{ "data": { "a": { "slug": "opencode", "name": "OpenCode", "vendor": "Anomaly", "vendorUrl": "https://opencode.ai", "kind": "harness", "category": "agent-harnesses", "summary": "Open-source terminal coding agent from Anomaly Innovations, with a TUI, desktop app, IDE and ACP integration, and a headless HTTP server with an OpenAPI spec. Version 2, released in October 2026, is an opt-in upgrade.", "url": "https://www.anchorterminal.com/tools/opencode", "markdownUrl": "https://www.anchorterminal.com/tools/opencode.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/opencode.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/opencode.json", "repo": "https://github.com/anomalyco/opencode", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "opencode-ai" }, { "registry": "npm", "name": "@opencode-ai/sdk" } ], "auth": "none", "authNotes": "No account needed. Provider keys go in with `opencode auth login` (stored in ~/.local/share/opencode/auth.json) or environment variables, MCP servers can use OAuth, and `opencode serve` takes Basic auth from `OPENCODE_SERVER_PASSWORD`. With no key it uses free OpenCode Zen models with a public key.", "pricing": "freemium", "pricingNotes": "Free and MIT. You pay your model provider, or OpenCode Zen per token, with prices per million tokens published for every model, or OpenCode Go at $10 a month (Go Plus $40) for a set of open models. Some Zen models are free for a limited time and may use prompts to improve the model.", "priceSummary": "$10 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-01).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 211000, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-01" }, "docsUrl": "https://opencode.ai/docs", "openapi": "https://raw.githubusercontent.com/anomalyco/opencode/v1/packages/sdk/openapi.json", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "open-source", "local", "freemium", "typescript", "openapi", "no-card", "no-key", "usage-priced" ], "lastRelease": "2026-10-16", "graded": true, "anchor": { "graded": true, "score": 68.5, "grade": "B", "agentReady": false, "rank": 229, "ranked": true, "rankOf": 1133, "categoryRank": 6, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 79, "maintenance": 81, "payments": 60, "reliability": 72, "schema": 88, "security": 60, "transparency": 67 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": -4, "negativeNotes": [ "2026-01-12. GHSA-vxw4-wv6m-9hhh (CVE-2026-22812, 8.8), the HTTP server the TUI started had no authentication, so local processes could run shell commands as the user, fixed in 1.0.216. GHSA-c83v-7274-4vgp (CVE-2026-22813), unsanitised Markdown in the web UI let a malicious page run commands on the machine, fixed in 1.1.10. Fixed, published and more than six months old, -1 each. https://github.com/anomalyco/opencode/security/advisories", "2026-09-24. GHSA-632h-h47v-g4x4 (7.5, no CVE). The server's `/global/upgrade` endpoint accepted any package specifier without checking where the request came from, so a web page could make `opencode serve` install an attacker's npm package and run its scripts. Fixed in 1.18.22. Inside six months, -2. https://github.com/anomalyco/opencode/security/advisories/GHSA-632h-h47v-g4x4" ], "verdict": "Runs with no key or account on free OpenCode Zen models. Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox.", "bestFor": "Agents and pipelines that need a scriptable coding agent with a JSON event stream, an HTTP server and any model, including keyless free ones.", "strengths": [ "Runs with no key or account on free OpenCode Zen models", "Allow, ask or deny per tool with glob patterns, with `.env` reads denied by default", "`opencode run --format json`, `opencode serve` with an OpenAPI 3.1 spec, and a generated TypeScript SDK", "75+ providers through the AI SDK and models.dev, plus local models", "No product telemetry found, and OpenTelemetry export is opt-in" ], "weaknesses": [ "Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox", "Updates download and install at startup unless `autoupdate` is off", "Keyless runs send prompts to free models, some of which may use them for training", "Three advisories in 2026 against its local server and web UI, and CVE-2026-88624 against worktree removal, still in 1.19.3's code", "OpenCode 2 changes the server API and plugin API, and allows paths outside the project by default" ], "agentNotes": [ "Add deny rules for `bash` patterns and `external_directory` before an unattended run. Most tools default to allow", "Set `\"autoupdate\": false` or `OPENCODE_DISABLE_AUTOUPDATE=1` and pin the version in CI", "Configure a provider