{ "data": { "a": { "slug": "openproject", "name": "OpenProject", "vendor": "OpenProject GmbH", "vendorUrl": "https://www.openproject.org", "kind": "http-api", "category": "project-management", "summary": "OpenProject is open-source project management software for work packages, Gantt plans, boards and time tracking, sold as a cloud service and for self-hosting. Agents reach it through the APIv3 REST API, and paid plans add an MCP server.", "url": "https://www.anchorterminal.com/tools/openproject", "markdownUrl": "https://www.anchorterminal.com/tools/openproject.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/openproject.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/openproject.json", "repo": "https://github.com/opf/openproject", "license": "GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service", "transports": [ "http" ], "packages": [], "auth": "mixed", "authNotes": "Access is self-serve. A user creates a named personal API token in account settings and sends it as `Authorization: Bearer`, or as the Basic auth password with the user name `apikey`. The token carries that user's permissions, and no per-token scope or expiry was found. An administrator can register OAuth 2.0 applications for the authorisation code grant, PKCE or client credentials, with one scope per API (`api_v3`, `mcp`, `scim_v2`, `bcf_v2_1`). JWTs from a configured OIDC provider are also accepted. No app review or partner approval is described.", "pricing": "freemium", "pricingNotes": "The Community edition is free to self-host with the REST API included, and the cloud has a 14-day trial with no credit card, so an agent can start without a contract. Cloud plans are per user per month on a yearly term, Basic $7.25 (from 5 users, $8.50 on a monthly term), Professional $13.50 (from 25 users) and Premium $19.50 (from 100 users), with Corporate on request. Euro prices are 5.95, 10.95 and 15.95. API calls are not priced. The MCP server needs Professional or above. Community is not sold as a cloud plan (https://www.openproject.org/pricing/, checked 2026-10-08).", "priceSummary": "$7.25 / seat-mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API docs, the OpenAPI document or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 16352, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://www.openproject.org/docs/api/", "openapi": "https://www.openproject.org/docs/api/v3/spec.yml", "capabilities": [ "tasks.create", "tasks.update", "projects.manage", "tasks.comments", "projects.reporting", "events.webhooks-send" ], "tags": [ "official", "hosted", "self-hosted", "open-source", "rest", "openapi", "oauth", "mcp", "freemium", "free-trial", "webhooks", "status-page", "sla", "eu-hosting", "project-management" ], "lastRelease": "2026-10-01", "graded": true, "anchor": { "graded": true, "score": 57.4, "grade": "C", "agentReady": false, "rank": 610, "ranked": true, "rankOf": 950, "categoryRank": 11, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 75, "payments": 30, "reliability": 52, "schema": 76, "security": 59, "transparency": 87 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -5, "negativeNotes": [ "2026-06-08. 13 advisories rated critical were published against opf/openproject between January and June 2026, among them cache store poisoning leading to remote code execution (GHSA-qj96-f42f-6336, fixed in 17.3.3 and 17.4.1), SQL injection in the timestamps function (GHSA-98vw-2r87-fx2r) and a pre-authentication remote code execution in the Docker image through a default secret key (GHSA-r85r-gjq2-f83r, 13 May 2026). OpenProject published them itself, and its policy is to publish each advisory with the fixing release, so the deduction is reduced, -3 (https://github.com/opf/openproject/security/advisories).", "2026-09-30. 83 advisories in all were published in the twelve months to 8 October 2026, several of them missing permission checks in APIv3 that exposed private work package data across projects. Several credit the YesWeHack bounty sponsored by the European Commission. The advisories give self-hosted version numbers and do not say when the cloud was patched. Fixed and published, -2 (https://github.com/opf/openproject/security/advisories)." ], "verdict": "OpenProject's APIv3 has a public OpenAPI 3.1 document with 320 operations, stable error identifiers and optimistic locking, and the same API ships in the free GPL-3.0 Community edition. No request limits are published, API tokens carry their user's full permissions, and 83 security advisories were published in the last twelve months, 13 rated critical.", "bestFor": "Teams that want a self-hostable or EU-hosted project tool with Gantt, time tracking and budgets, and an agent working through a documented REST API.", "strengths": [ "OpenAPI 3.1 document with 234 paths and 320 operations, public