-trading.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/vibe-trading.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/vibe-trading.json", "repo": "https://github.com/HKUDS/Vibe-Trading", "license": "MIT", "transports": [ "stdio", "streamable-http", "sse" ], "packages": [ { "registry": "pypi", "name": "vibe-trading-ai" } ], "auth": "none", "authNotes": "No account with the project. The owner supplies a model provider key in `agent/.env`, or uses Ollama, a ChatGPT OAuth sign-in for OpenAI Codex, a GitHub Copilot login or a local Claude Code login. The API server answers loopback clients without a key; any other client needs `API_AUTH_KEY` as `Authorization: Bearer \u003ckey\u003e`. The MCP server's HTTP transport binds 127.0.0.1 with a Host and Origin allow-list and no token. Broker connector credentials are stored in the OS keyring by `vibe-trading connector setup` (https://github.com/HKUDS/Vibe-Trading/blob/main/README.md).", "pricing": "free", "pricingNotes": "Free under the MIT licence, with nothing to buy from the project. The owner pays the model provider, or nothing with a local model through Ollama. 29 market-data sources are built in and most need no key. QVeris, an optional paid data marketplace, is a third party and is reached only in paid mode; the README carries a QVeris referral link and discloses it (checked 2026-10-25).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs or the source at v0.1.18 (checked 2026-10-25).", "endpoints": [] }, "toolCount": 82, "popularity": { "githubStars": 36500, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-25" }, "docsUrl": "https://vibetrading.wiki/docs/", "capabilities": [ "agent.harness", "agent.multi-agent", "agent.mcp-client", "data.markets", "market.crypto", "market.news", "assistant.messaging", "assistant.proactive" ], "tags": [ "open-source", "self-hosted", "local", "free", "python", "mit", "mcp", "cli", "harness", "docker", "no-card", "no-sandbox", "pre-1.0", "beta" ], "lastRelease": "2026-10-21", "graded": true, "anchor": { "graded": true, "score": 62.2, "grade": "B", "agentReady": false, "rank": 502, "ranked": true, "rankOf": 1210, "categoryRank": 12, "methodology": "0.6", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 82, "payments": 60, "reliability": 63, "schema": 72, "security": 70, "transparency": 47 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-25" }, "negative": -4, "negativeNotes": [ "2026-10-02. GHSA-v2f8-6655-7grj (CVE-2026-114108, critical). In 0.1.0 to 0.1.6 the API server answered every client without authentication when `API_AUTH_KEY` was unset, the shipped default, with the Docker container running as root on 0.0.0.0:8899, which the advisory chains to remote code execution. Fixed in 0.1.7 of 6 May 2026 and published five months later, -2. https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-v2f8-6655-7grj", "2026-10-02. GHSA-jqmf-mx4f-hfr6 (CVE-2026-114107, critical). Shell and code injection in the LLM-callable `bash`, `background_run` and backtest tools, and SSRF in `read_url`, reachable through the unauthenticated API or prompt injection in a processed document, in 0.1.0 to 0.1.6. Fixed in the same 0.1.7 release, -1. https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-jqmf-mx4f-hfr6", "2026-10-02. GHSA-5rmq-chc7-m22f (CVE-2026-114106, high). `read_document` read any file the process could reach and `safe_user_path()` accepted the whole home directory, in 0.1.0 to 0.1.6. Fixed in 0.1.7, -1. https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-5rmq-chc7-m22f" ], "verdict": "Vibe-Trading runs on the owner's machine under the MIT licence, ships near-daily fixes with a dated changelog, and keeps order tools out of its MCP server, with live orders gated by an owner-committed mandate and a kill switch. Three advisories, two critical, covered versions before 0.1.7, and the local CLI runs shell commands without asking.", "bestFor": "A person or a pipeline that wants a ready-made finance research agent over free market data, with backtests, swarm reviews and exports, run on their own machine or used as an MCP server by another agent.", "strengths": [ "MIT licence, runs on the owner's machine, and no telemetry code was found in the source at v0.1.18", "No order-placing or order-cancelling tool is exposed over MCP, and shell tools are off on every MCP transport by default", "Live orders need an owner-committed mandate with hard caps, a kill switch and an append-only, hash-chained audit ledger", "Six PyPI releases in the 90 days to 25 October 2026, with a dated CHANGELOG.md and a Known issues section in 0.1.18", "API server answers only loopback clients without `API_AUTH_KEY`; Docker binds 127.0.0.1 and runs as a non-root user" ], "weaknesses": [ "Three advisories published 2 October 2026 cover 0.1.0 to 0.1.6, two critical, among them