{ "data": { "a": { "slug": "openhands", "name": "OpenHands", "vendor": "All Hands AI", "vendorUrl": "https://openhands.dev", "kind": "harness", "category": "agent-harnesses", "summary": "Open-source coding agent with a self-hosted web interface, local and remote execution, and scheduled or webhook-driven automation.", "url": "https://www.anchorterminal.com/tools/openhands", "markdownUrl": "https://www.anchorterminal.com/tools/openhands.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/openhands.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/openhands.json", "dns": "openhands.grade.anchorterminal.com", "repo": "https://github.com/OpenHands/OpenHands", "license": "MIT (Agent Canvas, SDK, tools and Agent Server). OpenHands Cloud is a hosted service", "transports": [], "packages": [ { "registry": "npm", "name": "@openhands/agent-canvas" }, { "registry": "pypi", "name": "openhands-sdk" }, { "registry": "pypi", "name": "openhands-agent-server" }, { "registry": "oci", "name": "ghcr.io/openhands/agent-canvas" } ], "auth": "mixed", "authNotes": "Local installs bind to 127.0.0.1 and inject a session key into the page. Public mode (`--public`) needs `LOCAL_BACKEND_API_KEY`, sent as `X-Session-API-Key` on every API call. Model credentials are your own provider keys or an OpenHands LLM key, and OpenHands Cloud has its own sign-in and API keys.", "pricing": "freemium", "pricingNotes": "Agent Canvas, the SDK and the Agent Server are free and MIT. Teams is $500 a month for up to 10 users (plus $50 a month a seat), self-hosted, with a 30-day trial and a cap of 5,000 sessions a month. Enterprise is priced by sales. The OpenHands LLM provider bills model calls at provider rates with no markup per the docs, and two DeepSeek models are free on app.all-hands.dev.", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the pricing page or the source (checked 2026-10-01).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 89800, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-01" }, "docsUrl": "https://docs.openhands.dev", "llmsTxt": "https://docs.openhands.dev/llms.txt", "openapi": "https://raw.githubusercontent.com/OpenHands/docs/main/openapi/agent-sdk.json", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "open-source", "local", "self-hosted", "hosted", "freemium", "python", "typescript", "docker", "openapi", "llms-txt", "telemetry-default-on" ], "lastRelease": "2026-10-28", "graded": true, "anchor": { "graded": true, "score": 70.3, "grade": "BB", "agentReady": true, "rank": 206, "ranked": true, "rankOf": 1486, "categoryRank": 5, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 78, "maintenance": 85, "payments": 60, "reliability": 90, "schema": 90, "security": 64, "transparency": 67 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-01" }, "negative": -7, "negativeNotes": [ "Current behaviour, re-checked 2026-11-01. Agent Canvas sends a `canvas_install` event with platform, user agent, referrer and origin to PostHog through OpenHands' proxy at z.openhands.dev on first use, \"regardless of consent\", and the consent banner's box is ticked by default. The source comment says the proxy is there to get past ad blockers, and no user-facing doc mentions the early event. Undisclosed telemetry, -3. https://github.com/OpenHands/OpenHands/blob/main/src/services/telemetry.ts", "2026-03-23. GHSA-7h8w-hj9j-8rjw (CVE-2026-33718, 7.6 in the advisory, 9.9 at NVD), command injection through the `path` parameter of the git diff endpoint let an authenticated user run commands in the agent sandbox. Fixed in 1.5.0 and published, over seven months old, -1. https://github.com/OpenHands/OpenHands/security/advisories/GHSA-7h8w-hj9j-8rjw", "2026-08-06. CVE-2026-19022 (6.3), command injection in `initialize_repo` in the pull request resolver of OpenHands 0.62.0 and earlier, the V0 line the V1 rewrite replaced. No GitHub advisory found, -1. https://nvd.nist.gov/vuln/detail/CVE-2026-19022", "2026-10-26. CVE-2026-112346 (CVSS 3.1 9.8, published by VulnCheck). Before SDK 1.52.0 the DockerWorkspace and Apptainer launchers bound the sandbox Agent Server to 0.0.0.0 with no session key, so anyone who could reach the published port could run shell commands as root in the sandbox and read its secrets. Fixed on 3 October (commit 7b66584, \"publish Docker ports on loopback\") and released in 1.52.0 on 5 October. Fixed, inside six months, -2. https://nvd.nist.gov/vuln/detail/CVE-2026-112346" ], "verdict": "A self-hosted coding agent with a typed SDK, an Agent Server API and a Docker container per conversation on request. Agent Canvas still starts with confirmation off on the host's filesystem, sends an install event before asking consent, and a critical SDK sandbox flaw fixed in October was published by a third party.", "bestFor": "Teams that want to self-host a coding agent with a web UI, per-conversation Docker sandboxes and scheduled or webhook automations, or embed the agent through a Python SDK and REST API.", "strengths": [ "A Docker container per conversation with `OH_CONVERSATION_RUNTIME=docker`, each with its own Agent Server", "Typed Python SDK and an Agent Server REST API with an OpenAPI 3.1 spec, plus a TypeScript client", "Confirmation policies (always, never, at or above a risk level) with LLM, Invariant and GraySwan risk analysers", "Any model through LiteLLM, local ones included, and MCP over stdio, SSE and streamable HTTP with OAuth", "29 Agent Canvas and 33 SDK releases from 3 August to 28 October 2026, and the SDK kept its stated removal deadline on 28 October" ], "weaknesses": [ "Confirmation mode is off by default in Agent Canvas, and the npm install gives the agent the host's whole filesystem", "One anonymous install event goes to PostHog before the consent prompt, whose opt-in box is pre-ticked", "CVE-2026-112346 (9.8), an unauthenticated sandbox server in SDK workspaces before 1.52.0, was published by VulnCheck with no OpenHands advisory found", "openhands.dev's security.txt expired on 28 October 2026, and the Canvas CHANGELOG.md stops at 1.0.0-alpha.2", "The privacy policy (3 September 2025) allows training on Cloud content and gives no retention period" ], "agentNotes": [ "Set `AGENT_CANVAS_DISABLE_TELEMETRY=1` and `DO_NOT_TRACK=1` before the first start", "Start Canvas with `OH_CONVERSATION_RUNTIME=docker` or use the Docker image. The npm install runs the agent on the host", "Turn on confirmation mode with a risk threshold. Canvas starts with it off", "Pin openhands-sdk and openhands-workspace at 1.52.0 or later so DockerWorkspace binds to loopback, and set `OH_SESSION_API_KEYS_0` on any reachable Agent Server", "Use the SDK or the Agent Server API for headless runs. The `openhands --headless` CLI is no longer maintained" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 70.3 } ], "editorialScores": { "ergonomics": 78, "maintenance": 85, "payments": 60, "reliability": 90, "schema": 90, "security": 64, "transparency": 67 }, "provenanceScore": 67, "checked": { "categories": { "ergonomics": "2026-11-01", "maintenance": "2026-11-01", "payments": "2026-11-01", "reliability": "2026-11-01", "schema": "2026-11-01", "security": "2026-11-01", "transparency": "2026-11-01" }, "last": "2026-11-01", "lastMoved": "2026-11-01", "oldest": "2026-11-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install -g @openhands/agent-canvas # Node 24+ and uv; or: pip install openhands-sdk openhands-tools", "headless": { "env": { "DO_NOT_TRACK": "1", "LLM_API_KEY": "\u003ckey\u003e", "LLM_MODEL": "\u003cprovider/model\u003e" }, "sdk": "pip install openhands-sdk openhands-tools", "server": "OH_CONVERSATION_RUNTIME=docker AGENT_CANVAS_DISABLE_TELEMETRY=1 agent-canvas --backend-only" } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/openhands" }, "area": "frameworks", "provenance": { "legalEntity": "All Hands AI", "domain": "openhands.dev", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "https://openhands.dev/privacy", "statusPage": "", "changelog": "https://github.com/OpenHands/OpenHands/releases", "securityTxt": "expired", "checked": "2026-11-01", "notes": [ "The privacy policy (effective 3 September 2025, re-read on 1 November 2026) names All Hands AI, 24 Oak Street, Unit 2, Cambridge, MA 02139. We found no terms of service link on the pricing or privacy pages.", "openhands.dev/.well-known/security.txt lists security@openhands.dev and a responsible-disclosure policy, and expired on 2026-10-28T17:00Z (re-read on 1 November 2026). The policy page still loads.", "The SDK's LLM proxy still runs on llm-proxy.app.all-hands.dev, the