{ "data": { "a": { "slug": "paperclip", "name": "Paperclip", "vendor": "Paperclip Labs, Inc.", "vendorUrl": "https://paperclip.ing", "kind": "harness", "category": "agent-harnesses", "summary": "Paperclip is an open-source, self-hosted server and web interface that organises AI agents into a company with an org chart, tasks, budgets and approvals. It drives Claude Code, Codex, OpenClaw and other harnesses through adapters.", "url": "https://www.anchorterminal.com/tools/paperclip", "markdownUrl": "https://www.anchorterminal.com/tools/paperclip.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/paperclip.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/paperclip.json", "repo": "https://github.com/paperclipai/paperclip", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "paperclipai" }, { "registry": "npm", "name": "@paperclipai/mcp-server" }, { "registry": "oci", "name": "ghcr.io/paperclipai/paperclip" } ], "auth": "mixed", "authNotes": "No Paperclip account. The default `local_trusted` mode needs no login on loopback. Authenticated mode uses browser sessions for people, board API keys for scripts, and agent API keys or short-lived run JWTs as bearer tokens.", "pricing": "free", "pricingNotes": "Free and MIT, self-hosted, with nothing to buy. The owner pays each harness's model provider or subscription. Paperclip Cloud is a waitlist with no published price.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the site or the server source (checked 2026-10-08). The only mention in the repository is a link to a third-party skill in a planning note.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 98666, "npmWeekly": 59684, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://docs.paperclip.ing", "llmsTxt": "https://paperclip.ing/llms.txt", "capabilities": [ "agent.multi-agent", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "llms-txt", "docker", "mcp", "typescript" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 59, "grade": "C", "agentReady": false, "rank": 441, "ranked": true, "rankOf": 722, "categoryRank": 12, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 78, "payments": 60, "reliability": 66, "schema": 81, "security": 64, "transparency": 65 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -10, "negativeNotes": [ "2026-04-10 to 2026-04-16. Ten advisories published in a week, four of them critical, among them GHSA-68qg-g8mg-6pr7 (CVE-2026-41679, 10.0, unauthenticated remote code execution through an import authorisation bypass) and two cross-tenant agent key flaws rated 9.9. All ten list 2026.416.0 as the fix. Fixed and published, a little under six months old, -5. https://github.com/paperclipai/paperclip/security/advisories", "2026-07-22. GHSA-x8hx-rhr2-9rf7 (9.6), drive-by remote code execution against the default `local_trusted` mode through DNS rebinding. The advisory names no patched version. The current source applies the hostname guard to `local_trusted` private deployments, so we read it as fixed without a documented version, -3. https://github.com/paperclipai/paperclip/security/advisories/GHSA-x8hx-rhr2-9rf7", "2026-04-16. GHSA-gqqj-85qm-8qhf (8.7), a `codex_local` agent inherited a Gmail connector from the owner's ChatGPT account and sent real email. The advisory names no patched version, and `codex_local` still defaults to bypassing approvals and the sandbox, -2. https://github.com/paperclipai/paperclip/security/advisories/GHSA-gqqj-85qm-8qhf" ], "verdict": "Board approvals, budgets with a hard stop and an activity log sit above whichever harnesses do the work, and eleven stable versions shipped in 90 days. The Claude Code and Codex adapters skip permission prompts and the sandbox by default, and twelve security advisories, five of them critical, have been published since April 2026.", "bestFor": "Someone running several coding or operations agents who wants one place for tasks, budgets, approvals and history across harnesses.", "strengths": [ "One deployment runs agents on Claude Code, Codex, Cursor, Gemini CLI, OpenCode, Pi, Hermes, Grok Build, Kimi Code and OpenClaw through adapters, under one org chart", "Board approvals gate agent hires and the CEO agent's strategy, and connection actions can be