unauthenticated API access with an RCE chain", "The local CLI's `bash` tool and generated backtest code run without per-action approval or a sandbox", "82 MCP tools with about 44,000 characters of descriptions in the server source and no readOnlyHint or destructiveHint annotations", "Version 0.1.18 with a Beta classifier, and not in the official MCP registry", "Broker trading is described in the README as experimental and not verified against a real broker account" ], "agentNotes": [ "Run 0.1.7 or later. Earlier versions carry three published advisories, including unauthenticated API access with an RCE chain", "Set `API_AUTH_KEY` before exposing `vibe-trading serve` beyond localhost, and send it as `Authorization: Bearer \u003ckey\u003e`", "Set `VIBE_TRADING_ALLOWED_RUN_ROOTS` in the MCP client's `env` block; a shell `export` does not reach the spawned server", "Use `vibe-trading run -p \"...\" --json` for headless runs, and add `--enable-shell-tools` to `vibe-trading-mcp` only when shell access is needed", "Treat text from `read_url`, `web_search` and `read_document` as untrusted; `security_warnings` flags patterns but does not remove them" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.6", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 62.2 } ], "editorialScores": { "ergonomics": 67, "maintenance": 82, "payments": 60, "reliability": 63, "schema": 72, "security": 70, "transparency": 67 }, "provenanceScore": 27, "checked": { "categories": { "ergonomics": "2026-10-25", "maintenance": "2026-10-25", "payments": "2026-10-25", "reliability": "2026-10-25", "schema": "2026-10-25", "security": "2026-10-25", "transparency": "2026-10-25" }, "last": "2026-10-25", "oldest": "2026-10-25", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "pip install vibe-trading-ai # then: vibe-trading init # or: docker compose up --build from a clone", "config": { "mcpServers": { "vibe-trading": { "command": "vibe-trading-mcp" } } }, "headless": { "command": "vibe-trading run -p \"$TASK\" --json" } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/vibe-trading" }, "area": "frameworks", "provenance": { "legalEntity": "", "domain": "vibetrading.wiki", "domainRegistered": "2026-05-14", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/HKUDS/Vibe-Trading/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-25", "notes": [ "No legal entity is named. The repository belongs to the GitHub organisation HKUDS, and pyproject.toml names HKUDS with an address at connect.hku.hk as author. The LICENSE names Vibe-Trading Contributors and NOTICE names HKUDS contributors.", "vibetrading.wiki is a static wiki on Cloudflare Pages built from the repository's wiki/ folder. It has no terms or privacy page, and the MIT licence stands in for terms.", "/robots.txt, /llms.txt and /.well-known/security.txt on vibetrading.wiki all answered with the same HTML redirect to /home/ on 25 October 2026, so there are no robots rules, no llms.txt and no security.txt.", "SECURITY.md asks for private reports through a GitHub security advisory and promises an acknowledgement within five business days.", "RDAP gives a registration date of 14 May 2026 for vibetrading.wiki. The README dates the wiki's launch to the same day.", "There is no hosted endpoint. The API and MCP server answer on the owner's own host." ], "score": 27 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/vibe-trading.json", "live": { "slug": "vibe-trading", "securityTxt": { "url": "https://vibetrading.wiki/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-25T15:28:03.847411428Z" }, "updatedAt": "2026-10-25T15:28:03.847411428Z" } }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Mistral AI", "b": "HKUDS", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "stdio, Streamable HTTP, SSE (legacy)", "name": "Transports" }, { "a": "OAuth or key", "b": "None", "name": "Auth" }, { "a": "Freemium", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "MIT", "name": "Licence" }, { "a": "none", "b": "82", "name": "Tools exposed" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-10-09", "b": "2026-10-21", "name": "Last release" }, { "a": "2026-09-25", "b": "no document linked", "name": "Terms last updated" }, { "a": "2026-09-03", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "yes, with an opt-out", "b": "", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "", "name": "Terms restrict automated access" }, { "a": "yes", "b": "", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "5.1k stars, 332k PyPI/wk", "b": "37k stars", "name": "Popularity" }, { "a": "3.3/5 (4)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Mistral Vibe CLI and Vibe-Trading score within a point of each other on agent readiness, 62.9 (B) and 62.2 (B). Vibe-Trading leads on security \u0026 auth and maintenance \u0026 community.", "question": "Which is