company's older domain, and the free models are served from app.all-hands.dev.", "We didn't check for a status page or the domain's registration date." ], "score": 67 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/openhands.json", "live": { "slug": "openhands", "versions": [ { "registry": "github", "name": "OpenHands/OpenHands", "version": "v1.37.0", "released": "2026-11-06", "seenAt": "2026-11-06T23:52:55.644351263Z" }, { "registry": "npm", "name": "@openhands/agent-canvas", "version": "1.37.0", "seenAt": "2026-11-06T23:52:52.704356412Z" }, { "registry": "pypi", "name": "openhands-agent-server", "version": "1.60.2", "released": "2026-11-06", "seenAt": "2026-11-06T23:52:53.780155639Z" }, { "registry": "pypi", "name": "openhands-sdk", "version": "1.60.2", "released": "2026-11-06", "seenAt": "2026-11-06T23:52:53.629791716Z" } ], "githubStars": 92836, "npmWeekly": 5706, "pypiWeekly": 728008, "securityTxt": { "url": "https://openhands.dev/.well-known/security.txt", "state": "expired", "expires": "2026-10-28T17:00:00.000Z", "checkedAt": "2026-11-07T16:01:03.79870525Z" }, "llmsTxt": { "url": "https://docs.openhands.dev/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:33:31.427453135Z" }, "domain": { "domain": "openhands.dev", "registered": "2025-07-23", "source": "https://pubapi.registry.google/rdap/domain/openhands.dev", "checkedAt": "2026-11-01T14:07:01.187961218Z" }, "pages": [ { "url": "https://openhands.dev/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:15:28.234719589Z", "changedAt": "2026-11-07T14:15:28.234719589Z", "fingerprint": "67ba1787cd6e" } ], "github": { "repo": "openhands/openhands", "checkedAt": "2026-11-02T09:13:34.825447563Z", "stars": 92484, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-02T09:06:28Z", "openIssues": 589, "openPRs": 593, "issuesOpened90d": 1107, "issuesClosed90d": 738, "prsMerged90d": 901, "ci": { "branch": "main", "runs": 50, "success": 31, "failure": 13, "other": 6, "latest": "success", "latestAt": "2026-11-02T08:56:24Z" }, "advisories": [ { "ghsa": "GHSA-7h8w-hj9j-8rjw", "cve": "CVE-2026-33718", "severity": "high", "published": "2026-03-23T17:51:58Z" } ] }, "updatedAt": "2026-11-07T16:01:03.79870525Z" } }, "answer": "OpenHands scores 70.3 (BB) on agent readiness against Sculptor's 53.1 (D), and leads in 6 of 7 scored categories.", "b": { "slug": "sculptor", "name": "Sculptor", "vendor": "Imbue, Inc.", "vendorUrl": "https://imbue.com", "kind": "harness", "category": "agent-harnesses", "summary": "Sculptor is Imbue's open-source desktop app for running coding agents in parallel, each in an isolated copy of your code, with built-in skills for agentic development. It's labelled an experimental research preview.", "url": "https://www.anchorterminal.com/tools/sculptor", "markdownUrl": "https://www.anchorterminal.com/tools/sculptor.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/sculptor.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/sculptor.json", "dns": "sculptor.grade.anchorterminal.com", "repo": "https://github.com/imbue-ai/sculptor", "license": "MIT", "transports": [], "packages": [], "auth": "none", "pricing": "free", "pricingNotes": "Free and open source. You pay for the coding agents it runs, through your own subscriptions or API keys (checked 2026-11-07).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No payment protocol in the repository or README (checked 2026-11-07).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-07" }, "docsUrl": "https://github.com/imbue-ai/sculptor#readme", "capabilities": [ "agent.harness", "agent.multi-agent" ], "tags": [ "open-source", "mit", "desktop-app", "new" ], "lastRelease": "2026-11-06", "graded": true, "anchor": { "graded": true, "score": 53.1, "grade": "D", "agentReady": false, "rank": 960, "ranked": true, "rankOf": 1486, "categoryRank": 37, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 50, "maintenance": 75, "payments": 60, "reliability": 43, "schema": 45, "security": 57, "transparency": 57 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "low", "date": "2026-11-07" }, "negative": 0, "verdict": "Imbue's open-source app for parallel coding agents in isolated workspaces, with telemetry off until you choose otherwise. It's an experimental research preview that warns of bugs and drastic changes, Mac and Linux only, with no changelog.", "bestFor": "Developers who want parallel coding agents in isolated workspaces and are fine with a research preview.", "strengths": [ "Each workspace is an isolated copy of the code, reviewed and merged back", "Analytics, error reporting and session recording default to off, with consent at first run", "Built-in skills for agentic development", "MIT from Imbue, with CI on pull requests" ], "weaknesses": [ "Labelled an experimental research preview that may change drastically", "Mac (Apple Silicon) and Linux only", "No changelog file", "Few outside contributions accepted for now" ], "agentNotes": [ "Download from the README's links, connect a repository and create a workspace before prompting", "Review the diff before merging a workspace back to main" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "D", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 53.1 } ], "editorialScores": { "ergonomics": 50, "maintenance": 75, "payments": 60, "reliability": 43, "schema": 45, "security": 57, "transparency": 73 }, "provenanceScore": 40, "checked": { "categories": { "ergonomics": "2026-11-07", "maintenance": "2026-11-07", "payments": "2026-11-07", "reliability": "2026-11-07", "schema": "2026-11-07", "security": "2026-11-07", "transparency": "2026-11-07" }, "last": "2026-11-07", "oldest": "2026-11-07", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "Download for Mac (Apple Silicon) or Linux from the README" }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/sculptor" }, "area": "frameworks", "provenance": { "legalEntity": "Imbue, Inc.", "domain": "imbue.com", "domainRegistered": "", "domainNote": "Not looked up: RDAP isn't requested under the 1 November 2026 rules.", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-11-07", "notes": [ "The licence names Imbue, Inc.. The repository is github.com/imbue-ai/sculptor." ], "score": 40 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/sculptor.json", "live": { "slug": "sculptor", "securityTxt": { "url": "https://imbue.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:01:32.925074454Z" }, "updatedAt": "2026-11-07T16:01:32.925074454Z" } }, "edges": [ { "by": 47, "category": "reliability", "leads": "openhands", "name": "Reliability", "reasons": { "a": "Read as a local package. Official npm package @openhands/agent-canvas (Node 24 or later, plus uv), a Docker image on GHCR and openhands-sdk on PyPI (Python 3.12 or later) (20). A CI workflow (ci.yml) runs on main beside desktop, Docker and end-to-end workflows; the runs passed on every load on 1 October, and GitHub's pages refused us on 1 November, so the award rests on that check (25). 456 open issues and 395 open pull requests with priority labels and a high-priority Cloud resume bug (#17664), per the 1 October check, not re-read on 1 November (18). Dated release notes for every Canvas version and a written SDK rule of at least five minor releases before a public API or REST contract is removed, which the SDK followed on 28 October when it dropped the ACP curated model lists at their stated 1.59.0 deadline, but the Canvas CHANGELOG.md still stops at 1.0.0-alpha.2 (12). Canvas is 1.34.0 and the SDK 1.59.0, and the README's beta badge was removed on 23 October 2026 (commit 4d1c4d1, noted in the 1.33.0 release notes), so the product is no longer labelled beta. Only the Apps extension API keeps a beta label (15).", "b": "Local software. Desktop downloads for Mac (Apple Silicon), Linux and Linux ARM64 (20). checks.yml and a PR gate run on the repository; pass state not read (15). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent (0). sculptor-v tags up to v0.49.0, no changelog file (8). 0.x and labelled a research preview (0). 