{ "data": { "a": { "slug": "privategpt", "name": "PrivateGPT", "vendor": "Zylon (PriBAI Technology Spain S.L.)", "vendorUrl": "https://docs.privategpt.dev", "kind": "http-api", "category": "local-ai", "summary": "PrivateGPT is Zylon's open-source server that puts an Anthropic-style messages API, document ingestion, retrieval with citations, built-in tools and MCP connectors in front of any OpenAI-compatible local model server. The owner runs it.", "url": "https://www.anchorterminal.com/tools/privategpt", "markdownUrl": "https://www.anchorterminal.com/tools/privategpt.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/privategpt.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/privategpt.json", "dns": "privategpt.grade.anchorterminal.com", "repo": "https://github.com/zylon-ai/private-gpt", "license": "Apache-2.0", "transports": [ "http" ], "packages": [ { "registry": "oci", "name": "zylonai/private-gpt" } ], "auth": "none", "authNotes": "Authentication is off by default. When `server.auth.enabled` is set, every request must carry one static secret in the `Authorization` header, compared with the whole header value. There are no per-user keys, scopes or rotation, and the docs show it as a Bearer token, a Basic value and an Anthropic API key in different places (checked 2026-11-06).", "pricing": "free", "pricingNotes": "Free under Apache-2.0 with no account or card. The cost is the owner's hardware and model server. Zylon sells a separate enterprise platform built on PrivateGPT through demos, with no public price (checked 2026-11-06).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the source, the OpenAPI file or the docs (checked 2026-11-06).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 57600, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://docs.privategpt.dev/introduction", "llmsTxt": "https://docs.privategpt.dev/llms.txt", "openapi": "https://raw.githubusercontent.com/zylon-ai/private-gpt/main/fern/openapi/openapi.json", "capabilities": [ "inference.local", "memory.search", "agent.mcp-client" ], "tags": [ "open-source", "local", "self-hosted", "docker", "openapi", "llms-txt", "rag", "mcp-client", "anthropic-compatible", "python", "free" ], "lastRelease": "2026-06-18", "graded": true, "anchor": { "graded": true, "score": 53.2, "grade": "D", "agentReady": false, "rank": 960, "ranked": true, "rankOf": 1510, "categoryRank": 11, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 64, "maintenance": 41, "payments": 60, "reliability": 70, "schema": 83, "security": 32, "transparency": 64 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": -7, "negativeNotes": [ "Issue #2269, opened 11 June 2026, reports that the async ingestion API reads any local path given as a URI artifact. The stale bot closed it as not planned on 5 July with no maintainer reply, and `load_file_from_uri` in the source of 29 October 2026 still falls back to reading a local file for any value that isn't a URL, s3 or base64. With authentication off and a 0.0.0.0 bind by default, that is an open file-read path on a default install. Read from the source, not run (-7). https://github.com/zylon-ai/private-gpt/issues/2269" ], "verdict": "PrivateGPT 1.0 is an Apache-2.0 server that gives local models an Anthropic-style messages API with retrieval, citations, tools and MCP, documented by an OpenAPI file and llms.txt. A default start has authentication off, listens on every interface and reads local paths given as URIs, and a public report of that was closed without a reply.", "bestFor": "A local backend for apps and agents that want an Anthropic-style API with document retrieval, citations and tools over local models.", "strengths": [ "Messages API modelled on Anthropic's, so Claude Code and Anthropic SDKs work by changing the base URL", "OpenAPI file of 38 paths, llms.txt and Markdown copies of every docs page", "Retrieval with citations, async ingestion, web, database and tabular tools, and remote MCP servers in one API", "Apache-2.0, with no telemetry to Zylon found in the source and OpenTelemetry tracing off by default", "Works with Ollama, llama.cpp, vLLM, LM Studio or any OpenAI-compatible server" ], "weaknesses": [ "Authentication is off by default, the server binds 0.0.0.0 and CORS allows every origin", "When on, authentication is one shared static secret, with no per-user keys or scopes", "A June 2026 report of local file reads through URI artifacts was closed by a stale bot, and the source still reads local paths", "No release since 1.0.1 in June 2026 while main has moved on, including a breaking change", "Code execution runs as a host subprocess with resource limits, not in a container" ], "agentNotes": [ "Turn on `server.auth` and bind to 127.0.0.1 before exposing an instance, since a default start answers any caller", "Point Anthropic SDKs or Claude Code at the server with `ANTHROPIC_BASE_URL=http://localhost:8080`", "Start an OpenAI-compatible model server and an embedding server first, and set `OPENAI_API_BASE` and `OPENAI_EMBEDDING_API_BASE`", "Pass ingested documents through `tool_context` to get answers with citations", "Treat web fetch, search and MCP results as untrusted, since PrivateGPT documents no prompt-injection handling" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 53.2 } ], "editorialScores": { "ergonomics": 64, "maintenance": 41, "payments": 60, "reliability": 70, "schema": 83, "security": 32, "transparency": 67 }, "provenanceScore": 61, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "brew tap zylon-ai/tap\nbrew install private-gpt", "http": "curl http://localhost:8080/v1/messages \\\n -H \"Content-Type: application/json\" \\\n -d '{\"model\": \"qwen3.5:35b\", \"messages\": [{\"role\": \"user\", \"content\": \"Explain retrieval-augmented generation.\"}]}'" }, "letme": { "capability": "https://letme.dev/inference.local", "tool": "https://letme.dev/privategpt" }, "area": "models", "provenance": { "legalEntity": "PriBAI Technology Spain S.L.", "domain": "privategpt.dev", "domainRegistered": "2023-10-16", "endpointOnVendorDomain": null, "terms": "https://github.com/zylon-ai/private-gpt/blob/main/LICENSE", "privacy": "", "statusPage": "", "changelog": "https://github.com/zylon-ai/private-gpt/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "Self-hosted software with no hosted endpoint, so the Apache-2.0 licence stands in for terms and no privacy policy is scored.", "The zylon.ai terms name PriBAI Technology Spain S.L. (VAT ESB56550130) under Spanish law and cover the website and Zylon services. They forbid access through bots, scripts or scrapers, outside standard search engine or browser use. We read the terms and two public pages.", "RDAP gives privategpt.dev a registration date of 16 October 2023.", "docs.privategpt.dev/.well-known/security.txt and www.zylon.ai/.well-known/security.txt answer 404. SECURITY.md in the repository is the reporting route.", "docs.privategpt.dev and www.zylon.ai robots.txt allow our reader. wheels.privategpt.dev has no robots.txt (404)." ], "score": 61 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/privategpt.json", "live": { "slug": "privategpt", "versions": [ { "registry": "github", "name": "zylon-ai/private-gpt", "version": "v1.0.1", "released": "2026-06-18", "seenAt": "2026-11-06T23:58:40.643071731Z" } ], "githubStars": 57632, "securityTxt": { "url": "https://privategpt.dev/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T15:59:53.351491852Z" }, "llmsTxt": { "url": "https://docs.privategpt.dev/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:33:41.730243326Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/zylon-ai/private-gpt/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:24:15.016082629Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "767d5dd99544" }, { "url": "https://raw.githubusercontent.com/zylon-ai/private-gpt/main/LICENSE", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:24:17.075442465Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "839fbbcddc72" } ], "updatedAt": "2026-11-07T15:59:53.351491852Z" } }, "answer": "PrivateGPT scores 53.2 (D) on agent readiness against TextGen's 38.7 (E), and leads in 5 of 7 scored categories. TextGen leads on security \u0026 auth.", "b": { "slug": "text-generation-webui", "name": "TextGen", "vendor": "oobabooga", "vendorUrl": "https://github.com/oobabooga", "kind": "platform", "category": "local-ai", "summary": "Open-source desktop and browser app for running language models on the owner's hardware, formerly text-generation-webui. With `--api` it serves an OpenAI and Anthropic-compatible local API with tool calling, vision, embeddings and image generation.", "url": "https://www.anchorterminal.com/tools/text-generation-webui", "markdownUrl": "https://www.anchorterminal.com/tools/text-generation-webui.