{ "data": { "a": { "slug": "paperclip", "name": "Paperclip", "vendor": "Paperclip Labs, Inc.", "vendorUrl": "https://paperclip.ing", "kind": "harness", "category": "agent-harnesses", "summary": "Paperclip is an open-source, self-hosted server and web interface that organises AI agents into a company with an org chart, tasks, budgets and approvals. It drives Claude Code, Codex, OpenClaw and other harnesses through adapters.", "url": "https://www.anchorterminal.com/tools/paperclip", "markdownUrl": "https://www.anchorterminal.com/tools/paperclip.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/paperclip.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/paperclip.json", "repo": "https://github.com/paperclipai/paperclip", "license": "MIT", "transports": [], "packages": [ { "registry": "npm", "name": "paperclipai" }, { "registry": "npm", "name": "@paperclipai/mcp-server" }, { "registry": "oci", "name": "ghcr.io/paperclipai/paperclip" } ], "auth": "mixed", "authNotes": "No Paperclip account. The default `local_trusted` mode needs no login on loopback. Authenticated mode uses browser sessions for people, board API keys for scripts, and agent API keys or short-lived run JWTs as bearer tokens.", "pricing": "free", "pricingNotes": "Free and MIT, self-hosted, with nothing to buy. The owner pays each harness's model provider or subscription. Paperclip Cloud is a waitlist with no published price.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs, the site or the server source (checked 2026-10-08). The only mention in the repository is a link to a third-party skill in a planning note.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 98666, "npmWeekly": 59684, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://docs.paperclip.ing", "llmsTxt": "https://paperclip.ing/llms.txt", "capabilities": [ "agent.multi-agent", "agent.mcp-client" ], "tags": [ "open-source", "self-hosted", "local", "free", "no-card", "llms-txt", "docker", "mcp", "typescript" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 59, "grade": "C", "agentReady": false, "rank": 620, "ranked": true, "rankOf": 1133, "categoryRank": 17, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 78, "payments": 60, "reliability": 66, "schema": 81, "security": 64, "transparency": 65 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -10, "negativeNotes": [ "2026-04-10 to 2026-04-16. Ten advisories published in a week, four of them critical, among them GHSA-68qg-g8mg-6pr7 (CVE-2026-41679, 10.0, unauthenticated remote code execution through an import authorisation bypass) and two cross-tenant agent key flaws rated 9.9. All ten list 2026.416.0 as the fix. Fixed and published, a little under six months old, -5. https://github.com/paperclipai/paperclip/security/advisories", "2026-07-22. GHSA-x8hx-rhr2-9rf7 (9.6), drive-by remote code execution against the default `local_trusted` mode through DNS rebinding. The advisory names no patched version. The current source applies the hostname guard to `local_trusted` private deployments, so we read it as fixed without a documented version, -3. https://github.com/paperclipai/paperclip/security/advisories/GHSA-x8hx-rhr2-9rf7", "2026-04-16. GHSA-gqqj-85qm-8qhf (8.7), a `codex_local` agent inherited a Gmail connector from the owner's ChatGPT account and sent real email. The advisory names no patched version, and `codex_local` still defaults to bypassing approvals and the sandbox, -2. https://github.com/paperclipai/paperclip/security/advisories/GHSA-gqqj-85qm-8qhf" ], "verdict": "Board approvals, budgets with a hard stop and an activity log sit above whichever harnesses do the work, and eleven stable versions shipped in 90 days. The Claude Code and Codex adapters skip permission prompts and the sandbox by default, and twelve security advisories, five of them critical, have been published since April 2026.", "bestFor": "Someone running several coding or operations agents who wants one place for tasks, budgets, approvals and history across harnesses.", "strengths": [ "One deployment runs agents on Claude Code, Codex, Cursor, Gemini CLI, OpenCode, Pi, Hermes, Grok Build, Kimi Code and OpenClaw through adapters, under one org chart", "Board approvals gate agent hires and the CEO agent's strategy, and connection actions can be set to Allowed, Ask first or Off", "Budgets by company, agent and project pause an agent at 100 per cent of recorded spend", "The running server publishes its REST surface as OpenAPI at `/api/openapi.json`, and the docs site answers every page as Markdown at `.md`", "Eleven stable releases between 20 July and 5 October 2026, each with dated notes and an upgrade guide" ], "weaknesses": [ "`claude_local` defaults `dangerouslySkipPermissions` to true and `codex_local` defaults to bypassing approvals and the sandbox, with