Open WebUI vs Underdog

Open WebUI 65

Read with the API lines for the HTTP API an agent calls on an instance. FastAPI generates the OpenAPI document from the routes, and main.py serves /docs and /openapi.json only when ENV=dev. ENV defaults to dev in the backend (env.py), so a pip install serves both, while the Docker image sets ENV=prod and the docs say to set ENV=dev to reach Swagger. No spec file is published, and chat completions take a free-form dict. The line is partly met, so the earlier partial is held (12 of 25). The docs repository ships llms.txt and agents.txt and generates llms-full.txt and a Markdown copy of every page at build, and llms.txt was read on the docs host on 3 October. docs.openwebui.com wasn't requested on 11 November (see openQuestions) (10). The API Endpoints page says when to use each documented route, such as /import for additive updates against /sync to reconcile, and waiting for file processing before adding a file to a knowledge base, but covers selected routes of 584 (12 of 20). Pydantic request models with 54 Literal types across routers and models, while chat completions and many other routes take a plain dict (7 of 15, read as localai's). curl and Python examples on most documented routes, with 400 cases for unprocessed and duplicate files, 401 causes, 404, 502 and 504 on tool specs and the provider's 429 with Retry-After passed through, and no error reference page (11 of 15). Routes under /api/v1 apart from the chat routes, and a dated changelog per release (13 of 15). 12 + 10 + 12 + 7 + 11 + 13 = 65.

Underdog 0

No interface an outside agent can call was found from Conway (no API, MCP server, CLI or SDK), so the interface lines score 0, as for fresha-ai-concierge and lola. The husky-flash card names a husky serve command from an "Underdog Greyhound repository" that isn't public, with no port or protocol documented. The Underdog app downloads an unmodified llama.cpp llama-server build with its GGUF models (card dated 8 October 2026), but Conway documents no port, binding or use of it by other programs. No llms.txt at conway.tech (404 on 11 November) and underdog.ai unread (0). Model cards with run commands describe the weights, not the app (0). 0 + 0 + 0 + 0 + 0 + 0 = 0.

Open WebUI 65

Read with the tool checklist. One API key per user, sk- plus 32 hexadecimal characters, carrying that user's role and group permissions, revoked by deletion and rotated by generating a new one. Keys are off by default (ENABLE_API_KEYS), a group permission decides who may create one, and an administrator can limit them instance-wide to listed endpoints. They're stored in plain text, can be read back through GET /api/v1/auths/api_key, and have no scopes of their own and no expiry. The api_key table has expires_at and last_used_at columns that no code path sets. Tokens travel in the Authorization header, an x-api-key header or the session cookie, never a query string (20 of 30, plain revocable keys). Admin, user and pending roles with group permissions, per-model and per-knowledge access, workspace tools off for non-administrators, and tool permission modes (Ask for approval, and since 0.13.1 Auto with a review model) that are experimental and off by default. Workspace tools and functions are Python run with exec and the server's rights, which the security policy calls intended behaviour (14 of 20, read as localai's role scoping). Chats bring in web pages, files and tool output. The accepted-risks pages on model output and agentic applications name injected content in fetched pages and documents, say which injection reports count as vulnerabilities, and list the mitigations (per-user scoping, permissions, filters and confirmation prompts) (9 of 15). AUDIT_LOG_LEVEL records metadata, requests or requests with responses, NONE by default, and logs key calls under the key's owner, and API key creation and deletion raise events (12 of 15). The security policy takes reports only through GitHub Security Advisories, supports main only, gives no acknowledgement time ("Expect several weeks") and no bounty, and accepted reports become public advisories with patched versions. security.txt per the 3 October check, not re-read. No SOC 2 or ISO 27001. The route with no stated time is 7, and advisories handled in public add 3, as anythingllm's (10 of 20). 20 + 14 + 9 + 12 + 10 = 65. Advisories are charged one by one under negative events.

Underdog 3

Read with the tool checklist for the app, for the surface an outside agent can call, of which Conway publishes none (fresha-ai-concierge, lola). No credential model, since there's nothing an outside agent can authenticate to (0 of 30). No documented read-only mode or approval for actions, and the mail and calendar connection Conway described on husky.underdog.ai is struck, since that host now refuses our reader (0 of 20). No prompt-injection guidance found (0 of 15). No audit or per-call log documented (0 of 15). No security.txt at conway.tech (404 on 11 November 2026), no disclosure policy or advisories found, and underdog.ai unread. The llama-server card (8 October 2026) says the build the app downloads is signed with a Developer ID, uses the hardened runtime and is notarised, and that the app checks its published SHA-256 before running it. The Bark 3.0 card says the app checks pinned sizes and SHA-256 for its model files. Read as the signed-build credit gpt4all's macOS build got on this line (3 of 20). 0 + 0 + 0 + 0 + 3 = 3.

