{
  "data": {
    "a": {
      "slug": "openproject",
      "name": "OpenProject",
      "vendor": "OpenProject GmbH",
      "vendorUrl": "https://www.openproject.org",
      "kind": "http-api",
      "category": "project-management",
      "summary": "OpenProject is open-source project management software for work packages, Gantt plans, boards and time tracking, sold as a cloud service and for self-hosting. Agents reach it through the APIv3 REST API, and paid plans add an MCP server.",
      "url": "https://www.anchorterminal.com/tools/openproject",
      "markdownUrl": "https://www.anchorterminal.com/tools/openproject.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/openproject.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/openproject.json",
      "repo": "https://github.com/opf/openproject",
      "license": "GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service",
      "transports": [
        "http"
      ],
      "packages": [],
      "auth": "mixed",
      "authNotes": "Access is self-serve. A user creates a named personal API token in account settings and sends it as `Authorization: Bearer`, or as the Basic auth password with the user name `apikey`. The token carries that user's permissions, and no per-token scope or expiry was found. An administrator can register OAuth 2.0 applications for the authorisation code grant, PKCE or client credentials, with one scope per API (`api_v3`, `mcp`, `scim_v2`, `bcf_v2_1`). JWTs from a configured OIDC provider are also accepted. No app review or partner approval is described.",
      "pricing": "freemium",
      "pricingNotes": "The Community edition is free to self-host with the REST API included, and the cloud has a 14-day trial with no credit card, so an agent can start without a contract. Cloud plans are per user per month on a yearly term, Basic $7.25 (from 5 users, $8.50 on a monthly term), Professional $13.50 (from 25 users) and Premium $19.50 (from 100 users), with Corporate on request. Euro prices are 5.95, 10.95 and 15.95. API calls are not priced. The MCP server needs Professional or above. Community is not sold as a cloud plan (https://www.openproject.org/pricing/, checked 2026-10-08).",
      "priceSummary": "$7.25 / seat-mo",
      "where": "local",
      "x402": {
        "level": "no",
        "evidence": "No x402, MPP or L402 in the API docs, the OpenAPI document or the pricing page (checked 2026-10-08).",
        "endpoints": []
      },
      "toolCount": null,
      "popularity": {
        "githubStars": 16352,
        "npmWeekly": null,
        "pypiWeekly": null,
        "asOf": "2026-10-08"
      },
      "docsUrl": "https://www.openproject.org/docs/api/",
      "openapi": "https://www.openproject.org/docs/api/v3/spec.yml",
      "capabilities": [
        "tasks.create",
        "tasks.update",
        "projects.manage",
        "tasks.comments",
        "projects.reporting",
        "events.webhooks-send"
      ],
      "tags": [
        "official",
        "hosted",
        "self-hosted",
        "open-source",
        "rest",
        "openapi",
        "oauth",
        "mcp",
        "freemium",
        "free-trial",
        "webhooks",
        "status-page",
        "sla",
        "eu-hosting",
        "project-management"
      ],
      "lastRelease": "2026-10-01",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 57.4,
        "grade": "C",
        "agentReady": false,
        "rank": 550,
        "ranked": true,
        "rankOf": 842,
        "categoryRank": 11,
        "methodology": "0.4",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 70,
          "maintenance": 75,
          "payments": 30,
          "reliability": 52,
          "schema": 76,
          "security": 59,
          "transparency": 87
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "medium",
          "date": "2026-10-08"
        },
        "negative": -5,
        "negativeNotes": [
          "2026-06-08. 13 advisories rated critical were published against opf/openproject between January and June 2026, among them cache store poisoning leading to remote code execution (GHSA-qj96-f42f-6336, fixed in 17.3.3 and 17.4.1), SQL injection in the timestamps function (GHSA-98vw-2r87-fx2r) and a pre-authentication remote code execution in the Docker image through a default secret key (GHSA-r85r-gjq2-f83r, 13 May 2026). OpenProject published them itself, and its policy is to publish each advisory with the fixing release, so the deduction is reduced, -3 (https://github.com/opf/openproject/security/advisories).",
          "2026-09-30. 83 advisories in all were published in the twelve months to 8 October 2026, several of them missing permission checks in APIv3 that exposed private work package data across projects. Several credit the YesWeHack bounty sponsored by the European Commission. The advisories give self-hosted version numbers and do not say when the cloud was patched. Fixed and published, -2 (https://github.com/opf/openproject/security/advisories)."