agents running on the host", "Twelve published security advisories since April 2026, five critical, including CVE-2026-41679 (unauthenticated remote code execution, fixed in 2026.416.0)", "Anonymous usage telemetry is on by default and goes to telemetry.paperclip.ing until an opt-out is set", "2,849 open issues on 8 October 2026, 1,396 of them with no comment, and 78 closed in 30 days against 686 opened", "Calendar versions with no 1.0, and release 2026.916.0 carried five breaking changes" ], "agentNotes": [ "Set `PAPERCLIP_TELEMETRY_DISABLED=1` or `DO_NOT_TRACK=1` before the first start. Telemetry is on by default", "Set `dangerouslySkipPermissions` and `dangerouslyBypassApprovalsAndSandbox` to false on agents that read untrusted input, or run them in a sandbox provider", "Install with Node.js 24.11 or newer, and install and sign in to each harness CLI on the host first. Paperclip assumes they are there", "Use `--bind lan` or `--bind tailnet` at onboarding for anything beyond one machine. The default `local_trusted` mode treats every request as the board admin", "Treat 409 on task checkout as owned by another agent and pick different work. The API docs say not to retry" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59 } ], "editorialScores": { "ergonomics": 70, "maintenance": 78, "payments": 60, "reliability": 66, "schema": 81, "security": 64, "transparency": 73 }, "provenanceScore": 56 }, "connect": { "install": "npx paperclipai@latest onboard --yes # Node.js 24.11 or newer", "http": "curl http://localhost:3100/api/health", "headless": { "command": "npx paperclipai issue create --title \"$TASK\" --json", "env": { "PAPERCLIP_API_KEY": "\u003cboard or agent key\u003e", "PAPERCLIP_TELEMETRY_DISABLED": "1" } } }, "letme": { "capability": "https://letme.dev/agent.multi-agent", "tool": "https://letme.dev/paperclip" }, "area": "frameworks", "provenance": { "legalEntity": "Paperclip Labs, Inc.", "domain": "paperclip.ing", "domainRegistered": "2026-03-02", "endpointOnVendorDomain": null, "terms": "https://paperclip.ing/terms/", "privacy": "https://paperclip.ing/privacy/", "statusPage": "", "changelog": "https://paperclip.ing/changelog/", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The terms (effective 1 April 2026, updated 23 July 2026) and the privacy policy (effective 23 July 2026) name Paperclip Labs, Inc. and Delaware law. The licence file in the repository reads Copyright (c) 2025 Paperclip AI.", "RDAP at the .ing registry gives a registration date of 2026-03-02 for paperclip.ing, with Cloudflare as registrar. The GitHub repository was created the same day.", "paperclip.ing/.well-known/security.txt and docs.paperclip.ing/.well-known/security.txt returned 404 on 8 October 2026. SECURITY.md sends reports to GitHub private advisories.", "The software is self-hosted, so there is no vendor endpoint or status page to check. status.paperclip.ing did not answer.", "The privacy policy says it governs the hosted services, and that a self-hosted deployment processes data on the owner's infrastructure." ], "score": 56 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/paperclip.json", "live": { "slug": "paperclip", "versions": [ { "registry": "github", "name": "paperclipai/paperclip", "version": "v2026.1012.0", "released": "2026-10-12", "seenAt": "2026-10-17T02:08:44.31745139Z" }, { "registry": "npm", "name": "@paperclipai/mcp-server", "version": "2026.1012.0", "seenAt": "2026-10-17T02:08:42.167653004Z" }, { "registry": "npm", "name": "paperclipai", "version": "2026.1012.0", "seenAt": "2026-10-17T02:08:42.095685664Z" } ], "githubStars": 103201, "npmWeekly": 48653, "securityTxt": { "url": "https://paperclip.ing/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-17T15:52:35.65906303Z" }, "llmsTxt": { "url": "https://paperclip.ing/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-17T14:22:56.210629559Z" }, "domain": { "domain": "paperclip.ing", "registered": "2026-03-02", "source": "https://pubapi.registry.google/rdap/domain/paperclip.ing", "checkedAt": "2026-10-11T13:14:53.975891006Z" }, "pages": [ { "url": "https://paperclip.ing/changelog/", "kind": "changelog", "status": 200, "checkedAt": "2026-10-17T23:07:06.380040295Z", "changedAt": "2026-10-13T20:20:35.777028506Z", "fingerprint": "874daecee6a2" }, { "url": "https://paperclip.ing/privacy/", "kind": "privacy", "status": 200, "checkedAt": "2026-10-17T23:07:08.577453132Z", "changedAt": "2026-10-13T20:20:37.971216507Z", "fingerprint": "4b2a8faa9979" }, { "url": "https://paperclip.ing/terms/", "kind": "terms", "status": 200, "checkedAt": "2026-10-17T23:07:10.54120879Z", "changedAt": "2026-10-13T20:20:40.00773926Z", "fingerprint": "2076edf48663" } ], "updatedAt": "2026-10-17T23:07:10.54120879Z" } }, "answer": "Paperclip scores 59 (C) on agent readiness against Mirror CLI's 54.2 (C), and leads in 6 of 7 scored categories.", "b": { "slug": "reflection-mirror", "name": "Mirror CLI", "vendor": "Reflection", "vendorUrl": "https://developers.reflection.ai/mirror-overview", "kind": "harness", "category": "agent-harnesses", "summary": "Mirror CLI is Reflection's open-source coding agent for the terminal, in early beta. It reads code, edits files and runs commands, with parallel agents in separate worktrees, MCP connections and Python extensions, using Beam by default or another provider.", "url": "https://www.anchorterminal.com/tools/reflection-mirror", "markdownUrl": "https://www.anchorterminal.com/tools/reflection-mirror.