20 + 15 + 0 + 8 + 0 = 43." }, "scores": { "a": 90, "b": 43 } }, { "by": 45, "category": "schema", "leads": "openhands", "name": "Schema \u0026 documentation", "reasons": { "a": "The Agent Server REST API has an OpenAPI 3.1 spec in the docs repository (40 paths, still labelled 0.1.0), the Cloud API has another (155 paths), SDK models are Pydantic-typed and there's a TypeScript client (25). llms.txt at docs.openhands.dev (551 lines on 1 November), with no CLI, local GUI or V0 pages in it (10). The docs have a when-to-use page and examples of good and bad task instructions. On 23 October the Deprecated Projects group (local GUI, CLI, V0) was taken out of the navigation and links to it reworded towards Agent Canvas, though the pages stay reachable by URL and the SDK architecture page still links the CLI repository (15). Confirmation policies, security analysers and MCP configs are discriminated Pydantic unions with validators (13). SDK examples are checked by a CI workflow and there are troubleshooting pages, but we found no error reference for the Agent Server (12). Dated release notes for each Canvas version in the docs (1.25.0 to 1.34.0 added since 1 October), and release tags (15).", "b": "Harness reading. A README, specs and agent docs in the repository; no API reference (45)." }, "scores": { "a": 90, "b": 45 } }, { "by": 28, "category": "ergonomics", "leads": "openhands", "name": "Agent ergonomics", "reasons": { "a": "Harness reading of the framework line, scored on what an agent or pipeline driving it has to supply. The default agent carries three tools (terminal, file editor, task tracker), and `filter_tools_regex` trims MCP tools before they reach the model (23). Stuck detection is on by default and a condenser compacts long histories, but Canvas leaves `max_iterations` unset and we found no cost cap (15). Headless runs go through the SDK, the Agent Server REST API or the Cloud API with typed events, and the old CLI's `--headless` mode is unmaintained (14). Conversations persist and resume, and a Docker conversation keeps its workspace and history when the container is replaced (16). Python SDK and TypeScript client, but the quickstart needs Node 24 and uv, and the defaults skip both confirmation and the sandbox (10).", "b": "Harness reading. Workspaces as isolated copies, review and merge back, and built-in skills (50)." }, "scores": { "a": 78, "b": 50 } }, { "by": 10, "category": "maintenance", "leads": "openhands", "name": "Maintenance \u0026 community", "reasons": { "a": "Agent Canvas 1.34.0 on 2026-10-27 and SDK 1.59.0 on 2026-10-28, by the repository tags (30). 29 Canvas releases (1.9.0 on 3 August to 1.34.0) and 33 SDK releases (1.40.1 on 5 August to 1.59.0) in the 90 days from 3 August, not counting the security rebuild tags (20). Issues labelled by priority, but 456 open issues and 395 open pull requests and no visible reply times per the 1 October check; GitHub's pages refused us on 1 November (16). npm, PyPI and GHCR packages current per the 1 October check (the registries didn't answer from our shell on 1 November). The unmaintained `openhands` CLI is gone from the docs navigation and the pricing page but its pages remain (10). CI on main, Dependabot, a security scan and an API-breakage check on the SDK, and security rebuilds of older images (agent-canvas 1.23.0-r3, agent-server 1.49.5-r3, 29 October) (9).", "b": "Commits on 6 November 2026 and frequent tagged versions (30). More than three releases in 90 days (20). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent; the README says Imbue can't take many outside contributions yet (0). Current official downloads (15). CI on pull requests (10). 30 + 20 + 0 + 15 + 10 = 75." }, "scores": { "a": 85, "b": 75 } }, { "by": 10, "category": "transparency", "leads": "openhands", "name": "Transparency \u0026 trust", "reasons": { "a": "MIT across Canvas, SDK, tools and Agent Server (30). The privacy policy (effective 3 September 2025, re-read on 1 November) doesn't separate the open-source stack from the Cloud service, keeps data as long as reasonably necessary, allows training on content from the Services and has no subprocessor list (12). A written SDK deprecation runway of five minor releases, kept on 28 October when the ACP model lists were removed at their 1.59.0 deadline, and the CLI's unmaintained notice in its README without a date on the page (15). The consent prompt calls the data anonymous and the Docker page documents `AGENT_CANVAS_DISABLE_TELEMETRY`, but no user-facing page mentions the install event sent before consent (10).", "b": "MIT (30). Consent-based telemetry documented in the repository (18 of 30). The README warns of drastic changes during the research preview, with no deprecation policy (5). Opt-in telemetry (20). 30 + 18 + 5 + 20 = 73." }, "scores": { "a": 67, "b": 57 } }, { "by": 7, "category": "security", "leads": "openhands", "name": "Security \u0026 auth", "reasons": { "a": "Harness reading of the framework checklist, as for goose and the other agent harnesses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Agent Canvas still sends a `canvas_install` event to PostHog through z.openhands.dev on first use \"regardless of consent\" (telemetry.ts header, re-read on 1 November), and the consent banner's box is still `defaultChecked`. `AGENT_CANVAS_DISABLE_TELEMETRY=1`, `--disable-telemetry`, `VITE_DO_NOT_TRACK=1` or the browser's Do Not Track setting stops all of it, the last since 1.26.0 (15). Confirmation policies (always, never, at or above a risk level) and a Docker sandbox per conversation exist, but Canvas still starts with `confirmation_mode: false` and the npm install runs on the host with full filesystem access. No network egress controls found. Local listeners bind to 127.0.0.1 with an injected session key, and since SDK 1.52.0 (5 October) DockerWorkspace publishes its ports on loopback (12). LLM, Invariant and GraySwan risk analysers and a policy-rail module, documented, all advisory (11). Conversation event logs, completion logs and OpenTelemetry tracing through Laminar, with hosted Laminar setup documented on 16 October (13). Security programme. openhands.dev's security.txt expired on 28 October 2026 (re-read on 1 November), though the responsible-disclosure policy it names still loads. A Vanta-hosted trust page per the 1 October check, and the git diff injection published as an OpenHands advisory with a CVE. CVE-2026-112346, the SDK's unauthenticated sandbox server, was published by VulnCheck on 26 October with no OpenHands advisory found. No bug bounty found. 13, down from 15 for the expired file, read as shopware's and tokeneconomizer's expired files are (still credited for the policy behind them, less than a valid file).", "b": "Harness reading. Product analytics, error reporting and session recording default to off in the user config, and the app asks for a telemetry level and privacy consent at first run; PostHog runs on the front end only for now (25 of 30). Each workspace is an isolated copy of the code (14 of 20). No prompt-injection guidance (5). No audit log (5). SECURITY.md (8). 25 + 14 + 5 + 5 + 8 = 57." }, "scores": { "a": 64, "b": 57 } } ], "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "All Hands AI", "b": "Imbue, Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "None", "name": "Auth" }, { "a": "Freemium", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT (Agent Canvas, SDK, tools and Agent Server). OpenHands Cloud is a hosted service", "b": "MIT", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-10-28", "b": "2026-11-06", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "2025-09-03", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "yes", "b": "not read yet", "name": "Customer content may train models" }, { "a": "90k stars", "b": "none", "name": "Popularity" }, { "a": "2.5/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "OpenHands scores 70.3 (BB) on agent readiness against Sculptor's 53.1 (D), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, OpenHands or Sculptor?" }, { "answer": "Yes. OpenHands is open source (MIT (Agent Canvas, SDK, tools and Agent Server). OpenHands Cloud is a hosted service). Sculptor is open source (MIT).", "question": "Are OpenHands and Sculptor open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 90 against 43", "Schema \u0026 documentation, 90 against 45", "Agent ergonomics, 78 against 50", "Security \u0026 auth, 64 against 57", "Maintenance \u0026 community, 85 against 75", "Transparency \u0026 trust, 67 against 57" ], "also": [ "Agent-ready, a grade of BB or better" ], "goodFor": "Teams that want to self-host a coding agent with a web UI, per-conversation Docker sandboxes and scheduled or webhook automations, or embed the agent through a Python SDK and REST API.", "slug": "openhands", "watchFor": "Confirmation mode is off by default in Agent Canvas, and the npm install gives the agent the host's whole filesystem" }, { "aheadOn": null, "also": [ "No key needed to call it", "No incidents deducted, where OpenHands loses 7 points for them" ], "goodFor": "Developers