{ "data": { "a": { "slug": "openproject", "name": "OpenProject", "vendor": "OpenProject GmbH", "vendorUrl": "https://www.openproject.org", "kind": "http-api", "category": "project-management", "summary": "OpenProject is open-source project management software for work packages, Gantt plans, boards and time tracking, sold as a cloud service and for self-hosting. Agents reach it through the APIv3 REST API, and paid plans add an MCP server.", "url": "https://www.anchorterminal.com/tools/openproject", "markdownUrl": "https://www.anchorterminal.com/tools/openproject.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/openproject.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/openproject.json", "repo": "https://github.com/opf/openproject", "license": "GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service", "transports": [ "http" ], "packages": [], "auth": "mixed", "authNotes": "Access is self-serve. A user creates a named personal API token in account settings and sends it as `Authorization: Bearer`, or as the Basic auth password with the user name `apikey`. The token carries that user's permissions, and no per-token scope or expiry was found. An administrator can register OAuth 2.0 applications for the authorisation code grant, PKCE or client credentials, with one scope per API (`api_v3`, `mcp`, `scim_v2`, `bcf_v2_1`). JWTs from a configured OIDC provider are also accepted. No app review or partner approval is described.", "pricing": "freemium", "pricingNotes": "The Community edition is free to self-host with the REST API included, and the cloud has a 14-day trial with no credit card, so an agent can start without a contract. Cloud plans are per user per month on a yearly term, Basic $7.25 (from 5 users, $8.50 on a monthly term), Professional $13.50 (from 25 users) and Premium $19.50 (from 100 users), with Corporate on request. Euro prices are 5.95, 10.95 and 15.95. API calls are not priced. The MCP server needs Professional or above. Community is not sold as a cloud plan (https://www.openproject.org/pricing/, checked 2026-10-08).", "priceSummary": "$7.25 / seat-mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API docs, the OpenAPI document or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 16352, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://www.openproject.org/docs/api/", "openapi": "https://www.openproject.org/docs/api/v3/spec.yml", "capabilities": [ "tasks.create", "tasks.update", "projects.manage", "tasks.comments", "projects.reporting", "events.webhooks-send" ], "tags": [ "official", "hosted", "self-hosted", "open-source", "rest", "openapi", "oauth", "mcp", "freemium", "free-trial", "webhooks", "status-page", "sla", "eu-hosting", "project-management" ], "lastRelease": "2026-10-01", "graded": true, "anchor": { "graded": true, "score": 57.4, "grade": "C", "agentReady": false, "rank": 550, "ranked": true, "rankOf": 842, "categoryRank": 11, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 75, "payments": 30, "reliability": 52, "schema": 76, "security": 59, "transparency": 87 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -5, "negativeNotes": [ "2026-06-08. 13 advisories rated critical were published against opf/openproject between January and June 2026, among them cache store poisoning leading to remote code execution (GHSA-qj96-f42f-6336, fixed in 17.3.3 and 17.4.1), SQL injection in the timestamps function (GHSA-98vw-2r87-fx2r) and a pre-authentication remote code execution in the Docker image through a default secret key (GHSA-r85r-gjq2-f83r, 13 May 2026). OpenProject published them itself, and its policy is to publish each advisory with the fixing release, so the deduction is reduced, -3 (https://github.com/opf/openproject/security/advisories).", "2026-09-30. 83 advisories in all were published in the twelve months to 8 October 2026, several of them missing permission checks in APIv3 that exposed private work package data across projects. Several credit the YesWeHack bounty sponsored by the European Commission. The advisories give self-hosted version numbers and do not say when the cloud was patched. Fixed and published, -2 (https://github.com/opf/openproject/security/advisories)." ], "verdict": "OpenProject's APIv3 has a public OpenAPI 3.1 document with 320 operations, stable error identifiers and optimistic locking, and the same API ships in the free GPL-3.0 Community edition. No request limits are published, API tokens carry their