{ "data": { "a": { "slug": "openai-codex", "name": "OpenAI Codex", "vendor": "OpenAI", "vendorUrl": "https://openai.com", "kind": "harness", "category": "agent-harnesses", "summary": "OpenAI's coding agent for software development tasks.", "url": "https://www.anchorterminal.com/tools/openai-codex", "markdownUrl": "https://www.anchorterminal.com/tools/openai-codex.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/openai-codex.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/openai-codex.json", "repo": "https://github.com/openai/codex", "license": "Apache-2.0 (Codex CLI, its Rust crates and the TypeScript and Python SDKs). Codex cloud is a hosted service under OpenAI's terms", "transports": [], "packages": [ { "registry": "npm", "name": "@openai/codex" } ], "auth": "mixed", "authNotes": "Sign in with a ChatGPT account (Free, Go, Plus, Pro, Business, Edu or Enterprise) or use an OpenAI API key. Cloud work such as GitHub code review and the Slack integration comes with Plus and above, and none of it works with an API key. `--oss` talks to a local Ollama or LM Studio server and needs no account.", "pricing": "freemium", "pricingNotes": "Included in every ChatGPT plan. Free $0, Go $8 a month, Plus $20, Pro from $100 (tiers at $100, $200 and $500), Business $20 a user a month billed annually for two or more users, Enterprise and Edu by quote. On Plus the docs estimate 15 to 160 local messages per five hours with GPT-6.1 Sol, and Pro has no five-hour limit. Cloud tasks use more of the allowance. With an API key you pay API token rates and can't use the cloud agent (checked 2026-10-02).", "priceSummary": "$20 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the pricing page or the source (checked 2026-10-02).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 126000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-02" }, "docsUrl": "https://developers.openai.com/codex", "llmsTxt": "https://learn.chatgpt.com/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client" ], "tags": [ "official", "harness", "coding-agent", "cli", "open-source", "rust", "typescript", "python", "mcp", "llms-txt", "telemetry-default-on", "pre-1.0", "free-tier", "no-card", "hosted", "status-page" ], "lastRelease": "2026-10-01", "graded": true, "anchor": { "graded": true, "score": 73.4, "grade": "BB", "agentReady": true, "rank": 58, "ranked": true, "rankOf": 452, "categoryRank": 2, "methodology": "0.3", "run": "2026-10-01", "scores": { "ergonomics": 80, "maintenance": 87, "payments": 60, "reliability": 55, "schema": 90, "security": 82, "transparency": 83 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": -2, "negativeNotes": [ "2026-04-14. CVE-2025-61260 (GHSA-xrxf-jgv3-qmrm), critical (CVSS 9.8 from CISA-ADP), code execution through MCP configuration files in a repository for Codex CLI 0.23.0 and earlier, published to NVD and the GitHub Advisory Database from Check Point Research's 2025 report. Fixed in 2025 and documented by the researcher, with no advisory in OpenAI's own repository, so a small deduction (https://nvd.nist.gov/vuln/detail/CVE-2025-61260; https://research.checkpoint.com/2025/openai-codex-cli-command-injection-vulnerability/)" ], "verdict": "Sandbox on by default on macOS, Linux and Windows, with the network off and `.git` and `.codex` read-only. Pre-1.0 at 0.160.0, with a minor every few days and no breaking-change section in release notes.", "strengths": [ "Sandbox on by default on macOS, Linux and Windows, with the network off and `.git` and `.codex` read-only", "Apache-2.0, with public CI and a JSON Schema for config.toml", "`codex exec --json`, `--output-schema` and `exec resume` for pipelines, plus TypeScript and Python SDKs", "Codex cloud keeps the agent phase offline by default and can limit requests to GET, HEAD and OPTIONS", "Included in ChatGPT Free, and `--oss` runs local models through Ollama or LM Studio with no account" ], "weaknesses": [ "Pre-1.0 at 0.160.0, with a minor every few days and no breaking-change section in release notes", "Anonymous usage metrics and feedback collection on by default", "Over 5,000 open issues", "CVE-2025-61260 (critical) has no advisory in OpenAI's own repository", "Cloud tasks and code review need a ChatGPT plan, not an API key" ], "agentNotes": [ "Run `codex exec --json` in pipelines, with `--output-schema` when the final message has to parse", "Keep the default sandbox. `--yolo` removes both the sandbox and approvals", "Set `network_access = true` under `[sandbox_workspace_write]` only for tasks that need it. Network is off by default", "Set `[analytics] enabled = false` and `[feedback] enabled = false` in config.toml to keep usage data local", "Pin the npm version. A 0.x minor lands every few days" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.3", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 73.4 } ], "editorialScores": { "ergonomics": 80, "maintenance": 87, "payments": 60, "reliability": 55, "schema": 90, "security": 82, "transparency": 65 }, "provenanceScore": 100 }, "connect": { "install": "npm i -g @openai/codex # or: brew install --cask codex", "headless": { "run": "codex exec --json \"fix the failing test\"" } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/openai-codex" }, "sameCompany": [ "openai-api", "openai-embeddings", "openai-moderation", "openai-image-api", "openai-sora", "openai-agents-sdk" ], "area": "frameworks", "unitPrices": [ { "item": "ChatGPT Plus", "unit": "month", "usd": 20, "note": "includes Codex local and cloud" }, { "item": "ChatGPT Pro", "unit": "month", "usd": 100, "note": "lowest Pro tier, no five-hour limit" } ], "provenance": { "legalEntity": "OpenAI OpCo, LLC", "domain": "openai.com", "domainRegistered": "2007-01-19", "endpointOnVendorDomain": null, "terms": "https://openai.com/policies/services-agreement/", "privacy": "https://openai.com/policies/privacy-policy/", "statusPage": "https://status.openai.com", "changelog": "https://github.com/openai/codex/releases", "securityTxt": "valid", "checked": "2026-10-01", "notes": [ "The Codex docs moved from developers.openai.com/codex to learn.chatgpt.com (302 redirects on 2 October 2026), and the installer is served from chatgpt.com.", "Legal entity, domain date and security.txt are from the openai-api listing's check of 26 September 2026." ], "score": 100 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/openai-codex.json", "live": { "slug": "openai-codex", "vendorStatus": { "page": "https://status.openai.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-05T00:53:57.208887619Z" }, "versions": [ { "registry": "github", "name": "openai/codex", "version": "rust-v0.160.0", "released": "2026-10-01", "seenAt": "2026-10-04T16:35:27.33031869Z" }, { "registry": "npm", "name": "@openai/codex", "version": "0.160.0", "seenAt": "2026-10-04T16:35:27.077650904Z" } ], "githubStars": 127838, "npmWeekly": 25521694, "securityTxt": { "url": "https://openai.com/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-04T15:15:58.86463118Z" }, "llmsTxt": { "url": "https://learn.chatgpt.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-04T15:18:04.216898809Z" }, "domain": { "domain": "openai.com", "registered": "2007-01-19", "source": "https://rdap.verisign.com/com/v1/domain/openai.com", "checkedAt": "2026-10-04T13:05:02.32020521Z" }, "updatedAt": "2026-10-05T00:53:57.208887619Z" } }, "b": { "slug": "opencode", "name": "OpenCode", "vendor": "Anomaly", "vendorUrl": "https://opencode.ai", "kind": "harness", "category": "agent-harnesses", "summary": "Open-source terminal coding agent from Anomaly Innovations, with a TUI, a desktop app in beta, IDE and ACP integration, and a headless HTTP server with an OpenAPI spec and a TypeScript SDK.", "url": "https://www.anchorterminal.com/tools/opencode", "markdownUrl": "https://www.anchorterminal.com/tools/opencode.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/opencode.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/opencode.json", "repo": "https://github.com/anomalyco/opencode", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "opencode-ai" }, { "registry": "npm", "name": "@opencode-ai/sdk" } ], "auth": "none", "authNotes": "No account needed. Provider keys go in with `opencode auth login` (stored in ~/.local/share/opencode/auth.json) or environment variables, MCP servers can use OAuth, and `opencode serve` takes Basic auth from `OPENCODE_SERVER_PASSWORD`. With no key it uses free OpenCode Zen models with a public key.", "pricing": "freemium", "pricingNotes": "Free and MIT. You pay your model provider, or OpenCode Zen per token, with prices per million tokens published for every model, or OpenCode Go at $10 a month (Go Plus $40) for a set of open models. Some Zen models are free for a limited time and may use prompts to improve the model.", "priceSummary": "$10 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-01).