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/text-generation-webui.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/text-generation-webui.json", "dns": "text-generation-webui.grade.anchorterminal.com", "repo": "https://github.com/oobabooga/textgen", "license": "AGPL-3.0", "transports": [ "http" ], "packages": [], "auth": "api-key", "authNotes": "The API takes one optional key from `--api-key`, off by default, sent as `Authorization: Bearer` on the OpenAI routes and as `x-api-key` on `/v1/messages`. A second key from `--admin-key` guards model and LoRA loading, unloading and listing, and equals the API key when unset. Keys are set at launch, have no scopes and change only with a restart. Without `--listen` or `--public-api` the server binds 127.0.0.1, rejects other Host headers and limits CORS to localhost. The web UI has no login unless `--gradio-auth` is set.", "pricing": "free", "pricingNotes": "Free and AGPL-3.0, with no account, card or paid edition. Portable builds and source are on GitHub (checked 2026-10-08).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the README, the docs folder or the API source (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 47700, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://github.com/oobabooga/textgen/wiki", "capabilities": [ "inference.local", "inference.open-weights", "agent.mcp-client", "embed.text", "image.generate" ], "tags": [ "open-source", "local", "self-hosted", "free", "no-card", "account-free", "openai-compatible", "open-weights", "streaming", "mcp", "docker", "no-telemetry" ], "lastRelease": "2026-05-20", "graded": true, "anchor": { "graded": true, "score": 38.7, "grade": "E", "agentReady": false, "rank": 1354, "ranked": true, "rankOf": 1510, "categoryRank": 20, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 50, "maintenance": 24, "payments": 60, "reliability": 51, "schema": 61, "security": 40, "transparency": 55 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-05" }, "negative": -11, "negativeNotes": [ "2026-03-18. Two Critical advisories at 9.1, published by the maintainer. GHSA-jg96-p5p6-q3cv (CVE-2026-35050) let a web UI user write Python files through a path traversal in extension settings and run them, fixed in 4.1.1. GHSA-4p45-76cc-7p62 let a caller write or delete files through a character name on instances started with `--listen`, fixed in 4.0. Fixed and over two months old, -1 each, -2. https://github.com/oobabooga/textgen/security/advisories/GHSA-jg96-p5p6-q3cv", "2026-03-18. GHSA-fpwc-4mvr-7jpr (High, 7.1). `/v1/chat/completions` and `/v1/completions` fetched any `image_url` from the server side, fixed in 4.1.1. Fixed and over two months old, -1. https://github.com/oobabooga/textgen/security/advisories/GHSA-fpwc-4mvr-7jpr", "April 2026. Three maintainer advisories whose fixes shipped in 4.3 on 2 April 2026 or later, an SSRF in the superbooga extensions (CVE-2026-35486, High 7.5), a path traversal in prompt loading (CVE-2026-35487, Medium 5.3) and a Gradio path-check bypass. Fixed, -1 each, -3. https://github.com/oobabooga/textgen/security", "2026-04-07. CVE-2026-35483, CVE-2026-35484 and CVE-2026-35485, published by GitHub for the maintainer's advisories. Unauthenticated path traversals in template, preset and grammar loading read files outside the app's folders, before 4.3. Rated Medium 5.3, Medium 5.3 and High 7.5, fixed in 4.3 on 2 April 2026, -1 each, -3. https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/35xxx/CVE-2026-35485.json", "2025-11-06. CVE-2025-12487 and CVE-2025-12488 (Zero Day Initiative, CVSS 3.0 9.8 Critical). The `trust_remote_code` parameter of the model load and join endpoints let an unauthenticated caller run code, fixed in 3.15 on 15 October 2025. Third-party Criticals, fixed, -1 each, -2. https://github.com/CVEProject/cvelistV5/blob/main/cves/2025/12xxx/CVE-2025-12488.json" ], "verdict": "AGPL-3.0 with no telemetry, and a local API on 127.0.0.1:5000 that checks the Host header, limits CORS to localhost and separates an admin key from the caller's key. No release since v4.9 on 20 May 2026, no code commits since 31 May, no test suite, and twelve security records since October 2025, all fixed.", "bestFor": "A person who wants one app for several backends (llama.cpp, ExLlamaV3, Transformers) with an OpenAI and Anthropic-compatible endpoint, LoRA training and image generation.", "strengths": [ "AGPL-3.0, with analytics switched off in the source and a README that states zero telemetry", "One server answers `/v1/chat/completions`, `/v1/completions` and Anthropic's `/v1/messages`, with tool calling and streaming", "Since v4.9 the API rejects Host headers other than localhost and 127.0.0.1 and limits CORS to localhost unless `--listen` or `--public-api` is set", "A separate `--admin-key` guards model and LoRA loading, apart from the `--api-key` callers use", "Ten security advisories published on GitHub with patched versions named, the newest on 3 April 2026" ], "weaknesses": [ "No release since v4.9 on 20 May 2026 and no code commit on `main` or `dev` since 31 May 2026", "No test suite. The seven GitHub workflows only build release packages on manual dispatch", "807 open issues and 40 open pull requests, with no SECURITY.md or disclosure address", "Four Critical records, two maintainer advisories (9.1) of 18 March 2026 and two Zero Day Initiative CVEs (9.8) of 6 November 2025, all fixed", "The API key is off by default, set only at launch, and has no scopes or per-client keys", "No rate limits, error list or published OpenAPI file in the docs. The schema is served only by a running server at `/docs`" ], "agentNotes": [ "Ask the owner to launch with `--api`. Nothing listens on port 5000 without it, and a model must be loaded first", "Call `http://127.0.0.1:5000/v1`. Any Host header other than localhost or 127.0.0.1 gets 400 `Invalid host header` unless `--listen` is set", "Send the key as `Authorization: Bearer` on OpenAI routes and as `x-api-key` on `/v1/messages`. Model loading needs the admin key", "Read `http://127.0.0.1:5000/docs` or `modules/api/typing.py` for parameters. `max_tokens` defaults to 512 on chat completions", "Run tool calls yourself. The API returns `finish_reason: \"tool_calls\"` and executes nothing on the server", "Use the repository name `oobabooga/textgen`. The old `text-generation-webui` URL redirects" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 4, "avgRating": 2.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 38.7 } ], "editorialScores": { "ergonomics": 50, "maintenance": 24, "payments": 60, "reliability": 51, "schema": 61, "security": 40, "transparency": 70 }, "provenanceScore": 39, "checked": { "categories": { "ergonomics": "2026-11-05", "maintenance": "2026-11-05", "payments": "2026-11-05", "reliability": "2026-11-05", "schema": "2026-11-05", "security": "2026-11-05", "transparency": "2026-11-05" }, "last": "2026-11-05", "lastMoved": "2026-11-05", "oldest": "2026-11-05", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "git clone https://github.com/oobabooga/textgen\ncd textgen\npython -m venv venv\nsource venv/bin/activate\npip install -r requirements/portable/requirements.txt --upgrade\npython server.py --portable --api --auto-launch", "http": "curl http://127.0.0.1:5000/v1/chat/completions \\\n -H \"Content-Type: application/json\" \\\n -d '{\"messages\": [{\"role\": \"user\", \"content\": \"Hello!