{ "data": { "a": { "slug": "taiga", "name": "Taiga", "vendor": "Taiga Cloud Services, S.L.", "vendorUrl": "https://taiga.io", "kind": "http-api", "category": "project-management", "summary": "Taiga is open-source agile project management software with Scrum backlogs, Kanban boards, issues and a wiki, hosted at tree.taiga.io or self-hosted. Agents reach it through a REST API at `api.taiga.io/api/v1`.", "url": "https://www.anchorterminal.com/tools/taiga", "markdownUrl": "https://www.anchorterminal.com/tools/taiga.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/taiga.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/taiga.json", "repo": "https://github.com/taigaio/taiga-back", "license": "MPL-2.0 for the taiga-back source. The hosted service runs under Taiga's Terms and Conditions, which also mention non-open-source modules", "transports": [ "http" ], "packages": [], "auth": "mixed", "authNotes": "Access is self-serve with a Taiga account, and there is no API key or personal token. A client posts the account's user name and password to `/api/v1/auth` and receives a bearer token and a refresh token. The backend's default lifetimes are 24 hours and 8 days. The token acts with the user's permissions in each project and has no scopes. The docs also describe application tokens, sent as `Authorization: Application \u003ctoken\u003e`, for an application an instance administrator has registered. No way to register an application on the hosted service was found. No app review or partner approval is described.", "pricing": "freemium", "pricingNotes": "The hosted Free plan has one public and one private project and 10 MB of storage, and the terms say API access is free, so an agent can start without a contract. Paid hosted plans are a flat monthly price with unlimited users, Enthusiast 5 euros (50 a year), Basic 20 euros (200 a year) and Premium 60 euros (600 a year). Private cloud and on-premise support are by quote. The software is free to self-host. API calls are not priced, and prices are in euros only (https://taiga.io/deployment-pricing-options/, checked 2026-10-09).", "priceSummary": "Freemium", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API reference, the pricing page or the terms (checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 858, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://docs.taiga.io/api.html", "capabilities": [ "tasks.create", "tasks.update", "projects.manage", "tasks.comments", "projects.reporting", "events.webhooks-send" ], "tags": [ "official", "hosted", "self-hosted", "open-source", "rest", "freemium", "free-tier", "webhooks", "eu-hosting", "project-management" ], "lastRelease": "2026-07-02", "graded": true, "anchor": { "graded": true, "score": 31.7, "grade": "F", "agentReady": false, "rank": 830, "ranked": true, "rankOf": 842, "categoryRank": 14, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 49, "maintenance": 21, "payments": 30, "reliability": 17, "schema": 35, "security": 37, "transparency": 64 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": -3, "negativeNotes": [ "2025-10-28. Two advisories were published against taigaio/taiga-back, an authenticated remote code execution through unsafe deserialisation in the API, rated critical (CVE-2025-62368, CVSS 9.0), and a time-based blind SQL injection rated moderate (CVE-2025-62367). Both affect 6.8.3 and earlier and are fixed in 6.9.0 of 13 October 2025. The advisories do not say when the hosted service was patched. Fixed and published, so the deduction is reduced, -3 (https://github.com/taigaio/taiga-back/security/advisories)." ], "verdict": "Taiga's REST API covers projects, epics, user stories, tasks, issues, wiki pages and webhooks, with a curl example for each call, and the backend is open source under MPL-2.0. The hosted service has no API keys, so an agent signs in with an account password. No OpenAPI document, status page or request limits were found.", "bestFor": "Small agile teams that want Scrum and Kanban with a free hosted plan or a self-hosted, open-source install in the EU.", "strengths": [ "One reference page documents 234 paths under `/api/v1`, each with a curl example and a sample response object", "The backend is public under MPL-2.0 and can be self-hosted, with the same API as the hosted service", "The hosted service has a free plan with one public and one private project, and the terms say API access is free", "Modifying requests take a `version` parameter, so a stale write is refused instead of overwriting another change", "Project roles carry per-permission lists, and webhooks