{
  "data": {
    "a": {
      "slug": "sculptor",
      "name": "Sculptor",
      "vendor": "Imbue, Inc.",
      "vendorUrl": "https://imbue.com",
      "kind": "harness",
      "category": "agent-harnesses",
      "summary": "Sculptor is Imbue's open-source desktop app for running coding agents in parallel, each in an isolated copy of your code, with built-in skills for agentic development. It's labelled an experimental research preview.",
      "url": "https://www.anchorterminal.com/tools/sculptor",
      "markdownUrl": "https://www.anchorterminal.com/tools/sculptor.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/sculptor.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/sculptor.json",
      "dns": "sculptor.grade.anchorterminal.com",
      "repo": "https://github.com/imbue-ai/sculptor",
      "license": "MIT",
      "transports": [],
      "packages": [],
      "auth": "none",
      "pricing": "free",
      "pricingNotes": "Free and open source. You pay for the coding agents it runs, through your own subscriptions or API keys (checked 2026-11-07).",
      "priceSummary": "Free · OSS",
      "where": "local",
      "x402": {
        "level": "no",
        "evidence": "No payment protocol in the repository or README (checked 2026-11-07).",
        "endpoints": []
      },
      "toolCount": null,
      "popularity": {
        "githubStars": null,
        "npmWeekly": null,
        "pypiWeekly": null,
        "asOf": "2026-11-07"
      },
      "docsUrl": "https://github.com/imbue-ai/sculptor#readme",
      "capabilities": [
        "agent.harness",
        "agent.multi-agent"
      ],
      "tags": [
        "open-source",
        "mit",
        "desktop-app",
        "new"
      ],
      "lastRelease": "2026-11-06",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 53.1,
        "grade": "D",
        "agentReady": false,
        "rank": 960,
        "ranked": true,
        "rankOf": 1486,
        "categoryRank": 37,
        "methodology": "0.7",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 50,
          "maintenance": 75,
          "payments": 60,
          "reliability": 43,
          "schema": 45,
          "security": 57,
          "transparency": 57
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "low",
          "date": "2026-11-07"
        },
        "negative": 0,
        "verdict": "Imbue's open-source app for parallel coding agents in isolated workspaces, with telemetry off until you choose otherwise. It's an experimental research preview that warns of bugs and drastic changes, Mac and Linux only, with no changelog.",
        "bestFor": "Developers who want parallel coding agents in isolated workspaces and are fine with a research preview.",
        "strengths": [
          "Each workspace is an isolated copy of the code, reviewed and merged back",
          "Analytics, error reporting and session recording default to off, with consent at first run",
          "Built-in skills for agentic development",
          "MIT from Imbue, with CI on pull requests"
        ],
        "weaknesses": [
          "Labelled an experimental research preview that may change drastically",
          "Mac (Apple Silicon) and Linux only",
          "No changelog file",
          "Few outside contributions accepted for now"
        ],
        "agentNotes": [
          "Download from the README's links, connect a repository and create a workspace before prompting",
          "Review the diff before merging a workspace back to main"
        ],
        "metrics": {
          "kind": "local",
          "measured": false
        },
        "reviewCount": 0,
        "avgRating": 0,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "low",
            "grade": "D",
            "methodology": "0.7",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 53.1
          }
        ],
        "editorialScores": {
          "ergonomics": 50,
          "maintenance": 75,
          "payments": 60,
          "reliability": 43,
          "schema": 45,
          "security": 57,
          "transparency": 73
        },
        "provenanceScore": 40,
        "checked": {
          "categories": {
            "ergonomics": "2026-11-07",
            "maintenance": "2026-11-07",
            "payments": "2026-11-07",
            "reliability": "2026-11-07",
            "schema": "2026-11-07",
            "security": "2026-11-07",
            "transparency": "2026-11-07"
          },
          "last": "2026-11-07",
          "oldest": "2026-11-07",
          "stale": false,
          "staleAfterDays": 90
        }
      },
      "connect": {
        "install": "Download for Mac (Apple Silicon) or Linux from the README"
      },
      "letme": {
        "capability": "https://letme.dev/agent.harness",
        "tool": "https://letme.dev/sculptor"
      },
      "area": "frameworks",
      "provenance": {
        "legalEntity": "Imbue, Inc.",
        "domain": "imbue.com",
        "domainRegistered": "",
        "domainNote": "Not looked up: RDAP isn't requested under the 1 November 2026 rules.",
        "endpointOnVendorDomain": null,
        "terms": "",
        "privacy": "",
        "statusPage": "",
        "changelog": "",
        "securityTxt": "none",
        "checked": "2026-11-07",
        "notes": [
          "The licence names Imbue, Inc.. The repository is github.com/imbue-ai/sculptor."
        ],
        "score": 40
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/sculptor.json",
      "live": {
        "slug": "sculptor",
        "securityTxt": {
          "url": "https://imbue.com/.well-known/security.txt",
          "state": "none",
          "checkedAt": "2026-11-07T16:01:32.925074454Z"
        },
        "updatedAt": "2026-11-07T16:01:32.925074454Z"
      }
    },
    "answer": "Vibe-Trading scores 57.8 (C) on agent readiness against Sculptor's 53.1 (D), and leads in 5 of 7 scored categories.",
    "b": {
      "slug": "vibe-trading",
      "name": "Vibe-Trading",
      "vendor": "HKUDS",
      "vendorUrl": "https://vibetrading.wiki",
      "kind": "harness",
      "category": "agent-harnesses",
      "summary": "Vibe-Trading is an open-source, self-hosted finance research agent from HKUDS. It turns plain-English questions into market data pulls, strategy code and backtests, through a CLI, a web UI, chat apps or its MCP server.",
      "url": "https://www.anchorterminal.com/tools/vibe-trading",
      "markdownUrl": "https://www.anchorterminal.com/tools/vibe-trading.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/vibe-trading.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/vibe-trading.json",
      "dns": "vibe-trading.grade.anchorterminal.com",
      "repo": "https://github.com/HKUDS/Vibe-Trading",
      "license": "MIT",
      "transports": [
        "stdio",
        "streamable-http",
        "sse"
      ],
      "packages": [
        {
          "registry": "pypi",
          "name": "vibe-trading-ai"
        }
      ],
      "auth": "none",
      "authNotes": "No account with the project. The owner supplies a model provider key in `agent/.env`, or uses Ollama, a ChatGPT OAuth sign-in for OpenAI Codex, a GitHub Copilot login or a local Claude Code login. The API server answers loopback clients without a key; any other client needs `API_AUTH_KEY` as `Authorization: Bearer \u003ckey\u003e`. The MCP server's HTTP transport binds 127.0.0.1 with a Host and Origin allow-list and no token. Broker connector credentials are stored in the OS keyring by `vibe-trading connector setup` (https://github.com/HKUDS/Vibe-Trading/blob/main/README.md).",
      "pricing": "free",
      "pricingNotes": "Free under the MIT licence, with nothing to buy from the project. The owner pays the model provider, or nothing with a local model through Ollama. 29 market-data sources are built in and most need no key. QVeris, an optional paid data marketplace, is a third party and is reached only in paid mode; the README carries a QVeris referral link and discloses it (checked 2026-10-25).",
      "priceSummary": "Free · OSS",
      "where": "local",
      "x402": {
        "level": "no",
        "evidence": "No x402, MPP or L402 in the README, the docs or the source at v0.1.18 (checked 2026-10-25).",
        "endpoints": []
      },
      "toolCount": 82,
      "popularity": {
        "githubStars": 36500,
        "npmWeekly": null,
        "pypiWeekly": null,
        "asOf": "2026-10-25"
      },
      "docsUrl": "https://vibetrading.wiki/docs/",
      "capabilities": [
        "agent.harness",
        "agent.multi-agent",
        "agent.mcp-client",
        "data.markets",
        "market.crypto",
        "market.news",
        "assistant.messaging",
        "assistant.proactive"
      ],
      "tags": [
        "open-source",
        "self-hosted",
        "local",
        "free",
        "python",
        "mit",
        "mcp",
        "cli",
        "harness",
        "docker",
        "no-card",
        "no-sandbox",
        "pre-1.0",
        "beta"
      ],
      "lastRelease": "2026-10-21",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 57.8,
        "grade": "C",
        "agentReady": false,
        "rank": 777,
        "ranked": true,
        "rankOf": 1486,
        "categoryRank": 23,
        "methodology": "0.7",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 67,
          "maintenance": 82,
          "payments": 60,
          "reliability": 63,
          "schema": 72,
          "security": 70,
          "transparency": 53
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "medium",
          "date": "2026-11-02"
        },
        "negative": -9,
        "negativeNotes": [
          "2026-10-02. GHSA-v2f8-6655-7grj (CVE-2026-114108, critical). In 0.1.0 to 0.1.6 the API server answered every client without authentication when `API_AUTH_KEY` was unset, the shipped default, with the Docker container running as root on 0.0.0.0:8899, which the advisory chains to remote code execution. Fixed in 0.1.7 of 6 May 2026 and published five months later, -2 while under two months old (1 from 3 December). https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-v2f8-6655-7grj",
          "2026-10-02. GHSA-jqmf-mx4f-hfr6 (CVE-2026-114107, critical). Shell and code injection in the LLM-callable `bash`, `background_run` and backtest tools, and SSRF in `read_url`, reachable through the unauthenticated API or prompt injection in a processed document, in 0.1.0 to 0.1.6. Fixed in the same 0.1.7 release, -2 while under two months old (1 from 3 December). https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-jqmf-mx4f-hfr6",
          "2026-10-02. GHSA-5rmq-chc7-m22f (CVE-2026-114106, high). `read_document` read any file the process could reach and `safe_user_path()` accepted the whole home directory, in 0.1.0 to 0.1.6. Fixed in 0.1.7, -2 while under two months old (1 from 3 December). https://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-5rmq-chc7-m22f",