user's full permissions, and 83 security advisories were published in the last twelve months, 13 rated critical.", "bestFor": "Teams that want a self-hostable or EU-hosted project tool with Gantt, time tracking and budgets, and an agent working through a documented REST API.", "strengths": [ "OpenAPI 3.1 document with 234 paths and 320 operations, public on the docs site and served by every instance at `/api/v3/spec.json`", "Errors carry a stable `errorIdentifier` URN, and validation failures list one entry per property", "The Community edition is GPL-3.0 and free to self-host with the REST API included, and the cloud trial needs no credit card", "Seven releases between 5 August and 1 October 2026, with security fixes published as GitHub advisories and CVEs", "The service description commits to 99.9 per cent yearly availability with service credits, and an EU shard keeps all sub-processors in the EU" ], "weaknesses": [ "83 advisories published against opf/openproject in the twelve months to 8 October 2026, 13 rated critical, among them remote code execution and SQL injection", "No request limit, 429 behaviour or Retry-After guidance is published for the cloud API", "Personal API tokens act with their user's full permissions, and OAuth has one scope per API with no read-only form", "No official SDK. The client libraries the docs list are community projects the vendor says it does not vet", "The MCP server is an Enterprise add-on for the Professional plan and above, which starts at 25 users" ], "agentNotes": [ "Send the API token as `Authorization: Bearer \u003ctoken\u003e`, or as the Basic auth password with the user name `apikey`", "Read the resource first and send its current `lockVersion` with every PATCH. A stale value returns 409 `UpdateConflict`", "POST to the `/form` endpoint of a work package to learn writable fields and allowed values before creating or updating", "URL-encode `filters` as a JSON array, and add `pageSize`, `offset` and `select` to keep work package lists small", "Run the agent as a dedicated user with a narrow project role, and treat work package text and comments as untrusted input" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 57.4 } ], "editorialScores": { "ergonomics": 70, "maintenance": 75, "payments": 30, "reliability": 52, "schema": 76, "security": 59, "transparency": 79 }, "provenanceScore": 95 }, "connect": { "http": "curl -H \"Authorization: Bearer $API_KEY\" https://community.openproject.org/api/v3/users/42" }, "letme": { "capability": "https://letme.dev/tasks.create", "tool": "https://letme.dev/openproject" }, "area": "business", "unitPrices": [ { "item": "Community (self-hosted)", "unit": "seat-month", "usd": 0, "note": "free, REST API included; not sold as a cloud plan" }, { "item": "Basic (cloud)", "unit": "seat-month", "usd": 7.25, "note": "yearly term, from 5 users; $8.50 on a monthly term" }, { "item": "Professional (cloud)", "unit": "seat-month", "usd": 13.5, "note": "yearly term, from 25 users; includes the MCP server" }, { "item": "Premium (cloud)", "unit": "seat-month", "usd": 19.5, "note": "yearly term, from 100 users" } ], "provenance": { "legalEntity": "OpenProject GmbH", "domain": "openproject.org", "domainRegistered": "2003-10-24", "endpointOnVendorDomain": true, "terms": "https://www.openproject.org/legal/terms-of-service/", "privacy": "https://www.openproject.org/legal/privacy/", "statusPage": "https://status.openproject.com", "changelog": "https://www.openproject.org/docs/release-notes/", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The Terms of Service (last updated 6 August 2026) name OpenProject GmbH, Krausenstrasse 9, 10117 Berlin, Germany, and cover both the cloud and the on-premises Enterprise edition. The German version takes precedence.", "The privacy policy (version 30 July 2026) has a section on OpenProject Enterprise Cloud, where OpenProject GmbH is processor and the customer controller. The data processing agreement at https://www.openproject.org/legal/data-processing-agreement/ is part of the terms.", "Cloud instances answer at \u003cname\u003e.openproject.com or, on the EU shard, an openproject.eu host. Both are the vendor's domains, apart from the openproject.org site that carries the docs and legal pages. Self-hosted instances answer on the owner's domain.", "www.openproject.org/.well-known/security.txt is PGP-signed, names security@openproject.com and expires on 31 December 2026.", "RDAP for openproject.org gives a registration date of 2003-10-24 and InterNetX GmbH as registrar." ], "score": 95 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/openproject.json", "live": { "slug": "openproject", "vendorStatus": { "page": "https://status.openproject.