        ],
        "verdict": "OpenProject's APIv3 has a public OpenAPI 3.1 document with 320 operations, stable error identifiers and optimistic locking, and the same API ships in the free GPL-3.0 Community edition. No request limits are published, API tokens carry their user's full permissions, and 83 security advisories were published in the last twelve months, 13 rated critical.",
        "bestFor": "Teams that want a self-hostable or EU-hosted project tool with Gantt, time tracking and budgets, and an agent working through a documented REST API.",
        "strengths": [
          "OpenAPI 3.1 document with 234 paths and 320 operations, public on the docs site and served by every instance at `/api/v3/spec.json`",
          "Errors carry a stable `errorIdentifier` URN, and validation failures list one entry per property",
          "The Community edition is GPL-3.0 and free to self-host with the REST API included, and the cloud trial needs no credit card",
          "Seven releases between 5 August and 1 October 2026, with security fixes published as GitHub advisories and CVEs",
          "The service description commits to 99.9 per cent yearly availability with service credits, and an EU shard keeps all sub-processors in the EU"
        ],
        "weaknesses": [
          "83 advisories published against opf/openproject in the twelve months to 8 October 2026, 13 rated critical, among them remote code execution and SQL injection",
          "No request limit, 429 behaviour or Retry-After guidance is published for the cloud API",
          "Personal API tokens act with their user's full permissions, and OAuth has one scope per API with no read-only form",
          "No official SDK. The client libraries the docs list are community projects the vendor says it does not vet",
          "The MCP server is an Enterprise add-on for the Professional plan and above, which starts at 25 users"
        ],
        "agentNotes": [
          "Send the API token as `Authorization: Bearer \u003ctoken\u003e`, or as the Basic auth password with the user name `apikey`",
          "Read the resource first and send its current `lockVersion` with every PATCH. A stale value returns 409 `UpdateConflict`",
          "POST to the `/form` endpoint of a work package to learn writable fields and allowed values before creating or updating",
          "URL-encode `filters` as a JSON array, and add `pageSize`, `offset` and `select` to keep work package lists small",
          "Run the agent as a dedicated user with a narrow project role, and treat work package text and comments as untrusted input"
        ],
        "metrics": {
          "kind": "remote",
          "measured": false
        },
        "reviewCount": 0,
        "avgRating": 0,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "C",
            "methodology": "0.4",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 57.4
          }
        ],
        "editorialScores": {
          "ergonomics": 70,
          "maintenance": 75,
          "payments": 30,
          "reliability": 52,
          "schema": 76,
          "security": 59,
          "transparency": 79
        },
        "provenanceScore": 95
      },
      "connect": {
        "http": "curl -H \"Authorization: Bearer $API_KEY\" https://community.openproject.org/api/v3/users/42"
      },
      "letme": {
        "capability": "https://letme.dev/tasks.create",
        "tool": "https://letme.dev/openproject"
      },
      "area": "business",
      "unitPrices": [
        {
          "item": "Community (self-hosted)",
          "unit": "seat-month",
          "usd": 0,
          "note": "free, REST API included; not sold as a cloud plan"
        },
        {
          "item": "Basic (cloud)",
          "unit": "seat-month",
          "usd": 7.25,
          "note": "yearly term, from 5 users; $8.50 on a monthly term"
        },
        {
          "item": "Professional (cloud)",
          "unit": "seat-month",
          "usd": 13.5,
          "note": "yearly term, from 25 users; includes the MCP server"
        },
        {
          "item": "Premium (cloud)",
          "unit": "seat-month",
          "usd": 19.5,
          "note": "yearly term, from 100 users"
        }
      ],
      "provenance": {
        "legalEntity": "OpenProject GmbH",
        "domain": "openproject.org",
        "domainRegistered": "2003-10-24",
        "endpointOnVendorDomain": true,
        "terms": "https://www.openproject.org/legal/terms-of-service/",
        "privacy": "https://www.openproject.org/legal/privacy/",
        "statusPage": "https://status.openproject.com",
        "changelog": "https://www.openproject.org/docs/release-notes/",
        "securityTxt": "valid",
        "checked": "2026-10-08",
        "notes": [
          "The Terms of Service (last updated 6 August 2026) name OpenProject GmbH, Krausenstrasse 9, 10117 Berlin, Germany, and cover both the cloud and the on-premises Enterprise edition. The German version takes precedence.",
          "The privacy policy (version 30 July 2026) has a section on OpenProject Enterprise Cloud, where OpenProject GmbH is processor and the customer controller. The data processing agreement at https://www.openproject.org/legal/data-processing-agreement/ is part of the terms.",
          "Cloud instances answer at \u003cname\u003e.openproject.com or, on the EU shard, an openproject.eu host. Both are the vendor's domains, apart from the openproject.org site that carries the docs and legal pages. Self-hosted instances answer on the owner's domain.",
          "www.openproject.org/.well-known/security.txt is PGP-signed, names security@openproject.com and expires on 31 December 2026.",
          "RDAP for openproject.org gives a registration date of 2003-10-24 and InterNetX GmbH as registrar."