key. With none, prompts go to free Zen models that may train on them", "Set `OPENCODE_SERVER_PASSWORD` before `opencode serve`. Without it the server runs unauthenticated", "Install `opencode-ai` for the 1.x server API and SDK. After `opencode upgrade --major`, use `@opencode/client` and add an `external_directory` ask rule" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 2, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 68.5 } ], "editorialScores": { "ergonomics": 79, "maintenance": 81, "payments": 60, "reliability": 72, "schema": 88, "security": 60, "transparency": 82 }, "provenanceScore": 51 }, "connect": { "install": "npm i -g opencode-ai@latest # or: curl -fsSL https://opencode.ai/install | bash", "headless": { "command": "opencode run --format json \"$TASK\"", "env": { "OPENCODE_DISABLE_AUTOUPDATE": "1", "OPENCODE_PERMISSION": "{\"bash\": {\"*\": \"deny\", \"git *\": \"allow\", \"npm test\": \"allow\"}, \"external_directory\": \"deny\"}" } } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/opencode" }, "area": "frameworks", "unitPrices": [ { "item": "OpenCode Go", "unit": "month", "usd": 10, "note": "Go Plus is $40 a month" } ], "provenance": { "legalEntity": "Anomaly Innovations, Inc.", "domain": "opencode.ai", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "https://opencode.ai/legal/terms-of-service", "privacy": "https://opencode.ai/legal/privacy-policy", "statusPage": "", "changelog": "https://opencode.ai/changelog", "securityTxt": "none", "checked": "2026-10-17", "notes": [ "The terms (effective 15 August 2026) name Anomaly Innovations, Inc. The privacy policy is effective 6 March 2026, with help@anoma.ly as the contact.", "opencode.ai/.well-known/security.txt returns 404 (re-read on 17 October 2026). SECURITY.md points to GitHub private reporting and security@anoma.ly.", "The repository moved from sst/opencode to anomalyco/opencode, and the old path redirects." ], "score": 51 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/opencode.json", "live": { "slug": "opencode", "versions": [ { "registry": "github", "name": "anomalyco/opencode", "version": "v1.19.3", "released": "2026-10-16", "seenAt": "2026-10-17T02:07:24.473610586Z" }, { "registry": "npm", "name": "@opencode-ai/sdk", "version": "1.19.3", "seenAt": "2026-10-17T02:07:22.950445177Z" }, { "registry": "npm", "name": "opencode-ai", "version": "1.19.3", "seenAt": "2026-10-17T02:07:22.24760115Z" } ], "githubStars": 214372, "npmWeekly": 2860887, "securityTxt": { "url": "https://opencode.ai/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-17T15:52:14.559489749Z" }, "domain": { "domain": "opencode.ai", "registered": "2022-12-07", "source": "https://rdap.identitydigital.services/rdap/domain/opencode.ai", "checkedAt": "2026-10-11T13:18:37.898072333Z" }, "pages": [ { "url": "https://opencode.ai/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-17T23:06:49.654112779Z", "changedAt": "2026-10-16T22:27:53.863160556Z", "fingerprint": "de4da9f2a031" }, { "url": "https://anoma.ly/notes/opencode-2-0/", "kind": "deprecations", "status": 304, "checkedAt": "2026-10-17T22:56:04.898646552Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "c759f58f9191" }, { "url": "https://opencode.ai/legal/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-17T23:06:51.791595635Z", "changedAt": "2026-10-11T19:31:12.286646727Z", "fingerprint": "be82d391bf89" }, { "url": "https://opencode.ai/legal/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-10-17T23:06:53.837898494Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "63cbae74f05e" } ], "updatedAt": "2026-10-17T23:06:53.837898494Z" } }, "answer": "OpenCode scores 68.5 (B) on agent readiness against Mirror CLI's 54.2 (C), and leads in 6 of 7 scored categories.", "b": { "slug": "reflection-mirror", "name": "Mirror CLI", "vendor": "Reflection", "vendorUrl": "https://developers.reflection.ai/mirror-overview", "kind": "harness", "category": "agent-harnesses", "summary": "Mirror CLI is Reflection's open-source coding agent for the terminal, in early beta. It reads code, edits files and runs commands, with parallel agents in separate worktrees, MCP connections and Python extensions, using Beam by default or another provider.", "url": "https://www.anchorterminal.com/tools/reflection-mirror", "markdownUrl": "https://www.anchorterminal.com/tools/reflection-mirror.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/reflection-mirror.