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-09T07:58:22.822468534Z" }, "updatedAt": "2026-10-09T07:58:22.822468534Z" } }, "answer": "OpenProject scores 57.4 (C) on agent readiness against Taiga's 31.7 (F), and leads in 6 of 7 scored categories.", "b": { "slug": "taiga", "name": "Taiga", "vendor": "Taiga Cloud Services, S.L.", "vendorUrl": "https://taiga.io", "kind": "http-api", "category": "project-management", "summary": "Taiga is open-source agile project management software with Scrum backlogs, Kanban boards, issues and a wiki, hosted at tree.taiga.io or self-hosted. Agents reach it through a REST API at `api.taiga.io/api/v1`.", "url": "https://www.anchorterminal.com/tools/taiga", "markdownUrl": "https://www.anchorterminal.com/tools/taiga.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/taiga.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/taiga.json", "repo": "https://github.com/taigaio/taiga-back", "license": "MPL-2.0 for the taiga-back source. The hosted service runs under Taiga's Terms and Conditions, which also mention non-open-source modules", "transports": [ "http" ], "packages": [], "auth": "mixed", "authNotes": "Access is self-serve with a Taiga account, and there is no API key or personal token. A client posts the account's user name and password to `/api/v1/auth` and receives a bearer token and a refresh token. The backend's default lifetimes are 24 hours and 8 days. The token acts with the user's permissions in each project and has no scopes. The docs also describe application tokens, sent as `Authorization: Application \u003ctoken\u003e`, for an application an instance administrator has registered. No way to register an application on the hosted service was found. No app review or partner approval is described.", "pricing": "freemium", "pricingNotes": "The hosted Free plan has one public and one private project and 10 MB of storage, and the terms say API access is free, so an agent can start without a contract. Paid hosted plans are a flat monthly price with unlimited users, Enthusiast 5 euros (50 a year), Basic 20 euros (200 a year) and Premium 60 euros (600 a year). Private cloud and on-premise support are by quote. The software is free to self-host. API calls are not priced, and prices are in euros only (https://taiga.io/deployment-pricing-options/, checked 2026-10-09).", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API reference, the pricing page or the terms (checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 858, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://docs.taiga.io/api.html", "capabilities": [ "tasks.create", "tasks.update", "projects.manage", "tasks.comments", "projects.reporting", "events.webhooks-send" ], "tags": [ "official", "hosted", "self-hosted", "open-source", "rest", "freemium", "free-tier", "webhooks", "eu-hosting", "project-management" ], "lastRelease": "2026-07-02", "graded": true, "anchor": { "graded": true, "score": 31.7, "grade": "F", "agentReady": false, "rank": 830, "ranked": true, "rankOf": 842, "categoryRank": 14, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 49, "maintenance": 21, "payments": 30, "reliability": 17, "schema": 35, "security": 37, "transparency": 64 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": -3, "negativeNotes": [ "2025-10-28. Two advisories were published against taigaio/taiga-back, an authenticated remote code execution through unsafe deserialisation in the API, rated critical (CVE-2025-62368, CVSS 9.0), and a time-based blind SQL injection rated moderate (CVE-2025-62367). Both affect 6.8.3 and earlier and are fixed in 6.9.0 of 13 October 2025. The advisories do not say when the hosted service was patched. Fixed and published, so the deduction is reduced, -3 (https://github.com/taigaio/taiga-back/security/advisories)." ], "verdict": "Taiga's REST API covers projects, epics, user stories, tasks, issues, wiki pages and webhooks, with a curl example for each call, and the backend is open source under MPL-2.0. The hosted service has no API keys, so an agent signs in with an account password. No OpenAPI document, status page or request limits were found.", "bestFor": "Small agile teams that want Scrum