on the docs site and served by every instance at `/api/v3/spec.json`", "Errors carry a stable `errorIdentifier` URN, and validation failures list one entry per property", "The Community edition is GPL-3.0 and free to self-host with the REST API included, and the cloud trial needs no credit card", "Seven releases between 5 August and 1 October 2026, with security fixes published as GitHub advisories and CVEs", "The service description commits to 99.9 per cent yearly availability with service credits, and an EU shard keeps all sub-processors in the EU" ], "weaknesses": [ "83 advisories published against opf/openproject in the twelve months to 8 October 2026, 13 rated critical, among them remote code execution and SQL injection", "No request limit, 429 behaviour or Retry-After guidance is published for the cloud API", "Personal API tokens act with their user's full permissions, and OAuth has one scope per API with no read-only form", "No official SDK. The client libraries the docs list are community projects the vendor says it does not vet", "The MCP server is an Enterprise add-on for the Professional plan and above, which starts at 25 users" ], "agentNotes": [ "Send the API token as `Authorization: Bearer \u003ctoken\u003e`, or as the Basic auth password with the user name `apikey`", "Read the resource first and send its current `lockVersion` with every PATCH. A stale value returns 409 `UpdateConflict`", "POST to the `/form` endpoint of a work package to learn writable fields and allowed values before creating or updating", "URL-encode `filters` as a JSON array, and add `pageSize`, `offset` and `select` to keep work package lists small", "Run the agent as a dedicated user with a narrow project role, and treat work package text and comments as untrusted input" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 57.4 } ], "editorialScores": { "ergonomics": 70, "maintenance": 75, "payments": 30, "reliability": 52, "schema": 76, "security": 59, "transparency": 79 }, "provenanceScore": 95 }, "connect": { "http": "curl -H \"Authorization: Bearer $API_KEY\" https://community.openproject.org/api/v3/users/42" }, "letme": { "capability": "https://letme.dev/tasks.create", "tool": "https://letme.dev/openproject" }, "area": "business", "unitPrices": [ { "item": "Community (self-hosted)", "unit": "seat-month", "usd": 0, "note": "free, REST API included; not sold as a cloud plan" }, { "item": "Basic (cloud)", "unit": "seat-month", "usd": 7.25, "note": "yearly term, from 5 users; $8.50 on a monthly term" }, { "item": "Professional (cloud)", "unit": "seat-month", "usd": 13.5, "note": "yearly term, from 25 users; includes the MCP server" }, { "item": "Premium (cloud)", "unit": "seat-month", "usd": 19.5, "note": "yearly term, from 100 users" } ], "provenance": { "legalEntity": "OpenProject GmbH", "domain": "openproject.org", "domainRegistered": "2003-10-24", "endpointOnVendorDomain": true, "terms": "https://www.openproject.org/legal/terms-of-service/", "privacy": "https://www.openproject.org/legal/privacy/", "statusPage": "https://status.openproject.com", "changelog": "https://www.openproject.org/docs/release-notes/", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The Terms of Service (last updated 6 August 2026) name OpenProject GmbH, Krausenstrasse 9, 10117 Berlin, Germany, and cover both the cloud and the on-premises Enterprise edition. The German version takes precedence.", "The privacy policy (version 30 July 2026) has a section on OpenProject Enterprise Cloud, where OpenProject GmbH is processor and the customer controller. The data processing agreement at https://www.openproject.org/legal/data-processing-agreement/ is part of the terms.", "Cloud instances answer at \u003cname\u003e.openproject.com or, on the EU shard, an openproject.eu host. Both are the vendor's domains, apart from the openproject.org site that carries the docs and legal pages. Self-hosted instances answer on the owner's domain.", "www.openproject.org/.well-known/security.txt is PGP-signed, names security@openproject.com and expires on 31 December 2026.", "RDAP for openproject.org gives a registration date of 2003-10-24 and InterNetX GmbH as registrar." ], "score": 95 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/openproject.json", "live": { "slug": "openproject", "vendorStatus": { "page": "https://status.openproject.