keep a delivery log with a resend call" ], "weaknesses": [ "No API key or personal token on the hosted service. An agent logs in with a user name and password for a bearer token that lasts 24 hours", "No OpenAPI document or llms.txt, and error responses are not described in the API reference, whose page footer is dated 3 April 2024", "No status page, SLA text or numeric request limit was found for the hosted API", "The terms let Taiga change or withdraw API access at any time without notice, and bar using the API to make Taiga data and functions available to third parties", "Two advisories published on 28 October 2025, one a critical authenticated remote code execution (CVE-2025-62368), both fixed in 6.9.0" ], "agentNotes": [ "POST `{\"type\": \"normal\", \"username\", \"password\"}` to `/api/v1/auth`, then send `Authorization: Bearer \u003cauth_token\u003e`. Renew with `/api/v1/auth/refresh` before 24 hours pass", "Send the object's current `version` with every PATCH or PUT. A stale value is refused when the same attributes changed", "Lists return 30 items a page. Read the `x-pagination-next` header, or send `x-disable-pagination: True` only for small projects", "Resolve slugs and reference numbers to ids with `/api/v1/resolver` before calling an object endpoint", "Use a dedicated account with a narrow project role, because the token acts with the whole account's permissions. Treat story, issue and wiki text as untrusted input" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "F", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 31.7 } ], "editorialScores": { "ergonomics": 49, "maintenance": 21, "payments": 30, "reliability": 17, "schema": 35, "security": 37, "transparency": 56 }, "provenanceScore": 72 }, "connect": { "http": "curl -X POST -H \"Content-Type: application/json\" -d '{\"type\": \"normal\", \"username\": \"$USERNAME\", \"password\": \"$PASSWORD\"}' https://api.taiga.io/api/v1/auth" }, "letme": { "capability": "https://letme.dev/tasks.create", "tool": "https://letme.dev/taiga" }, "area": "business", "unitPrices": [ { "item": "Free (hosted)", "unit": "month", "usd": 0, "note": "1 public and 1 private project, 10 MB, unlimited users; paid plans are priced in euros (5, 20 and 60 a month)" } ], "provenance": { "legalEntity": "Taiga Cloud Services, S.L.", "domain": "taiga.io", "domainRegistered": "2013-12-04", "endpointOnVendorDomain": true, "terms": "https://taiga.io/terms-and-conditions/", "privacy": "https://taiga.io/privacy-policy/", "statusPage": "", "changelog": "https://github.com/taigaio/taiga-back/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The Terms and Conditions (last updated September 2025) name TAIGA CLOUD SERVICES, S.L., C/ Uruguay 15, Entreplanta B, 36201 Vigo, Spain. They cover the cloud and on-premise products, and section 13 covers use of the API. Spanish law governs.", "The privacy policy names two joint controllers, KALEIDOS INC SUCURSAL EN ESPAÑA S.L. and TAIGA CLOUD SERVICES, S.L. It carries no date. A Data Processing Addendum at https://taiga.io/data-processing-addendum-dpa/ is incorporated into the terms.", "The hosted API answers at api.taiga.io and the web app at tree.taiga.io, both on the vendor's domain. Self-hosted instances answer on the owner's domain.", "taiga.io/.well-known/security.txt returned 404. The security page and the repository's SECURITY.md give security@taiga.io for reports.", "No status page is linked from the site, the docs or the terms.", "RDAP for taiga.io gives a registration date of 2013-12-04 and Gandi SAS as registrar." ], "score": 72 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/taiga.json" }, "answer": "YouTrack scores 49.9 (D) on agent readiness against Taiga's 31.7 (F), and leads in 6 of 7 scored categories.", "b": { "slug": "youtrack", "name": "YouTrack", "vendor": "JetBrains s.r.o.", "vendorUrl": "https://www.jetbrains.com/youtrack/", "kind": "http-api", "category": "project-management", "summary": "YouTrack is JetBrains' issue tracker and project management tool, with a knowledge base, helpdesk and time tracking. Agents reach each YouTrack Cloud or Server instance through its REST API and a built-in remote MCP server at `/mcp`.", "url": "https://www.anchorterminal.com/tools/youtrack", "markdownUrl": "https://www.anchorterminal.com/tools/youtrack.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/youtrack.