        ],
        "score": 95
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/openproject.json",
      "live": {
        "slug": "openproject",
        "vendorStatus": {
          "page": "https://status.openproject.com",
          "indicator": "unknown",
          "summary": "no machine-readable status found",
          "checkedAt": "2026-10-09T07:58:22.822468534Z"
        },
        "updatedAt": "2026-10-09T07:58:22.822468534Z"
      }
    },
    "answer": "Plane scores 67.6 (B) on agent readiness against OpenProject's 57.4 (C), and leads in 5 of 7 scored categories. OpenProject leads on transparency \u0026 trust.",
    "b": {
      "slug": "plane",
      "name": "Plane",
      "vendor": "Plane Software, Inc.",
      "vendorUrl": "https://plane.so",
      "kind": "http-api",
      "category": "project-management",
      "summary": "Plane is an open-source project management platform for work items, cycles, modules and pages, sold as a cloud service and for self-hosting. Agents reach it through an MIT-licensed MCP server, hosted at mcp.plane.so, and a REST API.",
      "url": "https://www.anchorterminal.com/tools/plane",
      "markdownUrl": "https://www.anchorterminal.com/tools/plane.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/plane.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/plane.json",
      "repo": "https://github.com/makeplane/plane",
      "license": "Plane Community Edition is AGPL-3.0, and the MCP server and the Python and Node SDKs are MIT. Plane Cloud and the Commercial Edition are proprietary under Plane's Terms of Service",
      "transports": [
        "http",
        "streamable-http",
        "stdio"
      ],
      "remoteUrl": "https://api.plane.so",
      "packages": [
        {
          "registry": "pypi",
          "name": "plane-mcp-server"
        },
        {
          "registry": "pypi",
          "name": "plane-sdk"
        },
        {
          "registry": "npm",
          "name": "@makeplane/plane-node-sdk"
        }
      ],
      "auth": "mixed",
      "authNotes": "Access is self-serve. The hosted MCP server at `https://mcp.plane.so/http/mcp` uses OAuth with PKCE (S256), dynamic client registration and two scopes, read and write, and its redirect allowlist covers Cursor, VS Code, Antigravity, Claude.ai, ChatGPT and localhost. A second endpoint, `https://mcp.plane.so/http/api-key/mcp`, takes a personal or workspace access token in `Authorization: Bearer` with an `x-workspace-slug` header. The REST API takes the same token in `X-Api-Key`, or an OAuth 2.0 bearer token from a Plane app with any of 83 fine-grained scopes. Personal access tokens can expire but are not scope-limited. No app review or partner approval is described.",
      "pricing": "freemium",
      "pricingNotes": "The Free cloud plan covers up to 12 users, and the MCP server itself is free, so an agent can start without a contract. Pro is $6 a seat a month billed yearly or $8 monthly, Business $13 or $15, and Enterprise Grid is quoted on request. API and MCP calls are not priced. Self-hosting the Community Edition is free. No separate sandbox was found, and the pricing page does not say which plans include the REST API (https://plane.so/pricing, checked 2026-10-08).",
      "priceSummary": "$6 / seat-mo",
      "where": "both",
      "x402": {
        "level": "no",
        "evidence": "No x402, MPP or L402 in the developer docs, the MCP server repository or the pricing page (checked 2026-10-08).",
        "endpoints": []
      },
      "toolCount": 30,
      "popularity": {
        "githubStars": 60544,
        "npmWeekly": 2649,
        "pypiWeekly": 7528,
        "asOf": "2026-10-08"
      },
      "docsUrl": "https://developers.plane.so",
      "llmsTxt": "https://developers.plane.so/llms.txt",
      "capabilities": [
        "tasks.create",
        "tasks.update",
        "projects.manage",
        "tasks.comments",
        "projects.reporting",
        "work.docs",
        "events.webhooks-send"
      ],
      "tags": [
        "official",
        "hosted",
        "self-hosted",
        "open-source",
        "mcp",
        "oauth",
        "llms-txt",
        "freemium",
        "free-tier",
        "webhooks",
        "status-page",
        "soc2",
        "python",
        "typescript",
        "project-management"
      ],
      "lastRelease": "2026-10-08",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 67.6,
        "grade": "B",
        "agentReady": false,
        "rank": 229,
        "ranked": true,
        "rankOf": 842,
        "categoryRank": 4,
        "methodology": "0.4",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 78,
          "maintenance": 80,
          "payments": 30,
          "reliability": 89,
          "schema": 80,
          "security": 68,
          "transparency": 74
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "medium",
          "date": "2026-10-08"
        },
        "negative": -5,
        "negativeNotes": [
          "2026-08-03. Six advisories rated critical were published against makeplane/plane, among them a pre-authentication workspace invitation hijack (GHSA-4vj8-p63v-8p24), account takeover through an unverified OAuth email match (GHSA-7j95-vh8g-f365) and a magic-code endpoint with no rate limit (GHSA-mqjv-rwgv-4gxq). All are marked fixed in v1.4.0 of 31 July 2026 and were published by Plane, so the deduction is reduced, -3 (https://github.com/makeplane/plane/security/advisories).",
          "2026-09-28. 62 more advisories were published in one day, 31 of them high and none critical, mostly missing project or workspace checks that let one tenant's member read or change another's assets, pages and members, some in the v1 REST API. All 62 are marked fixed in v1.4.0. The advisories do not say when Plane Cloud was patched. Fixed and published, -2 (https://github.com/makeplane/plane/security/advisories)."