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-10T00:51:06.311707633Z" }, "versions": [ { "registry": "github", "name": "opf/openproject", "version": "v17.9.1", "released": "2026-10-01", "seenAt": "2026-10-09T17:11:02.811144094Z" } ], "githubStars": 16363, "securityTxt": { "url": "https://openproject.org/.well-known/security.txt", "state": "valid", "expires": "2026-12-31T22:59:00.000Z", "checkedAt": "2026-10-09T15:39:25.844920276Z" }, "pages": [ { "url": "https://www.openproject.org/docs/release-notes/", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:52:47.086194924Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "9f50045aa233" }, { "url": "https://www.openproject.org/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-09T18:52:53.124973082Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "b7ab69f9338c" }, { "url": "https://www.openproject.org/legal/privacy/", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:52:49.139595217Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "bbdaadfc07cd" }, { "url": "https://www.openproject.org/legal/terms-of-service/", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:52:51.123838723Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0443c7288991" } ], "updatedAt": "2026-10-10T00:51:06.311707633Z" } }, "answer": "OpenProject scores 57.4 (C) on agent readiness against Redmine's 50.2 (D), and leads in 5 of 7 scored categories. Redmine leads on reliability and payments \u0026 pricing.", "b": { "slug": "redmine", "name": "Redmine", "vendor": "Redmine project", "vendorUrl": "https://www.redmine.org", "kind": "http-api", "category": "project-management", "summary": "Redmine is open-source project management software for issues, projects, time tracking, wikis and Gantt charts, written in Ruby on Rails and run on the owner's own server. Agents reach it through a REST API in JSON or XML.", "url": "https://www.anchorterminal.com/tools/redmine", "markdownUrl": "https://www.anchorterminal.com/tools/redmine.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/redmine.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/redmine.json", "repo": "https://github.com/redmine/redmine", "license": "GPL-2.0-or-later", "transports": [ "http" ], "packages": [], "auth": "mixed", "authNotes": "Access is self-serve on the owner's own install. An administrator first enables the REST API in the settings, where it is off by default. Each user then has one API key on the account page, sent in the `X-Redmine-API-Key` header, as the Basic auth user name or as a `key` query parameter. The key carries that user's full permissions and can be reset. Basic auth with a login and password also works, unless two-factor is active. Versions 6.1 and later accept OAuth 2 bearer tokens from applications an administrator registers, by the authorisation code grant, with one scope per Redmine permission.", "pricing": "free", "pricingNotes": "Free. Redmine is distributed under the GPL with no paid edition, cloud plan or trial from the project, so an agent can start without a contract once someone installs it. The owner pays for the server. API calls are not priced. The home page links one demo site and calls it unofficial and third-party (https://www.redmine.org/projects/redmine/wiki/Download, checked 2026-10-09).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the REST API wiki or the source at tag 7.0.2 (checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://www.redmine.org/projects/redmine/wiki/Rest_api", "capabilities": [ "tasks.create", "tasks.update", "projects.manage", "tasks.comments", "events.webhooks-send" ], "tags": [ "official", "self-hosted", "open-source", "rest", "oauth", "api-key", "free", "webhooks", "ruby", "project-management" ], "lastRelease": "2026-09-30", "graded": true, "anchor": { "graded": true, "score": 50.2, "grade": "D", "agentReady": false, "rank": 777, "ranked": true, "rankOf": 950, "categoryRank": 13, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 51, "maintenance": 73, "payments": 60, "reliability": 69, "schema": 32, "security": 51, "transparency": 47 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": -4, "negativeNotes": [ "2026-09-30. 24 advisories were fixed between 6 January and 30 September 2026, two rated critical, both PostScript execution through thumbnail generation (#44145, fixed in 6.1.3 of 15 June 2026, and one fixed in 6.1.1 of 6 January 2026), and nine rated high, among them an OAuth scope bypass (#44174) and two REST API leaks of private issue subjects and project names (#44467, #44468, fixed in 7.0.2 and 6.1.5). All are fixed and listed by the project itself, so the deduction is reduced, -4 (https://www.redmine.org/projects/redmine/wiki/Security_Advisories)." ], "verdict": "Redmine's REST API covers issues, projects, time entries and 20 other resources, and versions 6.1 and later add OAuth 2 with one scope per permission. The software is free under the GPL. No OpenAPI document exists, most errors return a bare status code, and 24 security advisories were published in twelve months, two rated critical.", "bestFor": "Teams that already run Redmine or want a free, self-hosted tracker with issues, time entries and wikis under their own control.", "strengths": [ "Free under GPL