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/reflection-mirror.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/reflection-mirror.json", "repo": "https://github.com/reflection-oss/mirror", "license": "Apache-2.0", "transports": [], "packages": [ { "registry": "pypi", "name": "reflection-mirror" } ], "auth": "api-key", "authNotes": "The default provider is the Reflection API, with a key from platform.reflection.ai in `REFLECTION_API_KEY` or pasted at first start and saved to `~/.mirror/reflection_api_key`. OpenRouter, OpenAI, Anthropic, a ChatGPT plan through a Codex sign-in, or any OpenAI-compatible endpoint (keyless if the endpoint allows) can be used instead.", "pricing": "free", "pricingNotes": "Free and Apache-2.0. Model calls are billed by the provider chosen. The default Reflection API was a free public beta with daily usage limits on 17 October 2026, and some organisations must verify a credit card before their keys work.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Mirror docs, the README or the source at commit f938033 (checked 17 October 2026).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://developers.reflection.ai/mirror-overview", "llmsTxt": "https://developers.reflection.ai/llms.txt", "capabilities": [ "agent.harness", "agent.mcp-client", "agent.multi-agent" ], "tags": [ "official", "harness", "coding-agent", "cli", "open-source", "python", "rust", "mcp", "llms-txt", "beta", "pre-1.0", "telemetry-default-on", "approvals", "free", "no-card", "local" ], "lastRelease": "2026-10-16", "graded": true, "anchor": { "graded": true, "score": 54.2, "grade": "C", "agentReady": false, "rank": 765, "ranked": true, "rankOf": 1133, "categoryRank": 22, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 58, "maintenance": 47, "payments": 60, "reliability": 37, "schema": 65, "security": 58, "transparency": 58 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": 0, "verdict": "Mirror CLI is Apache-2.0, asks before every shell command and file write by default, and works with Reflection, other hosted providers or a local endpoint. It is a one-day-old 0.1.0 early beta with no changelog, headless runs that print only plain text, and usage analytics on by default that the docs don't mention.", "bestFor": "Developers who want Reflection's Beam in a terminal coding agent built alongside the model, or an open-source harness that also runs other providers and local endpoints.", "strengths": [ "Apache-2.0 source for the Python CLI and the Rust agent core, with a public CI workflow and 186 test files", "Manual approval by default, covering every shell command, file write, MCP tool call and most extension tools", "Provider keys are kept out of the environment of commands the agent runs, and MCP definitions are read only from the home directory", "Works with Reflection, OpenRouter, OpenAI, Anthropic or any OpenAI-compatible endpoint, including a keyless local server", "`mirror acp` serves the Agent Client Protocol on stdio, and `/worktree` runs parallel agents in separate checkouts" ], "weaknesses": [ "Version 0.1.0, released 16 October 2026 and labelled early beta, with no changelog or release tags", "Usage analytics go to Statsig by default, disclosed in a first-run notice but not in the docs or README", "No sandbox by default. The opt-in microVM sandbox covers file and shell tools only, and extensions and local MCP servers run on the host", "`mirror exec` prints only the final answer as plain text, with exit codes not documented and no budget or time limit", "Approval mode is saved globally, so switching to auto in one directory applies to later launches everywhere" ], "agentNotes": [ "Open Mirror interactively once in each directory before `mirror exec` or `mirror acp`. Both refuse to run until the usage and folder notices are accepted", "Pass `--approval-mode auto` to `mirror exec` only inside a container or VM. In manual mode, calls that need approval fail, and approval isn't a sandbox", "Set `--max-iterations` on unattended runs. Turns are unlimited by default", "Check the result with your own tests. `exec` returns 0 whenever it prints an answer", "Never share