# Beam 1.0 vs SWE-2 Flash (slim)

> Beam 1.0 scores 53.4 (D) to SWE-2 Flash's 36.4 (F) for llm inference. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/reflection-beam-vs-swe-2-flash.md (~6,000 tokens) · this version ~2,980 tokens · JSON https://www.anchorterminal.com/compare/reflection-beam-vs-swe-2-flash.json · canonical https://www.anchorterminal.com/compare/reflection-beam-vs-swe-2-flash
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-04
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

Beam 1.0 scores 53.4 (D) on agent readiness against SWE-2 Flash's 36.4 (F), and leads in 3 of 7 scored categories. SWE-2 Flash leads on security & auth, payments & pricing and transparency & trust. Both do llm inference.

- Beam 1.0: D 53.4, rank #843 of 1350 · https://www.anchorterminal.com/tools/reflection-beam.min.md
- SWE-2 Flash: F 36.4, rank #1243 of 1350 · https://www.anchorterminal.com/tools/swe-2-flash.min.md
- Beam 1.0, good for An OpenAI-compatible endpoint for a large open-weight coding and agent model, for builders who want the same model hosted or self-hosted under Apache-2.0. Ahead on Schema & documentation, 84 against 29; Agent ergonomics, 67 against 10. Also A hosted endpoint, with nothing to install.
- SWE-2 Flash, good for People already using Devin Desktop or Devin CLI who want a cheaper, faster model for routine coding work such as automations, reviews and small changes, while it is free in November 2026. Ahead on Security & auth, 53 against 45; Payments & pricing, 20 against 10; Transparency & trust, 64 against 57.

| Category | Beam 1.0 | SWE-2 Flash |
| --- | --- | --- |
| Reliability (16%) | 52 | 50 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 84 | 29 |
| Agent ergonomics (13%) | 67 | 10 |
| Security & auth (14%) | 45 | 53 |
| Payments & pricing (10%) | 10 | 20 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 50 | 53 |
| Transparency & trust (7%) | 57 | 64 |

| Fact (where they differ) | Beam 1.0 | SWE-2 Flash |
| --- | --- | --- |
| Vendor | Reflection | Cognition AI, Inc. |
| Hosted endpoint | `https://api.reflection.ai/openai/v1` | no (local only) |
| Transports | HTTP |  |
| Auth | API key | OAuth or key |
| Licence | Weights under Apache-2.0. The hosted Reflection API is a closed service under Reflection's commercial terms of service | Proprietary model, used through Devin Desktop and Devin CLI under Cognition's Platform Terms of Service. The weights are not public; Cognition says it is building a programme to share them with industry partners and researchers |
| Last release | 2026-10-16 | 2026-11-04 |
| Terms last updated | 2026-10-05 | 2026-06-30 |
| Privacy policy last updated | 2026-08-28 | 2026-03-09 |
| Customer content may train models | yes | yes, with an opt-out |
| Terms restrict benchmarking | not found in the text | yes |
| Agent reviews | 2.5/5 (4) | none |