version 2 or later, with no paid edition, and the REST API is part of the standard release", "OAuth 2 since 6.1, authorisation code grant only, with one scope per Redmine permission and tokens stored hashed", "Five releases between 26 August and 30 September 2026, and a published policy that keeps three release series supported", "Issue lists take filters with operators, `sort`, `offset`, `limit` and `page`, and return `total_count`", "Webhooks since 7.0 for issues, time entries, versions, wiki pages and news, signed in an `X-Redmine-Signature-256` header" ], "weaknesses": [ "No OpenAPI document or other machine-readable contract was found in the wiki or the source repository", "24 advisories were published in the twelve months to 9 October 2026, two critical and nine high, several of them data leaks through the REST API", "17 of the 23 API resources are marked Alpha in the documentation, and only five are marked Stable", "Errors other than validation failures return a status code with no body, and no idempotency keys exist", "The API key acts with its user's full permissions and is accepted in a `key` query parameter", "No official SDK. The wiki lists community clients, and no request limit is built in" ], "agentNotes": [ "Ask an administrator to tick Enable REST API under Administration, Settings, API. It is off by default and every call fails until then", "Send the key in the `X-Redmine-API-Key` header, never as the `key` query parameter, and set `Content-Type: application/json` on every POST and PUT", "Add `status_id=*` to issue lists. The default returns open issues only, 25 a page with a maximum of 100", "Comment on an issue by sending `notes` in a PUT to `/issues/\u003cid\u003e.json`. There is no separate comment endpoint", "A DELETE on a project through the API skips the confirmation the web page asks for, so run the agent as a non-administrator user" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 50.2 } ], "editorialScores": { "ergonomics": 51, "maintenance": 73, "payments": 60, "reliability": 69, "schema": 32, "security": 51, "transparency": 69 }, "provenanceScore": 25 }, "connect": { "http": "curl -H \"X-Redmine-API-Key: $API_KEY\" https://$REDMINE_HOST/issues.json" }, "letme": { "capability": "https://letme.dev/tasks.create", "tool": "https://letme.dev/redmine" }, "area": "business", "unitPrices": [ { "item": "Redmine (self-hosted)", "unit": "seat-month", "usd": 0, "note": "free software, REST API included; no paid edition from the project" } ], "provenance": { "legalEntity": "", "domain": "redmine.org", "domainRegistered": "2006-07-08", "endpointOnVendorDomain": false, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://www.redmine.org/projects/redmine/wiki/Changelog", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "No legal entity was found. The home page says Redmine is built and maintained by community volunteers, and the source files carry a copyright notice in the name of Jean-Philippe Lang.", "No terms of service were found on redmine.org. The software is distributed under the GPL, version 2 or later, which stands in.", "The privacy policy at https://www.redmine.org/projects/redmine/wiki/PrivacyPolicy covers the redmine.org website only (server logs, account registration, ads and Gravatar). It does not govern an install of the software, so `provenance.privacy` is left out.", "There is no hosted service run by the project, so no endpoint sits on the vendor's domain. Each install answers on its owner's host.", "www.redmine.org/.well-known/security.txt returned 404. The Security Advisories page gives security(at)redmine.org for reports.", "RDAP for redmine.org gives a registration date of 2006-07-08 and Gandi SAS as registrar." ], "score": 25 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/redmine.json", "live": { "slug": "redmine", "githubStars": 6044, "pages": [ { "url": "https://www.redmine.org/projects/redmine/wiki/Changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:53:27.794517102Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "5c04a846eb92" } ], "updatedAt": "2026-10-09T18:53:27.794517102Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "OpenProject GmbH", "b": "Redmine project", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service", "b": "GPL-2.0-or-later", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "no", "name": "llms.txt" }, { "a": "2026-10-01", "b": "2026-09-30", "name": "Last release" }, { "a": "2026-08-06", "b": "no document linked", "name": "Terms last updated" }, { "a": "no date given", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "16k stars", "b": "none", "name": "Popularity" } ], "faq": [ { "answer": "OpenProject scores 57.4 (C) on agent readiness against Redmine's 50.2 (D), and leads in 5 of 7 scored categories. Redmine leads on reliability and payments \u0026 pricing.", "question": "Which is better for AI agents, OpenProject or Redmine?