logs recorded with `--log-level debug`. The docs say they contain request headers with the API key" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 54.2 } ], "editorialScores": { "ergonomics": 58, "maintenance": 47, "payments": 60, "reliability": 37, "schema": 65, "security": 58, "transparency": 56 }, "provenanceScore": 60 }, "connect": { "install": "uv tool install reflection-mirror", "headless": { "command": "mirror exec --approval-mode auto --max-iterations 50 \"$TASK\"", "env": { "REFLECTION_API_KEY": "\u003cyour-key\u003e" } } }, "letme": { "capability": "https://letme.dev/agent.harness", "tool": "https://letme.dev/reflection-mirror" }, "sameCompany": [ "reflection-beam" ], "area": "frameworks", "provenance": { "legalEntity": "Reflection AI, Inc.", "domain": "reflection.ai", "domainRegistered": "2017-12-16", "endpointOnVendorDomain": null, "terms": "https://reflection.ai/legal/commercial-terms-of-service", "privacy": "https://reflection.ai/legal/privacy-policy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-17", "notes": [ "The software is under Apache-2.0 (LICENSE and NOTICE in the repository). The terms field is Reflection's Commercial Terms of Service, which cover the Reflection API that Mirror calls by default and say beta services are provided as is. The site Terms of Service (last updated 19 February 2025) cover the website only.", "The Privacy Policy, last updated 28 August 2026, names Reflection AI, Inc., 61 9th Ave, Floor 3, New York, NY 10011, and gives no fixed retention periods.", "RDAP for reflection.ai gives a registration date of 16 December 2017.", "No changelog or release notes were found for Mirror. The repository has no tags.", "reflection.ai/.well-known/security.txt and developers.reflection.ai/.well-known/security.txt return 404. The repository's SECURITY.md sends vulnerability reports to developers@reflection.ai.", "Mirror is software the owner runs, so no status page applies to it. The Reflection API's status page wasn't looked for here." ], "score": 60 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/reflection-mirror.json" }, "facts": [ { "a": "Agent harness", "b": "Agent harness", "name": "Kind" }, { "a": "Paperclip Labs, Inc.", "b": "Reflection", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "", "b": "", "name": "Transports" }, { "a": "OAuth or key", "b": "API key", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "Apache-2.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-05", "b": "2026-10-16", "name": "Last release" }, { "a": "2026-07-23", "b": "", "name": "Terms last updated" }, { "a": "2026-07-23", "b": "", "name": "Privacy policy last updated" }, { "a": "yes, with an opt-out", "b": "", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "99k stars, 60k npm/wk", "b": "none", "name": "Popularity" }, { "a": "none", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Paperclip scores 59 (C) on agent readiness against Mirror CLI's 54.2 (C), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, Paperclip or Mirror CLI?" }, { "answer": "Yes. Paperclip is open source (MIT). Mirror CLI is open source (Apache-2.0).", "question": "Are Paperclip and Mirror CLI open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 66 against 37", "Schema \u0026 documentation, 81 against 65", "Agent ergonomics, 70 against 58", "Security \u0026 auth, 64 against 58", "Maintenance \u0026 community, 78 against 47", "Transparency \u0026 trust, 65 against 58" ], "also": null, "goodFor": "Someone running several coding or operations agents who wants one place for tasks, budgets, approvals and history across harnesses.", "slug": "paperclip", "watchFor": "`claude_local` defaults `dangerouslySkipPermissions` to true and `codex_local` defaults to bypassing approvals and the sandbox, with agents running on the host" }, { "aheadOn": null, "also": [ "No incidents deducted, where Paperclip loses 10 points for them" ], "goodFor": "Developers who want Reflection's Beam in a terminal coding agent built alongside the model, or an open-source harness that also runs other providers and local endpoints.", "slug": "reflection-mirror", "watchFor": "Version 0.1.0, released 16 October 2026 and labelled early beta, with no changelog or release tags" } ], "job": { "capability": "agent.multi-agent", "name": "Multi-agent orchestration" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agent-zero-vs-reflection-mirror.json", "title": "Agent Zero vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/agent-zero-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/aider-vs-reflection-mirror.json", "title": "Aider vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/aider-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-reflection-mirror.json", "title": "Amp vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/amp-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-reflection-mirror.json", "title": "Antigravity CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror.json", "title": "Claude Code vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-reflection-mirror.json", "title": "Cline vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/cline-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-reflection-mirror.json", "title": "Cursor CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-reflection-mirror.json", "title": "Devin vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/devin-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-reflection-mirror.json", "title": "Droid CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-reflection-mirror.json", "title": "Pi vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-reflection-mirror.json", "title": "Gemini CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-reflection-mirror.json", "title": "GitHub Copilot CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-reflection-mirror.json", "title": "goose vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/goose-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-reflection-mirror.json", "title": "HarnessRouter vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-reflection-mirror.json", "title": "Kilo Code CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-reflection-mirror.json", "title": "Kiro CLI vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/muse-code-vs-reflection-mirror.json", "title": "Muse Code vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/muse-code-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/openai-codex-vs-reflection-mirror.json", "title": "OpenAI Codex vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/openai-codex-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-reflection-mirror.json", "title": "OpenCode vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/opencode-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-reflection-mirror.json", "title": "OpenHands vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/openhands-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/prime-agent-vs-reflection-mirror.json", "title": "Prime Agent vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/prime-agent-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/qwen-code-vs-reflection-mirror.json", "title": "Qwen Code vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/qwen-code-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/amp-vs-paperclip.json", "title": "Amp vs Paperclip", "url": "https://www.anchorterminal.com/compare/amp-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-paperclip.json", "title": "Antigravity CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/claude-code-vs-paperclip.json", "title": "Claude Code vs Paperclip", "url": "https://www.anchorterminal.com/compare/claude-code-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-paperclip.json", "title": "CLI Manager vs Paperclip", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/cli-manager-vs-reflection-mirror.json", "title": "CLI Manager vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/cli-manager-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/cline-vs-paperclip.json", "title": "Cline vs Paperclip", "url": "https://www.anchorterminal.com/compare/cline-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/devin-vs-paperclip.json", "title": "Devin vs Paperclip", "url": "https://www.anchorterminal.com/compare/devin-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/droid-cli-vs-paperclip.json", "title": "Droid CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/droid-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-paperclip.json", "title": "Gemini CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-paperclip.json", "title": "GitHub Copilot CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/goose-vs-paperclip.json", "title": "goose vs Paperclip", "url": "https://www.anchorterminal.com/compare/goose-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-paperclip.json", "title": "Harness vs Paperclip", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-reflection-mirror.json", "title": "Harness vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-reflection-mirror" }, { "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-paperclip.json", "title": "HarnessRouter vs Paperclip", "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip.json", "title": "Kilo Code CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-paperclip.json", "title": "Kiro CLI vs Paperclip", "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/muse-code-vs-paperclip.json", "title": "Muse Code vs