          "2026-09-29. Released fixes of the listing's own described flaws with no advisory. v0.1.16 carries \"fix(security): verify email TLS certs and guard settings-write routes\" (2242c412). The Email channel in 0.1.15 and earlier sent the mailbox password over implicit SSL without checking the certificate. The same commit closed a cross-site route that could steer the stored password to another host through POST /channels/email/test, a route added after 0.1.15 and never in a release without the fix. The commit cites no GHSA id, OSV holds no record, and the changelog entry isn't an advisory. One term (https://github.com/HKUDS/Vibe-Trading/commit/2242c412cab96cde2490c443199d003d64b13b41). -3"
        ],
        "verdict": "Vibe-Trading runs on the owner's machine under the MIT licence, ships near-daily fixes with a dated changelog, and keeps order tools out of its MCP server, with live orders gated by an owner-committed mandate. Three advisories, two critical, covered versions before 0.1.7, a 0.1.16 credential fix got no advisory, and the local CLI runs shell commands without asking.",
        "bestFor": "A person or a pipeline that wants a ready-made finance research agent over free market data, with backtests, swarm reviews and exports, run on their own machine or used as an MCP server by another agent.",
        "strengths": [
          "MIT licence, runs on the owner's machine, and no telemetry code was found in the source at v0.1.18",
          "No order-placing or order-cancelling tool is exposed over MCP, and shell tools are off on every MCP transport by default",
          "Live orders need an owner-committed mandate with hard caps, a kill switch and an append-only, hash-chained audit ledger",
          "Six PyPI releases in the 90 days to 25 October 2026, with a dated CHANGELOG.md and a Known issues section in 0.1.18",
          "API server answers only loopback clients without `API_AUTH_KEY`; Docker binds 127.0.0.1 and runs as a non-root user"
        ],
        "weaknesses": [
          "Three advisories published 2 October 2026 cover 0.1.0 to 0.1.6, two critical, and 0.1.16's email TLS and cross-site fixes got no advisory",
          "The local CLI's `bash` tool and generated backtest code run without per-action approval or a sandbox",
          "82 MCP tools with about 44,000 characters of descriptions in the server source and no readOnlyHint or destructiveHint annotations",
          "Version 0.1.18 with a Beta classifier, and not in the official MCP registry",
          "Broker trading is described in the README as experimental and not verified against a real broker account"
        ],
        "agentNotes": [
          "Run 0.1.16 or later. Earlier versions carry three published advisories, including unauthenticated API access with an RCE chain, and send the email password without checking TLS certificates",
          "Set `API_AUTH_KEY` before exposing `vibe-trading serve` beyond localhost, and send it as `Authorization: Bearer \u003ckey\u003e`",
          "Set `VIBE_TRADING_ALLOWED_RUN_ROOTS` in the MCP client's `env` block; a shell `export` does not reach the spawned server",
          "Use `vibe-trading run -p \"...\" --json` for headless runs, and add `--enable-shell-tools` to `vibe-trading-mcp` only when shell access is needed",
          "Treat text from `read_url`, `web_search` and `read_document` as untrusted; `security_warnings` flags patterns but does not remove them"
        ],
        "metrics": {
          "kind": "local",
          "measured": false
        },
        "reviewCount": 0,
        "avgRating": 0,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "C",
            "methodology": "0.7",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 57.8
          }
        ],
        "editorialScores": {
          "ergonomics": 67,
          "maintenance": 82,
          "payments": 60,
          "reliability": 63,
          "schema": 72,
          "security": 70,
          "transparency": 67
        },
        "provenanceScore": 39,
        "checked": {
          "categories": {
            "ergonomics": "2026-11-02",
            "maintenance": "2026-11-02",
            "payments": "2026-11-02",
            "reliability": "2026-11-02",
            "schema": "2026-11-02",
            "security": "2026-11-02",
            "transparency": "2026-11-02"
          },
          "last": "2026-11-02",
          "lastMoved": "2026-11-02",
          "oldest": "2026-11-02",
          "stale": false,
          "staleAfterDays": 90
        }
      },
      "connect": {
        "install": "pip install vibe-trading-ai   # then: vibe-trading init   # or: docker compose up --build from a clone",
        "config": {
          "mcpServers": {
            "vibe-trading": {
              "command": "vibe-trading-mcp"
            }
          }
        },
        "headless": {
          "command": "vibe-trading run -p \"$TASK\" --json"
        }
      },
      "letme": {
        "capability": "https://letme.dev/agent.harness",
        "tool": "https://letme.dev/vibe-trading"
      },
      "area": "frameworks",
      "provenance": {
        "legalEntity": "",
        "domain": "vibetrading.wiki",
        "domainRegistered": "2026-05-14",
        "endpointOnVendorDomain": null,
        "terms": "",
        "privacy": "",
        "statusPage": "",
        "changelog": "https://github.com/HKUDS/Vibe-Trading/blob/main/CHANGELOG.md",
        "securityTxt": "none",
        "checked": "2026-10-25",
        "notes": [
          "No legal entity is named. The repository belongs to the GitHub organisation HKUDS, and pyproject.toml names HKUDS with an address at connect.hku.hk as author. The LICENSE names Vibe-Trading Contributors and NOTICE names HKUDS contributors.",
          "vibetrading.wiki is a static wiki on Cloudflare Pages built from the repository's wiki/ folder. It has no terms or privacy page, and the MIT licence stands in for terms.",
          "/robots.txt, /llms.txt and /.well-known/security.txt on vibetrading.wiki all answered with the same HTML redirect to /home/ on 25 October 2026, so there are no robots rules, no llms.txt and no security.txt.",
          "SECURITY.md asks for private reports through a GitHub security advisory and promises an acknowledgement within five business days.",
          "RDAP gives a registration date of 14 May 2026 for vibetrading.wiki. The README dates the wiki's launch to the same day.",
          "There is no hosted endpoint. The API and MCP server answer on the owner's own host."
        ],
        "score": 39
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/vibe-trading.json",
      "live": {
        "slug": "vibe-trading",
        "versions": [
          {
            "registry": "github",
            "name": "HKUDS/Vibe-Trading",
            "version": "v0.1.19",
            "released": "2026-11-05",
            "seenAt": "2026-11-07T00:15:44.102050532Z"
          },
          {
            "registry": "pypi",
            "name": "vibe-trading-ai",
            "version": "0.1.19",
            "released": "2026-11-05",
            "seenAt": "2026-11-07T00:15:43.819733725Z"
          }
        ],
        "githubStars": 37792,
        "pypiWeekly": 2517,
        "securityTxt": {
          "url": "https://vibetrading.wiki/.well-known/security.txt",
          "state": "none",
          "checkedAt": "2026-11-07T15:59:54.85620888Z"
        },
        "domain": {
          "domain": "vibetrading.wiki",
          "registered": "2026-05-14",
          "source": "https://rdap.nic.wiki/domain/vibetrading.wiki",
          "checkedAt": "2026-11-01T14:23:54.063864064Z"
        },
        "pages": [
          {
            "url": "https://raw.githubusercontent.com/HKUDS/Vibe-Trading/main/CHANGELOG.md",
            "kind": "deprecations",
            "status": 304,
            "checkedAt": "2026-11-07T14:18:29.2707234Z",
            "changedAt": "2026-11-05T13:02:55.916690108Z",
            "fingerprint": "558272c978a5"
          }
        ],
        "github": {
          "repo": "hkuds/vibe-trading",
          "checkedAt": "2026-11-02T08:25:25.970880064Z",
          "stars": 37416,
          "archived": false,
          "issuesEnabled": true,
          "pushedAt": "2026-11-01T19:12:28Z",
          "openIssues": 9,
          "openPRs": 15,
          "issuesOpened90d": 248,
          "issuesClosed90d": 249,
          "prsMerged90d": 740,
          "ci": {
            "branch": "main",
            "runs": 50,
            "success": 44,
            "failure": 4,
            "other": 2,
            "latest": "success",
            "latestAt": "2026-11-01T19:23:53Z"
          },
          "advisories": [
            {
              "ghsa": "GHSA-v2f8-6655-7grj",
              "severity": "critical",
              "published": "2026-07-29T12:13:09Z"
            },
            {
              "ghsa": "GHSA-5rmq-chc7-m22f",
              "severity": "high",
              "published": "2026-07-29T12:07:20Z"
            },
            {
              "ghsa": "GHSA-jqmf-mx4f-hfr6",
              "severity": "critical",
              "published": "2026-07-29T12:07:19Z"
            }
          ],
          "replies": {
            "sampled": 25,
            "unanswered": 3,
            "medianDays": 0.9
          }
        },
        "updatedAt": "2026-11-07T15:59:54.85620888Z"
      }
    },
    "edges": [
      {
        "by": 27,
        "category": "schema",
        "leads": "vibe-trading",
        "name": "Schema \u0026 documentation",
        "reasons": {
          "a": "Harness reading. A README, specs and agent docs in the repository; no API reference (45).",
          "b": "Harness reading of the lines, as for nanobot. The MCP server's tools take typed JSON Schema inputs generated from Python signatures through FastMCP, with a string output schema, and the API server serves FastAPI's OpenAPI file locally (keyless on loopback, behind the key otherwise). No published OpenAPI file or tool manifest outside the running program (20 of 25). No llms.txt on vibetrading.wiki, where /llms.txt redirects to the home page, and the docs are drawn by script from `content.en.js`. The repository carries Markdown READMEs in seven languages and an agent skill file, `agent/SKILL.md` (5 of 10). Tool descriptions say what each does, its arguments and what to call first, such as `list_skills()` before `load_skill`. The server's own header says every tool is read-only apart from `refresh_strategy_evidence`, while `write_file` is also exposed (14 of 20). Inputs are typed, but many choices are free strings (`protocol`, `risk_tier`, `format`) and several take free dictionaries (8 of 15). Many worked examples in the README and a troubleshooting page that names failure states such as `no_progress` and the 403 from another device; tool errors come back as JSON with an `error_type` (12 of 15). Dated CHANGELOG.md, GitHub release tags and versioned docs, though the docs still name 0.1.16 as latest (13 of 15)."