and Kanban with a free hosted plan or a self-hosted, open-source install in the EU.", "strengths": [ "One reference page documents 234 paths under `/api/v1`, each with a curl example and a sample response object", "The backend is public under MPL-2.0 and can be self-hosted, with the same API as the hosted service", "The hosted service has a free plan with one public and one private project, and the terms say API access is free", "Modifying requests take a `version` parameter, so a stale write is refused instead of overwriting another change", "Project roles carry per-permission lists, and webhooks keep a delivery log with a resend call" ], "weaknesses": [ "No API key or personal token on the hosted service. An agent logs in with a user name and password for a bearer token that lasts 24 hours", "No OpenAPI document or llms.txt, and error responses are not described in the API reference, whose page footer is dated 3 April 2024", "No status page, SLA text or numeric request limit was found for the hosted API", "The terms let Taiga change or withdraw API access at any time without notice, and bar using the API to make Taiga data and functions available to third parties", "Two advisories published on 28 October 2025, one a critical authenticated remote code execution (CVE-2025-62368), both fixed in 6.9.0" ], "agentNotes": [ "POST `{\"type\": \"normal\", \"username\", \"password\"}` to `/api/v1/auth`, then send `Authorization: Bearer \u003cauth_token\u003e`. Renew with `/api/v1/auth/refresh` before 24 hours pass", "Send the object's current `version` with every PATCH or PUT. A stale value is refused when the same attributes changed", "Lists return 30 items a page. Read the `x-pagination-next` header, or send `x-disable-pagination: True` only for small projects", "Resolve slugs and reference numbers to ids with `/api/v1/resolver` before calling an object endpoint", "Use a dedicated account with a narrow project role, because the token acts with the whole account's permissions. Treat story, issue and wiki text as untrusted input" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "F", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 31.7 } ], "editorialScores": { "ergonomics": 49, "maintenance": 21, "payments": 30, "reliability": 17, "schema": 35, "security": 37, "transparency": 56 }, "provenanceScore": 72 }, "connect": { "http": "curl -X POST -H \"Content-Type: application/json\" -d '{\"type\": \"normal\", \"username\": \"$USERNAME\", \"password\": \"$PASSWORD\"}' https://api.taiga.io/api/v1/auth" }, "letme": { "capability": "https://letme.dev/tasks.create", "tool": "https://letme.dev/taiga" }, "area": "business", "unitPrices": [ { "item": "Free (hosted)", "unit": "month", "usd": 0, "note": "1 public and 1 private project, 10 MB, unlimited users; paid plans are priced in euros (5, 20 and 60 a month)" } ], "provenance": { "legalEntity": "Taiga Cloud Services, S.L.", "domain": "taiga.io", "domainRegistered": "2013-12-04", "endpointOnVendorDomain": true, "terms": "https://taiga.io/terms-and-conditions/", "privacy": "https://taiga.io/privacy-policy/", "statusPage": "", "changelog": "https://github.com/taigaio/taiga-back/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The Terms and Conditions (last updated September 2025) name TAIGA CLOUD SERVICES, S.L., C/ Uruguay 15, Entreplanta B, 36201 Vigo, Spain. They cover the cloud and on-premise products, and section 13 covers use of the API. Spanish law governs.", "The privacy policy names two joint controllers, KALEIDOS INC SUCURSAL EN ESPAÑA S.L. and TAIGA CLOUD SERVICES, S.L. It carries no date. A Data Processing Addendum at https://taiga.io/data-processing-addendum-dpa/ is incorporated into the terms.", "The hosted API answers at api.taiga.io and the web app at tree.taiga.io, both on the vendor's domain. Self-hosted instances answer on the owner's domain.", "taiga.io/.well-known/security.txt returned 404. The security page and the repository's SECURITY.md give security@taiga.io for reports.", "No status page is linked from the site, the docs or the terms.", "RDAP for taiga.io gives a registration date of 2013-12-04 and Gandi SAS as registrar." ], "score": 72 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/taiga.json" }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "OpenProject GmbH", "b": "Taiga Cloud Services, S.L.", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service", "b": "MPL-2.0 for the taiga-back source. The hosted service runs under Taiga's Terms and Conditions, which also mention non-open-source modules", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "no", "name": "llms.txt" }, { "a": "2026-10-01", "b": "2026-07-02", "name": "Last release" }, { "a": "2026-08-06", "b": "2025-09-01", "name": "Terms last updated" }, { "a": "no date given", "b": "no date given", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "16k stars", "b": "858 stars", "name": "Popularity" } ], "faq": [ { "answer": "OpenProject scores 57.4 (C) on agent readiness against Taiga's 31.7 (F), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, OpenProject or Taiga?