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 211000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-01" }, "docsUrl": "https://opencode.ai/docs", "openapi": "https://raw.githubusercontent.com/anomalyco/opencode/dev/packages/sdk/openapi.json", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "open-source", "local", "freemium", "typescript", "openapi", "no-card", "no-key", "usage-priced" ], "lastRelease": "2026-09-30", "graded": true, "anchor": { "graded": true, "score": 68, "grade": "B", "agentReady": false, "rank": 134, "ranked": true, "rankOf": 452, "categoryRank": 5, "methodology": "0.3", "run": "2026-10-01", "scores": { "ergonomics": 79, "maintenance": 81, "payments": 60, "reliability": 68, "schema": 88, "security": 60, "transparency": 71 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": -4, "negativeNotes": [ "2026-01-12. GHSA-vxw4-wv6m-9hhh (CVE-2026-22812, 8.8), the HTTP server the TUI started had no authentication, so local processes could run shell commands as the user, fixed in 1.0.216. GHSA-c83v-7274-4vgp (CVE-2026-22813), unsanitised Markdown in the web UI let a malicious page run commands on the machine, fixed in 1.1.10. Fixed, published and more than six months old, -1 each. https://github.com/anomalyco/opencode/security/advisories", "2026-09-24. GHSA-632h-h47v-g4x4 (7.5, no CVE). The server's `/global/upgrade` endpoint accepted any package specifier without checking where the request came from, so a web page could make `opencode serve` install an attacker's npm package and run its scripts. Fixed in 1.18.22. Inside six months, -2. https://github.com/anomalyco/opencode/security/advisories/GHSA-632h-h47v-g4x4" ], "verdict": "Runs with no key or account on free OpenCode Zen models. Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox.", "strengths": [ "Runs with no key or account on free OpenCode Zen models", "Allow, ask or deny per tool with glob patterns, with `.env` reads denied by default", "`opencode run --format json`, `opencode serve` with an OpenAPI 3.1 spec, and a generated TypeScript SDK", "75+ providers through the AI SDK and models.dev, plus local models", "No product telemetry found, and OpenTelemetry export is opt-in" ], "weaknesses": [ "Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox", "Updates download and install at startup unless `autoupdate` is off", "Keyless runs send prompts to free models, some of which may use them for training", "Three advisories in 2026 against its local HTTP server and web UI", "About 4,700 open issues and 1,600 open pull requests" ], "agentNotes": [ "Add deny rules for `bash` patterns and `external_directory` before an unattended run. Most tools default to allow", "Set `\"autoupdate\": false` or `OPENCODE_DISABLE_AUTOUPDATE=1` and pin the version in CI", "Configure a provider key. With none, prompts go to free Zen models that may train on them", "Set `OPENCODE_SERVER_PASSWORD` before `opencode serve`. Without it the server runs unauthenticated", "Use `opencode run --format json` and read the event stream rather than the formatted output" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 2, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.3", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 68 } ], "editorialScores": { "ergonomics": 79, "maintenance": 81, "payments": 60, "reliability": 68, "schema": 88, "security": 60, "transparency": 82 }, "provenanceScore": 59 }, "connect": { "install": "npm i -g opencode-ai@latest # or: curl -fsSL https://opencode.ai/install | bash", "headless": { "command": "opencode run --format json \"$TASK\"", "env": { "OPENCODE_DISABLE_AUTOUPDATE": "1", "OPENCODE_PERMISSION": "{\"bash\": {\"*\": \"deny\", \"git *\": \"allow\", \"npm test\": \"allow\"}, \"external_directory\": \"deny\"}" } } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/opencode" }, "area": "frameworks", "unitPrices": [ { "item": "OpenCode Go", "unit": "month", "usd": 10, "note": "Go Plus is $40 a month" } ], "provenance": { "legalEntity": "Anomaly