Open WebUI 60

Read with the local-software lines, since an agent calls an Open WebUI instance its owner runs, with no hosted Open WebUI service. The open-webui package on PyPI states Python 3.11 or 3.12 (requires-python >= 3.11, < 3.13.0a1 in pyproject.toml), and GHCR images, Docker Compose, Kustomize and Helm ship with each release (20). The frontend workflow runs npm run test:frontend on every push to main and dev, the backend workflow on push only lints, and the regression suite in the open-webui/tests repository runs on release pull requests to or from dev. Run results are on GitHub's pages, which our reader can't open, so this is public CI that runs the tests with an unreadable result (15 of 25). Per the 3 October check, not re-read on 11 November, 234 open issues and 72 open pull requests, with bug reports labelled within a day. Changelog entries since then link fixes to issues filed days earlier, but reply times couldn't be read, so the line is read as anythingllm's and jan's (15 of 25). CHANGELOG.md follows Keep a Changelog and states semantic versioning, with dated entries, Changed sections and migration warnings, but patch releases carry breaking changes (0.12.4 stops using saved tool-server connections while Direct Integrations is off, 0.13.1 turns off file preloading), and 0.11.4, a patch release, removed POST /api/v1/utils/pdf with no changelog entry. The line is partly met, so the earlier partial is held (10 of 15). 0.13.3, before 1.0, and the API page calls the API an experimental setup (0). 20 + 15 + 15 + 10 + 0 = 60.

Underdog 0

Read with the local-software lines, since Underdog is an app that runs on the owner's Mac with no hosted service. The app's download, system requirements and version are on underdog.ai, whose robots.txt disallows ClaudeBot (re-read on 11 November 2026), so they are unread. Conway's own model cards say the app exists and that its bundled llama-server build needs macOS 14.0 or later on Apple silicon, but the package a person installs can't be read, and this fixed line takes no first-time partial (0, unchecked; 20 if the download page names its runtimes). The app's source isn't public, so there's no public CI or test suite (0). No public issue tracker for the app was found (0). No app changelog or version history readable outside underdog.ai (0). No app version readable, so not shown to be 1.0 or declared stable. Conway's models carry 1.0, 1.1 and 3.0 version names, which aren't the app's (0). 0 + 0 + 0 + 0 + 0 = 0. Low because underdog.ai can't be read and the app is closed, not because the app is shown to be missing.

Open WebUI 57

Read with the API lines. Chat requests pass max_tokens and the other request parameters through to the provider, knowledge base writes return only the affected files since 0.12.5, file reads by line range stop at a size limit since 0.13.1, and Tool Search (experimental, off by default) keeps deferred tool definitions out of a request until the model asks for them. No field selection (17 of 25, read as text-generation-webui's). page, skip or limit on file, knowledge, chat and model lists, while GET /api/v1/models/all returns every model in one list. Partly met, so the earlier partial is held (13 of 20). Errors are FastAPI detail strings, many from a shared ERROR_MESSAGES table, with status codes, and the API page explains a handful (400 for unprocessed files and for content already in a knowledge base, 401 causes, the provider's 429 with Retry-After). Partly met, earlier partial held (12 of 20). No idempotency keys or retry guidance. /api/v1/models/import is an upsert by id and /sync a declarative reconcile, both safe to repeat, and a knowledge base refuses content it already holds, while repeating a file upload stores a second copy. Partly met, earlier partial held (5 of 20). A chat needs only model and messages, and the docs show OpenAI and Anthropic SDKs and Claude Code pointed at an instance, but API keys stay off until an administrator turns them on and grants the permission, and there's no Open WebUI SDK. Partly met, earlier partial held (10 of 15). 17 + 13 + 12 + 5 + 10 = 57.

Underdog 0

No outside-agent interface from Conway, so every line scores 0 (fresha-ai-concierge, lola). Running Conway's weights through llama.cpp, Splash or Ollama is those engines' interface, not Underdog's. 0 + 0 + 0 + 0 + 0 = 0.