        ],
        "verdict": "Plane's MCP server is open source and typed, and its v2 REST API has fine-grained OAuth scopes, problem+json errors and field selection. Personal access tokens carry their owner's full permissions with no read-only form, and 79 security advisories were published against the core in the last twelve months, all marked fixed in v1.4.0 or earlier.",
        "bestFor": "Teams that want an issue tracker they can also self-host, with an agent creating and updating work items, cycles, modules and pages over MCP.",
        "strengths": [
          "The MCP server is MIT, with 30 typed tools covering 207 actions and `readOnlyHint` and `destructiveHint` annotations derived from each tool's actions",
          "OAuth apps on the REST API can request any of 83 fine-grained read and write scopes, and a token without the scope is refused before the permission check",
          "API v2 answers errors as `application/problem+json` with a stable `code`, per-field validation errors and `Retry-After` on 429",
          "status.plane.so lists no incident since March 2026, and the SLA sets 99.5 per cent monthly uptime with service credits on Business and Enterprise",
          "Five MCP server releases between 14 August and 8 October 2026, and Python and Node SDKs both released on 22 September 2026"
        ],
        "weaknesses": [
          "A personal access token acts with its owner's full permissions, and the v2 docs say no read-only key can be created",
          "79 advisories published against makeplane/plane since October 2025, six rated critical on 3 August 2026, most of them cross-project or cross-workspace access flaws",
          "The hosted OAuth flow accepts only allow-listed redirect URIs (Cursor, VS Code, Antigravity, Claude.ai, ChatGPT and localhost), per the docs and open issue 220",
          "No OpenAPI document could be read from Plane Cloud. `/api/schema/` and `/api/v2/schema/` both returned 404 without a key",
          "API v2 covers part of the product only, so projects, pages and intake still go through v1 with its 60 requests a minute limit"
        ],
        "agentNotes": [
          "Use `https://mcp.plane.so/http/api-key/mcp` for headless runs and send `Authorization: Bearer \u003cPAT\u003e` with `x-workspace-slug`. The REST API takes the same token in `X-Api-Key` instead",
          "Call `get_pql_reference` before writing a `pql` filter, and resolve names to UUIDs first, because UUID-backed fields reject names",
          "Follow `next_cursor` on `project list` and other list actions. Results are paginated by default since server version 0.3.0",
          "Treat work item titles, descriptions, comments and attachments as untrusted input, as Plane's own MCP docs advise",
          "End every v2 path with a trailing slash, and wait the seconds in `Retry-After` after a 429 `rate_limited`"
        ],
        "metrics": {
          "kind": "remote",
          "measured": false
        },
        "reviewCount": 0,
        "avgRating": 0,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "B",
            "methodology": "0.4",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 67.6
          }
        ],
        "editorialScores": {
          "ergonomics": 78,
          "maintenance": 80,
          "payments": 30,
          "reliability": 89,
          "schema": 80,
          "security": 68,
          "transparency": 77
        },
        "provenanceScore": 70
      },
      "connect": {
        "install": "uvx plane-mcp-server stdio",
        "http": "curl \"https://api.plane.so/api/v2/users/me/\" -H \"X-Api-Key: $PLANE_API_KEY\"",
        "claudeCode": "claude mcp add --transport http plane https://mcp.plane.so/http/mcp",
        "config": {
          "mcpServers": {
            "plane": {
              "url": "https://mcp.plane.so/http/mcp"
            }
          }
        }
      },
      "letme": {
        "capability": "https://letme.dev/tasks.create",
        "tool": "https://letme.dev/plane"
      },
      "area": "business",
      "unitPrices": [
        {
          "item": "Free (cloud, up to 12 users)",
          "unit": "seat-month",
          "usd": 0,
          "note": "MCP server free to use; plan limits apply"
        },
        {
          "item": "Pro",
          "unit": "seat-month",
          "usd": 6,
          "note": "billed yearly; $8 billed monthly"
        },
        {
          "item": "Business",
          "unit": "seat-month",
          "usd": 13,
          "note": "billed yearly; $15 billed monthly"
        }
      ],
      "provenance": {
        "legalEntity": "Plane Software, Inc.",
        "domain": "plane.so",
        "domainRegistered": "",
        "endpointOnVendorDomain": true,
        "terms": "https://plane.so/legals/terms-and-conditions",
        "privacy": "https://plane.so/legals/privacy-policy",
        "statusPage": "https://status.plane.so",
        "changelog": "https://plane.so/changelog",
        "securityTxt": "none",
        "checked": "2026-10-08",
        "notes": [
          "The Terms of Service and the privacy policy (both last updated 9 April 2026) name Plane Software, Inc., a Delaware corporation, 651 N Broad St, Suite 201, Middletown, Delaware 19709. The terms cover the cloud, self-hosted and air-gapped service, APIs included.",
          "The privacy policy covers Plane as controller. Customer data in a cloud workspace is governed by the Data Processing Addendum at https://plane.so/legals/dpa.",
          "The REST API answers at api.plane.so and the MCP server at mcp.plane.so, both plane.so subdomains.",
          "plane.so/.well-known/security.txt returned 404. SECURITY.md in the makeplane/plane and plane-mcp-server repositories sends reports to security@plane.so.",
          "The changelog link is the product changelog, with entries about twice a month. MCP server releases are listed at https://github.com/makeplane/plane-mcp-server/releases.",
          "No RDAP service answers for the .so registry, so the domain registration date was not established."