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do OpenProject and Taiga need an API key?" }, { "answer": "No hosted endpoint is listed for OpenProject. No hosted endpoint is listed for Taiga.", "question": "Can an agent call OpenProject and Taiga without installing anything?" }, { "answer": "Yes. OpenProject is open source (GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service). Taiga is open source (MPL-2.0 for the taiga-back source. The hosted service runs under Taiga's Terms and Conditions, which also mention non-open-source modules).", "question": "Are OpenProject and Taiga open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 52 against 17", "Schema \u0026 documentation, 76 against 35", "Agent ergonomics, 70 against 49", "Security \u0026 auth, 59 against 37", "Maintenance \u0026 community, 75 against 21", "Transparency \u0026 trust, 87 against 64" ], "also": null, "goodFor": "Teams that want a self-hostable or EU-hosted project tool with Gantt, time tracking and budgets, and an agent working through a documented REST API.", "slug": "openproject", "watchFor": "83 advisories published against opf/openproject in the twelve months to 8 October 2026, 13 rated critical, among them remote code execution and SQL injection" }, { "aheadOn": null, "also": null, "goodFor": "Small agile teams that want Scrum and Kanban with a free hosted plan or a self-hosted, open-source install in the EU.", "slug": "taiga", "watchFor": "No API key or personal token on the hosted service. An agent logs in with a user name and password for a bearer token that lasts 24 hours" } ], "job": { "capability": "tasks.create", "name": "Tasks create" }, "others": [ { "json": "https://www.anchorterminal.com/compare/asana-vs-openproject.json", "title": "Asana vs OpenProject", "url": "https://www.anchorterminal.com/compare/asana-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/asana-vs-taiga.json", "title": "Asana vs Taiga", "url": "https://www.anchorterminal.com/compare/asana-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/basecamp-vs-openproject.json", "title": "Basecamp vs OpenProject", "url": "https://www.anchorterminal.com/compare/basecamp-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/basecamp-vs-taiga.json", "title": "Basecamp vs Taiga", "url": "https://www.anchorterminal.com/compare/basecamp-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-openproject.json", "title": "ClickUp vs OpenProject", "url": "https://www.anchorterminal.com/compare/clickup-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-taiga.json", "title": "ClickUp vs Taiga", "url": "https://www.anchorterminal.com/compare/clickup-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/monday-vs-openproject.json", "title": "monday.com vs OpenProject", "url": "https://www.anchorterminal.com/compare/monday-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/monday-vs-taiga.json", "title": "monday.com vs Taiga", "url": "https://www.anchorterminal.com/compare/monday-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-plane.json", "title": "OpenProject vs Plane", "url": "https://www.anchorterminal.com/compare/openproject-vs-plane" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-roma.json", "title": "OpenProject vs Roma", "url": "https://www.anchorterminal.com/compare/openproject-vs-roma" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-shortcut.json", "title": "OpenProject vs Shortcut", "url": "https://www.anchorterminal.com/compare/openproject-vs-shortcut" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-teamwork.json", "title": "OpenProject vs Teamwork.com", "url": "https://www.anchorterminal.com/compare/openproject-vs-teamwork" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-todoist.json", "title": "OpenProject vs