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/youtrack.json", "license": "Proprietary service under the JetBrains YouTrack Cloud Terms of Service. YouTrack Server is licensed separately for self-hosting", "transports": [ "http", "streamable-http" ], "packages": [], "auth": "mixed", "authNotes": "Access is self-serve. Each user creates a permanent token in their profile (Account Security) and sends it as a Bearer token. Tokens never expire, can be deleted, and carry one or both of two scopes, YouTrack and YouTrack Administration. OAuth 2.0 comes from the built-in Hub service, with authorisation code and PKCE (S256), client credentials and a deprecated implicit flow. From YouTrack 2026.2 a system administrator registers OAuth clients or enables automatic registration through Client ID Metadata Documents (off by default). Dynamic Client Registration is not supported. Every call acts with the authorising user's permissions. No app review or partner approval is described.", "pricing": "freemium", "pricingNotes": "The free plan covers up to ten users and three helpdesk agents, with 30 GB of storage, and the REST API is always enabled, so an agent can start without a contract. Paid Cloud subscriptions are priced per user on a sliding scale. JetBrains announced USD 5.40 a user a month on monthly billing and USD 4.50 on annual billing from 1 October 2025, and USD 6 or USD 5.50 per helpdesk agent beyond three. The pricing page served pounds to our network on 2026-10-08 (GBP 4.30 monthly, GBP 43 a year). API and MCP calls are not priced. A 14-day trial covers up to 100 users. No separate sandbox was found (https://www.jetbrains.com/youtrack/buy/, checked 2026-10-08).", "priceSummary": "$4.50 / seat-mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the developer portal, the OpenAPI document or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": 23, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://www.jetbrains.com/help/youtrack/devportal/youtrack-rest-api.html", "llmsTxt": "https://www.jetbrains.com/help/youtrack/devportal/llms.txt", "openapi": "https://youtrack.jetbrains.com/api/openapi.json", "capabilities": [ "tasks.create", "tasks.update", "projects.manage", "tasks.comments", "work.issues", "work.docs" ], "tags": [ "official", "hosted", "self-hosted", "mcp", "oauth", "openapi", "llms-txt", "freemium", "free-tier", "status-page", "soc2", "project-management", "issue-tracker" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 49.9, "grade": "D", "agentReady": false, "rank": 698, "ranked": true, "rankOf": 842, "categoryRank": 13, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 55, "maintenance": 64, "payments": 30, "reliability": 30, "schema": 72, "security": 67, "transparency": 82 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -5, "negativeNotes": [ "2026-04-17. CVE-2026-33392, a sandbox bypass allowing code execution by an administrator, reported in March 2026. JetBrains says the impact was greatest in YouTrack Cloud, where it could bypass cross-tenant isolation on shared hardware, that Cloud was mitigated within 48 hours, and that it found no evidence of exploitation. Fixed and disclosed, so 3 of a possible 15 (https://blog.jetbrains.com/youtrack/2026/04/security-issue-in-youtrack-cve-2026-33392/)", "2026-06-19. CVE-2026-56141 (admin account takeover through authentication token forgery) and CVE-2026-56142 (email verification bypass), found in May 2026, affected YouTrack Cloud, and CVE-2026-50242 affected Server. JetBrains says Cloud was patched before the post and that it found no evidence of exploitation outside testing. Fixed and disclosed, so 2 points (https://blog.jetbrains.com/youtrack/2026/06/youtrack-security-update-youtrack-server-upgrade-required/)" ], "verdict": "Every instance serves an OpenAPI 3.0 document, a 23-tool MCP server with OAuth and PKCE, and field selection on each REST call, and the free plan covers ten users. No rate limits, 429 handling, error reference or SLA were found, and JetBrains disclosed two sets of critical vulnerabilities affecting YouTrack Cloud in 2026, both patched.", "bestFor": "Software teams that already run YouTrack and want an agent to search, file and update issues, comment, log time and maintain knowledge base articles under each user's permissions.", "strengths": [ "OpenAPI 3.0.1 document at `/api/openapi.json` on every instance, with 281 operations on 157 paths, plus llms.txt and a Markdown copy of each docs page", "Built-in remote MCP server at `/mcp` with 23 predefined tools, and `tools` and `ignoreTools` URL parameters that trim the tool list", "OAuth 2.0 authorisation code flow with PKCE (S256) and Client ID Metadata Documents, or revocable permanent tokens with two scopes", "Free plan for up to ten users and three helpdesk agents, with the