who want parallel coding agents in isolated workspaces and are fine with a research preview.", "slug": "sculptor", "watchFor": "Labelled an experimental research preview that may change drastically" } ], "history": { "openhands": [ { "causes": [ "security", "product" ], "date": "2026-11-01", "delta": -0.7, "from": 71, "fromGrade": "BB", "to": 70.3, "toGrade": "BB" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.2, "from": 70.8, "fromGrade": "BB", "to": 71, "toGrade": "BB" }, { "causes": [ "method" ], "date": "2026-10-08", "delta": -0.1, "from": 70.9, "fromGrade": "BB", "to": 70.8, "toGrade": "BB" } ], "sculptor": null }, "job": { "capability": "agent.harness", "name": "Agent harnesses" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-openhands.json", "title": "Agent Zero vs OpenHands", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-sculptor.json", "title": "Agent Zero vs Sculptor", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-openhands.json", "title": "Aider vs OpenHands", "url": "https://www.anchorterminal.com/compare/aider-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-sculptor.json", "title": "Aider vs Sculptor", "url": "https://www.anchorterminal.com/compare/aider-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-openhands.json", "title": "Amp vs OpenHands", "url": "https://www.anchorterminal.com/compare/amp-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-sculptor.json", "title": "Amp vs Sculptor", "url": "https://www.anchorterminal.com/compare/amp-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-openhands.json", "title": "Antigravity CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-sculptor.json", "title": "Antigravity CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-openhands.json", "title": "Auggie CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/auggie-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/auggie-vs-sculptor.json", "title": "Auggie CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/auggie-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/axlr-vs-openhands.json", "title": "AXLR vs OpenHands", "url": "https://www.anchorterminal.com/compare/axlr-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/axlr-vs-sculptor.json", "title": "AXLR vs Sculptor", "url": "https://www.anchorterminal.com/compare/axlr-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-openhands.json", "title": "Claude Code vs OpenHands", "url": "https://www.anchorterminal.com/compare/claude-code-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-sculptor.json", "title": "Claude Code vs Sculptor", "url": "https://www.anchorterminal.com/compare/claude-code-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-openhands.json", "title": "Cline vs OpenHands", "url": "https://www.anchorterminal.com/compare/cline-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-sculptor.json", "title": "Cline vs Sculptor", "url": "https://www.anchorterminal.com/compare/cline-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/conductor-vs-openhands.json", "title": "Conductor vs OpenHands", "url": "https://www.anchorterminal.com/compare/conductor-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/conductor-vs-sculptor.json", "title": "Conductor vs Sculptor", "url": "https://www.anchorterminal.com/compare/conductor-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-openhands.json", "title": "Crush vs OpenHands", "url": "https://www.anchorterminal.com/compare/crush-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/crush-vs-sculptor.json", "title": "Crush vs Sculptor", "url": "https://www.anchorterminal.com/compare/crush-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-openhands.json", "title": "Cursor CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-sculptor.json", "title": "Cursor CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-openhands.json", "title": "DeepSeek Harness (dsh) vs OpenHands", "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-sculptor.json", "title": "DeepSeek Harness (dsh) vs Sculptor", "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openhands.json", "title": "dsh-superagent (DeepSeek) vs OpenHands", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-sculptor.json", "title": "dsh-superagent (DeepSeek) vs Sculptor", "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-openhands.json", "title": "Devin vs OpenHands", "url": "https://www.anchorterminal.com/compare/devin-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-sculptor.json", "title": "Devin vs Sculptor", "url": "https://www.anchorterminal.com/compare/devin-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-openhands.json", "title": "Droid CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-sculptor.json", "title": "Droid CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-openhands.json", "title": "Pi vs OpenHands", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-sculptor.json", "title": "Pi vs Sculptor", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/emdash-vs-openhands.json", "title": "Emdash vs OpenHands", "url": "https://www.anchorterminal.com/compare/emdash-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/emdash-vs-sculptor.json", "title": "Emdash vs Sculptor", "url": "https://www.anchorterminal.com/compare/emdash-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-openhands.json", "title": "Gemini CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-sculptor.json", "title": "Gemini CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-openhands.json", "title": "GitHub Copilot CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-sculptor.json", "title": "GitHub Copilot CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-openhands.json", "title": "goose vs OpenHands", "url": "https://www.anchorterminal.com/compare/goose-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-sculptor.json", "title": "goose vs Sculptor", "url": "https://www.anchorterminal.com/compare/goose-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-openhands.json", "title": "Harness² vs OpenHands", "url": "https://www.anchorterminal.com/compare/harness2-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/harness2-vs-sculptor.json", "title": "Harness² vs Sculptor", "url": "https://www.anchorterminal.com/compare/harness2-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-openhands.json", "title": "HarnessRouter vs OpenHands", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-sculptor.json", "title": "HarnessRouter vs Sculptor", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/jules-vs-openhands.json", "title": "Jules vs OpenHands", "url": "https://www.anchorterminal.com/compare/jules-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/jules-vs-sculptor.json", "title": "Jules vs Sculptor", "url": "https://www.anchorterminal.com/compare/jules-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/junie-vs-openhands.json", "title": "Junie CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/junie-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/junie-vs-sculptor.json", "title": "Junie CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/junie-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openhands.json", "title": "Kilo Code CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-sculptor.json", "title": "Kilo Code CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-openhands.json", "title": "Kimi Code CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-sculptor.json", "title": "Kimi Code CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-openhands.json", "title": "Kiro CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-sculptor.json", "title": "Kiro CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/letta-vs-openhands.json", "title": "Letta vs OpenHands", "url": "https://www.anchorterminal.com/compare/letta-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/letta-vs-sculptor.json", "title": "Letta vs Sculptor", "url": "https://www.anchorterminal.com/compare/letta-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-openhands.json", "title": "mini-swe-agent vs OpenHands", "url": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-sculptor.json", "title": "mini-swe-agent vs Sculptor", "url": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/minimax-code-vs-openhands.json", "title": "MiniMax Code vs OpenHands", "url": "https://www.anchorterminal.com/compare/minimax-code-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/minimax-code-vs-sculptor.json", "title": "MiniMax