        },
        "scores": {
          "a": 45,
          "b": 72
        }
      },
      {
        "by": 20,
        "category": "reliability",
        "leads": "vibe-trading",
        "name": "Reliability",
        "reasons": {
          "a": "Local software. Desktop downloads for Mac (Apple Silicon), Linux and Linux ARM64 (20). checks.yml and a PR gate run on the repository; pass state not read (15). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent (0). sculptor-v tags up to v0.49.0, no changelog file (8). 0.x and labelled a research preview (0). 20 + 15 + 0 + 8 + 0 = 43.",
          "b": "Read with the local-software lines, as for nanobot and Agent Zero, since the owner runs it. `vibe-trading-ai` installs from PyPI for Python 3.11 or newer, with classifiers for 3.11 to 3.13, and a Docker Compose setup ships in the repository (20). A CI workflow runs the test suite on pushes and pull requests to main, with hash-locked dependency checks on Linux, macOS and Windows, and the repository holds 961 test files. Whether the latest runs on main passed couldn't be read, because GitHub's Actions pages weren't reachable (15 of 25). The repository page showed 7 open issues and 57 open pull requests on 25 October 2026, per that check (GitHub's pages answer 403 on 2 November), against 771 commits in the 30 days to 2 November, and the 0.1.18 notes list two known issues already fixed on main. Issue threads weren't read (18 of 25). CHANGELOG.md says it follows Semantic Versioning, with dated entries from 0.1.8, a Known issues section and an upgrade note for the LangChain 1.x move in 0.1.10, but on 0.x breaking changes ride in minor versions and there is no Breaking section (10 of 15). Version 0.1.18 with the classifier Development Status 4, Beta (0)."
        },
        "scores": {
          "a": 43,
          "b": 63
        }
      },
      {
        "by": 17,
        "category": "ergonomics",
        "leads": "vibe-trading",
        "name": "Agent ergonomics",
        "reasons": {
          "a": "Harness reading. Workspaces as isolated copies, review and merge back, and built-in skills (50).",
          "b": "Harness reading, scored on what an agent or script driving it has to supply. The MCP server registers 82 tools, with about 44,300 characters of descriptions across the 71 defined in the server file, and no toolsets or read-only subset (5). Since 0.1.18 the built-in agent loads tool schemas on demand, and skills load by section and offset, which keeps its own context smaller (plus 7, 12 of 25). Rows are capped by default, `read_run_artifact` pages by offset, row count and columns, oversized results are written to the run directory, the agent stops after eight tool iterations without a new result, and goals take token, turn and time budgets (18 of 20). JSON error envelopes with a type, a `--json` mode for `vibe-trading run` and a troubleshooting page, with no documented exit codes (15 of 20). No readOnlyHint or destructiveHint annotations on MCP tools. An identical call is refused from its second failure, failed swarm runs resume with completed tasks kept, interrupted web replies are checkpointed and TAP-routed Alpaca orders carry a deterministic `client_order_id` (12 of 20). `pip install` and `vibe-trading init` start it, market data works with no key, and a model key, Ollama or an existing Codex, Copilot or Claude Code login is required. Python only, with a REST API and no SDK in a second language (10 of 15)."
        },
        "scores": {
          "a": 50,
          "b": 67
        }
      },
      {
        "by": 13,
        "category": "security",
        "leads": "vibe-trading",
        "name": "Security \u0026 auth",
        "reasons": {
          "a": "Harness reading. Product analytics, error reporting and session recording default to off in the user config, and the app asks for a telemetry level and privacy consent at first run; PostHog runs on the front end only for now (25 of 30). Each workspace is an isolated copy of the code (14 of 20). No prompt-injection guidance (5). No audit log (5). SECURITY.md (8). 25 + 14 + 5 + 5 + 8 = 57.",
          "b": "Harness reading used for nanobot and goose. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. No telemetry code was found in the source at v0.1.18, and the only call to PyPI is the owner-run `vibe-trading update`. The API answers only loopback clients without `API_AUTH_KEY`, Docker binds 127.0.0.1 and runs as user `vibe`, and the MCP HTTP transport binds 127.0.0.1 with a Host and Origin allow-list against DNS rebinding but no token. Broker keys go to the OS keyring; model keys sit in `agent/.env` in clear text. The docs carry no statement that nothing is collected (24). Live orders need a mandate that only the owner commits through the web UI or API, with hard caps and a kill switch, and an optional TAP mode waits for human approval of each Alpaca write. No order tool is exposed over MCP, and shell tools are off on the API and every MCP transport unless enabled. The local CLI runs `bash` and file writes without asking, and generated backtest code runs as a network-capable subprocess with a narrowed environment and no sandbox (13). Reader and search tools add warning-only `security_warnings` from regex rules, and external MCP tool hints are treated as untrusted in the source. The `claude-cli` provider's tool filters are described as convenience filters, not a boundary (9). A live-action ledger written append-only with a hash-chained copy, run cards with hashed execution records, tool traces and per-run token usage (13). SECURITY.md with private advisory reporting and a five-business-day acknowledgement. Three advisories were published on 2 October 2026 with CVE identifiers, five months after the 0.1.7 fix, while the email TLS and cross-site settings fixes in 0.1.16 got none. No security.txt and no bounty (11). 24+13+9+13+11 = 70."
        },
        "scores": {
          "a": 57,
          "b": 70
        }
      },
      {
        "by": 7,
        "category": "maintenance",
        "leads": "vibe-trading",
        "name": "Maintenance \u0026 community",
        "reasons": {
          "a": "Commits on 6 November 2026 and frequent tagged versions (30). More than three releases in 90 days (20). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent; the README says Imbue can't take many outside contributions yet (0). Current official downloads (15). CI on pull requests (10). 30 + 20 + 0 + 15 + 10 = 75.",
          "b": "v0.1.18 was tagged on 21 October 2026, 12 days before this check (30). Six releases in the 90 days from 4 August, 0.1.13 (tag 10 August) to 0.1.18, from the repository's tags; PyPI couldn't be read on 2 November (20). 771 commits on main in the 30 days to 2 November, 233 of them after v0.1.18, the last on 2 November; the 25 October repository page showed 7 open issues and 57 open pull requests, not re-read. Issue and pull request threads weren't read, a judgement call (18 of 25). An MCP server that isn't in the official MCP registry (searches for vibe-trading and hkuds on 2 November 2026 found nothing). It is published on PyPI, as a Docker setup and on ClawHub (5 of 15). Hash-locked requirements checked in CI on three operating systems, Dependabot set to monthly, and dependency floors raised for named CVEs, most recently on 29 October (9 of 10). 30+20+18+5+9 = 82."