Todoist", "url": "https://www.anchorterminal.com/compare/openproject-vs-todoist" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-trello.json", "title": "OpenProject vs Trello", "url": "https://www.anchorterminal.com/compare/openproject-vs-trello" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-wrike.json", "title": "OpenProject vs Wrike", "url": "https://www.anchorterminal.com/compare/openproject-vs-wrike" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-youtrack.json", "title": "OpenProject vs YouTrack", "url": "https://www.anchorterminal.com/compare/openproject-vs-youtrack" }, { "json": "https://www.anchorterminal.com/compare/plane-vs-taiga.json", "title": "Plane vs Taiga", "url": "https://www.anchorterminal.com/compare/plane-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/roma-vs-taiga.json", "title": "Roma vs Taiga", "url": "https://www.anchorterminal.com/compare/roma-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/shortcut-vs-taiga.json", "title": "Shortcut vs Taiga", "url": "https://www.anchorterminal.com/compare/shortcut-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/taiga-vs-teamwork.json", "title": "Taiga vs Teamwork.com", "url": "https://www.anchorterminal.com/compare/taiga-vs-teamwork" }, { "json": "https://www.anchorterminal.com/compare/taiga-vs-todoist.json", "title": "Taiga vs Todoist", "url": "https://www.anchorterminal.com/compare/taiga-vs-todoist" }, { "json": "https://www.anchorterminal.com/compare/taiga-vs-trello.json", "title": "Taiga vs Trello", "url": "https://www.anchorterminal.com/compare/taiga-vs-trello" }, { "json": "https://www.anchorterminal.com/compare/taiga-vs-wrike.json", "title": "Taiga vs Wrike", "url": "https://www.anchorterminal.com/compare/taiga-vs-wrike" }, { "json": "https://www.anchorterminal.com/compare/taiga-vs-youtrack.json", "title": "Taiga vs YouTrack", "url": "https://www.anchorterminal.com/compare/taiga-vs-youtrack" } ], "scores": [ { "by": 35, "edge": "openproject", "key": "reliability", "name": "Reliability", "openproject": 52, "taiga": 17, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 41, "edge": "openproject", "key": "schema", "name": "Schema \u0026 documentation", "openproject": 76, "taiga": 35, "weight": 13 }, { "by": 21, "edge": "openproject", "key": "ergonomics", "name": "Agent ergonomics", "openproject": 70, "taiga": 49, "weight": 13 }, { "by": 22, "edge": "openproject", "key": "security", "name": "Security \u0026 auth", "openproject": 59, "taiga": 37, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "openproject": 30, "taiga": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 54, "edge": "openproject", "key": "maintenance", "name": "Maintenance \u0026 community", "openproject": 75, "taiga": 21, "weight": 7 }, { "by": 23, "edge": "openproject", "key": "transparency", "name": "Transparency \u0026 trust", "openproject": 87, "taiga": 64, "weight": 7 } ], "summary": "OpenProject scores 57.4 (C) on agent readiness against Taiga's 31.7 (F), and leads in 6 of 7 scored categories. Both do tasks create.", "verdicts": { "openproject": "OpenProject's APIv3 has a public OpenAPI 3.1 document with 320 operations, stable error identifiers and optimistic locking, and the same API ships in the free GPL-3.0 Community edition. No request limits are published, API tokens carry their user's full permissions, and 83 security advisories were published in the last twelve months, 13 rated critical.", "taiga": "Taiga's REST API covers projects, epics, user stories, tasks, issues, wiki pages and webhooks, with a curl example for each call, and the backend is open source under MPL-2.0. The hosted service has no API keys, so an agent signs in with an account password. No OpenAPI document, status page or request limits were found." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/openproject-vs-taiga", "json": "https://www.anchorterminal.com/compare/openproject-vs-taiga.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/openproject-vs-taiga.md", "slim": "https://www.anchorterminal.com/compare/openproject-vs-taiga.min.md" }, "markdown": "OpenProject scores 57.4 (C) on agent readiness against Taiga's 31.7 (F), and leads in 6 of 7 scored categories. Both do tasks create.\n\n- OpenProject: grade C, 57.4/100, rank #550 of 842. Markdown https://www.anchorterminal.com/tools/openproject.md · JSON https://www.anchorterminal.com/api/v1/tools/openproject.json\n- Taiga: grade F, 31.7/100, rank #830 of 842. Markdown https://www.anchorterminal.com/tools/taiga.md · JSON https://www.anchorterminal.com/api/v1/tools/taiga.json\n\n## Which one, for what\n\n### OpenProject (C)\n\nGood for: Teams that want a self-hostable or EU-hosted project tool with Gantt, time tracking and budgets, and an agent working through a documented REST API.