Code vs Sculptor", "url": "https://www.anchorterminal.com/compare/minimax-code-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-openhands.json", "title": "Mistral Vibe CLI vs OpenHands", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-sculptor.json", "title": "Mistral Vibe CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/muse-code-vs-openhands.json", "title": "Muse Code vs OpenHands", "url": "https://www.anchorterminal.com/compare/muse-code-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/muse-code-vs-sculptor.json", "title": "Muse Code vs Sculptor", "url": "https://www.anchorterminal.com/compare/muse-code-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-openhands.json", "title": "OpenAI Agents API vs OpenHands", "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-sculptor.json", "title": "OpenAI Agents API vs Sculptor", "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-openhands.json", "title": "OpenAI Codex vs OpenHands", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-sculptor.json", "title": "OpenAI Codex vs Sculptor", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-openhands.json", "title": "OpenCode vs OpenHands", "url": "https://www.anchorterminal.com/compare/opencode-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-sculptor.json", "title": "OpenCode vs Sculptor", "url": "https://www.anchorterminal.com/compare/opencode-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-openmausbot.json", "title": "OpenHands vs OpenMausBot", "url": "https://www.anchorterminal.com/compare/openhands-vs-openmausbot" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-orca.json", "title": "OpenHands vs Orca", "url": "https://www.anchorterminal.com/compare/openhands-vs-orca" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-paseo.json", "title": "OpenHands vs Paseo", "url": "https://www.anchorterminal.com/compare/openhands-vs-paseo" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-prime-agent.json", "title": "OpenHands vs Prime Agent", "url": "https://www.anchorterminal.com/compare/openhands-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-qoder-cli.json", "title": "OpenHands vs Qoder CLI", "url": "https://www.anchorterminal.com/compare/openhands-vs-qoder-cli" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-qwen-code.json", "title": "OpenHands vs Qwen Code", "url": "https://www.anchorterminal.com/compare/openhands-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-reflection-mirror.json", "title": "OpenHands vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/openhands-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-rovo-dev-cli.json", "title": "OpenHands vs Rovo Dev CLI", "url": "https://www.anchorterminal.com/compare/openhands-vs-rovo-dev-cli" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-t3-code.json", "title": "OpenHands vs T3 Code", "url": "https://www.anchorterminal.com/compare/openhands-vs-t3-code" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-traycer.json", "title": "OpenHands vs Traycer", "url": "https://www.anchorterminal.com/compare/openhands-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-unstoppable.json", "title": "OpenHands vs Unstoppable", "url": "https://www.anchorterminal.com/compare/openhands-vs-unstoppable" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-verdent.json", "title": "OpenHands vs Verdent", "url": "https://www.anchorterminal.com/compare/openhands-vs-verdent" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-vibe-trading.json", "title": "OpenHands vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/openhands-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-warp.json", "title": "OpenHands vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/openhands-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/orca-vs-sculptor.json", "title": "Orca vs Sculptor", "url": "https://www.anchorterminal.com/compare/orca-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/paseo-vs-sculptor.json", "title": "Paseo vs Sculptor", "url": "https://www.anchorterminal.com/compare/paseo-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/prime-agent-vs-sculptor.json", "title": "Prime Agent vs Sculptor", "url": "https://www.anchorterminal.com/compare/prime-agent-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/qoder-cli-vs-sculptor.json", "title": "Qoder CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/qoder-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/qwen-code-vs-sculptor.json", "title": "Qwen Code vs Sculptor", "url": "https://www.anchorterminal.com/compare/qwen-code-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/reflection-mirror-vs-sculptor.json", "title": "Mirror CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/reflection-mirror-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-sculptor.json", "title": "Rovo Dev CLI vs Sculptor", "url": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/sculptor-vs-t3-code.json", "title": "Sculptor vs T3 Code", "url": "https://www.anchorterminal.com/compare/sculptor-vs-t3-code" }, { "json": "https://www.anchorterminal.com/compare/sculptor-vs-traycer.json", "title": "Sculptor vs Traycer", "url": "https://www.anchorterminal.com/compare/sculptor-vs-traycer" }, { "json": "https://www.anchorterminal.com/compare/sculptor-vs-unstoppable.json", "title": "Sculptor vs Unstoppable", "url": "https://www.anchorterminal.com/compare/sculptor-vs-unstoppable" }, { "json": "https://www.anchorterminal.com/compare/sculptor-vs-verdent.json", "title": "Sculptor vs Verdent", "url": "https://www.anchorterminal.com/compare/sculptor-vs-verdent" }, { "json": "https://www.anchorterminal.com/compare/sculptor-vs-vibe-trading.json", "title": "Sculptor vs Vibe-Trading", "url": "https://www.anchorterminal.com/compare/sculptor-vs-vibe-trading" }, { "json": "https://www.anchorterminal.com/compare/sculptor-vs-warp.json", "title": "Sculptor vs Warp (Warp Agent CLI and the Oz Agent API)", "url": "https://www.anchorterminal.com/compare/sculptor-vs-warp" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-openhands.json", "title": "Clawboo vs OpenHands", "url": "https://www.anchorterminal.com/compare/clawboo-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/clawboo-vs-sculptor.json", "title": "Clawboo vs Sculptor", "url": "https://www.anchorterminal.com/compare/clawboo-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-openhands.json", "title": "CLI Manager vs OpenHands", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-sculptor.json", "title": "CLI Manager vs Sculptor", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-openhands.json", "title": "Harness vs OpenHands", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-openhands" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-sculptor.json", "title": "Harness vs Sculptor", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-paperclip.json", "title": "OpenHands vs Paperclip", "url": "https://www.anchorterminal.com/compare/openhands-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-parallax-agents.json", "title": "OpenHands vs Parallax", "url": "https://www.anchorterminal.com/compare/openhands-vs-parallax-agents" }, { "json": "https://www.anchorterminal.com/compare/openmausbot-vs-sculptor.json", "title": "OpenMausBot vs Sculptor", "url": "https://www.anchorterminal.com/compare/openmausbot-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-sculptor.json", "title": "Paperclip vs Sculptor", "url": "https://www.anchorterminal.com/compare/paperclip-vs-sculptor" }, { "json": "https://www.anchorterminal.com/compare/parallax-agents-vs-sculptor.json", "title": "Parallax vs Sculptor", "url": "https://www.anchorterminal.com/compare/parallax-agents-vs-sculptor" } ], "panel": null, "scores": [ { "by": 47, "edge": "openhands", "key": "reliability", "name": "Reliability", "openhands": 90, "sculptor": 43, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 45, "edge": "openhands", "key": "schema", "name": "Schema \u0026 documentation", "openhands": 90, "sculptor": 45, "weight": 13 }, { "by": 28, "edge": "openhands", "key": "ergonomics", "name": "Agent ergonomics", "openhands": 78, "sculptor": 50, "weight": 13 }, { "by": 7, "edge": "openhands", "key": "security", "name": "Security \u0026 auth", "openhands": 64, "sculptor": 57, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "openhands": 60, "sculptor": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 10, "edge": "openhands", "key": "maintenance", "name": "Maintenance \u0026 community", "openhands": 85, "sculptor": 75, "weight": 7 }, { "by": 10, "edge": "openhands", "key": "transparency", "name": "Transparency \u0026 trust", "openhands": 67, "sculptor": 57, "weight": 7 } ], "summary": "OpenHands scores 70.3 (BB) on agent readiness against Sculptor's 53.1 (D), and leads in 6 of 7 scored categories. Both do agent harnesses.", "tasks": null, "tutorials": [], "verdicts": { "openhands": "A self-hosted coding agent with a typed SDK, an Agent Server API and a Docker container per conversation on request. Agent Canvas still starts with confirmation off on the host's filesystem, sends an install event before asking consent, and a critical SDK sandbox flaw fixed in October was published by a third party.", "sculptor": "Imbue's open-source app for parallel coding agents in isolated workspaces, with telemetry off until you choose otherwise. It's an experimental research preview that warns of bugs and drastic changes, Mac and Linux only, with no changelog." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/openhands-vs-sculptor", "json": "https://www.anchorterminal.com/compare/openhands-vs-sculptor.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/openhands-vs-sculptor.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/openhands-vs-sculptor.min.md" }, "markdown": "OpenHands scores 70.3 (BB) on agent readiness against Sculptor's 53.1 (D), and leads in 6 of 7 scored categories. Both do agent harnesses.\n\n- OpenHands: grade BB, 70.3/100, rank #206 of 1486. Markdown https://www.anchorterminal.com/tools/openhands.md · JSON https://www.anchorterminal.com/api/v1/tools/openhands.json\n- Sculptor: grade D, 53.1/100, rank #960 of 1486. Markdown https://www.anchorterminal.com/tools/sculptor.md · JSON https://www.anchorterminal.com/api/v1/tools/sculptor.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 1500 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### OpenHands (BB)\n\nGood for: Teams that want to self-host a coding agent with a web UI, per-conversation Docker sandboxes and scheduled or webhook automations, or embed the agent through a Python SDK and REST API.\n\nAhead on:\n- Reliability, 90 against 43\n- Schema \u0026 documentation, 90 against 45\n- Agent ergonomics, 78 against 50\n- Security \u0026 auth, 64 against 57\n- Maintenance \u0026 community, 85 against 75\n- Transparency \u0026 trust, 67 against 57\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n\nWatch for: Confirmation mode is off by default in Agent Canvas, and the npm install gives the agent the host's whole filesystem\n\n### Sculptor (D)\n\nGood for: Developers who want parallel coding agents in isolated workspaces and are fine with a research preview.\n\nAlso in its favour:\n- No key needed to call it\n- No incidents deducted, where OpenHands loses 7 points for them\n\nWatch for: Labelled an experimental research preview that may change drastically\n\n\n## Why the edge\n\n### Reliability: OpenHands +47\n\n- OpenHands (90): Read as a local package. Official npm package @openhands/agent-canvas (Node 24 or later, plus uv), a Docker image on GHCR and openhands-sdk on PyPI (Python 3.12 or later) (20). A CI workflow (ci.yml) runs on main beside desktop, Docker and end-to-end workflows; the runs passed on every load on 1 October, and GitHub's pages refused us on 1 November, so the award rests on that check (25). 456 open issues and 395 open pull requests with priority labels and a high-priority Cloud resume bug (#17664), per the 1 October check, not re-read on 1 November (18). Dated release notes for every Canvas version and a written SDK rule of at least five minor releases before a public API or REST contract is removed, which the SDK followed on 28 October when it dropped the ACP curated model lists at their stated 1.59.0 deadline, but the Canvas CHANGELOG.md still stops at 1.0.0-alpha.2 (12). Canvas is 1.34.0 and the SDK 1.59.0, and the README's beta badge was removed on 23 October 2026 (commit 4d1c4d1, noted in the 1.33.0 release notes), so the product is no longer labelled beta. Only the Apps extension API keeps a beta label (15).\n- Sculptor (43): Local software. Desktop downloads for Mac (Apple Silicon), Linux and Linux ARM64 (20). checks.yml and a PR gate run on the repository; pass state not read (15). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent (0). sculptor-v tags up to v0.49.0, no changelog file (8). 0.x and labelled a research preview (0). 20 + 15 + 0 + 8 + 0 = 43.\n\n### Schema \u0026 documentation: OpenHands +45\n\n- OpenHands (90): The Agent Server REST API has an OpenAPI 3.1 spec in the docs repository (40 paths, still labelled 0.1.0), the Cloud API has another (155 paths), SDK models are Pydantic-typed and there's a TypeScript client (25). llms.txt at docs.openhands.dev (551 lines on 1 November), with no CLI, local GUI or V0 pages in it (10). The docs have a when-to-use page and examples of good and bad task instructions. On 23 October the Deprecated Projects group (local GUI, CLI, V0) was taken out of the navigation and links to it reworded towards Agent Canvas, though the pages stay reachable by URL and the SDK architecture page still links the CLI repository (15). Confirmation policies, security analysers and MCP configs are discriminated Pydantic unions with validators (13). SDK examples are checked by a CI workflow and there are troubleshooting pages, but we found no error reference for the Agent Server (12). Dated release notes for each Canvas version in the docs (1.25.0 to 1.34.0 added since 1 October), and release tags (15).\n- Sculptor (45): Harness reading. A README, specs and agent docs in the repository; no API reference (45).\n\n### Agent ergonomics: OpenHands +28\n\n- OpenHands (78): Harness reading of the framework line, scored on what an agent or pipeline driving it has to supply. The default agent carries three tools (terminal, file editor, task tracker), and `filter_tools_regex` trims MCP tools before they reach the model (23). Stuck detection is on by default and a condenser compacts long histories, but Canvas leaves `max_iterations` unset and we found no cost cap (15). Headless runs go through the SDK, the Agent Server REST API or the Cloud API with typed events, and the old CLI's `--headless` mode is unmaintained (14). Conversations persist and resume, and a Docker conversation keeps its workspace and history when the container is replaced (16). Python SDK and TypeScript client, but the quickstart needs Node 24 and uv, and the defaults skip both confirmation and the sandbox (10).\n- Sculptor (50): Harness reading. Workspaces as isolated copies, review and merge back, and built-in skills (50).\n\n### Maintenance \u0026 community: OpenHands +10\n\n- OpenHands (85): Agent Canvas 1.34.0 on 2026-10-27 and SDK 1.59.0 on 2026-10-28, by the repository tags (30). 29 Canvas releases (1.9.0 on 3 August to 1.34.0) and 33 SDK releases (1.40.1 on 5 August to 1.59.0) in the 90 days from 3 August, not counting the security rebuild tags (20). Issues labelled by priority, but 456 open issues and 395 open pull requests and no visible reply times per the 1 October check; GitHub's pages refused us on 1 November (16). npm, PyPI and GHCR packages current per the 1 October check (the registries didn't answer from our shell on 1 November). The unmaintained `openhands` CLI is gone from the docs navigation and the pricing page but its pages remain (10). CI on main, Dependabot, a security scan and an API-breakage check on the SDK, and security rebuilds of older images (agent-canvas 1.23.0-r3, agent-server 1.49.5-r3, 29 October) (9).\n- Sculptor (75): Commits on 6 November 2026 and frequent tagged versions (30). More than three releases in 90 days (20). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent; the README says Imbue can't take many outside contributions yet (0). Current official downloads (15). CI on pull requests (10). 30 + 20 + 0 + 15 + 10 = 75.\n\n### Transparency \u0026 trust: OpenHands +10\n\n- OpenHands (67): MIT across Canvas, SDK, tools and Agent Server (30). The privacy policy (effective 3 September 2025, re-read on 1 November) doesn't separate the open-source stack from the Cloud service, keeps data as long as reasonably necessary, allows training on content from the Services and has no subprocessor list (12). A written SDK deprecation runway of five minor releases, kept on 28 October when the ACP model lists were removed at their 1.59.0 deadline, and the CLI's unmaintained notice in its README without a date on the page (15). The consent prompt calls the data anonymous and the Docker page documents `AGENT_CANVAS_DISABLE_TELEMETRY`, but no user-facing page mentions the install event sent before consent (10).