\"}], \"temperature\": 0.6, \"top_p\": 0.95, \"top_k\": 20}'" }, "letme": { "capability": "https://letme.dev/inference.local", "tool": "https://letme.dev/text-generation-webui" }, "area": "models", "provenance": { "legalEntity": "", "domain": "github.com/oobabooga", "domainRegistered": "", "endpointOnVendorDomain": null, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/oobabooga/textgen/releases", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The project belongs to a developer who publishes as oobabooga. The LICENSE is the AGPL-3.0 text and names no legal entity, and the README acknowledges a grant from Andreessen Horowitz in August 2023.", "No vendor domain. The README links only the GitHub repository, its wiki, a subreddit, a Substack and a Hugging Face space.", "No terms of use and no privacy policy were found in the repository, the README or the wiki, so both fields are left out. The README states zero telemetry.", "No SECURITY.md (the Security tab says none is set up) and no security.txt of the project's own.", "There's no hosted endpoint. The API answers on the owner's machine, at 127.0.0.1:5000 by default." ], "score": 39 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/text-generation-webui.json", "live": { "slug": "text-generation-webui", "versions": [ { "registry": "github", "name": "oobabooga/textgen", "version": "v4.9", "released": "2026-05-20", "seenAt": "2026-11-07T00:11:20.251493081Z" } ], "githubStars": 47737, "domain": { "domain": "github.com/oobabooga", "checkedAt": "2026-11-01T14:24:50.45495263Z" }, "github": { "repo": "oobabooga/textgen", "checkedAt": "2026-11-02T09:12:22.608793499Z", "stars": 47728, "archived": false, "issuesEnabled": true, "pushedAt": "2026-08-17T17:38:16Z", "openIssues": 810, "openPRs": 57, "issuesOpened90d": 7, "issuesClosed90d": 1, "prsMerged90d": 0, "advisories": [ { "ghsa": "GHSA-85fx-vw25-4c95", "cve": "CVE-2026-35483", "severity": "medium", "published": "2026-04-03T01:40:16Z" }, { "ghsa": "GHSA-jvrj-w5hq-6cp2", "cve": "CVE-2026-35486", "severity": "high", "published": "2026-04-03T01:40:15Z" }, { "ghsa": "GHSA-w3cv-4447-5hf5", "cve": "CVE-2026-35484", "severity": "medium", "published": "2026-04-03T01:40:14Z" }, { "ghsa": "GHSA-hqg5-487v-5mc6", "cve": "CVE-2026-35485", "severity": "high", "published": "2026-04-03T01:40:14Z" }, { "ghsa": "GHSA-r2qq-p5wg-gf5g", "severity": "high", "published": "2026-04-03T01:40:13Z" }, { "ghsa": "GHSA-mfgg-vvc6-vqq7", "cve": "CVE-2026-35487", "severity": "medium", "published": "2026-04-03T01:39:19Z" }, { "ghsa": "GHSA-j53j-fh8f-rpw3", "severity": "critical", "published": "2026-03-18T05:44:07Z" }, { "ghsa": "GHSA-6j2r-r6xw-423x", "severity": "critical", "published": "2026-03-18T05:44:06Z" }, { "ghsa": "GHSA-fpwc-4mvr-7jpr", "severity": "high", "published": "2026-03-18T05:41:08Z" }, { "ghsa": "GHSA-jg96-p5p6-q3cv", "cve": "CVE-2026-35050", "severity": "critical", "published": "2026-03-18T04:12:07Z" }, { "ghsa": "GHSA-4p45-76cc-7p62", "severity": "critical", "published": "2026-03-18T04:10:18Z" }, { "ghsa": "GHSA-66rw-q8w5-c2hg", "cve": "CVE-2025-62364", "severity": "high", "published": "2025-10-13T02:41:40Z" } ], "replies": { "sampled": 25, "unanswered": 22, "medianDays": 0.1 } }, "updatedAt": "2026-11-07T00:11:20.251493081Z" } }, "edges": [ { "by": 22, "category": "schema", "leads": "privategpt", "name": "Schema \u0026 documentation", "reasons": { "a": "An OpenAPI file of 38 paths in the repository (fern/openapi/openapi.json, version 1.0.1), also served by each instance at /openapi.json, with the messages API modelled on Anthropic's (25). docs.privategpt.dev serves llms.txt, a Markdown copy of every page and a docs MCP server (10). The docs explain each endpoint group, startup and model discovery, and a compatibility table says which parts of the Claude API are supported, partial or missing, such as prompt caching and OAuth (15 of 20). Pydantic models with literal type discriminators and required fields, while settings and tool context are wide objects (12 of 15). curl examples for each guide and a `/v1/messages/validate` route, with error shapes not documented as a list (9 of 15). `/v1` paths and a dated changelog, though releases trail main by more than four months (12 of 15). 25 + 10 + 15 + 12 + 9 + 12 = 83.", "b": "Read with the API lines. The server is a FastAPI app with default settings, so a running instance serves `/docs` and `/openapi.json` generated from 33 Pydantic classes in `modules/api/typing.py`, and the docs point callers there. No OpenAPI file is published, and we read the source without running the server (17 of 25). No llms.txt. The docs are Markdown files in the repository's docs folder, mirrored to the wiki (4 of 10). The API page is mostly examples with a compatibility table, and 36 fields in `typing.py` carry descriptions (10 of 20). Typed request models with defaults and a few range limits, while `tools` is a list of free-form objects (10 of 15). curl, Python and Node examples for chat, completions, streaming, tool calling, vision, images and model loading, with no error responses documented (9 of 15). A `/v1` prefix and release notes per version, with no changelog file (11 of 15). 17 + 4 + 10 + 10 + 9 + 11 = 61." }, "scores": { "a": 83, "b": 61 } }, { "by": 19, "category": "reliability", "leads": "privategpt", "name": "Reliability", "reasons": { "a": "Read with the local-software lines, since PrivateGPT runs on the owner's hardware with no hosted service behind it. Homebrew tap, `uv tool install` from Zylon's own wheel index (not PyPI) and Docker Hub images `zylonai/private-gpt` 1.0.1 of 18 June 2026. Python 3.11 only, stated in pyproject.toml, and it needs a separate OpenAI-compatible model server (17 of 20). tests.yml runs format, lint, typecheck and the tests affected by each push on main, with the full suite of 217 test files on release pull requests. We couldn't see run results because the GitHub API refused us, and issue #2441 of 1 November reports the Claude spec update workflow failing (15 of 25). GitHub shows 3 open issues of about 1,250, because a stale bot closes quiet issues, two security reports among them, with no maintainer reply (12 of 25). release-please keeps a changelog with breaking changes marked, but no release has been cut since 1.0.1 while main carries 51 commits since 8 August, among them a breaking observability change of 23 October (11 of 15). Version 1.0.1 (15). 17 + 15 + 12 + 11 + 15 = 70.", "b": "Read with the local-software lines, since TextGen runs on the owner's machine with no hosted service. Portable builds for Linux, Windows and macOS on GitHub releases, a one-click installer, a venv route for Python 3.9 or later, a Conda route on Python 3.13 and Docker files, but no package on a registry (18 of 20). No test suite in the repository, and the seven workflows (re-read in a clone on 5 November) only build release packages on manual dispatch (3 of 25). Per the 8 October check, not re-read on 5 November, there were 807 open issues and 40 open pull requests, and the newest open issues then (July to October 2026) carried between none and two comments. No code commit on `main` or `dev` since 31 May 2026 (6 of 25). Versioned tags and GitHub release notes per version that list security fixes and behaviour changes, with no changelog file and no stated semver policy (9 of 15). v4.9 (15). 18 + 3 + 6 + 9 + 15 = 51." }, "scores": { "a": 70, "b": 51 } }, { "by": 17, "category": "maintenance", "leads": "privategpt", "name": "Maintenance \u0026 community", "reasons": { "a": "The last release is 1.0.1, dated 16 June 2026 in the changelog and tagged 18 June, 141 days before the check (10 of 30). No release or dated changelog entry in the 90 days since 8 August (0 of 20). Maintainers commit most days and outside pull requests merged in October, but 23 pull requests are open and the stale bot closes issues, including two security reports, with no maintainer reply (13 of 25). Homebrew tap, wheel index and Docker images ship with releases, and Anthropic SDKs work against it. No product MCP server of its own, though it connects to remote MCP servers (10 of 15). Dependabot, uv.lock, actions pinned by commit since 19 October and dependency CVE upgrades in June, July and August (8 of 10). 10 + 0 + 13 + 10 + 8 = 41.", "b": "v4.9 on 20 May 2026, 169 days before this check (10). No release in the 90 days from 7 August (0). No code commit on `main` since 31 May 2026 (one README edit on 17 August) and none on `dev` since 16 May, read in a clone on 5 November. Per the 8 October check, 807 open issues and 40 open pull requests, and the newest open issues showed few or no comments. Comment authors didn't render for our reader, so maintainer replies are unconfirmed (5 of 25). No SDK and no MCP registry entry. Portable builds shipped with each release up to May (5 of 15). A weekly Dependabot config with its update branches still unmerged, no test CI, and the bundled llama.cpp last updated on 31 May (4 of 10). 