        ],
        "score": 70
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/plane.json",
      "live": {
        "slug": "plane",
        "probe": {
          "target": "https://api.plane.so",
          "method": "get",
          "lastAt": "2026-10-09T10:14:24.109443907Z",
          "lastOk": true,
          "lastStatus": 200,
          "lastMs": 356,
          "authRequired": false,
          "uptime24h": 100,
          "uptime30d": 100,
          "p50ms24h": 344,
          "p95ms24h": 384,
          "samples24h": 159,
          "samples30d": 159,
          "days": [
            {
              "date": "2026-10-08",
              "probes": 50,
              "ok": 50
            },
            {
              "date": "2026-10-09",
              "probes": 109,
              "ok": 109
            }
          ]
        },
        "vendorStatus": {
          "page": "https://status.plane.so",
          "indicator": "none",
          "summary": "All Systems Operational",
          "checkedAt": "2026-10-09T10:11:15.021105158Z"
        },
        "updatedAt": "2026-10-09T10:14:24.109443907Z"
      }
    },
    "facts": [
      {
        "a": "HTTP API",
        "b": "HTTP API",
        "name": "Kind"
      },
      {
        "a": "OpenProject GmbH",
        "b": "Plane Software, Inc.",
        "name": "Vendor"
      },
      {
        "a": "no (local only)",
        "b": "https://api.plane.so",
        "name": "Hosted endpoint"
      },
      {
        "a": "HTTP",
        "b": "HTTP, Streamable HTTP, stdio",
        "name": "Transports"
      },
      {
        "a": "OAuth or key",
        "b": "OAuth or key",
        "name": "Auth"
      },
      {
        "a": "Freemium",
        "b": "Freemium",
        "name": "Pricing"
      },
      {
        "a": "no",
        "b": "no",
        "name": "x402"
      },
      {
        "a": "GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service",
        "b": "Plane Community Edition is AGPL-3.0, and the MCP server and the Python and Node SDKs are MIT. Plane Cloud and the Commercial Edition are proprietary under Plane's Terms of Service",
        "name": "Licence"
      },
      {
        "a": "none",
        "b": "30",
        "name": "Tools exposed"
      },
      {
        "a": "no",
        "b": "no",
        "name": "Read-only variant documented"
      },
      {
        "a": "no",
        "b": "yes",
        "name": "llms.txt"
      },
      {
        "a": "2026-10-01",
        "b": "2026-10-08",
        "name": "Last release"
      },
      {
        "a": "2026-08-06",
        "b": "2026-04-09",
        "name": "Terms last updated"
      },
      {
        "a": "no date given",
        "b": "2026-04-09",
        "name": "Privacy policy last updated"
      },
      {
        "a": "not found in the text",
        "b": "not found in the text",
        "name": "Customer content may train models"
      },
      {
        "a": "not found in the text",
        "b": "yes",
        "name": "Terms restrict automated access"
      },
      {
        "a": "not found in the text",
        "b": "yes",
        "name": "Terms restrict benchmarking"
      },
      {
        "a": "not found in the text",
        "b": "not found in the text",
        "name": "Terms or service can change without notice"
      },
      {
        "a": "not found in the text",
        "b": "yes",
        "name": "Arbitration or class-action waiver"
      },
      {
        "a": "16k stars",
        "b": "61k stars, 2.6k npm/wk, 7.5k PyPI/wk",
        "name": "Popularity"
      }
    ],
    "faq": [
      {
        "answer": "Plane scores 67.6 (B) on agent readiness against OpenProject's 57.4 (C), and leads in 5 of 7 scored categories. OpenProject leads on transparency \u0026 trust.",
        "question": "Which is better for AI agents, OpenProject or Plane?"
      },
      {
        "answer": "Both take an API key or an OAuth sign-in.",
        "question": "Do OpenProject and Plane need an API key?"
      },
      {
        "answer": "No hosted endpoint is listed for OpenProject. Plane has a hosted endpoint at https://api.plane.so.",
        "question": "Can an agent call OpenProject and Plane without installing anything?"
      },
      {
        "answer": "Yes. OpenProject is open source (GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service). Plane is open source (Plane Community Edition is AGPL-3.0, and the MCP server and the Python and Node SDKs are MIT. Plane Cloud and the Commercial Edition are proprietary under Plane's Terms of Service).",
        "question": "Are OpenProject and Plane open source?"
      }
    ],
    "goodFor": [
      {
        "aheadOn": [
          "Transparency \u0026 trust, 87 against 74"
        ],
        "also": null,
        "goodFor": "Teams that want a self-hostable or EU-hosted project tool with Gantt, time tracking and budgets, and an agent working through a documented REST API.",
        "slug": "openproject",
        "watchFor": "83 advisories published against opf/openproject in the twelve months to 8 October 2026, 13 rated critical, among them remote code execution and SQL injection"
      },
      {
        "aheadOn": [
          "Reliability, 89 against 52",
          "Agent ergonomics, 78 against 70",
          "Security \u0026 auth, 68 against 59",
          "Maintenance \u0026 community, 80 against 75"
        ],
        "also": [
          "A hosted endpoint, with nothing to install",
          "Runs on your own machine"
        ],
        "goodFor": "Teams that want an issue tracker they can also self-host, with an agent creating and updating work items, cycles, modules and pages over MCP.",
        "slug": "plane",
        "watchFor": "A personal access token acts with its owner's full permissions, and the v2 docs say no read-only key can be created"
      }
    ],
    "job": {
      "capability": "tasks.create",
      "name": "Tasks create"
    },
    "others": [
      {
        "json": "https://www.anchorterminal.com/compare/asana-vs-openproject.json",
        "title": "Asana vs OpenProject",
        "url": "https://www.anchorterminal.com/compare/asana-vs-openproject"
      },
      {
        "json": "https://www.anchorterminal.com/compare/asana-vs-plane.json",
        "title": "Asana vs Plane",
        "url": "https://www.anchorterminal.com/compare/asana-vs-plane"
      },
      {
        "json": "https://www.anchorterminal.com/compare/basecamp-vs-openproject.json",
        "title": "Basecamp vs OpenProject",
        "url": "https://www.anchorterminal.com/compare/basecamp-vs-openproject"
      },
      {
        "json": "https://www.anchorterminal.com/compare/basecamp-vs-plane.json",
        "title": "Basecamp vs Plane",
        "url": "https://www.anchorterminal.com/compare/basecamp-vs-plane"