Innovations, Inc.", "domain": "opencode.ai", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "https://opencode.ai/legal/terms-of-service", "privacy": "https://opencode.ai/legal/privacy-policy", "statusPage": "", "changelog": "https://opencode.ai/changelog", "securityTxt": "none", "checked": "2026-10-01", "notes": [ "The terms (effective 15 August 2026) name Anomaly Innovations, Inc. The privacy policy is effective 6 March 2026, with help@anoma.ly as the contact.", "opencode.ai/.well-known/security.txt returns 404. SECURITY.md points to GitHub private reporting and security@anoma.ly.", "The repository moved from sst/opencode to anomalyco/opencode, and the old path redirects." ], "score": 59 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/opencode.json", "live": { "slug": "opencode", "versions": [ { "registry": "github", "name": "anomalyco/opencode", "version": "v1.18.34", "released": "2026-09-30", "seenAt": "2026-10-04T16:35:50.008649469Z" }, { "registry": "npm", "name": "@opencode-ai/sdk", "version": "1.18.34", "seenAt": "2026-10-04T16:35:48.480232858Z" }, { "registry": "npm", "name": "opencode-ai", "version": "1.18.34", "seenAt": "2026-10-04T16:35:47.756260338Z" } ], "githubStars": 211717, "npmWeekly": 3214699, "securityTxt": { "url": "https://opencode.ai/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-04T15:16:00.878836941Z" }, "domain": { "domain": "opencode.ai", "registered": "2022-12-07", "source": "https://rdap.identitydigital.services/rdap/domain/opencode.ai", "checkedAt": "2026-10-04T13:08:49.460678183Z" }, "pages": [ { "url": "https://opencode.ai/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-04T15:46:26.085908935Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "de27126a88fa" }, { "url": "https://opencode.ai/legal/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-04T15:46:28.272573663Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "be82d391bf89" }, { "url": "https://opencode.ai/legal/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-10-04T15:46:30.257750648Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "63cbae74f05e" } ], "updatedAt": "2026-10-04T16:35:50.008649469Z" } }, "summary": "OpenAI Codex has a score of 73.4 (BB) against OpenCode's 68 (B). Both do agent harness. The largest gap is security \u0026 auth, 22 points." }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/openai-codex-vs-opencode", "json": "https://www.anchorterminal.com/compare/openai-codex-vs-opencode.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/openai-codex-vs-opencode.md", "slim": "https://www.anchorterminal.com/compare/openai-codex-vs-opencode.min.md" }, "markdown": "OpenAI Codex has a score of 73.4 (BB) against OpenCode's 68 (B). Both do agent harness. The largest gap is security \u0026 auth, 22 points.\n\n- OpenAI Codex: grade BB, 73.4/100, rank #58 of 452. Markdown https://www.anchorterminal.com/tools/openai-codex.md · JSON https://www.anchorterminal.com/api/v1/tools/openai-codex.json\n- OpenCode: grade B, 68/100, rank #134 of 452. Markdown https://www.anchorterminal.com/tools/opencode.md · JSON https://www.anchorterminal.com/api/v1/tools/opencode.json\n\n## Which one, for what\n\nPick OpenAI Codex for security \u0026 auth (+22), maintenance \u0026 community (+6), transparency \u0026 trust (+12).\n\nPick OpenCode for reliability (+13).\n\n## Score by category\n\n| Category | Weight | OpenAI Codex | OpenCode | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 55 | 68 | OpenCode +13 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 90 | 88 | OpenAI Codex +2 |\n| Agent ergonomics | 13% (16.2 this run) | 80 | 79 | OpenAI Codex +1 |\n| Security \u0026 auth | 14% (17.5 this run) | 82 | 60 | OpenAI Codex +22 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 87 | 81 | OpenAI Codex +6 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 83 | 71 | OpenAI Codex +12 |\n| Negative events | ≤15 | -2 | -4 | |\n| **Total** | | **73.4 · BB** | **68 · B** | |\n\n## Facts side by side\n\n| Fact | OpenAI Codex | OpenCode |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | OpenAI | Anomaly |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | OAuth or key | None |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | Apache-2.0 (Codex CLI, its Rust crates and the TypeScript and Python SDKs). Codex cloud is a hosted service under OpenAI's terms | MIT |\n| Tools exposed | none | none |\n| Context cost (tools/list) | n/a | n/a |\n| p95 latency | not measured yet | not measured yet |\n| Availability (30d) | not measured yet | not measured yet |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | no |\n| MCP registry | not listed | not listed |\n| Last release | 2026-10-01 | 2026-09-30 |\n| Popularity | 126k stars | 211k stars |\n| Agent reviews | 3/5 (2) | 2/5 (2) |\n\n## Verdicts\n\n**OpenAI Codex.