\n\nAhead on:\n- Reliability, 52 against 17\n- Schema \u0026 documentation, 76 against 35\n- Agent ergonomics, 70 against 49\n- Security \u0026 auth, 59 against 37\n- Maintenance \u0026 community, 75 against 21\n- Transparency \u0026 trust, 87 against 64\n\nWatch for: 83 advisories published against opf/openproject in the twelve months to 8 October 2026, 13 rated critical, among them remote code execution and SQL injection\n\n### Taiga (F)\n\nGood for: Small agile teams that want Scrum and Kanban with a free hosted plan or a self-hosted, open-source install in the EU.\n\nWatch for: No API key or personal token on the hosted service. An agent logs in with a user name and password for a bearer token that lasts 24 hours\n\n\n## Score by category\n\n| Category | Weight | OpenProject | Taiga | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 52 | 17 | OpenProject +35 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 76 | 35 | OpenProject +41 |\n| Agent ergonomics | 13% (16.2 this run) | 70 | 49 | OpenProject +21 |\n| Security \u0026 auth | 14% (17.5 this run) | 59 | 37 | OpenProject +22 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 30 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 75 | 21 | OpenProject +54 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 87 | 64 | OpenProject +23 |\n| Negative events | ≤15 | -5 | -3 | |\n| **Total** | | **57.4 · C** | **31.7 · F** | |\n\n## Facts side by side\n\n| Fact | OpenProject | Taiga |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | OpenProject GmbH | Taiga Cloud Services, S.L. |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | HTTP | HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service | MPL-2.0 for the taiga-back source. The hosted service runs under Taiga's Terms and Conditions, which also mention non-open-source modules |\n| Read-only variant documented | no | no |\n| llms.txt | no | no |\n| Last release | 2026-10-01 | 2026-07-02 |\n| Terms last updated | 2026-08-06 | 2025-09-01 |\n| Privacy policy last updated | no date given | no date given |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | not found in the text | yes |\n| Terms restrict benchmarking | not found in the text | yes |\n| Terms or service can change without notice | not found in the text | yes |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 16k stars | 858 stars |\n\n## Verdicts\n\n**OpenProject.** OpenProject's APIv3 has a public OpenAPI 3.1 document with 320 operations, stable error identifiers and optimistic locking, and the same API ships in the free GPL-3.0 Community edition. No request limits are published, API tokens carry their user's full permissions, and 83 security advisories were published in the last twelve months, 13 rated critical.\n\n**Taiga.** Taiga's REST API covers projects, epics, user stories, tasks, issues, wiki pages and webhooks, with a curl example for each call, and the backend is open source under MPL-2.0. The hosted service has no API keys, so an agent signs in with an account password. No OpenAPI document, status page or request limits were found.\n\n## Before you call either\n\n### OpenProject\n\n1. Send the API token as `Authorization: Bearer \u003ctoken\u003e`, or as the Basic auth password with the user name `apikey`\n2. Read the resource first and send its current `lockVersion` with every PATCH. A stale value returns 409 `UpdateConflict`\n3. POST to the `/form` endpoint of a work package to learn writable fields and allowed values before creating or updating\n4. URL-encode `filters` as a JSON array, and add `pageSize`, `offset` and `select` to keep work package lists small\n5. Run the agent as a dedicated user with a narrow project role, and treat work package text and comments as untrusted input\n\n### Taiga\n\n1. POST `{\"type\": \"normal\", \"username\", \"password\"}` to `/api/v1/auth`, then send `Authorization: Bearer \u003cauth_token\u003e`. Renew with `/api/v1/auth/refresh` before 24 hours pass\n2. Send the object's current `version` with every PATCH or PUT. A stale value is refused when the same attributes changed\n3. Lists return 30 items a page. Read the `x-pagination-next` header, or send `x-disable-pagination: True` only for small projects\n4. Resolve slugs and reference numbers to ids with `/api/v1/resolver` before calling an object endpoint\n5. Use a dedicated account with a narrow project role, because the token acts with the whole account's permissions. Treat story, issue and wiki text as untrusted input\n\n## Questions\n\n### Which is better for AI agents, OpenProject or Taiga?