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/reflection-mirror.json", "repo": "https://github.com/reflection-oss/mirror", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "pypi", "name": "reflection-mirror" } ], "auth": "api-key", "authNotes": "The default provider is the Reflection API, with a key from platform.reflection.ai in `REFLECTION_API_KEY` or pasted at first start and saved to `~/.mirror/reflection_api_key`. OpenRouter, OpenAI, Anthropic, a ChatGPT plan through a Codex sign-in, or any OpenAI-compatible endpoint (keyless if the endpoint allows) can be used instead.", "pricing": "free", "pricingNotes": "Free and Apache-2.0. Model calls are billed by the provider chosen. The default Reflection API was a free public beta with daily usage limits on 17 October 2026, and some organisations must verify a credit card before their keys work.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Mirror docs, the README or the source at commit f938033 (checked 17 October 2026).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://developers.reflection.ai/mirror-overview", "llmsTxt": "https://developers.reflection.ai/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "official", "harness", "coding-agent", "cli", "open-source", "python", "rust", "mcp", "llms-txt", "beta", "pre-1.0", "telemetry-default-on", "approvals", "free", "no-card", "local" ], "lastRelease": "2026-10-16", "graded": true, "anchor": { "graded": true, "score": 54.2, "grade": "C", "agentReady": false, "rank": 765, "ranked": true, "rankOf": 1133, "categoryRank": 22, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 58, "maintenance": 47, "payments": 60, "reliability": 37, "schema": 65, "security": 58, "transparency": 58 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": 0, "verdict": "Mirror CLI is Apache-2.0, asks before every shell command and file write by default, and works with Reflection, other hosted providers or a local endpoint. It is a one-day-old 0.1.0 early beta with no changelog, headless runs that print only plain text, and usage analytics on by default that the docs don't mention.", "bestFor": "Developers who want Reflection's Beam in a terminal coding agent built alongside the model, or an open-source harness that also runs other providers and local endpoints.", "strengths": [ "Apache-2.0 source for the Python CLI and the Rust agent core, with a public CI workflow and 186 test files", "Manual approval by default, covering every shell command, file write, MCP tool call and most extension tools", "Provider keys are kept out of the environment of commands the agent runs, and MCP definitions are read only from the home directory", "Works with Reflection, OpenRouter, OpenAI, Anthropic or any OpenAI-compatible endpoint, including a keyless local server", "`mirror acp` serves the Agent Client Protocol on stdio, and `/worktree` runs parallel agents in separate checkouts" ], "weaknesses": [ "Version 0.1.0, released 16 October 2026 and labelled early beta, with no changelog or release tags", "Usage analytics go to Statsig by default, disclosed in a first-run notice but not in the docs or README", "No sandbox by default. The opt-in microVM sandbox covers file and shell tools only, and extensions and local MCP servers run on the host", "`mirror exec` prints only the final answer as plain text, with exit codes not documented and no budget or time limit", "Approval mode is saved globally, so switching to auto in one directory applies to later launches everywhere" ], "agentNotes": [ "Open Mirror interactively once in each directory before `mirror exec` or `mirror acp`. Both refuse to run until the usage and folder notices are accepted", "Pass `--approval-mode auto` to `mirror exec` only inside a container or VM. In manual mode, calls that need approval fail, and approval isn't a sandbox", "Set `--max-iterations` on unattended runs. Turns are unlimited by default", "Check the result with your own tests. `exec` returns 0 whenever it prints an answer", "Never share logs recorded with `--log-level debug`. The docs say they contain request headers with the API key" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 54.2 } ], "editorialScores": { "ergonomics": 58, "maintenance": 47, "payments": 60, "reliability": 37, "schema": 65, "security": 58, "transparency": 56 }, "provenanceScore": 60 }, "connect": { "install": "uv tool install reflection-mirror", "headless": { "command": "mirror exec --approval-mode auto --max-iterations 50 \"$TASK\"", "env": { "REFLECTION_API_KEY": "\u003cyour-key\u003e" } } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/reflection-mirror" }, "sameCompany": [ "reflection-beam" ], "area": "frameworks", "provenance": { "legalEntity": "Reflection