        },
        "scores": {
          "a": 75,
          "b": 82
        }
      }
    ],
    "facts": [
      {
        "a": "Agent harness",
        "b": "Agent harness",
        "name": "Kind"
      },
      {
        "a": "Imbue, Inc.",
        "b": "HKUDS",
        "name": "Vendor"
      },
      {
        "a": "no (local only)",
        "b": "no (local only)",
        "name": "Hosted endpoint"
      },
      {
        "a": "",
        "b": "stdio, Streamable HTTP, SSE (legacy)",
        "name": "Transports"
      },
      {
        "a": "None",
        "b": "None",
        "name": "Auth"
      },
      {
        "a": "Free",
        "b": "Free",
        "name": "Pricing"
      },
      {
        "a": "no",
        "b": "no",
        "name": "x402"
      },
      {
        "a": "MIT",
        "b": "MIT",
        "name": "Licence"
      },
      {
        "a": "none",
        "b": "82",
        "name": "Tools exposed"
      },
      {
        "a": "no",
        "b": "no",
        "name": "Read-only variant documented"
      },
      {
        "a": "no",
        "b": "no",
        "name": "llms.txt"
      },
      {
        "a": "2026-11-06",
        "b": "2026-10-21",
        "name": "Last release"
      },
      {
        "a": "no document linked",
        "b": "no document linked",
        "name": "Terms last updated"
      },
      {
        "a": "no document linked",
        "b": "no document linked",
        "name": "Privacy policy last updated"
      },
      {
        "a": "none",
        "b": "37k stars",
        "name": "Popularity"
      }
    ],
    "faq": [
      {
        "answer": "Vibe-Trading scores 57.8 (C) on agent readiness against Sculptor's 53.1 (D), and leads in 5 of 7 scored categories.",
        "question": "Which is better for AI agents, Sculptor or Vibe-Trading?"
      },
      {
        "answer": "Yes. Sculptor is open source (MIT). Vibe-Trading is open source (MIT).",
        "question": "Are Sculptor and Vibe-Trading open source?"
      }
    ],
    "goodFor": [
      {
        "aheadOn": null,
        "also": [
          "No incidents deducted, where Vibe-Trading loses 9 points for them"
        ],
        "goodFor": "Developers who want parallel coding agents in isolated workspaces and are fine with a research preview.",
        "slug": "sculptor",
        "watchFor": "Labelled an experimental research preview that may change drastically"
      },
      {
        "aheadOn": [
          "Reliability, 63 against 43",
          "Schema \u0026 documentation, 72 against 45",
          "Agent ergonomics, 67 against 50",
          "Security \u0026 auth, 70 against 57",
          "Maintenance \u0026 community, 82 against 75"
        ],
        "also": [
          "Runs on your own machine",
          "Free to start without a card"
        ],
        "goodFor": "A person or a pipeline that wants a ready-made finance research agent over free market data, with backtests, swarm reviews and exports, run on their own machine or used as an MCP server by another agent.",
        "slug": "vibe-trading",
        "watchFor": "Three advisories published 2 October 2026 cover 0.1.0 to 0.1.6, two critical, and 0.1.16's email TLS and cross-site fixes got no advisory"
      }
    ],
    "history": {
      "sculptor": null,
      "vibe-trading": [
        {
          "causes": [
            "correction"
          ],
          "date": "2026-11-02",
          "delta": -5,
          "from": 62.8,
          "fromGrade": "B",
          "to": 57.8,
          "toGrade": "C"
        },
        {
          "causes": [
            "evidence"
          ],
          "date": "2026-10-28",
          "delta": 0.4,
          "from": 62.4,
          "fromGrade": "B",
          "to": 62.8,
          "toGrade": "B"
        },
        {
          "causes": [
            "evidence"
          ],
          "date": "2026-10-27",
          "delta": 0.2,
          "from": 62.2,
          "fromGrade": "B",
          "to": 62.4,
          "toGrade": "B"
        }
      ]
    },
    "job": {
      "capability": "agent.harness",
      "name": "Agent harnesses"
    },
    "others": [
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-sculptor.json",
        "title": "Agent Zero vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading.json",
        "title": "Agent Zero vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/aider-vs-sculptor.json",
        "title": "Aider vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/aider-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/aider-vs-vibe-trading.json",
        "title": "Aider vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/aider-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/amp-vs-sculptor.json",
        "title": "Amp vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/amp-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/amp-vs-vibe-trading.json",
        "title": "Amp vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/amp-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-sculptor.json",
        "title": "Antigravity CLI vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/antigravity-cli-vs-vibe-trading.json",
        "title": "Antigravity CLI vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/antigravity-cli-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/auggie-vs-sculptor.json",
        "title": "Auggie CLI vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/auggie-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/auggie-vs-vibe-trading.json",
        "title": "Auggie CLI vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/auggie-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/axlr-vs-sculptor.json",
        "title": "AXLR vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/axlr-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/axlr-vs-vibe-trading.json",
        "title": "AXLR vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/axlr-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/claude-code-vs-sculptor.json",
        "title": "Claude Code vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/claude-code-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading.json",
        "title": "Claude Code vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cline-vs-sculptor.json",
        "title": "Cline vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/cline-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cline-vs-vibe-trading.json",
        "title": "Cline vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/cline-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/conductor-vs-sculptor.json",
        "title": "Conductor vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/conductor-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/conductor-vs-vibe-trading.json",
        "title": "Conductor vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/conductor-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/crush-vs-sculptor.json",
        "title": "Crush vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/crush-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/crush-vs-vibe-trading.json",
        "title": "Crush vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/crush-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-sculptor.json",
        "title": "Cursor CLI vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cursor-cli-vs-vibe-trading.json",
        "title": "Cursor CLI vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/cursor-cli-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-sculptor.json",
        "title": "DeepSeek Harness (dsh) vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-harness-vs-vibe-trading.json",
        "title": "DeepSeek Harness (dsh) vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/deepseek-harness-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-sculptor.json",
        "title": "dsh-superagent (DeepSeek) vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-vibe-trading.json",
        "title": "dsh-superagent (DeepSeek) vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/deepseek-superagent-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/devin-vs-sculptor.json",
        "title": "Devin vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/devin-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/devin-vs-vibe-trading.json",
        "title": "Devin vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/devin-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/droid-cli-vs-sculptor.json",
        "title": "Droid CLI vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/droid-cli-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/droid-cli-vs-vibe-trading.json",
        "title": "Droid CLI vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/droid-cli-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-sculptor.json",
        "title": "Pi vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/earendil-pi-vs-vibe-trading.json",
        "title": "Pi vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/earendil-pi-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/emdash-vs-sculptor.json",
        "title": "Emdash vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/emdash-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/emdash-vs-vibe-trading.json",
        "title": "Emdash vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/emdash-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-sculptor.json",
        "title": "Gemini CLI vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/gemini-cli-vs-vibe-trading.json",
        "title": "Gemini CLI vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/gemini-cli-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-sculptor.json",
        "title": "GitHub Copilot CLI vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-vibe-trading.json",
        "title": "GitHub Copilot CLI vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/github-copilot-cli-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/goose-vs-sculptor.json",
        "title": "goose vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/goose-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/goose-vs-vibe-trading.json",
        "title": "goose vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/goose-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/harness2-vs-sculptor.json",
        "title": "Harness² vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/harness2-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/harness2-vs-vibe-trading.json",
        "title": "Harness² vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/harness2-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-sculptor.json",
        "title": "HarnessRouter vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading.json",
        "title": "HarnessRouter vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/jules-vs-sculptor.json",
        "title": "Jules vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/jules-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/jules-vs-vibe-trading.json",
        "title": "Jules vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/jules-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/junie-vs-sculptor.json",
        "title": "Junie CLI vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/junie-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/junie-vs-vibe-trading.json",
        "title": "Junie CLI vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/junie-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-sculptor.json",
        "title": "Kilo Code CLI vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading.json",
        "title": "Kilo Code CLI vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-sculptor.json",
        "title": "Kimi Code CLI vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-vibe-trading.json",
        "title": "Kimi Code CLI vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/kimi-code-cli-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-sculptor.json",
        "title": "Kiro CLI vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kiro-cli-vs-vibe-trading.json",