** Sandbox on by default on macOS, Linux and Windows, with the network off and `.git` and `.codex` read-only. Pre-1.0 at 0.160.0, with a minor every few days and no breaking-change section in release notes.\n\n**OpenCode.** Runs with no key or account on free OpenCode Zen models. Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox.\n\n## Before you call either\n\n### OpenAI Codex\n\n1. Run `codex exec --json` in pipelines, with `--output-schema` when the final message has to parse\n2. Keep the default sandbox. `--yolo` removes both the sandbox and approvals\n3. Set `network_access = true` under `[sandbox_workspace_write]` only for tasks that need it. Network is off by default\n4. Set `[analytics] enabled = false` and `[feedback] enabled = false` in config.toml to keep usage data local\n5. Pin the npm version. A 0.x minor lands every few days\n\n### OpenCode\n\n1. Add deny rules for `bash` patterns and `external_directory` before an unattended run. Most tools default to allow\n2. Set `\"autoupdate\": false` or `OPENCODE_DISABLE_AUTOUPDATE=1` and pin the version in CI\n3. Configure a provider key. With none, prompts go to free Zen models that may train on them\n4. Set `OPENCODE_SERVER_PASSWORD` before `opencode serve`. Without it the server runs unauthenticated\n5. Use `opencode run --format json` and read the event stream rather than the formatted output\n\n## Other comparisons with OpenAI Codex or OpenCode\n\n- [Aider vs OpenAI Codex](https://www.anchorterminal.com/compare/aider-vs-openai-codex.md)\n- [Aider vs OpenCode](https://www.anchorterminal.com/compare/aider-vs-opencode.md)\n- [Claude Code vs OpenAI Codex](https://www.anchorterminal.com/compare/claude-code-vs-openai-codex.md)\n- [Claude Code vs OpenCode](https://www.anchorterminal.com/compare/claude-code-vs-opencode.md)\n- [Cline vs OpenAI Codex](https://www.anchorterminal.com/compare/cline-vs-openai-codex.md)\n- [Cline vs OpenCode](https://www.anchorterminal.com/compare/cline-vs-opencode.md)\n- [Cursor CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/cursor-cli-vs-openai-codex.md)\n- [Cursor CLI vs OpenCode](https://www.anchorterminal.com/compare/cursor-cli-vs-opencode.md)\n- [Gemini CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/gemini-cli-vs-openai-codex.md)\n- [Gemini CLI vs OpenCode](https://www.anchorterminal.com/compare/gemini-cli-vs-opencode.md)\n- [GitHub Copilot CLI vs OpenAI Codex](https://www.anchorterminal.com/compare/github-copilot-cli-vs-openai-codex.md)\n- [GitHub Copilot CLI vs OpenCode](https://www.anchorterminal.com/compare/github-copilot-cli-vs-opencode.md)\n- [goose vs OpenAI Codex](https://www.anchorterminal.com/compare/goose-vs-openai-codex.md)\n- [goose vs OpenCode](https://www.anchorterminal.com/compare/goose-vs-opencode.md)\n- [OpenAI Codex vs OpenHands](https://www.anchorterminal.com/compare/openai-codex-vs-openhands.md)\n- [OpenCode vs OpenHands](https://www.anchorterminal.com/compare/opencode-vs-openhands.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-05", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.3", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "OpenAI Codex vs OpenCode", "url": "" } ], "description": "OpenAI Codex has a score of 73.4 (BB) against OpenCode's 68 (B). Both do agent harness. The largest gap is security \u0026 auth, 22 points. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "OpenAI Codex BB 73.4", "OpenCode B 68", "scores" ], "h1": "OpenAI Codex vs OpenCode", "image": "https://www.anchorterminal.com/assets/og/compare-openai-codex-vs-opencode.png", "path": "/compare/openai-codex-vs-opencode", "published": "2026-10-01", "section": "tools", "title": "OpenAI Codex vs OpenCode for AI agents, BB 73.4 vs B 68", "toc": null, "updated": "2026-10-05", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-opencode" }, "tokens": { "markdown": 1500, "slim": 330 }, "version": 1 }