      },
      {
        "json": "https://www.anchorterminal.com/compare/clickup-vs-openproject.json",
        "title": "ClickUp vs OpenProject",
        "url": "https://www.anchorterminal.com/compare/clickup-vs-openproject"
      },
      {
        "json": "https://www.anchorterminal.com/compare/clickup-vs-plane.json",
        "title": "ClickUp vs Plane",
        "url": "https://www.anchorterminal.com/compare/clickup-vs-plane"
      },
      {
        "json": "https://www.anchorterminal.com/compare/monday-vs-openproject.json",
        "title": "monday.com vs OpenProject",
        "url": "https://www.anchorterminal.com/compare/monday-vs-openproject"
      },
      {
        "json": "https://www.anchorterminal.com/compare/monday-vs-plane.json",
        "title": "monday.com vs Plane",
        "url": "https://www.anchorterminal.com/compare/monday-vs-plane"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openproject-vs-roma.json",
        "title": "OpenProject vs Roma",
        "url": "https://www.anchorterminal.com/compare/openproject-vs-roma"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openproject-vs-shortcut.json",
        "title": "OpenProject vs Shortcut",
        "url": "https://www.anchorterminal.com/compare/openproject-vs-shortcut"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openproject-vs-taiga.json",
        "title": "OpenProject vs Taiga",
        "url": "https://www.anchorterminal.com/compare/openproject-vs-taiga"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openproject-vs-teamwork.json",
        "title": "OpenProject vs Teamwork.com",
        "url": "https://www.anchorterminal.com/compare/openproject-vs-teamwork"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openproject-vs-todoist.json",
        "title": "OpenProject vs Todoist",
        "url": "https://www.anchorterminal.com/compare/openproject-vs-todoist"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openproject-vs-trello.json",
        "title": "OpenProject vs Trello",
        "url": "https://www.anchorterminal.com/compare/openproject-vs-trello"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openproject-vs-wrike.json",
        "title": "OpenProject vs Wrike",
        "url": "https://www.anchorterminal.com/compare/openproject-vs-wrike"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openproject-vs-youtrack.json",
        "title": "OpenProject vs YouTrack",
        "url": "https://www.anchorterminal.com/compare/openproject-vs-youtrack"
      },
      {
        "json": "https://www.anchorterminal.com/compare/plane-vs-roma.json",
        "title": "Plane vs Roma",
        "url": "https://www.anchorterminal.com/compare/plane-vs-roma"
      },
      {
        "json": "https://www.anchorterminal.com/compare/plane-vs-shortcut.json",
        "title": "Plane vs Shortcut",
        "url": "https://www.anchorterminal.com/compare/plane-vs-shortcut"
      },
      {
        "json": "https://www.anchorterminal.com/compare/plane-vs-taiga.json",
        "title": "Plane vs Taiga",
        "url": "https://www.anchorterminal.com/compare/plane-vs-taiga"
      },
      {
        "json": "https://www.anchorterminal.com/compare/plane-vs-teamwork.json",
        "title": "Plane vs Teamwork.com",
        "url": "https://www.anchorterminal.com/compare/plane-vs-teamwork"
      },
      {
        "json": "https://www.anchorterminal.com/compare/plane-vs-todoist.json",
        "title": "Plane vs Todoist",
        "url": "https://www.anchorterminal.com/compare/plane-vs-todoist"
      },
      {
        "json": "https://www.anchorterminal.com/compare/plane-vs-trello.json",
        "title": "Plane vs Trello",
        "url": "https://www.anchorterminal.com/compare/plane-vs-trello"
      },
      {
        "json": "https://www.anchorterminal.com/compare/plane-vs-wrike.json",
        "title": "Plane vs Wrike",
        "url": "https://www.anchorterminal.com/compare/plane-vs-wrike"
      },
      {
        "json": "https://www.anchorterminal.com/compare/plane-vs-youtrack.json",
        "title": "Plane vs YouTrack",
        "url": "https://www.anchorterminal.com/compare/plane-vs-youtrack"
      }
    ],
    "scores": [
      {
        "by": 37,
        "edge": "plane",
        "key": "reliability",
        "name": "Reliability",
        "openproject": 52,
        "plane": 89,
        "weight": 16
      },
      {
        "key": "performance",
        "name": "Performance",
        "pending": true,
        "weight": 10
      },
      {
        "by": 4,
        "edge": "plane",
        "key": "schema",
        "name": "Schema \u0026 documentation",
        "openproject": 76,
        "plane": 80,
        "weight": 13
      },
      {
        "by": 8,
        "edge": "plane",
        "key": "ergonomics",
        "name": "Agent ergonomics",
        "openproject": 70,
        "plane": 78,
        "weight": 13
      },
      {
        "by": 9,
        "edge": "plane",
        "key": "security",
        "name": "Security \u0026 auth",
        "openproject": 59,
        "plane": 68,
        "weight": 14
      },
      {
        "by": 0,
        "edge": "",
        "key": "payments",
        "name": "Payments \u0026 pricing",
        "openproject": 30,
        "plane": 30,
        "weight": 10
      },
      {
        "key": "tasks",
        "name": "Task success",
        "pending": true,
        "weight": 10
      },
      {
        "by": 5,
        "edge": "plane",
        "key": "maintenance",
        "name": "Maintenance \u0026 community",
        "openproject": 75,
        "plane": 80,
        "weight": 7
      },
      {
        "by": 13,
        "edge": "openproject",
        "key": "transparency",
        "name": "Transparency \u0026 trust",
        "openproject": 87,
        "plane": 74,
        "weight": 7
      }
    ],
    "summary": "Plane scores 67.6 (B) on agent readiness against OpenProject's 57.4 (C), and leads in 5 of 7 scored categories. OpenProject leads on transparency \u0026 trust. Both do tasks create.",
    "verdicts": {
      "openproject": "OpenProject's APIv3 has a public OpenAPI 3.1 document with 320 operations, stable error identifiers and optimistic locking, and the same API ships in the free GPL-3.0 Community edition. No request limits are published, API tokens carry their user's full permissions, and 83 security advisories were published in the last twelve months, 13 rated critical.",
      "plane": "Plane's MCP server is open source and typed, and its v2 REST API has fine-grained OAuth scopes, problem+json errors and field selection. Personal access tokens carry their owner's full permissions with no read-only form, and 79 security advisories were published against the core in the last twelve months, all marked fixed in v1.4.0 or earlier."