set to Allowed, Ask first or Off", "Budgets by company, agent and project pause an agent at 100 per cent of recorded spend", "The running server publishes its REST surface as OpenAPI at `/api/openapi.json`, and the docs site answers every page as Markdown at `.md`", "Eleven stable releases between 20 July and 5 October 2026, each with dated notes and an upgrade guide" ], "weaknesses": [ "`claude_local` defaults `dangerouslySkipPermissions` to true and `codex_local` defaults to bypassing approvals and the sandbox, with agents running on the host", "Twelve published security advisories since April 2026, five critical, including CVE-2026-41679 (unauthenticated remote code execution, fixed in 2026.416.0)", "Anonymous usage telemetry is on by default and goes to telemetry.paperclip.ing until an opt-out is set", "2,849 open issues on 8 October 2026, 1,396 of them with no comment, and 78 closed in 30 days against 686 opened", "Calendar versions with no 1.0, and release 2026.916.0 carried five breaking changes" ], "agentNotes": [ "Set `PAPERCLIP_TELEMETRY_DISABLED=1` or `DO_NOT_TRACK=1` before the first start. Telemetry is on by default", "Set `dangerouslySkipPermissions` and `dangerouslyBypassApprovalsAndSandbox` to false on agents that read untrusted input, or run them in a sandbox provider", "Install with Node.js 24.11 or newer, and install and sign in to each harness CLI on the host first. Paperclip assumes they are there", "Use `--bind lan` or `--bind tailnet` at onboarding for anything beyond one machine. The default `local_trusted` mode treats every request as the board admin", "Treat 409 on task checkout as owned by another agent and pick different work. The API docs say not to retry" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59 } ], "editorialScores": { "ergonomics": 70, "maintenance": 78, "payments": 60, "reliability": 66, "schema": 81, "security": 64, "transparency": 73 }, "provenanceScore": 56 }, "connect": { "install": "npx paperclipai@latest onboard --yes # Node.js 24.11 or newer", "http": "curl http://localhost:3100/api/health", "headless": { "command": "npx paperclipai issue create --title \"$TASK\" --json", "env": { "PAPERCLIP_API_KEY": "\u003cboard or agent key\u003e", "PAPERCLIP_TELEMETRY_DISABLED": "1" } } }, "letme": { "capability": "https://letme.dev/agent.multi-agent", "tool": "https://letme.dev/paperclip" }, "area": "frameworks", "provenance": { "legalEntity": "Paperclip Labs, Inc.", "domain": "paperclip.ing", "domainRegistered": "2026-03-02", "endpointOnVendorDomain": null, "terms": "https://paperclip.ing/terms/", "privacy": "https://paperclip.ing/privacy/", "statusPage": "", "changelog": "https://paperclip.ing/changelog/", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The terms (effective 1 April 2026, updated 23 July 2026) and the privacy policy (effective 23 July 2026) name Paperclip Labs, Inc. and Delaware law. The licence file in the repository reads Copyright (c) 2025 Paperclip AI.", "RDAP at the .ing registry gives a registration date of 2026-03-02 for paperclip.ing, with Cloudflare as registrar. The GitHub repository was created the same day.", "paperclip.ing/.well-known/security.txt and docs.paperclip.ing/.well-known/security.txt returned 404 on 8 October 2026. SECURITY.md sends reports to GitHub private advisories.", "The software is self-hosted, so there is no vendor endpoint or status page to check. status.paperclip.ing did not answer.", "The privacy policy says it governs the hosted services, and that a self-hosted deployment processes data on the owner's infrastructure." ], "score": 56 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/paperclip.json", "live": { "slug": "paperclip", "versions": [ { "registry": "github", "name": "paperclipai/paperclip", "version": "v2026.1005.0", "released": "2026-10-06", "seenAt": "2026-10-08T16:24:44.149648743Z" }, { "registry": "npm", "name": "@paperclipai/mcp-server", "version": "2026.1005.0", "seenAt": "2026-10-08T16:24:42.049344463Z" }, { "registry": "npm", "name": "paperclipai", "version": "2026.1005.0", "seenAt": "2026-10-08T16:24:41.941235603Z" } ], "githubStars": 98744, "npmWeekly": 