10 + 0 + 5 + 5 + 4 = 24." }, "scores": { "a": 41, "b": 24 } }, { "by": 14, "category": "ergonomics", "leads": "privategpt", "name": "Agent ergonomics", "reasons": { "a": "Read for an HTTP API an agent calls on a local instance. Token counting, `top_k` style retrieval settings, citation output and response byte caps let a caller size context (18 of 25). Artifact listing by namespace and retrieval filters, with no documented cursor pagination (12 of 20). FastAPI validation errors name the field and the validate route checks a request before running it, but there is no error catalogue (12 of 20). Async messages and ingestion return task ids with status, cancel and delete routes. No idempotency keys were found (10 of 20). Anthropic SDKs and Claude Code work by pointing `ANTHROPIC_BASE_URL` at the server, but a model server and an embedding server have to be configured first (12 of 15). 18 + 12 + 12 + 10 + 12 = 64.", "b": "Read with the API lines. `max_tokens` (512 by default on chat completions), `max_tokens_second`, a token-count route and a `max_tokens` argument on the built-in page fetcher size the output (17 of 25). `/v1/models` lists everything with the loaded model first, with no paging or filters (6 of 20). Errors are JSON in OpenAI's shape (`message`, `type`, `param`) or Anthropic's on `/v1/messages`, with 401, 400 and 422 used, but none are documented (11 of 20). Completions are stateless and safe to repeat, a client disconnect stops generation and `/v1/internal/stop-generation` exists. No retry guidance (7 of 20). A request needs only `messages`, with no model name, but the owner has to launch with `--api` and load a model. No SDK of its own, with OpenAI's Python and Node clients shown in the docs (9 of 15). 17 + 6 + 11 + 7 + 9 = 50." }, "scores": { "a": 64, "b": 50 } }, { "by": 9, "category": "transparency", "leads": "privategpt", "name": "Transparency \u0026 trust", "reasons": { "a": "Apache-2.0 (30). The OpenAPI description says no data leaves the execution environment, but the docs list cloud gateways as model providers and web search goes to outside services when enabled, and no privacy statement covers the software. Zylon's privacy policy covers its website (15 of 30). The 1.0 rewrite was marked as a breaking change in the changelog, and there is no deprecation policy (6 of 20). No telemetry to Zylon found in the source. OpenTelemetry tracing is off by default and its exporters write local files or to the owner's collector, documented on the observability page (16 of 20). 30 + 15 + 6 + 16 = 67.", "b": "AGPL-3.0 for the whole repository (30). No privacy policy or terms exist, and there's no hosted service. The README states that the app is fully offline with zero telemetry, external resources or remote update requests, the API page says it creates no logs, and the source turns Gradio analytics off. A Check for updates button calls api.github.com when clicked, which the README's wording doesn't mention (18 of 30). No deprecation policy. Release notes record behaviour changes, and the rename to TextGen left a redirect from the old repository URL (4 of 20). No telemetry to opt out of, and analytics are disabled in `server.py` (18 of 20). 30 + 18 + 4 + 18 = 70." }, "scores": { "a": 64, "b": 55 } }, { "by": 8, "category": "security", "leads": "text-generation-webui", "name": "Security \u0026 auth", "reasons": { "a": "Read with the tool checklist. Authentication is off by default, and when on it is one static secret compared with the whole `Authorization` header, with a sample `secret:key` value in settings.yaml. There are no per-user keys or scopes, `private-gpt serve` binds 0.0.0.0 by default and CORS allows every origin, so a default start answers anyone on the network. The docs disagree on the header (Bearer, Basic or an Anthropic key) (6 of 30). Tools are chosen per request and code execution has internet off by default, but bash runs as a host subprocess with resource limits, not in a container, and nothing asks for approval (6 of 20). Web fetch, web search, documents and MCP servers bring untrusted text to the model. A public prompt-injection report (#2270) was closed by the stale bot, and no guidance was found beyond a 19 October change that bounds tool output (3 of 15). OpenTelemetry traces cover every request, model call, tool and sandbox step, off by default, with local JSON lines exporters (10 of 15). SECURITY.md since 23 July 2026 asks for private reports through GitHub or Discord. No bounty, no certification, and the June and July security reports in issues were closed by a bot with no reply (7 of 20). 6 + 6 + 3 + 10 + 7 = 32.", "b": "Read with the tool checklist. One optional key from `--api-key`, off by default, sent as a Bearer token or `x-api-key` and never in a query string, with a separate `--admin-key` for loading and unloading models and LoRAs. No scopes or per-client keys, and a key changes only with a restart (14 of 30). Without `--listen` or `--public-api` the API binds 127.0.0.1, rejects other Host headers and limits CORS to localhost (since v4.9). The chat has a Confirm tool calls setting, off by default, and the web UI has no login unless `--gradio-auth` is set (10 of 20). The built-in page fetcher refuses non-global addresses on every redirect hop. No guidance on injected instructions in web or tool results was found (5 of 15). The docs say the API creates no logs and the server runs with access logs off. `--verbose` prints prompts to the terminal (3 of 15). No SECURITY.md, security.txt or bounty. Ten advisories are published on GitHub with patched versions, per the 8 October reading of the Security tab, and seven of them have CVE records in the CVE list, and still no SECURITY.md in a clone on 5 November (8 of 20). 14 + 10 + 5 + 3 + 8 = 40. Advisories are charged one by one under negative events." }, "scores": { "a": 32, "b": 40 } } ], "facts": [ { "a": "HTTP API", "b": "Platform", "name": "Kind" }, { "a": "Zylon (PriBAI Technology Spain S.L.)", "b": "oobabooga", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP", "name": "Transports" }, { "a": "None", "b": "API key", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "AGPL-3.0", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-06-18", "b": "2026-05-20", "name": "Last release" }, { "a": "no date given", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not read yet", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not read yet", "name": "Arbitration or class-action waiver" }, { "a": "58k stars", "b": "48k stars", "name": "Popularity" }, { "a": "none", "b": "2.5/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "PrivateGPT scores 53.2 (D) on agent readiness against TextGen's 38.7 (E), and leads in 5 of 7 scored categories. TextGen leads on security \u0026 auth.", "question": "Which is better for AI agents, PrivateGPT or TextGen?" }, { "answer": "No hosted endpoint is listed for PrivateGPT. No hosted endpoint is listed for TextGen.", "question": "Can an agent call PrivateGPT and TextGen without installing anything?" }, { "answer": "Yes. PrivateGPT is open source (Apache-2.0). TextGen is open source (AGPL-3.0).", "question": "Are PrivateGPT and TextGen open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 70 against 51", "Schema \u0026 documentation, 83 against 61", "Agent ergonomics, 64 against 50", "Maintenance \u0026 community, 41 against 24", "Transparency \u0026 trust, 64 against 55" ], "also": [ "No key needed to call it" ], "goodFor": "A local backend for apps and agents that want an Anthropic-style API with document retrieval, citations and tools over local models.", "slug": "privategpt", "watchFor": "Authentication is off by default, the server binds 0.0.0.0 and CORS allows every origin" }, { "aheadOn": [ "Security \u0026 auth, 40 against 32" ], "also": [ "Free to start without a card" ], "goodFor": "A person who wants one app for several backends (llama.cpp, ExLlamaV3, Transformers) with