    }
  },
  "kind": "anchor.page",
  "links": {
    "api": "https://www.anchorterminal.com/api/v1/index.json",
    "html": "https://www.anchorterminal.com/compare/openproject-vs-plane",
    "json": "https://www.anchorterminal.com/compare/openproject-vs-plane.json",
    "llms": "https://www.anchorterminal.com/llms.txt",
    "markdown": "https://www.anchorterminal.com/compare/openproject-vs-plane.md",
    "slim": "https://www.anchorterminal.com/compare/openproject-vs-plane.min.md"
  },
  "markdown": "Plane scores 67.6 (B) on agent readiness against OpenProject's 57.4 (C), and leads in 5 of 7 scored categories. OpenProject leads on transparency \u0026 trust. Both do tasks create.\n\n- OpenProject: grade C, 57.4/100, rank #550 of 842. Markdown https://www.anchorterminal.com/tools/openproject.md · JSON https://www.anchorterminal.com/api/v1/tools/openproject.json\n- Plane: grade B, 67.6/100, rank #229 of 842. Markdown https://www.anchorterminal.com/tools/plane.md · JSON https://www.anchorterminal.com/api/v1/tools/plane.json\n\n## Which one, for what\n\n### OpenProject (C)\n\nGood for: Teams that want a self-hostable or EU-hosted project tool with Gantt, time tracking and budgets, and an agent working through a documented REST API.\n\nAhead on:\n- Transparency \u0026 trust, 87 against 74\n\nWatch for: 83 advisories published against opf/openproject in the twelve months to 8 October 2026, 13 rated critical, among them remote code execution and SQL injection\n\n### Plane (B)\n\nGood for: Teams that want an issue tracker they can also self-host, with an agent creating and updating work items, cycles, modules and pages over MCP.\n\nAhead on:\n- Reliability, 89 against 52\n- Agent ergonomics, 78 against 70\n- Security \u0026 auth, 68 against 59\n- Maintenance \u0026 community, 80 against 75\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- Runs on your own machine\n\nWatch for: A personal access token acts with its owner's full permissions, and the v2 docs say no read-only key can be created\n\n\n## Score by category\n\n| Category | Weight | OpenProject | Plane | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 52 | 89 | Plane +37 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 76 | 80 | Plane +4 |\n| Agent ergonomics | 13% (16.2 this run) | 70 | 78 | Plane +8 |\n| Security \u0026 auth | 14% (17.5 this run) | 59 | 68 | Plane +9 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 30 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 75 | 80 | Plane +5 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 87 | 74 | OpenProject +13 |\n| Negative events | ≤15 | -5 | -5 | |\n| **Total** | | **57.4 · C** | **67.6 · B** | |\n\n## Facts side by side\n\n| Fact | OpenProject | Plane |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | OpenProject GmbH | Plane Software, Inc. |\n| Hosted endpoint | no (local only) | `https://api.plane.so` |\n| Transports | HTTP | HTTP, Streamable HTTP, stdio |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service | Plane Community Edition is AGPL-3.0, and the MCP server and the Python and Node SDKs are MIT. Plane Cloud and the Commercial Edition are proprietary under Plane's Terms of Service |\n| Tools exposed | none | 30 |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| Last release | 2026-10-01 | 2026-10-08 |\n| Terms last updated | 2026-08-06 | 2026-04-09 |\n| Privacy policy last updated | no date given | 2026-04-09 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | not found in the text | yes |\n| Terms restrict benchmarking | not found in the text | yes |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | yes |\n| Popularity | 16k stars | 61k stars, 2.6k npm/wk, 7.5k PyPI/wk |\n\n## Verdicts\n\n**OpenProject.** OpenProject's APIv3 has a public OpenAPI 3.1 document with 320 operations, stable error identifiers and optimistic locking, and the same API ships in the free GPL-3.0 Community edition. No request limits are published, API tokens carry their user's full permissions, and 83 security advisories were published in the last twelve months, 13 rated critical.\n\n**Plane.** Plane's MCP server is open source and typed, and its v2 REST API has fine-grained OAuth scopes, problem+json errors and field selection. Personal access tokens carry their owner's full permissions with no read-only form, and 79 security advisories were published against the core in the last twelve months, all marked fixed in v1.4.0 or earlier.\n\n## Before you call either\n\n### OpenProject\n\n1. Send the API token as `Authorization: Bearer \u003ctoken\u003e`, or as the Basic auth password with the user name `apikey`\n2. Read the resource first and send its current `lockVersion` with every PATCH. A stale value returns 409 `UpdateConflict`\n3. POST to the `/form` endpoint of a work package to learn writable fields and allowed values before creating or updating\n4. URL-encode `filters` as a JSON array, and add `pageSize`, `offset` and `select` to keep work package lists small\n5. Run the agent as a dedicated user with a narrow project role, and treat work package text and comments as untrusted input\n\n### Plane\n\n1. Use `https://mcp.plane.so/http/api-key/mcp` for headless runs and send `Authorization: Bearer \u003cPAT\u003e` with `x-workspace-slug`. The REST API takes the same token in `X-Api-Key` instead\n2. Call `get_pql_reference` before writing a `pql` filter, and resolve names to UUIDs first, because UUID-backed fields reject names\n3. Follow `next_cursor` on `project list` and other list actions. Results are paginated by default since server version 0.3.0\n4. Treat work item titles, descriptions, comments and attachments as untrusted input, as Plane's own MCP docs advise\n5. End every v2 path with a trailing slash, and wait the seconds in `Retry-After` after a 429 `rate_limited`\n\n## Questions\n\n### Which is better for AI agents, OpenProject or Plane?