REST API always enabled", "19 Server builds published between 15 July and 5 October 2026, and a REST API changelog by version" ], "weaknesses": [ "No rate limits, 429 handling, idempotency keys or error reference found in the reviewed documentation", "The status page shows availability percentages by region for 24 hours and 30 days, with no incident history, and no SLA was found", "Two security disclosures in 2026 affected YouTrack Cloud, a cross-tenant isolation bypass (CVE-2026-33392) and an admin account takeover (CVE-2026-56141). Both were patched", "Permanent tokens never expire and carry only two coarse scopes, YouTrack and YouTrack Administration", "No current official SDK. YouTrackSharp for .NET covers a subset of the API and was last published on 31 March 2023" ], "agentNotes": [ "Send `fields` on every REST request. Without it the server returns only the database ID and `$type` of each entity", "Page collections with `$top` and `$skip`. Most resources return 42 items by default", "Call `get_issue_fields_schema` before `create_issue` or `update_issue`, because required custom fields differ by project", "Connect MCP clients to `https://\u003cinstance\u003e.youtrack.cloud/mcp`. OAuth needs an administrator to enable CIMD or register the client, since Dynamic Client Registration is not supported", "Create permanent tokens with the YouTrack scope only, and add `?tools=` to the MCP URL to limit the tools listed" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 49.9 } ], "editorialScores": { "ergonomics": 55, "maintenance": 64, "payments": 30, "reliability": 30, "schema": 72, "security": 67, "transparency": 65 }, "provenanceScore": 98 }, "connect": { "http": "curl 'https://example.youtrack.cloud/api/users/me?fields=id,login,name' -H 'Accept: application/json' -H \"Authorization: Bearer $YOUTRACK_TOKEN\"", "claudeCode": "claude mcp add --header \"Authorization: Bearer \u003ctoken\u003e\" --transport http youtrack \u003cyoutrack-mcp-endpoint-url\u003e" }, "letme": { "capability": "https://letme.dev/tasks.create", "tool": "https://letme.dev/youtrack" }, "area": "business", "unitPrices": [ { "item": "Free plan (up to 10 users, 3 helpdesk agents)", "unit": "seat-month", "usd": 0, "note": "30 GB storage; REST API and MCP server included" }, { "item": "Cloud user, annual billing", "unit": "seat-month", "usd": 4.5, "note": "starting price as announced for 1 October 2025; falls as users are added. Pricing page served GBP on 2026-10-08" }, { "item": "Cloud user, monthly billing", "unit": "seat-month", "usd": 5.4, "note": "starting price as announced for 1 October 2025; pricing page showed GBP 4.30 on 2026-10-08" }, { "item": "Helpdesk agent beyond three, monthly billing", "unit": "seat-month", "usd": 6, "note": "USD 5.50 on annual billing, as announced for 1 October 2025" } ], "provenance": { "legalEntity": "JetBrains s.r.o.", "domain": "jetbrains.com", "domainRegistered": "2001-11-09", "endpointOnVendorDomain": true, "terms": "https://www.jetbrains.com/legal/docs/youtrack/youtrack_cloud/", "privacy": "https://www.jetbrains.com/legal/docs/privacy/privacy/", "statusPage": "https://www.jetbrains.com/youtrack/cloud/status/", "changelog": "https://www.jetbrains.com/help/youtrack/devportal/api-changelog.html", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The YouTrack Cloud Terms of Service (version 2.0, effective 14 August 2024) name JetBrains s.r.o., Na Hřebenech II 1718/8, Prague, 14000, Czech Republic, ID No. 265 02 275, and are governed by Czech law.", "The JetBrains Privacy Notice (version 3.2, last updated 12 June 2026) covers JetBrains websites, products and services, and the Cloud terms point to it. Customer personal data is processed under the Data Processing Addendum (version 1.3, 27 April 2022).", "Cloud instances answer at \u003cinstance\u003e.youtrack.cloud, or \u003cinstance\u003e.myjetbrains.com/youtrack for instances registered before 2 November 2021. RDAP gives youtrack.cloud a registration date of 2021-04-30 through MarkMonitor, and the docs describe both domains as JetBrains'.", "www.jetbrains.com/.well-known/security.txt has a Contact line (security@jetbrains.com) and a Policy line pointing to the Coordinated Disclosure Policy, and no Expires field, which RFC 9116 requires.", "The status page draws its figures by script from myjetbrains.com/youtrack/youtrack-hosted-master/rest/stat, which we read directly.", "RDAP for jetbrains.com gives a registration date of 2001-11-09 and Network Solutions, LLC as registrar." ], "score": 98 