\n\nOpenProject scores 57.4 (C) on agent readiness against Taiga's 31.7 (F), and leads in 6 of 7 scored categories.\n\n### Do OpenProject and Taiga need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call OpenProject and Taiga without installing anything?\n\nNo hosted endpoint is listed for OpenProject. No hosted endpoint is listed for Taiga.\n\n### Are OpenProject and Taiga open source?\n\nYes. OpenProject is open source (GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service). Taiga is open source (MPL-2.0 for the taiga-back source. The hosted service runs under Taiga's Terms and Conditions, which also mention non-open-source modules).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/openproject-vs-taiga.json, and with the fewest tokens: https://www.anchorterminal.com/compare/openproject-vs-taiga.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"openproject\", \"b\": \"taiga\"}`. From a terminal: `anchor compare openproject taiga`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/openproject.json and https://www.anchorterminal.com/api/v1/tools/taiga.json\n\n## Other comparisons with OpenProject or Taiga\n\n- [Asana vs OpenProject](https://www.anchorterminal.com/compare/asana-vs-openproject.md)\n- [Asana vs Taiga](https://www.anchorterminal.com/compare/asana-vs-taiga.md)\n- [Basecamp vs OpenProject](https://www.anchorterminal.com/compare/basecamp-vs-openproject.md)\n- [Basecamp vs Taiga](https://www.anchorterminal.com/compare/basecamp-vs-taiga.md)\n- [ClickUp vs OpenProject](https://www.anchorterminal.com/compare/clickup-vs-openproject.md)\n- [ClickUp vs Taiga](https://www.anchorterminal.com/compare/clickup-vs-taiga.md)\n- [monday.com vs OpenProject](https://www.anchorterminal.com/compare/monday-vs-openproject.md)\n- [monday.com vs Taiga](https://www.anchorterminal.com/compare/monday-vs-taiga.md)\n- [OpenProject vs Plane](https://www.anchorterminal.com/compare/openproject-vs-plane.md)\n- [OpenProject vs Roma](https://www.anchorterminal.com/compare/openproject-vs-roma.md)\n- [OpenProject vs Shortcut](https://www.anchorterminal.com/compare/openproject-vs-shortcut.md)\n- [OpenProject vs Teamwork.com](https://www.anchorterminal.com/compare/openproject-vs-teamwork.md)\n- [OpenProject vs Todoist](https://www.anchorterminal.com/compare/openproject-vs-todoist.md)\n- [OpenProject vs Trello](https://www.anchorterminal.com/compare/openproject-vs-trello.md)\n- [OpenProject vs Wrike](https://www.anchorterminal.com/compare/openproject-vs-wrike.md)\n- [OpenProject vs YouTrack](https://www.anchorterminal.com/compare/openproject-vs-youtrack.md)\n- [Plane vs Taiga](https://www.anchorterminal.com/compare/plane-vs-taiga.md)\n- [Roma vs Taiga](https://www.anchorterminal.com/compare/roma-vs-taiga.md)\n- [Shortcut vs Taiga](https://www.anchorterminal.com/compare/shortcut-vs-taiga.md)\n- [Taiga vs Teamwork.com](https://www.anchorterminal.com/compare/taiga-vs-teamwork.md)\n- [Taiga vs Todoist](https://www.anchorterminal.com/compare/taiga-vs-todoist.md)\n- [Taiga vs Trello](https://www.anchorterminal.com/compare/taiga-vs-trello.md)\n- [Taiga vs Wrike](https://www.anchorterminal.com/compare/taiga-vs-wrike.md)\n- [Taiga vs YouTrack](https://www.anchorterminal.com/compare/taiga-vs-youtrack.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-09", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "OpenProject vs Taiga", "url": "" } ], "description": "OpenProject scores 57.4 (C) on agent readiness against Taiga's 31.7 (F), and leads in 6 of 7 scored categories. Both do tasks create. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "OpenProject C 57.4", "Taiga F 31.7", "scores" ], "h1": "OpenProject vs Taiga", "image": "https://www.anchorterminal.com/assets/og/compare-openproject-vs-taiga.png", "path": "/compare/openproject-vs-taiga", "published": "2026-10-01", "section": "tools", "title": "OpenProject vs Taiga for AI agents, C 57.4 vs F 31.7 | Anchor Terminal", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/openproject-vs-taiga" }, "tokens": { "markdown": 2450, "slim": 630 }, "version": 1 }