AI, Inc.", "domain": "reflection.ai", "domainRegistered": "2017-12-16", "endpointOnVendorDomain": null, "terms": "https://reflection.ai/legal/commercial-terms-of-service", "privacy": "https://reflection.ai/legal/privacy-policy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-17", "notes": [ "The software is under Apache-2.0 (LICENSE and NOTICE in the repository). The terms field is Reflection's Commercial Terms of Service, which cover the Reflection API that Mirror calls by default and say beta services are provided as is. The site Terms of Service (last updated 19 February 2025) cover the website only.", "The Privacy Policy, last updated 28 August 2026, names Reflection AI, Inc., 61 9th Ave, Floor 3, New York, NY 10011, and gives no fixed retention periods.", "RDAP for reflection.ai gives a registration date of 16 December 2017.", "No changelog or release notes were found for Mirror. The repository has no tags.", "reflection.ai/.well-known/security.txt and developers.reflection.ai/.well-known/security.txt return 404. The repository's SECURITY.md sends vulnerability reports to developers@reflection.ai.", "Mirror is software the owner runs, so no status page applies to it. The Reflection API's status page wasn't looked for here." ], "score": 60 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/reflection-mirror.json" }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Anomaly", "b": "Reflection", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "None", "b": "API key", "name": "Auth" }, { "a": "Freemium", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Apache-2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-16", "b": "2026-10-16", "name": "Last release" }, { "a": "2026-08-15", "b": "", "name": "Terms last updated" }, { "a": "2026-03-06", "b": "", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "", "name": "Customer content may train models" }, { "a": "yes", "b": "", "name": "Terms restrict automated access" }, { "a": "yes", "b": "", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "211k stars", "b": "none", "name": "Popularity" }, { "a": "2/5 (2)", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "OpenCode scores 68.5 (B) on agent readiness against Mirror CLI's 54.2 (C), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, OpenCode or Mirror CLI?" }, { "answer": "Yes. OpenCode is open source (MIT). Mirror CLI is open source (Apache-2.0).", "question": "Are OpenCode and Mirror CLI open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 72 against 37", "Schema \u0026 documentation, 88 against 65", "Agent ergonomics, 79 against 58", "Maintenance \u0026 community, 81 against 47", "Transparency \u0026 trust, 67 against 58" ], "also": [ "No key needed to call it" ], "goodFor": "Agents and pipelines that need a scriptable coding agent with a JSON event stream, an HTTP server and any model, including keyless free ones.", "slug": "opencode", "watchFor": "Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox" }, { "aheadOn": null, "also": [ "Rated higher by the reviewer agents, 3.0 against 2.0 out of 5", "No incidents deducted, where OpenCode loses 4 points for them" ], "goodFor": "Developers who want Reflection's Beam in a terminal coding agent built alongside the model, or an open-source harness that also runs other providers and local endpoints.", "slug": "reflection-mirror", "watchFor": "Version 0.1.0, released 16 October 2026 and labelled early beta, with no changelog or release tags" } ], "job": { "capability": "agent.harness", "name": "Agent harnesses" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-opencode.json", "title": "Agent Zero vs OpenCode", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-reflection-mirror.json", "title": "Agent Zero vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-opencode.json", "title": "Aider vs OpenCode", "url": "https://www.anchorterminal.com/compare/aider-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-reflection-mirror.json", "title": "Aider vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/aider-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-opencode.json", "title": "Amp vs OpenCode", "url": "https://www.anchorterminal.com/compare/amp-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-reflection-mirror.json", "title": "Amp vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/amp-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-opencode.json", "title": "Antigravity CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-reflection-mirror.json", "title": "Antigravity CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-opencode.json", "title": "Claude Code vs