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/youtrack.json", "live": { "slug": "youtrack", "vendorStatus": { "page": "https://www.jetbrains.com/youtrack/cloud/status", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-09T07:58:42.194490014Z" }, "updatedAt": "2026-10-09T07:58:42.194490014Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Taiga Cloud Services, S.L.", "b": "JetBrains s.r.o.", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MPL-2.0 for the taiga-back source. The hosted service runs under Taiga's Terms and Conditions, which also mention non-open-source modules", "b": "Proprietary service under the JetBrains YouTrack Cloud Terms of Service. YouTrack Server is licensed separately for self-hosting", "name": "Licence" }, { "a": "none", "b": "23", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-07-02", "b": "2026-10-05", "name": "Last release" }, { "a": "2025-09-01", "b": "2024-08-14", "name": "Terms last updated" }, { "a": "no date given", "b": "2026-06-12", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "yes", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "858 stars", "b": "none", "name": "Popularity" } ], "faq": [ { "answer": "YouTrack scores 49.9 (D) on agent readiness against Taiga's 31.7 (F), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, Taiga or YouTrack?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do Taiga and YouTrack need an API key?" }, { "answer": "No hosted endpoint is listed for Taiga. No hosted endpoint is listed for YouTrack.", "question": "Can an agent call Taiga and YouTrack without installing anything?" }, { "answer": "Taiga is open source (MPL-2.0 for the taiga-back source. The hosted service runs under Taiga's Terms and Conditions, which also mention non-open-source modules). No open-source release is listed for YouTrack.", "question": "Are Taiga and YouTrack open source?" } ], "goodFor": [ { "aheadOn": null, "also": [ "Open source" ], "goodFor": "Small agile teams that want Scrum and Kanban with a free hosted plan or a self-hosted, open-source install in the EU.", "slug": "taiga", "watchFor": "No API key or personal token on the hosted service. An agent logs in with a user name and password for a bearer token that lasts 24 hours" }, { "aheadOn": [ "Reliability, 30 against 17", "Schema \u0026 documentation, 72 against 35", "Agent ergonomics, 55 against 49", "Security \u0026 auth, 67 against 37", "Maintenance \u0026 community, 64 against 21", "Transparency \u0026 trust, 82 against 64" ], "also": null, "goodFor": "Software teams that already run YouTrack and want an agent to search, file and update issues, comment, log time and maintain knowledge base articles under each user's permissions.", "slug": "youtrack", "watchFor": "No rate limits, 429 handling, idempotency keys or error reference found in the reviewed documentation" } ], "job": { "capability": "tasks.create", "name": "Tasks create" }, "others": [ { "json": "https://www.anchorterminal.com/compare/asana-vs-taiga.json", "title": "Asana vs Taiga", "url": "https://www.anchorterminal.com/compare/asana-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/asana-vs-youtrack.json", "title": "Asana vs YouTrack", "url": "https://www.anchorterminal.com/compare/asana-vs-youtrack" }, { "json": "https://www.anchorterminal.com/compare/basecamp-vs-taiga.json", "title": "Basecamp vs Taiga", "url": "https://www.anchorterminal.com/compare/basecamp-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/basecamp-vs-youtrack.json", "title": "Basecamp vs YouTrack", "url": "https://www.anchorterminal.com/compare/basecamp-vs-youtrack" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-taiga.json", "title": "ClickUp vs Taiga", "url": "https://www.anchorterminal.com/compare/clickup-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-youtrack.json", "title": "ClickUp vs YouTrack", "url": "https://www.anchorterminal.com/compare/clickup-vs-youtrack" }, { "json": "https://www.anchorterminal.com/compare/monday-vs-taiga.json", "title": "monday.com vs Taiga", "url": "https://www.anchorterminal.com/compare/monday-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/monday-vs-youtrack.json", "title": "monday.com vs YouTrack", "url": "https://www.anchorterminal.com/compare/monday-vs-youtrack" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-taiga.json", "title": "OpenProject vs Taiga", "url": "https://www.anchorterminal.com/compare/openproject-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-youtrack.json", "title": "OpenProject vs YouTrack", "url": "https://www.anchorterminal.com/compare/openproject-vs-youtrack" }, { "json": "https://www.anchorterminal.com/compare/plane-vs-taiga.json", "title": "Plane