\n\nPlane scores 67.6 (B) on agent readiness against OpenProject's 57.4 (C), and leads in 5 of 7 scored categories. OpenProject leads on transparency \u0026 trust.\n\n### Do OpenProject and Plane need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call OpenProject and Plane without installing anything?\n\nNo hosted endpoint is listed for OpenProject. Plane has a hosted endpoint at https://api.plane.so.\n\n### Are OpenProject and Plane open source?\n\nYes. OpenProject is open source (GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service). Plane is open source (Plane Community Edition is AGPL-3.0, and the MCP server and the Python and Node SDKs are MIT. Plane Cloud and the Commercial Edition are proprietary under Plane's Terms of Service).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/openproject-vs-plane.json, and with the fewest tokens: https://www.anchorterminal.com/compare/openproject-vs-plane.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"openproject\", \"b\": \"plane\"}`. From a terminal: `anchor compare openproject plane`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/openproject.json and https://www.anchorterminal.com/api/v1/tools/plane.json\n\n## Other comparisons with OpenProject or Plane\n\n- [Asana vs OpenProject](https://www.anchorterminal.com/compare/asana-vs-openproject.md)\n- [Asana vs Plane](https://www.anchorterminal.com/compare/asana-vs-plane.md)\n- [Basecamp vs OpenProject](https://www.anchorterminal.com/compare/basecamp-vs-openproject.md)\n- [Basecamp vs Plane](https://www.anchorterminal.com/compare/basecamp-vs-plane.md)\n- [ClickUp vs OpenProject](https://www.anchorterminal.com/compare/clickup-vs-openproject.md)\n- [ClickUp vs Plane](https://www.anchorterminal.com/compare/clickup-vs-plane.md)\n- [monday.com vs OpenProject](https://www.anchorterminal.com/compare/monday-vs-openproject.md)\n- [monday.com vs Plane](https://www.anchorterminal.com/compare/monday-vs-plane.md)\n- [OpenProject vs Roma](https://www.anchorterminal.com/compare/openproject-vs-roma.md)\n- [OpenProject vs Shortcut](https://www.anchorterminal.com/compare/openproject-vs-shortcut.md)\n- [OpenProject vs Taiga](https://www.anchorterminal.com/compare/openproject-vs-taiga.md)\n- [OpenProject vs Teamwork.com](https://www.anchorterminal.com/compare/openproject-vs-teamwork.md)\n- [OpenProject vs Todoist](https://www.anchorterminal.com/compare/openproject-vs-todoist.md)\n- [OpenProject vs Trello](https://www.anchorterminal.com/compare/openproject-vs-trello.md)\n- [OpenProject vs Wrike](https://www.anchorterminal.com/compare/openproject-vs-wrike.md)\n- [OpenProject vs YouTrack](https://www.anchorterminal.com/compare/openproject-vs-youtrack.md)\n- [Plane vs Roma](https://www.anchorterminal.com/compare/plane-vs-roma.md)\n- [Plane vs Shortcut](https://www.anchorterminal.com/compare/plane-vs-shortcut.md)\n- [Plane vs Taiga](https://www.anchorterminal.com/compare/plane-vs-taiga.md)\n- [Plane vs Teamwork.com](https://www.anchorterminal.com/compare/plane-vs-teamwork.md)\n- [Plane vs Todoist](https://www.anchorterminal.com/compare/plane-vs-todoist.md)\n- [Plane vs Trello](https://www.anchorterminal.com/compare/plane-vs-trello.md)\n- [Plane vs Wrike](https://www.anchorterminal.com/compare/plane-vs-wrike.md)\n- [Plane vs YouTrack](https://www.anchorterminal.com/compare/plane-vs-youtrack.md)\n",
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-10-09",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.4",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run"
  },
  "page": {
    "breadcrumbs": [
      {
        "name": "Home",
        "url": "https://www.anchorterminal.com/"
      },
      {
        "name": "Compare",
        "url": "https://www.anchorterminal.com/compare/"
      },
      {
        "name": "OpenProject vs Plane",
        "url": ""
      }
    ],
    "description": "Plane scores 67.6 (B) on agent readiness against OpenProject's 57.4 (C), and leads in 5 of 7 scored categories. OpenProject leads on transparency \u0026 trust. Both do tasks create. Category scores, facts, verdicts and agent notes side by side.",
    "facts": [
      "OpenProject C 57.4",
      "Plane B 67.6",
      "scores"
    ],
    "h1": "OpenProject vs Plane",
    "image": "https://www.anchorterminal.com/assets/og/compare-openproject-vs-plane.png",
    "path": "/compare/openproject-vs-plane",
    "published": "2026-10-01",
    "section": "tools",
    "title": "OpenProject vs Plane for AI agents, C 57.4 vs B 67.6 | Anchor Terminal",
    "toc": null,
    "updated": "2026-10-09",
    "url": "https://www.anchorterminal.com/compare/openproject-vs-plane"
  },
  "tokens": {
    "markdown": 2500,
    "slim": 730
  },
  "version": 1
}