\n- Sculptor (57): MIT (30). Consent-based telemetry documented in the repository (18 of 30). The README warns of drastic changes during the research preview, with no deprecation policy (5). Opt-in telemetry (20). 30 + 18 + 5 + 20 = 73.\n\n### Security \u0026 auth: OpenHands +7\n\n- OpenHands (64): Harness reading of the framework checklist, as for goose and the other agent harnesses. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. Agent Canvas still sends a `canvas_install` event to PostHog through z.openhands.dev on first use \"regardless of consent\" (telemetry.ts header, re-read on 1 November), and the consent banner's box is still `defaultChecked`. `AGENT_CANVAS_DISABLE_TELEMETRY=1`, `--disable-telemetry`, `VITE_DO_NOT_TRACK=1` or the browser's Do Not Track setting stops all of it, the last since 1.26.0 (15). Confirmation policies (always, never, at or above a risk level) and a Docker sandbox per conversation exist, but Canvas still starts with `confirmation_mode: false` and the npm install runs on the host with full filesystem access. No network egress controls found. Local listeners bind to 127.0.0.1 with an injected session key, and since SDK 1.52.0 (5 October) DockerWorkspace publishes its ports on loopback (12). LLM, Invariant and GraySwan risk analysers and a policy-rail module, documented, all advisory (11). Conversation event logs, completion logs and OpenTelemetry tracing through Laminar, with hosted Laminar setup documented on 16 October (13). Security programme. openhands.dev's security.txt expired on 28 October 2026 (re-read on 1 November), though the responsible-disclosure policy it names still loads. A Vanta-hosted trust page per the 1 October check, and the git diff injection published as an OpenHands advisory with a CVE. CVE-2026-112346, the SDK's unauthenticated sandbox server, was published by VulnCheck on 26 October with no OpenHands advisory found. No bug bounty found. 13, down from 15 for the expired file, read as shopware's and tokeneconomizer's expired files are (still credited for the policy behind them, less than a valid file).\n- Sculptor (57): Harness reading. Product analytics, error reporting and session recording default to off in the user config, and the app asks for a telemetry level and privacy consent at first run; PostHog runs on the front end only for now (25 of 30). Each workspace is an isolated copy of the code (14 of 20). No prompt-injection guidance (5). No audit log (5). SECURITY.md (8). 25 + 14 + 5 + 5 + 8 = 57.\n\n## Score by category\n\n| Category | Weight | OpenHands | Sculptor | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 90 | 43 | OpenHands +47 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 90 | 45 | OpenHands +45 |\n| Agent ergonomics | 13% (16.2 this run) | 78 | 50 | OpenHands +28 |\n| Security \u0026 auth | 14% (17.5 this run) | 64 | 57 | OpenHands +7 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 85 | 75 | OpenHands +10 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 67 | 57 | OpenHands +10 |\n| Negative events | ≤15 | -7 | 0 | |\n| **Total** | | **70.3 · BB** | **53.1 · D** | |\n\n## Facts side by side\n\n| Fact | OpenHands | Sculptor |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | All Hands AI | Imbue, Inc. |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | OAuth or key | None |\n| Pricing | Freemium | Free |\n| x402 | no | no |\n| Licence | MIT (Agent Canvas, SDK, tools and Agent Server). OpenHands Cloud is a hosted service | MIT |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-10-28 | 2026-11-06 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | 2025-09-03 | no document linked |\n| Customer content may train models | yes | not read yet |\n| Popularity | 90k stars | none |\n| Agent reviews | 2.5/5 (2) | none |\n\n## How the scores have moved\n\n### OpenHands\n\n- -0.7 on 1 November 2026: security, product\n- +0.2 on 27 October 2026: checklist\n- -0.1 on 8 October 2026: checklist\n\n### Sculptor\n\nNo score change since it was listed.\n\n## Verdicts\n\n**OpenHands.** A self-hosted coding agent with a typed SDK, an Agent Server API and a Docker container per conversation on request. Agent Canvas still starts with confirmation off on the host's filesystem, sends an install event before asking consent, and a critical SDK sandbox flaw fixed in October was published by a third party.\n\n**Sculptor.** Imbue's open-source app for parallel coding agents in isolated workspaces, with telemetry off until you choose otherwise. It's an experimental research preview that warns of bugs and drastic changes, Mac and Linux only, with no changelog.\n\n## Before you call either\n\n### OpenHands\n\n1. Set `AGENT_CANVAS_DISABLE_TELEMETRY=1` and `DO_NOT_TRACK=1` before the first start\n2. Start Canvas with `OH_CONVERSATION_RUNTIME=docker` or use the Docker image. The npm install runs the agent on the host\n3. Turn on confirmation mode with a risk threshold. Canvas starts with it off\n4. Pin openhands-sdk and openhands-workspace at 1.52.0 or later so DockerWorkspace binds to loopback, and set `OH_SESSION_API_KEYS_0` on any reachable Agent Server\n5. Use the SDK or the Agent Server API for headless runs. The `openhands --headless` CLI is no longer maintained\n\n### Sculptor\n\n1. Download from the README's links, connect a repository and create a workspace before prompting\n2. Review the diff before merging a workspace back to main\n\n## Questions\n\n### Which is better for AI agents, OpenHands or Sculptor?\n\nOpenHands scores 70.3 (BB) on agent readiness against Sculptor's 53.1 (D), and leads in 6 of 7 scored categories.\n\n### Are OpenHands and Sculptor open source?\n\nYes. OpenHands is open source (MIT (Agent Canvas, SDK, tools and Agent Server). OpenHands Cloud is a hosted service). Sculptor is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/openhands-vs-sculptor.json, and with the fewest tokens: https://www.anchorterminal.com/compare/openhands-vs-sculptor.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"openhands\", \"b\": \"sculptor\"}`. From a terminal: `anchor compare openhands sculptor`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/openhands.json and https://www.anchorterminal.com/api/v1/tools/sculptor.json\n\n## Other comparisons with OpenHands or Sculptor\n\n- [Agent Zero vs OpenHands](https://www.anchorterminal.com/compare/agent-zero-vs-openhands.md)\n- [Agent Zero vs Sculptor](https://www.anchorterminal.com/compare/agent-zero-vs-sculptor.md)\n- [Aider vs OpenHands](https://www.anchorterminal.com/compare/aider-vs-openhands.md)\n- [Aider vs Sculptor](https://www.anchorterminal.com/compare/aider-vs-sculptor.md)\n- [Amp vs OpenHands](https://www.anchorterminal.com/compare/amp-vs-openhands.md)\n- [Amp vs Sculptor](https://www.anchorterminal.com/compare/amp-vs-sculptor.md)\n- [Antigravity CLI vs OpenHands](https://www.anchorterminal.com/compare/antigravity-cli-vs-openhands.md)\n- [Antigravity CLI vs Sculptor](https://www.anchorterminal.com/compare/antigravity-cli-vs-sculptor.md)\n- [Auggie CLI vs OpenHands](https://www.anchorterminal.com/compare/auggie-vs-openhands.md)\n- [Auggie CLI vs Sculptor](https://www.anchorterminal.com/compare/auggie-vs-sculptor.md)\n- [AXLR vs OpenHands](https://www.anchorterminal.com/compare/axlr-vs-openhands.md)\n- [AXLR vs Sculptor](https://www.anchorterminal.com/compare/axlr-vs-sculptor.md)\n- [Claude Code vs OpenHands](https://www.anchorterminal.com/compare/claude-code-vs-openhands.md)\n- [Claude Code vs Sculptor](https://www.anchorterminal.com/compare/claude-code-vs-sculptor.md)\n- [Cline vs OpenHands](https://www.anchorterminal.com/compare/cline-vs-openhands.md)\n- [Cline vs Sculptor](https://www.anchorterminal.com/compare/cline-vs-sculptor.md)\n- [Conductor vs OpenHands](https://www.anchorterminal.com/compare/conductor-vs-openhands.md)\n- [Conductor vs Sculptor](https://www.anchorterminal.com/compare/conductor-vs-sculptor.md)\n- [Crush vs OpenHands](https://www.anchorterminal.com/compare/crush-vs-openhands.md)\n- [Crush vs Sculptor](https://www.anchorterminal.com/compare/crush-vs-sculptor.md)\n- [Cursor CLI vs OpenHands](https://www.anchorterminal.com/compare/cursor-cli-vs-openhands.md)\n- [Cursor CLI vs Sculptor](https://www.anchorterminal.com/compare/cursor-cli-vs-sculptor.md)\n- [DeepSeek Harness (dsh) vs OpenHands](https://www.anchorterminal.com/compare/deepseek-harness-vs-openhands.md)\n- [DeepSeek Harness (dsh) vs Sculptor](https://www.anchorterminal.com/compare/deepseek-harness-vs-sculptor.md)\n- [dsh-superagent (DeepSeek) vs OpenHands](https://www.anchorterminal.com/compare/deepseek-superagent-vs-openhands.md)\n- [dsh-superagent (DeepSeek) vs Sculptor](https://www.anchorterminal.com/compare/deepseek-superagent-vs-sculptor.md)\n- [Devin vs OpenHands](https://www.anchorterminal.com/compare/devin-vs-openhands.md)\n- [Devin vs Sculptor](https://www.anchorterminal.com/compare/devin-vs-sculptor.md)\n- [Droid CLI vs OpenHands](https://www.anchorterminal.com/compare/droid-cli-vs-openhands.md)\n- [Droid CLI vs Sculptor](https://www.anchorterminal.com/compare/droid-cli-vs-sculptor.md)\n- [Pi vs OpenHands](https://www.anchorterminal.com/compare/earendil-pi-vs-openhands.md)\n- [Pi vs Sculptor](https://www.anchorterminal.com/compare/earendil-pi-vs-sculptor.md)\n- [Emdash vs OpenHands](https://www.anchorterminal.com/compare/emdash-vs-openhands.md)\n- [Emdash vs Sculptor](https://www.anchorterminal.com/compare/emdash-vs-sculptor.md)\n- [Gemini CLI vs OpenHands](https://www.anchorterminal.com/compare/gemini-cli-vs-openhands.md)\n- [Gemini CLI vs Sculptor](https://www.anchorterminal.com/compare/gemini-cli-vs-sculptor.md)\n- [GitHub Copilot CLI vs OpenHands](https://www.anchorterminal.com/compare/github-copilot-cli-vs-openhands.md)\n- [GitHub Copilot CLI vs Sculptor](https://www.anchorterminal.com/compare/github-copilot-cli-vs-sculptor.md)\n- [goose vs OpenHands](https://www.anchorterminal.com/compare/goose-vs-openhands.md)\n- [goose vs Sculptor](https://www.anchorterminal.com/compare/goose-vs-sculptor.md)\n- [Harness² vs OpenHands](https://www.anchorterminal.com/compare/harness2-vs-openhands.md)\n- [Harness² vs Sculptor](https://www.anchorterminal.com/compare/harness2-vs-sculptor.md)\n- [HarnessRouter vs OpenHands](https://www.anchorterminal.com/compare/harnessrouter-vs-openhands.md)\n- [HarnessRouter vs Sculptor](https://www.anchorterminal.com/compare/harnessrouter-vs-sculptor.md)\n- [Jules vs OpenHands](https://www.anchorterminal.com/compare/jules-vs-openhands.md)\n- [Jules vs Sculptor](https://www.anchorterminal.com/compare/jules-vs-sculptor.md)\n- [Junie CLI vs OpenHands](https://www.anchorterminal.com/compare/junie-vs-openhands.md)\n- [Junie CLI vs Sculptor](https://www.anchorterminal.com/compare/junie-vs-sculptor.md)\n- [Kilo Code CLI vs OpenHands](https://www.anchorterminal.com/compare/kilo-code-cli-vs-openhands.md)\n- [Kilo Code CLI vs Sculptor](https://www.anchorterminal.com/compare/kilo-code-cli-vs-sculptor.md)\n- [Kimi Code CLI vs OpenHands](https://www.anchorterminal.com/compare/kimi-code-cli-vs-openhands.md)\n- [Kimi Code CLI vs Sculptor](https://www.anchorterminal.com/compare/kimi-code-cli-vs-sculptor.md)\n- [Kiro CLI vs OpenHands](https://www.anchorterminal.com/compare/kiro-cli-vs-openhands.md)\n- [Kiro CLI vs Sculptor](https://www.anchorterminal.com/compare/kiro-cli-vs-sculptor.md)\n- [Letta vs OpenHands](https://www.anchorterminal.com/compare/letta-vs-openhands.md)\n- [Letta vs Sculptor](https://www.anchorterminal.com/compare/letta-vs-sculptor.md)\n- [mini-swe-agent vs OpenHands](https://www.anchorterminal.com/compare/mini-swe-agent-vs-openhands.md)\n- [mini-swe-agent vs Sculptor](https://www.anchorterminal.com/compare/mini-swe-agent-vs-sculptor.md)\n- [MiniMax Code vs OpenHands](https://www.anchorterminal.com/compare/minimax-code-vs-openhands.md)\n- [MiniMax Code vs Sculptor](https://www.anchorterminal.com/compare/minimax-code-vs-sculptor.md)\n- [Mistral Vibe CLI vs OpenHands](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-openhands.md)\n- [Mistral Vibe CLI vs Sculptor](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-sculptor.md)\n- [Muse Code vs OpenHands](https://www.anchorterminal.com/compare/muse-code-vs-openhands.md)\n- [Muse Code vs Sculptor](https://www.anchorterminal.com/compare/muse-code-vs-sculptor.md)\n- [OpenAI Agents API vs OpenHands](https://www.anchorterminal.com/compare/openai-agents-api-vs-openhands.md)\n- [OpenAI Agents API vs Sculptor](https://www.anchorterminal.com/compare/openai-agents-api-vs-sculptor.md)\n- [OpenAI Codex vs OpenHands](https://www.anchorterminal.com/compare/openai-codex-vs-openhands.md)\n- [OpenAI Codex vs Sculptor](https://www.anchorterminal.com/compare/openai-codex-vs-sculptor.md)\n- [OpenCode vs OpenHands](https://www.anchorterminal.com/compare/opencode-vs-openhands.md)\n- [OpenCode vs Sculptor](https://www.anchorterminal.com/compare/opencode-vs-sculptor.md)\n- [OpenHands vs OpenMausBot](https://www.anchorterminal.com/compare/openhands-vs-openmausbot.md)\n- [OpenHands vs Orca](https://www.anchorterminal.com/compare/openhands-vs-orca.md)\n- [OpenHands vs Paseo](https://www.anchorterminal.com/compare/openhands-vs-paseo.md)\n- [OpenHands vs Prime Agent](https://www.anchorterminal.com/compare/openhands-vs-prime-agent.md)\n- [OpenHands vs Qoder CLI](https://www.anchorterminal.com/compare/openhands-vs-qoder-cli.md)\n- [OpenHands vs Qwen Code](https://www.anchorterminal.com/compare/openhands-vs-qwen-code.md)\n- [OpenHands vs Mirror CLI](https://www.anchorterminal.com/compare/openhands-vs-reflection-mirror.md)\n- [OpenHands vs Rovo Dev CLI](https://www.anchorterminal.com/compare/openhands-vs-rovo-dev-cli.md)\n- [OpenHands vs T3 Code](https://www.anchorterminal.com/compare/openhands-vs-t3-code.md)\n- [OpenHands vs Traycer](https://www.anchorterminal.com/compare/openhands-vs-traycer.md)\n- [OpenHands vs Unstoppable](https://www.anchorterminal.com/compare/openhands-vs-unstoppable.md)\n- [OpenHands vs Verdent](https://www.anchorterminal.com/compare/openhands-vs-verdent.md)\n- [OpenHands vs Vibe-Trading](https://www.anchorterminal.com/compare/openhands-vs-vibe-trading.md)\n- [OpenHands vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/openhands-vs-warp.md)\n- [Orca vs Sculptor](https://www.anchorterminal.com/compare/orca-vs-sculptor.md)\n- [Paseo vs Sculptor](https://www.anchorterminal.com/compare/paseo-vs-sculptor.md)\n- [Prime Agent vs Sculptor](https://www.anchorterminal.com/compare/prime-agent-vs-sculptor.md)\n- [Qoder CLI vs Sculptor](https://www.anchorterminal.com/compare/qoder-cli-vs-sculptor.md)\n- [Qwen Code vs Sculptor](https://www.anchorterminal.com/compare/qwen-code-vs-sculptor.md)\n- [Mirror CLI vs Sculptor](https://www.anchorterminal.com/compare/reflection-mirror-vs-sculptor.md)\n- [Rovo Dev CLI vs Sculptor](https://www.anchorterminal.com/compare/rovo-dev-cli-vs-sculptor.md)\n- [Sculptor vs T3 Code](https://www.anchorterminal.com/compare/sculptor-vs-t3-code.md)\n- [Sculptor vs Traycer](https://www.anchorterminal.com/compare/sculptor-vs-traycer.md)\n- [Sculptor vs Unstoppable](https://www.anchorterminal.com/compare/sculptor-vs-unstoppable.md)\n- [Sculptor vs Verdent](https://www.anchorterminal.com/compare/sculptor-vs-verdent.md)\n- [Sculptor vs Vibe-Trading](https://www.anchorterminal.com/compare/sculptor-vs-vibe-trading.md)\n- [Sculptor vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/sculptor-vs-warp.md)\n- [Clawboo vs OpenHands](https://www.anchorterminal.com/compare/clawboo-vs-openhands.md)\n- [Clawboo vs Sculptor](https://www.anchorterminal.com/compare/clawboo-vs-sculptor.md)\n- [CLI Manager vs OpenHands](https://www.anchorterminal.com/compare/cli-manager-vs-openhands.md)\n- [CLI Manager vs Sculptor](https://www.anchorterminal.com/compare/cli-manager-vs-sculptor.md)\n- [Harness vs OpenHands](https://www.anchorterminal.com/compare/harness-autonomous-vs-openhands.md)\n- [Harness vs Sculptor](https://www.anchorterminal.com/compare/harness-autonomous-vs-sculptor.md)\n- [OpenHands vs Paperclip](https://www.anchorterminal.com/compare/openhands-vs-paperclip.md)\n- [OpenHands vs Parallax](https://www.anchorterminal.com/compare/openhands-vs-parallax-agents.md)\n- [OpenMausBot vs Sculptor](https://www.anchorterminal.com/compare/openmausbot-vs-sculptor.md)\n- [Paperclip vs Sculptor](https://www.anchorterminal.com/compare/paperclip-vs-sculptor.md)\n- [Parallax vs Sculptor](https://www.anchorterminal.com/compare/parallax-agents-vs-sculptor.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "OpenHands vs Sculptor", "url": "" } ], "description": "OpenHands scores 70.3 (BB) to Sculptor's 53.1 (D) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "OpenHands BB 70.3", "Sculptor D 53.1", "scores" ], "h1": "OpenHands vs Sculptor", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/openhands-vs-sculptor", "published": "2026-10-01", "section": "tools", "title": "OpenHands vs Sculptor for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/openhands-vs-sculptor" }, "tokens": { "markdown": 6300, "slim": 2730 }, "version": 1 }