vs Taiga", "url": "https://www.anchorterminal.com/compare/plane-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/plane-vs-youtrack.json", "title": "Plane vs YouTrack", "url": "https://www.anchorterminal.com/compare/plane-vs-youtrack" }, { "json": "https://www.anchorterminal.com/compare/roma-vs-taiga.json", "title": "Roma vs Taiga", "url": "https://www.anchorterminal.com/compare/roma-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/roma-vs-youtrack.json", "title": "Roma vs YouTrack", "url": "https://www.anchorterminal.com/compare/roma-vs-youtrack" }, { "json": "https://www.anchorterminal.com/compare/shortcut-vs-taiga.json", "title": "Shortcut vs Taiga", "url": "https://www.anchorterminal.com/compare/shortcut-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/shortcut-vs-youtrack.json", "title": "Shortcut vs YouTrack", "url": "https://www.anchorterminal.com/compare/shortcut-vs-youtrack" }, { "json": "https://www.anchorterminal.com/compare/taiga-vs-teamwork.json", "title": "Taiga vs Teamwork.com", "url": "https://www.anchorterminal.com/compare/taiga-vs-teamwork" }, { "json": "https://www.anchorterminal.com/compare/taiga-vs-todoist.json", "title": "Taiga vs Todoist", "url": "https://www.anchorterminal.com/compare/taiga-vs-todoist" }, { "json": "https://www.anchorterminal.com/compare/taiga-vs-trello.json", "title": "Taiga vs Trello", "url": "https://www.anchorterminal.com/compare/taiga-vs-trello" }, { "json": "https://www.anchorterminal.com/compare/taiga-vs-wrike.json", "title": "Taiga vs Wrike", "url": "https://www.anchorterminal.com/compare/taiga-vs-wrike" }, { "json": "https://www.anchorterminal.com/compare/teamwork-vs-youtrack.json", "title": "Teamwork.com vs YouTrack", "url": "https://www.anchorterminal.com/compare/teamwork-vs-youtrack" }, { "json": "https://www.anchorterminal.com/compare/todoist-vs-youtrack.json", "title": "Todoist vs YouTrack", "url": "https://www.anchorterminal.com/compare/todoist-vs-youtrack" }, { "json": "https://www.anchorterminal.com/compare/trello-vs-youtrack.json", "title": "Trello vs YouTrack", "url": "https://www.anchorterminal.com/compare/trello-vs-youtrack" }, { "json": "https://www.anchorterminal.com/compare/wrike-vs-youtrack.json", "title": "Wrike vs YouTrack", "url": "https://www.anchorterminal.com/compare/wrike-vs-youtrack" } ], "scores": [ { "by": 13, "edge": "youtrack", "key": "reliability", "name": "Reliability", "taiga": 17, "weight": 16, "youtrack": 30 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 37, "edge": "youtrack", "key": "schema", "name": "Schema \u0026 documentation", "taiga": 35, "weight": 13, "youtrack": 72 }, { "by": 6, "edge": "youtrack", "key": "ergonomics", "name": "Agent ergonomics", "taiga": 49, "weight": 13, "youtrack": 55 }, { "by": 30, "edge": "youtrack", "key": "security", "name": "Security \u0026 auth", "taiga": 37, "weight": 14, "youtrack": 67 }, { "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "taiga": 30, "weight": 10, "youtrack": 30 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 43, "edge": "youtrack", "key": "maintenance", "name": "Maintenance \u0026 community", "taiga": 21, "weight": 7, "youtrack": 64 }, { "by": 18, "edge": "youtrack", "key": "transparency", "name": "Transparency \u0026 trust", "taiga": 64, "weight": 7, "youtrack": 82 } ], "summary": "YouTrack scores 49.9 (D) on agent readiness against Taiga's 31.7 (F), and leads in 6 of 7 scored categories. Both do tasks create.", "verdicts": { "taiga": "Taiga's REST API covers projects, epics, user stories, tasks, issues, wiki pages and webhooks, with a curl example for each call, and the backend is open source under MPL-2.0. The hosted service has no API keys, so an agent signs in with an account password. No OpenAPI document, status page or request limits were found.", "youtrack": "Every instance serves an OpenAPI 3.0 document, a 23-tool MCP server with OAuth and PKCE, and field selection on each REST call, and the free plan covers ten users. No rate limits, 429 handling, error reference or SLA were found, and JetBrains disclosed two sets of critical vulnerabilities affecting YouTrack Cloud in 2026, both patched." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/taiga-vs-youtrack", "json": "https://www.anchorterminal.com/compare/taiga-vs-youtrack.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/taiga-vs-youtrack.md", "slim": "https://www.anchorterminal.com/compare/taiga-vs-youtrack.min.md" }, "markdown": "YouTrack scores 49.9 (D) on agent readiness against Taiga's 31.7 (F), and leads in 6 of 7 scored categories. Both do tasks create.