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do OpenProject and Redmine need an API key?" }, { "answer": "No hosted endpoint is listed for OpenProject. No hosted endpoint is listed for Redmine.", "question": "Can an agent call OpenProject and Redmine without installing anything?" }, { "answer": "Yes. OpenProject is open source (GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service). Redmine is open source (GPL-2.0-or-later).", "question": "Are OpenProject and Redmine open source?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 76 against 32", "Agent ergonomics, 70 against 51", "Security \u0026 auth, 59 against 51", "Transparency \u0026 trust, 87 against 47" ], "also": null, "goodFor": "Teams that want a self-hostable or EU-hosted project tool with Gantt, time tracking and budgets, and an agent working through a documented REST API.", "slug": "openproject", "watchFor": "83 advisories published against opf/openproject in the twelve months to 8 October 2026, 13 rated critical, among them remote code execution and SQL injection" }, { "aheadOn": [ "Reliability, 69 against 52", "Payments \u0026 pricing, 60 against 30" ], "also": null, "goodFor": "Teams that already run Redmine or want a free, self-hosted tracker with issues, time entries and wikis under their own control.", "slug": "redmine", "watchFor": "No OpenAPI document or other machine-readable contract was found in the wiki or the source repository" } ], "job": { "capability": "tasks.create", "name": "Issues and tasks" }, "others": [ { "json": "https://www.anchorterminal.com/compare/asana-vs-openproject.json", "title": "Asana vs OpenProject", "url": "https://www.anchorterminal.com/compare/asana-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/asana-vs-redmine.json", "title": "Asana vs Redmine", "url": "https://www.anchorterminal.com/compare/asana-vs-redmine" }, { "json": "https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-openproject.json", "title": "Atlassian Rovo MCP Server vs OpenProject", "url": "https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-redmine.json", "title": "Atlassian Rovo MCP Server vs Redmine", "url": "https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-redmine" }, { "json": "https://www.anchorterminal.com/compare/basecamp-vs-openproject.json", "title": "Basecamp vs OpenProject", "url": "https://www.anchorterminal.com/compare/basecamp-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/basecamp-vs-redmine.json", "title": "Basecamp vs Redmine", "url": "https://www.anchorterminal.com/compare/basecamp-vs-redmine" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-openproject.json", "title": "ClickUp vs OpenProject", "url": "https://www.anchorterminal.com/compare/clickup-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-redmine.json", "title": "ClickUp vs Redmine", "url": "https://www.anchorterminal.com/compare/clickup-vs-redmine" }, { "json": "https://www.anchorterminal.com/compare/linear-mcp-vs-openproject.json", "title": "Linear MCP vs OpenProject", "url": "https://www.anchorterminal.com/compare/linear-mcp-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/linear-mcp-vs-redmine.json", "title": "Linear MCP vs Redmine", "url": "https://www.anchorterminal.com/compare/linear-mcp-vs-redmine" }, { "json": "https://www.anchorterminal.com/compare/monday-vs-openproject.json", "title": "monday.com vs OpenProject", "url": "https://www.anchorterminal.com/compare/monday-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/monday-vs-redmine.json", "title": "monday.com vs Redmine", "url": "https://www.anchorterminal.com/compare/monday-vs-redmine" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-plane.json", "title": "OpenProject vs Plane", "url": "https://www.anchorterminal.com/compare/openproject-vs-plane" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-roma.json", "title": "OpenProject vs Roma", "url": "https://www.anchorterminal.com/compare/openproject-vs-roma" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-shortcut.json", "title": "OpenProject vs Shortcut", "url": "https://www.anchorterminal.com/compare/openproject-vs-shortcut" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-taiga.json", "title": "OpenProject vs Taiga", "url": "https://www.anchorterminal.com/compare/openproject-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-teamwork.json", "title": "OpenProject vs Teamwork.com", "url": "https://www.anchorterminal.com/compare/openproject-vs-teamwork" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-todoist.json", "title": "OpenProject vs Todoist", "url": "https://www.anchorterminal.com/compare/openproject-vs-todoist" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-trello.json", "title": "OpenProject