        "title": "Kiro CLI vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/kiro-cli-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/letta-vs-sculptor.json",
        "title": "Letta vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/letta-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/letta-vs-vibe-trading.json",
        "title": "Letta vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/letta-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-sculptor.json",
        "title": "mini-swe-agent vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-vibe-trading.json",
        "title": "mini-swe-agent vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/mini-swe-agent-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/minimax-code-vs-sculptor.json",
        "title": "MiniMax Code vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/minimax-code-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/minimax-code-vs-vibe-trading.json",
        "title": "MiniMax Code vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/minimax-code-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-sculptor.json",
        "title": "Mistral Vibe CLI vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading.json",
        "title": "Mistral Vibe CLI vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/muse-code-vs-sculptor.json",
        "title": "Muse Code vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/muse-code-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/muse-code-vs-vibe-trading.json",
        "title": "Muse Code vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/muse-code-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-sculptor.json",
        "title": "OpenAI Agents API vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-agents-api-vs-vibe-trading.json",
        "title": "OpenAI Agents API vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/openai-agents-api-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-codex-vs-sculptor.json",
        "title": "OpenAI Codex vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/openai-codex-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading.json",
        "title": "OpenAI Codex vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/opencode-vs-sculptor.json",
        "title": "OpenCode vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/opencode-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/opencode-vs-vibe-trading.json",
        "title": "OpenCode vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/opencode-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openhands-vs-sculptor.json",
        "title": "OpenHands vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/openhands-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openhands-vs-vibe-trading.json",
        "title": "OpenHands vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/openhands-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/orca-vs-sculptor.json",
        "title": "Orca vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/orca-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/orca-vs-vibe-trading.json",
        "title": "Orca vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/orca-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/paseo-vs-sculptor.json",
        "title": "Paseo vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/paseo-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/paseo-vs-vibe-trading.json",
        "title": "Paseo vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/paseo-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/prime-agent-vs-sculptor.json",
        "title": "Prime Agent vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/prime-agent-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/prime-agent-vs-vibe-trading.json",
        "title": "Prime Agent vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/prime-agent-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/qoder-cli-vs-sculptor.json",
        "title": "Qoder CLI vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/qoder-cli-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/qoder-cli-vs-vibe-trading.json",
        "title": "Qoder CLI vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/qoder-cli-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/qwen-code-vs-sculptor.json",
        "title": "Qwen Code vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/qwen-code-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/qwen-code-vs-vibe-trading.json",
        "title": "Qwen Code vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/qwen-code-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/reflection-mirror-vs-sculptor.json",
        "title": "Mirror CLI vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/reflection-mirror-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/reflection-mirror-vs-vibe-trading.json",
        "title": "Mirror CLI vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/reflection-mirror-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-sculptor.json",
        "title": "Rovo Dev CLI vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-vibe-trading.json",
        "title": "Rovo Dev CLI vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/rovo-dev-cli-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/sculptor-vs-t3-code.json",
        "title": "Sculptor vs T3 Code",
        "url": "https://www.anchorterminal.com/compare/sculptor-vs-t3-code"
      },
      {
        "json": "https://www.anchorterminal.com/compare/sculptor-vs-traycer.json",
        "title": "Sculptor vs Traycer",
        "url": "https://www.anchorterminal.com/compare/sculptor-vs-traycer"
      },
      {
        "json": "https://www.anchorterminal.com/compare/sculptor-vs-unstoppable.json",
        "title": "Sculptor vs Unstoppable",
        "url": "https://www.anchorterminal.com/compare/sculptor-vs-unstoppable"
      },
      {
        "json": "https://www.anchorterminal.com/compare/sculptor-vs-verdent.json",
        "title": "Sculptor vs Verdent",
        "url": "https://www.anchorterminal.com/compare/sculptor-vs-verdent"
      },
      {
        "json": "https://www.anchorterminal.com/compare/sculptor-vs-warp.json",
        "title": "Sculptor vs Warp (Warp Agent CLI and the Oz Agent API)",
        "url": "https://www.anchorterminal.com/compare/sculptor-vs-warp"
      },
      {
        "json": "https://www.anchorterminal.com/compare/t3-code-vs-vibe-trading.json",
        "title": "T3 Code vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/t3-code-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/traycer-vs-vibe-trading.json",
        "title": "Traycer vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/traycer-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/verdent-vs-vibe-trading.json",
        "title": "Verdent vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/verdent-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/vibe-trading-vs-warp.json",
        "title": "Vibe-Trading vs Warp (Warp Agent CLI and the Oz Agent API)",
        "url": "https://www.anchorterminal.com/compare/vibe-trading-vs-warp"
      },
      {
        "json": "https://www.anchorterminal.com/compare/clawboo-vs-sculptor.json",
        "title": "Clawboo vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/clawboo-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/clawboo-vs-vibe-trading.json",
        "title": "Clawboo vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/clawboo-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cli-manager-vs-sculptor.json",
        "title": "CLI Manager vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/cli-manager-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/cli-manager-vs-vibe-trading.json",
        "title": "CLI Manager vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/cli-manager-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-sculptor.json",
        "title": "Harness vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/harness-autonomous-vs-vibe-trading.json",
        "title": "Harness vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/harness-autonomous-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openmausbot-vs-sculptor.json",
        "title": "OpenMausBot vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/openmausbot-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openmausbot-vs-vibe-trading.json",
        "title": "OpenMausBot vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/openmausbot-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/paperclip-vs-sculptor.json",
        "title": "Paperclip vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/paperclip-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading.json",
        "title": "Paperclip vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/parallax-agents-vs-sculptor.json",
        "title": "Parallax vs Sculptor",
        "url": "https://www.anchorterminal.com/compare/parallax-agents-vs-sculptor"
      },
      {
        "json": "https://www.anchorterminal.com/compare/parallax-agents-vs-vibe-trading.json",
        "title": "Parallax vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/parallax-agents-vs-vibe-trading"
      },
      {
        "json": "https://www.anchorterminal.com/compare/unstoppable-vs-vibe-trading.json",
        "title": "Unstoppable vs Vibe-Trading",
        "url": "https://www.anchorterminal.com/compare/unstoppable-vs-vibe-trading"
      }
    ],
    "panel": null,
    "scores": [
      {
        "by": 20,
        "edge": "vibe-trading",
        "key": "reliability",
        "name": "Reliability",
        "sculptor": 43,
        "vibe-trading": 63,
        "weight": 16
      },
      {
        "key": "performance",
        "name": "Performance",
        "pending": true,
        "weight": 10
      },
      {
        "by": 27,
        "edge": "vibe-trading",
        "key": "schema",
        "name": "Schema \u0026 documentation",
        "sculptor": 45,
        "vibe-trading": 72,
        "weight": 13
      },
      {
        "by": 17,
        "edge": "vibe-trading",
        "key": "ergonomics",
        "name": "Agent ergonomics",
        "sculptor": 50,
        "vibe-trading": 67,
        "weight": 13
      },
      {
        "by": 13,
        "edge": "vibe-trading",
        "key": "security",
        "name": "Security \u0026 auth",
        "sculptor": 57,
        "vibe-trading": 70,
        "weight": 14
      },
      {
        "by": 0,
        "edge": "",
        "key": "payments",
        "name": "Payments \u0026 pricing",
        "sculptor": 60,
        "vibe-trading": 60,
        "weight": 10
      },
      {
        "key": "tasks",
        "name": "Task success",
        "pending": true,
        "weight": 10
      },
      {
        "by": 7,
        "edge": "vibe-trading",
        "key": "maintenance",
        "name": "Maintenance \u0026 community",
        "sculptor": 75,
        "vibe-trading": 82,
        "weight": 7
      },
      {
        "by": 4,
        "edge": "sculptor",
        "key": "transparency",
        "name": "Transparency \u0026 trust",
        "sculptor": 57,
        "vibe-trading": 53,
        "weight": 7
      }
    ],
    "summary": "Vibe-Trading scores 57.8 (C) on agent readiness against Sculptor's 53.1 (D), and leads in 5 of 7 scored categories. Both do agent harnesses.",
    "tasks": null,
    "tutorials": [],
    "verdicts": {
      "sculptor": "Imbue's open-source app for parallel coding agents in isolated workspaces, with telemetry off until you choose otherwise. It's an experimental research preview that warns of bugs and drastic changes, Mac and Linux only, with no changelog.",
      "vibe-trading": "Vibe-Trading runs on the owner's machine under the MIT licence, ships near-daily fixes with a dated changelog, and keeps order tools out of its MCP server, with live orders gated by an owner-committed mandate. Three advisories, two critical, covered versions before 0.1.7, a 0.1.16 credential fix got no advisory, and the local CLI runs shell commands without asking."