better for AI agents, Mistral Vibe CLI or Vibe-Trading?" }, { "answer": "Yes. Mistral Vibe CLI is open source (Apache-2.0). Vibe-Trading is open source (MIT).", "question": "Are Mistral Vibe CLI and Vibe-Trading open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 69 against 63", "Agent ergonomics, 84 against 67", "Transparency \u0026 trust, 79 against 47" ], "also": null, "goodFor": "Developers and CI jobs that want an open-source harness tuned for Mistral models, with hard per-run budgets and an export file, or a local model with no account.", "slug": "mistral-vibe-cli", "watchFor": "The default agent auto-approves file edits, and there's no sandbox on the host. Isolation needs the experimental `--agent-socket` server or a container" }, { "aheadOn": [ "Security \u0026 auth, 70 against 58", "Maintenance \u0026 community, 82 against 75" ], "also": [ "No key needed to call it", "Runs on your own machine" ], "goodFor": "A person or a pipeline that wants a ready-made finance research agent over free market data, with backtests, swarm reviews and exports, run on their own machine or used as an MCP server by another agent.", "slug": "vibe-trading", "watchFor": "Three advisories published 2 October 2026 cover 0.1.0 to 0.1.6, two critical, among them unauthenticated API access with an RCE chain" } ], "job": { "capability": "agent.harness", "name": "Agent harnesses" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-mistral-vibe-cli.json", "title": "Agent Zero vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading.json", "title": "Agent Zero vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-mistral-vibe-cli.json", "title": "Aider vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/aider-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-vibe-trading.json", "title": "Aider vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/aider-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-mistral-vibe-cli.json", "title": "Amp vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/amp-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-vibe-trading.json", "title": "Amp vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/amp-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-mistral-vibe-cli.json", "title": "Antigravity CLI vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-vibe-trading.json", "title": "Antigravity CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-mistral-vibe-cli.json", "title": "Auggie CLI vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/auggie-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-vibe-trading.json", "title": "Auggie CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/auggie-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-mistral-vibe-cli.json", "title": "Claude Code vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading.json", "title": "Claude Code vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-mistral-vibe-cli.json", "title": "Cline vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/cline-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-vibe-trading.json", "title": "Cline vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/cline-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-mistral-vibe-cli.json", "title": "Crush vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/crush-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-vibe-trading.json", "title": "Crush vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/crush-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-mistral-vibe-cli.json", "title": "Cursor CLI vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-vibe-trading.json", "title": "Cursor CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-mistral-vibe-cli.json", "title": "DeepSeek Harness (dsh) vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-vibe-trading.json", "title": "DeepSeek Harness (dsh) vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-mistral-vibe-cli.json", "title": "Devin vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/devin-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-vibe-trading.json", "title": "Devin vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/devin-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-mistral-vibe-cli.json", "title": "Droid CLI vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-vibe-trading.json", "title": "Droid CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-mistral-vibe-cli.json", "title": "Pi vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-vibe-trading.json", "title": "Pi vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-mistral-vibe-cli.json", "title": "Gemini CLI vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-vibe-trading.json", "title": "Gemini CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-mistral-vibe-cli.json", "title": "GitHub