an OpenAI and Anthropic-compatible endpoint, LoRA training and image generation.", "slug": "text-generation-webui", "watchFor": "No release since v4.9 on 20 May 2026 and no code commit on `main` or `dev` since 31 May 2026" } ], "history": { "privategpt": null, "text-generation-webui": [ { "causes": [ "correction" ], "date": "2026-11-05", "delta": -7, "from": 45.7, "fromGrade": "E", "to": 38.7, "toGrade": "E" }, { "causes": [ "evidence" ], "date": "2026-10-28", "delta": 0.2, "from": 45.5, "fromGrade": "E", "to": 45.7, "toGrade": "E" }, { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.4, "from": 45.1, "fromGrade": "E", "to": 45.5, "toGrade": "E" } ] }, "job": { "capability": "inference.local", "name": "Local inference" }, "others": [ { "json": "https://www.anchorterminal.com/compare/anythingllm-vs-privategpt.json", "title": "AnythingLLM vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/anythingllm-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/anythingllm-vs-text-generation-webui.json", "title": "AnythingLLM vs TextGen", "url": "https://www.anchorterminal.com/compare/anythingllm-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/berth-vs-privategpt.json", "title": "Berth vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/berth-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/berth-vs-text-generation-webui.json", "title": "Berth vs TextGen", "url": "https://www.anchorterminal.com/compare/berth-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/bitrun-vs-privategpt.json", "title": "BitRun vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/bitrun-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/bitrun-vs-text-generation-webui.json", "title": "BitRun vs TextGen", "url": "https://www.anchorterminal.com/compare/bitrun-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/docker-model-runner-vs-privategpt.json", "title": "Docker Model Runner vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/docker-model-runner-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/docker-model-runner-vs-text-generation-webui.json", "title": "Docker Model Runner vs TextGen", "url": "https://www.anchorterminal.com/compare/docker-model-runner-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/foundry-local-vs-privategpt.json", "title": "Foundry Local vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/foundry-local-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/foundry-local-vs-text-generation-webui.json", "title": "Foundry Local vs TextGen", "url": "https://www.anchorterminal.com/compare/foundry-local-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/ghost-core-vs-privategpt.json", "title": "Core vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/ghost-core-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/ghost-core-vs-text-generation-webui.json", "title": "Core vs TextGen", "url": "https://www.anchorterminal.com/compare/ghost-core-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-privategpt.json", "title": "GPT4All vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/gpt4all-vs-text-generation-webui.json", "title": "GPT4All vs TextGen", "url": "https://www.anchorterminal.com/compare/gpt4all-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/hyperqwen-vs-privategpt.json", "title": "HyperQwen vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/hyperqwen-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/hyperqwen-vs-text-generation-webui.json", "title": "HyperQwen vs TextGen", "url": "https://www.anchorterminal.com/compare/hyperqwen-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/jan-vs-privategpt.json", "title": "Jan vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/jan-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/jan-vs-text-generation-webui.json", "title": "Jan vs TextGen", "url": "https://www.anchorterminal.com/compare/jan-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/khoj-vs-text-generation-webui.json", "title": "Khoj vs TextGen", "url": "https://www.anchorterminal.com/compare/khoj-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/koboldcpp-vs-privategpt.json", "title": "KoboldCpp vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/koboldcpp-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/koboldcpp-vs-text-generation-webui.json", "title": "KoboldCpp vs TextGen", "url": "https://www.anchorterminal.com/compare/koboldcpp-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/lemonade-vs-privategpt.json", "title": "Lemonade vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/lemonade-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/lemonade-vs-text-generation-webui.json", "title": "Lemonade vs TextGen", "url": "https://www.anchorterminal.com/compare/lemonade-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/llama-cpp-vs-privategpt.json", "title": "llama.cpp vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/llama-cpp-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/llama-cpp-vs-text-generation-webui.json", "title": "llama.cpp vs TextGen", "url": "https://www.anchorterminal.com/compare/llama-cpp-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/lm-studio-vs-privategpt.json", "title": "LM Studio vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/lm-studio-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/lm-studio-vs-text-generation-webui.json", "title": "LM Studio vs TextGen", "url": "https://www.anchorterminal.com/compare/lm-studio-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/localai-vs-privategpt.json", "title": "LocalAI vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/localai-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/localai-vs-text-generation-webui.json", "title": "LocalAI vs TextGen", "url": "https://www.anchorterminal.com/compare/localai-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/mlx-lm-vs-privategpt.json", "title": "MLX LM vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/mlx-lm-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/mlx-lm-vs-text-generation-webui.json", "title": "MLX LM vs TextGen", "url": "https://www.anchorterminal.com/compare/mlx-lm-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/ollama-vs-privategpt.json", "title": "Ollama vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/ollama-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/ollama-vs-text-generation-webui.json", "title": "Ollama vs TextGen", "url": "https://www.anchorterminal.com/compare/ollama-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/open-webui-vs-privategpt.json", "title": "Open WebUI vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/open-webui-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/open-webui-vs-text-generation-webui.json", "title": "Open WebUI vs TextGen", "url": "https://www.anchorterminal.com/compare/open-webui-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/privategpt-vs-screenpipe.json", "title": "PrivateGPT vs screenpipe", "url": "https://www.anchorterminal.com/compare/privategpt-vs-screenpipe" }, { "json": "https://www.anchorterminal.com/compare/privategpt-vs-vllm.json", "title": "PrivateGPT vs vLLM", "url": "https://www.anchorterminal.com/compare/privategpt-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/screenpipe-vs-text-generation-webui.json", "title": "screenpipe vs TextGen", "url": "https://www.anchorterminal.com/compare/screenpipe-vs-text-generation-webui" }, { "json": "https://www.anchorterminal.com/compare/text-generation-webui-vs-vllm.json", "title": "TextGen vs vLLM", "url": "https://www.anchorterminal.com/compare/text-generation-webui-vs-vllm" }, { "json": "https://www.anchorterminal.com/compare/khoj-vs-privategpt.json", "title": "Khoj vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/khoj-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/localghost-vs-privategpt.json", "title": "LocalGhost vs PrivateGPT", "url": "https://www.anchorterminal.com/compare/localghost-vs-privategpt" }, { "json": "https://www.anchorterminal.com/compare/text-generation-webui-vs-underdog.json", "title": "TextGen vs Underdog", "url": "https://www.anchorterminal.com/compare/text-generation-webui-vs-underdog" } ], "panel": null, "scores": [ { "by": 19, "edge": "privategpt", "key": "reliability", "name": "Reliability", "privategpt": 