vs Trello", "url": "https://www.anchorterminal.com/compare/openproject-vs-trello" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-wrike.json", "title": "OpenProject vs Wrike", "url": "https://www.anchorterminal.com/compare/openproject-vs-wrike" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-youtrack.json", "title": "OpenProject vs YouTrack", "url": "https://www.anchorterminal.com/compare/openproject-vs-youtrack" }, { "json": "https://www.anchorterminal.com/compare/plane-vs-redmine.json", "title": "Plane vs Redmine", "url": "https://www.anchorterminal.com/compare/plane-vs-redmine" }, { "json": "https://www.anchorterminal.com/compare/redmine-vs-roma.json", "title": "Redmine vs Roma", "url": "https://www.anchorterminal.com/compare/redmine-vs-roma" }, { "json": "https://www.anchorterminal.com/compare/redmine-vs-shortcut.json", "title": "Redmine vs Shortcut", "url": "https://www.anchorterminal.com/compare/redmine-vs-shortcut" }, { "json": "https://www.anchorterminal.com/compare/redmine-vs-taiga.json", "title": "Redmine vs Taiga", "url": "https://www.anchorterminal.com/compare/redmine-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/redmine-vs-teamwork.json", "title": "Redmine vs Teamwork.com", "url": "https://www.anchorterminal.com/compare/redmine-vs-teamwork" }, { "json": "https://www.anchorterminal.com/compare/redmine-vs-todoist.json", "title": "Redmine vs Todoist", "url": "https://www.anchorterminal.com/compare/redmine-vs-todoist" }, { "json": "https://www.anchorterminal.com/compare/redmine-vs-trello.json", "title": "Redmine vs Trello", "url": "https://www.anchorterminal.com/compare/redmine-vs-trello" }, { "json": "https://www.anchorterminal.com/compare/redmine-vs-wrike.json", "title": "Redmine vs Wrike", "url": "https://www.anchorterminal.com/compare/redmine-vs-wrike" }, { "json": "https://www.anchorterminal.com/compare/redmine-vs-youtrack.json", "title": "Redmine vs YouTrack", "url": "https://www.anchorterminal.com/compare/redmine-vs-youtrack" } ], "scores": [ { "by": 17, "edge": "redmine", "key": "reliability", "name": "Reliability", "openproject": 52, "redmine": 69, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 44, "edge": "openproject", "key": "schema", "name": "Schema \u0026 documentation", "openproject": 76, "redmine": 32, "weight": 13 }, { "by": 19, "edge": "openproject", "key": "ergonomics", "name": "Agent ergonomics", "openproject": 70, "redmine": 51, "weight": 13 }, { "by": 8, "edge": "openproject", "key": "security", "name": "Security \u0026 auth", "openproject": 59, "redmine": 51, "weight": 14 }, { "by": 30, "edge": "redmine", "key": "payments", "name": "Payments \u0026 pricing", "openproject": 30, "redmine": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 2, "edge": "openproject", "key": "maintenance", "name": "Maintenance \u0026 community", "openproject": 75, "redmine": 73, "weight": 7 }, { "by": 40, "edge": "openproject", "key": "transparency", "name": "Transparency \u0026 trust", "openproject": 87, "redmine": 47, "weight": 7 } ], "summary": "OpenProject scores 57.4 (C) on agent readiness against Redmine's 50.2 (D), and leads in 5 of 7 scored categories. Redmine leads on reliability and payments \u0026 pricing. Both do issues and tasks.", "verdicts": { "openproject": "OpenProject's APIv3 has a public OpenAPI 3.1 document with 320 operations, stable error identifiers and optimistic locking, and the same API ships in the free GPL-3.0 Community edition. No request limits are published, API tokens carry their user's full permissions, and 83 security advisories were published in the last twelve months, 13 rated critical.", "redmine": "Redmine's REST API covers issues, projects, time entries and 20 other resources, and versions 6.1 and later add OAuth 2 with one scope per permission. The software is free under the GPL. No OpenAPI document exists, most errors return a bare status code, and 24 security advisories were published in twelve months, two rated critical." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/openproject-vs-redmine", "json": "https://www.anchorterminal.com/compare/openproject-vs-redmine.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/openproject-vs-redmine.md", "slim": "https://www.anchorterminal.com/compare/openproject-vs-redmine.min.md" }, "markdown": "OpenProject scores 57.4 (C) on agent readiness against Redmine's 50.2 (D), and leads in 5 of 7 scored categories. Redmine leads on reliability and payments \u0026 pricing. Both do issues and tasks.