Why the edge:
- Agent ergonomics, Beam 1.0 +57: Beam 1.0 67 (Model reading (tool use, structured output, caching, context, batch, SDKs and defaults, errors). `tool_choice` of auto, none, required or a named function, `parallel_tool_calls`, strict tools and up to 128 tools. The tool-calling loop needs `reasoning_content` sent back on every assistant turn, and the docs say the model sometimes returns a tool-call step without it, after which every request in the session fails (12 of 20). `json_object` and strict `json_schema` (15). Cached prompt tokens are reported in `usage`, but caching can't be steered, the `prompt_cache_*` options are ignored and no cached price exists in the beta (5 of 10). 1,048,576-token context and 131,072 output tokens (15). No batch endpoint (0 of 10). No Reflection SDK, the OpenAI Python and TypeScript SDKs are documented, and defaults cost an agent turns, with reasoning always on at `max`, `stop` and `seed` ignored and a default output budget not reduced to fit the prompt (5 of 10). Machine-readable `error.code` values with `param`, `x-should-retry`, `Retry-After` and `x-request-id` (15). 12 + 15 + 5 + 15 + 0 + 5 + 15 = 67, per the 17 October reading of the developers guides, not re-read on 4 November beyond the models and rate-limits pages.); SWE-2 Flash 10 (Model reading (tool use, structured output, caching, context, batch, SDKs). Tool use is Devin's harness, not something a caller configures; no context length, output limit or cache price is published for SWE-2 Flash (5 of 25). No documented output-size or reasoning controls for this model; SWE-2's effort levels aren't stated for Flash (0 of 20). No model-level error documentation (0 of 20). No idempotency or retry guidance (0 of 20). One flag or picker selects it and `devin -p` runs a single turn and prints to stdout, but there is no SDK or direct endpoint (5 of 15). 5 + 0 + 0 + 0 + 5 = 10.)
- Schema & documentation, Beam 1.0 +55: Beam 1.0 84 (Model reading. OpenAPI 3.0.3 document, version 0.1.0, covering all three documented endpoints with typed schemas and error examples. A second 'Reflection client' base URL, https://api.reflection.ai/v1, is named with no endpoints documented (22 of 25). llms.txt, a Markdown copy of every page and a docs MCP endpoint (10). The guides say which reasoning effort suits which task, which OpenAI parameters are fixed, ignored or unsupported and which endpoints don't exist, so a model knows what not to send (17 of 20). `reasoning_effort` is an enum, strict JSON Schema for tools and `json_schema` output with the unsupported keywords and size limits listed, and unknown parameters return `unsupported_parameter` (15). curl, Python and TypeScript examples on every guide, and an error reference with every status, `error.code` and retry advice (15). The model ID carries its version and the models endpoint has a `shutdown_date` field, but no changelog or release notes were found (5 of 15). 22 + 10 + 17 + 15 + 15 + 5 = 84. The OpenAPI file is linked from llms.txt; the guides beyond the overview, models, rate limits, authentication and reference overview pages are per the 17 October check.); SWE-2 Flash 29 (Model reading. No model API, so no OpenAPI entry; the Devin v3 OpenAPI file lists SWE-2 agents only, and no model card was found (0). docs.devin.ai serves llms.txt and Markdown copies of every page (10). The launch post says what it is for (automations, code review, feature development, documentation) and the CLI docs say when to pick a SWE model, but the models pages don't list SWE-2 Flash yet (6 of 20). No documented model ID, reasoning settings, context or output limits to type (0 of 15). The CLI pages show `--model` and `/model` examples, with no model-specific errors (3 of 15). Named, dated model versions on Cognition's blog and public release notes, but no release note for SWE-2 Flash yet; the newest is 2 November (10 of 15). 0 + 10 + 6 + 0 + 3 + 10 = 29.)
- Payments & pricing, SWE-2 Flash +10: Beam 1.0 10 (Graded on the Reflection API. No x402, MPP or L402 (0). No per-token, plan or allocation price is published on any readable page; the beta pricing page on reflection.ai is struck (0, was 10). Free tier 10 of 20, partial kept. The rate-limits page describes a daily token allowance and asks those requesting higher limits whether they are "interested in paid usage", and the authentication page says some organisations must verify a credit card before keys work. A person signs up in the browser at platform.reflection.ai to get a key (0). 0 + 0 + 10 + 0 = 10.); SWE-2 Flash 20 (Published rubric. No payment protocol (0). Plan prices are public, but no per-token price for SWE-2 Flash is on a readable page; the docs' cost table loads in the browser and the post gives only 'one-fifth the price' of SWE-2 (10). Free through 30 November 2026 on Devin Desktop and CLI, but the docs say Free tier users only have SWE-1.6, so whether the Free plan reaches it, and without a card, isn't confirmed; the in-between value used on the devin listing (10). A person signs in through a browser (0). 0 + 10 + 10 + 0 = 20.)
- Security & auth, SWE-2 Flash +8: Beam 1.0 45 (Model reading. API keys per project, revocable, shown once and disabled when their creator leaves, with no scopes, expiry or rotation API found (20 of 30). Training 10 of 20, partial kept. The API reference says each response's `reflection-data-retention` header reports `contributor` when content may be used to train Reflection's models "under contributor terms your organization accepted". The API safety page and commercial terms read on 17 October are struck (reflection.ai now disallows our crawler), so whether training is off by default can't be read. Retention 5 of 15, partial kept. The header can report `zero`, `standard` or `contributor`, and no readable page states periods or whether zero retention is offered. `x-request-id` on every response and the retention header, with usage dashboards behind the login and not read (5 of 15). Security programme 5 of 20 (was 6). The model card names reports@reflection.ai for security vulnerabilities; developers.reflection.ai has no security.txt (404 on 17 October), and the safety report and reflection.ai's security.txt can't be read. No bug bounty, SOC 2 or ISO 27001 found on a readable page. 20 + 10 + 5 + 5 + 5 = 45.); SWE-2 Flash 53 (Read as a hosted model reached through Devin's local clients. The CLI signs in through a browser, or the enterprise identity provider, and stores an API token in credentials.toml that by default is persistent and does not expire and carries the user's access, with no scopes found for it (10 of 30). Devin CLI documents an OS-level sandbox with network filtering, hooks that can block tool calls, and enterprise model allowlists and team settings (14 of 20). Guardrails against prompt injection are Enterprise only and cover user messages, as on the devin listing (8 of 15). Enterprise analytics count tool calls and consumption by model and user; no per-user audit log for the CLI was found (8 of 15). SOC 2 Type II and ISO/IEC 27001:2022, a disclosure address, no bug bounty and no security.txt, per the devin listing (13 of 20). Training: self-serve customer data may train Cognition's models by default, with an opt-out on paid plans that also turns on zero data retention at model providers. Cognition withheld the weights over cyber misuse, which is recorded as a fact, not scored. 10 + 14 + 8 + 8 + 13 = 53.)
- Transparency & trust, SWE-2 Flash +7: Beam 1.0 57 (Weights under Apache-2.0, an OSI licence, per the model card, which says the licence doesn't restrict distillation or training on outputs. The hosted API is a closed service whose commercial terms are on reflection.ai and can no longer be read (25 of 30, kept). Data handling 10 of 30, partial kept. What remains readable is the API reference's retention header (`zero`, `standard`, `contributor`) and the rate-limits page's request for data retention requirements; the terms, privacy policy, API safety page and zero-retention page are struck. Deprecation 4 of 20 (was 6). A `shutdown_date` field and a lifecycle section that says to move off a model before that date, with no notice period or dated notice; the fee-increase notice came from the struck terms. Subprocessors 0 of 20 (was 18). The list read on 17 October is on reflection.ai and struck, and no readable page names subprocessors or data locations. 25 + 10 + 4 + 0 = 39.); SWE-2 Flash 64 (Editorial half. Closed model under Cognition's platform terms; the weights aren't public and the sharing programme isn't described yet (15). Terms, privacy policy, security page and DPA agree, with training on self-serve data by default and no retention periods, as read for the devin listing (18). The API versioning policy covers API endpoints, not models, and no model deprecation notice was found (5 of 20). Sub-processors listed with purpose and country, per the devin listing's 8 October check (18). 15 + 18 + 5 + 18 = 56.)