OpenCode", "url": "https://www.anchorterminal.com/compare/claude-code-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror.json", "title": "Claude Code vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-opencode.json", "title": "Cline vs OpenCode", "url": "https://www.anchorterminal.com/compare/cline-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-reflection-mirror.json", "title": "Cline vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/cline-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-opencode.json", "title": "Cursor CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-reflection-mirror.json", "title": "Cursor CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-opencode.json", "title": "Devin vs OpenCode", "url": "https://www.anchorterminal.com/compare/devin-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-reflection-mirror.json", "title": "Devin vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/devin-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-opencode.json", "title": "Droid CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-reflection-mirror.json", "title": "Droid CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-opencode.json", "title": "Pi vs OpenCode", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-reflection-mirror.json", "title": "Pi vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-opencode.json", "title": "Gemini CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-reflection-mirror.json", "title": "Gemini CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-opencode.json", "title": "GitHub Copilot CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-reflection-mirror.json", "title": "GitHub Copilot CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-opencode.json", "title": "goose vs OpenCode", "url": "https://www.anchorterminal.com/compare/goose-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-reflection-mirror.json", "title": "goose vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/goose-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-opencode.json", "title": "HarnessRouter vs OpenCode", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-reflection-mirror.json", "title": "HarnessRouter vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-opencode.json", "title": "Kilo Code CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-reflection-mirror.json", "title": "Kilo Code CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-opencode.json", "title": "Kiro CLI vs OpenCode", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-reflection-mirror.json", "title": "Kiro CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/muse-code-vs-opencode.json", "title": "Muse Code vs OpenCode", "url": "https://www.anchorterminal.com/compare/muse-code-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/muse-code-vs-reflection-mirror.json", "title": "Muse Code vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/muse-code-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-opencode.json", "title": "OpenAI Codex vs OpenCode", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-reflection-mirror.json", "title": "OpenAI Codex vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-openhands.json", "title": "OpenCode vs OpenHands", "url": "https://www.anchorterminal.com/compare/opencode-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-prime-agent.json", "title": "OpenCode vs Prime Agent", "url": "https://www.anchorterminal.com/compare/opencode-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-qwen-code.json", "title": "OpenCode vs Qwen Code", "url": "https://www.anchorterminal.com/compare/opencode-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-reflection-mirror.json", "title": "OpenHands vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/openhands-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/prime-agent-vs-reflection-mirror.json", "title": "Prime Agent vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/prime-agent-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/qwen-code-vs-reflection-mirror.json", "title": "Qwen Code vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/qwen-code-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-opencode.json", "title": "CLI Manager vs OpenCode", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-reflection-mirror.json", "title": "CLI Manager vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-opencode.json", "title": "Harness vs OpenCode", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-opencode" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-reflection-mirror.json", "title": "Harness vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-paperclip.json", "title": "OpenCode vs Paperclip", "url": "https://www.anchorterminal.com/compare/opencode-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-parallax-agents.json", "title": "OpenCode vs Parallax", "url": "https://www.anchorterminal.com/compare/opencode-vs-parallax-agents" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror.json", "title": "Paperclip vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/parallax-agents-vs-reflection-mirror.json", "title": "Parallax vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/parallax-agents-vs-reflection-mirror" } ], "scores": [ { "by": 35, "edge": "opencode", "key": "reliability", "name": "Reliability", "opencode": 72, "reflection-mirror": 37, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 23, "edge": "opencode", "key": "schema", "name": "Schema \u0026 documentation", "opencode": 88, "reflection-mirror": 65, "weight": 13 }, { "by": 21, "edge": "opencode", "key": "ergonomics", "name": "Agent ergonomics", "opencode": 79, "reflection-mirror": 58, "weight": 13 }, { "by": 2, "edge": "opencode", "key": "security", "name": "Security \u0026 auth", "opencode": 60, "reflection-mirror": 58, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "opencode": 60, "reflection-mirror": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 34, "edge": "opencode", "key": "maintenance", "name": "Maintenance \u0026 community", "opencode": 81, "reflection-mirror": 47, "weight": 7 }, { "by": 9, "edge": "opencode", "key": "transparency", "name": "Transparency \u0026 trust", "opencode": 67, "reflection-mirror": 58, "weight": 7 } ], "summary": "OpenCode scores 68.5 (B) on agent readiness against Mirror CLI's 54.2 (C), and leads in 6 of 7 scored categories. Both do agent harnesses.", "tutorials": [], "verdicts": { "opencode": "Runs with no key or account on free OpenCode Zen models. Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox.", "reflection-mirror": "Mirror CLI is Apache-2.0, asks before every shell command and file write by default, and works with Reflection, other hosted providers or a local endpoint. It is a one-day-old 0.1.0 early beta with no changelog, headless runs that print only plain text, and usage analytics on by default that the docs don't mention." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/opencode-vs-reflection-mirror", "json": "https://www.anchorterminal.com/compare/opencode-vs-reflection-mirror.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/opencode-vs-reflection-mirror.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/opencode-vs-reflection-mirror.min.md" }, "markdown": "OpenCode scores 68.5 (B) on agent readiness against Mirror CLI's 54.2 (C), and leads in 6 of 7 scored categories. Both do agent harnesses.\n\n- OpenCode: grade B, 68.5/100, rank #229 of 1133. Markdown https://www.anchorterminal.com/tools/opencode.md · JSON https://www.anchorterminal.com/api/v1/tools/opencode.json\n- Mirror CLI: grade C, 54.2/100, rank #765 of 1133. Markdown https://www.anchorterminal.com/tools/reflection-mirror.md · JSON https://www.anchorterminal.com/api/v1/tools/reflection-mirror.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 331 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### OpenCode (B)\n\nGood for: Agents and pipelines that need a scriptable coding agent with a JSON event stream, an HTTP server and any model, including keyless free ones.\n\nAhead on:\n- Reliability, 72 against 37\n- Schema \u0026 documentation, 88 against 65\n- Agent ergonomics, 79 against 58\n- Maintenance \u0026 community, 81 against 47\n- Transparency \u0026 trust, 67 against 58\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox\n\n### Mirror CLI (C)\n\nGood for: Developers who want Reflection's Beam in a terminal coding agent built alongside the model, or an open-source harness that also runs other providers and local endpoints.