\n\n- OpenProject: grade C, 57.4/100, rank #610 of 950. Markdown https://www.anchorterminal.com/tools/openproject.md · JSON https://www.anchorterminal.com/api/v1/tools/openproject.json\n- Redmine: grade D, 50.2/100, rank #777 of 950. Markdown https://www.anchorterminal.com/tools/redmine.md · JSON https://www.anchorterminal.com/api/v1/tools/redmine.json\n- Best project and task management tools for AI agents: https://www.anchorterminal.com/best/project-management/index.md\n- All 135 projects comparisons: https://www.anchorterminal.com/compare/project-management/index.md\n\n## Which one, for what\n\n### OpenProject (C)\n\nGood for: Teams that want a self-hostable or EU-hosted project tool with Gantt, time tracking and budgets, and an agent working through a documented REST API.\n\nAhead on:\n- Schema \u0026 documentation, 76 against 32\n- Agent ergonomics, 70 against 51\n- Security \u0026 auth, 59 against 51\n- Transparency \u0026 trust, 87 against 47\n\nWatch for: 83 advisories published against opf/openproject in the twelve months to 8 October 2026, 13 rated critical, among them remote code execution and SQL injection\n\n### Redmine (D)\n\nGood for: Teams that already run Redmine or want a free, self-hosted tracker with issues, time entries and wikis under their own control.\n\nAhead on:\n- Reliability, 69 against 52\n- Payments \u0026 pricing, 60 against 30\n\nWatch for: No OpenAPI document or other machine-readable contract was found in the wiki or the source repository\n\n\n## Score by category\n\n| Category | Weight | OpenProject | Redmine | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 52 | 69 | Redmine +17 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 76 | 32 | OpenProject +44 |\n| Agent ergonomics | 13% (16.2 this run) | 70 | 51 | OpenProject +19 |\n| Security \u0026 auth | 14% (17.5 this run) | 59 | 51 | OpenProject +8 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 60 | Redmine +30 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 75 | 73 | OpenProject +2 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 87 | 47 | OpenProject +40 |\n| Negative events | ≤15 | -5 | -4 | |\n| **Total** | | **57.4 · C** | **50.2 · D** | |\n\n## Facts side by side\n\n| Fact | OpenProject | Redmine |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | OpenProject GmbH | Redmine project |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | HTTP | HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Free |\n| x402 | no | no |\n| Licence | GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service | GPL-2.0-or-later |\n| Read-only variant documented | no | no |\n| llms.txt | no | no |\n| Last release | 2026-10-01 | 2026-09-30 |\n| Terms last updated | 2026-08-06 | no document linked |\n| Privacy policy last updated | no date given | no document linked |\n| Customer content may train models | not found in the text | |\n| Terms restrict automated access | not found in the text | |\n| Terms restrict benchmarking | not found in the text | |\n| Terms or service can change without notice | not found in the text | |\n| Arbitration or class-action waiver | not found in the text | |\n| Popularity | 16k stars | none |\n\n## Verdicts\n\n**OpenProject.** OpenProject's APIv3 has a public OpenAPI 3.1 document with 320 operations, stable error identifiers and optimistic locking, and the same API ships in the free GPL-3.0 Community edition. No request limits are published, API tokens carry their user's full permissions, and 83 security advisories were published in the last twelve months, 13 rated critical.\n\n**Redmine.** Redmine's REST API covers issues, projects, time entries and 20 other resources, and versions 6.1 and later add OAuth 2 with one scope per permission. The software is free under the GPL. No OpenAPI document exists, most errors return a bare status code, and 24 security advisories were published in twelve months, two rated critical.\n\n## Before you call either\n\n### OpenProject\n\n1. Send the API token as `Authorization: Bearer \u003ctoken\u003e`, or as the Basic auth password with the user name `apikey`\n2. Read the resource first and send its current `lockVersion` with every PATCH. A stale value returns 409 `UpdateConflict`\n3. POST to the `/form` endpoint of a work package to learn writable fields and allowed values before creating or updating\n4. URL-encode `filters` as a JSON array, and add `pageSize`, `offset` and `select` to keep work package lists small\n5. Run the agent as a dedicated user with a narrow project role, and treat work package text and comments as untrusted input\n\n### Redmine\n\n1. Ask an administrator to tick Enable REST API under Administration, Settings, API. It is off by default and every call fails until then\n2. Send the key in the `X-Redmine-API-Key` header, never as the `key` query parameter, and set `Content-Type: application/json` on every POST and PUT\n3. Add `status_id=*` to issue lists. The default returns open issues only, 25 a page with a maximum of 100\n4. Comment on an issue by sending `notes` in a PUT to `/issues/\u003cid\u003e.json`. There is no separate comment endpoint\n5. A DELETE on a project through the API skips the confirmation the web page asks for, so run the agent as a non-administrator user\n\n## Questions\n\n### Which is better for AI agents, OpenProject or Redmine?