59684, "securityTxt": { "url": "https://paperclip.ing/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-08T15:39:09.089543926Z" }, "pages": [ { "url": "https://paperclip.ing/changelog/", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:22:47.072089969Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "4d68b2d18041" }, { "url": "https://paperclip.ing/privacy/", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:22:49.382016209Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "d75ac8f8733e" }, { "url": "https://paperclip.ing/terms/", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:22:51.246933771Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "1b2a133e6446" } ], "updatedAt": "2026-10-08T18:22:51.246933771Z" } }, "answer": "Qwen Code scores 72.4 (BB) on agent readiness against Paperclip's 59 (C), and leads in 4 of 7 scored categories. Paperclip leads on security \u0026 auth.", "b": { "slug": "qwen-code", "name": "Qwen Code", "vendor": "Alibaba (Qwen team)", "vendorUrl": "https://qwenlm.github.io/qwen-code-docs/en/users/overview/", "kind": "harness", "category": "agent-harnesses", "summary": "Open-source coding agent from Alibaba's Qwen team for the terminal, with desktop, browser and editor interfaces. It runs Qwen, OpenAI, Anthropic and Gemini-compatible models or a local one, and runs headless with `qwen -p`.", "url": "https://www.anchorterminal.com/tools/qwen-code", "markdownUrl": "https://www.anchorterminal.com/tools/qwen-code.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/qwen-code.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/qwen-code.json", "repo": "https://github.com/QwenLM/qwen-code", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "npm", "name": "@qwen-code/qwen-code" }, { "registry": "npm", "name": "@qwen-code/sdk" }, { "registry": "pypi", "name": "qwen-code-sdk" }, { "registry": "oci", "name": "ghcr.io/qwenlm/qwen-code" } ], "auth": "api-key", "authNotes": "No account of its own. A model key goes in an environment variable or `~/.qwen/settings.json`, for Alibaba Cloud Model Studio (Coding Plan, Token Plan or a standard key), a listed third-party provider, or any OpenAI, Anthropic or Gemini-compatible endpoint including a local server. Vertex AI credentials also work. The Qwen OAuth sign-in was discontinued on 15 April 2026.", "pricing": "free", "pricingNotes": "Free and Apache-2.0, with nothing to buy for the CLI. The owner pays the model provider, or nothing with a local model. The Qwen OAuth free tier ended on 15 April 2026. Alibaba Cloud sells a fixed-fee Coding Plan and a usage-billed Token Plan for it, and we couldn't load their price pages on 8 October 2026.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 28362, "npmWeekly": 104819, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://qwenlm.github.io/qwen-code-docs/en/users/overview/", "llmsTxt": "https://qwenlm.github.io/qwen-code-docs/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "official", "harness", "coding-agent", "cli", "open-source", "typescript", "mcp", "llms-txt", "telemetry-default-on", "pre-1.0", "free", "no-card", "local", "docker" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 72.4, "grade": "BB", "agentReady": true, "rank": 93, "ranked": true, "rankOf": 722, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 85, "maintenance": 88, "payments": 60, "reliability": 69, "schema": 91, "security": 53, "transparency": 63 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": 0, "verdict": "Apache-2.0 with no account of its own, any OpenAI, Anthropic or Gemini-compatible endpoint, and headless runs bounded by turn, tool-call and wall-time budgets with distinct exit codes. Out of the box, Auto mode lets an LLM classifier approve tool calls, with the sandbox and folder trust both off. Usage statistics are on by default.", "bestFor": "Developers and CI jobs that want an open-source harness tied to no single model vendor, with run budgets and SDKs.", "strengths": [ "Apache-2.0, with CI on main showing 12 passes and 3 cancelled runs in the last 15, none failed", "Headless `qwen -p` with json and stream-json output, and exit codes 53 for the turn limit and 55 for a wall-time or tool-call budget", "Works with any OpenAI, Anthropic or Gemini-compatible endpoint, including a local