    }
  },
  "kind": "anchor.page",
  "links": {
    "api": "https://www.anchorterminal.com/api/v1/index.json",
    "html": "https://www.anchorterminal.com/compare/sculptor-vs-vibe-trading",
    "json": "https://www.anchorterminal.com/compare/sculptor-vs-vibe-trading.json",
    "llms": "https://www.anchorterminal.com/llms.txt",
    "markdown": "https://www.anchorterminal.com/compare/sculptor-vs-vibe-trading.md",
    "mcp": "https://www.anchorterminal.com/mcp",
    "slim": "https://www.anchorterminal.com/compare/sculptor-vs-vibe-trading.min.md"
  },
  "markdown": "Vibe-Trading scores 57.8 (C) on agent readiness against Sculptor's 53.1 (D), and leads in 5 of 7 scored categories. Both do agent harnesses.\n\n- Sculptor: grade D, 53.1/100, rank #960 of 1486. Markdown https://www.anchorterminal.com/tools/sculptor.md · JSON https://www.anchorterminal.com/api/v1/tools/sculptor.json\n- Vibe-Trading: grade C, 57.8/100, rank #777 of 1486. Markdown https://www.anchorterminal.com/tools/vibe-trading.md · JSON https://www.anchorterminal.com/api/v1/tools/vibe-trading.json\n- Best agent harnesses and coding agents: https://www.anchorterminal.com/best/agent-harnesses/index.md\n- All 1500 harnesses comparisons: https://www.anchorterminal.com/compare/agent-harnesses/index.md\n\n## Which one, for what\n\n### Sculptor (D)\n\nGood for: Developers who want parallel coding agents in isolated workspaces and are fine with a research preview.\n\nAlso in its favour:\n- No incidents deducted, where Vibe-Trading loses 9 points for them\n\nWatch for: Labelled an experimental research preview that may change drastically\n\n### Vibe-Trading (C)\n\nGood for: A person or a pipeline that wants a ready-made finance research agent over free market data, with backtests, swarm reviews and exports, run on their own machine or used as an MCP server by another agent.\n\nAhead on:\n- Reliability, 63 against 43\n- Schema \u0026 documentation, 72 against 45\n- Agent ergonomics, 67 against 50\n- Security \u0026 auth, 70 against 57\n- Maintenance \u0026 community, 82 against 75\n\nAlso in its favour:\n- Runs on your own machine\n- Free to start without a card\n\nWatch for: Three advisories published 2 October 2026 cover 0.1.0 to 0.1.6, two critical, and 0.1.16's email TLS and cross-site fixes got no advisory\n\n\n## Why the edge\n\n### Schema \u0026 documentation: Vibe-Trading +27\n\n- Sculptor (45): Harness reading. A README, specs and agent docs in the repository; no API reference (45).\n- Vibe-Trading (72): Harness reading of the lines, as for nanobot. The MCP server's tools take typed JSON Schema inputs generated from Python signatures through FastMCP, with a string output schema, and the API server serves FastAPI's OpenAPI file locally (keyless on loopback, behind the key otherwise). No published OpenAPI file or tool manifest outside the running program (20 of 25). No llms.txt on vibetrading.wiki, where /llms.txt redirects to the home page, and the docs are drawn by script from `content.en.js`. The repository carries Markdown READMEs in seven languages and an agent skill file, `agent/SKILL.md` (5 of 10). Tool descriptions say what each does, its arguments and what to call first, such as `list_skills()` before `load_skill`. The server's own header says every tool is read-only apart from `refresh_strategy_evidence`, while `write_file` is also exposed (14 of 20). Inputs are typed, but many choices are free strings (`protocol`, `risk_tier`, `format`) and several take free dictionaries (8 of 15). Many worked examples in the README and a troubleshooting page that names failure states such as `no_progress` and the 403 from another device; tool errors come back as JSON with an `error_type` (12 of 15). Dated CHANGELOG.md, GitHub release tags and versioned docs, though the docs still name 0.1.16 as latest (13 of 15).\n\n### Reliability: Vibe-Trading +20\n\n- Sculptor (43): Local software. Desktop downloads for Mac (Apple Silicon), Linux and Linux ARM64 (20). checks.yml and a PR gate run on the repository; pass state not read (15). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent (0). sculptor-v tags up to v0.49.0, no changelog file (8). 0.x and labelled a research preview (0). 20 + 15 + 0 + 8 + 0 = 43.\n- Vibe-Trading (63): Read with the local-software lines, as for nanobot and Agent Zero, since the owner runs it. `vibe-trading-ai` installs from PyPI for Python 3.11 or newer, with classifiers for 3.11 to 3.13, and a Docker Compose setup ships in the repository (20). A CI workflow runs the test suite on pushes and pull requests to main, with hash-locked dependency checks on Linux, macOS and Windows, and the repository holds 961 test files. Whether the latest runs on main passed couldn't be read, because GitHub's Actions pages weren't reachable (15 of 25). The repository page showed 7 open issues and 57 open pull requests on 25 October 2026, per that check (GitHub's pages answer 403 on 2 November), against 771 commits in the 30 days to 2 November, and the 0.1.18 notes list two known issues already fixed on main. Issue threads weren't read (18 of 25). CHANGELOG.md says it follows Semantic Versioning, with dated entries from 0.1.8, a Known issues section and an upgrade note for the LangChain 1.x move in 0.1.10, but on 0.x breaking changes ride in minor versions and there is no Breaking section (10 of 15). Version 0.1.18 with the classifier Development Status 4, Beta (0).\n\n### Agent ergonomics: Vibe-Trading +17\n\n- Sculptor (50): Harness reading. Workspaces as isolated copies, review and merge back, and built-in skills (50).\n- Vibe-Trading (67): Harness reading, scored on what an agent or script driving it has to supply. The MCP server registers 82 tools, with about 44,300 characters of descriptions across the 71 defined in the server file, and no toolsets or read-only subset (5). Since 0.1.18 the built-in agent loads tool schemas on demand, and skills load by section and offset, which keeps its own context smaller (plus 7, 12 of 25). Rows are capped by default, `read_run_artifact` pages by offset, row count and columns, oversized results are written to the run directory, the agent stops after eight tool iterations without a new result, and goals take token, turn and time budgets (18 of 20). JSON error envelopes with a type, a `--json` mode for `vibe-trading run` and a troubleshooting page, with no documented exit codes (15 of 20). No readOnlyHint or destructiveHint annotations on MCP tools. An identical call is refused from its second failure, failed swarm runs resume with completed tasks kept, interrupted web replies are checkpointed and TAP-routed Alpaca orders carry a deterministic `client_order_id` (12 of 20). `pip install` and `vibe-trading init` start it, market data works with no key, and a model key, Ollama or an existing Codex, Copilot or Claude Code login is required. Python only, with a REST API and no SDK in a second language (10 of 15).\n\n### Security \u0026 auth: Vibe-Trading +13\n\n- Sculptor (57): Harness reading. Product analytics, error reporting and session recording default to off in the user config, and the app asks for a telemetry level and privacy consent at first run; PostHog runs on the front end only for now (25 of 30). Each workspace is an isolated copy of the code (14 of 20). No prompt-injection guidance (5). No audit log (5). SECURITY.md (8). 25 + 14 + 5 + 5 + 8 = 57.\n- Vibe-Trading (70): Harness reading used for nanobot and goose. 30 for what leaves the machine by default, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. No telemetry code was found in the source at v0.1.18, and the only call to PyPI is the owner-run `vibe-trading update`. The API answers only loopback clients without `API_AUTH_KEY`, Docker binds 127.0.0.1 and runs as user `vibe`, and the MCP HTTP transport binds 127.0.0.1 with a Host and Origin allow-list against DNS rebinding but no token. Broker keys go to the OS keyring; model keys sit in `agent/.env` in clear text. The docs carry no statement that nothing is collected (24). Live orders need a mandate that only the owner commits through the web UI or API, with hard caps and a kill switch, and an optional TAP mode waits for human approval of each Alpaca write. No order tool is exposed over MCP, and shell tools are off on the API and every MCP transport unless enabled. The local CLI runs `bash` and file writes without asking, and generated backtest code runs as a network-capable subprocess with a narrowed environment and no sandbox (13). Reader and search tools add warning-only `security_warnings` from regex rules, and external MCP tool hints are treated as untrusted in the source. The `claude-cli` provider's tool filters are described as convenience filters, not a boundary (9). A live-action ledger written append-only with a hash-chained copy, run cards with hashed execution records, tool traces and per-run token usage (13). SECURITY.md with private advisory reporting and a five-business-day acknowledgement. Three advisories were published on 2 October 2026 with CVE identifiers, five months after the 0.1.7 fix, while the email TLS and cross-site settings fixes in 0.1.16 got none. No security.txt and no bounty (11). 