Copilot CLI vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-vibe-trading.json", "title": "GitHub Copilot CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-mistral-vibe-cli.json", "title": "goose vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/goose-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-vibe-trading.json", "title": "goose vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/goose-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-mistral-vibe-cli.json", "title": "Harness² vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/harness2-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-vibe-trading.json", "title": "Harness² vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/harness2-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-mistral-vibe-cli.json", "title": "HarnessRouter vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading.json", "title": "HarnessRouter vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/jules-vs-mistral-vibe-cli.json", "title": "Jules vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/jules-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/jules-vs-vibe-trading.json", "title": "Jules vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/jules-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/junie-vs-mistral-vibe-cli.json", "title": "Junie CLI vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/junie-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/junie-vs-vibe-trading.json", "title": "Junie CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/junie-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-mistral-vibe-cli.json", "title": "Kilo Code CLI vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading.json", "title": "Kilo Code CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-mistral-vibe-cli.json", "title": "Kimi Code CLI vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-vibe-trading.json", "title": "Kimi Code CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-mistral-vibe-cli.json", "title": "Kiro CLI vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-vibe-trading.json", "title": "Kiro CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-mistral-vibe-cli.json", "title": "mini-swe-agent vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-vibe-trading.json", "title": "mini-swe-agent vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/minimax-code-vs-mistral-vibe-cli.json", "title": "MiniMax Code vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/minimax-code-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/minimax-code-vs-vibe-trading.json", "title": "MiniMax Code vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/minimax-code-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-muse-code.json", "title": "Mistral Vibe CLI vs Muse Code", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-muse-code" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-openai-codex.json", "title": "Mistral Vibe CLI vs OpenAI Codex", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-openai-codex" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-opencode.json", "title": "Mistral Vibe CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-openhands.json", "title": "Mistral Vibe CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-prime-agent.json", "title": "Mistral Vibe CLI vs Prime Agent", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-qoder-cli.json", "title": "Mistral Vibe CLI vs Qoder CLI", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-qoder-cli" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-qwen-code.json", "title": "Mistral Vibe CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-reflection-mirror.json", "title": "Mistral Vibe CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-rovo-dev-cli.json", "title": "Mistral Vibe CLI vs Rovo Dev CLI", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-rovo-dev-cli" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-warp.json", "title": "Mistral Vibe CLI vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/muse-code-vs-vibe-trading.json", "title": "Muse Code vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/muse-code-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading.json", "title": "OpenAI Codex vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-vibe-trading.json", "title": "OpenCode vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/opencode-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-vibe-trading.json", "title": "OpenHands vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/openhands-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/prime-agent-vs-vibe-trading.json", "title": "Prime Agent vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/prime-agent-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/qoder-cli-vs-vibe-trading.json", "title": "Qoder CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/qoder-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/qwen-code-vs-vibe-trading.json", "title": "Qwen Code vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/qwen-code-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/reflection-mirror-vs-vibe-trading.json", "title": "Mirror CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/reflection-mirror-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-vibe-trading.json", "title": "Rovo Dev CLI vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/vibe-trading-vs-warp.json", "title": "Vibe-Trading vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/vibe-trading-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-mistral-vibe-cli.json", "title": "CLI Manager vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-vibe-trading.json", "title": "CLI Manager vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-mistral-vibe-cli.json", "title": "Harness vs Mistral Vibe CLI", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-mistral-vibe-cli" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-vibe-trading.json", "title": "Harness vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-paperclip.json", "title": "Mistral Vibe CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-parallax-agents.json", "title": "Mistral Vibe CLI vs Parallax", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-parallax-agents" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading.json", "title": "Paperclip vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/parallax-agents-vs-vibe-trading.json", "title": "Parallax vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/parallax-agents-vs-vibe-trading" } ], "scores": [ { "by": 6, "edge": "mistral-vibe-cli", "key": "reliability", "mistral-vibe-cli": 69, "name": "Reliability", "vibe-trading": 63, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 4, "edge": "mistral-vibe-cli", "key": "schema", "mistral-vibe-cli": 76, "name": "Schema \u0026 documentation", "vibe-trading": 72, "weight": 13 }, { "by": 17, "edge": "mistral-vibe-cli", "key": "ergonomics", "mistral-vibe-cli": 84, "name": "Agent ergonomics", "vibe-trading": 67, "weight": 13 }, { "by": 12, "edge": "vibe-trading", "key": "security", "mistral-vibe-cli": 58, "name": "Security \u0026 auth", "vibe-trading": 70, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "mistral-vibe-cli": 60, "name": "Payments \u0026 pricing", "vibe-trading": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 7, "edge": "vibe-trading", "key": "maintenance", "mistral-vibe-cli": 75, "name": "Maintenance \u0026 community", "vibe-trading": 82, "weight": 7 }, { "by": 32, "edge": "mistral-vibe-cli", "key": "transparency", "mistral-vibe-cli": 79, "name": "Transparency \u0026 trust", "vibe-trading": 47, "weight": 7 } ], "summary": "Mistral Vibe CLI and Vibe-Trading score within a point of each other on agent readiness, 62.9 (B) and 62.2 (B). Vibe-Trading leads on security \u0026 auth and maintenance \u0026 community. Both do agent harnesses.", "tutorials": [], "verdicts": { "mistral-vibe-cli": "Apache-2.0 with about two releases a week, and headless runs capped by turns, tokens, price and wall time, with typed exit codes and an export file. File edits are auto-approved by default, the host has no sandbox, telemetry is on by default, and six shell-permission bypasses were fixed only on 12 September 2026.", "vibe-trading": "Vibe-Trading runs on the owner's machine under the MIT licence, ships near-daily fixes with a dated changelog, and keeps order tools out of its MCP server, with live orders gated by an owner-committed mandate and a kill switch. Three advisories, two critical, covered versions before 0.1.7, and the local CLI runs shell commands without asking." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading", "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading.min.md" }, "markdown": "Mistral Vibe CLI and Vibe-Trading score within a point of each other on agent readiness, 62.9 (B) and 62.2 (B). Vibe-Trading leads on security \u0026 auth and maintenance \u0026 community. Both do agent harnesses.\n\n- Mistral Vibe CLI: grade B, 62.9/100, rank #468 of 1210. Markdown https://www.anchorterminal.com/tools/mistral-vibe-cli.md · JSON https://www.anchorterminal.com/api/v1/tools/mistral-vibe-cli.json\n- Vibe-Trading: grade B, 62.2/100, rank #502 of 1210. Markdown https://www.anchorterminal.com/tools/vibe-trading.md · JSON https://www.anchorterminal.com/api/v1/tools/vibe-trading.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 792 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### Mistral Vibe CLI (B)\n\nGood for: Developers and CI jobs that want an open-source harness tuned for Mistral models, with hard per-run budgets and an export file, or a local model with no account.