70, "text-generation-webui": 51, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 22, "edge": "privategpt", "key": "schema", "name": "Schema \u0026 documentation", "privategpt": 83, "text-generation-webui": 61, "weight": 13 }, { "by": 14, "edge": "privategpt", "key": "ergonomics", "name": "Agent ergonomics", "privategpt": 64, "text-generation-webui": 50, "weight": 13 }, { "by": 8, "edge": "text-generation-webui", "key": "security", "name": "Security \u0026 auth", "privategpt": 32, "text-generation-webui": 40, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "privategpt": 60, "text-generation-webui": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 17, "edge": "privategpt", "key": "maintenance", "name": "Maintenance \u0026 community", "privategpt": 41, "text-generation-webui": 24, "weight": 7 }, { "by": 9, "edge": "privategpt", "key": "transparency", "name": "Transparency \u0026 trust", "privategpt": 64, "text-generation-webui": 55, "weight": 7 } ], "summary": "PrivateGPT scores 53.2 (D) on agent readiness against TextGen's 38.7 (E), and leads in 5 of 7 scored categories. TextGen leads on security \u0026 auth. Both do local inference.", "tasks": null, "tutorials": [], "verdicts": { "privategpt": "PrivateGPT 1.0 is an Apache-2.0 server that gives local models an Anthropic-style messages API with retrieval, citations, tools and MCP, documented by an OpenAPI file and llms.txt. A default start has authentication off, listens on every interface and reads local paths given as URIs, and a public report of that was closed without a reply.", "text-generation-webui": "AGPL-3.0 with no telemetry, and a local API on 127.0.0.1:5000 that checks the Host header, limits CORS to localhost and separates an admin key from the caller's key. No release since v4.9 on 20 May 2026, no code commits since 31 May, no test suite, and twelve security records since October 2025, all fixed." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/privategpt-vs-text-generation-webui", "json": "https://www.anchorterminal.com/compare/privategpt-vs-text-generation-webui.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/privategpt-vs-text-generation-webui.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/privategpt-vs-text-generation-webui.min.md" }, "markdown": "PrivateGPT scores 53.2 (D) on agent readiness against TextGen's 38.7 (E), and leads in 5 of 7 scored categories. TextGen leads on security \u0026 auth. Both do local inference.\n\n- PrivateGPT: grade D, 53.2/100, rank #960 of 1510. Markdown https://www.anchorterminal.com/tools/privategpt.md · JSON https://www.anchorterminal.com/api/v1/tools/privategpt.json\n- TextGen: grade E, 38.7/100, rank #1354 of 1510. Markdown https://www.anchorterminal.com/tools/text-generation-webui.md · JSON https://www.anchorterminal.com/api/v1/tools/text-generation-webui.json\n- Best local AI models and assistants: https://www.anchorterminal.com/best/local-ai/index.md\n- All 280 local ai comparisons: https://www.anchorterminal.com/compare/local-ai/index.md\n\n## Which one, for what\n\n### PrivateGPT (D)\n\nGood for: A local backend for apps and agents that want an Anthropic-style API with document retrieval, citations and tools over local models.\n\nAhead on:\n- Reliability, 70 against 51\n- Schema \u0026 documentation, 83 against 61\n- Agent ergonomics, 64 against 50\n- Maintenance \u0026 community, 41 against 24\n- Transparency \u0026 trust, 64 against 55\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: Authentication is off by default, the server binds 0.0.0.0 and CORS allows every origin\n\n### TextGen (E)\n\nGood for: A person who wants one app for several backends (llama.cpp, ExLlamaV3, Transformers) with an OpenAI and Anthropic-compatible endpoint, LoRA training and image generation.\n\nAhead on:\n- Security \u0026 auth, 40 against 32\n\nAlso in its favour:\n- Free to start without a card\n\nWatch for: No release since v4.9 on 20 May 2026 and no code commit on `main` or `dev` since 31 May 2026\n\n\n## Why the edge\n\n### Schema \u0026 documentation: PrivateGPT +22\n\n- PrivateGPT (83): An OpenAPI file of 38 paths in the repository (fern/openapi/openapi.json, version 1.0.1), also served by each instance at /openapi.json, with the messages API modelled on Anthropic's (25). docs.privategpt.dev serves llms.txt, a Markdown copy of every page and a docs MCP server (10). The docs explain each endpoint group, startup and model discovery, and a compatibility table says which parts of the Claude API are supported, partial or missing, such as prompt caching and OAuth (15 of 20). Pydantic models with literal type discriminators and required fields, while settings and tool context are wide objects (12 of 15). curl examples for each guide and a `/v1/messages/validate` route, with error shapes not documented as a list (9 of 15). `/v1` paths and a dated changelog, though releases trail main by more than four months (12 of 15). 25 + 10 + 15 + 12 + 9 + 12 = 83.\n- TextGen (61): Read with the API lines. The server is a FastAPI app with default settings, so a running instance serves `/docs` and `/openapi.json` generated from 33 Pydantic classes in `modules/api/typing.py`, and the docs point callers there. No OpenAPI file is published, and we read the source without running the server (17 of 25). No llms.txt. The docs are Markdown files in the repository's docs folder, mirrored to the wiki (4 of 10). The API page is mostly examples with a compatibility table, and 36 fields in `typing.py` carry descriptions (10 of 20). Typed request models with defaults and a few range limits, while `tools` is a list of free-form objects (10 of 15). curl, Python and Node examples for chat, completions, streaming, tool calling, vision, images and model loading, with no error responses documented (9 of 15). A `/v1` prefix and release notes per version, with no changelog file (11 of 15). 17 + 4 + 10 + 10 + 9 + 11 = 61.\n\n### Reliability: PrivateGPT +19\n\n- PrivateGPT (70): Read with the local-software lines, since PrivateGPT runs on the owner's hardware with no hosted service behind it. Homebrew tap, `uv tool install` from Zylon's own wheel index (not PyPI) and Docker Hub images `zylonai/private-gpt` 1.0.1 of 18 June 2026. Python 3.11 only, stated in pyproject.toml, and it needs a separate OpenAI-compatible model server (17 of 20). tests.yml runs format, lint, typecheck and the tests affected by each push on main, with the full suite of 217 test files on release pull requests. We couldn't see run results because the GitHub API refused us, and issue #2441 of 1 November reports the Claude spec update workflow failing (15 of 25). GitHub shows 3 open issues of about 1,250, because a stale bot closes quiet issues, two security reports among them, with no maintainer reply (12 of 25). release-please keeps a changelog with breaking changes marked, but no release has been cut since 1.0.1 while main carries 51 commits since 8 August, among them a breaking observability change of 23 October (11 of 15). Version 1.0.1 (15). 17 + 15 + 12 + 11 + 15 = 70.\n- TextGen (51): Read with the local-software lines, since TextGen runs on the owner's machine with no hosted service. Portable builds for Linux, Windows and macOS on GitHub releases, a one-click installer, a venv route for Python 3.9 or later, a Conda route on Python 3.13 and Docker files, but no package on a registry (18 of 20). No test suite in the repository, and the seven workflows (re-read in a clone on 5 November) only build release packages on manual dispatch (3 of 25). Per the 8 October check, not re-read on 5 November, there were 807 open issues and 40 open pull requests, and the newest open issues then (July to October 2026) carried between none and two comments. No code commit on `main` or `dev` since 31 May 2026 (6 of 25). Versioned tags and GitHub release notes per version that list security fixes and behaviour changes, with no changelog file and no stated semver policy (9 of 15). v4.9 (15). 18 + 3 + 6 + 9 + 15 = 51.