server, with keys set by environment variable", "39 stable releases in the 90 days to 8 October 2026, each with a Breaking Changes heading in a generated changelog", "A Linux tool sandbox (Bubblewrap or Landlock) with `network: closed`, plus Seatbelt, Docker and Podman" ], "weaknesses": [ "The default approval mode is Auto, where an LLM classifier approves tool calls, and sandboxing and folder trust are both off by default", "Usage statistics are on by default and go to an Alibaba Cloud endpoint that the docs don't name", "SECURITY.md points only to an Alibaba Cloud console portal, with no response time, and the repository has no published advisories", "Pre-1.0 at 0.25.0, with breaking changes shipped in patch releases such as 0.23.4 and 0.24.1", "1,402 open issues and 334 open pull requests on 8 October 2026", "The Qwen OAuth free tier ended on 15 April 2026, so every run needs a paid key or a local model" ], "agentNotes": [ "Pass `--approval-mode` on every run. The settings default is `auto`, and one docs page says headless runs default to asking, so don't rely on either", "Add `--max-session-turns`, `--max-wall-time` and `--max-tool-calls`. All three are unlimited by default. Exit 53 is the turn limit and 55 a budget", "`--yolo` doesn't turn on a sandbox. Add `--sandbox`, or on Linux set `tools.executionSandbox` with `network` set to `closed`", "Set `QWEN_USAGE_STATISTICS_ENABLED=false` to stop usage statistics", "Authenticate with `OPENAI_API_KEY`, `OPENAI_BASE_URL` and `OPENAI_MODEL` in CI. The browser sign-in is discontinued" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 72.4 } ], "editorialScores": { "ergonomics": 85, "maintenance": 88, "payments": 60, "reliability": 69, "schema": 91, "security": 53, "transparency": 77 }, "provenanceScore": 48 }, "connect": { "install": "npm install -g @qwen-code/qwen-code@latest # or: brew install qwen-code", "headless": { "command": "qwen -p \"$TASK\" --output-format json --approval-mode auto-edit --max-session-turns 30 --max-wall-time 10m", "env": { "OPENAI_API_KEY": "\u003ckey\u003e", "OPENAI_BASE_URL": "\u003cendpoint\u003e", "OPENAI_MODEL": "\u003cmodel\u003e", "QWEN_USAGE_STATISTICS_ENABLED": "false" } } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/qwen-code" }, "area": "frameworks", "provenance": { "legalEntity": "Qwen team, Alibaba Group (no legal entity is named in the repository or the docs)", "domain": "qwenlm.github.io", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "https://qwenlm.github.io/qwen-code-docs/en/users/support/tos-privacy/", "privacy": "https://qwenlm.github.io/qwen-code-docs/en/users/support/tos-privacy/", "statusPage": "", "changelog": "https://github.com/QwenLM/qwen-code/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The project's own Terms of Service and Privacy Notice is one page. It covers usage statistics and the Chrome extension, and maps each sign-in method to the model provider's terms and privacy policy. The project publishes no separate privacy policy for the CLI, so both fields point at that page.", "The LICENSE file carries Copyright 2025 Google LLC and Copyright 2025 Qwen. The docs describe the project as Alibaba's, and SECURITY.md sends reports to an Alibaba Cloud console portal.", "The docs are on GitHub Pages. qwen.ai returned its application page for /.well-known/security.txt, so no security.txt was found. alibabacloud.com couldn't be reached from our network on 8 October 2026.", "The qwen.ai terms and privacy pages render only with JavaScript and weren't read." ], "score": 48 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/qwen-code.json", "live": { "slug": "qwen-code", "pages": [ { "url": "https://raw.githubusercontent.com/QwenLM/qwen-code/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:23:49.8394153Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0782fd2dec4a" }, { "url": "https://qwenlm.github.io/qwen-code-docs/en/users/support/tos-privacy/", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:23:34.139570921Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "11f3bc6ce7da" } ], "updatedAt": "2026-10-08T18:23:49.8394153Z" } }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Paperclip Labs, Inc.", "b": "Alibaba (Qwen team)", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "API key", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Apache-2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-05", "b": "2026-10-05", "name": "Last release" }, { "a": "2026-07-23", "b": "2026-10-01", "name": "Terms last updated" }, { "a": "2026-07-23", "b": "2026-10-01", "name": "Privacy policy last updated" }, { "a": "yes, with an opt-out", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "99k stars, 60k npm/wk", "b": "28k stars, 105k npm/wk", "name": "Popularity" } ], "faq": [ { "answer": "Qwen Code scores 72.4 (BB) on agent readiness against Paperclip's 59 (C), and leads in 4 of 7 scored categories. Paperclip leads on security \u0026 auth.", "question": "Which is better for AI agents, Paperclip or Qwen Code?" }, { "answer": "Yes. Paperclip is open source (MIT). Qwen Code is open source (Apache-2.0).", "question": "Are Paperclip and Qwen Code open source?" } ], "goodFor": [ { "aheadOn": [ "Security \u0026 auth, 64 against 53" ], "also": null, "goodFor": "Someone running several coding or operations agents who wants one place for tasks, budgets, approvals and history across harnesses.", "slug": "paperclip", "watchFor": "`claude_local` defaults `dangerouslySkipPermissions` to true and `codex_local` defaults to bypassing approvals and the sandbox, with agents running on the host" }, { "aheadOn": [ "Schema \u0026 documentation, 91 against 81", "Agent ergonomics, 85 against 70", "Maintenance \u0026 community, 88 against 78" ], "also": [ "Agent-ready, a grade of BB or better", "No incidents deducted, where Paperclip loses 10 points for them" ], "goodFor": "Developers and CI jobs that want an open-source harness tied to no single model vendor, with run budgets and SDKs.", "slug": "qwen-code", "watchFor": "The default approval mode is Auto, where an LLM classifier approves tool calls, and sandboxing and folder trust are both off by default" } ], "job": { "capability": "agent.multi-agent", "name": "Agent multi agent" }, "others": [ { "json": "https://www.anchorterminal.com/compare/aider-vs-qwen-code.json", "title": "Aider vs Qwen Code", "url": "https://www.anchorterminal.com/compare/aider-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-qwen-code.json", "title": "Amp vs Qwen Code", "url": "https://www.anchorterminal.com/compare/amp-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-qwen-code.json", "title": "Claude Code vs Qwen Code", "url": "https://www.anchorterminal.com/compare/claude-code-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-qwen-code.json", "title": "Cline vs Qwen Code", "url": "https://www.anchorterminal.com/compare/cline-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-qwen-code.json", "title": "Cursor CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-qwen-code.json", "title": "Devin vs Qwen Code", "url": "https://www.anchorterminal.com/compare/devin-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-qwen-code.json", "title": "Pi vs Qwen Code", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-qwen-code.json", "title": "Gemini CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-qwen-code.json", "title": "GitHub Copilot CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-qwen-code.json", "title": "goose vs Qwen Code", "url": "https://www.anchorterminal.com/compare/goose-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-qwen-code.json", "title": "Kiro CLI vs Qwen Code", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-qwen-code.json", "title": "OpenAI Codex vs Qwen Code", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-qwen-code.json", "title": "OpenCode vs Qwen Code", "url": "https://www.anchorterminal.com/compare/opencode-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-qwen-code.json", "title": "OpenHands vs Qwen Code", "url": "https://www.anchorterminal.com/compare/openhands-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/prime-agent-vs-qwen-code.json", "title": "Prime Agent vs Qwen Code", "url": "https://www.anchorterminal.com/compare/prime-agent-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-paperclip.json", "title": "Amp vs