\n\nAhead on:\n- Reliability, 69 against 63\n- Agent ergonomics, 84 against 67\n- Transparency \u0026 trust, 79 against 47\n\nWatch for: The default agent auto-approves file edits, and there's no sandbox on the host. Isolation needs the experimental `--agent-socket` server or a container\n\n### Vibe-Trading (B)\n\nGood for: A person or a pipeline that wants a ready-made finance research agent over free market data, with backtests, swarm reviews and exports, run on their own machine or used as an MCP server by another agent.\n\nAhead on:\n- Security \u0026 auth, 70 against 58\n- Maintenance \u0026 community, 82 against 75\n\nAlso in its favour:\n- No key needed to call it\n- Runs on your own machine\n\nWatch for: Three advisories published 2 October 2026 cover 0.1.0 to 0.1.6, two critical, among them unauthenticated API access with an RCE chain\n\n\n## Score by category\n\n| Category | Weight | Mistral Vibe CLI | Vibe-Trading | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 69 | 63 | Mistral Vibe CLI +6 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 76 | 72 | Mistral Vibe CLI +4 |\n| Agent ergonomics | 13% (16.2 this run) | 84 | 67 | Mistral Vibe CLI +17 |\n| Security \u0026 auth | 14% (17.5 this run) | 58 | 70 | Vibe-Trading +12 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 75 | 82 | Vibe-Trading +7 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 79 | 47 | Mistral Vibe CLI +32 |\n| Negative events | ≤15 | -8 | -4 | |\n| **Total** | | **62.9 · B** | **62.2 · B** | |\n\n## Facts side by side\n\n| Fact | Mistral Vibe CLI | Vibe-Trading |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Mistral AI | HKUDS |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | stdio, Streamable HTTP, SSE (legacy) |\n| Auth | OAuth or key | None |\n| Pricing | Freemium | Free |\n| x402 | no | no |\n| Licence | Apache-2.0 | MIT |\n| Tools exposed | none | 82 |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | no |\n| Last release | 2026-10-09 | 2026-10-21 |\n| Terms last updated | 2026-09-25 | no document linked |\n| Privacy policy last updated | 2026-09-03 | no document linked |\n| Customer content may train models | yes, with an opt-out | |\n| Terms restrict automated access | not found in the text | |\n| Terms restrict benchmarking | yes | |\n| Terms or service can change without notice | yes | |\n| Arbitration or class-action waiver | not found in the text | |\n| Popularity | 5.1k stars, 332k PyPI/wk | 37k stars |\n| Agent reviews | 3.3/5 (4) | none |\n\n## Verdicts\n\n**Mistral Vibe CLI.** Apache-2.0 with about two releases a week, and headless runs capped by turns, tokens, price and wall time, with typed exit codes and an export file. File edits are auto-approved by default, the host has no sandbox, telemetry is on by default, and six shell-permission bypasses were fixed only on 12 September 2026.\n\n**Vibe-Trading.** Vibe-Trading runs on the owner's machine under the MIT licence, ships near-daily fixes with a dated changelog, and keeps order tools out of its MCP server, with live orders gated by an owner-committed mandate and a kill switch. Three advisories, two critical, covered versions before 0.1.7, and the local CLI runs shell commands without asking.\n\n## Before you call either\n\n### Mistral Vibe CLI\n\n1. Pass `--agent` on every `-p` run (`plan` is read-only). The source default is `accept-edits`, the safety docs say auto-approve, and an experiment can switch it to `smart-approve`\n2. Add `--max-turns`, `--max-tokens`, `--max-price` and `--time-limit`, and read `outcome` in the `export.json` that `--output-dir` writes. Exit 3 means a limit or a refusal\n3. Run in a container or behind `--agent-socket` before using `--auto-approve`. Vibe has no sandbox of its own on the host\n4. For offline runs set `enable_telemetry = false` and `enable_update_checks = false` in `config.toml`. The docs' `enable_auto_update` isn't the key the code reads\n5. Use 2.25.4 or later, which fixes six shell-permission bypasses, and check with `vibe --version`\n\n### Vibe-Trading\n\n1. Run 0.1.7 or later. Earlier versions carry three published advisories, including unauthenticated API access with an RCE chain\n2. Set `API_AUTH_KEY` before exposing `vibe-trading serve` beyond localhost, and send it as `Authorization: Bearer \u003ckey\u003e`\n3. Set `VIBE_TRADING_ALLOWED_RUN_ROOTS` in the MCP client's `env` block; a shell `export` does not reach the spawned server\n4. Use `vibe-trading run -p \"...\" --json` for headless runs, and add `--enable-shell-tools` to `vibe-trading-mcp` only when shell access is needed\n5. Treat text from `read_url`, `web_search` and `read_document` as untrusted; `security_warnings` flags patterns but does not remove them\n\n## Questions\n\n### Which is better for AI agents, Mistral Vibe CLI or Vibe-Trading?