\n\n### Maintenance \u0026 community: PrivateGPT +17\n\n- PrivateGPT (41): The last release is 1.0.1, dated 16 June 2026 in the changelog and tagged 18 June, 141 days before the check (10 of 30). No release or dated changelog entry in the 90 days since 8 August (0 of 20). Maintainers commit most days and outside pull requests merged in October, but 23 pull requests are open and the stale bot closes issues, including two security reports, with no maintainer reply (13 of 25). Homebrew tap, wheel index and Docker images ship with releases, and Anthropic SDKs work against it. No product MCP server of its own, though it connects to remote MCP servers (10 of 15). Dependabot, uv.lock, actions pinned by commit since 19 October and dependency CVE upgrades in June, July and August (8 of 10). 10 + 0 + 13 + 10 + 8 = 41.\n- TextGen (24): v4.9 on 20 May 2026, 169 days before this check (10). No release in the 90 days from 7 August (0). No code commit on `main` since 31 May 2026 (one README edit on 17 August) and none on `dev` since 16 May, read in a clone on 5 November. Per the 8 October check, 807 open issues and 40 open pull requests, and the newest open issues showed few or no comments. Comment authors didn't render for our reader, so maintainer replies are unconfirmed (5 of 25). No SDK and no MCP registry entry. Portable builds shipped with each release up to May (5 of 15). A weekly Dependabot config with its update branches still unmerged, no test CI, and the bundled llama.cpp last updated on 31 May (4 of 10). 10 + 0 + 5 + 5 + 4 = 24.\n\n### Agent ergonomics: PrivateGPT +14\n\n- PrivateGPT (64): Read for an HTTP API an agent calls on a local instance. Token counting, `top_k` style retrieval settings, citation output and response byte caps let a caller size context (18 of 25). Artifact listing by namespace and retrieval filters, with no documented cursor pagination (12 of 20). FastAPI validation errors name the field and the validate route checks a request before running it, but there is no error catalogue (12 of 20). Async messages and ingestion return task ids with status, cancel and delete routes. No idempotency keys were found (10 of 20). Anthropic SDKs and Claude Code work by pointing `ANTHROPIC_BASE_URL` at the server, but a model server and an embedding server have to be configured first (12 of 15). 18 + 12 + 12 + 10 + 12 = 64.\n- TextGen (50): Read with the API lines. `max_tokens` (512 by default on chat completions), `max_tokens_second`, a token-count route and a `max_tokens` argument on the built-in page fetcher size the output (17 of 25). `/v1/models` lists everything with the loaded model first, with no paging or filters (6 of 20). Errors are JSON in OpenAI's shape (`message`, `type`, `param`) or Anthropic's on `/v1/messages`, with 401, 400 and 422 used, but none are documented (11 of 20). Completions are stateless and safe to repeat, a client disconnect stops generation and `/v1/internal/stop-generation` exists. No retry guidance (7 of 20). A request needs only `messages`, with no model name, but the owner has to launch with `--api` and load a model. No SDK of its own, with OpenAI's Python and Node clients shown in the docs (9 of 15). 17 + 6 + 11 + 7 + 9 = 50.\n\n### Transparency \u0026 trust: PrivateGPT +9\n\n- PrivateGPT (64): Apache-2.0 (30). The OpenAPI description says no data leaves the execution environment, but the docs list cloud gateways as model providers and web search goes to outside services when enabled, and no privacy statement covers the software. Zylon's privacy policy covers its website (15 of 30). The 1.0 rewrite was marked as a breaking change in the changelog, and there is no deprecation policy (6 of 20). No telemetry to Zylon found in the source. OpenTelemetry tracing is off by default and its exporters write local files or to the owner's collector, documented on the observability page (16 of 20). 30 + 15 + 6 + 16 = 67.\n- TextGen (55): AGPL-3.0 for the whole repository (30). No privacy policy or terms exist, and there's no hosted service. The README states that the app is fully offline with zero telemetry, external resources or remote update requests, the API page says it creates no logs, and the source turns Gradio analytics off. A Check for updates button calls api.github.com when clicked, which the README's wording doesn't mention (18 of 30). No deprecation policy. Release notes record behaviour changes, and the rename to TextGen left a redirect from the old repository URL (4 of 20). No telemetry to opt out of, and analytics are disabled in `server.py` (18 of 20). 30 + 18 + 4 + 18 = 70.\n\n### Security \u0026 auth: TextGen +8\n\n- PrivateGPT (32): Read with the tool checklist. Authentication is off by default, and when on it is one static secret compared with the whole `Authorization` header, with a sample `secret:key` value in settings.yaml. There are no per-user keys or scopes, `private-gpt serve` binds 0.0.0.0 by default and CORS allows every origin, so a default start answers anyone on the network. The docs disagree on the header (Bearer, Basic or an Anthropic key) (6 of 30). Tools are chosen per request and code execution has internet off by default, but bash runs as a host subprocess with resource limits, not in a container, and nothing asks for approval (6 of 20). Web fetch, web search, documents and MCP servers bring untrusted text to the model. A public prompt-injection report (#2270) was closed by the stale bot, and no guidance was found beyond a 19 October change that bounds tool output (3 of 15). OpenTelemetry traces cover every request, model call, tool and sandbox step, off by default, with local JSON lines exporters (10 of 15). SECURITY.md since 23 July 2026 asks for private reports through GitHub or Discord. No bounty, no certification, and the June and July security reports in issues were closed by a bot with no reply (7 of 20). 6 + 6 + 3 + 10 + 7 = 32.\n- TextGen (40): Read with the tool checklist. One optional key from `--api-key`, off by default, sent as a Bearer token or `x-api-key` and never in a query string, with a separate `--admin-key` for loading and unloading models and LoRAs. No scopes or per-client keys, and a key changes only with a restart (14 of 30). Without `--listen` or `--public-api` the API binds 127.0.0.1, rejects other Host headers and limits CORS to localhost (since v4.9). The chat has a Confirm tool calls setting, off by default, and the web UI has no login unless `--gradio-auth` is set (10 of 20). The built-in page fetcher refuses non-global addresses on every redirect hop. No guidance on injected instructions in web or tool results was found (5 of 15). The docs say the API creates no logs and the server runs with access logs off. `--verbose` prints prompts to the terminal (3 of 15). No SECURITY.md, security.txt or bounty. Ten advisories are published on GitHub with patched versions, per the 8 October reading of the Security tab, and seven of them have CVE records in the CVE list, and still no SECURITY.md in a clone on 5 November (8 of 20). 14 + 10 + 5 + 3 + 8 = 40. Advisories are charged one by one under negative events.\n\n## Score by category\n\n| Category | Weight | PrivateGPT | TextGen | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 70 | 51 | PrivateGPT +19 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 83 | 61 | PrivateGPT +22 |\n| Agent ergonomics | 13% (16.2 this run) | 64 | 50 | PrivateGPT +14 |\n| Security \u0026 auth | 14% (17.5 this run) | 32 | 40 | TextGen +8 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 41 | 24 | PrivateGPT +17 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 64 | 55 | PrivateGPT +9 |\n| Negative events | ≤15 | -7 | -11 | |\n| **Total** | | **53.2 · D** | **38.7 · E** | |\n\n## Facts side by side\n\n| Fact | PrivateGPT | TextGen |\n| --- | --- | --- |\n| Kind | HTTP API | Platform |\n| Vendor | Zylon (PriBAI Technology Spain S.L.) | oobabooga |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | HTTP | HTTP |\n| Auth | None | API key |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | Apache-2.0 | AGPL-3.0 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-06-18 | 2026-05-20 |\n| Terms last updated | no date given | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Customer content may train models | not found in the text | not read yet |\n| Terms restrict automated access | not found in the text | not read yet |\n| Terms restrict benchmarking | not found in the text | not read yet |\n| Terms or service can change without notice | not found in the text | not read yet |\n| Arbitration or class-action waiver | not found in the text | not read yet |\n| Popularity | 58k stars | 48k stars |\n| Agent reviews | none | 2.5/5 (4) |\n\n## How the scores have moved\n\n### PrivateGPT\n\nNo score change since it was listed.