24+13+9+13+11 = 70.\n\n### Maintenance \u0026 community: Vibe-Trading +7\n\n- Sculptor (75): Commits on 6 November 2026 and frequent tagged versions (30). More than three releases in 90 days (20). GitHub issues and pull requests weren't read (GitHub's pages refuse these sessions), so that line is scored absent; the README says Imbue can't take many outside contributions yet (0). Current official downloads (15). CI on pull requests (10). 30 + 20 + 0 + 15 + 10 = 75.\n- Vibe-Trading (82): v0.1.18 was tagged on 21 October 2026, 12 days before this check (30). Six releases in the 90 days from 4 August, 0.1.13 (tag 10 August) to 0.1.18, from the repository's tags; PyPI couldn't be read on 2 November (20). 771 commits on main in the 30 days to 2 November, 233 of them after v0.1.18, the last on 2 November; the 25 October repository page showed 7 open issues and 57 open pull requests, not re-read. Issue and pull request threads weren't read, a judgement call (18 of 25). An MCP server that isn't in the official MCP registry (searches for vibe-trading and hkuds on 2 November 2026 found nothing). It is published on PyPI, as a Docker setup and on ClawHub (5 of 15). Hash-locked requirements checked in CI on three operating systems, Dependabot set to monthly, and dependency floors raised for named CVEs, most recently on 29 October (9 of 10). 30+20+18+5+9 = 82.\n\n## Score by category\n\n| Category | Weight | Sculptor | Vibe-Trading | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 43 | 63 | Vibe-Trading +20 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 45 | 72 | Vibe-Trading +27 |\n| Agent ergonomics | 13% (16.2 this run) | 50 | 67 | Vibe-Trading +17 |\n| Security \u0026 auth | 14% (17.5 this run) | 57 | 70 | Vibe-Trading +13 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 75 | 82 | Vibe-Trading +7 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 57 | 53 | Sculptor +4 |\n| Negative events | ≤15 | 0 | -9 | |\n| **Total** | | **53.1 · D** | **57.8 · C** | |\n\n## Facts side by side\n\n| Fact | Sculptor | Vibe-Trading |\n| --- | --- | --- |\n| Kind | Agent harness | Agent harness |\n| Vendor | Imbue, Inc. | HKUDS |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports |  | stdio, Streamable HTTP, SSE (legacy) |\n| Auth | None | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | MIT | MIT |\n| Tools exposed | none | 82 |\n| Read-only variant documented | no | no |\n| llms.txt | no | no |\n| Last release | 2026-11-06 | 2026-10-21 |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | no document linked |\n| Popularity | none | 37k stars |\n\n## How the scores have moved\n\n### Sculptor\n\nNo score change since it was listed.\n\n### Vibe-Trading\n\n- -5.0 on 2 November 2026 (B to C): correction\n- +0.4 on 28 October 2026: new evidence\n- +0.2 on 27 October 2026: new evidence\n\n## Verdicts\n\n**Sculptor.** Imbue's open-source app for parallel coding agents in isolated workspaces, with telemetry off until you choose otherwise. It's an experimental research preview that warns of bugs and drastic changes, Mac and Linux only, with no changelog.\n\n**Vibe-Trading.** Vibe-Trading runs on the owner's machine under the MIT licence, ships near-daily fixes with a dated changelog, and keeps order tools out of its MCP server, with live orders gated by an owner-committed mandate. Three advisories, two critical, covered versions before 0.1.7, a 0.1.16 credential fix got no advisory, and the local CLI runs shell commands without asking.\n\n## Before you call either\n\n### Sculptor\n\n1. Download from the README's links, connect a repository and create a workspace before prompting\n2. Review the diff before merging a workspace back to main\n\n### Vibe-Trading\n\n1. Run 0.1.16 or later. Earlier versions carry three published advisories, including unauthenticated API access with an RCE chain, and send the email password without checking TLS certificates\n2. Set `API_AUTH_KEY` before exposing `vibe-trading serve` beyond localhost, and send it as `Authorization: Bearer \u003ckey\u003e`\n3. Set `VIBE_TRADING_ALLOWED_RUN_ROOTS` in the MCP client's `env` block; a shell `export` does not reach the spawned server\n4. Use `vibe-trading run -p \"...\" --json` for headless runs, and add `--enable-shell-tools` to `vibe-trading-mcp` only when shell access is needed\n5. Treat text from `read_url`, `web_search` and `read_document` as untrusted; `security_warnings` flags patterns but does not remove them\n\n## Questions\n\n### Which is better for AI agents, Sculptor or Vibe-Trading?\n\nVibe-Trading scores 57.8 (C) on agent readiness against Sculptor's 53.1 (D), and leads in 5 of 7 scored categories.\n\n### Are Sculptor and Vibe-Trading open source?\n\nYes. Sculptor is open source (MIT). Vibe-Trading is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/sculptor-vs-vibe-trading.json, and with the fewest tokens: https://www.anchorterminal.com/compare/sculptor-vs-vibe-trading.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"sculptor\", \"b\": \"vibe-trading\"}`. From a terminal: `anchor compare sculptor vibe-trading`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/sculptor.json and https://www.anchorterminal.com/api/v1/tools/vibe-trading.json\n\n## Other comparisons with Sculptor or Vibe-Trading\n\n- [Agent Zero vs Sculptor](https://www.anchorterminal.com/compare/agent-zero-vs-sculptor.md)\n- [Agent Zero vs Vibe-Trading](https://www.anchorterminal.com/compare/agent-zero-vs-vibe-trading.md)\n- [Aider vs Sculptor](https://www.anchorterminal.com/compare/aider-vs-sculptor.md)\n- [Aider vs Vibe-Trading](https://www.anchorterminal.com/compare/aider-vs-vibe-trading.md)\n- [Amp vs Sculptor](https://www.anchorterminal.com/compare/amp-vs-sculptor.md)\n- [Amp vs Vibe-Trading](https://www.anchorterminal.com/compare/amp-vs-vibe-trading.md)\n- [Antigravity CLI vs Sculptor](https://www.anchorterminal.com/compare/antigravity-cli-vs-sculptor.md)\n- [Antigravity CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/antigravity-cli-vs-vibe-trading.md)\n- [Auggie CLI vs Sculptor](https://www.anchorterminal.com/compare/auggie-vs-sculptor.md)\n- [Auggie CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/auggie-vs-vibe-trading.md)\n- [AXLR vs Sculptor](https://www.anchorterminal.com/compare/axlr-vs-sculptor.md)\n- [AXLR vs Vibe-Trading](https://www.anchorterminal.com/compare/axlr-vs-vibe-trading.md)\n- [Claude Code vs Sculptor](https://www.anchorterminal.com/compare/claude-code-vs-sculptor.md)\n- [Claude Code vs Vibe-Trading](https://www.anchorterminal.com/compare/claude-code-vs-vibe-trading.md)\n- [Cline vs Sculptor](https://www.anchorterminal.com/compare/cline-vs-sculptor.md)\n- [Cline vs Vibe-Trading](https://www.anchorterminal.com/compare/cline-vs-vibe-trading.md)\n- [Conductor vs Sculptor](https://www.anchorterminal.com/compare/conductor-vs-sculptor.md)\n- [Conductor vs Vibe-Trading](https://www.anchorterminal.com/compare/conductor-vs-vibe-trading.md)\n- [Crush vs Sculptor](https://www.anchorterminal.com/compare/crush-vs-sculptor.md)\n- [Crush vs Vibe-Trading](https://www.anchorterminal.com/compare/crush-vs-vibe-trading.md)\n- [Cursor CLI vs Sculptor](https://www.anchorterminal.com/compare/cursor-cli-vs-sculptor.md)\n- [Cursor CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/cursor-cli-vs-vibe-trading.md)\n- [DeepSeek Harness (dsh) vs Sculptor](https://www.anchorterminal.com/compare/deepseek-harness-vs-sculptor.md)\n- [DeepSeek Harness (dsh) vs Vibe-Trading](https://www.anchorterminal.com/compare/deepseek-harness-vs-vibe-trading.md)\n- [dsh-superagent (DeepSeek) vs Sculptor](https://www.anchorterminal.com/compare/deepseek-superagent-vs-sculptor.md)\n- [dsh-superagent (DeepSeek) vs Vibe-Trading](https://www.anchorterminal.com/compare/deepseek-superagent-vs-vibe-trading.md)\n- [Devin vs Sculptor](https://www.anchorterminal.com/compare/devin-vs-sculptor.md)\n- [Devin vs Vibe-Trading](https://www.anchorterminal.com/compare/devin-vs-vibe-trading.md)\n- [Droid CLI vs Sculptor](https://www.anchorterminal.com/compare/droid-cli-vs-sculptor.md)\n- [Droid CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/droid-cli-vs-vibe-trading.md)\n- [Pi vs Sculptor](https://www.anchorterminal.com/compare/earendil-pi-vs-sculptor.md)\n- [Pi vs Vibe-Trading](https://www.anchorterminal.com/compare/earendil-pi-vs-vibe-trading.md)\n- [Emdash