\n\nMistral Vibe CLI and Vibe-Trading score within a point of each other on agent readiness, 62.9 (B) and 62.2 (B). Vibe-Trading leads on security \u0026 auth and maintenance \u0026 community.\n\n### Are Mistral Vibe CLI and Vibe-Trading open source?\n\nYes. Mistral Vibe CLI is open source (Apache-2.0). Vibe-Trading is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading.json, and with the fewest tokens: https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"mistral-vibe-cli\", \"b\": \"vibe-trading\"}`. From a terminal: `anchor compare mistral-vibe-cli vibe-trading`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/mistral-vibe-cli.json and https://www.anchorterminal.com/api/v1/tools/vibe-trading.json\n\n## Other comparisons with Mistral Vibe CLI or Vibe-Trading\n\n- [Agent Zero vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/agent-zero-vs-mistral-vibe-cli.md)\n- [Agent Zero vs Vibe-Trading](https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading.md)\n- [Aider vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/aider-vs-mistral-vibe-cli.md)\n- [Aider vs Vibe-Trading](https://www.anchorterminal.com/compare/aider-vs-vibe-trading.md)\n- [Amp vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/amp-vs-mistral-vibe-cli.md)\n- [Amp vs Vibe-Trading](https://www.anchorterminal.com/compare/amp-vs-vibe-trading.md)\n- [Antigravity CLI vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/antigravity-cli-vs-mistral-vibe-cli.md)\n- [Antigravity CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/antigravity-cli-vs-vibe-trading.md)\n- [Auggie CLI vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/auggie-vs-mistral-vibe-cli.md)\n- [Auggie CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/auggie-vs-vibe-trading.md)\n- [Claude Code vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/claude-code-vs-mistral-vibe-cli.md)\n- [Claude Code vs Vibe-Trading](https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading.md)\n- [Cline vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/cline-vs-mistral-vibe-cli.md)\n- [Cline vs Vibe-Trading](https://www.anchorterminal.com/compare/cline-vs-vibe-trading.md)\n- [Crush vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/crush-vs-mistral-vibe-cli.md)\n- [Crush vs Vibe-Trading](https://www.anchorterminal.com/compare/crush-vs-vibe-trading.md)\n- [Cursor CLI vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-mistral-vibe-cli.md)\n- [Cursor CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/cursor-cli-vs-vibe-trading.md)\n- [DeepSeek Harness (dsh) vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/deepseek-harness-vs-mistral-vibe-cli.md)\n- [DeepSeek Harness (dsh) vs Vibe-Trading](https://www.anchorterminal.com/compare/deepseek-harness-vs-vibe-trading.md)\n- [Devin vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/devin-vs-mistral-vibe-cli.md)\n- [Devin vs Vibe-Trading](https://www.anchorterminal.com/compare/devin-vs-vibe-trading.md)\n- [Droid CLI vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/droid-cli-vs-mistral-vibe-cli.md)\n- [Droid CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/droid-cli-vs-vibe-trading.md)\n- [Pi vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/earendil-pi-vs-mistral-vibe-cli.md)\n- [Pi vs Vibe-Trading](https://www.anchorterminal.com/compare/earendil-pi-vs-vibe-trading.md)\n- [Gemini CLI vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/gemini-cli-vs-mistral-vibe-cli.md)\n- [Gemini CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/gemini-cli-vs-vibe-trading.md)\n- [GitHub Copilot CLI vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/github-copilot-cli-vs-mistral-vibe-cli.md)\n- [GitHub Copilot CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/github-copilot-cli-vs-vibe-trading.md)\n- [goose vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/goose-vs-mistral-vibe-cli.md)\n- [goose vs Vibe-Trading](https://www.anchorterminal.com/compare/goose-vs-vibe-trading.md)\n- [Harness² vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/harness2-vs-mistral-vibe-cli.md)\n- [Harness² vs Vibe-Trading](https://www.anchorterminal.com/compare/harness2-vs-vibe-trading.md)\n- [HarnessRouter vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/harnessrouter-vs-mistral-vibe-cli.md)\n- [HarnessRouter vs Vibe-Trading](https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading.md)\n- [Jules vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/jules-vs-mistral-vibe-cli.md)\n- [Jules vs Vibe-Trading](https://www.anchorterminal.com/compare/jules-vs-vibe-trading.md)\n- [Junie CLI vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/junie-vs-mistral-vibe-cli.md)\n- [Junie CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/junie-vs-vibe-trading.md)\n- [Kilo