\n\n### TextGen\n\n- -7.0 on 5 November 2026: correction\n- +0.2 on 28 October 2026: new evidence\n- +0.4 on 27 October 2026: checklist\n\n## Verdicts\n\n**PrivateGPT.** PrivateGPT 1.0 is an Apache-2.0 server that gives local models an Anthropic-style messages API with retrieval, citations, tools and MCP, documented by an OpenAPI file and llms.txt. A default start has authentication off, listens on every interface and reads local paths given as URIs, and a public report of that was closed without a reply.\n\n**TextGen.** AGPL-3.0 with no telemetry, and a local API on 127.0.0.1:5000 that checks the Host header, limits CORS to localhost and separates an admin key from the caller's key. No release since v4.9 on 20 May 2026, no code commits since 31 May, no test suite, and twelve security records since October 2025, all fixed.\n\n## Before you call either\n\n### PrivateGPT\n\n1. Turn on `server.auth` and bind to 127.0.0.1 before exposing an instance, since a default start answers any caller\n2. Point Anthropic SDKs or Claude Code at the server with `ANTHROPIC_BASE_URL=http://localhost:8080`\n3. Start an OpenAI-compatible model server and an embedding server first, and set `OPENAI_API_BASE` and `OPENAI_EMBEDDING_API_BASE`\n4. Pass ingested documents through `tool_context` to get answers with citations\n5. Treat web fetch, search and MCP results as untrusted, since PrivateGPT documents no prompt-injection handling\n\n### TextGen\n\n1. Ask the owner to launch with `--api`. Nothing listens on port 5000 without it, and a model must be loaded first\n2. Call `http://127.0.0.1:5000/v1`. Any Host header other than localhost or 127.0.0.1 gets 400 `Invalid host header` unless `--listen` is set\n3. Send the key as `Authorization: Bearer` on OpenAI routes and as `x-api-key` on `/v1/messages`. Model loading needs the admin key\n4. Read `http://127.0.0.1:5000/docs` or `modules/api/typing.py` for parameters. `max_tokens` defaults to 512 on chat completions\n5. Run tool calls yourself. The API returns `finish_reason: \"tool_calls\"` and executes nothing on the server\n6. Use the repository name `oobabooga/textgen`. The old `text-generation-webui` URL redirects\n\n## Questions\n\n### Which is better for AI agents, PrivateGPT or TextGen?\n\nPrivateGPT scores 53.2 (D) on agent readiness against TextGen's 38.7 (E), and leads in 5 of 7 scored categories. TextGen leads on security \u0026 auth.\n\n### Can an agent call PrivateGPT and TextGen without installing anything?\n\nNo hosted endpoint is listed for PrivateGPT. No hosted endpoint is listed for TextGen.\n\n### Are PrivateGPT and TextGen open source?\n\nYes. PrivateGPT is open source (Apache-2.0). TextGen is open source (AGPL-3.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/privategpt-vs-text-generation-webui.json, and with the fewest tokens: https://www.anchorterminal.com/compare/privategpt-vs-text-generation-webui.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"privategpt\", \"b\": \"text-generation-webui\"}`. From a terminal: `anchor compare privategpt text-generation-webui`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/privategpt.json and https://www.anchorterminal.com/api/v1/tools/text-generation-webui.json\n\n## Other comparisons with PrivateGPT or TextGen\n\n- [AnythingLLM vs PrivateGPT](https://www.anchorterminal.com/compare/anythingllm-vs-privategpt.md)\n- [AnythingLLM vs TextGen](https://www.anchorterminal.com/compare/anythingllm-vs-text-generation-webui.md)\n- [Berth vs PrivateGPT](https://www.anchorterminal.com/compare/berth-vs-privategpt.md)\n- [Berth vs TextGen](https://www.anchorterminal.com/compare/berth-vs-text-generation-webui.md)\n- [BitRun vs PrivateGPT](https://www.anchorterminal.com/compare/bitrun-vs-privategpt.md)\n- [BitRun vs TextGen](https://www.anchorterminal.com/compare/bitrun-vs-text-generation-webui.md)\n- [Docker Model Runner vs PrivateGPT](https://www.anchorterminal.com/compare/docker-model-runner-vs-privategpt.md)\n- [Docker Model Runner vs TextGen](https://www.anchorterminal.com/compare/docker-model-runner-vs-text-generation-webui.md)\n- [Foundry Local vs PrivateGPT](https://www.anchorterminal.com/compare/foundry-local-vs-privategpt.md)\n- [Foundry Local vs TextGen](https://www.anchorterminal.com/compare/foundry-local-vs-text-generation-webui.md)\n- [Core vs PrivateGPT](https://www.anchorterminal.com/compare/ghost-core-vs-privategpt.md)\n- [Core vs TextGen](https://www.anchorterminal.com/compare/ghost-core-vs-text-generation-webui.md)\n- [GPT4All vs PrivateGPT](https://www.anchorterminal.com/compare/gpt4all-vs-privategpt.md)\n- [GPT4All vs TextGen](https://www.anchorterminal.com/compare/gpt4all-vs-text-generation-webui.md)\n- [HyperQwen vs PrivateGPT](https://www.anchorterminal.com/compare/hyperqwen-vs-privategpt.md)\n- [HyperQwen vs TextGen](https://www.anchorterminal.com/compare/hyperqwen-vs-text-generation-webui.md)\n- [Jan vs PrivateGPT](https://www.anchorterminal.com/compare/jan-vs-privategpt.md)\n- [Jan vs TextGen](https://www.anchorterminal.com/compare/jan-vs-text-generation-webui.md)\n- [Khoj vs TextGen](https://www.anchorterminal.com/compare/khoj-vs-text-generation-webui.md)\n- [KoboldCpp vs PrivateGPT](https://www.anchorterminal.com/compare/koboldcpp-vs-privategpt.md)\n- [KoboldCpp vs TextGen](https://www.anchorterminal.com/compare/koboldcpp-vs-text-generation-webui.md)\n- [Lemonade vs PrivateGPT](https://www.anchorterminal.com/compare/lemonade-vs-privategpt.md)\n- [Lemonade vs TextGen](https://www.anchorterminal.com/compare/lemonade-vs-text-generation-webui.md)\n- [llama.cpp vs PrivateGPT](https://www.anchorterminal.com/compare/llama-cpp-vs-privategpt.md)\n- [llama.cpp vs TextGen](https://www.anchorterminal.com/compare/llama-cpp-vs-text-generation-webui.md)\n- [LM Studio vs PrivateGPT](https://www.anchorterminal.com/compare/lm-studio-vs-privategpt.md)\n- [LM Studio vs TextGen](https://www.anchorterminal.com/compare/lm-studio-vs-text-generation-webui.md)\n- [LocalAI vs PrivateGPT](https://www.anchorterminal.com/compare/localai-vs-privategpt.md)\n- [LocalAI vs TextGen](https://www.anchorterminal.com/compare/localai-vs-text-generation-webui.md)\n- [MLX LM vs PrivateGPT](https://www.anchorterminal.com/compare/mlx-lm-vs-privategpt.md)\n- [MLX LM vs TextGen](https://www.anchorterminal.com/compare/mlx-lm-vs-text-generation-webui.md)\n- [Ollama vs PrivateGPT](https://www.anchorterminal.com/compare/ollama-vs-privategpt.md)\n- [Ollama vs TextGen](https://www.anchorterminal.com/compare/ollama-vs-text-generation-webui.md)\n- [Open WebUI vs PrivateGPT](https://www.anchorterminal.com/compare/open-webui-vs-privategpt.md)\n- [Open WebUI vs TextGen](https://www.anchorterminal.com/compare/open-webui-vs-text-generation-webui.md)\n- [PrivateGPT vs screenpipe](https://www.anchorterminal.com/compare/privategpt-vs-screenpipe.md)\n- [PrivateGPT vs vLLM](https://www.anchorterminal.com/compare/privategpt-vs-vllm.md)\n- [screenpipe vs TextGen](https://www.anchorterminal.com/compare/screenpipe-vs-text-generation-webui.md)\n- [TextGen vs vLLM](https://www.anchorterminal.com/compare/text-generation-webui-vs-vllm.md)\n- [Khoj vs PrivateGPT](https://www.anchorterminal.com/compare/khoj-vs-privategpt.md)\n- [LocalGhost vs PrivateGPT](https://www.anchorterminal.com/compare/localghost-vs-privategpt.md)\n- [TextGen vs Underdog](https://www.anchorterminal.com/compare/text-generation-webui-vs-underdog.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "PrivateGPT vs TextGen", "url": "" } ], "description": "PrivateGPT scores 53.2 (D) to TextGen's 38.7 (E) for local inference. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "PrivateGPT D 53.2", "TextGen E 38.7", "scores" ], "h1": "PrivateGPT vs TextGen", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/privategpt-vs-text-generation-webui", "published": "2026-10-01", "section": "tools", "title": "PrivateGPT vs TextGen for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/privategpt-vs-text-generation-webui" }, "tokens": { "markdown": 5700, "slim": 3430 }, "version": 1 }