Paperclip", "url": "https://www.anchorterminal.com/compare/muse-code-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/opencode-vs-paperclip.json", "title": "OpenCode vs Paperclip", "url": "https://www.anchorterminal.com/compare/opencode-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/openhands-vs-paperclip.json", "title": "OpenHands vs Paperclip", "url": "https://www.anchorterminal.com/compare/openhands-vs-paperclip" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-parallax-agents.json", "title": "Paperclip vs Parallax", "url": "https://www.anchorterminal.com/compare/paperclip-vs-parallax-agents" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-prime-agent.json", "title": "Paperclip vs Prime Agent", "url": "https://www.anchorterminal.com/compare/paperclip-vs-prime-agent" }, { "json": "https://www.anchorterminal.com/compare/paperclip-vs-qwen-code.json", "title": "Paperclip vs Qwen Code", "url": "https://www.anchorterminal.com/compare/paperclip-vs-qwen-code" }, { "json": "https://www.anchorterminal.com/compare/parallax-agents-vs-reflection-mirror.json", "title": "Parallax vs Mirror CLI", "url": "https://www.anchorterminal.com/compare/parallax-agents-vs-reflection-mirror" } ], "scores": [ { "by": 29, "edge": "paperclip", "key": "reliability", "name": "Reliability", "paperclip": 66, "reflection-mirror": 37, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 16, "edge": "paperclip", "key": "schema", "name": "Schema \u0026 documentation", "paperclip": 81, "reflection-mirror": 65, "weight": 13 }, { "by": 12, "edge": "paperclip", "key": "ergonomics", "name": "Agent ergonomics", "paperclip": 70, "reflection-mirror": 58, "weight": 13 }, { "by": 6, "edge": "paperclip", "key": "security", "name": "Security \u0026 auth", "paperclip": 64, "reflection-mirror": 58, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "paperclip": 60, "reflection-mirror": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 31, "edge": "paperclip", "key": "maintenance", "name": "Maintenance \u0026 community", "paperclip": 78, "reflection-mirror": 47, "weight": 7 }, { "by": 7, "edge": "paperclip", "key": "transparency", "name": "Transparency \u0026 trust", "paperclip": 65, "reflection-mirror": 58, "weight": 7 } ], "summary": "Paperclip scores 59 (C) on agent readiness against Mirror CLI's 54.2 (C), and leads in 6 of 7 scored categories. Both do multi-agent orchestration.", "tutorials": [], "verdicts": { "paperclip": "Board approvals, budgets with a hard stop and an activity log sit above whichever harnesses do the work, and eleven stable versions shipped in 90 days. The Claude Code and Codex adapters skip permission prompts and the sandbox by default, and twelve security advisories, five of them critical, have been published since April 2026.", "reflection-mirror": "Mirror CLI is Apache-2.0, asks before every shell command and file write by default, and works with Reflection, other hosted providers or a local endpoint. It is a one-day-old 0.1.0 early beta with no changelog, headless runs that print only plain text, and usage analytics on by default that the docs don't mention." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror", "json": "https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror.min.md" }, "markdown": "Paperclip scores 59 (C) on agent readiness against Mirror CLI's 54.2 (C), and leads in 6 of 7 scored categories. Both do multi-agent orchestration.\n\n- Paperclip: grade C, 59/100, rank #620 of 1133. Markdown https://www.anchorterminal.com/tools/paperclip.md · JSON https://www.anchorterminal.com/api/v1/tools/paperclip.json\n- Mirror CLI: grade C, 54.2/100, rank #765 of 1133. Markdown https://www.anchorterminal.com/tools/reflection-mirror.md · JSON https://www.anchorterminal.com/api/v1/tools/reflection-mirror.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 331 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### Paperclip (C)\n\nGood for: Someone running several coding or operations agents who wants one place for tasks, budgets, approvals and history across harnesses.\n\nAhead on:\n- Reliability, 66 against 37\n- Schema \u0026 documentation, 81 against 65\n- Agent ergonomics, 70 against 58\n- Security \u0026 auth, 64 against 58\n- Maintenance \u0026 community, 78 against 47\n- Transparency \u0026 trust, 65 against 58\n\nWatch for: `claude_local` defaults `dangerouslySkipPermissions` to true and `codex_local` defaults to bypassing approvals and the sandbox, with agents running on the host\n\n### Mirror CLI (C)\n\nGood for: Developers who want Reflection's Beam in a terminal coding agent built alongside the model, or an open-source harness that also runs other providers and local endpoints.