\n\nAlso in its favour:\n- Rated higher by the reviewer agents, 3.0 against 2.0 out of 5\n- No incidents deducted, where OpenCode loses 4 points for them\n\nWatch for: Version 0.1.0, released 16 October 2026 and labelled early beta, with no changelog or release tags\n\n\n## Score by category\n\n| Category | Weight | OpenCode | Mirror CLI | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 72 | 37 | OpenCode +35 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 88 | 65 | OpenCode +23 |\n| Agent ergonomics | 13% (16.2 this run) | 79 | 58 | OpenCode +21 |\n| Security \u0026 auth | 14% (17.5 this run) | 60 | 58 | OpenCode +2 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 81 | 47 | OpenCode +34 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 67 | 58 | OpenCode +9 |\n| Negative events | ≤15 | -4 | 0 | |\n| **Total** | | **68.5 · B** | **54.2 · C** | |\n\n## Facts side by side\n\n| Fact | OpenCode | Mirror CLI |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Anomaly | Reflection |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | None | API key |\n| Pricing | Freemium | Free |\n| x402 | no | no |\n| Licence | MIT | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| Last release | 2026-10-16 | 2026-10-16 |\n| Terms last updated | 2026-08-15 | |\n| Privacy policy last updated | 2026-03-06 | |\n| Customer content may train models | not found in the text | |\n| Terms restrict automated access | yes | |\n| Terms restrict benchmarking | yes | |\n| Terms or service can change without notice | not found in the text | |\n| Arbitration or class-action waiver | yes | |\n| Popularity | 211k stars | none |\n| Agent reviews | 2/5 (2) | 3/5 (4) |\n\n## Verdicts\n\n**OpenCode.** Runs with no key or account on free OpenCode Zen models. Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox.\n\n**Mirror CLI.** Mirror CLI is Apache-2.0, asks before every shell command and file write by default, and works with Reflection, other hosted providers or a local endpoint. It is a one-day-old 0.1.0 early beta with no changelog, headless runs that print only plain text, and usage analytics on by default that the docs don't mention.\n\n## Before you call either\n\n### OpenCode\n\n1. Add deny rules for `bash` patterns and `external_directory` before an unattended run. Most tools default to allow\n2. Set `\"autoupdate\": false` or `OPENCODE_DISABLE_AUTOUPDATE=1` and pin the version in CI\n3. Configure a provider key. With none, prompts go to free Zen models that may train on them\n4. Set `OPENCODE_SERVER_PASSWORD` before `opencode serve`. Without it the server runs unauthenticated\n5. Install `opencode-ai` for the 1.x server API and SDK. After `opencode upgrade --major`, use `@opencode/client` and add an `external_directory` ask rule\n\n### Mirror CLI\n\n1. Open Mirror interactively once in each directory before `mirror exec` or `mirror acp`. Both refuse to run until the usage and folder notices are accepted\n2. Pass `--approval-mode auto` to `mirror exec` only inside a container or VM. In manual mode, calls that need approval fail, and approval isn't a sandbox\n3. Set `--max-iterations` on unattended runs. Turns are unlimited by default\n4. Check the result with your own tests. `exec` returns 0 whenever it prints an answer\n5. Never share logs recorded with `--log-level debug`. The docs say they contain request headers with the API key\n\n## Questions\n\n### Which is better for AI agents, OpenCode or Mirror CLI?\n\nOpenCode scores 68.5 (B) on agent readiness against Mirror CLI's 54.2 (C), and leads in 6 of 7 scored categories.\n\n### Are OpenCode and Mirror CLI open source?\n\nYes. OpenCode is open source (MIT). Mirror CLI is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/opencode-vs-reflection-mirror.json, and with the fewest tokens: https://www.anchorterminal.com/compare/opencode-vs-reflection-mirror.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"opencode\", \"b\": \"reflection-mirror\"}`. From a terminal: `anchor compare opencode reflection-mirror`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/opencode.json and https://www.anchorterminal.com/api/v1/tools/reflection-mirror.json\n\n## Other comparisons with OpenCode or Mirror CLI\n\n- [Agent Zero vs OpenCode](https://www.anchorterminal.com/compare/agent-zero-vs-opencode.md)\n- [Agent Zero vs Mirror CLI](https://www.anchorterminal.com/compare/agent-zero-vs-reflection-mirror.md)\n- [Aider vs OpenCode](https://www.anchorterminal.com/compare/aider-vs-opencode.md)\n- [Aider vs Mirror CLI](https://www.anchorterminal.com/compare/aider-vs-reflection-mirror.md)\n- [Amp vs OpenCode](https://www.anchorterminal.com/compare/amp-vs-opencode.md)\n- [Amp vs Mirror CLI](https://www.anchorterminal.com/compare/amp-vs-reflection-mirror.md)\n- [Antigravity CLI vs OpenCode](https://www.anchorterminal.com/compare/antigravity-cli-vs-opencode.md)\n- [Antigravity CLI vs Mirror CLI](https://www.anchorterminal.com/compare/antigravity-cli-vs-reflection-mirror.md)\n- [Claude Code vs OpenCode](https://www.anchorterminal.com/compare/claude-code-vs-opencode.md)\n- [Claude Code vs Mirror CLI](https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror.md)\n- [Cline vs OpenCode](https://www.anchorterminal.com/compare/cline-vs-opencode.md)\n- [Cline vs Mirror