vs Sculptor](https://www.anchorterminal.com/compare/emdash-vs-sculptor.md)\n- [Emdash vs Vibe-Trading](https://www.anchorterminal.com/compare/emdash-vs-vibe-trading.md)\n- [Gemini CLI vs Sculptor](https://www.anchorterminal.com/compare/gemini-cli-vs-sculptor.md)\n- [Gemini CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/gemini-cli-vs-vibe-trading.md)\n- [GitHub Copilot CLI vs Sculptor](https://www.anchorterminal.com/compare/github-copilot-cli-vs-sculptor.md)\n- [GitHub Copilot CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/github-copilot-cli-vs-vibe-trading.md)\n- [goose vs Sculptor](https://www.anchorterminal.com/compare/goose-vs-sculptor.md)\n- [goose vs Vibe-Trading](https://www.anchorterminal.com/compare/goose-vs-vibe-trading.md)\n- [Harness² vs Sculptor](https://www.anchorterminal.com/compare/harness2-vs-sculptor.md)\n- [Harness² vs Vibe-Trading](https://www.anchorterminal.com/compare/harness2-vs-vibe-trading.md)\n- [HarnessRouter vs Sculptor](https://www.anchorterminal.com/compare/harnessrouter-vs-sculptor.md)\n- [HarnessRouter vs Vibe-Trading](https://www.anchorterminal.com/compare/harnessrouter-vs-vibe-trading.md)\n- [Jules vs Sculptor](https://www.anchorterminal.com/compare/jules-vs-sculptor.md)\n- [Jules vs Vibe-Trading](https://www.anchorterminal.com/compare/jules-vs-vibe-trading.md)\n- [Junie CLI vs Sculptor](https://www.anchorterminal.com/compare/junie-vs-sculptor.md)\n- [Junie CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/junie-vs-vibe-trading.md)\n- [Kilo Code CLI vs Sculptor](https://www.anchorterminal.com/compare/kilo-code-cli-vs-sculptor.md)\n- [Kilo Code CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/kilo-code-cli-vs-vibe-trading.md)\n- [Kimi Code CLI vs Sculptor](https://www.anchorterminal.com/compare/kimi-code-cli-vs-sculptor.md)\n- [Kimi Code CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/kimi-code-cli-vs-vibe-trading.md)\n- [Kiro CLI vs Sculptor](https://www.anchorterminal.com/compare/kiro-cli-vs-sculptor.md)\n- [Kiro CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/kiro-cli-vs-vibe-trading.md)\n- [Letta vs Sculptor](https://www.anchorterminal.com/compare/letta-vs-sculptor.md)\n- [Letta vs Vibe-Trading](https://www.anchorterminal.com/compare/letta-vs-vibe-trading.md)\n- [mini-swe-agent vs Sculptor](https://www.anchorterminal.com/compare/mini-swe-agent-vs-sculptor.md)\n- [mini-swe-agent vs Vibe-Trading](https://www.anchorterminal.com/compare/mini-swe-agent-vs-vibe-trading.md)\n- [MiniMax Code vs Sculptor](https://www.anchorterminal.com/compare/minimax-code-vs-sculptor.md)\n- [MiniMax Code vs Vibe-Trading](https://www.anchorterminal.com/compare/minimax-code-vs-vibe-trading.md)\n- [Mistral Vibe CLI vs Sculptor](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-sculptor.md)\n- [Mistral Vibe CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/mistral-vibe-cli-vs-vibe-trading.md)\n- [Muse Code vs Sculptor](https://www.anchorterminal.com/compare/muse-code-vs-sculptor.md)\n- [Muse Code vs Vibe-Trading](https://www.anchorterminal.com/compare/muse-code-vs-vibe-trading.md)\n- [OpenAI Agents API vs Sculptor](https://www.anchorterminal.com/compare/openai-agents-api-vs-sculptor.md)\n- [OpenAI Agents API vs Vibe-Trading](https://www.anchorterminal.com/compare/openai-agents-api-vs-vibe-trading.md)\n- [OpenAI Codex vs Sculptor](https://www.anchorterminal.com/compare/openai-codex-vs-sculptor.md)\n- [OpenAI Codex vs Vibe-Trading](https://www.anchorterminal.com/compare/openai-codex-vs-vibe-trading.md)\n- [OpenCode vs Sculptor](https://www.anchorterminal.com/compare/opencode-vs-sculptor.md)\n- [OpenCode vs Vibe-Trading](https://www.anchorterminal.com/compare/opencode-vs-vibe-trading.md)\n- [OpenHands vs Sculptor](https://www.anchorterminal.com/compare/openhands-vs-sculptor.md)\n- [OpenHands vs Vibe-Trading](https://www.anchorterminal.com/compare/openhands-vs-vibe-trading.md)\n- [Orca vs Sculptor](https://www.anchorterminal.com/compare/orca-vs-sculptor.md)\n- [Orca vs Vibe-Trading](https://www.anchorterminal.com/compare/orca-vs-vibe-trading.md)\n- [Paseo vs Sculptor](https://www.anchorterminal.com/compare/paseo-vs-sculptor.md)\n- [Paseo vs Vibe-Trading](https://www.anchorterminal.com/compare/paseo-vs-vibe-trading.md)\n- [Prime Agent vs Sculptor](https://www.anchorterminal.com/compare/prime-agent-vs-sculptor.md)\n- [Prime Agent vs Vibe-Trading](https://www.anchorterminal.com/compare/prime-agent-vs-vibe-trading.md)\n- [Qoder CLI vs Sculptor](https://www.anchorterminal.com/compare/qoder-cli-vs-sculptor.md)\n- [Qoder CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/qoder-cli-vs-vibe-trading.md)\n- [Qwen Code vs Sculptor](https://www.anchorterminal.com/compare/qwen-code-vs-sculptor.md)\n- [Qwen Code vs Vibe-Trading](https://www.anchorterminal.com/compare/qwen-code-vs-vibe-trading.md)\n- [Mirror CLI vs Sculptor](https://www.anchorterminal.com/compare/reflection-mirror-vs-sculptor.md)\n- [Mirror CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/reflection-mirror-vs-vibe-trading.md)\n- [Rovo Dev CLI vs Sculptor](https://www.anchorterminal.com/compare/rovo-dev-cli-vs-sculptor.md)\n- [Rovo Dev CLI vs Vibe-Trading](https://www.anchorterminal.com/compare/rovo-dev-cli-vs-vibe-trading.md)\n- [Sculptor vs T3 Code](https://www.anchorterminal.com/compare/sculptor-vs-t3-code.md)\n- [Sculptor vs Traycer](https://www.anchorterminal.com/compare/sculptor-vs-traycer.md)\n- [Sculptor vs Unstoppable](https://www.anchorterminal.com/compare/sculptor-vs-unstoppable.md)\n- [Sculptor vs Verdent](https://www.anchorterminal.com/compare/sculptor-vs-verdent.md)\n- [Sculptor vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/sculptor-vs-warp.md)\n- [T3 Code vs Vibe-Trading](https://www.anchorterminal.com/compare/t3-code-vs-vibe-trading.md)\n- [Traycer vs Vibe-Trading](https://www.anchorterminal.com/compare/traycer-vs-vibe-trading.md)\n- [Verdent vs Vibe-Trading](https://www.anchorterminal.com/compare/verdent-vs-vibe-trading.md)\n- [Vibe-Trading vs Warp (Warp Agent CLI and the Oz Agent API)](https://www.anchorterminal.com/compare/vibe-trading-vs-warp.md)\n- [Clawboo vs Sculptor](https://www.anchorterminal.com/compare/clawboo-vs-sculptor.md)\n- [Clawboo vs Vibe-Trading](https://www.anchorterminal.com/compare/clawboo-vs-vibe-trading.md)\n- [CLI Manager vs Sculptor](https://www.anchorterminal.com/compare/cli-manager-vs-sculptor.md)\n- [CLI Manager vs Vibe-Trading](https://www.anchorterminal.com/compare/cli-manager-vs-vibe-trading.md)\n- [Harness vs Sculptor](https://www.anchorterminal.com/compare/harness-autonomous-vs-sculptor.md)\n- [Harness vs Vibe-Trading](https://www.anchorterminal.com/compare/harness-autonomous-vs-vibe-trading.md)\n- [OpenMausBot vs Sculptor](https://www.anchorterminal.com/compare/openmausbot-vs-sculptor.md)\n- [OpenMausBot vs Vibe-Trading](https://www.anchorterminal.com/compare/openmausbot-vs-vibe-trading.md)\n- [Paperclip vs Sculptor](https://www.anchorterminal.com/compare/paperclip-vs-sculptor.md)\n- [Paperclip vs Vibe-Trading](https://www.anchorterminal.com/compare/paperclip-vs-vibe-trading.md)\n- [Parallax vs Sculptor](https://www.anchorterminal.com/compare/parallax-agents-vs-sculptor.md)\n- [Parallax vs Vibe-Trading](https://www.anchorterminal.com/compare/parallax-agents-vs-vibe-trading.md)\n- [Unstoppable vs Vibe-Trading](https://www.anchorterminal.com/compare/unstoppable-vs-vibe-trading.md)\n",
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "attributionRequired": true,
    "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-11-07",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.7",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run",
    "terms": "https://www.anchorterminal.com/terms/#data"
  },
  "page": {
    "breadcrumbs": [
      {
        "name": "Home",
        "url": "https://www.anchorterminal.com/"
      },
      {
        "name": "Compare",
        "url": "https://www.anchorterminal.com/compare/"
      },
      {
        "name": "Sculptor vs Vibe-Trading",
        "url": ""
      }
    ],
    "description": "Vibe-Trading scores 57.8 (C) to Sculptor's 53.1 (D) for agent harnesses. Prices, MCP, x402, uptime and agent notes side by side.",
    "facts": [
      "Sculptor D 53.1",
      "Vibe-Trading C 57.8",
      "scores"
    ],
    "h1": "Sculptor vs Vibe-Trading",
    "image": "https://www.anchorterminal.com/assets/og/default.png",
    "path": "/compare/sculptor-vs-vibe-trading",
    "published": "2026-10-01",
    "section": "tools",
    "title": "Sculptor vs Vibe-Trading for AI agents in 2026: scores and prices",
    "toc": null,
    "updated": "2026-11-07",
    "url": "https://www.anchorterminal.com/compare/sculptor-vs-vibe-trading"
  },
  "tokens": {
    "markdown": 6350,
    "slim": 2580
  },
  "version": 1
}