\n\nAlso in its favour:\n- No incidents deducted, where Paperclip loses 10 points for them\n\nWatch for: Version 0.1.0, released 16 October 2026 and labelled early beta, with no changelog or release tags\n\n\n## Score by category\n\n| Category | Weight | Paperclip | Mirror CLI | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 66 | 37 | Paperclip +29 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 81 | 65 | Paperclip +16 |\n| Agent ergonomics | 13% (16.2 this run) | 70 | 58 | Paperclip +12 |\n| Security \u0026 auth | 14% (17.5 this run) | 64 | 58 | Paperclip +6 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 78 | 47 | Paperclip +31 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 65 | 58 | Paperclip +7 |\n| Negative events | ≤15 | -10 | 0 | |\n| **Total** | | **59 · C** | **54.2 · C** | |\n\n## Facts side by side\n\n| Fact | Paperclip | Mirror CLI |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Paperclip Labs, Inc. | Reflection |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | | |\n| Auth | OAuth or key | API key |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | Apache-2.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-05 | 2026-10-16 |\n| Terms last updated | 2026-07-23 | |\n| Privacy policy last updated | 2026-07-23 | |\n| Customer content may train models | yes, with an opt-out | |\n| Terms restrict automated access | not found in the text | |\n| Terms restrict benchmarking | not found in the text | |\n| Terms or service can change without notice | not found in the text | |\n| Arbitration or class-action waiver | yes | |\n| Popularity | 99k stars, 60k npm/wk | none |\n| Agent reviews | none | 3/5 (4) |\n\n## Verdicts\n\n**Paperclip.** Board approvals, budgets with a hard stop and an activity log sit above whichever harnesses do the work, and eleven stable versions shipped in 90 days. The Claude Code and Codex adapters skip permission prompts and the sandbox by default, and twelve security advisories, five of them critical, have been published since April 2026.\n\n**Mirror CLI.** Mirror CLI is Apache-2.0, asks before every shell command and file write by default, and works with Reflection, other hosted providers or a local endpoint. It is a one-day-old 0.1.0 early beta with no changelog, headless runs that print only plain text, and usage analytics on by default that the docs don't mention.\n\n## Before you call either\n\n### Paperclip\n\n1. Set `PAPERCLIP_TELEMETRY_DISABLED=1` or `DO_NOT_TRACK=1` before the first start. Telemetry is on by default\n2. Set `dangerouslySkipPermissions` and `dangerouslyBypassApprovalsAndSandbox` to false on agents that read untrusted input, or run them in a sandbox provider\n3. Install with Node.js 24.11 or newer, and install and sign in to each harness CLI on the host first. Paperclip assumes they are there\n4. Use `--bind lan` or `--bind tailnet` at onboarding for anything beyond one machine. The default `local_trusted` mode treats every request as the board admin\n5. Treat 409 on task checkout as owned by another agent and pick different work. The API docs say not to retry\n\n### Mirror CLI\n\n1. Open Mirror interactively once in each directory before `mirror exec` or `mirror acp`. Both refuse to run until the usage and folder notices are accepted\n2. Pass `--approval-mode auto` to `mirror exec` only inside a container or VM. In manual mode, calls that need approval fail, and approval isn't a sandbox\n3. Set `--max-iterations` on unattended runs. Turns are unlimited by default\n4. Check the result with your own tests. `exec` returns 0 whenever it prints an answer\n5. Never share logs recorded with `--log-level debug`. The docs say they contain request headers with the API key\n\n## Questions\n\n### Which is better for AI agents, Paperclip or Mirror CLI?\n\nPaperclip scores 59 (C) on agent readiness against Mirror CLI's 54.2 (C), and leads in 6 of 7 scored categories.\n\n### Are Paperclip and Mirror CLI open source?\n\nYes. Paperclip is open source (MIT). Mirror CLI is open source (Apache-2.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror.json, and with the fewest tokens: https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"paperclip\", \"b\": \"reflection-mirror\"}`. From a terminal: `anchor compare paperclip reflection-mirror`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/paperclip.json and https://www.anchorterminal.com/api/v1/tools/reflection-mirror.json\n\n## Other comparisons with Paperclip or Mirror CLI\n\n- [Agent Zero vs Mirror CLI](https://www.anchorterminal.com/compare/agent-zero-vs-reflection-mirror.md)\n- [Aider vs Mirror CLI](https://www.anchorterminal.com/compare/aider-vs-reflection-mirror.md)\n- [Amp vs Mirror CLI](https://www.anchorterminal.com/compare/amp-vs-reflection-mirror.md)\n- [Antigravity CLI vs Mirror CLI](https://www.anchorterminal.com/compare/antigravity-cli-vs-reflection-mirror.md)\n- [Claude Code vs Mirror CLI](https://www.anchorterminal.com/compare/claude-code-vs-reflection-mirror.md)\n- [Cline