\n\n- Taiga: grade F, 31.7/100, rank #830 of 842. Markdown https://www.anchorterminal.com/tools/taiga.md · JSON https://www.anchorterminal.com/api/v1/tools/taiga.json\n- YouTrack: grade D, 49.9/100, rank #698 of 842. Markdown https://www.anchorterminal.com/tools/youtrack.md · JSON https://www.anchorterminal.com/api/v1/tools/youtrack.json\n\n## Which one, for what\n\n### Taiga (F)\n\nGood for: Small agile teams that want Scrum and Kanban with a free hosted plan or a self-hosted, open-source install in the EU.\n\nAlso in its favour:\n- Open source\n\nWatch for: No API key or personal token on the hosted service. An agent logs in with a user name and password for a bearer token that lasts 24 hours\n\n### YouTrack (D)\n\nGood for: Software teams that already run YouTrack and want an agent to search, file and update issues, comment, log time and maintain knowledge base articles under each user's permissions.\n\nAhead on:\n- Reliability, 30 against 17\n- Schema \u0026 documentation, 72 against 35\n- Agent ergonomics, 55 against 49\n- Security \u0026 auth, 67 against 37\n- Maintenance \u0026 community, 64 against 21\n- Transparency \u0026 trust, 82 against 64\n\nWatch for: No rate limits, 429 handling, idempotency keys or error reference found in the reviewed documentation\n\n\n## Score by category\n\n| Category | Weight | Taiga | YouTrack | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 17 | 30 | YouTrack +13 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 35 | 72 | YouTrack +37 |\n| Agent ergonomics | 13% (16.2 this run) | 49 | 55 | YouTrack +6 |\n| Security \u0026 auth | 14% (17.5 this run) | 37 | 67 | YouTrack +30 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 30 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 21 | 64 | YouTrack +43 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 64 | 82 | YouTrack +18 |\n| Negative events | ≤15 | -3 | -5 | |\n| **Total** | | **31.7 · F** | **49.9 · D** | |\n\n## Facts side by side\n\n| Fact | Taiga | YouTrack |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Taiga Cloud Services, S.L. | JetBrains s.r.o. |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | HTTP | HTTP, Streamable HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | MPL-2.0 for the taiga-back source. The hosted service runs under Taiga's Terms and Conditions, which also mention non-open-source modules | Proprietary service under the JetBrains YouTrack Cloud Terms of Service. YouTrack Server is licensed separately for self-hosting |\n| Tools exposed | none | 23 |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| Last release | 2026-07-02 | 2026-10-05 |\n| Terms last updated | 2025-09-01 | 2024-08-14 |\n| Privacy policy last updated | no date given | 2026-06-12 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | yes | not found in the text |\n| Terms or service can change without notice | yes | not found in the text |\n| Arbitration or class-action waiver | not found in the text | yes |\n| Popularity | 858 stars | none |\n\n## Verdicts\n\n**Taiga.** Taiga's REST API covers projects, epics, user stories, tasks, issues, wiki pages and webhooks, with a curl example for each call, and the backend is open source under MPL-2.0. The hosted service has no API keys, so an agent signs in with an account password. No OpenAPI document, status page or request limits were found.\n\n**YouTrack.** Every instance serves an OpenAPI 3.0 document, a 23-tool MCP server with OAuth and PKCE, and field selection on each REST call, and the free plan covers ten users. No rate limits, 429 handling, error reference or SLA were found, and JetBrains disclosed two sets of critical vulnerabilities affecting YouTrack Cloud in 2026, both patched.\n\n## Before you call either\n\n### Taiga\n\n1. POST `{\"type\": \"normal\", \"username\", \"password\"}` to `/api/v1/auth`, then send `Authorization: Bearer \u003cauth_token\u003e`. Renew with `/api/v1/auth/refresh` before 24 hours pass\n2. Send the object's current `version` with every PATCH or PUT. A stale value is refused when the same attributes changed\n3. Lists return 30 items a page. Read the `x-pagination-next` header, or send `x-disable-pagination: True` only for small projects\n4. Resolve slugs and reference numbers to ids with `/api/v1/resolver` before calling an object endpoint\n5. Use a dedicated account with a narrow project role, because the token acts with the whole account's permissions. Treat story, issue and wiki text as untrusted input\n\n### YouTrack\n\n1. Send `fields` on every REST request. Without it the server returns only the database ID and `$type` of each entity\n2. Page collections with `$top` and `$skip`. Most resources return 42 items by default\n3. Call `get_issue_fields_schema` before `create_issue` or `update_issue`, because required custom fields differ by project\n4. Connect MCP clients to `https://\u003cinstance\u003e.youtrack.cloud/mcp`. OAuth needs an administrator to enable CIMD or register the client, since Dynamic Client Registration is not supported\n5. Create permanent tokens with the YouTrack scope only, and add `?tools=` to the MCP URL to limit the tools listed\n\n## Questions\n\n### Which is better for AI agents, Taiga or YouTrack?