Open WebUI 67

The Open WebUI License is BSD-3-Clause terms plus a clause that bars altering or removing the Open WebUI branding in deployments with more than 50 end users in a rolling 30 days, unless the licensee has written permission or an enterprise licence. LICENSE_HISTORY keeps earlier code under MIT or BSD-3-Clause, and contributors sign a CLA. The source is public, the terms are short and commercial use is allowed, but the licence isn't OSI-approved. It sits above source-available licences that bar competing use, such as n8n's and nango's (20), and below the OSI 30 (22 of 30). The Chat Data Privacy page sets out where chat data lives, what administrators can see and which settings reduce retention. The openwebui.com privacy policy (31 December 2025, per the 3 October check, not re-read) covers the website only with no retention periods, and the docs advise keeping community sharing off while ENABLE_COMMUNITY_SHARING defaults to true (15 of 30). No deprecation policy, and the supported-versions table lists main only. Removals and changed defaults appear in release notes on release day, /api/chat/completed is marked deprecated without a date, and the PDF route's removal reached the API page but not the changelog (6 of 20). No analytics library in the source. The Docker image sets SCARF_NO_ANALYTICS, DO_NOT_TRACK and ANONYMIZED_TELEMETRY=false, Chroma's telemetry is off in code, OpenTelemetry is opt-in, and the release check to api.github.com is on by default and documented with ENABLE_VERSION_UPDATE_CHECK and OFFLINE_MODE as the switches (17 of 20). 22 + 15 + 6 + 17 = 60.

Underdog 17

The app's source isn't published and its terms on underdog.ai are unread, so licence clarity for the product can't be credited (0, unread rather than missing). Conway's model weights on Hugging Face switched from Apache-2.0 to CC BY-NC 4.0 in commits titled "Switch the license to CC BY-NC 4.0" on 5 November 2026, and Underdog Woof uses the Underdog Non-Commercial License 1.0. Those are the weights' terms, not the app's. The privacy policy on underdog.ai is unread. The Bark 3.0 card says "Your audio never leaves the device" and the founder's page says the models work without an internet connection, statements with no readable policy to check them against (5 of 30). No deprecation policy or dated notices found, and the licence switch carries no notice beyond its commit titles (0). No telemetry statement readable (0). 0 + 5 + 0 + 0 = 5. Low largely because underdog.ai can't be read.

Open WebUI 86

0.13.3, dated 8 November 2026 in the changelog and tagged on 9 November (30). 14 releases in the 90 days from 13 August, from 0.11.1 (25 August) to 0.13.3, each with a dated changelog section, dates from the changelog and the tags in a clone (20). Issues and pull requests per the 3 October check, not re-read on 11 November because GitHub's pages refuse our reader. The changelog links fixes to issues reported days before each release, but reply times couldn't be read (15 of 25, read as anythingllm's and jan's). No official SDK and no MCP server. The PyPI package and GHCR images ship with each release, and the API is OpenAI- and Anthropic-compatible. Partly met, so the earlier partial is held (13 of 15). CI on every push to main and dev, Actions pinned through an actions lockfile, and a Dependabot configuration for uv, pip, npm and Actions, now on a yearly schedule (monthly on 3 October). Partly met, earlier partial held (8 of 10). 30 + 20 + 15 + 13 + 8 = 86.

Underdog 56

Read as a closed product, from Conway's dated releases of the components its own cards say the app runs, since the app's changelog is on underdog.ai and unread. Underdog Bark 3.0, whose card says Underdog runs it on the device, and Bark 3.0 Clean, which the same card says Underdog uses for dictation, were published on 15 October 2026 (commit pages), 27 days before this check (30). Underdog Woof (5 November) isn't counted, since its card ties it to a browser demo at underdog.ai/woof and doesn't say the Mac app runs it. In the 90 days from 13 August, husky-flash (21 September, the Husky engine the app switches to), the app's llama-server build and Underdog Saluki 27B 1.0 (8 October, run by that build) and Bark 3.0 (15 October) (20). No public tracker or readable changelog for the app. Contact addresses root@conway.tech and license@conway.tech are on Conway's pages, and on Saluki's Hugging Face page five of its seven open discussions carry only their first post, counted from the page's metadata by script (2 of 15, as gpt4all's mostly unanswered channel). No SDK or MCP registry entry (0). The bundled llama-server is pinned to llama.cpp commit bd4eeaa of 7 October 2026 (read in a shallow fetch of llama.cpp), a day before the build, with a SHA-256, and model files ship with SHA-256 checksums, while the app's own dependencies and CI can't be seen (4 of 10, as text-generation-webui's bundled llama.cpp). 30 + 20 + 2 + 0 + 4 = 56. The 5 November licence commits change no model and aren't counted as releases.