\n\nOpenProject scores 57.4 (C) on agent readiness against Redmine's 50.2 (D), and leads in 5 of 7 scored categories. Redmine leads on reliability and payments \u0026 pricing.\n\n### Do OpenProject and Redmine need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call OpenProject and Redmine without installing anything?\n\nNo hosted endpoint is listed for OpenProject. No hosted endpoint is listed for Redmine.\n\n### Are OpenProject and Redmine open source?\n\nYes. OpenProject is open source (GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service). Redmine is open source (GPL-2.0-or-later).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/openproject-vs-redmine.json, and with the fewest tokens: https://www.anchorterminal.com/compare/openproject-vs-redmine.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"openproject\", \"b\": \"redmine\"}`. From a terminal: `anchor compare openproject redmine`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/openproject.json and https://www.anchorterminal.com/api/v1/tools/redmine.json\n\n## Other comparisons with OpenProject or Redmine\n\n- [Asana vs OpenProject](https://www.anchorterminal.com/compare/asana-vs-openproject.md)\n- [Asana vs Redmine](https://www.anchorterminal.com/compare/asana-vs-redmine.md)\n- [Atlassian Rovo MCP Server vs OpenProject](https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-openproject.md)\n- [Atlassian Rovo MCP Server vs Redmine](https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-redmine.md)\n- [Basecamp vs OpenProject](https://www.anchorterminal.com/compare/basecamp-vs-openproject.md)\n- [Basecamp vs Redmine](https://www.anchorterminal.com/compare/basecamp-vs-redmine.md)\n- [ClickUp vs OpenProject](https://www.anchorterminal.com/compare/clickup-vs-openproject.md)\n- [ClickUp vs Redmine](https://www.anchorterminal.com/compare/clickup-vs-redmine.md)\n- [Linear MCP vs OpenProject](https://www.anchorterminal.com/compare/linear-mcp-vs-openproject.md)\n- [Linear MCP vs Redmine](https://www.anchorterminal.com/compare/linear-mcp-vs-redmine.md)\n- [monday.com vs OpenProject](https://www.anchorterminal.com/compare/monday-vs-openproject.md)\n- [monday.com vs Redmine](https://www.anchorterminal.com/compare/monday-vs-redmine.md)\n- [OpenProject vs Plane](https://www.anchorterminal.com/compare/openproject-vs-plane.md)\n- [OpenProject vs Roma](https://www.anchorterminal.com/compare/openproject-vs-roma.md)\n- [OpenProject vs Shortcut](https://www.anchorterminal.com/compare/openproject-vs-shortcut.md)\n- [OpenProject vs Taiga](https://www.anchorterminal.com/compare/openproject-vs-taiga.md)\n- [OpenProject vs Teamwork.com](https://www.anchorterminal.com/compare/openproject-vs-teamwork.md)\n- [OpenProject vs Todoist](https://www.anchorterminal.com/compare/openproject-vs-todoist.md)\n- [OpenProject vs Trello](https://www.anchorterminal.com/compare/openproject-vs-trello.md)\n- [OpenProject vs Wrike](https://www.anchorterminal.com/compare/openproject-vs-wrike.md)\n- [OpenProject vs YouTrack](https://www.anchorterminal.com/compare/openproject-vs-youtrack.md)\n- [Plane vs Redmine](https://www.anchorterminal.com/compare/plane-vs-redmine.md)\n- [Redmine vs Roma](https://www.anchorterminal.com/compare/redmine-vs-roma.md)\n- [Redmine vs Shortcut](https://www.anchorterminal.com/compare/redmine-vs-shortcut.md)\n- [Redmine vs Taiga](https://www.anchorterminal.com/compare/redmine-vs-taiga.md)\n- [Redmine vs Teamwork.com](https://www.anchorterminal.com/compare/redmine-vs-teamwork.md)\n- [Redmine vs Todoist](https://www.anchorterminal.com/compare/redmine-vs-todoist.md)\n- [Redmine vs Trello](https://www.anchorterminal.com/compare/redmine-vs-trello.md)\n- [Redmine vs Wrike](https://www.anchorterminal.com/compare/redmine-vs-wrike.md)\n- [Redmine vs YouTrack](https://www.anchorterminal.com/compare/redmine-vs-youtrack.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-10", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "OpenProject vs Redmine", "url": "" } ], "description": "OpenProject scores 57.4 (C) to Redmine's 50.2 (D) for issues and tasks. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "OpenProject C 57.4", "Redmine D 50.2", "scores" ], "h1": "OpenProject vs Redmine", "image": "https://www.anchorterminal.com/assets/og/compare-openproject-vs-redmine.png", "path": "/compare/openproject-vs-redmine", "published": "2026-10-01", "section": "tools", "title": "OpenProject vs Redmine for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/openproject-vs-redmine" }, "tokens": { "markdown": 2600, "slim": 680 }, "version": 1 }