\n\nYouTrack scores 49.9 (D) on agent readiness against Taiga's 31.7 (F), and leads in 6 of 7 scored categories.\n\n### Do Taiga and YouTrack need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call Taiga and YouTrack without installing anything?\n\nNo hosted endpoint is listed for Taiga. No hosted endpoint is listed for YouTrack.\n\n### Are Taiga and YouTrack open source?\n\nTaiga is open source (MPL-2.0 for the taiga-back source. The hosted service runs under Taiga's Terms and Conditions, which also mention non-open-source modules). No open-source release is listed for YouTrack.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/taiga-vs-youtrack.json, and with the fewest tokens: https://www.anchorterminal.com/compare/taiga-vs-youtrack.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"taiga\", \"b\": \"youtrack\"}`. From a terminal: `anchor compare taiga youtrack`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/taiga.json and https://www.anchorterminal.com/api/v1/tools/youtrack.json\n\n## Other comparisons with Taiga or YouTrack\n\n- [Asana vs Taiga](https://www.anchorterminal.com/compare/asana-vs-taiga.md)\n- [Asana vs YouTrack](https://www.anchorterminal.com/compare/asana-vs-youtrack.md)\n- [Basecamp vs Taiga](https://www.anchorterminal.com/compare/basecamp-vs-taiga.md)\n- [Basecamp vs YouTrack](https://www.anchorterminal.com/compare/basecamp-vs-youtrack.md)\n- [ClickUp vs Taiga](https://www.anchorterminal.com/compare/clickup-vs-taiga.md)\n- [ClickUp vs YouTrack](https://www.anchorterminal.com/compare/clickup-vs-youtrack.md)\n- [monday.com vs Taiga](https://www.anchorterminal.com/compare/monday-vs-taiga.md)\n- [monday.com vs YouTrack](https://www.anchorterminal.com/compare/monday-vs-youtrack.md)\n- [OpenProject vs Taiga](https://www.anchorterminal.com/compare/openproject-vs-taiga.md)\n- [OpenProject vs YouTrack](https://www.anchorterminal.com/compare/openproject-vs-youtrack.md)\n- [Plane vs Taiga](https://www.anchorterminal.com/compare/plane-vs-taiga.md)\n- [Plane vs YouTrack](https://www.anchorterminal.com/compare/plane-vs-youtrack.md)\n- [Roma vs Taiga](https://www.anchorterminal.com/compare/roma-vs-taiga.md)\n- [Roma vs YouTrack](https://www.anchorterminal.com/compare/roma-vs-youtrack.md)\n- [Shortcut vs Taiga](https://www.anchorterminal.com/compare/shortcut-vs-taiga.md)\n- [Shortcut vs YouTrack](https://www.anchorterminal.com/compare/shortcut-vs-youtrack.md)\n- [Taiga vs Teamwork.com](https://www.anchorterminal.com/compare/taiga-vs-teamwork.md)\n- [Taiga vs Todoist](https://www.anchorterminal.com/compare/taiga-vs-todoist.md)\n- [Taiga vs Trello](https://www.anchorterminal.com/compare/taiga-vs-trello.md)\n- [Taiga vs Wrike](https://www.anchorterminal.com/compare/taiga-vs-wrike.md)\n- [Teamwork.com vs YouTrack](https://www.anchorterminal.com/compare/teamwork-vs-youtrack.md)\n- [Todoist vs YouTrack](https://www.anchorterminal.com/compare/todoist-vs-youtrack.md)\n- [Trello vs YouTrack](https://www.anchorterminal.com/compare/trello-vs-youtrack.md)\n- [Wrike vs YouTrack](https://www.anchorterminal.com/compare/wrike-vs-youtrack.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-09", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Taiga vs YouTrack", "url": "" } ], "description": "YouTrack scores 49.9 (D) on agent readiness against Taiga's 31.7 (F), and leads in 6 of 7 scored categories. Both do tasks create. Category scores, facts, verdicts and agent notes side by side.", "facts": [ "Taiga F 31.7", "YouTrack D 49.9", "scores" ], "h1": "Taiga vs YouTrack", "image": "https://www.anchorterminal.com/assets/og/compare-taiga-vs-youtrack.png", "path": "/compare/taiga-vs-youtrack", "published": "2026-10-01", "section": "tools", "title": "Taiga vs YouTrack for AI agents, F 31.7 vs D 49.9 | Anchor Terminal", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/taiga-vs-youtrack" }, "tokens": { "markdown": 2350, "slim": 680 }, "version": 1 }