Paperclip", "url": "https://www.anchorterminal.com/compare/amp-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-paperclip.json", "title": "Claude Code vs Paperclip", "url": "https://www.anchorterminal.com/compare/claude-code-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-paperclip.json", "title": "Cline vs Paperclip", "url": "https://www.anchorterminal.com/compare/cline-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-paperclip.json", "title": "Devin vs Paperclip", "url": "https://www.anchorterminal.com/compare/devin-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-paperclip.json", "title": "Gemini CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-paperclip.json", "title": "GitHub Copilot CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-paperclip.json", "title": "goose vs Paperclip", "url": "https://www.anchorterminal.com/compare/goose-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-paperclip.json", "title": "Kiro CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-paperclip.json", "title": "OpenCode vs Paperclip", "url": "https://www.anchorterminal.com/compare/opencode-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-paperclip.json", "title": "OpenHands vs Paperclip", "url": "https://www.anchorterminal.com/compare/openhands-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-prime-agent.json", "title": "Paperclip vs Prime Agent", "url": "https://www.anchorterminal.com/compare/paperclip-vs-prime-agent" } ], "scores": [ { "by": 3, "edge": "qwen-code", "key": "reliability", "name": "Reliability", "paperclip": 66, "qwen-code": 69, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 10, "edge": "qwen-code", "key": "schema", "name": "Schema \u0026 documentation", "paperclip": 81, "qwen-code": 91, "weight": 13 }, { "by": 15, "edge": "qwen-code", "key": "ergonomics", "name": "Agent ergonomics", "paperclip": 70, "qwen-code": 85, "weight": 13 }, { "by": 11, "edge": "paperclip", "key": "security", "name": "Security \u0026 auth", "paperclip": 64, "qwen-code": 53, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "paperclip": 60, "qwen-code": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 10, "edge": "qwen-code", "key": "maintenance", "name": "Maintenance \u0026 community", "paperclip": 78, "qwen-code": 88, "weight": 7 }, { "by": 2, "edge": "paperclip", "key": "transparency", "name": "Transparency \u0026 trust", "paperclip": 65, "qwen-code": 63, "weight": 7 } ], "summary": "Qwen Code scores 72.4 (BB) on agent readiness against Paperclip's 59 (C), and leads in 4 of 7 scored categories. Paperclip leads on security \u0026 auth. Both do agent multi agent.", "verdicts": { "paperclip": "Board approvals, budgets with a hard stop and an activity log sit above whichever harnesses do the work, and eleven stable versions shipped in 90 days. The Claude Code and Codex adapters skip permission prompts and the sandbox by default, and twelve security advisories, five of them critical, have been published since April 2026.", "qwen-code": "Apache-2.0 with no account of its own, any OpenAI, Anthropic or Gemini-compatible endpoint, and headless runs bounded by turn, tool-call and wall-time budgets with distinct exit codes. Out of the box, Auto mode lets an LLM classifier approve tool calls, with the sandbox and folder trust both off. Usage statistics are on by default." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/paperclip-vs-qwen-code", "json": "https://www.anchorterminal.com/compare/paperclip-vs-qwen-code.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/paperclip-vs-qwen-code.md", "slim": "https://www.anchorterminal.com/compare/paperclip-vs-qwen-code.min.md" }, "markdown": "Qwen Code scores 72.4 (BB) on agent readiness against Paperclip's 59 (C), and leads in 4 of 7 scored categories. Paperclip leads on security \u0026 auth. Both do agent multi agent.\n\n- Paperclip: grade C, 59/100, rank #441 of 722. Markdown https://www.anchorterminal.com/tools/paperclip.md · JSON https://www.anchorterminal.com/api/v1/tools/paperclip.json\n- Qwen Code: grade BB, 72.4/100, rank #93 of 722. Markdown https://www.anchorterminal.com/tools/qwen-code.md · JSON https://www.anchorterminal.com/api/v1/tools/qwen-code.json\n\n## Which one, for what\n\n### Paperclip (C)\n\nGood for: Someone running several coding or operations agents who wants one place for tasks, budgets, approvals and history across harnesses.