vs Mirror CLI](https://www.anchorterminal.com/compare/cline-vs-reflection-mirror.md)\n- [Cursor CLI vs Mirror CLI](https://www.anchorterminal.com/compare/cursor-cli-vs-reflection-mirror.md)\n- [Devin vs Mirror CLI](https://www.anchorterminal.com/compare/devin-vs-reflection-mirror.md)\n- [Droid CLI vs Mirror CLI](https://www.anchorterminal.com/compare/droid-cli-vs-reflection-mirror.md)\n- [Pi vs Mirror CLI](https://www.anchorterminal.com/compare/earendil-pi-vs-reflection-mirror.md)\n- [Gemini CLI vs Mirror CLI](https://www.anchorterminal.com/compare/gemini-cli-vs-reflection-mirror.md)\n- [GitHub Copilot CLI vs Mirror CLI](https://www.anchorterminal.com/compare/github-copilot-cli-vs-reflection-mirror.md)\n- [goose vs Mirror CLI](https://www.anchorterminal.com/compare/goose-vs-reflection-mirror.md)\n- [HarnessRouter vs Mirror CLI](https://www.anchorterminal.com/compare/harnessrouter-vs-reflection-mirror.md)\n- [Kilo Code CLI vs Mirror CLI](https://www.anchorterminal.com/compare/kilo-code-cli-vs-reflection-mirror.md)\n- [Kiro CLI vs Mirror CLI](https://www.anchorterminal.com/compare/kiro-cli-vs-reflection-mirror.md)\n- [Muse Code vs Mirror CLI](https://www.anchorterminal.com/compare/muse-code-vs-reflection-mirror.md)\n- [OpenAI Codex vs Mirror CLI](https://www.anchorterminal.com/compare/openai-codex-vs-reflection-mirror.md)\n- [OpenCode vs Mirror CLI](https://www.anchorterminal.com/compare/opencode-vs-reflection-mirror.md)\n- [OpenHands vs Mirror CLI](https://www.anchorterminal.com/compare/openhands-vs-reflection-mirror.md)\n- [Prime Agent vs Mirror CLI](https://www.anchorterminal.com/compare/prime-agent-vs-reflection-mirror.md)\n- [Qwen Code vs Mirror CLI](https://www.anchorterminal.com/compare/qwen-code-vs-reflection-mirror.md)\n- [Amp vs Paperclip](https://www.anchorterminal.com/compare/amp-vs-paperclip.md)\n- [Antigravity CLI vs Paperclip](https://www.anchorterminal.com/compare/antigravity-cli-vs-paperclip.md)\n- [Claude Code vs Paperclip](https://www.anchorterminal.com/compare/claude-code-vs-paperclip.md)\n- [CLI Manager vs Paperclip](https://www.anchorterminal.com/compare/cli-manager-vs-paperclip.md)\n- [CLI Manager vs Mirror CLI](https://www.anchorterminal.com/compare/cli-manager-vs-reflection-mirror.md)\n- [Cline vs Paperclip](https://www.anchorterminal.com/compare/cline-vs-paperclip.md)\n- [Devin vs Paperclip](https://www.anchorterminal.com/compare/devin-vs-paperclip.md)\n- [Droid CLI vs Paperclip](https://www.anchorterminal.com/compare/droid-cli-vs-paperclip.md)\n- [Gemini CLI vs Paperclip](https://www.anchorterminal.com/compare/gemini-cli-vs-paperclip.md)\n- [GitHub Copilot CLI vs Paperclip](https://www.anchorterminal.com/compare/github-copilot-cli-vs-paperclip.md)\n- [goose vs Paperclip](https://www.anchorterminal.com/compare/goose-vs-paperclip.md)\n- [Harness vs Paperclip](https://www.anchorterminal.com/compare/harness-autonomous-vs-paperclip.md)\n- [Harness vs Mirror CLI](https://www.anchorterminal.com/compare/harness-autonomous-vs-reflection-mirror.md)\n- [HarnessRouter vs Paperclip](https://www.anchorterminal.com/compare/harnessrouter-vs-paperclip.md)\n- [Kilo Code CLI vs Paperclip](https://www.anchorterminal.com/compare/kilo-code-cli-vs-paperclip.md)\n- [Kiro CLI vs Paperclip](https://www.anchorterminal.com/compare/kiro-cli-vs-paperclip.md)\n- [Muse Code vs Paperclip](https://www.anchorterminal.com/compare/muse-code-vs-paperclip.md)\n- [OpenCode vs Paperclip](https://www.anchorterminal.com/compare/opencode-vs-paperclip.md)\n- [OpenHands vs Paperclip](https://www.anchorterminal.com/compare/openhands-vs-paperclip.md)\n- [Paperclip vs Parallax](https://www.anchorterminal.com/compare/paperclip-vs-parallax-agents.md)\n- [Paperclip vs Prime Agent](https://www.anchorterminal.com/compare/paperclip-vs-prime-agent.md)\n- [Paperclip vs Qwen Code](https://www.anchorterminal.com/compare/paperclip-vs-qwen-code.md)\n- [Parallax vs Mirror CLI](https://www.anchorterminal.com/compare/parallax-agents-vs-reflection-mirror.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-18", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Paperclip vs Mirror CLI", "url": "" } ], "description": "Paperclip scores 59 (C) to Mirror CLI's 54.2 (C) for multi-agent orchestration. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Paperclip C 59", "Mirror CLI C 54.2", "scores" ], "h1": "Paperclip vs Mirror CLI", "image": "https://www.anchorterminal.com/assets/og/compare-paperclip-vs-reflection-mirror.png", "path": "/compare/paperclip-vs-reflection-mirror", "published": "2026-10-01", "section": "tools", "title": "Paperclip vs Mirror CLI for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-17", "url": "https://www.anchorterminal.com/compare/paperclip-vs-reflection-mirror" }, "tokens": { "markdown": 2900, "slim": 630 }, "version": 1 }