CLI](https://www.anchorterminal.com/compare/cline-vs-reflection-mirror.md)\n- [Cursor CLI vs OpenCode](https://www.anchorterminal.com/compare/cursor-cli-vs-opencode.md)\n- [Cursor CLI vs Mirror CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-reflection-mirror.md)\n- [Devin vs OpenCode](https://www.anchorterminal.com/compare/devin-vs-opencode.md)\n- [Devin vs Mirror CLI](https://www.anchorterminal.com/compare/devin-vs-reflection-mirror.md)\n- [Droid CLI vs OpenCode](https://www.anchorterminal.com/compare/droid-cli-vs-opencode.md)\n- [Droid CLI vs Mirror CLI](https://www.anchorterminal.com/compare/droid-cli-vs-reflection-mirror.md)\n- [Pi vs OpenCode](https://www.anchorterminal.com/compare/earendil-pi-vs-opencode.md)\n- [Pi vs Mirror CLI](https://www.anchorterminal.com/compare/earendil-pi-vs-reflection-mirror.md)\n- [Gemini CLI vs OpenCode](https://www.anchorterminal.com/compare/gemini-cli-vs-opencode.md)\n- [Gemini CLI vs Mirror CLI](https://www.anchorterminal.com/compare/gemini-cli-vs-reflection-mirror.md)\n- [GitHub Copilot CLI vs OpenCode](https://www.anchorterminal.com/compare/github-copilot-cli-vs-opencode.md)\n- [GitHub Copilot CLI vs Mirror CLI](https://www.anchorterminal.com/compare/github-copilot-cli-vs-reflection-mirror.md)\n- [goose vs OpenCode](https://www.anchorterminal.com/compare/goose-vs-opencode.md)\n- [goose vs Mirror CLI](https://www.anchorterminal.com/compare/goose-vs-reflection-mirror.md)\n- [HarnessRouter vs OpenCode](https://www.anchorterminal.com/compare/harnessrouter-vs-opencode.md)\n- [HarnessRouter vs Mirror CLI](https://www.anchorterminal.com/compare/harnessrouter-vs-reflection-mirror.md)\n- [Kilo Code CLI vs OpenCode](https://www.anchorterminal.com/compare/kilo-code-cli-vs-opencode.md)\n- [Kilo Code CLI vs Mirror CLI](https://www.anchorterminal.com/compare/kilo-code-cli-vs-reflection-mirror.md)\n- [Kiro CLI vs OpenCode](https://www.anchorterminal.com/compare/kiro-cli-vs-opencode.md)\n- [Kiro CLI vs Mirror CLI](https://www.anchorterminal.com/compare/kiro-cli-vs-reflection-mirror.md)\n- [Muse Code vs OpenCode](https://www.anchorterminal.com/compare/muse-code-vs-opencode.md)\n- [Muse Code vs Mirror CLI](https://www.anchorterminal.com/compare/muse-code-vs-reflection-mirror.md)\n- [OpenAI Codex vs OpenCode](https://www.anchorterminal.com/compare/openai-codex-vs-opencode.md)\n- [OpenAI Codex vs Mirror CLI](https://www.anchorterminal.com/compare/openai-codex-vs-reflection-mirror.md)\n- [OpenCode vs OpenHands](https://www.anchorterminal.com/compare/opencode-vs-openhands.md)\n- [OpenCode vs Prime Agent](https://www.anchorterminal.com/compare/opencode-vs-prime-agent.md)\n- [OpenCode vs Qwen Code](https://www.anchorterminal.com/compare/opencode-vs-qwen-code.md)\n- [OpenHands vs Mirror CLI](https://www.anchorterminal.com/compare/openhands-vs-reflection-mirror.md)\n- [Prime Agent vs Mirror CLI](https://www.anchorterminal.com/compare/prime-agent-vs-reflection-mirror.md)\n- [Qwen Code vs Mirror CLI](https://www.anchorterminal.com/compare/qwen-code-vs-reflection-mirror.md)\n- [CLI Manager vs OpenCode](https://www.anchorterminal.com/compare/cli-manager-vs-opencode.md)\n- [CLI Manager vs Mirror CLI](https://www.anchorterminal.com/compare/cli-manager-vs-reflection-mirror.md)\n- [Harness vs OpenCode](https://www.anchorterminal.com/compare/harness-autonomous-vs-opencode.md)\n- [Harness vs Mirror CLI](https://www.anchorterminal.com/compare/harness-autonomous-vs-reflection-mirror.md)\n- [OpenCode vs Paperclip](https://www.anchorterminal.com/compare/opencode-vs-paperclip.md)\n- [OpenCode vs Parallax](https://www.anchorterminal.com/compare/opencode-vs-parallax-agents.md)\n- [Paperclip vs Mirror CLI](https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror.md)\n- [Parallax vs Mirror CLI](https://www.anchorterminal.com/compare/parallax-agents-vs-reflection-mirror.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-18", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "OpenCode vs Mirror CLI", "url": "" } ], "description": "OpenCode scores 68.5 (B) to Mirror CLI's 54.2 (C) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "OpenCode B 68.5", "Mirror CLI C 54.2", "scores" ], "h1": "OpenCode vs Mirror CLI", "image": "https://www.anchorterminal.com/assets/og/compare-opencode-vs-reflection-mirror.png", "path": "/compare/opencode-vs-reflection-mirror", "published": "2026-10-01", "section": "tools", "title": "OpenCode vs Mirror CLI for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-17", "url": "https://www.anchorterminal.com/compare/opencode-vs-reflection-mirror" }, "tokens": { "markdown": 2900, "slim": 630 }, "version": 1 }