\n\nAhead on:\n- Security \u0026 auth, 64 against 53\n\nWatch for: `claude_local` defaults `dangerouslySkipPermissions` to true and `codex_local` defaults to bypassing approvals and the sandbox, with agents running on the host\n\n### Qwen Code (BB)\n\nGood for: Developers and CI jobs that want an open-source harness tied to no single model vendor, with run budgets and SDKs.\n\nAhead on:\n- Schema \u0026 documentation, 91 against 81\n- Agent ergonomics, 85 against 70\n- Maintenance \u0026 community, 88 against 78\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- No incidents deducted, where Paperclip loses 10 points for them\n\nWatch for: The default approval mode is Auto, where an LLM classifier approves tool calls, and sandboxing and folder trust are both off by default\n\n\n## Score by category\n\n| Category | Weight | Paperclip | Qwen Code | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 66 | 69 | Qwen Code +3 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 81 | 91 | Qwen Code +10 |\n| Agent ergonomics | 13% (16.2 this run) | 70 | 85 | Qwen Code +15 |\n| Security \u0026 auth | 14% (17.5 this run) | 64 | 53 | Paperclip +11 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 78 | 88 | Qwen Code +10 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 65 | 63 | Paperclip +2 |\n| Negative events | ≤15 | -10 | 0 | |\n| **Total** | | **59 · C** | **72.4 · BB** | |\n\n## Facts side by side\n\n| Fact | Paperclip | Qwen Code |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Paperclip Labs, Inc. | Alibaba (Qwen team) |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | OAuth or key | API key |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-05 | 2026-10-05 |\n| Terms last updated | 2026-07-23 | 2026-10-01 |\n| Privacy policy last updated | 2026-07-23 | 2026-10-01 |\n| Customer content may train models | yes, with an opt-out | not found in the text |\n| Terms restrict automated access | not found in the text | not found in the text |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | yes | not found in the text |\n| Popularity | 99k stars, 60k npm/wk | 28k stars, 105k npm/wk |\n\n## Verdicts\n\n**Paperclip.** Board approvals, budgets with a hard stop and an activity log sit above whichever harnesses do the work, and eleven stable versions shipped in 90 days. The Claude Code and Codex adapters skip permission prompts and the sandbox by default, and twelve security advisories, five of them critical, have been published since April 2026.\n\n**Qwen Code.** Apache-2.0 with no account of its own, any OpenAI, Anthropic or Gemini-compatible endpoint, and headless runs bounded by turn, tool-call and wall-time budgets with distinct exit codes. Out of the box, Auto mode lets an LLM classifier approve tool calls, with the sandbox and folder trust both off. Usage statistics are on by default.\n\n## Before you call either\n\n### Paperclip\n\n1. Set `PAPERCLIP_TELEMETRY_DISABLED=1` or `DO_NOT_TRACK=1` before the first start. Telemetry is on by default\n2. Set `dangerouslySkipPermissions` and `dangerouslyBypassApprovalsAndSandbox` to false on agents that read untrusted input, or run them in a sandbox provider\n3. Install with Node.js 24.11 or newer, and install and sign in to each harness CLI on the host first. Paperclip assumes they are there\n4. Use `--bind lan` or `--bind tailnet` at onboarding for anything beyond one machine. The default `local_trusted` mode treats every request as the board admin\n5. Treat 409 on task checkout as owned by another agent and pick different work. The API docs say not to retry\n\n### Qwen Code\n\n1. Pass `--approval-mode` on every run. The settings default is `auto`, and one docs page says headless runs default to asking, so don't rely on either\n2. Add `--max-session-turns`, `--max-wall-time` and `--max-tool-calls`. All three are unlimited by default. Exit 53 is the turn limit and 55 a budget\n3. `--yolo` doesn't turn on a sandbox. Add `--sandbox`, or on Linux set `tools.executionSandbox` with `network` set to `closed`\n4. Set `QWEN_USAGE_STATISTICS_ENABLED=false` to stop usage statistics\n5. Authenticate with `OPENAI_API_KEY`, `OPENAI_BASE_URL` and `OPENAI_MODEL` in CI. The browser sign-in is discontinued\n\n## Questions\n\n### Which is better for AI agents, Paperclip or Qwen Code?