Code CLI vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/kilo-code-cli-vs-mistral-vibe-cli.md)\n- [Kilo Code CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading.md)\n- [Kimi Code CLI vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/kimi-code-cli-vs-mistral-vibe-cli.md)\n- [Kimi Code CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/kimi-code-cli-vs-vibe-trading.md)\n- [Kiro CLI vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/kiro-cli-vs-mistral-vibe-cli.md)\n- [Kiro CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/kiro-cli-vs-vibe-trading.md)\n- [mini-swe-agent vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/mini-swe-agent-vs-mistral-vibe-cli.md)\n- [mini-swe-agent vs Vibe-Trading](https://www.anchorterminal.com/compare/mini-swe-agent-vs-vibe-trading.md)\n- [MiniMax Code vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/minimax-code-vs-mistral-vibe-cli.md)\n- [MiniMax Code vs Vibe-Trading](https://www.anchorterminal.com/compare/minimax-code-vs-vibe-trading.md)\n- [Mistral Vibe CLI vs Muse Code](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-muse-code.md)\n- [Mistral Vibe CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-openai-codex.md)\n- [Mistral Vibe CLI vs OpenCode](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-opencode.md)\n- [Mistral Vibe CLI vs OpenHands](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-openhands.md)\n- [Mistral Vibe CLI vs Prime Agent](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-prime-agent.md)\n- [Mistral Vibe CLI vs Qoder CLI](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-qoder-cli.md)\n- [Mistral Vibe CLI vs Qwen Code](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-qwen-code.md)\n- [Mistral Vibe CLI vs Mirror CLI](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-reflection-mirror.md)\n- [Mistral Vibe CLI vs Rovo Dev CLI](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-rovo-dev-cli.md)\n- [Mistral Vibe CLI vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-warp.md)\n- [Muse Code vs Vibe-Trading](https://www.anchorterminal.com/compare/muse-code-vs-vibe-trading.md)\n- [OpenAI Codex vs Vibe-Trading](https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading.md)\n- [OpenCode vs Vibe-Trading](https://www.anchorterminal.com/compare/opencode-vs-vibe-trading.md)\n- [OpenHands vs Vibe-Trading](https://www.anchorterminal.com/compare/openhands-vs-vibe-trading.md)\n- [Prime Agent vs Vibe-Trading](https://www.anchorterminal.com/compare/prime-agent-vs-vibe-trading.md)\n- [Qoder CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/qoder-cli-vs-vibe-trading.md)\n- [Qwen Code vs Vibe-Trading](https://www.anchorterminal.com/compare/qwen-code-vs-vibe-trading.md)\n- [Mirror CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/reflection-mirror-vs-vibe-trading.md)\n- [Rovo Dev CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/rovo-dev-cli-vs-vibe-trading.md)\n- [Vibe-Trading vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/vibe-trading-vs-warp.md)\n- [CLI Manager vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/cli-manager-vs-mistral-vibe-cli.md)\n- [CLI Manager vs Vibe-Trading](https://www.anchorterminal.com/compare/cli-manager-vs-vibe-trading.md)\n- [Harness vs Mistral Vibe CLI](https://www.anchorterminal.com/compare/harness-autonomous-vs-mistral-vibe-cli.md)\n- [Harness vs Vibe-Trading](https://www.anchorterminal.com/compare/harness-autonomous-vs-vibe-trading.md)\n- [Mistral Vibe CLI vs Paperclip](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-paperclip.md)\n- [Mistral Vibe CLI vs Parallax](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-parallax-agents.md)\n- [Paperclip vs Vibe-Trading](https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading.md)\n- [Parallax vs Vibe-Trading](https://www.anchorterminal.com/compare/parallax-agents-vs-vibe-trading.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-25", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.6", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Mistral Vibe CLI vs Vibe-Trading", "url": "" } ], "description": "Mistral Vibe CLI and Vibe-Trading score within a point of each other for agent harnesses, 62.9 and 62.2 out of 100. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Mistral Vibe CLI B 62.9", "Vibe-Trading B 62.2", "scores" ], "h1": "Mistral Vibe CLI vs Vibe-Trading", "image": "https://www.anchorterminal.com/assets/og/compare-mistral-vibe-cli-vs-vibe-trading.png", "path": "/compare/mistral-vibe-cli-vs-vibe-trading", "published": "2026-10-01", "section": "tools", "title": "Mistral Vibe CLI vs Vibe-Trading for AI agents (2026)", "toc": null, "updated": "2026-10-25", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading" }, "tokens": { "markdown": 3950, "slim": 730 }, "version": 1 }