\n\nQwen Code scores 72.4 (BB) on agent readiness against Paperclip's 59 (C), and leads in 4 of 7 scored categories. Paperclip leads on security \u0026 auth.\n\n### Are Paperclip and Qwen Code open source?\n\nYes. Paperclip is open source (MIT). Qwen Code is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/paperclip-vs-qwen-code.json, and with the fewest tokens: https://www.anchorterminal.com/compare/paperclip-vs-qwen-code.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"paperclip\", \"b\": \"qwen-code\"}`. From a terminal: `anchor compare paperclip qwen-code`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/paperclip.json and https://www.anchorterminal.com/api/v1/tools/qwen-code.json\n\n## Other comparisons with Paperclip or Qwen Code\n\n- [Aider vs Qwen Code](https://www.anchorterminal.com/compare/aider-vs-qwen-code.md)\n- [Amp vs Qwen Code](https://www.anchorterminal.com/compare/amp-vs-qwen-code.md)\n- [Claude Code vs Qwen Code](https://www.anchorterminal.com/compare/claude-code-vs-qwen-code.md)\n- [Cline vs Qwen Code](https://www.anchorterminal.com/compare/cline-vs-qwen-code.md)\n- [Cursor CLI vs Qwen Code](https://www.anchorterminal.com/compare/cursor-cli-vs-qwen-code.md)\n- [Devin vs Qwen Code](https://www.anchorterminal.com/compare/devin-vs-qwen-code.md)\n- [Pi vs Qwen Code](https://www.anchorterminal.com/compare/earendil-pi-vs-qwen-code.md)\n- [Gemini CLI vs Qwen Code](https://www.anchorterminal.com/compare/gemini-cli-vs-qwen-code.md)\n- [GitHub Copilot CLI vs Qwen Code](https://www.anchorterminal.com/compare/github-copilot-cli-vs-qwen-code.md)\n- [goose vs Qwen Code](https://www.anchorterminal.com/compare/goose-vs-qwen-code.md)\n- [Kiro CLI vs Qwen Code](https://www.anchorterminal.com/compare/kiro-cli-vs-qwen-code.md)\n- [OpenAI Codex vs Qwen Code](https://www.anchorterminal.com/compare/openai-codex-vs-qwen-code.md)\n- [OpenCode vs Qwen Code](https://www.anchorterminal.com/compare/opencode-vs-qwen-code.md)\n- [OpenHands vs Qwen Code](https://www.anchorterminal.com/compare/openhands-vs-qwen-code.md)\n- [Prime Agent vs Qwen Code](https://www.anchorterminal.com/compare/prime-agent-vs-qwen-code.md)\n- [Amp vs Paperclip](https://www.anchorterminal.com/compare/amp-vs-paperclip.md)\n- [Claude Code vs Paperclip](https://www.anchorterminal.com/compare/claude-code-vs-paperclip.md)\n- [Cline vs Paperclip](https://www.anchorterminal.com/compare/cline-vs-paperclip.md)\n- [Devin vs Paperclip](https://www.anchorterminal.com/compare/devin-vs-paperclip.md)\n- [Gemini CLI vs Paperclip](https://www.anchorterminal.com/compare/gemini-cli-vs-paperclip.md)\n- [GitHub Copilot CLI vs Paperclip](https://www.anchorterminal.com/compare/github-copilot-cli-vs-paperclip.md)\n- [goose vs Paperclip](https://www.anchorterminal.com/compare/goose-vs-paperclip.md)\n- [Kiro CLI vs Paperclip](https://www.anchorterminal.com/compare/kiro-cli-vs-paperclip.md)\n- [OpenCode vs Paperclip](https://www.anchorterminal.com/compare/opencode-vs-paperclip.md)\n- [OpenHands vs Paperclip](https://www.anchorterminal.com/compare/openhands-vs-paperclip.md)\n- [Paperclip vs Prime Agent](https://www.anchorterminal.com/compare/paperclip-vs-prime-agent.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Paperclip vs Qwen Code", "url": "" } ], "description": "Qwen Code scores 72.4 (BB) on agent readiness against Paperclip's 59 (C), and leads in 4 of 7 scored categories. Paperclip leads on security \u0026 auth. Both do agent multi agent. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Paperclip C 59", "Qwen Code BB 72.4", "scores" ], "h1": "Paperclip vs Qwen Code", "image": "https://www.anchorterminal.com/assets/og/compare-paperclip-vs-qwen-code.png", "path": "/compare/paperclip-vs-qwen-code", "published": "2026-10-01", "section": "tools", "title": "Paperclip vs Qwen Code for AI agents, C 59 vs BB 72.4", "toc": null, "updated": "2026-10-08", "url": "https://www.anchorterminal.com/compare/paperclip-vs-qwen-code" }, "tokens": { "markdown": 2350, "slim": 580 }, "version": 1 }